OTL logfile created on: 11-06-2013 12:07:45 - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = F:\
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd-MM-yyyy
 
767,48 Mb Total Physical Memory | 370,04 Mb Available Physical Memory | 48,21% Memory free
1,83 Gb Paging File | 1,11 Gb Available in Paging File | 60,83% Paging File free
Paging file location(s): E:\pagefile.sys 1152 2304 [binary data]
 
%SystemDrive% = E: | %SystemRoot% = E:\WINDOWS | %ProgramFiles% = E:\Program Files
Drive C: | 117,80 Gb Total Space | 99,09 Gb Free Space | 84,12% Space Free | Partition Type: NTFS
Drive E: | 31,24 Gb Total Space | 9,18 Gb Free Space | 29,38% Space Free | Partition Type: NTFS
Drive F: | 7,46 Gb Total Space | 2,70 Gb Free Space | 36,16% Space Free | Partition Type: NTFS
 
Computer Name: RUDA | User Name: Krystian | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-06-10 17:46:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- F:\OTL.exe
PRC - [2013-05-22 09:07:05 | 000,920,472 | ---- | M] (Mozilla Corporation) -- E:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012-08-17 22:43:06 | 000,218,880 | ---- | M] (Kaspersky Lab ZAO) -- E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
PRC - [2011-12-30 07:39:10 | 004,889,032 | ---- | M] (SafeNet Inc.) -- E:\WINDOWS\system32\hasplms.exe
PRC - [2011-04-08 12:59:52 | 000,507,624 | ---- | M] (Sun Microsystems, Inc.) -- E:\Program Files\Common Files\Java\Java Update\jucheck.exe
PRC - [2009-10-28 15:40:24 | 000,109,832 | ---- | M] (Unizeto Technologies SA) -- E:\Program Files\Unizeto\proCertum CardManager\cryptoCertumScanner.exe
PRC - [2007-11-16 14:43:16 | 000,040,960 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) -- E:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\PhAutoRun.exe
PRC - [2007-11-14 12:54:24 | 002,131,392 | ---- | M] (Gadu-Gadu S.A.) -- E:\Program Files\Gadu-Gadu\gg.exe
PRC - [2007-11-13 19:48:50 | 002,510,848 | ---- | M] (OpenOffice.org) -- E:\Program Files\OpenOffice.org 2.3\program\soffice.bin
PRC - [2007-11-13 19:48:44 | 002,359,296 | ---- | M] (OpenOffice.org) -- E:\Program Files\OpenOffice.org 2.3\program\soffice.exe
PRC - [2007-06-13 15:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation) -- E:\WINDOWS\explorer.exe
PRC - [2007-04-23 04:00:00 | 000,692,224 | ---- | M] (Logitech Inc.) -- E:\Program Files\Logitech\SetPoint\SetPoint.exe
PRC - [2007-04-11 15:32:22 | 000,056,080 | ---- | M] (Logitech Inc.) -- E:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.exe
PRC - [2006-11-17 06:42:52 | 000,577,536 | ---- | M] (Realtek Semiconductor Corp.) -- E:\WINDOWS\soundman.exe
PRC - [2004-08-04 01:44:24 | 000,060,928 | ---- | M] (Microsoft Corporation) -- E:\Program Files\Outlook Express\msimn.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-05-22 09:07:04 | 003,128,728 | ---- | M] () -- E:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013-03-23 14:54:42 | 014,717,144 | ---- | M] () -- E:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
MOD - [2012-08-17 22:40:16 | 000,068,024 | ---- | M] () -- E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\QtWebKit\qmlwebkitplugin4.dll
MOD - [2012-08-17 22:39:26 | 001,310,136 | ---- | M] () -- E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\kpcengine.2.2.dll
MOD - [2012-08-17 22:38:56 | 000,479,160 | ---- | M] () -- E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll
MOD - [2007-11-14 12:11:46 | 000,106,496 | ---- | M] () -- E:\Program Files\Gadu-Gadu\libiax2.dll
MOD - [2007-11-14 12:11:42 | 000,061,440 | ---- | M] () -- E:\Program Files\Gadu-Gadu\libjb.dll
MOD - [2007-11-13 19:45:26 | 000,139,264 | ---- | M] () -- E:\Program Files\OpenOffice.org 2.3\program\nsldap32v50.dll
