OTL logfile created on: 2013-05-01 10:46:56 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\Anty viry Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3.00 Gb Total Physical Memory | 2.37 Gb Available Physical Memory | 79.18% Memory free 4.84 Gb Paging File | 4.23 Gb Available in Paging File | 87.39% Paging File free Paging file location(s): D:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files Drive D: | 37.26 Gb Total Space | 6.27 Gb Free Space | 16.82% Space Free | Partition Type: NTFS Drive F: | 37.27 Gb Total Space | 3.20 Gb Free Space | 8.57% Space Free | Partition Type: NTFS Computer Name: G-D81B3B7B737E4 | User Name: Gąsiorek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-04-28 20:36:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\Anty viry\OTL.exe PRC - [2013-04-28 17:03:55 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2013-04-28 17:02:45 | 000,079,584 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\Program Files\Avira\AntiVir Desktop\avshadow.exe PRC - [2013-04-28 17:02:35 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2013-04-28 17:02:33 | 000,345,312 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2013-04-26 17:32:00 | 001,815,248 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cavwp.exe PRC - [2013-04-25 01:30:16 | 004,443,912 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe PRC - [2013-04-25 01:29:50 | 009,478,352 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cis.exe PRC - [2013-04-24 19:31:47 | 000,920,472 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe PRC - [2013-04-15 18:38:18 | 003,012,816 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\CisTray.exe PRC - [2012-12-07 14:50:48 | 000,138,096 | ---- | M] (Facebook Inc.) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe PRC - [2012-01-18 14:02:04 | 000,508,136 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\Common Files\Java\Java Update\jucheck.exe PRC - [2011-12-09 21:41:42 | 000,296,056 | ---- | M] (RealNetworks, Inc.) -- D:\Program Files\Real\realplayer\Update\realsched.exe PRC - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) -- D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2010-09-08 19:42:48 | 001,529,344 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exe PRC - [2008-09-24 14:32:48 | 000,935,208 | ---- | M] (Nero AG) -- D:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2007-03-06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe PRC - [2007-02-13 16:20:50 | 001,205,840 | ---- | M] () -- D:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe PRC - [2005-05-17 12:48:32 | 000,077,824 | R--- | M] (Realtek Semiconductor Corp.) -- D:\WINDOWS\SOUNDMAN.EXE [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-04-28 17:04:04 | 000,397,704 | ---- | M] () -- D:\Program Files\Avira\AntiVir Desktop\sqlite3.dll MOD - [2013-04-24 19:31:46 | 003,133,336 | ---- | M] () -- D:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2009-04-24 04:55:14 | 000,176,235 | ---- | M] () -- D:\WINDOWS\system32\Primomonnt.dll MOD - [2008-04-15 16:00:00 | 000,014,336 | ---- | M] () -- D:\WINDOWS\system32\msdmo.dll MOD - [2007-08-30 11:27:36 | 000,040,448 | ---- | M] () -- D:\Program Files\Turbo Squid Tentacles\SaveToTentacles32.dll MOD - [2007-02-13 16:20:50 | 001,205,840 | ---- | M] () -- D:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe MOD - [2006-11-27 14:20:36 | 000,094,208 | ---- | M] () -- D:\Program Files\SAGEM\SAGEM F@st 800-840\Languages\polish.dll MOD - [2001-10-28 17:42:30 | 000,116,224 | ---- | M] () -- D:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2013-04-28 17:03:55 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- D:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2013-04-28 17:02:35 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- D:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2013-04-25 01:30:16 | 004,443,912 | ---- | M] (COMODO) [Auto | Running] -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent) SRV - [2013-04-24 19:31:46 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-04-18 08:45:08 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-04-15 18:38:20 | 000,127,184 | ---- | M] (COMODO) [On_Demand | Stopped] -- D:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe -- (cmdvirth) SRV - [2013-02-28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- D:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-01-18 15:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- D:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2010-10-19 15:14:26 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2008-09-24 14:32:48 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- D:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2007-03-06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | Disabled | Unknown] -- D:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2013-04-28 17:04:37 | 000,135,136 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2013-04-28 17:04:37 