OTL logfile created on: 2013-02-03 22:30:59 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = D:\instalki
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,21 Gb Available Physical Memory | 60,69% Memory free
3,85 Gb Paging File | 3,03 Gb Available in Paging File | 78,84% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 58,59 Gb Total Space | 2,41 Gb Free Space | 4,11% Space Free | Partition Type: NTFS
Drive D: | 90,45 Gb Total Space | 2,25 Gb Free Space | 2,49% Space Free | Partition Type: NTFS
 
Computer Name: PLBOSCHPC | User Name: piotrek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-02-03 20:52:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\instalki\OTL.exe
PRC - [2013-01-19 09:10:58 | 000,917,400 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012-12-03 09:05:06 | 000,161,768 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2012-09-25 17:58:14 | 000,325,392 | ---- | M] (Transaction Software, D 81829 Munich) -- D:\ESItronic 2.0\ESITronic\transbase\tbmux32.exe
PRC - [2012-08-12 16:23:00 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012-07-03 09:04:58 | 000,507,312 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
PRC - [2012-06-30 07:46:32 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2012-06-30 07:46:30 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2012-06-30 07:46:30 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2012-03-15 04:40:00 | 008,186,256 | ---- | M] (WIBU-SYSTEMS AG) -- C:\Program Files\CodeMeter\Runtime\bin\CodeMeterCC.exe
PRC - [2012-03-15 04:40:00 | 002,370,448 | ---- | M] (WIBU-SYSTEMS AG) -- C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe
PRC - [2011-09-20 13:51:04 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\DownloadManager\jre6\bin\javaw.exe
PRC - [2010-11-05 22:54:22 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010-11-05 22:54:20 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2009-05-05 14:01:46 | 001,466,368 | ---- | M] (Motorola Inc.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-05-22 16:57:26 | 002,756,608 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2007-04-26 14:53:38 | 000,274,432 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2007-02-27 20:21:10 | 000,278,528 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2007-02-25 21:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2006-01-23 23:14:10 | 000,069,632 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
PRC - [2004-12-14 10:12:02 | 000,483,328 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Adobe\Acrobat 7.0\Distillr\acrotray.exe
PRC - [2004-10-15 18:40:56 | 002,577,632 | ---- | M] (Sygate Technologies, Inc.) -- C:\Program Files\Sygate\SPF\Smc.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-01-19 09:10:57 | 003,022,232 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013-01-10 03:30:24 | 000,169,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IsdiInterop\e56a741b39c63437cb34fca5237f5ca6\IsdiInterop.ni.dll
MOD - [2013-01-10 03:30:19 | 000,475,136 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IAStorUtil\11e6d34568a7f2d90a2ba83dc39e674e\IAStorUtil.ni.dll
MOD - [2013-01-10 03:30:19 | 000,014,336 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IAStorCommon\49702bd38ab862aa22a83d2edd49b329\IAStorCommon.ni.dll
MOD - [2013-01-10 03:30:18 | 000,218,624 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\79a14d5223cdf2e701f05019ffba64d2\IAStorDataMgr.ni.dll
MOD - [2013-01-10 03:30:18 | 000,019,968 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\ba47c1c3dbfb4bbfa747df38c40ac096\IAStorDataMgrSvc.ni.exe
MOD - [2013-01-10 03:24:34 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\f43e890d874ef521aba51f76f64cd97b\System.ServiceProcess.ni.dll
MOD - [2013-01-10 03:24:20 | 011,817,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\33ff7d73f01be8329a95c6e03f1dd555\System.Web.ni.dll
MOD - [2013-01-10 03:24:10 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d7a2248a76f0e94d56c92c5bf96f5175\System.Runtime.Remoting.ni.dll
MOD - [2013-01-10 03:23:29 | 012,433,920 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\4c91371e83d124ecb39664613e7e0417\System.Windows.Forms.ni.dll
MOD - [2013-01-10 03:23:20 | 001,593,856 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7782f356a838c403b4a8e9c80df5a577\System.Drawing.ni.dll
MOD - [2013-01-10 03:22:58 | 003,325,440 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\4b889e41364baff1e456817b4777b610\WindowsBase.ni.dll
MOD - [2013-01-10 03:22:47 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\fe025743210c22bea2f009e1612c38bf\System.Xml.ni.dll
MOD - [2013-01-10 03:22:39 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\96b7a0136e9e72e8f4eb0230c20766d2\System.Configuration.ni.dll