MOD - [2007-10-29 20:49:16 | 000,036,864 | ---- | M] () -- E:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\RawPictureLib.pcp
MOD - [2007-10-25 13:51:16 | 000,198,656 | ---- | M] () -- E:\Program Files\Gadu-Gadu\libcurl.dll
MOD - [2007-08-17 22:01:38 | 000,292,864 | ---- | M] () -- E:\Program Files\OpenOffice.org 2.3\program\libxmlsec.dll
MOD - [2007-08-08 19:20:14 | 000,152,064 | ---- | M] () -- E:\Program Files\OpenOffice.org 2.3\program\libxslt.dll
MOD - [2007-08-08 19:15:02 | 000,828,416 | ---- | M] () -- E:\Program Files\OpenOffice.org 2.3\program\libxml2.dll
MOD - [2007-01-25 13:25:12 | 000,117,248 | ---- | M] () -- E:\WINDOWS\system32\spool\drivers\w32x86\3\hpzpi4wm.DLL
MOD - [2004-08-04 01:44:04 | 000,014,336 | ---- | M] () -- E:\WINDOWS\system32\msdmo.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013-05-22 09:07:04 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- E:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-08-17 22:43:06 | 000,218,880 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe -- (AVP)
SRV - [2011-12-30 07:39:10 | 004,889,032 | ---- | M] (SafeNet Inc.) [Auto | Running] -- E:\WINDOWS\system32\hasplms.exe -- (hasplms)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] -- E:\DOCUME~1\Krystian\USTAWI~1\Temp\pxtdrpow.sys -- (pxtdrpow)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012-08-13 19:24:16 | 000,584,536 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- E:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2012-08-13 17:49:44 | 000,144,344 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\kneps.sys -- (kneps)
DRV - [2012-07-25 15:53:48 | 000,024,920 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2012-06-27 15:09:08 | 000,035,672 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\klim5.sys -- (klim5)
DRV - [2012-06-19 18:28:12 | 000,136,024 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- E:\WINDOWS\system32\drivers\kl1.sys -- (kl1)
DRV - [2012-06-08 12:38:12 | 000,043,608 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\kltdi.sys -- (kltdi)
DRV - [2012-05-25 20:38:48 | 000,023,896 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\klkbdflt.sys -- (klkbdflt)
DRV - [2011-10-04 13:03:48 | 000,367,560 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- E:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge)
DRV - [2011-08-10 14:05:24 | 000,596,424 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- E:\WINDOWS\system32\drivers\hardlock.sys -- (hardlock)
DRV - [2009-12-15 23:37:14 | 000,038,016 | ---- | M] (Advanced Card Systems Ltd.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\a38ccid.sys -- (A38CCID)
DRV - [2008-01-07 12:17:12 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- E:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2007-04-11 15:33:06 | 000,079,376 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2007-04-11 15:32:58 | 000,036,112 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007-04-11 15:32:52 | 000,034,832 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007-04-11 15:32:38 | 000,063,248 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2007-04-11 15:32:30 | 000,020,496 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2006-12-04 18:11:46 | 004,025,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM)
DRV - [2006-04-04 21:20:36 | 000,009,344 | ---- | M] (Hewlett Packard) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\hpfxbulk.sys -- (HPFXBULK)
DRV - [2001-08-17 21:12:40 | 000,019,017 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\RTL8029.sys -- (rtl8029)