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- D:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2013-04-28 17:04:37 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr) DRV - [2013-04-28 17:04:37 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2013-04-25 11:05:22 | 000,099,392 | ---- | M] (COMODO) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\inspect.sys -- (Inspect) DRV - [2013-04-15 18:39:00 | 000,592,384 | ---- | M] (COMODO) [File_System | System | Running] -- D:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard) DRV - [2013-04-15 18:39:00 | 000,032,816 | ---- | M] (COMODO) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp) DRV - [2013-04-15 18:39:00 | 000,018,528 | ---- | M] (COMODO) [File_System | System | Running] -- D:\WINDOWS\system32\drivers\cmderd.sys -- (cmderd) DRV - [2011-04-30 13:59:56 | 000,012,184 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE) DRV - [2011-01-10 23:20:09 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri) DRV - [2010-03-15 11:38:44 | 000,124,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1039mdm.sys -- (s1039mdm) DRV - [2010-03-15 11:38:44 | 000,123,504 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1039unic.sys -- (s1039unic) DRV - [2010-03-15 11:38:44 | 000,117,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1039mgmt.sys -- (s1039mgmt) DRV - [2010-03-15 11:38:44 | 000,113,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1039obex.sys -- (s1039obex) DRV - [2010-03-15 11:38:44 | 000,098,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1039bus.sys -- (s1039bus) DRV - [2010-03-15 11:38:44 | 000,025,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1039nd5.sys -- (s1039nd5) DRV - [2010-03-15 11:38:44 | 000,014,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1039mdfl.sys -- (s1039mdfl) DRV - [2009-12-25 14:39:20 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc) DRV - [2009-12-25 14:39:20 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt) DRV - [2009-07-28 20:23:54 | 000,004,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2009-05-25 14:34:56 | 000,090,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029bus.sys -- (s1029bus) DRV - [2009-05-25 13:35:00 | 000,116,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029unic.sys -- (s1029unic) DRV - [2009-05-25 13:34:56 | 000,122,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029mdm.sys -- (s1029mdm) DRV - [2009-05-25 13:34:56 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029mdfl.sys -- (s1029mdfl) DRV - [2009-05-25 13:34:54 | 000,115,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029mgmt.sys -- (s1029mgmt) DRV - [2009-05-25 13:34:54 | 000,111,912 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029obex.sys -- (s1029obex) DRV - [2009-05-25 13:34:54 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029nd5.sys -- (s1029nd5) DRV - [2008-08-18 19:54:00 | 000,145,952 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\nvgts.sys -- (nvgts) DRV - [2008-08-01 12:36:00 | 000,054,784 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2008-08-01 12:36:00 | 000,022,016 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2008-05-16 11:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) DRV - [2008-05-16 11:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) DRV - [2008-05-16 11:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 11:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 11:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) DRV - [2008-05-16 11:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 11:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) DRV - [2007-01-04 13:48:04 | 000,104,344 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\e4usbaw.sys -- (e4usbaw) DRV - [2007-01-04 13:47:48 | 000,069,656 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- D:\WINDOWS\system32\drivers\e4ldr.sys -- (E4LOADER) DRV - [2006-09-05 20:09:26 | 000,086,432 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59obex.sys -- (se59obex) DRV - [2006-09-05 20:08:40 | 000,088,624 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59mgmt.sys -- (se59mgmt) DRV - [2006-09-05 20:07:52 | 000,097,088 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59mdm.sys -- (se59mdm) DRV - [2006-09-05 20:07:48 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59mdfl.sys -- (se59mdfl) DRV - [2006-09-05 20:07:00 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59bus.sys -- (se59bus) DRV - [2006-09-05 20:06:28 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59nd5.sys -- (se59nd5) DRV - [2006-09-05 20:06:22 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59unic.sys -- (se59unic) DRV - [2006-02-17 21:34:24 | 000,083,344 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510obex.sys -- (k510obex) DRV - [2006-02-17 21:34:22 | 000,085,408 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510mgmt.sys -- (k510mgmt) DRV - [2006-02-17 21:34:18 | 000,094,064 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510mdm.sys -- (k510mdm) DRV - [2006-02-17 21:34:16 | 000,008,336 