OTL logfile created on: 2011-02-06 11:47:30 - Run 2
OTL by OldTimer - Version 3.2.20.6     Folder = C:\Users\Ania\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18999)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 53,00% Memory free
6,00 Gb Paging File | 4,00 Gb Available in Paging File | 72,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 283,40 Gb Total Space | 90,97 Gb Free Space | 32,10% Space Free | Partition Type: NTFS
Drive E: | 14,65 Gb Total Space | 5,47 Gb Free Space | 37,33% Space Free | Partition Type: NTFS
 
Computer Name: ANIA-DELLUS | User Name: Ania | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-02-05 23:03:12 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Ania\Desktop\OTL.exe
PRC - [2011-02-02 19:37:57 | 000,918,184 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Anti-Virus\fssm32.exe
PRC - [2011-02-02 19:37:57 | 000,508,584 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32.exe
PRC - [2011-01-04 20:45:01 | 000,372,904 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Anti-Virus\fsav32.exe
PRC - [2010-12-20 20:01:41 | 000,063,992 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\ORSP Client\fsorsp.exe
PRC - [2010-10-24 13:31:50 | 000,221,864 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe
PRC - [2010-10-24 13:31:48 | 000,201,384 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Common\FSM32.EXE
PRC - [2010-10-24 13:31:48 | 000,189,096 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE
PRC - [2010-10-24 13:31:48 | 000,090,792 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Common\FSHDLL32.EXE
PRC - [2010-09-02 21:17:40 | 001,853,248 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
PRC - [2010-07-21 15:36:02 | 000,783,680 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
PRC - [2009-10-16 12:40:44 | 000,424,688 | ---- | M] (QFX Software Corporation) -- C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
PRC - [2009-09-11 12:36:30 | 000,128,232 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-02-05 23:03:12 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Ania\Desktop\OTL.exe
MOD - [2010-10-24 13:32:06 | 000,332,456 | ---- | M] (F-Secure Corporation) -- c:\Program Files (x86)\F-Secure\HIPS\fshook32.dll
MOD - [2010-08-31 15:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2009-03-31 15:00:18 | 000,268,288 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe -- (STacSV)
SRV:[b]64bit:[/b] - [2009-03-31 15:00:02 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe -- (AESTFilters)
SRV:[b]64bit:[/b] - [2009-01-20 14:56:56 | 000,935,424 | ---- | M] (ATI Technologies Inc.) [Disabled | Stopped] -- C:\Windows\SysNative\Ati2evxx.exe -- (Ati External Event Utility)
SRV:[b]64bit:[/b] - [2008-12-21 18:35:16 | 000,032,768 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysNative\WLTRYSVC.EXE -- (wltrysvc)
SRV:[b]64bit:[/b] - [2008-12-18 19:05:28 | 000,155,648 | ---- | M] (Stardock Corporation) [Disabled | Stopped] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV:[b]64bit:[/b] - [2008-01-21 02:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2006-11-02 11:16:05 | 000,046,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rundll32.exe -- (yksvc)
SRV - [2010-12-20 20:01:41 | 000,063,992 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files (x86)\F-Secure\ORSP Client\fsorsp.exe -- (FSORSPClient)
SRV - [2010-10-24 13:31:54 | 000,849,576 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe -- (FSDFWD)
SRV - [2010-10-24 13:31:50 | 000,221,864 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe -- (F-Secure Gatekeeper Handler Starter)
SRV - [2010-10-24 13:31:48 | 000,189,096 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE -- (FSMA)
SRV - [2010-08-20 20:53:08 | 000,689,472 | ---- | M] (SoftThinks SAS) [Disabled | Stopped] -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE -- (SftService)
SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-05-21 13:59:08 | 000,206,064 | ---- | M] (SupportSoft, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter)
SRV - [2009-03-30 04:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008-05-07 22:41:14 | 000,354,840 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2005-11-14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2010-10-24 13:32:03 | 000,046,664 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\fses.sys -- (FSES)