DRV - [2000-11-25 11:38:48 | 000,095,484 | ---- | M] (DATOM Dariusz Cielebąk) [Kernel | Auto | Running] -- E:\WINDOWS\System32\drivers\KMM4XNT.SYS -- (Kmm4xNT)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-823518204-1078145449-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
IE - HKU\S-1-5-21-823518204-1078145449-725345543-1004\..\SearchScopes,DefaultScope = {6C1F3E68-7E88-41E6-8B36-C8BC79460F0C}
IE - HKU\S-1-5-21-823518204-1078145449-725345543-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-823518204-1078145449-725345543-1004\..\SearchScopes\{6C1F3E68-7E88-41E6-8B36-C8BC79460F0C}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
IE - HKU\S-1-5-21-823518204-1078145449-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-823518204-1078145449-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "http://www.onet.pl/"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: E:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: E:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: E:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: E:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com [2012-11-08 11:00:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com [2012-11-08 11:00:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com [2012-11-08 11:00:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins
 
[2011-11-30 12:03:23 | 000,000,000 | ---D | M] (No name found) -- E:\Documents and Settings\Krystian\Dane aplikacji\Mozilla\Extensions
[2012-10-23 13:20:44 | 000,000,000 | ---D | M] (No name found) -- E:\Documents and Settings\Krystian\Dane aplikacji\Mozilla\Firefox\Profiles\97ayvo6h.default\extensions
[2013-05-22 09:07:09 | 000,000,000 | ---D | M] (No name found) -- E:\Program Files\Mozilla Firefox\browser\extensions
[2013-05-22 09:07:09 | 000,000,000 | ---D | M] (Default) -- E:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
O1 HOSTS File: ([2012-11-10 11:35:55 | 000,000,686 | ---- | M]) - E:\WINDOWS\system32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [AutoRegisterCerts] E:\Program Files\Unizeto\proCertum CardManager\cryptoCertumScanner.exe (Unizeto Technologies SA)
O4 - HKLM..\Run: [AVP] E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] E:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] E:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [SoundMan] E:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKU\S-1-5-21-823518204-1078145449-725345543-1004..\Run: [BitComet] "E:\Program Files\BitComet\BitComet.exe" /tray File not found
O4 - HKU\S-1-5-21-823518204-1078145449-725345543-1004..\Run: [Gadu-Gadu] E:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O4 - Startup: E:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech SetPoint.lnk = E:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech Inc.)
O4 - Startup: E:\Documents and Settings\All Users\Menu Start\Programy\Autostart\PHOTOfunSTUDIO -viewer-.lnk = E:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\PhAutoRun.exe (Matsushita Electric Industrial Co., Ltd.)
O4 - Startup: E:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\OpenOffice.org 2.3.lnk = E:\Program Files\OpenOffice.org 2.3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-823518204-1078145449-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-823518204-1078145449-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: &Klawiatura wirtualna - {0C4CC089-D306-440D-9772-464E226F6539} - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - E:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1199548194896 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1199553267578 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Java Plug-in 1.5.