OTL logfile created on: 2013-09-19 21:48:00 - Run 5
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\User\Moje dokumenty\Pobieranie\333
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
503,48 Mb Total Physical Memory | 290,50 Mb Available Physical Memory | 57,70% Memory free
2,46 Gb Paging File | 2,05 Gb Available in Paging File | 83,52% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 64,60 Gb Total Space | 44,20 Gb Free Space | 68,41% Space Free | Partition Type: NTFS
Drive D: | 88,78 Gb Total Space | 49,50 Gb Free Space | 55,75% Space Free | Partition Type: NTFS
 
Computer Name: USER-66CCF93770 | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-09-19 21:22:16 | 000,259,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\User\Moje dokumenty\Pobieranie\333\OTH.exe
PRC - [2013-09-19 20:27:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\User\Moje dokumenty\Pobieranie\333\OTL.exe
PRC - [2013-09-07 16:21:51 | 000,235,728 | ---- | M] (Bitdefender) -- C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe
PRC - [2013-09-07 16:21:45 | 000,054,424 | ---- | M] (Bitdefender) -- C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
PRC - [2013-01-14 22:16:42 | 003,011,400 | ---- | M] (Privacyware/PWI, Inc.) -- C:\Program Files\Privacyware\Privatefirewall 7.0\PFGUI.exe
PRC - [2013-01-14 22:16:42 | 000,374,600 | ---- | M] (Privacyware/PWI, Inc.) -- C:\Program Files\Privacyware\Privatefirewall 7.0\pfsvc.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-09-07 16:22:06 | 000,508,136 | ---- | M] () -- C:\Program Files\Bitdefender\Antivirus Free Edition\sqlite3.dll
MOD - [2013-09-07 16:22:06 | 000,093,040 | ---- | M] () -- C:\Program Files\Bitdefender\Antivirus Free Edition\bdmetrics.dll
MOD - [2013-08-16 10:20:02 | 000,595,968 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\228b114c79c5d9024bdb4cc580e32c09\PresentationFramework.Aero.ni.dll
MOD - [2013-08-16 10:19:37 | 000,387,072 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\65d1a73bba5357f9f54d69ef4ee1ef21\PresentationFramework.Royale.ni.dll
MOD - [2013-08-16 10:19:30 | 000,309,760 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9d160913e64d7732a8c725fc7f2d818b\PresentationFramework.Classic.ni.dll
MOD - [2013-08-16 10:07:53 | 013,199,360 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\1a3b614a84244ea5fa4147b5cf007333\System.Windows.Forms.ni.dll
MOD - [2013-08-16 10:04:58 | 001,667,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\3a3fc0216674bdea0be809b305517c98\System.Drawing.ni.dll
MOD - [2013-08-16 10:04:52 | 001,801,728 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xaml\4d277a8481c203a35c58bd277a2e71df\System.Xaml.ni.dll
MOD - [2013-08-16 10:04:44 | 018,003,456 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e205d971e9ffa1771cff3d3dde1c3c2b\PresentationFramework.ni.dll
MOD - [2013-08-16 10:03:31 | 011,451,904 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationCore\107b8a28ba272e93556f0e2bfa2c4e16\PresentationCore.ni.dll
MOD - [2013-08-16 10:02:43 | 003,858,944 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\WindowsBase\6405f08f877802703cfd956c072a4ad0\WindowsBase.ni.dll
MOD - [2013-08-16 10:02:16 | 005,628,928 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\884bcbd22130ebeb1211bc7bcc3910c9\System.Xml.ni.dll
MOD - [2013-08-16 10:01:58 | 001,014,272 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\df40dab689e9d8febfb943599ba79f8d\System.Configuration.ni.dll
MOD - [2013-08-15 23:34:58 | 009,099,776 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\de853615c8224ba5d9aa9b76276c6d98\System.ni.dll
MOD - [2013-08-15 22:15:12 | 014,416,896 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\cf58670896c5313b9b52f026f4455a5d\mscorlib.ni.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2013-09-07 16:21:45 | 000,054,424 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe -- (gzserv)
SRV - [2013-08-14 15:19:22 | 000,039,056 | ---- | M] () [Auto | Stopped] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2013-01-14 22:16:42 | 000,374,600 | ---- | M] (Privacyware/PWI, Inc.) [Auto | Running] -- C:\Program Files\Privacyware\Privatefirewall 7.0\pfsvc.exe -- (PFNet)
SRV - [2010-06-14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [Disabled | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009-12-27 17:49:08 | 000,028,672 | ---- | M] (ArpanTECH) [Auto | Stopped] -- C:\Program Files\ArpanTECH\iKill Service v1.1\iKillSrv.exe -- (iKillSrv)
SRV - [2009-01-05 16:16:12 | 000,069,632 | ---- | M] () [Auto | Stopped] -- C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe -- (RalinkRegistryWriter)