DRV:[b]64bit:[/b] - [2010-10-24 13:31:54 | 000,095,784 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\fsdfw.sys -- (FSFW)
DRV:[b]64bit:[/b] - [2009-10-16 12:34:42 | 000,130,672 | ---- | M] (QFX Software Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\keyscrambler.sys -- (KeyScrambler)
DRV:[b]64bit:[/b] - [2009-10-01 00:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:[b]64bit:[/b] - [2009-09-16 15:08:48 | 000,172,960 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\CtClsFlt.sys -- (CtClsFlt)
DRV:[b]64bit:[/b] - [2009-03-31 16:53:54 | 000,069,120 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RTSTOR64.SYS -- (RTSTOR)
DRV:[b]64bit:[/b] - [2009-03-31 15:00:28 | 000,477,696 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\stwrt64.sys -- (STHDA)
DRV:[b]64bit:[/b] - [2009-03-31 14:19:00 | 000,225,328 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Apfiltr.sys -- (ApfiltrService)
DRV:[b]64bit:[/b] - [2009-01-20 14:57:00 | 004,993,024 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (R300)
DRV:[b]64bit:[/b] - [2009-01-20 14:57:00 | 004,993,024 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2008-12-21 18:34:48 | 000,022,520 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BCM42RLY.sys -- (BCM42RLY)
DRV:[b]64bit:[/b] - [2008-12-16 16:56:52 | 001,526,776 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\bcmwl664.sys -- (BCM43XX)
DRV:[b]64bit:[/b] - [2008-08-31 18:19:24 | 000,392,192 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)
DRV:[b]64bit:[/b] - [2008-08-31 18:15:58 | 000,395,288 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iastor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2008-08-25 00:00:00 | 000,307,456 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OA009Vid.sys -- (OA009Vid)
DRV:[b]64bit:[/b] - [2008-06-03 16:30:38 | 000,168,864 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OA009Ufd.sys -- (OA009Ufd)
DRV:[b]64bit:[/b] - [2008-01-21 02:46:55 | 000,317,952 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\e1e6032e.sys -- (e1express) Intel(R)
DRV:[b]64bit:[/b] - [2007-11-14 08:00:00 | 000,053,488 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:[b]64bit:[/b] - [2006-09-18 21:36:24 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\WBEM\ntfs.mof -- (Ntfs)
DRV - [2010-11-30 20:59:44 | 000,194,728 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\F-Secure\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper)
DRV - [2010-10-24 13:32:06 | 000,061,960 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\F-Secure\HIPS\drivers\fshs.sys -- (F-Secure HIPS)
DRV - [2010-10-24 13:31:50 | 000,041,896 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files (x86)\F-Secure\Anti-Virus\win2k\fsfilter.sys -- (F-Secure Filter)
DRV - [2010-10-24 13:31:50 | 000,027,304 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files (x86)\F-Secure\Anti-Virus\win2k\fsrec.sys -- (F-Secure Recognizer)
DRV - [2010-10-24 13:31:50 | 000,015,016 | ---- | M] () [Kernel | System | Running] -- C:\Program Files (x86)\F-Secure\Anti-Virus\minifilter\fsvista.sys -- (fsvista)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1562562419-2799016944-1144016637-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
IE - HKU\S-1-5-21-1562562419-2799016944-1144016637-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.gametop.com/?utm_source=Azteca&utm_medium=start
IE - HKU\S-1-5-21-1562562419-2799016944-1144016637-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1562562419-2799016944-1144016637-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
FF - HKLM\software\mozilla\Firefox\Extensions\\litmus-ff@f-secure.com: C:\Program Files (x86)\F-Secure\NRS\litmus-ff@f-secure.com [2010-10-24 13:35:30 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2006-09-18 21:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Browsing Protection Class) - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files (x86)\F-Secure\NRS\iescript\baselitmus.dll (F-Secure Corporation)
O3 - HKLM\..\Toolbar: (Browsing Protection Toolbar) - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files (x86)\F-Secure\NRS\iescript\baselitmus.dll (F-Secure Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Windows\SysNative\WLTRAY.exe (Dell Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files (x86)\F-Secure\Common\FSM32.EXE (F-Secure Corporation)
O4 - HKLM..\Run: [F-Secure TNB] C:\Program Files (x86)\F-Secure\FSGUI\TNBUtil.exe (F-Secure Corporation)
O4 - HKLM..\Run: [KeyScrambler] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe (QFX Software Corporation)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKLM..\RunOnce: [DSUpdateLauncher] c:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe (Dell)
O4 - HKLM..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe (Softthinks)
O4 - HKLM..\RunOnce: [STToasterLauncher] C:\Program Files (x86)\Dell DataSafe Local Backup\toasterLauncher.exe ()
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\x64\KeyScramblerIE.dll (QFX Software Corporation)
O9 - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll (QFX Software Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15101/CTSUEng.cab (Creative Software AutoUpdate)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15111/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.168.4.100 194.168.8.100
O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Ania\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ania\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004-04-30 22:01:00 | 000,000,053 | -HS- | M] () - E:\AUTORUN.INF -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-02-06 11:28:51 | 000,000,000 | ---D | C] -- C:\_OTL
[2011-02-05 23:03:08 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Ania\Desktop\OTL.exe
[2011-01-27 20:30:30 | 000,000,000 | ---D | C] -- C:\Users\Ania\AppData\Roaming\Mozilla
[2011-01-12 20:12:29 | 000,466,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2011-01-12 20:12:29 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2011-01-12 20:12:00 | 001,251,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe
[2009-08-19 18:10:04 | 008,270,752 | ---- | C] (Dell, Inc.                                                   ) -- C:\Users\Ania\AppData\Roaming\DataSafeDotNet.exe
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-02-06 11:30:09 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011-02-06 11:30:09 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011-02-06 11:30:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-02-06 11:29:58 | 3219,509,248 | -HS- | M] () -- C:\hiberfil.sys
[2011-02-06 10:30:00 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1562562419-2799016944-1144016637-1000UA.job
[2011-02-06 09:59:57 | 000,000,538 | ---- | M] () -- C:\Windows\tasks\Scheduled scanning task.job
[2011-02-06 00:56:01 | 000,000,416 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{E9B8C989-2F4C-4E67-92F7-6CFD04EB7D29}.job
[2011-02-05 23:03:12 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Ania\Desktop\OTL.exe
[2011-02-05 22:31:24 | 000,006,836 | ---- | M] () -- C:\Users\Ania\AppData\Local\d3d9caps.dat
[2011-02-05 22:30:01 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1562562419-2799016944-1144016637-1000Core.job
[2011-02-04 23:38:21 | 000,152,576 | ---- | M] () -- C:\Users\Ania\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-02-04 22:57:03 | 000,044,585 | ---- | M] () -- C:\Users\Ania\Desktop\Pantokrator_Rublow_fragm.jpg
[2011-02-04 22:55:09 | 000,061,405 | ---- | M] () -- C:\Users\Ania\Desktop\deesis_ru.jpg
[2011-02-04 22:53:55 | 000,346,985 | ---- | M] () -- C:\Users\Ania\Desktop\RUBLEV_Gavriil.jpg
[2011-02-04 22:53:19 | 000,067,248 | ---- | M] () -- C:\Users\Ania\Desktop\Pantokrator_Rublow.jpg
[2011-02-04 22:53:08 | 000,385,392 | ---- | M] () -- C:\Users\Ania\Desktop\020lrublev arhangel mikhail.jpg
[2011-02-04 22:52:08 | 000,043,159 | ---- | M] () -- C:\Users\Ania\Desktop\Archaniol_Gabriel_1220.jpg
[2011-02-01 22:16:57 | 040,512,832 | ---- | M] () -- C:\Users\Ania\Desktop\01 - Kommt, ihr Tochter, helft mir klagen.flac
[2011-02-01 22:04:17 | 000,007,343 | ---- | M] () -- C:\Users\Ania\Desktop\00162cd7_medium.jpeg
[2011-01-29 18:13:44 | 000,044,874 | ---- | M] () -- C:\Users\Ania\Desktop\amj2.jpg
[2011-01-29 18:10:43 | 000,086,085 | ---- | M] () -- C:\Users\Ania\Desktop\amj1.jpg
[2011-01-29 18:08:21 | 000,031,644 | ---- | M] () -- C:\Users\Ania\Desktop\amj.jpg
[2011-01-17 21:48:01 | 000,014,203 | ---- | M] () -- C:\Users\Ania\Desktop\0e93c0a398a07359e2143210.L._AA300_.jpg
[2011-01-17 21:47:51 | 000,022,173 | ---- | M] () -- C:\Users\Ania\Desktop\00114f55_medium.jpeg
[2011-01-12 22:34:18 | 000,111,802 | ---- | M] () -- C:\Users\Ania\Desktop\Vincent-van-Gogh-2 (1).jpg
[2011-01-12 22:34:11 | 000,111,761 | ---- | M] () -- C:\Users\Ania\Desktop\Vincent-van-Gogh-1.jpg
[2011-01-12 22:33:56 | 000,100,908 | ---- | M] () -- C:\Users\Ania\Desktop\Vincent-van-Gogh-5.jpg
[2011-01-12 22:33:13 | 000,111,802 | ---- | M] () -- C:\Users\Ania\Desktop\Vincent-van-Gogh-2.jpg
[2011-01-12 22:20:43 | 000,013,719 | ---- | M] () -- C:\Users\Ania\Desktop\vincent gallo.jpg
[2011-01-11 21:36:14 | 000,714,556 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011-01-11 21:36:14 | 000,603,124 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011-01-11 21:36:14 | 000,107,314 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011-01-09 23:56:50 | 000,000,406 | ---- | M] () -- C:\Windows\tasks\SmartDefrag.job
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-02-04 22:56:58 | 000,044,585 | ---- | C] () -- C:\Users\Ania\Desktop\Pantokrator_Rublow_fragm.jpg
[2011-02-04 22:55:07 | 000,061,405 | ---- | C] () -- C:\Users\Ania\Desktop\deesis_ru.jpg
[2011-02-04 22:53:46 | 000,346,985 | ---- | C] () -- C:\Users\Ania\Desktop\RUBLEV_Gavriil.jpg
[2011-02-04 22:53:15 | 000,067,248 | ---- | C] () -- C:\Users\Ania\Desktop\Pantokrator_Rublow.jpg
[2011-02-04 22:52:56 | 000,385,392 | ---- | C] () -- C:\Users\Ania\Desktop\020lrublev arhangel mikhail.jpg
[2011-02-04 22:52:07 | 000,043,159 | ---- | C] () -- C:\Users\Ania\Desktop\Archaniol_Gabriel_1220.jpg
[2011-02-01 22:04:14 | 000,007,343 | ---- | C] () -- C:\Users\Ania\Desktop\00162cd7_medium.jpeg
[2011-02-01 22:03:53 | 040,512,832 | ---- | C] () -- C:\Users\Ania\Desktop\01 - Kommt, ihr Tochter, helft mir klagen.flac
[2011-01-29 18:13:52 | 000,044,874 | ---- | C] () -- C:\Users\Ania\Desktop\amj2.jpg
[2011-01-29 18:10:51 | 000,086,085 | ---- | C] () -- C:\Users\Ania\Desktop\amj1.jpg
[2011-01-29 18:08:42 | 000,031,644 | ---- | C] () -- C:\Users\Ania\Desktop\amj.jpg
[2011-01-17 21:48:00 | 000,014,203 | ---- | C] () -- C:\Users\Ania\Desktop\0e93c0a398a07359e2143210.L._AA300_.jpg
[2011-01-17 21:47:50 | 000,022,173 | ---- | C] () -- C:\Users\Ania\Desktop\00114f55_medium.jpeg
[2011-01-12 22:34:22 | 000,111,802 | ---- | C] () -- C:\Users\Ania\Desktop\Vincent-van-Gogh-2 (1).jpg
[2011-01-12 22:34:12 | 000,111,761 | ---- | C] () -- C:\Users\Ania\Desktop\Vincent-van-Gogh-1.jpg
[2011-01-12 22:33:59 | 000,100,908 | ---- | C] () -- C:\Users\Ania\Desktop\Vincent-van-Gogh-5.jpg
[2011-01-12 22:33:17 | 000,111,802 | ---- | C] () -- C:\Users\Ania\Desktop\Vincent-van-Gogh-2.jpg
[2011-01-12 22:21:01 | 000,013,719 | ---- | C] () -- C:\Users\Ania\Desktop\vincent gallo.jpg
[2010-05-19 19:58:09 | 000,042,664 | ---- | C] () -- C:\Windows\SysWow64\drivers\fsbts.sys
[2010-05-19 19:56:48 | 000,709,160 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010-04-11 16:48:55 | 000,006,836 | ---- | C] () -- C:\Users\Ania\AppData\Local\d3d9caps.dat
[2009-12-03 20:38:03 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009-12-03 20:36:11 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009-08-19 22:54:56 | 000,152,576 | ---- | C] () -- C:\Users\Ania\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-08-17 21:17:52 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2008-01-21 02:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-04-22 20:47:12 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\Auslogics
[2009-09-28 19:38:15 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\ESET
[2010-06-04 20:00:00 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\F-Secure
[2010-10-30 11:42:50 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\foobar2000
[2009-08-27 18:40:51 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\IObit
[2010-03-30 19:40:17 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\Leadertech
[2011-02-06 11:29:27 | 000,032,622 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011-02-06 09:59:57 | 000,000,538 | ---- | M] () -- C:\Windows\Tasks\Scheduled scanning task.job
[2011-01-09 23:56:50 | 000,000,406 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job
[2011-02-06 00:56:01 | 000,000,416 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{E9B8C989-2F4C-4E67-92F7-6CFD04EB7D29}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:CF778051

< End of report >