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} http://212.64.161.19/activex/AMC.cab (AxisMediaControlEmb Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.23.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6DEF1803-56E2-4E24-8F90-AE6017853C1C}: DhcpNameServer = 192.168.23.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E567C721-9154-41BC-AF0A-3735D59E68AE}: DhcpNameServer = 192.168.23.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - E:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (E:\WINDOWS\system32\userinit.exe) - E:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - (E:\WINDOWS\system32\klogon.dll) - E:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: E:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: E:\WINDOWS\Web\Wallpaper\Idylla.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-01-05 17:39:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-03-03 09:41:06 | 000,095,784 | ---- | M] () - E:\AutoMapaSetupLog.txt -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-06-11 03:29:36 | 000,000,000 | ---D | C] -- E:\_OTL
[2013-06-04 12:13:22 | 004,889,032 | ---- | C] (SafeNet Inc.) -- E:\WINDOWS\System32\aksllmtp.exe
[2013-06-04 12:12:33 | 000,000,000 | ---D | C] -- E:\Documents and Settings\All Users\Menu Start\Programy\Zuzia10 System kosztorysowy
[2013-06-04 12:12:08 | 001,645,320 | ---- | C] (Microsoft Corporation) -- E:\WINDOWS\System32\GdiPlus.dll
[2013-06-04 11:46:32 | 000,198,088 | ---- | C] (Aladdin Knowledge Systems Ltd.) -- E:\WINDOWS\System32\hlvdd.dll
[2013-06-04 11:43:47 | 000,000,000 | ---D | C] -- E:\Program Files\Zuzia10
[2013-05-27 11:21:56 | 000,000,000 | ---D | C] -- E:\WINDOWS\Minidump
[2013-05-22 09:06:34 | 000,000,000 | ---D | C] -- E:\Program Files\Mozilla Firefox
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-06-10 21:33:31 | 000,054,156 | -H-- | M] () -- E:\WINDOWS\QTFont.qfn
[2013-06-10 21:33:14 | 000,002,048 | --S- | M] () -- E:\WINDOWS\bootstat.dat
[2013-06-10 21:33:12 | 804,835,328 | -HS- | M] () -- E:\hiberfil.sys
[2013-06-10 15:33:06 | 000,002,422 | ---- | M] () -- E:\WINDOWS\System32\wpa.dbl
[2013-06-10 15:15:24 | 000,001,744 | ---- | M] () -- E:\WINDOWS\System32\d3d9caps.dat
[2013-06-10 10:59:11 | 000,009,784 | ---- | M] () -- E:\Documents and Settings\Krystian\Moje dokumenty\Roboty 2013r.odt
[2013-06-07 20:58:02 | 000,000,284 | ---- | M] () -- E:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013-06-07 12:00:11 | 000,024,154 | ---- | M] () -- E:\Documents and Settings\Krystian\Pulpit\Koszt.36)13- modernizacja inst.CO ul.Nowy Świat 14 - II wersja.zuz
[2013-06-06 09:53:13 | 000,156,608 | ---- | M] () -- E:\Documents and Settings\Krystian\Pulpit\Kibice.jpg
[2013-06-05 10:11:36 | 000,012,306 | ---- | M] () -- E:\Documents and Settings\Krystian\Pulpit\potwierdzenie.pdf
[2013-06-04 12:12:33 | 000,001,528 | ---- | M] () -- E:\Documents and Settings\All Users\Pulpit\Zuzia10.lnk
[2013-06-04 11:59:01 | 003,250,230 | ---- | M] () -- E:\Documents and Settings\Krystian\Pulpit\bez tytułu.bmp
[2013-06-03 10:00:18 | 000,070,932 | ---- | M] () -- E:\Documents and Settings\Krystian\Pulpit\ścianki żerniki2.jpg
[2013-06-02 10:31:10 | 000,016,156 | ---- | M] () -- E:\Documents and Settings\Krystian\Moje dokumenty\Irene Wilk - rozliczenie 2012r.odt
[2013-05-30 20:54:36 | 000,021,791 | ---- | M] () -- E:\Documents and Settings\Krystian\Moje dokumenty\Remont - Nowy Świat.sxw
[2013-05-27 11:24:00 | 000,015,838 | ---- | M] () -- E:\Documents and Settings\Krystian\Moje dokumenty\Zestawienie materiałów Nowy Świat.odt
[2013-05-21 12:39:58 | 000,018,439 | ---- | M] () -- E:\Documents and Settings\Krystian\Moje dokumenty\Strona tytuowa- Logo ZUH.sxw