MOD - [2013-01-10 03:22:31 | 007,977,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\aeac298c43c77d8860db8e7634d9f2eb\System.ni.dll
MOD - [2013-01-10 03:22:15 | 011,492,352 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\eab2340ead8e1a84bdf1a87868659979\mscorlib.ni.dll
MOD - [2012-06-30 07:46:32 | 000,398,288 | ---- | M] () -- C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2012-06-21 21:55:17 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_pl_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll
MOD - [2012-06-21 21:55:17 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_pl_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2012-06-21 21:55:15 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2011-09-20 13:51:04 | 000,065,536 | ---- | M] () -- C:\Program Files\DownloadManager\bin\ICE_JNIRegistry.dll
MOD - [2010-11-05 22:50:02 | 000,058,880 | ---- | M] () -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
MOD - [2010-11-04 07:51:44 | 000,555,624 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\nView\nvShell.dll
MOD - [2008-04-14 21:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2005-07-22 21:30:20 | 000,065,536 | ---- | M] () -- C:\WINDOWS\system32\TosCommAPI.dll
MOD - [2004-10-15 17:32:20 | 001,385,712 | ---- | M] () -- C:\Program Files\Sygate\SPF\tse.dll
MOD - [2004-10-15 17:32:18 | 000,832,744 | ---- | M] () -- C:\Program Files\Sygate\SPF\SyLink.dll
MOD - [2004-10-15 17:32:12 | 000,890,088 | ---- | M] () -- C:\Program Files\Sygate\SPF\SpNet.dll
MOD - [2001-03-17 08:17:42 | 000,102,400 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2001-03-02 22:25:06 | 000,041,984 | ---- | M] () -- C:\Program Files\WinRAR\Formats\arj.fmt
MOD - [2001-03-02 22:25:06 | 000,040,448 | ---- | M] () -- C:\Program Files\WinRAR\Formats\gz.fmt
MOD - [2001-03-02 22:25:06 | 000,034,816 | ---- | M] () -- C:\Program Files\WinRAR\Formats\tar.fmt
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2013-01-19 09:10:57 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013-01-10 00:05:09 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-12-03 09:05:06 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2012-10-03 15:51:04 | 000,725,400 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2012-09-25 17:58:14 | 000,325,392 | ---- | M] (Transaction Software, D 81829 Munich) [Auto | Running] -- D:\ESItronic 2.0\ESITronic\transbase\tbmux32.exe -- (ESItronic 2.0 Database Service)
SRV - [2012-06-30 07:46:32 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012-06-30 07:46:30 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012-03-15 04:40:00 | 002,370,448 | ---- | M] (WIBU-SYSTEMS AG) [Auto | Running] -- C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe -- (CodeMeter.exe)
SRV - [2010-11-05 22:54:22 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2007-02-25 21:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2004-10-15 18:40:56 | 002,577,632 | ---- | M] (Sygate Technologies, Inc.) [Auto | Running] -- C:\Program Files\Sygate\SPF\Smc.exe -- (SmcService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\UIUSYS.SYS -- (UIUSys)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOCUME~1\piotrek\USTAWI~1\Temp\kwlyapog.sys -- (kwlyapog)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2013-02-03 20:18:30 | 000,466,008 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2012-07-09 18:12:03 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2012-06-30 07:46:32 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2012-06-30 07:46:32 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012-06-27 15:18:52 | 000,019,072 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2012-06-12 13:47:55 | 000,194,362 | ---- | M] (Jungo) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\windrvr6.sys -- (WinDriver6)
DRV - [2012-05-31 16:24:14 | 006,126,736 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2012-02-22 19:18:10 | 000,329,960 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2011-09-15 22:55:04 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2010-10-07 12:11:38 | 006,609,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETwLx32.sys -- (NETwLx32)
DRV - [2010-06-17 14:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010-03-01 13:56:28 | 000,482,176 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATSwpWDF.sys -- (ATSwpWDF)
DRV - [2009-06-25 15:58:00 | 000,048,128 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2009-05-05 15:15:58 | 001,095,808 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial)
DRV - [2009-03-19 09:40:10 | 000,009,216 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey)
DRV - [2008-05-29 16:50:00 | 000,027,520 | ---- | M] (Sonix) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ST50220.sys -- (ST50220)