SRV - [2004-10-29 16:29:16 | 000,086,016 | ---- | M] (NetGroup - Politecnico di Torino) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rootrepeal.sys -- (rootrepeal)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [2011/06/24 17:40:13] [Kernel | Auto | Stopped] -- D:\PowerDVD11\Common\NavFilter\000.fcl -- ({329F96B6-DF1E-4328-BFDA-39EA953C1312})
DRV - [2013-09-08 10:57:56 | 000,135,472 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Bitdefender\Antivirus Free Edition\bdselfpr.sys -- (bdselfpr)
DRV - [2013-07-23 22:07:14 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2013-07-18 15:03:28 | 000,024,520 | ---- | M] (Zemana Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\KeyCrypt32.sys -- (keycrypt)
DRV - [2013-05-29 17:16:40 | 000,128,104 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PSINProt.sys -- (PSINProt)
DRV - [2013-05-29 05:55:11 | 000,230,376 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSStrm.sys -- (NNSSTRM)
DRV - [2013-05-29 05:55:11 | 000,108,904 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSSmtp.sys -- (NNSSMTP)
DRV - [2013-05-29 05:55:11 | 000,093,928 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNStlsc.sys -- (NNSTLSC)
DRV - [2013-05-29 05:55:10 | 000,287,336 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSProt.sys -- (NNSPROT)
DRV - [2013-05-29 05:55:10 | 000,161,384 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSPrv.sys -- (NNSPRV)
DRV - [2013-05-29 05:55:10 | 000,106,344 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSPop3.sys -- (NNSPOP3)
DRV - [2013-05-29 05:55:09 | 000,124,648 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSIds.sys -- (NNSIDS)
DRV - [2013-05-29 05:55:09 | 000,095,464 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSpicc.sys -- (NNSPICC)
DRV - [2013-05-29 05:55:09 | 000,052,328 | ---- | M] (Panda Security, S.L.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\NNSpihs.sys -- (NNSPIHS)
DRV - [2013-05-29 05:55:08 | 000,126,184 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSHttp.sys -- (NNSHTTP)
DRV - [2013-05-29 05:55:08 | 000,107,752 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSHttps.sys -- (NNSHTTPS)
DRV - [2013-05-29 05:55:08 | 000,084,200 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSAlpc.sys -- (NNSALPC)
DRV - [2013-05-28 12:11:21 | 000,355,744 | ---- | M] (BitDefender S.R.L.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\trufos.sys -- (trufos)
DRV - [2013-05-28 11:26:08 | 000,097,768 | ---- | M] (Panda Security, S.L.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PSINReg.sys -- (PSINReg)
DRV - [2013-05-28 11:26:07 | 000,179,688 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\PSINKNC.sys -- (PSINKNC)
DRV - [2013-05-28 11:26:07 | 000,114,920 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\PSINProc.sys -- (PSINProc)
DRV - [2013-05-28 11:26:06 | 000,145,128 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PSINAflt.sys -- (PSINAflt)
DRV - [2013-05-28 11:26:06 | 000,103,400 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\PSINFile.sys -- (PSINFile)
DRV - [2013-04-29 09:17:34 | 000,047,632 | ---- | M] (Panda Security, S.L.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PSKMAD.sys -- (PSKMAD)
DRV - [2013-04-22 13:20:34 | 000,164,952 | ---- | M] (BitDefender LLC) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\gzflt.sys -- (gzflt)
DRV - [2013-04-17 14:59:04 | 000,486,536 | ---- | M] (BitDefender) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avckf.sys -- (avckf)
DRV - [2012-05-25 18:34:42 | 000,135,272 | ---- | M] (Privacyware/PWI, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pwipf6.sys -- (pwipf6)
DRV - [2012-03-27 16:48:00 | 000,299,424 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2010-11-23 21:15:21 | 000,015,600 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2010-07-04 21:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2010-02-26 14:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010-02-26 14:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010-02-26 14:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010-02-26 14:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2009-07-17 16:23:46 | 000,476,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73)
DRV - [2009-04-21 15:31:10 | 000,019,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Scutum50.sys -- (Scutum50)
DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-04-14 00:23:10 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008-02-29 03:13:46 | 000,028,944 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2008-02-29 03:13:36 | 000,079,120 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2008-02-29 03:13:24 | 000,036,880 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2008-02-29 03:13:16 | 000,035,344 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2008-02-29 03:12:56 | 000,063,120 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2007-09-29 07:30:52 | 000,065,024 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\jraid.sys -- (JRAID)
DRV - [2007-09-19 15:44:46 | 000,101,504 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007-01-23 15:44:00 | 000,020,496 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2004-10-29 16:14:04 | 000,032,000 | ---- | M] (NetGroup - Politecnico di Torino) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2000-01-01 02:00:00 | 005,444,680 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2000-01-01 02:00:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2000-01-01 02:00:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-515967899-329068152-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-515967899-329068152-725345543-1003\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-21-515967899-329068152-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-515967899-329068152-725345543-1003\..\SearchScopes\{AA249083-8839-46AF-91A0-A407011649C4}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms}
IE - HKU\S-1-5-21-515967899-329068152-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "http://pl.yahoo.com?fr=fp-comodo"
FF - prefs.js..keyword.URL: "http://pl.search.yahoo.com/search?fr=ytff-comodo&p="
FF - prefs.js..browser.search.param.yahoo-fr: "chrf-comodo"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-comodo"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013-08-30 22:37:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-09-12 19:35:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-09-10 17:38:39 | 000,000,000 | ---D | M]
 
[2008-06-20 18:23:32 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Extensions
[2013-09-12 19:35:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\gx2mpvko.Domyślny użytkownik\extensions
[2012-07-23 22:26:23 | 000,000,000 | ---D | M] (Panda Security Toolbar) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\gx2mpvko.Domyślny użytkownik\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}
[2013-09-12 19:35:17 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\s6ikn0jz.default\extensions
[2009-01-22 21:40:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\s6ikn0jz.default\extensions\{81514210-E22A-4e69-93D5-E1EFD45B4620}
[2008-07-16 00:16:54 | 000,000,000 | ---D | M] (Past Modern) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\s6ikn0jz.default\extensions\{81514210-E22A-4e69-93D5-E1EFD45B4620}(2)
[2012-07-23 22:26:23 | 000,000,000 | ---D | M] (Panda Security Toolbar) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\s6ikn0jz.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}
[2009-01-11 20:14:12 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\s6ikn0jz.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009-01-22 22:20:40 | 000,000,000 | ---D | M] ("GrayModern2") -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\s6ikn0jz.default\extensions\{eb46c787-131a-4eb7-9b93-7f62ca550917}
[2013-08-26 19:58:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\zobe1nfd.default-1377033305078\extensions
[2013-08-26 19:58:02 | 000,824,302 | ---- | M] () (No name found) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\zobe1nfd.default-1377033305078\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2008-11-22 21:17:52 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\s6ikn0jz.default\searchplugins\bsplayer-search.xml
[2009-01-11 03:21:12 | 000,001,196 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\s6ikn0jz.default\searchplugins\winamp-search.xml
[2013-09-12 19:35:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013-08-17 15:27:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013-08-17 15:28:20 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013-08-30 22:36:34 | 000,124,504 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2011-07-11 23:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google ()
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&output=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://pl.yahoo.com?fr=fpc-comodo
 
O1 HOSTS File: ([2010-06-26 16:45:02 | 000,000,746 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [Privatefirewall] C:\Program Files\Privacyware\Privatefirewall 7.0\PFGUI.exe (Privacyware/PWI, Inc.)