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510mdfl.sys -- (k510mdfl) DRV - [2006-02-17 21:34:10 | 000,058,288 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510bus.sys -- (k510bus) DRV - [2005-05-18 11:50:30 | 002,319,680 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) DRV - [2001-08-17 19:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\irsir.sys -- (irsir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes,DefaultScope = {93828653-F2E3-44B8-A636-6F12E7AC3706} IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes\{93828653-F2E3-44B8-A636-6F12E7AC3706}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7SHCN_pl IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes\{A6A59BB1-27A4-45B8-A6EA-E678637BC519}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=302398&p={searchTerms} IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes\{E1F3A6CC-33C5-4FAC-A4B1-CE4A0CE2AF49}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz= IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: D:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: d:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: d:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.0.198: d:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.0.198: d:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.0.198: D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.0.198: D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.0.198: d:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: d:\Program Files\Sony\Media Go\npmediago.dll (Sony Creative Software Inc) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-12-09 21:42:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2013-04-24 19:31:47 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2013-04-24 19:31:37 | 000,000,000 | ---D | M] [2009-10-15 21:13:47 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Extensions [2009-10-15 21:13:47 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Extensions\{a463f10c-3994-11da-9945-000d60ca027b} [2013-04-28 16:08:25 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions [2013-04-28 16:08:25 | 000,000,000 | ---D | M] (Java Console) -- D:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2013-04-24 19:31:47 | 000,263,064 | ---- | M] (Mozilla Foundation) -- D:\Program Files\mozilla firefox\components\browsercomps.dll [2011-09-09 06:49:04 | 001,037,112 | ---- | M] (BitComet) -- D:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll [2009-08-27 18:37:48 | 000,873,976 | ---- | M] (Ganymede Technologies) -- D:\Program Files\mozilla firefox\plugins\NPCARDS.dll [2012-04-21 16:25:10 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-03-22 20:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- D:\Program Files\mozilla firefox\plugins\npwachk.dll [2006-09-26 14:03:14 | 000,098,304 | ---- | M] (Zylom) -- D:\Program Files\mozilla firefox\plugins\npzylomgamesplayer.dll [2013-03-04 12:57:23 | 000,002,980 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2013-03-04 12:57:23 | 000,001,619 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2013-03-04 12:57:23 | 000,001,130 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2013-03-04 12:57:23 | 000,001,071 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2013-03-04 12:57:23 | 000,001,396 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2013-03-04 12:57:23 | 000,001,896 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2001-10-26 17:45:16 | 000,000,742 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.) O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - D:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - D:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - D:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [avgnt] D:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [COMODO Internet Security] D:\Program Files\COMODO\COMODO Internet Security\CisTray.exe (COMODO) O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [SoundMan] D:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [TkBellExe] D:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003..\Run: [Facebook Update] D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) O4 - Startup: D:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\DSLMON.lnk = D:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuPinnedList = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuPinnedList = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1757981266-1390067357-725345543-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - D:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab (Java Plug-in 1.5.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2761FD97-EB2B-4FB9-866E-087DAC2A28E3}: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (D:\WINDOWS\system32\userinit.exe) - D:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: D:\Documents and Settings\GÄ…siorek.G-D81B3B7B737E4\Dane aplikacji\IrfanView\IrfanView_Wallpaper.bmp O24 - Desktop BackupWallPaper: D:\Documents and Settings\GÄ…siorek.G-D81B3B7B737E4\Dane aplikacji\IrfanView\IrfanView_Wallpaper.