DRV - [2007-06-18 15:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2007-04-24 19:36:00 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (tosrfusb)
DRV - [2007-04-24 13:20:06 | 000,113,920 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2007-03-01 16:53:12 | 000,073,728 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2007-01-22 10:43:26 | 000,053,376 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2006-11-22 10:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006-11-20 17:55:16 | 000,036,480 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2006-11-01 09:10:00 | 000,138,632 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\atswpdrv.sys -- (ATSWPDRV)
DRV - [2006-10-10 19:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte)
DRV - [2005-08-01 16:45:00 | 000,064,896 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2005-07-14 16:28:38 | 000,307,968 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005-07-14 11:14:34 | 000,027,904 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\risdptsk.sys -- (risdptsk)
DRV - [2005-07-12 18:00:30 | 000,051,328 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2005-01-06 13:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [2004-10-15 17:32:44 | 000,014,568 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\wg6n.sys -- (wg6n)
DRV - [2004-10-15 17:32:42 | 000,014,568 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\wg5n.sys -- (wg5n)
DRV - [2004-10-15 17:32:40 | 000,014,568 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\wg4n.sys -- (wg4n)
DRV - [2004-10-15 17:32:38 | 000,014,568 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\wg3n.sys -- (wg3n)
DRV - [2004-10-15 17:18:46 | 000,021,075 | ---- | M] (Sygate Technologies, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\wpsdrvnt.sys -- (wpsdrvnt)
DRV - [2004-10-15 17:17:02 | 000,060,496 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\Teefer.sys -- (Teefer)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = Reg Error: Value error.
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-515967899-1580436667-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKU\S-1-5-21-515967899-1580436667-839522115-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-515967899-1580436667-839522115-1003\..\SearchScopes\${searchCLSID}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-515967899-1580436667-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-515967899-1580436667-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.1
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-01-19 09:10:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-01-19 09:10:50 | 000,000,000 | ---D | M]
 
[2012-06-21 21:06:44 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\piotrek\Dane aplikacji\Mozilla\Extensions
[2012-12-12 13:21:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\3lxf2azm.default\extensions
[2013-01-19 09:10:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013-01-19 09:10:58 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-06-27 20:31:38 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-06-27 20:31:38 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-27 20:31:38 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-27 20:31:38 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-27 20:31:38 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-27 20:31:38 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2012-12-09 13:10:04 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-515967899-1580436667-839522115-1003\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Acrobat Assistant 7.0] C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [DSA_AutoBackup] C:\BOSCH_PR\DSA_4_41\Runtime\AutoBackup.exe ()
O4 - HKLM..\Run: [DSA_F10TimeoutSetter] C:\BOSCH_PR\DSA_4_41\Runtime\DDB\F10TimeoutSetter.exe ()
O4 - HKLM..\Run: [ESI[tronic] WLAN Service] D:\ESI Startcenter\Bosch\ESIStart\remoteservice\apache-tomcat-6.0.18\bin\launch.bat ()
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found
O4 - HKLM..\Run: [SmcService] C:\Program Files\Sygate\SPF\Smc.exe (Sygate Technologies, Inc.)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [StartDDM] C:\Program Files\DownloadManager\bin\runDDM.exe (Robert Bosch GmbH)
O4 - HKLM..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Acrobat Speed Launcher.lnk = C:\WINDOWS\Installer\{AC76BA86-1033-C740-7760-100000000002}\SC_Acrobat.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Manager.lnk = C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\CodeMeter Control Center.lnk = C:\Program Files\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-515967899-1580436667-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-515967899-1580436667-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O7 - HKU\S-1-5-21-515967899-1580436667-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3
O8 - Extra context menu item: Konwertuj do Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj do istniejącego pliku PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj miejsce docelowe łącza do Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj miejsce docelowe łącza do istniejącego pliku PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj wybrane łącza do Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj wybrane łącza do istniejącego pliku PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj zaznaczenie do Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj zaznaczenie do istniejącego pliku PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O16 - DPF: {6E718D87-6909-4FCE-92D4-EDCB2F725727} http://navigram.com/engine/v1140/Navigram.cab (Navigram Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.231.1.206 217.172.224.160
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AA785FD3-3F47-45CC-8348-218050A25D5B}: DhcpNameServer = 89.231.1.206 217.172.224.160
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\Userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\piotrek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\piotrek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-06-20 21:29:27 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2012-12-12 13:06:14 | 000,000,000 | RHSD | M] - C:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2012-12-12 13:06:14 | 000,000,000 | RHSD | M] - D:\Autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-02-03 20:17:53 | 000,663,128 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\piotrek\Pulpit\SPTDinst-v183-x86.exe
[2013-02-01 14:12:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\piotrek\Pulpit\Nowy folder
[2013-01-19 09:10:47 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013-01-11 18:02:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\piotrek\Moje dokumenty\Bluetooth
[2013-01-11 18:02:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\piotrek\Ustawienia lokalne\Dane aplikacji\Toshiba
[2013-01-11 18:01:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\piotrek\Dane aplikacji\TOSHIBA
[2013-01-11 18:00:21 | 000,113,920 | ---- | C] (TOSHIBA CORPORATION) -- C:\WINDOWS\System32\drivers\tosrfbd.sys
[2013-01-11 18:00:21 | 000,041,856 | ---- | C] (TOSHIBA CORPORATION) -- C:\WINDOWS\System32\drivers\tosrfusb.sys
[2013-01-11 18:00:20 | 000,073,728 | ---- | C] (TOSHIBA Corporation.) -- C:\WINDOWS\System32\drivers\Tosrfhid.sys
[2013-01-11 18:00:19 | 000,036,480 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\tosrfbnp.sys
[2013-01-11 18:00:18 | 000,018,612 | ---- | C] (TOSHIBA Corporation.) -- C:\WINDOWS\System32\drivers\tosrfnds.sys
[2013-01-11 18:00:17 | 000,053,376 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\TosRfSnd.sys
[2013-01-11 18:00:16 | 000,064,896 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\tosrfcom.sys
[2013-01-11 18:00:11 | 000,041,600 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\tosporte.sys
[2013-01-11 17:59:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\TOSHIBA
[2013-01-11 17:59:24 | 000,000,000 | ---D | C] -- C:\Program Files\Toshiba
[2013-01-07 14:35:29 | 000,327,168 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUn0415.exe
[13 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-02-03 22:19:41 | 000,000,064 | RHS- | M] () -- C:\WINDOWS\System32\drivers\wg6n.winsecurity
[2013-02-03 22:19:41 | 000,000,064 | RHS- | M] () -- C:\WINDOWS\System32\drivers\wdf01000.winsecurity
[2013-02-03 22:10:00 | 000,001,038 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013-02-03 22:04:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013-02-03 21:42:56 | 000,000,064 | RHS- | M] () -- C:\WINDOWS\System32\drivers\WudfPf.winsecurity
[2013-02-03 21:42:56 | 000,000,064 | RHS- | M] () -- C:\WINDOWS\System32\drivers\wpsdrvnt.winsecurity
[2013-02-03 20:38:14 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013-02-03 20:21:40 | 000,000,000 | -H-- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\cm-lock
[2013-02-03 20:21:03 | 000,002,335 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Acrobat Speed Launcher.lnk
[2013-02-03 20:20:59 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013-02-03 20:20:58 | 000,000,308 | ---- | M] () -- C:\WINDOWS\tasks\COVJWILHMM.job
[2013-02-03 20:20:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-02-03 20:17:54 | 000,663,128 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\piotrek\Pulpit\SPTDinst-v183-x86.exe
[2013-02-03 15:57:58 | 000,202,528 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-02-02 19:24:39 | 000,000,140 | ---- | M] () -- C:\WINDOWS\winamp.ini