O4 - HKLM..\Run: [ZALFree] C:\Program Files\Zemana AntiLogger Free\AntiLogger Free.exe (Zemana Ltd.)
O4 - HKU\S-1-5-21-515967899-329068152-725345543-1003..\Run: [Odkurzacz] C:\Program Files\Odkurzacz\odkurzacz.exe (FranmoSoftware)
O4 - HKU\.DEFAULT..\RunOnce: [panda2_0dn_XP] reg.exe delete "HKCU\Software\panda2_0dn" /f File not found
O4 - HKU\S-1-5-18..\RunOnce: [panda2_0dn_XP] reg.exe delete "HKCU\Software\panda2_0dn" /f File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\TL-WN321G Wireless Utility.lnk = C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-515967899-329068152-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-515967899-329068152-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-515967899-329068152-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-515967899-329068152-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF  [binary data]
O15 - HKU\S-1-5-21-515967899-329068152-725345543-1003\..Trusted Domains: USER-66CCF93770 ([]file in Trusted sites)
O15 - HKU\S-1-5-21-515967899-329068152-725345543-1003\..Trusted Domains: USER-66CCF93770 ([]http in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 10.21.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8052D419-A9BE-4107-B38C-7BC118CCF349}: DhcpNameServer = 192.168.0.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (c:\windows\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {4F07DA45-8170-4859-9B5F-037EF2970034} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-06-04 14:27:16 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-01-13 14:49:42 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-01-13 15:49:41 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-09-19 20:14:43 | 000,000,000 | ---D | C] -- C:\FRST
[2013-09-12 19:25:39 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013-09-11 21:39:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\avgchrome
[2013-09-08 10:57:59 | 000,242,504 | ---- | C] (BitDefender) -- C:\WINDOWS\System32\drivers\avchv.sys
[2013-09-07 16:21:50 | 000,633,344 | ---- | C] (BitDefender) -- C:\WINDOWS\System32\drivers\avc3.sys
[2013-09-01 01:49:24 | 000,000,000 | ---D | C] -- C:\CCE_Quarantine
[2013-08-31 20:13:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Pulpit\CCE
[2013-08-30 22:39:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\RealNetworks
[2013-08-30 22:37:51 | 000,000,000 | ---D | C] -- C:\Program Files\RealNetworks
[2013-08-30 22:37:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks
[2013-08-30 22:36:51 | 000,201,872 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll
[2013-08-30 22:36:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\RealNetworks
[2013-08-30 22:33:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\Real
[2013-08-30 22:31:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real
[2013-08-30 22:21:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Pulpit\bt
[2013-08-30 22:08:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
[2013-08-30 21:56:57 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2013-08-28 22:19:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\bdch
[2013-08-25 00:47:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\MetaQuotes
[2013-08-20 23:15:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Pulpit\Stare dane programu Firefox
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-09-19 21:41:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2013-09-19 21:38:49 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-515967899-329068152-725345543-1003.job
[2013-09-19 21:38:16 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-09-15 22:38:03 | 000,114,176 | ---- | M] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-09-11 21:07:49 | 000,745,328 | ---- | M] () -- C:\Documents and Settings\User\Moje dokumenty\ZipOpenerSetup.exe
[2013-09-08 10:57:59 | 000,242,504 | ---- | M] (BitDefender) -- C:\WINDOWS\System32\drivers\avchv.sys
[2013-09-07 16:21:50 | 000,633,344 | ---- | M] (BitDefender) -- C:\WINDOWS\System32\drivers\avc3.sys
[2013-09-07 16:17:54 | 000,002,842 | ---- | M] () -- C:\WINDOWS\System32\lic2.xml8970
[2013-09-07 16:17:13 | 000,164,493 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\1378563118.bdinstall.bin
[2013-09-07 08:44:38 | 000,043,148 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\1378536086.bdinstall.bin
[2013-09-07 08:41:25 | 000,022,307 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\1378536070.bdinstall.bin
[2013-09-05 19:31:03 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013-09-05 17:58:23 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-515967899-329068152-725345543-1003.job
[2013-08-31 19:57:24 | 023,732,069 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\cce_2.5.242177.201_x32.zip