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-05-15 17:38:59 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-05-01 10:45:06 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\Stare dane programu Firefox-1 [2013-04-30 18:55:55 | 000,000,000 | ---D | C] -- D:\_OTL [2013-04-28 20:14:59 | 000,000,000 | RH-D | C] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Recent [2013-04-28 20:00:39 | 000,000,000 | -H-D | C] -- D:\VTRoot [2013-04-28 19:52:32 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\COMODO [2013-04-28 19:52:21 | 000,000,000 | --SD | C] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Shared Space [2013-04-28 19:50:27 | 000,000,000 | ---D | C] -- D:\Program Files\COMODO [2013-04-28 19:50:05 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Comodo [2013-04-28 19:50:03 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Comodo Downloader [2013-04-28 17:42:25 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\pl [2013-04-28 17:42:25 | 000,000,000 | ---D | C] -- D:\WINDOWS\NLDRV [2013-04-28 17:42:25 | 000,000,000 | ---D | C] -- D:\WINDOWS\Network Diagnostic [2013-04-28 17:42:25 | 000,000,000 | ---D | C] -- D:\WINDOWS\L2Schemas [2013-04-28 17:14:04 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Avira [2013-04-28 17:11:03 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Avira [2013-04-28 17:10:43 | 000,028,520 | ---- | C] (Avira GmbH) -- D:\WINDOWS\System32\drivers\ssmdrv.sys [2013-04-28 17:10:41 | 000,135,136 | ---- | C] (Avira Operations GmbH & Co. KG) -- D:\WINDOWS\System32\drivers\avipbb.sys [2013-04-28 17:10:41 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- D:\WINDOWS\System32\drivers\avkmgr.sys [2013-04-28 17:10:37 | 000,000,000 | ---D | C] -- D:\Program Files\Avira [2013-04-28 17:10:37 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Avira [2013-04-28 15:49:51 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- D:\WINDOWS\System32\spxcoins.dll [2013-04-28 15:38:56 | 000,094,832 | ---- | C] (Grupa robocza Twain) -- D:\WINDOWS\twain.dll [2013-04-28 15:38:56 | 000,050,688 | ---- | C] (Grupa robocza Twain) -- D:\WINDOWS\twain_32.dll [2013-04-28 15:38:56 | 000,049,680 | ---- | C] (Twain Working Group) -- D:\WINDOWS\twunk_16.exe [2013-04-28 15:38:56 | 000,025,600 | ---- | C] (Twain Working Group) -- D:\WINDOWS\twunk_32.exe [2013-04-28 15:38:56 | 000,008,192 | ---- | C] (DSP GROUP, INC.) -- D:\WINDOWS\System32\tssoft32.acm [2013-04-28 15:38:53 | 000,306,176 | ---- | C] (Schlumberger Technology Corporation) -- D:\WINDOWS\System32\slbcsp.dll [2013-04-28 15:38:53 | 000,098,304 | ---- | C] (Schlumberger Technology Corporation) -- D:\WINDOWS\System32\slbiop.dll [2013-04-28 15:38:53 | 000,086,016 | ---- | C] (Sipro Lab Telecom Inc.) -- D:\WINDOWS\System32\sl_anet.acm [2013-04-28 15:38:53 | 000,015,872 | ---- | C] (Schlumberger Technology Corporation) -- D:\WINDOWS\System32\slbrccsp.dll [2013-04-28 15:38:49 | 000,081,920 | ---- | C] (Intel Corporation) -- D:\WINDOWS\System32\proctexe.ocx [2013-04-28 15:38:47 | 000,043,008 | ---- | C] (Dino Nuhagic (nuhi)) -- D:\WINDOWS\System32\nhelper.exe [2013-04-28 15:38:40 | 000,290,816 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- D:\WINDOWS\System32\l3codeca.acm [2013-04-28 15:38:40 | 000,232,448 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- D:\WINDOWS\System32\l3codecp.acm [2013-04-28 15:38:40 | 000,083,456 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- D:\WINDOWS\System32\l3codecx.ax [2013-04-28 15:38:38 | 000,848,384 | ---- | C] (Intel Corporation) -- D:\WINDOWS\System32\ir41_32.ax [2013-04-28 15:38:38 | 000,755,200 | ---- | C] (Intel Corporation) -- D:\WINDOWS\System32\ir50_32.dll [2013-04-28 15:38:38 | 000,338,432 | ---- | C] (Intel Corporation.) -- D:\WINDOWS\System32\ir41_qcx.dll [2013-04-28 15:38:38 | 000,200,192 | ---- | C] (Intel Corporation.) -- D:\WINDOWS\System32\ir50_qc.dll [2013-04-28 15:38:38 | 000,183,808 | ---- | C] (Intel Corporation.) -- D:\WINDOWS\System32\ir50_qcx.dll [2013-04-28 15:38:38 | 000,163,840 | ---- | C] (America Online) -- D:\WINDOWS\System32\jgdw400.dll [2013-04-28 15:38:38 | 000,154,624 | ---- | C] (Intel Corporation) -- D:\WINDOWS\System32\ivfsrc.ax [2013-04-28 15:38:38 | 000,120,320 | ---- | C] (Intel Corporation.) -- D:\WINDOWS\System32\ir41_qc.dll [2013-04-28 15:38:38 | 000,065,536 | ---- | C] (Johnson-Grace Company) -- D:\WINDOWS\System32\jgsh400.dll [2013-04-28 15:38:38 | 000,045,568 | ---- | C] (America Online) -- D:\WINDOWS\System32\jgsd400.dll [2013-04-28 15:38:38 | 000,044,544 | ---- | C] (Johnson-Grace Company) -- D:\WINDOWS\System32\jgaw400.dll [2013-04-28 15:38:38 | 000,035,840 | ---- | C] (Johnson-Grace Company) -- D:\WINDOWS\System32\jgmd400.dll [2013-04-28 15:38:38 | 000,027,648 | ---- | C] (Johnson-Grace Company) -- D:\WINDOWS\System32\jgpl400.dll [2013-04-28 15:38:36 | 000,199,680 | ---- | C] (Intel Corporation) -- D:\WINDOWS\System32\iac25_32.ax [2013-04-28 15:38:36 | 000,080,384 | ---- | C] (Radius Inc.) -- D:\WINDOWS\System32\iccvid.dll [2013-04-28 15:38:28 | 000,085,532 | ---- | C] (Digi International) -- D:\WINDOWS\System32\dgsetup.dll [2013-04-28 15:38:26 | 000,285,696 | ---- | C] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\atmfd.dll [2013-04-28 15:38:26 | 000,061,952 | ---- | C] (Sipro Lab Telecom Inc.) -- D:\WINDOWS\System32\acelpdec.ax [2013-04-28 15:38:26 | 000,030,208 | ---- | C] (Adobe Systems) -- D:\WINDOWS\System32\atmlib.dll [2013-04-25 11:05:22 | 000,099,392 | ---- | C] (COMODO) -- D:\WINDOWS\System32\drivers\inspect.sys [2013-04-24 19:31:33 | 000,000,000 | ---D | C] -- D:\Program Files\Mozilla Firefox [2013-04-23 15:04:12 | 000,348,048 | ---- | C] (COMODO) -- D:\WINDOWS\System32\guard32.dll [2013-04-23 13:18:01 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\Identities [2013-04-16 18:18:42 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Skype [2013-04-16 18:18:42 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Skype [2013-04-15 18:39:00 | 000,592,384 | ---- | C] (COMODO) -- D:\WINDOWS\System32\drivers\cmdGuard.sys [2013-04-15 18:39:00 | 000,032,816 | ---- | C] (COMODO) -- D:\WINDOWS\System32\drivers\cmdhlp.sys [2013-04-15 18:39:00 | 000,018,528 | ---- | C] (COMODO) -- D:\WINDOWS\System32\drivers\cmderd.sys [2013-04-15 18:38:38 | 000,035,488 | ---- | C] (COMODO) -- D:\WINDOWS\System32\cmdcsr.dll [2013-04-15 18:38:26 | 000,276,688 | ---- | C] (COMODO) -- D:\WINDOWS\System32\cmdvrt32.dll [2013-04-15 18:38:26 | 000,040,656 | ---- | C] (COMODO) -- D:\WINDOWS\System32\cmdkbd32.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-05-01 10:32:08 | 000,000,440 | ---- | M] () -- D:\WINDOWS\tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job [2013-05-01 10:31:32 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat [2013-04-30 17:45:13 | 000,003,863 | ---- | M] () -- D:\WINDOWS\wincmd.ini [2013-04-30 17:20:34 | 000,002,206 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl [2013-04-28 20:06:19 | 000,023,012 | ---- | M] () -- D:\WINDOWS\System32\drivers\fvstore.dat [2013-04-28 19:52:32 | 000,001,645 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\COMODO Firewall.lnk [2013-04-28 19:52:32 | 000,000,767 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Współdzielona przestrzeń.lnk [2013-04-28 17:47:38 | 000,000,210 | -HS- | M] () -- D:\boot.ini [2013-04-28 17:11:03 | 000,001,707 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Avira Control Center.lnk [2013-04-28 17:04:37 | 000,135,136 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\WINDOWS\System32\drivers\avipbb.sys [2013-04-28 17:04:37 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\WINDOWS\System32\drivers\avgntflt.sys [2013-04-28 17:04:37 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\WINDOWS\System32\drivers\avkmgr.sys [2013-04-28 17:04:37 | 000,028,520 | ---- | M] (Avira GmbH) -- D:\WINDOWS\System32\drivers\ssmdrv.sys [2013-04-28 16:15:48 | 002,372,208 | ---- | M] () -- D:\WINDOWS\System32\FNTCACHE.DAT [2013-04-28 16:13:14 | 000,055,961 | ---- | M] () -- D:\WINDOWS\System32\$winnt$.inf [2013-04-28 16:02:25 | 000,023,392 | ---- | M] () -- D:\WINDOWS\System32\nscompat.tlb [2013-04-28 16:02:25 | 000,016,832 | ---- | M] () -- D:\WINDOWS\System32\amcompat.tlb [2013-04-28 16:02:20 | 000,004,293 | ---- | M] () -- D:\WINDOWS\ODBCINST.INI [2013-04-28 15:57:14 | 000,259,604 | ---- | M] () -- D:\WINDOWS\System32\nvdrsdb0.bin [2013-04-28 15:57:14 | 000,000,001 | ---- | M] () -- D:\WINDOWS\System32\nvdrssel.bin [2013-04-28 15:56:03 | 000,259,604 | ---- | M] () -- D:\WINDOWS\System32\nvdrsdb1.bin [2013-04-28 15:50:13 | 000,004,444 | ---- | M] () -- D:\WINDOWS\System32\pid.PNF [2013-04-28 15:50:09 | 000,272,128 | ---- | M] () -- D:\WINDOWS\System32\perfh009.dat [2013-04-28 15:50:09 | 000,028,626 | ---- | M] () -- D:\WINDOWS\System32\perfc009.dat [2013-04-28 15:21:03 | 000,079,872 | ---- | M] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-04-28 15:21:01 | 000,001,040 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2013-04-28 15:20:01 | 000,000,930 | ---- | M] () -- D:\WINDOWS\tasks\Adobe Flash Player Updater.job [2013-04-28 15:18:24 | 000,000,260 | ---- | M] () -- D:\WINDOWS\tasks\WGASetup.job [2013-04-28 15:12:03 | 000,840,670 | ---- | M] () -- D:\WINDOWS\System32\perfh015.dat [2013-04-28 15:12:03 | 000,219,686 | ---- | M] () -- D:\WINDOWS\System32\perfc015.dat [2013-04-28 15:07:40 | 000,001,036 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2013-04-28 15:07:40 | 000,000,284 | ---- | M] () -- D:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1757981266-1390067357-725345543-1003.job [2013-04-27 19:55:01 | 000,001,046 | ---- | M] () -- D:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1757981266-1390067357-725345543-1003UA.job [2013-04-26 20:05:54 | 000,000,280 | -HS- | M] () -- D:\BOOT.BAK [2013-04-25 21:56:10 | 000,000,784 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Malwarebytes Anti-Malware.lnk [2013-04-25 11:05:22 | 000,099,392 | ---- | M] (COMODO) -- D:\WINDOWS\System32\drivers\inspect.sys [2013-04-23 16:40:23 | 000,002,267 