[2013-02-02 12:12:56 | 000,091,768 | ---- | M] () -- C:\Documents and Settings\piotrek\Pulpit\F_30296269_01_13.pdf
[2013-02-01 14:20:14 | 000,001,189 | ---- | M] () -- C:\WINDOWS\ESIDATA.ini
[2013-02-01 14:20:10 | 000,004,017 | ---- | M] () -- C:\WINDOWS\System\v9Sys_xx.vxd
[2013-01-31 21:26:49 | 002,361,501 | ---- | M] () -- C:\Documents and Settings\piotrek\Pulpit\Wykrzykujcie na cześć Pana.mp3
[2013-01-31 21:25:08 | 004,945,368 | ---- | M] () -- C:\Documents and Settings\piotrek\Pulpit\Do kogo mam pojsc.mp3
[2013-01-31 12:56:38 | 000,057,626 | ---- | M] () -- C:\Documents and Settings\piotrek\Pulpit\VP44 krocce.pdf
[2013-01-20 10:50:18 | 005,186,905 | ---- | M] () -- C:\Documents and Settings\piotrek\Pulpit\Lady Pank - Sztuka latania.mp3
[2013-01-16 20:37:51 | 004,942,883 | ---- | M] () -- C:\Documents and Settings\piotrek\Pulpit\2.pdf
[2013-01-15 19:02:59 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013-01-14 19:16:32 | 000,607,148 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2013-01-14 19:16:31 | 000,544,632 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013-01-14 19:16:31 | 000,124,320 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2013-01-14 19:16:31 | 000,103,488 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013-01-14 19:09:09 | 023,302,644 | ---- | M] () -- C:\Documents and Settings\piotrek\Pulpit\1.pdf
[2013-01-14 11:27:45 | 000,007,406 | ---- | M] () -- C:\WINDOWS\RbSystem.ini
[2013-01-12 13:37:41 | 000,000,715 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Manager.lnk
[2013-01-11 18:52:17 | 000,000,000 | ---- | M] () -- C:\WINDOWS\tosOBEX.INI
[2013-01-10 03:00:50 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013-01-10 00:04:26 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013-01-10 00:04:26 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013-01-06 06:33:58 | 006,009,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[13 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-02-03 20:21:05 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\cm-lock
[2013-02-02 12:12:55 | 000,091,768 | ---- | C] () -- C:\Documents and Settings\piotrek\Pulpit\F_30296269_01_13.pdf
[2013-01-31 21:26:49 | 002,361,501 | ---- | C] () -- C:\Documents and Settings\piotrek\Pulpit\Wykrzykujcie na cześć Pana.mp3
[2013-01-31 21:24:49 | 004,945,368 | ---- | C] () -- C:\Documents and Settings\piotrek\Pulpit\Do kogo mam pojsc.mp3
[2013-01-20 10:50:17 | 005,186,905 | ---- | C] () -- C:\Documents and Settings\piotrek\Pulpit\Lady Pank - Sztuka latania.mp3
[2013-01-16 20:37:48 | 004,942,883 | ---- | C] () -- C:\Documents and Settings\piotrek\Pulpit\2.pdf
[2013-01-14 19:08:52 | 023,302,644 | ---- | C] () -- C:\Documents and Settings\piotrek\Pulpit\1.pdf
[2013-01-11 18:52:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI
[2013-01-11 18:02:17 | 000,000,715 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Manager.lnk
[2013-01-07 17:33:03 | 000,057,626 | ---- | C] () -- C:\Documents and Settings\piotrek\Pulpit\VP44 krocce.pdf
[2012-12-04 18:33:48 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\hlduinst.exe
[2012-12-03 18:28:05 | 001,184,797 | ---- | C] () -- C:\WINDOWS\unins000.exe
[2012-12-03 18:28:05 | 000,010,055 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2012-11-25 20:04:23 | 000,131,072 | RHS- | C] () -- C:\WINDOWS\System32\wuauclt1V.dll
[2012-08-27 20:04:52 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\dtctrace.dll
[2012-08-27 20:04:51 | 000,012,800 | ---- | C] () -- C:\WINDOWS\System32\PWUtility.dll
[2012-08-27 20:04:50 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xcd73532.dll
[2012-08-27 20:04:14 | 000,487,424 | ---- | C] () -- C:\WINDOWS\esi_kl02.dat
[2012-08-27 20:03:47 | 000,655,360 | ---- | C] () -- C:\WINDOWS\System32\dslang32.dll
[2012-08-27 20:03:47 | 000,327,680 | ---- | C] () -- C:\WINDOWS\System32\ldf251.dll
[2012-08-27 19:22:02 | 000,007,406 | ---- | C] () -- C:\WINDOWS\RbSystem.ini
[2012-08-07 21:28:44 | 000,119,808 | ---- | C] () -- C:\WINDOWS\System32\ICOMP.EXE
[2012-08-07 21:24:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2012-08-07 21:16:46 | 000,000,290 | ---- | C] () -- C:\WINDOWS\INFOMAN.INI
[2012-07-26 20:56:12 | 000,001,189 | ---- | C] () -- C:\WINDOWS\ESIDATA.ini
[2012-07-24 15:54:45 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\piotrek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-07-08 14:30:45 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-03 16:48:22 | 000,252,080 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2012-07-03 16:48:20 | 000,252,080 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2012-07-03 16:48:20 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2012-07-03 16:47:48 | 002,292,678 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2012-07-03 06:33:22 | 001,048,576 | ---- | C] () -- C:\WINDOWS\System32\syndata.bin
[2012-07-02 20:42:03 | 000,000,024 | ---- | C] () -- C:\WINDOWS\~KTS500.ini
[2012-06-27 20:33:08 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\pxhpinst.exe
[2012-06-26 17:35:19 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012-06-24 08:24:32 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-06-22 18:45:10 | 000,025,548 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2012-06-21 21:35:14 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll
[2012-06-21 21:31:24 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\piotrek\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2012-06-21 21:29:31 | 000,073,728 | ---- | C] () -- C:\WINDOWS\VMInstNT.exe
[2012-06-21 21:29:31 | 000,040,960 | ---- | C] () -- C:\WINDOWS\VM303UninstNT.exe
[2012-06-21 21:26:37 | 000,000,140 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2012-06-21 21:23:02 | 001,018,748 | ---- | C] () -- C:\WINDOWS\System32\nvucode.bin
[2012-06-21 21:06:39 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2012-06-20 23:10:25 | 000,004,441 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012-06-20 23:09:06 | 000,202,528 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-06-20 21:31:51 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-06-20 21:26:41 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2007-03-12 17:59:00 | 000,299,008 | ---- | C] () -- C:\Program Files\navigram_register.exe
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2012-06-21 21:30:41 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2012-04-20 20:30:26 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-02-09 11:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008-04-14 21:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-12-04 13:27:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Bosch
[2012-06-24 14:51:10 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ
[2012-08-05 16:57:12 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonIJScan
[2012-12-03 13:24:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CodeMeter
[2012-11-14 09:20:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EliSoft
[2012-11-14 08:55:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Faktura-NT
[2012-11-08 17:13:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\firebird
[2012-08-07 16:21:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IC_Katalog
[2012-11-25 21:05:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2012-08-05 16:56:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MSScanAppDataDir
[2012-11-23 11:08:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaInstallerCache
[2012-11-23 13:12:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2012-06-21 21:51:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC1Data
[2012-08-05 16:57:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SSScanAppDataDir
[2012-06-21 21:58:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Validity
[2012-06-21 22:41:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Validity
[2012-08-05 16:57:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\Canon
[2012-07-02 20:56:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\Easeware
[2012-06-21 22:43:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\ElevatedDiagnostics
[2012-11-15 12:11:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\EliSoft
[2012-11-08 17:06:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\Faktura-NT
[2012-07-18 22:14:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\Navigram
[2012-11-25 21:09:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\Nokia
[2012-11-25 21:09:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\Nokia Suite
[2012-06-24 14:47:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\Oracle
[2012-06-21 21:51:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\PC Cleaners
[2012-11-23 11:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\PC Suite
[2012-06-21 21:52:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\PCPro
[2012-12-12 13:12:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\QuickScan
[2013-01-11 18:01:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\piotrek\Dane aplikacji\TOSHIBA
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 32 bytes -> C:\WINDOWS:CM_d51cc19dbc873800b65245833e960c0eb2a3fc17d45092caeae4dd5a9a651767
@Alternate Data Stream - 32 bytes -> C:\WINDOWS:CM_b892f8447cc828dfa0c55d3586df81863fdd2411f461c591a0ec1fa9db66d05f
@Alternate Data Stream - 32 bytes -> C:\WINDOWS:CM_87fa43aef01649cc9ef5c530e0f11736a08aa9b2767f5b121e1ea1d28b00367e
@Alternate Data Stream - 32 bytes -> C:\WINDOWS:CM_6f9acff47ba8075beac4252cf81294715352cc6c1e024717e8299445bc25fd75

< End of report >