OTL logfile created on: 2013-04-08 22:40:10 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\Madzia\Moje dokumenty\Pobieranie
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,99 Gb Total Physical Memory | 1,04 Gb Available Physical Memory | 52,45% Memory free
3,33 Gb Paging File | 2,37 Gb Available in Paging File | 71,12% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 82,82 Gb Total Space | 6,53 Gb Free Space | 7,89% Space Free | Partition Type: NTFS
Drive D: | 61,29 Gb Total Space | 11,37 Gb Free Space | 18,55% Space Free | Partition Type: NTFS
Drive G: | 7,39 Gb Total Space | 0,88 Gb Free Space | 11,94% Space Free | Partition Type: FAT32
 
Computer Name: MAGDALENA | User Name: Madzia | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-04-08 22:38:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Madzia\Moje dokumenty\Pobieranie\OTL(1).exe
PRC - [2013-04-07 17:22:08 | 000,170,912 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013-03-25 18:26:56 | 000,079,384 | ---- | M] (Google) -- C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\Google\Google Talk Plugin\googletalkplugin.exe
PRC - [2013-03-08 19:27:40 | 000,917,400 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012-12-11 03:52:44 | 003,147,384 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgui.exe
PRC - [2012-11-15 23:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgidsagent.exe
PRC - [2012-10-30 04:59:56 | 000,726,648 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgrsx.exe
PRC - [2012-10-22 13:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgwdsvc.exe
PRC - [2012-10-22 13:04:32 | 001,116,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgnsx.exe
PRC - [2012-10-22 13:03:52 | 000,796,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgemcx.exe
PRC - [2012-10-22 13:03:46 | 000,440,440 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgcsrvx.exe
PRC - [2010-11-16 15:37:38 | 000,264,704 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe
PRC - [2010-08-02 19:05:40 | 000,247,152 | ---- | M] () -- C:\Program Files\blueconnect\AssistantServices.exe
PRC - [2009-10-19 03:12:00 | 001,983,816 | ---- | M] (CANON INC.) -- C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
PRC - [2009-04-14 21:28:46 | 000,110,592 | R--- | M] (Huawei Technologies Co., Ltd.) -- C:\Documents and Settings\Madzia\Dane aplikacji\PLAY ONLINE\ouc.exe
PRC - [2008-12-17 20:59:50 | 000,622,592 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
PRC - [2008-12-04 14:38:06 | 000,114,688 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\ACPI\AsTray.exe
PRC - [2008-11-14 15:55:56 | 000,376,832 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe
PRC - [2008-05-21 02:56:24 | 000,094,208 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\ACPI\AsEPCMon.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-12-18 13:48:40 | 000,196,704 | ---- | M] (OptionNV) -- C:\Program Files\ERA\GlobeTrotter Connect\GtDetectSc.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-04-07 21:01:05 | 014,717,144 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
MOD - [2013-03-08 19:27:39 | 003,069,848 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013-01-09 12:20:03 | 011,492,352 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\eab2340ead8e1a84bdf1a87868659979\mscorlib.ni.dll
MOD - [2010-11-16 15:37:38 | 000,264,704 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe
MOD - [2010-08-02 19:05:40 | 000,247,152 | ---- | M] () -- C:\Program Files\blueconnect\AssistantServices.exe
MOD - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013-04-07 21:01:06 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-04-07 17:22:08 | 000,170,912 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013-03-08 19:27:40 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013-02-28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-11-15 23:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012-10-22 13:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2013\avgwdsvc.exe -- (avgwd)
SRV - [2011-12-11 22:42:53 | 000,042,504 | ---- | M] (COMPANYVERS_NAME) [Auto | Stopped] -- C:\Program Files\CieoNetUtilities_0e\bar\1.bin\0ebarsvc.exe -- (CieoNetUtilities_0eService)
SRV - [2010-11-16 15:37:38 | 000,264,704 | ---- | M] () [Auto | Running] -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe -- (HWDeviceService.exe)