[2013-05-15 14:32:35 | 000,013,022 | ---- | M] () -- E:\Documents and Settings\Krystian\Moje dokumenty\pismo.odt
[2013-05-13 09:17:04 | 000,376,276 | ---- | M] () -- E:\Documents and Settings\Krystian\Pulpit\m13871215,MATA.pdf
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-06-10 10:59:11 | 000,009,784 | ---- | C] () -- E:\Documents and Settings\Krystian\Moje dokumenty\Roboty 2013r.odt
[2013-06-07 12:00:11 | 000,024,154 | ---- | C] () -- E:\Documents and Settings\Krystian\Pulpit\Koszt.36)13- modernizacja inst.CO ul.Nowy Świat 14 - II wersja.zuz
[2013-06-06 09:53:09 | 000,156,608 | ---- | C] () -- E:\Documents and Settings\Krystian\Pulpit\Kibice.jpg
[2013-06-05 10:11:57 | 000,012,306 | ---- | C] () -- E:\Documents and Settings\Krystian\Pulpit\potwierdzenie.pdf
[2013-06-04 12:12:33 | 000,001,528 | ---- | C] () -- E:\Documents and Settings\All Users\Pulpit\Zuzia10.lnk
[2013-06-04 11:59:00 | 003,250,230 | ---- | C] () -- E:\Documents and Settings\Krystian\Pulpit\bez tytułu.bmp
[2013-06-03 10:00:18 | 000,070,932 | ---- | C] () -- E:\Documents and Settings\Krystian\Pulpit\ścianki żerniki2.jpg
[2013-05-30 20:51:23 | 000,021,791 | ---- | C] () -- E:\Documents and Settings\Krystian\Moje dokumenty\Remont - Nowy Świat.sxw
[2013-05-25 18:49:55 | 000,015,838 | ---- | C] () -- E:\Documents and Settings\Krystian\Moje dokumenty\Zestawienie materiałów Nowy Świat.odt
[2013-05-15 14:32:33 | 000,013,022 | ---- | C] () -- E:\Documents and Settings\Krystian\Moje dokumenty\pismo.odt
[2013-05-13 09:16:34 | 000,376,276 | ---- | C] () -- E:\Documents and Settings\Krystian\Pulpit\m13871215,MATA.pdf
[2012-05-17 10:13:18 | 000,240,316 | ---- | C] () -- E:\WINDOWS\System32\tutil32.dll
[2012-05-17 10:13:18 | 000,236,800 | ---- | C] () -- E:\WINDOWS\System32\proj16.dll
[2012-05-17 10:13:18 | 000,236,734 | ---- | C] () -- E:\WINDOWS\System32\pxengwin.dll
[2012-05-17 10:13:18 | 000,075,344 | ---- | C] () -- E:\WINDOWS\System32\pxkoszt.dll
[2012-05-17 10:13:18 | 000,011,272 | ---- | C] () -- E:\WINDOWS\System32\pxfunct.dll
[2012-05-17 10:13:17 | 000,055,612 | ---- | C] () -- E:\WINDOWS\System32\konwert.exe
[2012-02-29 12:53:48 | 000,385,864 | ---- | C] () -- E:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2011-10-05 08:37:07 | 000,074,752 | ---- | C] () -- E:\WINDOWS\System32\ff_vfw.dll
[2008-02-19 11:42:21 | 000,015,872 | ---- | C] () -- E:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-01-06 14:43:39 | 000,000,133 | ---- | C] () -- E:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2008-01-06 14:33:44 | 000,000,227 | RHS- | M] () -- E:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\System32\shdocvw.dll -- [2006-09-23 14:13:02 | 001,497,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = E:\WINDOWS\System32\wbem\fastprox.dll -- [2009-02-09 12:22:07 | 000,473,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = E:\WINDOWS\System32\wbem\wbemess.dll -- [2004-08-04 01:44:14 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2008-06-17 22:14:48 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\ACD Systems
[2008-02-27 19:59:22 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\WinZip
[2008-06-17 22:15:42 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krystian\Dane aplikacji\ACD Systems
[2012-10-15 19:19:07 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krystian\Dane aplikacji\Chandney
[2010-10-04 11:02:47 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krystian\Dane aplikacji\FAST_CW
[2008-09-26 14:11:18 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krystian\Dane aplikacji\Gadu-Gadu
[2012-01-09 17:17:12 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krystian\Dane aplikacji\Panasonic
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >