OTL logfile created on: 2014-01-02 20:35:28 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\Kasia\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,87 Gb Total Physical Memory | 0,30 Gb Available Physical Memory | 16,23% Memory free
3,72 Gb Paging File | 1,70 Gb Available in Paging File | 45,75% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,25 Gb Total Space | 3,01 Gb Free Space | 8,08% Space Free | Partition Type: NTFS
Drive D: | 111,80 Gb Total Space | 41,15 Gb Free Space | 36,81% Space Free | Partition Type: NTFS
 
Computer Name: KOZERA-FADFCE0D | User Name: Kasia | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-01-02 20:34:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kasia\Pulpit\OTL.exe
PRC - [2014-01-02 17:35:29 | 017,682,224 | ---- | M] () -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Temp\dlm362.tmp\mobogenie1204.exe
PRC - [2014-01-02 17:33:50 | 000,923,784 | ---- | M] (CNET Download.com) -- C:\Documents and Settings\Kasia\Pulpit\cbsidlm-cbsi145-USB_Info-ORG-10371115.exe
PRC - [2013-12-20 00:52:09 | 005,625,624 | ---- | M] (SUPERAntiSpyware) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2013-12-13 08:34:01 | 004,047,424 | ---- | M] (GG Network S.A.) -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\GG\Application\gghub.exe
PRC - [2013-12-13 08:34:00 | 000,132,672 | ---- | M] (GG Network S.A.) -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\GG\Application\ggapp.exe
PRC - [2013-12-09 09:34:03 | 002,471,448 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
PRC - [2013-12-09 09:34:03 | 001,771,544 | ---- | M] (AVG Secure Search) -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe
PRC - [2013-12-09 09:34:02 | 000,159,768 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\loggingserver.exe
PRC - [2013-12-07 02:25:40 | 000,066,840 | ---- | M] () -- C:\Program Files\outobox\updateoutobox.exe
PRC - [2013-11-02 08:30:14 | 000,131,848 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\ArcaUpdate\update.exe
PRC - [2013-10-25 12:07:24 | 002,151,200 | ---- | M] (IObit) -- C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
PRC - [2013-10-10 23:54:44 | 000,120,088 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe
PRC - [2013-09-19 23:45:18 | 001,953,320 | ---- | M] (MyPCBackup.com) -- C:\Program Files\MyPC Backup\MyPC Backup.exe
PRC - [2013-07-05 06:37:30 | 000,879,456 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2013-05-15 15:07:08 | 000,529,160 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\ArcaVir\AVMenu.exe
PRC - [2013-04-17 14:15:42 | 000,561,928 | ---- | M] () -- C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe
PRC - [2013-02-13 03:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2012-11-28 16:45:06 | 000,152,784 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe
PRC - [2012-09-06 14:11:50 | 000,129,648 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\Common\ArcaTasksService.exe
PRC - [2012-08-03 22:27:48 | 000,161,776 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2012-05-18 13:47:00 | 002,370,448 | ---- | M] (WIBU-SYSTEMS AG) -- C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe
PRC - [2012-02-08 15:54:20 | 000,186,960 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\ArcaTools\ArcaBackup\ArcaBackupService.exe
PRC - [2012-01-09 14:38:18 | 000,141,904 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\Common\ArcaConfSV.exe
PRC - [2011-11-14 14:45:18 | 000,049,152 | ---- | M] (TRACEBoard) -- C:\Program Files\MultitablicaBoard\TRACEBoardSrv.exe
PRC - [2009-12-19 23:00:00 | 006,095,504 | ---- | M] (MySQL AB) -- C:\xampp\mysql\bin\mysqld.exe
PRC - [2009-12-19 23:00:00 | 000,029,416 | ---- | M] (Apache Software Foundation) -- C:\xampp\apache\bin\httpd.exe
PRC - [2009-07-01 17:37:06 | 000,037,888 | ---- | M] () -- C:\Program Files\Winamp\winampa.exe
PRC - [2008-04-15 13:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008-04-15 13:00:00 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winmine.exe
PRC - [2006-09-17 12:23:33 | 000,923,136 | ---- | M] () -- C:\Program Files\WinRAR\WinRAR.exe
PRC - [2004-01-26 10:38:38 | 000,866,816 | ---- | M] (THOMSON Telecom Belgium) -- C:\Program Files\Thomson\SpeedTouch USB\dragdiag.exe
PRC - [2003-10-16 18:07:12 | 000,053,248 | ---- | M] (France Télécom R&D) -- C:\Program Files\Neostrada TP\TaskBarIcon.exe
PRC - [2003-10-16 18:07:10 | 000,024,576 | ---- | M] () -- C:\Program Files\Neostrada TP\CnxMon.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-01-02 17:38:59 | 000,002,560 | ---- | M] () -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Temp\nsg385.tmp\BgWorker.dll
MOD - [2014-01-02 17:38:57 | 000,004,608 | ---- | M] () -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Temp\nsg385.tmp\SkinBtn.dll
MOD - [2014-01-02 17:38:56 | 000,011,264 | ---- | M] () -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Temp\nsg385.tmp\System.dll
MOD - [2014-01-02 17:35:29 | 017,682,224 | ---- | M] () -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Temp\dlm362.tmp\mobogenie1204.exe
MOD - [2013-12-25 08:21:11 | 000,208,896 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.resources\2.0.0.0_pl_b77a5c561934e089\System.resources.dll
MOD - [2013-12-25 08:21:04 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_pl_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll
MOD - [2013-12-25 08:20:52 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2013-12-13 08:34:03 | 003,006,528 | ---- | M] () -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\GG\Application\xulrunner\mozjs.dll
MOD - [2013-12-11 12:27:31 | 016,242,056 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
MOD - [2013-12-09 09:34:04 | 000,519,704 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\log4cplusU.dll
MOD - [2013-12-09 09:34:03 | 002,471,448 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
MOD - [2013-12-09 09:34:02 | 000,159,768 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\loggingserver.exe
MOD - [2013-12-07 02:25:40 | 000,066,840 | ---- | M] () -- C:\Program Files\outobox\updateoutobox.exe
MOD - [2013-10-09 10:10:44 | 000,485,376 | ---- | M] () -- C:\Program Files\Movies Toolbar\Datamngr\apcrtldr.dll
MOD - [2013-10-06 14:27:24 | 000,857,600 | ---- | M] () -- c:\Program Files\Sk-Enhancer\psupport.dll
MOD - [2013-09-19 23:37:30 | 000,012,288 | ---- | M] () -- C:\Program Files\MyPC Backup\GetText.dll
MOD - [2013-09-19 23:32:28 | 000,904,704 | ---- | M] () -- C:\Program Files\MyPC Backup\x86\System.Data.SQLite.dll
MOD - [2013-09-03 14:54:22 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL
MOD - [2013-07-05 06:38:18 | 000,312,832 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstoggdec.dll
MOD - [2013-07-05 06:38:18 | 000,101,888 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwebmdec.dll
MOD - [2013-07-05 06:38:18 | 000,073,728 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwavparse.dll
MOD - [2013-07-05 06:38:18 | 000,057,344 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstautodetect.dll
MOD - [2013-07-05 06:38:18 | 000,038,912 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwaveform.dll
MOD - [2013-07-05 06:38:17 | 000,158,208 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
MOD - [2013-07-05 06:38:17 | 000,096,256 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstcoreplugins.dll
MOD - [2013-07-05 06:38:17 | 000,067,072 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdirectsound.dll
MOD - [2013-07-05 06:38:17 | 000,062,976 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdecodebin2.dll
MOD - [2013-07-05 06:38:16 | 000,835,584 | ---- | M] () -- C:\Program Files\Opera\gstreamer\gstreamer.dll
MOD - [2013-07-05 06:38:16 | 000,094,208 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioresample.dll
MOD - [2013-07-05 06:38:16 | 000,093,696 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioconvert.dll
MOD - [2013-04-17 14:15:42 | 000,561,928 | ---- | M] () -- C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe
MOD - [2013-02-13 03:38:06 | 000,100,688 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2013-02-13 03:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2013-01-24 12:25:02 | 001,044,480 | ---- | M] () -- c:\Program Files\WebSearch\sprotector.dll
MOD - [2012-06-17 21:12:10 | 001,406,976 | ---- | M] () -- C:\Program Files\AC3Filter\ac3filter.ax
MOD - [2012-05-21 17:05:24 | 003,449,856 | ---- | M] () -- C:\Program Files\ffdshow\ffdshow.ax
MOD - [2012-05-12 22:42:16 | 001,272,320 | ---- | M] () -- C:\Program Files\AC3Filter\avcodec-53.dll
MOD - [2012-05-12 22:42:16 | 000,146,432 | ---- | M] () -- C:\Program Files\AC3Filter\avutil-51.dll
MOD - [2012-05-09 15:17:16 | 000,195,152 | ---- | M] () -- C:\Program Files\ArcaBit\ArcaVir\AVShell.dll
MOD - [2012-02-13 09:49:12 | 000,627,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\408e637346ef628a3f54fb1b9b83ac9f\System.Transactions.ni.dll
MOD - [2012-02-13 09:49:11 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\1f61bccb700d687775cf778dd77752e9\System.ServiceProcess.ni.dll
MOD - [2012-02-13 09:48:58 | 000,627,712 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\8a7d0bd0057a8ed38291d5662248f7a1\System.EnterpriseServices.ni.dll
MOD - [2012-02-13 09:47:41 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\7c743462baccf29b3567b0e3ec9ac134\System.Configuration.ni.dll
MOD - [2012-02-12 20:08:47 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\5913d3f81e77194ec833991b1047a532\System.Xml.ni.dll
MOD - [2012-02-12 20:08:40 | 012,430,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d2ea8d76f015817db1607075812b555f\System.Windows.Forms.ni.dll
MOD - [2012-02-12 20:08:25 | 001,587,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\abb2ac7e08bee026f857d8fa36f9fe6f\System.Drawing.ni.dll
MOD - [2012-02-12 20:08:08 | 006,616,576 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\694c07365e0fd6bba0bc304d4d2404a7\System.Data.ni.dll
MOD - [2012-02-12 20:06:59 | 007,868,416 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\3de5bd01124463d7862bd173af90bc83\System.ni.dll
MOD - [2012-02-12 20:06:49 | 011,486,720 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
MOD - [2011-10-13 18:13:08 | 000,032,768 | ---- | M] () -- C:\Program Files\MultitablicaBoard\TraceBoard.dll
MOD - [2011-07-22 18:27:02 | 000,053,248 | ---- | M] () -- C:\WINDOWS\system32\TRACEPort.dll
MOD - [2011-03-16 23:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009-10-16 20:59:13 | 002,933,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2009-10-16 20:59:02 | 000,261,632 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2009-07-01 17:37:06 | 000,037,888 | ---- | M] () -- C:\Program Files\Winamp\winampa.exe
MOD - [2008-04-15 13:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2007-03-02 10:44:34 | 000,073,728 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
MOD - [2006-09-17 12:23:33 | 000,923,136 | ---- | M] () -- C:\Program Files\WinRAR\WinRAR.exe
MOD - [2006-09-14 00:20:24 | 000,126,464 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2004-06-21 14:58:22 | 000,860,160 | ---- | M] () -- C:\Program Files\Neostrada TP\ResourceStyle.dll
MOD - [2003-10-16 18:07:10 | 000,024,576 | ---- | M] () -- C:\Program Files\Neostrada TP\CnxMon.exe
MOD - [2002-10-06 18:44:52 | 000,282,624 | ---- | M] () -- C:\WINDOWS\system32\SubTitDS.ax
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Movies Toolbar\Datamngr\DatamngrCoordinator.exe -- (DatamngrCoordinator)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013-12-11 12:27:32 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-12-09 09:34:03 | 001,771,544 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe -- (vToolbarUpdater17.2.0)
SRV - [2013-12-07 02:25:40 | 000,066,840 | ---- | M] () [Auto | Running] -- C:\Program Files\outobox\updateoutobox.exe -- (Update outobox)
SRV - [2013-11-02 08:30:14 | 000,131,848 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\ArcaUpdate\update.exe -- (AVUpdate)
SRV - [2013-10-25 12:07:24 | 002,151,200 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
