OTL logfile created on: 2014-01-17 16:46:32 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = D:\Documents and Settings\smo\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,17 Gb Available Physical Memory | 58,77% Memory free 4,00 Gb Paging File | 2,97 Gb Available in Paging File | 74,29% Paging File free Paging file location(s): P:\pagefile.sys 2200 2200 [binary data] %SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files Drive C: | 30,27 Gb Total Space | 23,73 Gb Free Space | 78,40% Space Free | Partition Type: NTFS Drive D: | 59,62 Gb Total Space | 43,14 Gb Free Space | 72,36% Space Free | Partition Type: NTFS Drive E: | 40,04 Gb Total Space | 18,98 Gb Free Space | 47,40% Space Free | Partition Type: NTFS Drive F: | 30,27 Gb Total Space | 25,79 Gb Free Space | 85,18% Space Free | Partition Type: NTFS Drive G: | 40,04 Gb Total Space | 13,27 Gb Free Space | 33,14% Space Free | Partition Type: NTFS Drive H: | 20,51 Gb Total Space | 19,33 Gb Free Space | 94,26% Space Free | Partition Type: NTFS Drive I: | 40,04 Gb Total Space | 6,10 Gb Free Space | 15,23% Space Free | Partition Type: NTFS Drive J: | 40,04 Gb Total Space | 27,39 Gb Free Space | 68,41% Space Free | Partition Type: NTFS Drive K: | 40,04 Gb Total Space | 23,56 Gb Free Space | 58,85% Space Free | Partition Type: NTFS Drive L: | 59,57 Gb Total Space | 5,96 Gb Free Space | 10,01% Space Free | Partition Type: NTFS Drive M: | 49,81 Gb Total Space | 37,51 Gb Free Space | 75,31% Space Free | Partition Type: NTFS Drive N: | 44,83 Gb Total Space | 34,28 Gb Free Space | 76,46% Space Free | Partition Type: NTFS Drive P: | 298,08 Gb Total Space | 37,54 Gb Free Space | 12,60% Space Free | Partition Type: NTFS Drive R: | 27,35 Gb Total Space | 18,43 Gb Free Space | 67,40% Space Free | Partition Type: NTFS Drive X: | 298,08 Gb Total Space | 50,31 Gb Free Space | 16,88% Space Free | Partition Type: NTFS Computer Name: BLACKV8 | User Name: smo | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-01-17 16:19:13 | 001,220,096 | ---- | M] (Farbar) -- D:\Documents and Settings\smo\Pulpit\FRST.exe PRC - [2014-01-17 16:16:05 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\smo\Pulpit\OTL.exe PRC - [2013-11-03 19:17:38 | 015,618,432 | ---- | M] (MPC-BE Team) -- D:\Program Files\MPC-BE\mpc-be.exe PRC - [2013-08-21 23:04:16 | 000,276,376 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe PRC - [2013-07-03 09:43:58 | 002,582,288 | ---- | M] (Hagel Technologies Ltd) -- D:\Program Files\DU Meter\DUMeter.exe PRC - [2013-07-03 09:43:58 | 001,382,672 | ---- | M] (Hagel Technologies Ltd) -- D:\Program Files\DU Meter\DUMeterSvc.exe PRC - [2013-01-16 23:06:36 | 006,860,288 | ---- | M] (FreeDownloadManager.ORG) -- D:\Program Files\Free Download Manager\fdm.exe PRC - [2012-12-16 12:25:20 | 000,545,552 | ---- | M] (SANDBOXIE L.T.D) -- D:\Program Files\Sandboxie\SbieCtrl.exe PRC - [2012-12-16 12:25:18 | 000,085,776 | ---- | M] (SANDBOXIE L.T.D) -- D:\Program Files\Sandboxie\SbieSvc.exe PRC - [2012-11-08 00:37:37 | 001,990,464 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe PRC - [2012-11-08 00:37:11 | 006,756,048 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cfp.exe PRC - [2012-10-04 16:28:44 | 001,415,032 | ---- | M] (Raxco Software, Inc.) -- D:\Program Files\Raxco\PerfectDisk\PDAgent.exe PRC - [2012-10-04 16:28:34 | 002,166,648 | ---- | M] (Raxco Software, Inc.) -- D:\Program Files\Common Files\Raxco\Shared\PDEngine.exe PRC - [2012-10-02 14:40:44 | 005,029,232 | ---- | M] (O&O Software GmbH) -- D:\Program Files\OO Software\Defrag\oodtray.exe PRC - [2012-10-02 14:40:38 | 002,019,184 | ---- | M] (O&O Software GmbH) -- D:\Program Files\OO Software\Defrag\oodag.exe PRC - [2012-07-17 17:35:43 | 000,775,168 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe PRC - [2012-07-11 19:54:49 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- D:\Program Files\SUPERAntiSpyware\SASCore.exe PRC - [2012-01-18 15:47:28 | 000,433,264 | ---- | M] (VMware, Inc.) -- D:\WINDOWS\system32\vmnat.exe PRC - [2012-01-18 15:47:20 | 000,354,416 | ---- | M] (VMware, Inc.) -- D:\WINDOWS\system32\vmnetdhcp.exe PRC - [2012-01-18 15:04:52 | 011,839,488 | ---- | M] () -- D:\Program Files\VMware\VMware Workstation\vmware-hostd.exe PRC - [2012-01-18 13:27:20 | 000,079,872 | ---- | M] (VMware, Inc.) -- D:\Program Files\VMware\VMware Workstation\vmware-authd.exe PRC - [2012-01-10 02:11:21 | 002,334,720 | ---- | M] (http://winmerge.org) -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\WinMergeU.exe PRC - [2012-01-10 02:11:21 | 000,618,496 | ---- | M] (PHU XimSoft Tomasz Wyderka) -- D:\Program Files\XimSoft\RAM Kontroler\RAMKontroler.exe PRC - [2012-01-10 02:11:21 | 000,143,467 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe PRC - [2012-01-10 02:11:21 | 000,069,735 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe PRC - [2011-08-29 22:11:00 | 000,665,200 | ---- | M] (VMware, Inc.) -- D:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe PRC - [2010-12-03 20:51:38 | 003,687,736 | ---- | M] (Ghisler Software GmbH) -- D:\Program Files\TC UP\TOTALCMD.EXE PRC - [2010-11-14 13:57:38 | 000,615,936 | ---- | M] (Ultima Prime & Pawel Porwisz) -- D:\Program Files\TC UP\TC UP.exe PRC - [2010-11-06 22:24:30 | 001,867,888 | ---- | M] (PeerBlock, LLC) -- D:\Program Files\PeerBlock\peerblock.exe PRC - [2010-03-30 07:40:20 | 000,113,296 | ---- | M] (NEC Electronics Corporation) -- D:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2010-03-07 19:04:14 | 000,489,472 | ---- | M] ( ) -- D:\Program Files\Copy Handler\ch.exe PRC - [2009-12-09 14:40:54 | 001,705,984 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exe PRC - [2009-05-18 17:57:02 | 000,345,088 | ---- | M] (Outertech) -- D:\Program Files\Cacheman\CachemanTray.exe PRC - [2009-05-16 18:15:00 | 000,210,944 | ---- | M] (Outertech) -- D:\Program Files\Cacheman\CachemanServ.exe PRC - [2008-05-02 05:15:46 | 000,015,872 | ---- | M] () -- D:\Program Files\Unlocker\UnlockerAssistant.exe PRC - [2008-04-13 13:39:20 | 000,049,152 | ---- | M] (artArmin) -- D:\Program Files\Vista Drive Icon\DrvIcon.exe PRC - [2006-07-09 20:58:00 | 001,777,664 | ---- | M] (Idea2) -- D:\Program Files\Desktop Sidebar\dsidebar.exe PRC - [2006-02-17 10:14:22 | 000,163,840 | ---- | M] (A4Tech Co., Ltd.) -- D:\Program Files\A4Tech\Mouse\Amoumain.exe PRC - [2005-08-07 23:10:22 | 000,018,944 | ---- | M] (Creative Technology Ltd) -- D:\WINDOWS\system32\CTXFIHLP.EXE PRC - [2005-08-07 23:10:20 | 000,016,384 | ---- | M] (Creative Technology Ltd) -- D:\WINDOWS\CTHELPER.EXE PRC - [2005-08-07 23:04:44 | 000,699,392 | ---- | M] (Creative Technology Ltd) -- D:\WINDOWS\system32\CTXFISPI.EXE PRC - [2005-07-11 10:34:06 | 000,122,880 | ---- | M] (Creative Technology Ltd) -- D:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe PRC - [2002-12-20 19:17:00 | 000,057,344 | ---- | M] (Thong Nguyen) -- D:\Documents and Settings\smo\Moje dokumenty\PowerMenu 1.5.1\PowerMenu.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-08-21 23:04:16 | 003,551,640 | ---- | M] () -- D:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2013-01-11 03:17:32 | 000,105,984 | ---- | M] () -- D:\Program Files\Free Download Manager\fdmumsp.dll MOD - [2012-12-26 08:13:54 | 003,547,136 | ---- | M] () -- D:\Program Files\Free Download Manager\fdmbtsupp.dll MOD - [2012-10-05 01:33:28 | 000,070,352 | ---- | M] () -- D:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav MOD - [2012-07-17 17:35:43 | 000,775,168 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe MOD - [2012-01-18 15:04:52 | 011,839,488 | ---- | M] () -- D:\Program Files\VMware\VMware Workstation\vmware-hostd.exe MOD - [2012-01-18 14:43:50 | 001,222,656 | ---- | M] () -- D:\Program Files\VMware\VMware Workstation\libxml2.dll MOD - [2012-01-10 02:11:21 | 003,668,992 | ---- | M] () -- D:\Program Files\K-Lite Codec Pack\ffdshow\ffdshow.ax MOD - [2012-01-10 02:11:21 | 000,237,568 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\Mobile\BaseLib.dll MOD - [2012-01-10 02:11:21 | 000,143,467 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe MOD - [2012-01-10 02:11:21 | 000,143,360 | ---- | M] () -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\libexpat.dll MOD - [2012-01-10 02:11:21 | 000,143,360 | ---- | M] () -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\MergePlugins\DisplayXMLFiles.dll MOD - [2012-01-10 02:11:21 | 000,131,072 | ---- | M] () -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\pcre.dll MOD - [2012-01-10 02:11:21 | 000,126,976 | ---- | M] () -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\MergePlugins\WatchEndOfLog.dll MOD - [2012-01-10 02:11:21 | 000,126,976 | ---- | M] () -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\MergePlugins\WatchBeginningOfLog.dll MOD - [2012-01-10 02:11:21 | 000,080,896 | ---- | M] () -- D:\Program Files\UltraISO\lang\lang_pl.dll MOD - [2012-01-10 02:11:21 | 000,069,735 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe MOD - [2012-01-10 02:11:21 | 000,061,440 | ---- | M] () -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\MergePlugins\IgnoreCommentsC.dll MOD - [2012-01-10 02:11:21 | 000,061,440 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\Mobile\ExtraLib.dll MOD - [2012-01-10 02:11:21 | 000,057,344 | ---- | M] () -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\MergePlugins\IgnoreFieldsTab.dll MOD - [2012-01-10 02:11:21 | 000,057,344 | ---- | M] () -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\MergePlugins\IgnoreFieldsComma.dll MOD - [2012-01-10 02:11:21 | 000,057,344 | ---- | M] () -- D:\Program Files\TC UP\PLUGINS\Media\WinMerge\MergePlugins\IgnoreColumns.dll MOD - [2012-01-10 02:11:21 | 000,041,472 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\Mobile\CsCvt.dll MOD - [2012-01-10 02:11:21 | 000,039,424 | ---- | M] () -- D:\Program Files\Alky for Applications\vshellext.dll MOD - [2012-01-10 02:11:21 | 000,015,937 | ---- | M] () -- D:\Program Files\XimSoft\RAM Kontroler\RAMKontroler.dll MOD - [2010-03-07 19:03:44 | 000,028,160 | ---- | M] () -- D:\Program Files\Copy Handler\libchcore32u.dll MOD - [2010-03-07 19:03:38 | 000,240,128 | ---- | M] () -- D:\Program Files\Copy Handler\chext.dll MOD - [2010-03-07 19:03:04 | 000,246,784 | ---- | M] () -- D:\Program Files\Copy Handler\libicpf32u.dll MOD - [2008-08-01 14:58:14 | 000,622,693 | ---- | M] () -- D:\WINDOWS\system32\BSShell.dll MOD - [2008-08-01 14:55:40 | 000,118,880 | ---- | M] () -- D:\WINDOWS\system32\BsMobileSDK.dll MOD - [2008-08-01 14:54:12 | 000,102,499 | ---- | M] () -- D:\WINDOWS\system32\Bs2Res.dll MOD - [2008-08-01 14:46:30 | 017,907,824 | ---- | M] () -- D:\WINDOWS\system32\BsLangInDepRes.dll MOD - [2008-05-02 05:15:46 | 000,015,872 | ---- | M] () -- D:\Program Files\Unlocker\UnlockerAssistant.exe MOD - [2008-05-02 05:15:37 | 000,010,240 | ---- | M] () -- D:\Program Files\Unlocker\UnlockerCOM.dll MOD - [2008-05-02 05:15:35 | 000,004,608 | ---- | M] () -- D:\Program Files\Unlocker\UnlockerHook.dll MOD - [2008-04-14 23:50:38 | 000,014,336 | ---- | M] () -- D:\WINDOWS\system32\msdmo.dll MOD - [2007-06-02 20:41:36 | 000,617,472 | ---- | M] () -- D:\Program Files\IZArc\IZArcCM.dll MOD - [2005-08-07 23:10:26 | 000,003,072 | ---- | M] () -- D:\WINDOWS\CTXFIRES.DLL MOD - [2003-02-02 19:06:02 | 000,153,088 | ---- | M] () -- D:\WINDOWS\system32\UNRAR3.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- D:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe -- (McComponentHostService) SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2014-01-16 14:06:11 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-08-21 23:04:16 | 000,117,656 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-07-08 12:37:23 | 000,131,912 | ---- | M] (Desura Pty Ltd) [On_Demand | Stopped] -- D:\Program Files\Common Files\Desura\desura_service.exe -- (Desura Install Service) SRV - [2013-07-03 09:43:58 | 001,382,672 | ---- | M] (Hagel Technologies Ltd) [Auto | Running] -- D:\Program Files\DU Meter\DUMeterSvc.exe -- (DUMeterSvc) SRV - [2012-12-21 17:53:10 | 003,521,832 | ---- | M] () [Auto | Stopped] -- D:\Program Files\Siber Systems\GoodSync\Gs-Server.exe -- (GsServer) SRV - [2012-12-16 12:25:18 | 000,085,776 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- D:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc) SRV - [2012-11-08 00:37:37 | 001,990,464 | ---- | M] (COMODO) [Auto | Running] -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent) SRV - [2012-10-04 16:28:44 | 001,415,032 | ---- | M] (Raxco Software, Inc.) [Auto | Running] -- D:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent) SRV - [2012-10-04 16:28:34 | 002,166,648 | ---- | M] (Raxco Software, Inc.) [On_Demand | Running] -- D:\Program Files\Common Files\Raxco\Shared\PDEngine.exe -- (PDEngine) SRV - [2012-10-02 14:40:38 | 002,019,184 | ---- | M] (O&O Software GmbH) [Auto | Running] -- D:\Program Files\OO Software\Defrag\oodag.exe -- (OODefragAgent) SRV - [2012-07-17 17:35:43 | 000,775,168 | ---- | M] () [Auto | Running] -- D:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe -- (BlueSoleilCS) SRV - [2012-07-11 19:54:49 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- D:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE) SRV - [2012-01-18 15:47:28 | 000,433,264 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\WINDOWS\system32\vmnat.exe -- (VMware NAT Service) SRV - [2012-01-18 15:47:20 | 000,354,416 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\WINDOWS\system32\vmnetdhcp.exe -- (VMnetDHCP) SRV - [2012-01-18 15:04:52 | 011,839,488 | ---- | M] () [Auto | Running] -- D:\Program Files\VMware\VMware Workstation\vmware-hostd.exe -- (VMwareHostd) SRV - [2012-01-18 13:27:20 | 000,079,872 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\Program Files\VMware\VMware Workstation\vmware-authd.exe -- (VMAuthdService) SRV - [2012-01-10 02:11:21 | 000,143,467 | ---- | M] () [Auto | Running] -- D:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe -- (BsMobileCS) SRV - [2012-01-10 02:11:21 | 000,069,735 | ---- | M] () [On_Demand | Running] -- D:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe -- (BsHelpCS) SRV - [2011-08-29 22:11:00 | 000,665,200 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService) SRV - [2009-05-16 18:15:00 | 000,210,944 | ---- | M] (Outertech) [Auto | Running] -- D:\Program Files\Cacheman\CachemanServ.exe -- (CachemanService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Unknown] -- D:\DOCUME~1\smo\USTAWI~1\Temp\pfldqpog.sys -- (pfldqpog) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2013-12-18 17:39:52 | 000,203,024 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\VBoxDrv.sys -- (VBoxDrv) DRV - [2013-12-18 17:38:48 | 000,126,224 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\VBoxNetFlt.sys -- (VBoxNetFlt) DRV - [2013-12-18 17:38:48 | 000,114,960 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV - [2013-12-18 17:38:48 | 000,103,696 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\VBoxUSBMon.sys -- (VBoxUSBMon) DRV - [2013-10-18 20:23:40 | 000,443,448 | ---- | M] () [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2013-08-25 10:30:48 | 000,013,120 | ---- | M] () [File_System | Auto | Running] -- D:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2013-01-30 12:11:50 | 000,295,936 | ---- | M] (EldoS Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\sscbfs3.sys -- (SSCBFS3) DRV - [2012-12-16 12:25:16 | 000,157,776 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- D:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv) DRV - [2012-11-08 00:38:17 | 000,099,080 | ---- | M] (COMODO) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\inspect.sys -- (Inspect) DRV - [2012-11-08 00:38:16 | 000,032,640 | ---- | M] (COMODO) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp) DRV - [2012-11-08 00:38:14 | 000,497,952 | ---- | M] (COMODO) [File_System | System | Running] -- D:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard) DRV - [2012-11-08 00:38:13 | 000,018,096 | ---- | M] (COMODO) [File_System | System | Running] -- D:\WINDOWS\system32\drivers\cmderd.sys -- (cmderd) DRV - [2012-09-11 14:24:06 | 000,104,088 | ---- | M] (Raxco Software, Inc.) [File_System | Auto | Running] -- D:\WINDOWS\System32\drivers\DefragFs.sys -- (DefragFS) DRV - [2012-08-23 16:56:24 | 000,069,016 | ---- | M] (Raxco Software, Inc.) [File_System | Auto | Running] -- D:\WINDOWS\system32\drivers\PDFsFilter.sys -- (PDFSFilter) DRV - [2012-01-18 15:47:36 | 000,055,664 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vmx86.sys -- (vmx86) DRV - [2012-01-18 15:47:32 | 000,023,792 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vmparport.sys -- (VMparport) DRV - [2012-01-18 15:46:22 | 000,033,776 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vmnetbridge.sys -- (VMnetBridge) DRV - [2012-01-18 15:46:16 | 000,025,712 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vmnetuserif.sys -- (VMnetuserif) DRV - [2012-01-18 13:06:02 | 000,016,624 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\vmnetadapter.sys -- (VMnetAdapter) DRV - [2012-01-10 02:11:21 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- D:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive) DRV - [2012-01-10 02:11:21 | 000,016,472 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\pwdrvio.sys -- (pwdrvio) DRV - [2012-01-10 02:11:21 | 000,011,104 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\pwdspio.sys -- (pwdspio) DRV - [2012-01-10 02:11:21 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- D:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV - [2011-10-30 13:14:50 | 000,027,600 | ---- | M] (CrystalIdea Software) [File_System | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\CisUtMonitor.sys -- (CisUtMonitor) DRV - [2011-10-25 06:45:38 | 000,444,232 | ---- | M] (COMODO Security Solutions Inc.) [File_System | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\cbreparse.sys -- (reparse) DRV - [2011-08-29 22:11:00 | 000,032,496 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\hcmon.sys -- (hcmon) DRV - [2011-08-08 14:58:56 | 000,098,928 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\vmci.sys -- (vmci) DRV - [2011-07-22 17:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV) DRV - [2011-07-12 22:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL) DRV - [2011-07-08 15:32:56 | 000,022,768 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vstor2-mntapi10-shared.sys -- (vstor2-mntapi10-shared) DRV - [2011-06-13 05:03:54 | 000,306,664 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2010-11-06 22:24:30 | 000,019,056 | ---- | M] () [Kernel | On_Demand | Running] -- D:\Program Files\PeerBlock\pbfilter.sys -- (pbfilter) DRV - [2010-05-07 22:14:25 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6) DRV - [2010-02-24 10:09:38 | 000,141,568 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nusb3xhc.sys -- (nusb3xhc) DRV - [2010-02-24 10:09:38 | 000,060,544 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nusb3hub.sys -- (nusb3hub) DRV - [2010-01-17 15:05:04 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- D:\WINDOWS\System32\drivers\si3112.sys -- (Si3112) DRV - [2009-10-25 17:30:16 | 000,016,384 | ---- | M] (Flint Incorporation) [Kernel | System | Running] -- D:\WINDOWS\System32\drivers\vd_filedisk.sys -- (VD_FileDisk) DRV - [2009-10-12 03:10:54 | 000,029,440 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\RTLTEAMING.SYS -- (RTLTEAMING) DRV - [2009-02-16 10:35:06 | 000,017,536 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\RTLVLAN.SYS -- (RTLVLAN) DRV - [2008-07-31 19:45:42 | 000,020,616 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\BtHidBus.sys -- (BtHidBus) DRV - [2008-07-09 07:11:34 | 000,022,016 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\RtNdPt5x.sys -- (RtNdPt5x) DRV - [2008-07-02 13:58:48 | 000,026,248 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\IvtBtBus.sys -- (IvtBtBUs) DRV - [2008-07-02 13:58:36 | 000,029,960 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr) DRV - [2008-07-02 13:58:28 | 000,038,920 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb) DRV - [2008-02-12 03:42:38 | 000,232,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\VMM.sys -- (vmm) DRV - [2008-02-05 01:50:44 | 000,059,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\VMNetSrv.sys -- (VPCNetS2) DRV - [2008-01-21 18:28:12 | 000,014,600 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\btnetdrv.sys -- (BT) DRV - [2008-01-21 18:27:50 | 000,014,856 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\VComm.sys -- (VComm) DRV - [2007-06-29 13:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD) DRV - [2007-04-16 15:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM) DRV - [2006-07-01 22:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Stopped] -- D:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2006-03-13 14:50:08 | 000,085,696 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300obex.sys -- (w300obex) DRV - [2006-03-13 14:50:06 | 000,087,824 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300mgmt.sys -- (w300mgmt) DRV - [2006-03-13 14:50:02 | 000,096,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300mdm.sys -- (w300mdm) DRV - [2006-03-13 14:50:00 | 000,009,264 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300mdfl.sys -- (w300mdfl) DRV - [2006-03-13 14:49:54 | 000,060,800 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300bus.sys -- (w300bus) DRV - [2006-01-11 07:33:44 | 000,013,312 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\Amusbprt.sys -- (Amusbprt) DRV - [2006-01-11 07:33:32 | 000,008,704 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\Amfilter.sys -- (Amfilter) DRV - [2005-08-07 22:54:38 | 000,007,168 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k) DRV - [2005-08-07 22:54:36 | 000,439,424 | ---- | M] (Creative Technology Ltd) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) DRV - [2005-08-07 22:54:30 | 001,093,632 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ha20x2k.sys -- (ha20x2k) DRV - [2005-08-07 22:54:22 | 000,114,688 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv) DRV - [2005-08-07 22:54:18 | 000,142,848 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2005-08-07 22:54:18 | 000,077,824 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia) DRV - [2005-08-07 22:54:14 | 000,501,760 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k) DRV - [2005-07-13 10:18:50 | 000,340,704 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ctdvda2k.sys -- (ctdvda2k) DRV - [2002-01-12 15:30:34 | 000,003,567 | ---- | M] (Beyond Logic http://www.beyondlogic.org) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\PortTalk.sys -- (PortTalk) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie_rsearch.html IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/enterprise/security_response/index.jsp IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:blank [binary data] IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\..\SearchScopes,DefaultScope = {3AFB5AD6-6F78-468B-B54B-B206E51C0D12} IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\..\SearchScopes\{3AFB5AD6-6F78-468B-B54B-B206E51C0D12}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7BACAA314B-EEBA-48e4-AD47-84E31C44796C%7D:4.2.1.10 FF - prefs.js..extensions.enabledAddons: jqs%40sun.com:1.0 FF - prefs.js..extensions.enabledAddons: TFToolbarX%40torrent-finder:1.3.1 FF - prefs.js..extensions.enabledAddons: anticontainer%40downthemall.net:1.2.3 FF - prefs.js..extensions.enabledAddons: %7BDDC359D1-844A-42a7-9AA1-88A850A938A8%7D:2.0.16 FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: D:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: D:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: D:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: d:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: D:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: D:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}: D:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2013-08-21 23:04:08 | 000,000,000 | ---D | M] [2012-10-28 18:24:42 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Extensions [2012-10-28 18:24:42 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2014-01-17 16:22:52 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions [2012-12-15 00:10:21 | 000,000,000 | ---D | M] (Free Download Manager plugin) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\fdm_ffext@freedownloadmanager.org [2014-01-17 16:22:52 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\staged [2013-03-21 13:36:45 | 000,094,120 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\anticontainer@downthemall.net.xpi [2013-02-20 11:25:49 | 000,119,925 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\TFToolbarX@torrent-finder.xpi [2012-12-15 00:14:35 | 000,036,139 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2013-07-15 00:42:45 | 000,434,392 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2013-07-15 00:42:45 | 000,714,654 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-01-17 16:22:51 | 000,098,595 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\staged\anticontainer@downthemall.net.xpi [2013-08-21 23:04:08 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions [2013-08-21 23:04:07 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\browser\extensions [2013-08-21 23:04:16 | 000,000,000 | ---D | M] (Default) -- D:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2012-02-28 07:22:39 | 000,000,000 | ---D | M] (Java Quick Starter) -- D:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008-09-04 01:11:24 | 000,054,600 | ---- | M] (BitTorrent, Inc.) -- D:\Program Files\mozilla firefox\plugins\npbittorrent.dll [2012-02-28 07:22:38 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-12-09 18:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- D:\Program Files\mozilla firefox\plugins\npwachk.dll [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: http://www.google.com/ CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\32.0.1700.76\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\32.0.1700.76\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = D:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll CHR - plugin: BitTorrent (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = D:\Program Files\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Winamp Application Detector (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = D:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Google Update (Enabled) = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Foxit Reader Plugin for Mozilla (Enabled) = D:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll CHR - plugin: Silverlight Plug-In (Enabled) = D:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = D:\Program Files\Real Alternative\browser\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = D:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll CHR - plugin: Shockwave for Director (Enabled) = D:\WINDOWS\system32\Adobe\Director\np32dsw.dll CHR - plugin: Windows Presentation Foundation (Enabled) = d:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - Extension: Dysk Google = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: Google Wallet = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1\ CHR - Extension: DVDVideoSoftTB = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.26.0.540_0\ CHR - Extension: DVDVideoSoftTB = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.26.0.540_0\nativeMessaging\nmHost O1 HOSTS File: ([2012-03-16 21:00:03 | 000,000,949 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Idea2 SidebarBrowserMonitor Class) - {45AD732C-2CE2-4666-B366-B2214AD57A49} - D:\Program Files\Desktop Sidebar\sbhelp.dll (Idea2) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Free Download Manager) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - D:\Program Files\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) O3 - HKLM\..\Toolbar: (StylerToolBar) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - D:\Program Files\Styler\TB\StylerTB.dll (StyleFantasist) O4 - HKLM..\Run: [amd_dc_opt] D:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD) O4 - HKLM..\Run: [COMODO Internet Security] D:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO) O4 - HKLM..\Run: [Copy Handler] File not found O4 - HKLM..\Run: [CTHelper] D:\WINDOWS\CTHELPER.EXE (Creative Technology Ltd) O4 - HKLM..\Run: [CTxfiHlp] D:\WINDOWS\System32\CTXFIHLP.EXE (Creative Technology Ltd) O4 - HKLM..\Run: [DrvIcon] D:\Program Files\Vista Drive Icon\DrvIcon.exe (artArmin) O4 - HKLM..\Run: [NUSB3MON] D:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation) O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [OODefragTray] D:\Program Files\OO Software\Defrag\oodtray.exe (O&O Software GmbH) O4 - HKLM..\Run: [TC UP] D:\Program Files\TC UP\TC UP.exe (Ultima Prime & Pawel Porwisz) O4 - HKLM..\Run: [UnlockerAssistant] D:\Program Files\Unlocker\UnlockerAssistant.exe () O4 - HKLM..\Run: [VolPanel] D:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe (Creative Technology Ltd) O4 - HKLM..\Run: [WheelMouse] D:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co., Ltd.) O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [CachemanTray] D:\Program Files\Cacheman\CachemanTray.exe (Outertech) O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [Copy Handler] D:\Program Files\Copy Handler\ch.exe ( ) O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [DU Meter] D:\Program Files\DU Meter\DUMeter.exe (Hagel Technologies Ltd) O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [Free Download Manager] D:\Program Files\Free Download Manager\fdm.exe (FreeDownloadManager.ORG) O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [PeerBlock] D:\Program Files\PeerBlock\peerblock.exe (PeerBlock, LLC) O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [RAMKontroler] D:\Program Files\XimSoft\RAM Kontroler\RAMKontroler.exe (PHU XimSoft Tomasz Wyderka) O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [SandboxieControl] D:\Program Files\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D) O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [SIDEBAR] D:\Program Files\Desktop Sidebar\dsidebar.exe (Idea2) O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-20..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - Startup: D:\Documents and Settings\All Users\Menu Start\Programy\Autostart\reg-ico.bat () O4 - Startup: D:\Documents and Settings\Default User\Menu Start\Programy\Autostart\Styler.lnk = D:\Documents and Settings\smo\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe () O4 - Startup: D:\Documents and Settings\smo\Menu Start\Programy\Autostart\PowerMenu.exe.lnk = D:\Documents and Settings\smo\Moje dokumenty\PowerMenu 1.5.1\PowerMenu.exe (Thong Nguyen) O4 - Startup: D:\Documents and Settings\smo\Menu Start\Programy\Autostart\Styler.lnk = D:\Documents and Settings\smo\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 33554431 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1 O7 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O8 - Extra context menu item: Free YouTube to MP3 Converter - D:\Program Files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found O8 - Extra context menu item: Pobierz plik wideo w FDM - D:\Program Files\Free Download Manager\dlfvideo.htm () O8 - Extra context menu item: Pobierz w FDM - D:\Program Files\Free Download Manager\dllink.htm () O8 - Extra context menu item: Pobierz wszystkie pliki w FDM - D:\Program Files\Free Download Manager\dlall.htm () O8 - Extra context menu item: Pobierz zaznaczone pliki w FDM - D:\Program Files\Free Download Manager\dlselected.htm () O8 - Extra context menu item: Wyslij przez wiadomosc(&M)... - D:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm () O8 - Extra context menu item: Wyślij przez Bluetooth - D:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm () O9 - Extra Button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - D:\Program Files\Desktop Sidebar\sbhelp.dll (Idea2) O9 - Extra 'Tools' menuitem : Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - D:\Program Files\Desktop Sidebar\sbhelp.dll (Idea2) O9 - Extra Button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - D:\Program Files\WinHTTrack\WinHTTrackIEBar.dll () O9 - Extra 'Tools' menuitem : Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - D:\Program Files\WinHTTrack\WinHTTrackIEBar.dll () O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{371DB25A-D106-40EE-B8FD-33D26EC4A4B3}: DhcpNameServer = 87.204.204.204 62.233.233.233 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\WINDOWS\system32\skype4com.dll (Skype Technologies) O20 - AppInit_DLLs: (D:\WINDOWS\system32\guard32.dll) - D:\WINDOWS\system32\guard32.dll (COMODO) O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (D:\WINDOWS\system32\userinit.exe) - D:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O21 - SSODL: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - D:\WINDOWS\system32\SSCbFsMntNtf3.dll (EldoS Corporation) O22 - SharedTaskScheduler: {C28617FD-4FE7-4043-AD51-C8132CE90106} - Virtual Storage Mount Notification - D:\WINDOWS\system32\SSCbFsMntNtf3.dll (EldoS Corporation) O24 - Desktop Components:0 (Bieżąca strona główna) - About:Home O24 - Desktop WallPaper: D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O32 - HKLM CDRom: AutoRun - 0 O32 - AutoRun File - [2007-03-28 22:16:50 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-10-02 06:09:52 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (PDBoot.exe) O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (OODBS) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2014-01-17 16:23:04 | 000,000,000 | ---D | C] -- D:\FRST [2014-01-17 16:19:13 | 001,220,096 | ---- | C] (Farbar) -- D:\Documents and Settings\smo\Pulpit\FRST.exe [2014-01-17 16:16:04 | 000,602,112 | ---- | C] (OldTimer Tools) -- D:\Documents and Settings\smo\Pulpit\OTL.exe [2014-01-07 12:44:35 | 000,000,000 | ---D | C] -- D:\DownloadFolder [2014-01-07 12:44:34 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Foxit Software [2014-01-07 12:44:18 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Start\Programy\Foxit Reader [2014-01-07 12:38:34 | 000,000,000 | ---D | C] -- D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Foxit Reader [2014-01-07 12:38:34 | 000,000,000 | ---D | C] -- D:\FileIDCache [2014-01-07 12:38:34 | 000,000,000 | ---D | C] -- D:\DownloadCache [2014-01-05 13:22:18 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Start\Programy\Auslogics [2014-01-04 23:16:55 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Start\Programy\Oracle VM VirtualBox [2013-12-25 12:11:48 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Start\Programy\CDRoller 6.31 [2013-12-25 12:11:45 | 000,000,000 | ---D | C] -- D:\Program Files\CDRoller [2013-12-18 17:38:48 | 000,126,224 | ---- | C] (Oracle Corporation) -- D:\WINDOWS\System32\drivers\VBoxNetFlt.sys [2013-12-18 17:37:08 | 000,174,864 | ---- | C] (Oracle Corporation) -- D:\WINDOWS\System32\VBoxNetFltNobj.dll [2013-12-17 22:32:45 | 000,000,000 | RH-D | C] -- D:\Documents and Settings\smo\Recent [2013-12-10 22:14:54 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Start\Programy\Google Drive [2013-12-10 22:13:57 | 000,000,000 | ---D | C] -- D:\Program Files\Google [2013-12-01 08:51:29 | 000,000,000 | ---D | C] -- D:\Documents and Settings\LocalService\Dane aplikacji\McAfee [2013-11-26 12:50:30 | 000,000,000 | ---D | C] -- D:\Documents and Settings\smo\Pulpit\motherboard_driver_amd_sataraid_bootdisk_8-series_xp [2013-11-26 12:49:32 | 000,000,000 | ---D | C] -- D:\Documents and Settings\smo\Pulpit\mb_driver_gsata_amd333 [2013-11-26 12:22:24 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\McAfee [2013-11-26 12:12:06 | 000,000,000 | ---D | C] -- D:\Documents and Settings\smo\Moje dokumenty\ati smbus-backup [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2014-01-17 16:38:35 | 000,090,934 | ---- | M] () -- D:\WINDOWS\System32\langs.xml [2014-01-17 16:28:00 | 000,001,124 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-1770027372-1801674531-1002UA.job [2014-01-17 16:23:00 | 000,001,030 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2014-01-17 16:23:00 | 000,001,026 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2014-01-17 16:19:13 | 001,220,096 | ---- | M] (Farbar) -- D:\Documents and Settings\smo\Pulpit\FRST.exe [2014-01-17 16:16:05 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\smo\Pulpit\OTL.exe [2014-01-17 15:18:47 | 000,379,904 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\gmer.exe [2014-01-17 15:14:57 | 000,147,456 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\catchme.exe [2014-01-17 14:18:01 | 000,000,965 | ---- | M] () -- D:\WINDOWS\System32\bscs.ini [2014-01-17 14:16:48 | 000,272,317 | ---- | M] () -- D:\WINDOWS\System32\NvApps.xml [2014-01-17 14:16:45 | 000,002,206 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl [2014-01-17 14:16:41 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat [2014-01-17 14:16:32 | 000,393,008 | ---- | M] () -- D:\WINDOWS\System32\oodbs.lor [2014-01-16 20:09:07 | 000,064,988 | ---- | M] () -- D:\WINDOWS\System32\DVCState-{00000004-00000000-00000007-00001102-00000005-00211102}.rfx [2014-01-16 20:09:07 | 000,055,308 | ---- | M] () -- D:\WINDOWS\System32\BMXStateBkp-{00000004-00000000-00000007-00001102-00000005-00211102}.rfx [2014-01-16 20:09:07 | 000,055,308 | ---- | M] () -- D:\WINDOWS\System32\BMXState-{00000004-00000000-00000007-00001102-00000005-00211102}.rfx [2014-01-16 20:09:07 | 000,002,064 | ---- | M] () -- D:\WINDOWS\System32\settingsbkup.sfm [2014-01-16 20:09:07 | 000,002,064 | ---- | M] () -- D:\WINDOWS\System32\settings.sfm [2014-01-16 20:08:14 | 000,009,171 | ---- | M] () -- D:\Documents and Settings\smo\Moje dokumenty\config.xml [2014-01-16 17:28:00 | 000,001,072 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-1770027372-1801674531-1002Core.job [2014-01-16 14:06:11 | 000,000,930 | ---- | M] () -- D:\WINDOWS\tasks\Adobe Flash Player Updater.job [2014-01-16 14:06:10 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerApp.exe [2014-01-16 14:06:10 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2014-01-07 12:44:18 | 000,001,708 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Foxit Reader.lnk [2014-01-05 13:22:18 | 000,000,827 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\Auslogics DiskDefrag.lnk [2014-01-05 11:35:31 | 000,001,876 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Free YouTube Download.lnk [2014-01-05 11:35:31 | 000,000,897 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\DVDVideoSoft Free Studio.lnk [2014-01-04 23:16:55 | 000,000,848 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Oracle VM VirtualBox.lnk [2014-01-04 16:48:46 | 000,001,972 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Free YouTube to MP3 Converter.lnk [2013-12-25 12:11:48 | 000,000,687 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\CDRoller.lnk [2013-12-18 17:39:52 | 000,203,024 | ---- | M] (Oracle Corporation) -- D:\WINDOWS\System32\drivers\VBoxDrv.sys [2013-12-18 17:38:48 | 000,126,224 | ---- | M] (Oracle Corporation) -- D:\WINDOWS\System32\drivers\VBoxNetFlt.sys [2013-12-18 17:38:48 | 000,114,960 | ---- | M] (Oracle Corporation) -- D:\WINDOWS\System32\drivers\VBoxNetAdp.sys [2013-12-18 17:38:48 | 000,103,696 | ---- | M] (Oracle Corporation) -- D:\WINDOWS\System32\drivers\VBoxUSBMon.sys [2013-12-18 17:37:08 | 000,174,864 | ---- | M] (Oracle Corporation) -- D:\WINDOWS\System32\VBoxNetFltNobj.dll [2013-12-18 17:22:26 | 000,000,042 | ---- | M] () -- D:\WINDOWS\oodjobd.INI [2013-12-17 22:29:30 | 000,004,658 | ---- | M] () -- D:\reg-ico.reg [2013-12-13 22:31:00 | 006,865,833 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\sciagniete 2013.rar [2013-12-13 22:31:00 | 000,948,038 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\zrzuc te torrki.rar [2013-12-10 22:17:48 | 000,001,400 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\Dysk Google.lnk [2013-11-26 13:48:16 | 000,000,679 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\Copy Handler.lnk [2013-11-26 13:25:03 | 334,434,886 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\motherboard_driver_amd_chipset_xp.rar [2013-11-26 12:41:30 | 003,863,847 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\mb_driver_gsata_amd333.rar [2013-11-26 12:41:05 | 000,297,499 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\motherboard_driver_amd_sataraid_bootdisk_8-series_xp.rar [2013-11-26 12:05:28 | 095,273,066 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\motherboard_driver_chipset_amd_7series-v2.0_xp32_novga.rar [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-01-17 15:18:47 | 000,379,904 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\gmer.exe [2014-01-17 15:14:57 | 000,147,456 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\catchme.exe [2014-01-07 12:44:18 | 000,001,708 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Foxit Reader.lnk [2014-01-05 11:35:31 | 000,001,876 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Free YouTube Download.lnk [2014-01-04 23:16:55 | 000,000,848 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Oracle VM VirtualBox.lnk [2013-12-25 12:11:48 | 000,000,687 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\CDRoller.lnk [2013-12-15 15:25:48 | 000,001,972 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Free YouTube to MP3 Converter.lnk [2013-12-13 22:31:00 | 006,865,833 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\sciagniete 2013.rar [2013-12-13 22:31:00 | 000,948,038 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\zrzuc te torrki.rar [2013-12-10 22:17:48 | 000,001,400 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\Dysk Google.lnk [2013-12-10 22:13:58 | 000,001,030 | ---- | C] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2013-12-10 22:13:58 | 000,001,026 | ---- | C] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2013-12-02 10:47:52 | 003,863,847 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\mb_driver_gsata_amd333.rar [2013-12-02 10:47:42 | 000,583,810 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\mb_bios_ga-ma770-ud3_v.2.0_fkd.rar [2013-12-01 11:48:52 | 334,434,886 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\motherboard_driver_amd_chipset_xp.rar [2013-12-01 11:34:26 | 095,273,066 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\motherboard_driver_chipset_amd_7series-v2.0_xp32_novga.rar [2013-12-01 11:31:20 | 000,297,499 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\motherboard_driver_amd_sataraid_bootdisk_8-series_xp.rar [2013-11-26 13:48:16 | 000,000,679 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\Copy Handler.lnk [2013-10-18 20:30:22 | 000,000,869 | ---- | C] () -- D:\Documents and Settings\smo\Dane aplikacji\burnaware.ini [2013-08-30 10:41:23 | 000,000,000 | ---- | C] () -- D:\WINDOWS\Bench32 2.47.INI [2013-08-24 19:30:04 | 000,000,000 | ---- | C] () -- D:\WINDOWS\Bench32_2.47(dobreprogramy.pl).INI [2013-08-06 07:11:59 | 000,000,000 | ---- | C] () -- D:\WINDOWS\279_Bench32_2.47_[www.programosy.pl].INI [2013-07-15 03:07:13 | 000,149,722 | ---- | C] () -- D:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2013-07-03 09:43:23 | 000,009,728 | ---- | C] () -- D:\WINDOWS\System32\BASSMOD.dll [2013-05-20 17:06:14 | 000,317,440 | ---- | C] () -- D:\WINDOWS\System32\lua5.1a.dll [2012-10-28 18:22:05 | 000,000,600 | ---- | C] () -- D:\Documents and Settings\smo\Dane aplikacji\winscp.rnd [2012-10-20 08:09:06 | 000,000,042 | ---- | C] () -- D:\WINDOWS\oodjobd.INI [2012-09-13 07:24:02 | 000,000,101 | ---- | C] () -- D:\WINDOWS\System32\ud-boot-time.ini [2012-03-16 20:58:04 | 000,178,176 | ---- | C] () -- D:\WINDOWS\System32\ztvunrar39.dll [2012-03-16 20:58:04 | 000,162,304 | ---- | C] () -- D:\WINDOWS\System32\ztvunrar36.dll [2012-03-16 20:58:04 | 000,153,088 | ---- | C] () -- D:\WINDOWS\System32\UNRAR3.dll [2012-03-16 20:58:04 | 000,077,312 | ---- | C] () -- D:\WINDOWS\System32\ztvunace26.dll [2012-03-16 20:58:04 | 000,075,264 | ---- | C] () -- D:\WINDOWS\System32\unacev2.dll [2011-06-17 17:14:05 | 000,000,128 | ---- | C] () -- D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2011-05-25 07:00:25 | 000,046,080 | ---- | C] () -- D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-04-30 12:56:19 | 000,002,272 | ---- | C] () -- D:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2011-04-30 12:54:35 | 000,000,227 | RHS- | M] () -- D:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2010-05-29 10:50:35 | 001,509,888 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = D:\WINDOWS\system32\wbem\fastprox.dll -- [2010-01-17 15:00:20 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = D:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 23:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\ashampoo [2013-09-05 03:47:54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Auslogics [2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2013-07-08 12:35:08 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Desura [2013-07-03 21:22:18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\FixBee [2013-01-12 16:02:04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Free Download Manager [2012-01-10 02:28:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2012-12-31 11:20:18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\GoodSync [2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\GridIron Software [2013-07-03 09:42:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Hagel Technologies [2012-04-08 14:40:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Hi-Rez Studios [2013-03-18 17:09:09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\IObit [2013-09-06 02:59:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Licenses [2012-10-17 13:42:31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\OO Software [2013-07-15 00:33:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\pat [2013-09-07 08:10:03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\TEMP [2013-05-15 12:41:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\WarThunder [2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2013-04-20 23:35:42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\NetworkService\Dane aplikacji\Foxit Software [2013-01-11 23:14:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\AIMP3 [2012-02-23 19:53:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Ashampoo [2012-03-25 17:14:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Auslogics [2013-08-02 14:02:06 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\BESTplayer [2013-05-12 17:36:19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Bigasoft Total Video Converter [2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Canneverbe Limited [2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\CrystalIdea Software [2013-08-13 14:06:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\DeepBurner [2014-01-16 14:09:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Desktop Sidebar [2014-01-05 11:35:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\DVDVideoSoft [2013-05-12 19:42:16 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\DVDVideoSoftIEHelpers [2013-09-05 08:07:45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\FileZilla [2013-07-03 21:22:18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\FixBee [2014-01-07 12:44:20 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Foxit Software [2013-10-21 16:57:25 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Free Download Manager [2013-08-30 08:43:24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\FreeArc [2014-01-17 14:25:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\GoodSync [2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\HEXelon [2013-03-18 17:09:06 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\IObit [2013-07-09 01:27:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Local [2012-08-26 03:22:25 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Maxthon3 [2013-10-18 20:31:11 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\MediaFilters [2013-11-08 12:01:32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\MPC-BE [2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Notepad++ [2013-05-10 12:05:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\OpenMPT [2012-02-23 19:33:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\OpenOffice.org [2012-01-10 02:32:54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Opera [2013-11-10 17:01:35 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\PeaZip [2013-10-18 20:23:46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Softland [2013-10-18 20:31:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\StarBurn [2014-01-06 16:10:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\uTorrent [2012-01-19 04:22:35 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\wargaming.net [2012-03-27 23:39:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\WinHKI [2013-05-20 20:13:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\xrecode2 [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2012-01-10 01:58:39 | 000,000,755 | ---- | M] ()(D:\Documents and Settings\smo\Pulpit\Un?nstall Tool.lnk) -- D:\Documents and Settings\smo\Pulpit\Unіnstall Tool.lnk [2011-12-17 19:33:51 | 000,000,755 | ---- | C] ()(D:\Documents and Settings\smo\Pulpit\Un?nstall Tool.lnk) -- D:\Documents and Settings\smo\Pulpit\Unіnstall Tool.lnk [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 192 bytes -> D:\Documents and Settings\All Users\Dane aplikacji\TEMP:CB0AACC9 @Alternate Data Stream - 136 bytes -> D:\Documents and Settings\All Users\Dane aplikacji\TEMP:D0AB0B4A @Alternate Data Stream - 130 bytes -> D:\Documents and Settings\All Users\Dane aplikacji\TEMP:4FC01C57 < End of report >