[2013-08-30 22:36:51 | 000,201,872 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll
[2013-08-30 22:36:29 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll
[2013-08-30 22:36:29 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll
[2013-08-30 21:46:13 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013-08-30 21:46:13 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013-08-23 22:25:58 | 000,000,008 | RH-- | M] () -- C:\Documents and Settings\User\hwid
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-09-11 21:43:06 | 000,000,418 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2013-09-11 21:07:37 | 000,745,328 | ---- | C] () -- C:\Documents and Settings\User\Moje dokumenty\ZipOpenerSetup.exe
[2013-09-07 16:17:13 | 000,164,493 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\1378563118.bdinstall.bin
[2013-09-07 16:15:58 | 000,002,842 | ---- | C] () -- C:\WINDOWS\System32\lic2.xml8970
[2013-09-07 08:44:38 | 000,043,148 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\1378536086.bdinstall.bin
[2013-09-07 08:41:25 | 000,022,307 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\1378536070.bdinstall.bin
[2013-08-31 19:57:00 | 023,732,069 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\cce_2.5.242177.201_x32.zip
[2013-08-30 22:40:24 | 000,000,276 | ---- | C] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-515967899-329068152-725345543-1003.job
[2013-08-30 22:40:23 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-515967899-329068152-725345543-1003.job
[2013-08-30 21:57:05 | 000,001,830 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Apple Software Update.lnk
[2013-08-23 22:25:58 | 000,000,008 | RH-- | C] () -- C:\Documents and Settings\User\hwid
[2013-08-23 22:25:07 | 000,026,624 | ---- | C] () -- C:\WINDOWS\GetIe.dll
[2013-08-15 22:48:09 | 000,040,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\EUBKMON.sys
[2013-08-04 00:36:32 | 000,211,556 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\1375569113.bdinstall.bin
[2013-06-21 21:35:10 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\DiagFunc.dll
[2013-06-21 21:35:10 | 000,001,191 | ---- | C] () -- C:\WINDOWS\System32\W32N55.INI
[2013-06-21 21:35:10 | 000,000,480 | ---- | C] () -- C:\WINDOWS\System32\DiagFunc.ini
[2013-06-21 21:34:31 | 000,013,931 | ---- | C] () -- C:\WINDOWS\System32\RaCoInst.dat
[2013-06-21 21:06:38 | 000,025,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2013-05-12 22:04:22 | 000,000,100 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft.SqlServer.Compact.400.32.bc
[2013-05-02 22:34:25 | 000,072,910 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\1367526563.bdinstall.bin
[2013-05-02 22:26:13 | 000,043,488 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\1367523433.bdinstall.bin
[2013-05-02 21:37:11 | 000,022,280 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\1367523421.bdinstall.bin
[2013-05-02 07:32:07 | 000,172,184 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\1367472317.bdinstall.bin
[2012-08-01 23:27:28 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\0x0304A000.sfl
[2012-05-27 11:55:57 | 000,617,318 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-515967899-329068152-725345543-1003-0.dat
[2012-05-27 11:55:55 | 000,311,134 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2012-02-16 17:59:20 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2010-12-06 22:17:40 | 000,444,283 | ---- | C] () -- C:\Program Files\Common Files\WinPcapNmap.exe
[2010-04-21 19:50:16 | 000,000,022 | ---- | C] () -- C:\Documents and Settings\User\CUSTOM.DICCUSTOM.DIC
[2009-04-17 11:51:28 | 000,000,694 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2009-04-17 11:41:47 | 000,000,410 | RHS- | C] () -- C:\Documents and Settings\User\ntuser.pol
[2008-08-18 16:33:31 | 000,114,176 | ---- | C] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004-03-07 09:30:24 | 000,000,016 | ---- | C] () -- C:\Documents and Settings\User\Dane aplikacji\QNVW601P.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-03-04 19:54:20 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2009-03-03 01:11:18 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 22:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-08-28 22:19:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\bdch
[2012-11-18 21:11:38 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2013-06-22 08:45:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CPA_VA
[2008-10-24 20:51:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations
[2008-06-04 15:03:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2013-08-14 22:56:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Fighters