SRV - [2013-10-10 23:54:44 | 000,120,088 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)
SRV - [2013-09-19 23:45:18 | 000,038,440 | ---- | M] (Just Develop It) [Auto | Stopped] -- C:\Program Files\MyPC Backup\BackupStack.exe -- (BackupStack)
SRV - [2013-07-25 07:52:52 | 000,162,672 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-04-17 14:15:42 | 000,561,928 | ---- | M] () [Auto | Running] -- C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe -- (ArcaRemoteService)
SRV - [2012-11-28 16:45:06 | 000,152,784 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe -- (ABMainSV)
SRV - [2012-09-06 14:11:50 | 000,129,648 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\Common\ArcaTasksService.exe -- (AVTasks2)
SRV - [2012-08-20 20:02:48 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\srvany.exe -- (KMService)
SRV - [2012-08-03 22:27:48 | 000,161,776 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2012-05-18 13:47:00 | 002,370,448 | ---- | M] (WIBU-SYSTEMS AG) [Auto | Running] -- C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe -- (CodeMeter.exe)
SRV - [2012-02-08 15:54:20 | 000,186,960 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\ArcaTools\ArcaBackup\ArcaBackupService.exe -- (AVBackup)
SRV - [2012-01-09 14:38:18 | 000,141,904 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\Common\ArcaConfSV.exe -- (ABConfSV)
SRV - [2011-11-14 14:45:18 | 000,049,152 | ---- | M] (TRACEBoard) [Auto | Running] -- C:\Program Files\MultitablicaBoard\TRACEBoardSrv.exe -- (MultitablicaBoard)
SRV - [2011-06-12 10:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2009-12-19 23:00:00 | 006,095,504 | ---- | M] (MySQL AB) [Auto | Running] -- C:\xampp\mysql\bin\mysqld.exe -- (MySQL)
SRV - [2009-12-19 23:00:00 | 000,029,416 | ---- | M] (Apache Software Foundation) [Auto | Running] -- C:\xampp\apache\bin\httpd.exe -- (Apache2.2)
SRV - [2007-08-09 08:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] -- SYSTEM32\DRIVERS\PTIUSBF.SYS -- (ptiusbf)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\massfilter.sys -- (massfilter)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- G:\AIDA64 Extreme Edition230\App\AIDA64Extreme\kerneld.x32 -- (AIDA64Driver)
DRV - [2013-12-17 10:27:54 | 000,208,600 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2013-12-17 10:26:54 | 001,987,840 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2013-12-17 10:25:21 | 000,406,104 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2013-12-17 10:18:44 | 005,444,680 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2013-12-17 10:18:34 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2013-12-17 10:18:31 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2013-11-11 10:02:47 | 000,037,664 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2012-08-06 23:10:34 | 000,039,536 | ---- | M] (ArcaBit) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\abndis.sys -- (ABndisMP)
DRV - [2012-08-06 23:10:34 | 000,039,536 | ---- | M] (ArcaBit) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\abndis.sys -- (ABndis)
DRV - [2011-09-30 11:29:36 | 000,062,544 | ---- | M] (ArcaBit) [File_System | On_Demand | Running] -- C:\Program Files\ArcaBit\ArcaVir\ABFLT.sys -- (ABFLT)
DRV - [2011-07-22 17:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011-07-12 22:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010-10-26 14:04:30 | 000,051,280 | ---- | M] (ArcaBit) [Kernel | System | Running] -- C:\Program Files\ArcaBit\ArcaVir\ABTDI.sys -- (ABTDI)
DRV - [2007-09-05 09:33:02 | 002,418,688 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2007-05-02 19:00:58 | 000,546,976 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2006-06-29 06:13:08 | 001,160,320 | R--- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2006-06-18 23:51:32 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2003-12-08 10:53:48 | 000,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcan5wn.sys -- (alcan5wn)
DRV - [2003-12-08 10:53:46 | 000,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchbomb.info/?pid=499&r=2013/11/23&hid=7829060231762345277&lg=EN&cc=PL&unqvl=42
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.searchbomb.info/?l=1&q={searchTerms}&pid=499&r=2013/11/23&hid=7829060231762345277&lg=EN&cc=PL&unqvl=42
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchbomb.info/?pid=499&r=2013/11/23&hid=7829060231762345277&lg=EN&cc=PL&unqvl=42
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = 
IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Neostrada TP\SearchPageURL.dll ()
IE - HKCU\..\SearchScopes,DefaultScope = {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://supertoolbar.ask.com/redirect?client=ie&tb=VD&o=14778&src=crm&q={searchTerms}&locale=en_US
IE - HKCU\..\SearchScopes\{73ccfd25-abe2-4bdf-ac5d-28a470a4d234}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={3774CAFC-51CB-11E1-B211-001D921D8C85}
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={10AAA403-162D-4D85-A047-219B46CE3147}&mid=e939065c686347d099add154d4b6c95c-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=xn011&pr=sa&d=2012-11-24 19:00:32&v=15.3.0.11&pid=avg&sg=0&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = http://home.myplaycity.com/results.php?category=web&s={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033
IE - HKCU\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.searchbomb.info/?l=1&q={searchTerms}&pid=499&r=2013/11/23&hid=7829060231762345277&lg=EN&cc=PL&unqvl=42
IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://www.startsearcher.com/?q={searchTerms}&src=IE
IE - HKCU\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename,S: S", "WebSearch"
FF - prefs.js..browser.search.defaulturl: "http://websearch.searchbomb.info/?pid=499&r=2013/11/23&hid=7829060231762345277&lg=EN&cc=PL&unqvl=42&l=1&q="
FF - prefs.js..browser.search.order.1: "WebSearch"
FF - prefs.js..browser.search.order.1,S: S", "WebSearch"
FF - prefs.js..browser.search.selectedEngine,S: S", "WebSearch"
FF - prefs.js..browser.startup.homepage: "http://websearch.searchbomb.info/?pid=499&r=2013/11/23&hid=7829060231762345277&lg=EN&cc=PL&unqvl=42"
FF - prefs.js..browser.search.defaultenginename: "Yahoo!"
FF - prefs.js..browser.search.selectedEngine: "Yahoo!"
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=198484&ilc=12&p="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\17.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Plus Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\avg@toolbar: C:\Documents and Settings\All Users\Dane aplikacji\AVG Secure Search\FireFoxExt\17.2.0.38 [2013-12-09 09:36:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-07-25 11:02:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wvoiwzg@bcpcgh.com: C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions [2013-12-27 08:27:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\ssupqipn@ekong-.net: C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions [2013-12-27 08:27:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\qeoyu@eeyae.com: C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions [2013-12-27 08:27:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-08-03 14:54:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-12-22 09:29:25 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\wvoiwzg@bcpcgh.com: C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions [2013-12-27 08:27:32 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\ssupqipn@ekong-.net: C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions [2013-12-27 08:27:32 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\qeoyu@eeyae.com: C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions [2013-12-27 08:27:32 | 000,000,000 | ---D | M]
 
[2009-10-09 13:58:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Extensions
[2009-10-09 13:58:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Extensions\MediaCoder-Setup-Wizard
[2013-12-27 08:27:32 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions
[2010-05-04 16:40:49 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2013-10-19 18:56:25 | 000,000,000 | ---D | M] (New tab) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions\{2FD73609-F02D-3849-D765-5F8F93ECC348}
[2013-10-19 18:56:31 | 000,000,000 | ---D | M] (Movies Toolbar (Dist. by Bandoo Media, Inc.)) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}
[2013-12-17 09:47:41 | 000,000,000 | ---D | M] (Start Page) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}
[2010-05-06 04:46:19 | 000,000,000 | ---D | M] ("BitDefender QuickScanner") -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2012-10-11 08:49:17 | 000,000,000 | ---D | M] (SweetPacks Toolbar for Firefox) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2012-11-24 19:30:23 | 000,000,000 | ---D | M] (Babylon) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions\ffxtlbr@babylon.com
[2013-11-23 23:00:07 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\extensions\staged
[2013-10-19 18:56:27 | 000,002,662 | ---- | M] () -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\searchplugins\Ask.xml
[2012-10-25 07:34:54 | 000,001,999 | ---- | M] () -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\searchplugins\myplaycity.xml
[2012-10-11 08:49:17 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\searchplugins\sweetim.xml
[2013-11-23 22:59:32 | 000,000,643 | ---- | M] () -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\searchplugins\WebSearch.xml
[2009-08-19 13:37:52 | 000,001,196 | ---- | M] () -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\searchplugins\winamp-search.xml
[2013-12-17 09:47:26 | 000,000,905 | ---- | M] () -- C:\Documents and Settings\Kasia\Dane aplikacji\Mozilla\Firefox\Profiles\uacp1tdc.default\searchplugins\yahoo_ff.xml
[2013-12-17 13:55:47 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-04-23 14:56:59 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-09-16 19:02:12 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-10-18 20:43:27 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010-12-26 08:02:47 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011-11-11 06:18:01 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2013-11-02 08:21:24 | 000,000,000 | ---D | M] (ArcaBit Ext.) -- C:\Program Files\Mozilla Firefox\extensions\arcabit@www.arcabit.pl
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\KASIA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\UACP1TDC.DEFAULT\EXTENSIONS\{0B38152B-1B20-484D-A11F-5E04A9B0661F}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\KASIA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\UACP1TDC.DEFAULT\EXTENSIONS\ADSREMOVAL@ADSREMOVAL.NET
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\KASIA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\UACP1TDC.DEFAULT\EXTENSIONS\ASCSURFINGPROTECTION@IOBIT.COM
File not found (No name found) -- C:\PROGRAM FILES\IOBIT APPS TOOLBAR\FF
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013-10-19 18:56:27 | 000,002,662 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Ask.xml
[2013-12-09 09:37:15 | 000,003,730 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
[2012-11-24 19:30:14 | 000,002,313 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gopiebciinggaeafpgeefbljcfengckm\1.0\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jnccbhbhhbimbeelecajkeefloiofgad\1.0\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jodgojfofbhckamhhobclpmcidcofhcg\2.19\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gopiebciinggaeafpgeefbljcfengckm\1.0\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jnccbhbhhbimbeelecajkeefloiofgad\1.0\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jodgojfofbhckamhhobclpmcidcofhcg\2.19\
CHR - Extension: No name found = C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
 
O1 HOSTS File: ([2008-04-15 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {82EA3E77-7BD2-4744-A8F2-670770767EC5} - No CLSID value found.
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.2.0.38\AVG Secure Search_toolbar.dll (AVG Secure Search)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.2.0.38\AVG Secure Search_toolbar.dll (AVG Secure Search)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [ArcaClean] C:\Program Files\ArcaBit\ArcaVir\ArcaClean.exe (ArcaBit)
O4 - HKLM..\Run: [AvMenu] C:\Program Files\ArcaBit\ArcaVir\AVMenu.exe (ArcaBit)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium)
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe ()
O4 - HKLM..\Run: [WooCnxMon] C:\Program Files\Neostrada TP\CnxMon.exe ()
O4 - HKLM..\Run: [WOOTASKBARICON] C:\Program Files\Neostrada TP\TaskBarIcon.exe (France Télécom R&D)
O4 - HKCU..\Run: [Adobe Reader Synchronizer] C:\Program Files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [AVG-Secure-Search-Update_JUNE2013_TB] C:\Program Files\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe (AVG Secure Search)
O4 - HKCU..\Run: [GG] C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\GG\Application\gghub.exe (GG Network S.A.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware)
O4 - HKLM..\RunOnce: [B Register C:\Program Files\DivX\DivX Transcode Engine\plugins\mc_demux_mp2_ds.ax] "C:\WINDOWS\system32\rundll32.exe" "C:\Program Files\DivX\DivX Transcode Engine\plugins\mc_demux_mp2_ds.ax",DllRegisterServer File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\Kasia\Menu Start\Programy\Autostart\MyPC Backup.lnk = C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll (ArcaBit sp. z o.o)
O9 - Extra 'Tools' menuitem : ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll (ArcaBit sp. z o.o)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O16 - DPF: {E99D3E39-5D92-4360-BA86-2C563B3CFFEB} https://gimnazjum7.bip.um.warszawa.pl/UMBIP/CMS/WebAuthor/Client/PlaceholderControlSupport/nrdhtml.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{638F59EB-050F-45C7-93E1-02CA3018914D}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.2.0\ViProtocol.dll (AVG Secure Search)
O20 - AppInit_DLLs: (c:\progra~1\movies toolbar\datamngr\mgrldr.dll) -  File not found
O20 - AppInit_DLLs: (c:\docume~1\alluse~1\daneap~1\wincert\win32cert.dll) - c:\Documents and Settings\All Users\Dane aplikacji\Wincert\win32cert.dll ()
O20 - AppInit_DLLs: (c:\progra~1\movies c:\progra~1\sk-enhancer\psupport.dll) -  File not found
O20 - AppInit_DLLs: (c:\progra~1\websearch\sprotector.dll) - c:\Program Files\WebSearch\sprotector.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O27 - HKLM IFEO\bitguard.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\bprotect.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\browsemngr.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\browserdefender.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\browsermngr.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\browserprotect.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\bundlesweetimsetup.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\cltmngsvc.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\delta babylon.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\delta tb.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\delta2.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\deltainstaller.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\deltasetup.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\deltatb.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\deltatb_2501-c733154b.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\iminentsetup.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\rjatydimofu.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\sweetimsetup.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\tbdelta.exetoolbar783881609.exe: Debugger - tasklist.exe File not found
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-02-14 18:29:22 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{04559cb8-b98f-11de-aaed-001d921d8c85}\Shell - "" = AutoRun
O33 - MountPoints2\{04559cb8-b98f-11de-aaed-001d921d8c85}\Shell\AutoRun\command - "" = G:\setup.exe AUTORUN=1
O33 - MountPoints2\{71b4f0c4-bbfb-11de-aaf7-001d921d8c85}\Shell - "" = AutoRun
O33 - MountPoints2\{71b4f0c4-bbfb-11de-aaf7-001d921d8c85}\Shell\AutoRun\command - "" = G:\Install.exe
O33 - MountPoints2\{ba84cddb-c6dd-11de-ab17-001d921d8c85}\Shell\AutoRun\command - "" = G:\AutoTransfer.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: x64 - (c:\program files\movies toolbar\datamngr\x64\apcrtldr.dll) -  File not found
O36 - AppCertDlls: x86 - (C:\Program Files\Movies Toolbar\Datamngr\apcrtldr.dll) - C:\Program Files\Movies Toolbar\Datamngr\apcrtldr.dll ()
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-01-02 20:43:59 | 001,695,924 | ---- | C] (El Desaparecido - SosVirus.net - UsbFix.net) -- C:\Documents and Settings\Kasia\Pulpit\UsbFix.exe
[2014-01-02 20:34:28 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Kasia\Pulpit\OTL.exe
[2014-01-02 19:20:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Active@ File Recovery
[2014-01-02 19:20:44 | 000,000,000 | ---D | C] -- C:\Program Files\LSoft Technologies
[2014-01-02 19:18:19 | 012,508,392 | ---- | C] (LSoft Technologies Inc                                      ) -- C:\Documents and Settings\Kasia\Pulpit\filerecovery-demo.exe
[2014-01-02 17:39:04 | 000,000,000 | ---D | C] -- C:\Program Files\Mobogenie
[2014-01-02 17:38:11 | 000,000,000 | ---D | C] -- C:\Program Files\outobox
[2014-01-02 17:36:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Menu Start\Programy\MyPC Backup
[2014-01-02 17:36:28 | 000,000,000 | ---D | C] -- C:\Program Files\MyPC Backup
[2014-01-02 17:36:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\Setup1.exe
[2014-01-02 17:35:59 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\ST6UNST.EXE
[2014-01-02 17:33:49 | 000,923,784 | ---- | C] (CNET Download.com) -- C:\Documents and Settings\Kasia\Pulpit\cbsidlm-cbsi145-USB_Info-ORG-10371115.exe
[2014-01-02 17:21:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Pulpit\ChipGenius_v4_00_0028_stable
[2014-01-02 14:46:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Pulpit\tomek
[2014-01-02 14:24:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Pulpit\CheckUDisk_v54
[2014-01-02 14:00:17 | 004,980,016 | ---- | C] (EaseUS                                                      ) -- C:\Documents and Settings\Kasia\Pulpit\drw_free.exe
[2014-01-02 12:35:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Dane aplikacji\SUPERAntiSpyware.com
[2014-01-02 12:34:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\SUPERAntiSpyware.com
[2014-01-02 12:34:59 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2014-01-02 12:26:21 | 029,249,704 | ---- | C] (SUPERAntiSpyware) -- C:\Documents and Settings\Kasia\Pulpit\SAS_443C7.EXE
[2013-12-31 16:09:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Pulpit\foto_poczta
[2013-12-29 12:55:37 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Kasia\GG dysk
[2013-12-27 13:08:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Moje dokumenty\promocja zdrowia
[2013-12-27 08:53:24 | 000,000,000 | ---D | C] -- C:\Program Files\xp-AntiSpy
[2013-12-27 08:53:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Menu Start\Programy\xp-AntiSpy
[2013-12-27 08:12:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\tasks\ImCleanDisabled
[2013-12-25 08:26:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WindowsPowerShell
[2013-12-25 08:25:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\winrm
[2013-12-25 08:25:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\GroupPolicy
[2013-12-25 08:25:31 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$968930Uinstall_KB968930$
[2013-12-25 08:22:37 | 000,014,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg2.dll
[2013-12-24 16:47:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Pulpit\KOLĘDY
[2013-12-17 13:51:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\tasks\TaskDisabled
[2013-12-17 13:51:27 | 000,024,384 | ---- | C] (IObit) -- C:\WINDOWS\System32\RegistryDefragBootTime.exe
[2013-12-17 10:50:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Dane aplikacji\IObit
[2013-12-17 10:28:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\sda
[2013-12-17 10:27:54 | 009,888,840 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtsUStoricon.dll
[2013-12-17 10:27:54 | 000,208,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtsUStor.sys
[2013-12-17 10:26:53 | 001,987,840 | ---- | C] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\drivers\athw.sys
[2013-12-17 10:25:22 | 000,102,104 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\RTNUninst32.dll
[2013-12-17 10:25:21 | 000,077,528 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\RtNicProp32.dll
[2013-12-17 10:18:56 | 000,359,016 | ---- | C] (Realtek Semiconductor Crop.) -- C:\WINDOWS\vncutil.exe
[2013-12-17 10:18:38 | 000,079,432 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoInstIIXP.dll
[2013-12-17 10:18:38 | 000,011,368 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoLDRXP.dll
[2013-12-17 10:18:37 | 000,129,640 | ---- | C] (Realtek Semiconductor) -- C:\WINDOWS\RtkAudioService.exe
[2013-12-17 10:18:34 | 001,395,800 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\Monfilt.sys
[2013-12-17 10:18:30 | 001,691,480 | ---- | C] (Creative) -- C:\WINDOWS\System32\drivers\Ambfilt.sys
[2013-12-17 10:03:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\LocalLow
[2013-12-17 09:47:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ProductData
[2013-12-17 09:47:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
[2013-12-17 09:47:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Spigot
[2013-12-17 09:47:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\IObit
[2013-12-17 09:47:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Dane aplikacji\IObit
[2013-12-17 09:46:46 | 000,000,000 | ---D | C] -- C:\Program Files\IObit
[2013-12-14 18:41:39 | 000,000,000 | ---D | C] -- C:\Program Files\Panda Security
[2013-12-04 22:18:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Pulpit\3a
[2009-02-18 17:22:11 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Kasia\Dane aplikacji\pcouffin.sys
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Documents and Settings\Kasia\Moje dokumenty\*.tmp files -> C:\Documents and Settings\Kasia\Moje dokumenty\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
File not found -- C:\Documents and Settings\Kasia\Pulpit\ Baccara - Yes Sir I Can Boogie
[2014-01-02 20:43:59 | 001,695,924 | ---- | M] (El Desaparecido - SosVirus.net - UsbFix.net) -- C:\Documents and Settings\Kasia\Pulpit\UsbFix.exe
[2014-01-02 20:35:00 | 000,000,510 | ---- | M] () -- C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task b2e71364-e879-4481-bea4-d25aaea68590.job
[2014-01-02 20:34:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kasia\Pulpit\OTL.exe
[2014-01-02 20:27:16 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014-01-02 19:20:01 | 012,508,392 | ---- | M] (LSoft Technologies Inc                                      ) -- C:\Documents and Settings\Kasia\Pulpit\filerecovery-demo.exe
[2014-01-02 18:43:05 | 000,257,876 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\s5.JPG
[2014-01-02 18:40:25 | 000,000,584 | R--- | M] () -- C:\Documents and Settings\Kasia\Pulpit\dump.dat
[2014-01-02 18:17:48 | 000,033,081 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\s4.JPG
[2014-01-02 17:39:58 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Setup1.exe
[2014-01-02 17:39:57 | 000,001,584 | ---- | M] () -- C:\WINDOWS\ST6UNST.000
[2014-01-02 17:39:56 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ST6UNST.EXE
[2014-01-02 17:36:38 | 000,000,752 | ---- | M] () -- C:\Documents and Settings\Kasia\Menu Start\Programy\Autostart\MyPC Backup.lnk
[2014-01-02 17:33:50 | 000,923,784 | ---- | M] (CNET Download.com) -- C:\Documents and Settings\Kasia\Pulpit\cbsidlm-cbsi145-USB_Info-ORG-10371115.exe
[2014-01-02 17:24:27 | 000,057,265 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\s3.JPG
[2014-01-02 17:21:15 | 000,201,167 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\ChipGenius_v4_00_0028_stable.rar
[2014-01-02 17:19:07 | 000,029,587 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\s2.JPG
[2014-01-02 17:18:15 | 000,000,000 | -H-- | M] () -- C:\Documents and Settings\Kasia\Moje dokumenty\Default.rdp
[2014-01-02 16:16:33 | 000,252,066 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\s1.JPG
[2014-01-02 14:33:45 | 000,294,227 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\Prezentacja Pitagoras.odp
[2014-01-02 14:23:29 | 000,072,257 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\CheckUDisk_v54.rar
[2014-01-02 14:00:37 | 004,980,016 | ---- | M] (EaseUS                                                      ) -- C:\Documents and Settings\Kasia\Pulpit\drw_free.exe
[2014-01-02 13:18:30 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014-01-02 13:04:43 | 000,000,000 | -H-- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\cm-lock
[2014-01-02 12:57:51 | 000,666,648 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\USB-Image-Tool(39717).exe
[2014-01-02 12:35:37 | 000,000,510 | ---- | M] () -- C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task d4c1f24a-47d9-4009-8a0e-e98a79415757.job
[2014-01-02 12:35:13 | 000,001,694 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\SUPERAntiSpyware Professional.lnk
[2014-01-02 12:32:04 | 029,249,704 | ---- | M] (SUPERAntiSpyware) -- C:\Documents and Settings\Kasia\Pulpit\SAS_443C7.EXE
[2013-12-31 17:17:45 | 000,183,808 | ---- | M] () -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-12-30 11:24:04 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013-12-30 09:44:43 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013-12-27 08:53:24 | 000,001,584 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\xp-AntiSpy.lnk
[2013-12-27 08:29:46 | 000,001,943 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013-12-23 11:17:19 | 000,379,647 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\Piernik.pdf
[2013-12-19 16:48:35 | 000,584,992 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2013-12-19 16:48:35 | 000,520,230 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013-12-19 16:48:35 | 000,121,054 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2013-12-19 16:48:35 | 000,096,304 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013-12-18 08:00:19 | 000,000,000 | ---- | M] () -- C:\asc_rdflag
[2013-12-17 12:45:02 | 000,430,679 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\index.pdf
[2013-12-17 10:27:55 | 009,888,840 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtsUStoricon.dll
[2013-12-17 10:27:54 | 000,208,600 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtsUStor.sys
[2013-12-17 10:26:54 | 001,987,840 | ---- | M] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\drivers\athw.sys
[2013-12-17 10:25:22 | 000,102,104 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\RTNUninst32.dll
[2013-12-17 10:25:22 | 000,077,528 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\RtNicProp32.dll
[2013-12-17 10:25:21 | 000,406,104 | ---- | M] (Realtek Semiconductor Corporation                           ) -- C:\WINDOWS\System32\drivers\Rtenicxp.sys
[2013-12-17 10:18:56 | 000,359,016 | ---- | M] (Realtek Semiconductor Crop.) -- C:\WINDOWS\vncutil.exe
[2013-12-17 10:18:56 | 000,084,584 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
[2013-12-17 10:18:55 | 000,891,976 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RTSndMgr.CPL
[2013-12-17 10:18:54 | 001,522,320 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlUpd.exe
[2013-12-17 10:18:53 | 009,721,960 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTLCPL.EXE
[2013-12-17 10:18:44 | 005,444,680 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys
[2013-12-17 10:18:38 | 000,129,640 | ---- | M] (Realtek Semiconductor) -- C:\WINDOWS\RtkAudioService.exe
[2013-12-17 10:18:38 | 000,079,432 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoInstIIXP.dll
[2013-12-17 10:18:38 | 000,011,368 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoLDRXP.dll
[2013-12-17 10:18:35 | 000,025,816 | ---- | M] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2013-12-17 10:18:34 | 002,180,712 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\MicCal.exe
[2013-12-17 10:18:34 | 001,395,800 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\Monfilt.sys
[2013-12-17 10:18:31 | 001,691,480 | ---- | M] (Creative) -- C:\WINDOWS\System32\drivers\Ambfilt.sys
[2013-12-17 10:18:30 | 002,815,592 | ---- | M] (RealTek Semicoductor Corp.) -- C:\WINDOWS\ALCWZRD.EXE
[2013-12-17 10:18:30 | 000,285,288 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\ALSNDMGR.CPL
[2013-12-17 10:18:29 | 000,064,104 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCMTR.EXE
[2013-12-16 09:54:58 | 000,425,408 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-12-11 12:27:32 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013-12-11 12:27:31 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013-12-06 21:03:58 | 000,558,810 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\tat_hb.pdf
[2013-12-06 21:02:30 | 000,671,543 | ---- | M] () -- C:\Documents and Settings\Kasia\Pulpit\konspekt_media_kreatywnosc.pdf
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Documents and Settings\Kasia\Moje dokumenty\*.tmp files -> C:\Documents and Settings\Kasia\Moje dokumenty\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
File not found -- C:\Documents and Settings\Kasia\Pulpit\ Baccara - Yes Sir I Can Boogie
[2014-01-02 18:42:52 | 000,257,876 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\s5.JPG
[2014-01-02 18:40:25 | 000,000,584 | R--- | C] () -- C:\Documents and Settings\Kasia\Pulpit\dump.dat
[2014-01-02 18:17:48 | 000,033,081 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\s4.JPG
[2014-01-02 17:39:55 | 007,220,465 | ---- | C] () -- C:\WINDOWS\USBInfo.CAB
[2014-01-02 17:39:55 | 000,001,584 | ---- | C] () -- C:\WINDOWS\ST6UNST.000
[2014-01-02 17:36:38 | 000,000,752 | ---- | C] () -- C:\Documents and Settings\Kasia\Menu Start\Programy\Autostart\MyPC Backup.lnk
[2014-01-02 17:24:27 | 000,057,265 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\s3.JPG
[2014-01-02 17:21:15 | 000,201,167 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\ChipGenius_v4_00_0028_stable.rar
[2014-01-02 17:19:07 | 000,029,587 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\s2.JPG
[2014-01-02 17:18:15 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\Kasia\Moje dokumenty\Default.rdp
[2014-01-02 16:16:33 | 000,252,066 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\s1.JPG
[2014-01-02 14:33:45 | 000,294,227 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\Prezentacja Pitagoras.odp
[2014-01-02 14:23:29 | 000,072,257 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\CheckUDisk_v54.rar
[2014-01-02 13:04:43 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\cm-lock
[2014-01-02 12:57:51 | 000,666,648 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\USB-Image-Tool(39717).exe
[2014-01-02 12:35:38 | 000,000,510 | ---- | C] () -- C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task b2e71364-e879-4481-bea4-d25aaea68590.job
[2014-01-02 12:35:36 | 000,000,510 | ---- | C] () -- C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task d4c1f24a-47d9-4009-8a0e-e98a79415757.job
[2014-01-02 12:35:13 | 000,001,694 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\SUPERAntiSpyware Professional.lnk
[2013-12-31 17:55:36 | 000,985,297 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\100_1304.jpg
[2013-12-31 17:54:03 | 001,744,614 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\100_1699.jpg
[2013-12-31 17:53:28 | 000,807,414 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\100_1629.jpg
[2013-12-27 08:53:24 | 000,001,584 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\xp-AntiSpy.lnk
[2013-12-25 08:18:52 | 000,001,943 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2013-12-23 11:17:19 | 000,379,647 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\Piernik.pdf
[2013-12-22 09:29:27 | 000,002,347 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader X.lnk
[2013-12-18 08:00:19 | 000,000,000 | ---- | C] () -- C:\asc_rdflag
[2013-12-17 12:45:02 | 000,430,679 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\index.pdf
[2013-12-17 10:18:35 | 000,025,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2013-12-06 21:03:58 | 000,558,810 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\tat_hb.pdf
[2013-12-06 21:02:30 | 000,671,543 | ---- | C] () -- C:\Documents and Settings\Kasia\Pulpit\konspekt_media_kreatywnosc.pdf
[2013-06-27 20:10:21 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys.sum
[2013-06-26 20:33:36 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSP.sys.sum
[2013-06-26 20:33:36 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSnx.sys.sum
[2013-01-29 17:26:10 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2013-01-29 17:26:10 | 000,000,000 | ---- | C] () -- C:\WINDOWS\popcreg.dat
[2013-01-22 21:44:02 | 012,812,288 | ---- | C] () -- C:\Documents and Settings\Kasia\s-1-5-21-1844237615-1935655697-1417001333-1004.rrr
[2012-11-11 17:43:50 | 000,000,221 | ---- | C] () -- C:\WINDOWS\NCLogConfig.ini
[2012-08-20 20:03:53 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\srvany.exe
[2012-06-30 18:58:16 | 000,001,146 | ---- | C] () -- C:\WINDOWS\aopr.ini
[2012-06-30 17:55:11 | 000,041,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\EUBKMON.sys
[2012-06-07 10:56:14 | 000,000,065 | ---- | C] () -- C:\WINDOWS\Kit.ini
[2012-02-16 07:55:37 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011-04-05 18:28:14 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\Kasia\.recently-used.xbel
[2009-06-24 19:17:13 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\FA56FE92F1.sys
[2009-06-24 19:17:12 | 000,003,140 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys
[2009-02-18 17:22:28 | 000,000,671 | ---- | C] () -- C:\Documents and Settings\Kasia\Dane aplikacji\vso_ts_preview.xml
[2009-02-18 17:22:11 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Kasia\Dane aplikacji\inst.exe
[2009-02-18 17:22:11 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Kasia\Dane aplikacji\pcouffin.cat
[2009-02-18 17:22:11 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Kasia\Dane aplikacji\pcouffin.inf
[2009-02-15 15:25:10 | 000,183,808 | ---- | C] () -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-02-14 18:44:19 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2013-10-25 01:52:42 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 11:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 13:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 138 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:5C1D8A71
@Alternate Data Stream - 136 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:B755D674
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:9E00596C
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:CB0AACC9
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:D1B5B4F1
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C31F31E6

< End of report >