SRV - [2010-08-02 19:05:40 | 000,247,152 | ---- | M] () [Auto | Running] -- C:\Program Files\blueconnect\AssistantServices.exe -- (UI Assistant Service)
SRV - [2007-12-18 13:48:40 | 000,196,704 | ---- | M] (OptionNV) [Auto | Running] -- C:\Program Files\ERA\GlobeTrotter Connect\GtDetectSc.exe -- (GtDetectSc)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012-11-15 23:33:26 | 000,094,048 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2012-10-22 13:02:46 | 000,179,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2012-10-15 03:48:52 | 000,055,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012-10-02 03:30:38 | 000,159,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012-09-21 03:46:06 | 000,164,832 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012-09-21 03:46:00 | 000,177,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\avglogx.sys -- (Avglogx)
DRV - [2012-09-21 03:45:54 | 000,019,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2012-09-14 03:05:20 | 000,035,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2012-08-24 06:37:32 | 002,699,488 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt2860.sys -- (RT80x86)
DRV - [2010-10-09 14:48:36 | 000,072,576 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2010-08-27 13:53:32 | 000,117,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2010-08-07 17:48:30 | 000,106,496 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010-07-27 09:52:02 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2010-06-18 09:24:44 | 000,018,816 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\tcpipBM.sys -- (tcpipBM)
DRV - [2010-03-09 13:09:04 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - [2010-03-09 13:09:04 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - [2010-03-09 13:09:04 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - [2010-03-09 13:09:04 | 000,009,216 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\massfilter.sys -- (massfilter)
DRV - [2009-08-05 23:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2008-09-23 19:15:00 | 000,038,400 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1e51x86.sys -- (L1e)
DRV - [2008-09-18 20:44:38 | 001,326,528 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2008-09-18 12:48:58 | 004,816,896 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2008-08-19 16:16:36 | 000,991,656 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2008-08-19 16:16:28 | 000,047,272 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2008-08-11 10:14:12 | 001,752,704 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2008-07-24 11:37:10 | 000,156,816 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2008-05-30 05:46:12 | 000,534,568 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2008-04-08 16:59:28 | 000,010,752 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASUSACPI.SYS -- (AsusACPI)
DRV - [2008-03-10 12:18:42 | 000,057,384 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwhid.sys -- (btwhid)
DRV - [2008-02-18 17:14:38 | 000,106,624 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Gt51Ip.sys -- (GT72NDISIPXP)
DRV - [2008-02-08 16:39:06 | 000,004,864 | ---- | M] (Option N.V.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\GtTdiFltr.sys -- (GtTdiFltr)
DRV - [2008-02-08 13:00:22 | 000,059,648 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gt72ubus.sys -- (GT72UBUS)
DRV - [2008-02-04 11:57:44 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2008-02-04 11:57:30 | 000,037,032 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2007-03-30 13:38:14 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gtptser.sys -- (GTPTSER)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKLM\..\SearchScopes\{ffab9ec5-7889-45c9-b6fa-5d19ccfea2d2}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=YUxdm009YYpl&ptb=6A72A495-8A4B-4D5B-B9C7-95328D8BB1FA&ind=2011121415&ptnrS=YUxdm009YYpl&si=translateye&n=77df4707&psa=&st=sb&searchfor={searchTerms}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=109035&babsrc=HP_ss&mntrId=5c64a74d000000000000001e101f6c46
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\URLSearchHook: {f864ba3f-9878-458a-ba2b-dad32bcbc472} - No CLSID value found
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\SearchScopes,DefaultScope = {ffab9ec5-7889-45c9-b6fa-5d19ccfea2d2}
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=109035&babsrc=SP_ss&mntrId=5c64a74d000000000000001e101f6c46
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\SearchScopes\{91B94A11-0212-49DD-BFBB-7CD2375677F8}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2907651
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://search.avg.com/route/?d=4b3d2cf0&i=23&tp=chrome&q={searchTerms}&lng={language}&ychte=us&nt=1
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\SearchScopes\{ffab9ec5-7889-45c9-b6fa-5d19ccfea2d2}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=YUxdm009YYpl&ptb=6A72A495-8A4B-4D5B-B9C7-95328D8BB1FA&ind=2011121415&ptnrS=YUxdm009YYpl&si=translateye&n=77df4707&psa=&st=sb&searchfor={searchTerms}
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Polska2 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2907651&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.14
FF - prefs.js..extensions.enabledAddons: adblockpopups%40jessehakanen.net:0.7
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.911
FF - prefs.js..extensions.enabledItems: {e47d6d44-6479-461d-bfa3-dbd0dc5a9011}:2.7.2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {87d5d709-40f2-48a7-8f47-7bb821af70ab}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@CieoNetUtilities_0e.com/Plugin: C:\Program Files\CieoNetUtilities_0e\bar\1.bin\NP0eStub.dll (MindSpark)
FF - HKLM\Software\MozillaPlugins\@ei.CieoNetUtilities_0e.com/Plugin: C:\Program Files\CieoNetUtilities_0eEI\Installr\4.bin\NP0eEISB.dll (CieoNet Utilities)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\0effxtbr@CieoNetUtilities_0e.com: C:\Program Files\CieoNetUtilities_0e\bar\1.bin [2011-12-11 22:43:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-03-08 19:27:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-04-07 16:12:28 | 000,000,000 | ---D | M]
 
[2009-09-08 20:31:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\Extensions
[2013-04-07 21:04:27 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\Firefox\Profiles\iip3o23x.default\extensions
[2013-04-07 21:04:27 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\Firefox\Profiles\iip3o23x.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013-04-07 21:04:27 | 000,134,804 | ---- | M] () (No name found) -- C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\Firefox\Profiles\iip3o23x.default\extensions\adblockpopups@jessehakanen.net.xpi
[2013-02-14 17:41:22 | 000,817,280 | ---- | M] () (No name found) -- C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\Firefox\Profiles\iip3o23x.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2009-10-30 13:48:19 | 000,002,171 | ---- | M] () -- C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\Firefox\Profiles\iip3o23x.default\searchplugins\bing.xml
[2011-01-12 18:21:04 | 000,000,935 | ---- | M] () -- C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\Firefox\Profiles\iip3o23x.default\searchplugins\conduit.xml
[2010-04-25 13:02:21 | 000,002,082 | ---- | M] () -- C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\Firefox\Profiles\iip3o23x.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml
[2013-03-08 19:27:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013-03-08 19:27:40 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013-02-27 12:22:34 | 000,002,980 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-04-23 22:00:04 | 000,002,313 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2013-02-27 12:22:34 | 000,001,619 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2013-02-27 12:22:34 | 000,001,130 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2013-02-27 12:22:34 | 000,001,071 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2013-02-27 12:22:34 | 000,001,396 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2013-02-27 12:22:34 | 000,001,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.43\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.43\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: AVG Internet Security (Enabled) = C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0\plugins/avgnpss.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Documents and Settings\Madzia\Dane aplikacji\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Java Deployment Toolkit 7.0.40.22 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: QuickTime Plug-in 7.6.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: CieoNet Utilities Installer Plugin Stub (Enabled) = C:\Program Files\CieoNetUtilities_0eEI\Installr\4.bin\NP0eEISB.dll
CHR - plugin: MindSpark Toolbar Platform Plugin Stub (Enabled) = C:\Program Files\CieoNetUtilities_0e\bar\1.bin\NP0eStub.dll
CHR - plugin: AVG SiteSafety plugin (Enabled) = C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\12.2.6\\npsitesafety.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Media Go Detector (Enabled) = C:\Program Files\Sony\Media Go\npmediago.dll
CHR - plugin: PlayStation(R)Network Downloader Check Plug-in (Enabled) = C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - Extension: YouTube = C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Szukaj w Google = C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Gmail = C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O2 - BHO: (Search Assistant BHO) - {4cbfd6a0-f21b-4d52-bf56-c57a37625141} - C:\Program Files\CieoNetUtilities_0e\bar\1.bin\0eSrcAs.dll (MindSpark)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Toolbar BHO) - {8ca6701f-b8e8-43b9-b206-b2a9ee3216cf} - C:\Program Files\CieoNetUtilities_0e\bar\1.bin\0ebar.dll (MindSpark)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (CieoNet Utilities) - {8175e372-1ff1-4288-8e6e-addebd415d47} - C:\Program Files\CieoNetUtilities_0e\bar\1.bin\0ebar.dll (MindSpark)
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O3 - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\..\Toolbar\WebBrowser: (CieoNet Utilities) - {8175E372-1FF1-4288-8E6E-ADDEBD415D47} - C:\Program Files\CieoNetUtilities_0e\bar\1.bin\0ebar.dll (MindSpark)
O4 - HKLM..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CieoNet Utilities Search Scope Monitor] C:\Program Files\CieoNetUtilities_0e\bar\1.bin\0eSrchMn.exe (MindSpark)
O4 - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006..\Run: [HW_OPENEYE_OUC_PLAY ONLINE] C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\SuperHybridEngine.lnk = C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe (ASUSTeK Computer Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3667320418-1725305688-2112255595-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Search - http://tbedits.mywebsearch.com/one-toolbaredits/menusearch.jhtml?s=200400322&p=YUxdm009YYpl&si=translateye&a=6A72A495-8A4B-4D5B-B9C7-95328D8BB1FA&n=2011121415&cv=1 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Wyślij do interfejsu Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1365357562796 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.159.1 194.204.152.34
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5B86199E-F4C9-4402-9733-546A28EEFA55}: DhcpNameServer = 194.204.159.1 194.204.152.34
O18 - Protocol\Handler\linkscanner - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet32: DllName - (cryptnet32.dll) -  File not found
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-02-04 16:33:58 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{06b1ac7e-0fa3-11e1-8d4f-0025d33c80cf}\Shell - "" = AutoRun
O33 - MountPoints2\{06b1ac7e-0fa3-11e1-8d4f-0025d33c80cf}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0f345389-0356-11df-88d9-0025d33c80cf}\Shell - "" = AutoRun
O33 - MountPoints2\{0f345389-0356-11df-88d9-0025d33c80cf}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0f34538a-0356-11df-88d9-0025d33c80cf}\Shell - "" = AutoRun
O33 - MountPoints2\{0f34538a-0356-11df-88d9-0025d33c80cf}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{16892e10-0382-11df-88da-002243f4ae77}\Shell - "" = AutoRun
O33 - MountPoints2\{16892e10-0382-11df-88da-002243f4ae77}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{18775580-9d72-11de-87eb-002618936b69}\Shell - "" = AutoRun
O33 - MountPoints2\{18775580-9d72-11de-87eb-002618936b69}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{1ccfb198-9cac-11de-87e8-002618936b69}\Shell - "" = AutoRun
O33 - MountPoints2\{1ccfb198-9cac-11de-87e8-002618936b69}\Shell\AutoRun\command - "" = E:\setup.exe AUTORUN=1
O33 - MountPoints2\{270a1f80-bf3d-11e0-8c99-002618936b69}\Shell - "" = AutoRun
O33 - MountPoints2\{270a1f80-bf3d-11e0-8c99-002618936b69}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{654aa5be-c142-11e1-8f71-0025d33c80cf}\Shell - "" = AutoRun
O33 - MountPoints2\{654aa5be-c142-11e1-8f71-0025d33c80cf}\Shell\AutoRun\command - "" = E:\Install.exe
O33 - MountPoints2\{654aa5c7-c142-11e1-8f71-002243f4ae77}\Shell - "" = AutoRun
O33 - MountPoints2\{654aa5c7-c142-11e1-8f71-002243f4ae77}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{6858113e-610c-11e0-8bbb-0025d33c80cf}\Shell - "" = AutoRun
O33 - MountPoints2\{6858113e-610c-11e0-8bbb-0025d33c80cf}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{6a966bb5-9e56-11de-87f0-0025d33c80cf}\Shell - "" = AutoRun
O33 - MountPoints2\{6a966bb5-9e56-11de-87f0-0025d33c80cf}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{831f49fc-87df-11e0-8c19-002618936b69}\Shell - "" = AutoRun
O33 - MountPoints2\{831f49fc-87df-11e0-8c19-002618936b69}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{944cea35-5bd6-11e0-8bab-0025d33c80cf}\Shell - "" = AutoRun
O33 - MountPoints2\{944cea35-5bd6-11e0-8bab-0025d33c80cf}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{96f6292a-0444-11df-88db-002243f4ae77}\Shell - "" = AutoRun
O33 - MountPoints2\{96f6292a-0444-11df-88db-002243f4ae77}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{96f6292b-0444-11df-88db-002243f4ae77}\Shell - "" = AutoRun
O33 - MountPoints2\{96f6292b-0444-11df-88db-002243f4ae77}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{9ca31600-d37d-11de-8868-0025d33c80cf}\Shell\AutoRun\command - "" = qbr2q.exe
O33 - MountPoints2\{9ca31600-d37d-11de-8868-0025d33c80cf}\Shell\open\Command - "" = qbr2q.exe
O33 - MountPoints2\{9ca31601-d37d-11de-8868-0025d33c80cf}\Shell\AutoRun\command - "" = qbr2q.exe
O33 - MountPoints2\{9ca31601-d37d-11de-8868-0025d33c80cf}\Shell\open\Command - "" = qbr2q.exe
O33 - MountPoints2\{b51c4804-0a51-11df-88ea-002243f4ae77}\Shell - "" = AutoRun
O33 - MountPoints2\{b51c4804-0a51-11df-88ea-002243f4ae77}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{b51c4805-0a51-11df-88ea-002243f4ae77}\Shell - "" = AutoRun
O33 - MountPoints2\{b51c4805-0a51-11df-88ea-002243f4ae77}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{e3391da4-7195-11e1-8e7d-002243f4ae77}\Shell - "" = AutoRun
O33 - MountPoints2\{e3391da4-7195-11e1-8e7d-002243f4ae77}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2013\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-04-07 23:56:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Pulpit\ResultReport_pliki
[2013-04-07 23:50:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Pulpit\OpenOffice.org 3.4.1 (pl) Installation Files
[2013-04-07 23:47:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Dane aplikacji\ElevatedDiagnostics
[2013-04-07 23:35:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Windows PowerShell 1.0
[2013-04-07 23:35:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\windowspowershell
[2013-04-07 22:55:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Pulpit\OpenOffice.org 3.2 (pl) Installation Files
[2013-04-07 22:54:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Pulpit\OpenOffice.org 3.3 (pl) Installation Files
[2013-04-07 22:42:30 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
[2013-04-07 21:10:41 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Madzia\IECompatCache
[2013-04-07 21:10:17 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Madzia\PrivacIE
[2013-04-07 21:09:17 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Madzia\IETldCache
[2013-04-07 21:07:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2013-04-07 21:03:21 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2013-04-07 21:01:06 | 000,693,976 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013-04-07 21:01:06 | 000,073,432 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013-04-07 20:54:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\PDF-XChange PDF Viewer
[2013-04-07 20:54:39 | 000,000,000 | ---D | C] -- C:\Program Files\Tracker Software
[2013-04-07 20:22:51 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Madzia\Recent
[2013-04-07 20:19:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner
[2013-04-07 20:19:09 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2013-04-07 17:22:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2013-04-07 17:22:34 | 000,143,872 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2013-04-07 17:22:33 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2013-04-07 17:22:24 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2013-04-07 17:22:24 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2013-04-07 17:22:24 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013-04-07 17:22:02 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2013-04-07 17:19:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Dane aplikacji\vlc
[2013-04-07 17:18:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\VideoLAN
[2013-04-07 17:07:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013-04-07 17:07:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype
[2013-04-07 17:07:53 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013-04-07 16:47:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Dane aplikacji\AVG2013
[2013-04-07 16:44:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Dane aplikacji\TuneUp Software
[2013-04-07 16:41:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG2013
[2013-04-07 16:34:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\MFAData
[2013-04-07 16:34:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\Avg2013
[2013-04-07 16:27:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\7-Zip
[2013-04-07 16:27:23 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013-04-05 18:15:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Pulpit\5.04 przedszkole
[2013-04-04 14:56:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Madzia\Pulpit\pulpit
[2013-04-02 16:09:52 | 004,550,656 | ---- | C] (Google Inc.) -- C:\WINDOWS\System32\GPhotos.scr
[2013-03-21 20:17:06 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023x.sys
[2009-03-12 14:44:01 | 015,523,560 | ---- | C] (Macrovision Corporation) -- C:\Program Files\U1 Setup.exe
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-04-08 22:45:01 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013-04-08 22:26:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013-04-08 22:02:01 | 000,001,136 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3667320418-1725305688-2112255595-1006UA.job
[2013-04-08 20:15:24 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013-04-08 20:14:59 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-04-08 14:02:00 | 000,001,084 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3667320418-1725305688-2112255595-1006Core.job
[2013-04-08 00:36:45 | 000,001,334 | ---- | M] () -- C:\Documents and Settings\Madzia\Dane aplikacji\wklnhst.dat
[2013-04-07 23:56:04 | 000,045,844 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\ResultReport.htm
[2013-04-07 22:43:35 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013-04-07 21:14:02 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013-04-07 21:08:48 | 000,235,960 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-04-07 21:01:06 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013-04-07 21:01:06 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013-04-07 20:24:19 | 000,045,554 | ---- | M] () -- C:\Documents and Settings\Madzia\Moje dokumenty\cc_20130407_202411.reg
[2013-04-07 19:29:00 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2013-04-07 17:22:09 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013-04-07 17:22:06 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll
[2013-04-07 17:22:06 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
[2013-04-07 17:22:06 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2013-04-07 17:22:06 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2013-04-07 17:22:06 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2013-04-07 17:22:06 | 000,143,872 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2013-04-07 17:18:26 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\VLC media player.lnk
[2013-04-07 17:16:07 | 022,916,830 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\vlc-2.0.5-win32.exe
[2013-04-07 16:54:03 | 000,501,338 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2013-04-07 16:54:03 | 000,442,238 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013-04-07 16:54:03 | 000,089,850 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2013-04-07 16:54:03 | 000,072,174 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013-04-07 16:44:08 | 000,000,732 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG 2013.lnk
[2013-04-03 23:25:37 | 003,387,070 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\jaja faberge.odp
[2013-04-03 22:15:08 | 008,596,746 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\Peter Carl Fabergé 166h Birthday, buy faberge eggs,jewelry.mp4.flv
[2013-04-03 21:12:21 | 000,032,256 | ---- | M] () -- C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-04-02 18:46:16 | 000,096,137 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\easter kl2.pdf
[2013-04-02 16:09:52 | 004,550,656 | ---- | M] (Google Inc.) -- C:\WINDOWS\System32\GPhotos.scr
[2013-03-31 14:25:46 | 733,730,816 | ---- | M] () -- C:\Documents and Settings\All Users\Dokumenty\Kurczak Mały [Dubb PL].avi