[2012-06-04 21:03:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Freemake
[2010-01-30 19:35:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2013-06-21 21:34:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gigabyte Driver
[2013-08-04 01:44:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\HitmanPro
[2013-08-15 11:17:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\install_clap
[2013-08-25 00:47:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MetaQuotes
[2010-12-30 20:13:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MSScanAppDataDir
[2010-08-05 17:37:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaInstallerCache
[2010-08-05 18:06:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OviInstallerCache
[2013-06-22 16:58:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Panda Security
[2008-10-24 20:52:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2011-06-24 17:40:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PDVD
[2011-02-11 23:18:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Privacyware
[2011-05-06 18:36:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\QFX Software
[2010-03-09 20:18:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Soulseek
[2010-12-30 20:15:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SSScanAppDataDir
[2012-02-19 19:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2010-09-08 21:38:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TP-LINK Driver
[2013-08-15 10:57:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software
[2009-01-08 23:24:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WinZip
[2009-03-26 19:26:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\x-formation
[2013-08-15 11:11:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2013-08-15 11:11:31 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2013-08-15 11:11:31 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2012-07-23 22:26:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\pandasecuritytb
[2013-05-02 07:35:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\QuickScan
[2010-07-13 16:33:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Softland
[2013-08-18 12:21:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\TuneUp Software
[2013-09-11 18:51:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\BitTorrent
[2013-06-22 08:30:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\cspa
[2013-09-19 18:59:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\DeepBurner
[2008-06-20 22:19:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Desktop Software
[2010-02-01 21:47:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\DeviceDoctorSoftware
[2011-02-11 18:48:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Downloaded Installations
[2013-08-14 22:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Fighters
[2009-11-18 18:57:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\ImageBadger
[2009-03-15 17:51:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\INTERsoft
[2010-11-02 21:05:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\IrfanView
[2009-03-17 11:24:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Kabe
[2010-11-12 19:13:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\LockHunter
[2013-01-01 21:42:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\NapiProjekt
[2010-09-01 18:34:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Nokia
[2008-10-24 20:52:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\PC Suite
[2013-05-04 12:20:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\poclbm
[2011-05-06 18:36:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\QFX Software
[2013-05-02 07:26:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\QuickScan
[2008-06-20 23:32:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\SecondLife
[2010-07-13 16:33:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Softland
[2013-08-15 10:57:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\TuneUp Software
[2010-02-02 20:44:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Uniblue
[2010-12-06 22:19:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\VDownloader
[2009-04-28 21:46:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\VoipDiscount
[2010-02-01 21:52:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\WinBatch
[2011-04-12 22:40:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\XMedia Recode
[2011-06-20 23:55:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\xrecode2
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 142 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:587EB586
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:905844AA
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C43ED645

< End of report >