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Skype.lnk [2013-04-23 15:04:12 | 000,348,048 | ---- | M] (COMODO) -- D:\WINDOWS\System32\guard32.dll [2013-04-21 13:55:00 | 000,001,024 | ---- | M] () -- D:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1757981266-1390067357-725345543-1003Core.job [2013-04-18 08:45:08 | 000,691,592 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerApp.exe [2013-04-18 08:45:08 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2013-04-15 18:39:00 | 000,592,384 | ---- | M] (COMODO) -- D:\WINDOWS\System32\drivers\cmdGuard.sys [2013-04-15 18:39:00 | 000,032,816 | ---- | M] (COMODO) -- D:\WINDOWS\System32\drivers\cmdhlp.sys [2013-04-15 18:39:00 | 000,018,528 | ---- | M] (COMODO) -- D:\WINDOWS\System32\drivers\cmderd.sys [2013-04-15 18:38:38 | 000,035,488 | ---- | M] (COMODO) -- D:\WINDOWS\System32\cmdcsr.dll [2013-04-15 18:38:26 | 000,276,688 | ---- | M] (COMODO) -- D:\WINDOWS\System32\cmdvrt32.dll [2013-04-15 18:38:26 | 000,040,656 | ---- | M] (COMODO) -- D:\WINDOWS\System32\cmdkbd32.dll [2013-04-13 15:59:39 | 000,135,986 | ---- | M] () -- D:\WINDOWS\setupapi.old [2013-04-06 13:39:00 | 000,000,292 | ---- | M] () -- D:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1757981266-1390067357-725345543-1003.job [2013-04-04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbam.sys [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-04-28 20:00:39 | 000,023,012 | ---- | C] () -- D:\WINDOWS\System32\drivers\fvstore.dat [2013-04-28 19:55:12 | 000,000,440 | ---- | C] () -- D:\WINDOWS\tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job [2013-04-28 19:52:32 | 000,001,645 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\COMODO Firewall.lnk [2013-04-28 19:52:32 | 000,000,767 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Współdzielona przestrzeń.lnk [2013-04-28 17:11:03 | 000,001,707 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Avira Control Center.lnk [2013-04-28 16:16:51 | 000,000,738 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Menu Start\Programy\Outlook Express.lnk [2013-04-28 15:50:13 | 000,004,444 | ---- | C] () -- D:\WINDOWS\System32\pid.PNF [2013-04-28 15:49:35 | 000,037,509 | ---- | C] () -- D:\WINDOWS\System32\dllcache\MW770.CAT [2013-04-28 15:49:35 | 000,013,497 | ---- | C] () -- D:\WINDOWS\System32\dllcache\HPCRDP.CAT [2013-04-28 15:49:35 | 000,010,027 | ---- | C] () -- D:\WINDOWS\System32\dllcache\MSTSWEB.CAT [2013-04-28 15:49:35 | 000,008,599 | ---- | C] () -- D:\WINDOWS\System32\dllcache\IASNT4.CAT [2013-04-28 15:49:35 | 000,007,382 | ---- | C] () -- D:\WINDOWS\System32\dllcache\OEMBIOS.CAT [2013-04-28 15:49:34 | 002,033,887 | ---- | C] () -- D:\WINDOWS\System32\dllcache\NT5.CAT [2013-04-28 15:49:34 | 000,634,012 | ---- | C] () -- D:\WINDOWS\System32\dllcache\NT5INF.CAT [2013-04-28 15:39:01 | 000,239,616 | ---- | C] () -- D:\WINDOWS\System32\wstrenderer.ax [2013-04-28 15:39:01 | 000,164,352 | ---- | C] () -- D:\WINDOWS\System32\wstpager.ax [2013-04-28 15:39:00 | 000,036,946 | ---- | C] () -- D:\WINDOWS\wmprfPLK.prx [2013-04-28 15:38:58 | 000,040,448 | ---- | C] () -- D:\WINDOWS\System32\wiasf.ax [2013-04-28 15:38:58 | 000,004,096 | ---- | C] () -- D:\WINDOWS\System32\wdl.trm [2013-04-28 15:38:57 | 000,053,248 | ---- | C] () -- D:\WINDOWS\System32\vbicodec.ax [2013-04-28 15:38:57 | 000,018,832 | ---- | C] () -- D:\WINDOWS\System32\v7vga.rom [2013-04-28 15:38:55 | 000,003,577 | ---- | C] () -- D:\WINDOWS\System32\sysprtj.sep [2013-04-28 15:38:55 | 000,003,214 | ---- | C] () -- D:\WINDOWS\System32\sysprint.sep [2013-04-28 15:38:55 | 000,001,988 | ---- | C] () -- D:\WINDOWS\System32\ticrf.rat [2013-04-28 15:38:55 | 000,000,862 | ---- | C] () -- D:\WINDOWS\System32\termcap [2013-04-28 15:38:54 | 001,966,134 | ---- | C] () -- D:\WINDOWS\System32\startup.bmp [2013-04-28 15:38:54 | 001,246,357 | ---- | C] () -- D:\WINDOWS\System32\dllcache\SP3.CAT [2013-04-28 15:38:53 | 000,240,120 | ---- | C] () -- D:\WINDOWS\System32\setup.bmp [2013-04-28 15:38:52 | 000,035,718 | ---- | C] () -- D:\WINDOWS\System32\secpol.msc [2013-04-28 15:38:52 | 000,033,080 | ---- | C] () -- D:\WINDOWS\System32\services.msc [2013-04-28 15:38:52 | 000,007,208 | ---- | C] () -- D:\WINDOWS\System32\secupd.sig [2013-04-28 15:38:52 | 000,004,569 | ---- | C] () -- D:\WINDOWS\System32\secupd.dat [2013-04-28 15:38:51 | 000,043,964 | R--- | C] () -- D:\WINDOWS\System32\rsop.msc [2013-04-28 15:38:51 | 000,003,178 | ---- | C] () -- D:\WINDOWS\System32\rsvpcnts.h [2013-04-28 15:38:49 | 000,003,010 | ---- | C] () -- D:\WINDOWS\System32\pschdcnt.h [2013-04-28 15:38:49 | 000,001,950 | ---- | C] () -- D:\WINDOWS\System32\pid.inf [2013-04-28 15:38:49 | 000,001,818 | ---- | C] () -- D:\WINDOWS\System32\rasctrnm.h [2013-04-28 15:38:49 | 000,000,051 | ---- | C] () -- D:\WINDOWS\System32\pscript.sep [2013-04-28 15:38:48 | 013,107,200 | ---- | C] () -- D:\WINDOWS\System32\oembios.bin [2013-04-28 15:38:48 | 000,313,828 | ---- | C] () -- D:\WINDOWS\System32\perfi015.dat [2013-04-28 15:38:48 | 000,272,128 | ---- | C] () -- D:\WINDOWS\System32\perfi009.dat [2013-04-28 15:38:48 | 000,057,845 | R--- | C] () -- D:\WINDOWS\System32\perfmon.msc [2013-04-28 15:38:48 | 000,034,990 | ---- | C] () -- D:\WINDOWS\System32\perfd015.dat [2013-04-28 15:38:48 | 000,028,626 | ---- | C] () -- D:\WINDOWS\System32\perfd009.dat [2013-04-28 15:38:48 | 000,006,761 | ---- | C] () -- D:\WINDOWS\System32\oembios.sig [2013-04-28 15:38:48 | 000,004,463 | ---- | C] () -- D:\WINDOWS\System32\oembios.dat [2013-04-28 15:38:48 | 000,000,114 | ---- | C] () -- D:\WINDOWS\System32\pcl.sep [2013-04-28 15:38:47 | 000,251,152 | RHS- | C] () -- D:\ntldr [2013-04-28 15:38:47 | 000,048,794 | ---- | C] () -- D:\WINDOWS\System32\ntimage.gif [2013-04-28 15:38:47 | 000,047,564 | RHS- | C] () -- D:\NTDETECT.COM [2013-04-28 15:38:47 | 000,032,590 | ---- | C] () -- D:\WINDOWS\System32\ntmsoprq.msc [2013-04-28 15:38:47 | 000,025,906 | ---- | C] () -- D:\WINDOWS\System32\ntmsmgr.msc [2013-04-28 15:38:47 | 000,004,310 | ---- | C] () -- D:\WINDOWS\System32\odbcconf.rsp [2013-04-28 15:38:47 | 000,000,093 | ---- | C] () -- D:\WINDOWS\System32\nlite.cmd [2013-04-28 15:38:42 | 000,673,088 | ---- | C] () -- D:\WINDOWS\System32\mlang.dat [2013-04-28 15:38:42 | 000,148,992 | ---- | C] () -- D:\WINDOWS\System32\mpg2splt.ax [2013-04-28 15:38:42 | 000,118,272 | ---- | C] () -- D:\WINDOWS\System32\mpeg2data.ax [2013-04-28 15:38:42 | 000,046,258 | ---- | C] () -- D:\WINDOWS\System32\mib.bin [2013-04-28 15:38:42 | 000,002,755 | ---- | C] () -- D:\WINDOWS\System32\mqprfsym.h [2013-04-28 15:38:42 | 000,001,492 | ---- | C] () -- D:\WINDOWS\System32\mmdriver.inf [2013-04-28 15:38:40 | 000,041,851 | ---- | C] () -- D:\WINDOWS\System32\lusrmgr.msc [2013-04-28 15:38:40 | 000,000,507 | ---- | C] () -- D:\WINDOWS\System32\login.cmd [2013-04-28 15:38:37 | 000,956,990 | ---- | C] () -- D:\WINDOWS\System32\instcat.sql [2013-04-28 15:38:37 | 000,057,667 | ---- | C] () -- D:\WINDOWS\System32\ieuinit.inf [2013-04-28 15:38:36 | 000,008,798 | ---- | C] () -- D:\WINDOWS\System32\icrav03.rat [2013-04-28 15:38:35 | 003,440,660 | ---- | C] () -- D:\WINDOWS\System32\drivers\gm.dls [2013-04-28 15:38:35 | 000,218,003 | ---- | C] () -- D:\WINDOWS\System32\dssec.dat [2013-04-28 15:38:35 | 000,127,213 | ---- | C] () -- D:\WINDOWS\System32\ega.cpi [2013-04-28 15:38:35 | 000,056,276 | ---- | C] () -- D:\WINDOWS\System32\eventvwr.msc [2013-04-28 15:38:35 | 000,034,346 | ---- | C] () -- D:\WINDOWS\System32\gpedit.msc [2013-04-28 15:38:35 | 000,032,422 | ---- | C] () -- D:\WINDOWS\System32\fsmgmt.msc [2013-04-28 15:38:35 | 000,021,232 | ---- | C] () -- D:\WINDOWS\System32\graphics.pro [2013-04-28 15:38:35 | 000,006,708 | ---- | C] () -- D:\WINDOWS\System32\esentprf.hxx [2013-04-28 15:38:35 | 000,000,929 | ---- | C] () -- D:\WINDOWS\System32\homepage.inf [2013-04-28 15:38:35 | 000,000,081 | ---- | C] () -- D:\WINDOWS\System32\dsound.vxd [2013-04-28 15:38:35 | 000,000,080 | ---- | C] () -- D:\WINDOWS\explorer.scf [2013-04-28 15:38:28 | 000,033,317 | ---- | C] () -- D:\WINDOWS\System32\diskmgmt.msc [2013-04-28 15:38:28 | 000,032,721 | ---- | C] () -- D:\WINDOWS\System32\devmgmt.msc [2013-04-28 15:38:28 | 000,001,804 | ---- | C] () -- D:\WINDOWS\System32\Dcache.bin [2013-04-28 15:38:26 | 000,041,998 | ---- | C] () -- D:\WINDOWS\System32\certmgr.msc [2013-04-28 15:38:26 | 000,040,698 | ---- | C] () -- D:\WINDOWS\System32\cmdlib.wsc [2013-04-28 15:38:26 | 000,037,364 | ---- | C] () -- D:\WINDOWS\System32\compmgmt.msc [2013-04-28 15:38:26 | 000,028,420 | ---- | C] () -- D:\WINDOWS\System32\bios1.rom [2013-04-28 15:38:26 | 000,008,191 | ---- | C] () -- D:\WINDOWS\System32\bios4.rom [2013-04-28 15:38:26 | 000,004,952 | RHS- | C] () -- D:\Bootfont.bin [2013-04-28 15:38:26 | 000,002,233 | ---- | C] () -- D:\WINDOWS\System32\12520850.cpx [2013-04-28 15:38:26 | 000,002,151 | ---- | C] () -- D:\WINDOWS\System32\12520437.cpx [2013-04-28 15:38:26 | 000,000,075 | ---- | C] () -- D:\WINDOWS\System32\Pokaż kanały.scf [2013-04-28 15:38:26 | 000,000,064 | ---- | C] () -- D:\WINDOWS\System32\cmos.ram [2013-04-26 20:05:54 | 000,000,280 | -HS- | C] () -- D:\BOOT.BAK [2012-01-06 14:43:32 | 000,000,069 | ---- | C] () -- D:\WINDOWS\NeroDigital.ini [2012-01-03 21:21:47 | 000,000,029 | ---- | C] () -- D:\WINDOWS\DEBUGSM.INI [2010-04-17 20:22:20 | 000,000,600 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\winscp.rnd [2010-03-02 20:08:35 | 000,001,763 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\QTSBandwidthCache [2009-12-27 12:06:22 | 000,000,088 | RHS- | C] () -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\980DA43522.sys [2009-09-20 22:04:19 | 000,006,570 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\PrimoPDFSet.xml [2009-08-21 20:45:33 | 000,000,149 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-07-29 09:12:52 | 000,079,872 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-08-21 20:38:46 | 000,000,227 | RHS- | M] () -- D:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2010-09-08 19:51:27 | 001,740,288 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = D:\WINDOWS\system32\wbem\fastprox.dll -- [2008-04-15 16:00:00 | 000,472,064 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2008-04-15 16:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2009-07-30 22:16:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\AlawarWrapper [2011-03-05 14:01:49 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Autodesk [2011-06-19 21:47:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Avanquest [2010-04-11 13:29:53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\BVRP Software [2013-03-23 13:42:00 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ClubSanDisk [2012-08-04 09:10:45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\DAEMON Tools Lite [2011-02-20 11:11:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Electronic Arts [2009-07-31 08:36:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\EPSON [2009-10-20 22:35:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ESET [2010-07-20 00:11:26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Gadu-Gadu 10 [2010-04-22 17:37:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\GoldWaveCDDB [2012-08-17 22:47:48 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\InterAction studios [2012-03-09 11:33:05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ipla [2010-02-25 21:25:01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\LGMOBILEAX [2011-01-03 18:36:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\MythPeople [2011-01-03 18:34:49 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\n7-89-o9-3r-4t-r9 [2012-03-25 20:22:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\OpenFM [2012-03-09 11:33:09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\RDRM [2013-04-28 19:52:31 | 000,000,000 | --SD | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Shared Space [2010-03-02 20:03:31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\SmartSound Software Inc [2012-11-17 14:58:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sony [2009-07-31 08:27:42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\UDL [2010-03-13 22:50:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Ulead Systems [2011-01-03 18:36:24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Zylom [2013-01-24 21:19:28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\GÄ…siorek.G-D81B3B7B737E4\Dane aplikacji\IrfanView [2010-03-06 16:16:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Autodesk [2013-04-23 22:46:10 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\BESTplayer [2013-03-28 16:02:59 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Bioshock [2013-04-29 18:42:40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\BitComet [2010-09-05 16:27:20 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Blender Foundation [2009-11-01 19:47:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Cream Software [2013-04-28 20:13:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\DAEMON Tools Lite [2011-11-01 11:02:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\EAC [2009-08-30 19:45:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\EPSON [2009-10-20 22:36:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\ESET [2010-12-25 22:36:45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Flock [2012-09-29 21:38:31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Gadu-Gadu 10 [2011-01-03 18:34:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\GameHouse [2009-09-30 19:37:08 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\GanymedeNet [2010-04-22 17:37:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\GoldWaveCDDB [2011-03-06 19:12:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Helios [2013-01-24 22:00:01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\ipla [2011-07-06 23:41:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Leadertech [2010-03-28 18:22:13 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Nowe Gadu-Gadu [2010-07-20 00:27:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\OpenFM [2011-04-21 20:29:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\runic games [2010-04-11 13:28:47 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Sony [2010-04-11 13:20:10 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Sony Setup [2010-04-11 14:02:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Teleca [2010-03-02 22:36:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Ulead Systems [2012-11-10 19:46:05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Wise Disk Cleaner [2012-03-05 11:21:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Wise Registry Cleaner [2012-06-24 21:14:14 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\wtxpcom [2010-09-12 09:26:24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\YoudaGames [2011-01-03 18:36:32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Zylom [2010-03-15 18:27:09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\TEMP\Dane aplikacji\Teleca [color=#E56717]========== Purity Check ==========[/color] < End of report >