[2013-03-30 17:17:02 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013-03-30 11:47:08 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
[2013-03-30 01:54:39 | 000,021,884 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\easter day plan na deszczowo.odt
[2013-03-30 01:48:22 | 000,070,748 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\easter day plan na deszczowo rozpiska na sale.pdf
[2013-03-29 22:56:25 | 000,030,510 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\Easter Fun Day plan 2013.odt
[2013-03-26 19:29:18 | 000,191,028 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\worksheet easter.pdf
[2013-03-26 12:36:12 | 000,011,605 | ---- | M] () -- C:\Documents and Settings\Madzia\Moje dokumenty\jajka listy.odt
[2013-03-26 12:25:34 | 000,029,114 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\lista potrzebnych rzeczy i wstępna na zakupy.pdf
[2013-03-25 00:07:52 | 004,790,323 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\Colors  Talking Flashcards.flv
[2013-03-23 22:32:53 | 000,241,047 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\easter fun day zabawy w szkole.pdf
[2013-03-22 21:55:59 | 000,012,545 | ---- | M] () -- C:\Documents and Settings\Madzia\Moje dokumenty\rada 22.03.odt
[2013-03-22 01:10:23 | 000,058,010 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\easter fun day scenariusz gry na dworze.pdf
[2013-03-19 12:01:00 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013-03-18 18:37:49 | 008,964,308 | ---- | M] () -- C:\Documents and Settings\Madzia\Moje dokumenty\Bez tytułu 1mmm.odp
[2013-03-17 17:45:09 | 000,128,458 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\Easter Fun Day 2013    3.pdf
[2013-03-16 23:05:09 | 016,147,877 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\Peppa Pig  Peppa and George's Garden.flv
[2013-03-11 21:56:37 | 006,165,221 | ---- | M] () -- C:\Documents and Settings\Madzia\Pulpit\Emotions  by ELF Learning.flv
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-04-07 23:55:57 | 000,045,844 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\ResultReport.htm
[2013-04-07 23:28:37 | 193,449,984 | ---- | C] () -- C:\LibreOffice_4.0.1_Win_x86.msi
[2013-04-07 21:08:48 | 000,235,960 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-04-07 21:06:09 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2013-04-07 21:01:09 | 000,000,930 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013-04-07 20:24:16 | 000,045,554 | ---- | C] () -- C:\Documents and Settings\Madzia\Moje dokumenty\cc_20130407_202411.reg
[2013-04-07 17:24:26 | 193,449,984 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\LibreOffice_4.0.1_Win_x86.msi
[2013-04-07 17:18:26 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\VLC media player.lnk
[2013-04-07 17:12:30 | 022,916,830 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\vlc-2.0.5-win32.exe
[2013-04-07 16:44:08 | 000,000,732 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AVG 2013.lnk
[2013-04-03 23:25:30 | 003,387,070 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\jaja faberge.odp
[2013-04-03 22:13:13 | 008,596,746 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\Peter Carl Fabergé 166h Birthday, buy faberge eggs,jewelry.mp4.flv
[2013-04-02 18:46:15 | 000,096,137 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\easter kl2.pdf
[2013-04-01 22:21:07 | 733,730,816 | ---- | C] () -- C:\Documents and Settings\All Users\Dokumenty\Kurczak Mały [Dubb PL].avi
[2013-03-30 01:48:21 | 000,070,748 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\easter day plan na deszczowo rozpiska na sale.pdf
[2013-03-29 22:56:24 | 000,030,510 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\Easter Fun Day plan 2013.odt
[2013-03-26 19:29:14 | 000,191,028 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\worksheet easter.pdf
[2013-03-26 12:36:12 | 000,011,605 | ---- | C] () -- C:\Documents and Settings\Madzia\Moje dokumenty\jajka listy.odt
[2013-03-26 12:25:31 | 000,029,114 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\lista potrzebnych rzeczy i wstępna na zakupy.pdf
[2013-03-25 23:16:50 | 000,021,884 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\easter day plan na deszczowo.odt
[2013-03-25 00:07:01 | 004,790,323 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\Colors  Talking Flashcards.flv
[2013-03-23 22:32:51 | 000,241,047 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\easter fun day zabawy w szkole.pdf
[2013-03-22 21:55:59 | 000,012,545 | ---- | C] () -- C:\Documents and Settings\Madzia\Moje dokumenty\rada 22.03.odt
[2013-03-22 01:10:22 | 000,058,010 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\easter fun day scenariusz gry na dworze.pdf
[2013-03-18 18:37:38 | 008,964,308 | ---- | C] () -- C:\Documents and Settings\Madzia\Moje dokumenty\Bez tytułu 1mmm.odp
[2013-03-17 17:45:07 | 000,128,458 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\Easter Fun Day 2013    3.pdf
[2013-03-16 23:01:16 | 016,147,877 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\Peppa Pig  Peppa and George's Garden.flv
[2013-03-11 21:55:16 | 006,165,221 | ---- | C] () -- C:\Documents and Settings\Madzia\Pulpit\Emotions  by ELF Learning.flv
[2013-01-11 19:24:32 | 000,140,790 | ---- | C] () -- C:\WINDOWS\hpoins51.dat
[2013-01-11 19:24:32 | 000,000,572 | ---- | C] () -- C:\WINDOWS\hpomdl51.dat
[2012-07-12 20:07:16 | 000,000,858 | ---- | C] () -- C:\Documents and Settings\Madzia\.recently-used.xbel
[2012-02-15 22:46:46 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011-07-08 11:19:54 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011-04-12 20:11:49 | 000,327,743 | ---- | C] () -- C:\WINDOWS\System32\drivers\str.sys
[2011-04-12 20:11:49 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\crt.dat
[2011-04-12 20:11:48 | 000,295,061 | ---- | C] () -- C:\WINDOWS\System32\shimg.dll
[2009-09-26 22:39:09 | 000,032,256 | ---- | C] () -- C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-09-12 22:36:46 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat
[2009-09-08 22:21:09 | 000,001,334 | ---- | C] () -- C:\Documents and Settings\Madzia\Dane aplikacji\wklnhst.dat
[2009-09-08 21:48:19 | 000,000,135 | ---- | C] () -- C:\Documents and Settings\Madzia\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-03-12 14:22:09 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008-10-16 03:02:54 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-04-07 16:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG2013
[2011-11-06 19:17:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\avg9
[2010-12-21 18:18:18 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ
[2011-01-03 23:49:41 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonIJScan
[2011-03-14 19:22:54 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2011-11-15 18:01:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService
[2010-01-17 17:26:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2013-04-08 17:03:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData
[2010-01-17 17:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia
[2013-04-07 16:10:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Temp
[2009-03-12 14:38:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Wireless LAN Card
[2009-10-04 21:31:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2013-01-31 11:19:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\TuneUp Software
[2012-01-29 12:30:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\AVG
[2013-04-07 16:47:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\AVG2013
[2012-04-23 21:26:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\Babylon
[2011-01-03 23:49:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\Canon
[2013-04-07 23:47:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\ElevatedDiagnostics
[2012-10-07 11:56:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\EurekaLog
[2012-07-12 20:06:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\gtk-2.0
[2009-09-28 18:07:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\OpenOffice.org
[2011-04-15 17:29:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\PLAY ONLINE
[2012-02-19 21:33:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\PPTminimizer
[2011-10-16 12:00:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\PriceGong
[2011-12-23 23:22:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\Sony
[2012-07-01 08:54:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\SuperPump
[2012-04-23 21:58:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\SystemUpdaterApp
[2009-09-08 17:09:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\Template
[2013-04-07 16:44:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Madzia\Dane aplikacji\TuneUp Software
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\Temp:0B4227B4

< End of report >