OTL logfile created on: 2014-02-01 22:08:03 - Run 4
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\User\Pulpit
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
478,98 Mb Total Physical Memory | 288,63 Mb Available Physical Memory | 60,26% Memory free
1,12 Gb Paging File | 1,02 Gb Available in Paging File | 91,29% Paging File free
Paging file location(s): C:\pagefile.sys 744 1488 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 14,65 Gb Total Space | 9,62 Gb Free Space | 65,66% Space Free | Partition Type: NTFS
Drive D: | 13,29 Gb Total Space | 1,33 Gb Free Space | 10,01% Space Free | Partition Type: NTFS
 
Computer Name: DOM-63E826E896F | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-02-01 21:11:25 | 000,259,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTH.exe
PRC - [2014-02-01 21:11:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTL.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013-10-23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\User\USTAWI~1\Temp\catchme.sys -- (catchme)
DRV - [2004-08-04 00:08:22 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2004-08-03 23:32:22 | 000,231,552 | ---- | M] (Acer Laboratories Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ac97ali.sys -- (aliadwdm)
DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139)
DRV - [2003-09-11 00:00:00 | 000,065,280 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnic51.sys -- (RTL8023)
DRV - [2002-10-14 13:39:54 | 000,006,928 | ---- | M] (Compaq Computer Corp.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\eabfiltr.sys -- (EABFiltr)
DRV - [2002-08-30 14:54:00 | 000,471,296 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2002-05-04 11:32:10 | 000,025,149 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\atisgkaf.SYS -- (caboagp)
DRV - [2002-04-10 01:00:00 | 000,591,520 | ---- | M] (Conexant Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2002-04-10 01:00:00 | 000,542,045 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\v124nt.sys -- (V124)
DRV - [2002-04-10 01:00:00 | 000,428,431 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\k56nt.sys -- (K56)
DRV - [2002-04-10 01:00:00 | 000,303,171 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fallback.sys -- (Fallback)
DRV - [2002-04-10 01:00:00 | 000,212,491 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\faxnt.sys -- (SoftFax)
DRV - [2002-04-10 01:00:00 | 000,124,701 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fsksnt.sys -- (Fsks)
DRV - [2002-04-10 01:00:00 | 000,084,786 | ---- | M] (Conexant Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\basic2.sys -- (basic2)
DRV - [2002-04-10 01:00:00 | 000,062,422 | ---- | M] (Conexant Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rksample.sys -- (Rksample)
DRV - [2002-04-10 01:00:00 | 000,059,663 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tonesnt.sys -- (Tones)
DRV - [2002-01-28 15:43:58 | 000,005,168 | ---- | M] (Compaq Computer Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EabUsb.sys -- (eabusb)
DRV - [2001-08-17 22:49:02 | 000,026,624 | ---- | M] (Acer Laboratories Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alifir.sys -- (ALiIRDA)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.sweet-page.com/web/?type=ds&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.sweet-page.com/web/?type=ds&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX&q={searchTerms}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX
IE - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX&q={searchTerms}
IE - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX&q={searchTerms}
IE - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages =  [binary data]
IE - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX
IE - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.sweet-page.com/web/?type=ds&ts=1389608322&from=cor&uid=FUJITSUXMHR2030AT_NJ36T291694ST291694SX&q={searchTerms}
IE - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
 
 
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://pl.msn.com/?pc=UP97&ocid=UP97DHP
CHR - Extension: Lightning Newtab = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.8.4_0\
CHR - Extension: Google Wallet = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
 
O1 HOSTS File: ([2004-08-04 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..\Run: [ATIModeChange] C:\WINDOWS\System32\Ati2mdxx.exe (ATI Technologies, Inc.)
O4 - HKLM..\Run: [eabconfg.cpl] C:\Program Files\Compaq\EAB\EABSERVR.EXE (Compaq)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKU\S-1-5-21-1343024091-507921405-1060284298-1004..\Run: [NextLive] C:\Documents and Settings\User\Dane aplikacji\newnext.me\nengine.dll (NewNextDotMe)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1343024091-507921405-1060284298-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 82.139.8.40 95.160.170.92 88.156.222.92
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{91259A98-D1C1-411F-8A94-BA7CCEDCBEBD}: DhcpNameServer = 82.139.8.40 95.160.170.92 88.156.222.92
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-07-23 11:56:02 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-02-01 21:55:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Pulpit\raporty
[2014-02-01 21:11:24 | 000,259,584 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTH.exe
[2014-02-01 21:11:14 | 000,688,992 | R--- | C] (Swearware) -- C:\Documents and Settings\User\Pulpit\dds.com
[2014-02-01 21:11:02 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTL.exe
[2014-02-01 20:47:43 | 000,000,000 | --SD | C] -- C:\ComboFix
[2014-02-01 20:46:10 | 005,179,159 | R--- | C] (Swearware) -- C:\Documents and Settings\User\Pulpit\ComboFix.exe
[2014-02-01 20:26:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\TuneUp Software
[2014-02-01 20:26:03 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2014-02-01 16:47:56 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2014-02-01 16:42:46 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2014-02-01 16:42:46 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2014-02-01 16:42:46 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2014-02-01 16:42:46 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2014-02-01 16:40:37 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014-02-01 16:40:27 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo
[2014-02-01 16:40:25 | 000,000,000 | R--D | C] -- C:\Documents and Settings\User\Menu Start\Programy\Narzędzia administracyjne
[2014-02-01 16:40:25 | 000,000,000 | R--D | C] -- D:\Moje dokumenty\Moje wideo
[2014-02-01 16:40:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2014-02-01 16:39:23 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\User\Recent
[2014-02-01 15:59:46 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2014-01-13 11:42:06 | 000,000,000 | ---D | C] -- C:\Program Files\BonanzaDealsLive
[2014-01-13 11:42:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\BonanzaDealsLive
[2014-01-13 11:42:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\BonanzaDealsLive
[2014-01-13 11:41:29 | 000,000,000 | ---D | C] -- C:\Program Files\BonanzaDeals
[2014-01-13 11:31:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype
[2014-01-13 11:31:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2014-01-13 11:31:19 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2014-01-13 11:28:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype
[2014-01-13 11:22:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\.android
[2014-01-13 11:22:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\cache
[2014-01-13 11:22:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\newnext.me
[2014-01-13 11:21:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\genienext
[2014-01-13 11:21:36 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Mobogenie
[2014-01-13 11:21:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mobogenie
[2014-01-13 11:20:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\WPM
[2014-01-13 11:20:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Menu Start\Programy\Mobogenie
[2014-01-13 11:18:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mobogenie
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-02-01 22:01:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014-02-01 21:12:36 | 000,380,416 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\00we3cn1.exe
[2014-02-01 21:11:58 | 000,987,425 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\SecurityCheck.exe
[2014-02-01 21:11:25 | 000,259,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTH.exe
[2014-02-01 21:11:19 | 000,688,992 | R--- | M] (Swearware) -- C:\Documents and Settings\User\Pulpit\dds.com
[2014-02-01 21:11:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTL.exe
[2014-02-01 20:46:24 | 005,179,159 | R--- | M] (Swearware) -- C:\Documents and Settings\User\Pulpit\ComboFix.exe
[2014-02-01 18:29:18 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\{5E538386-76B9-4CED-8984-7C5FDC875167}
[2014-02-01 16:48:03 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2014-02-01 16:38:19 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-507921405-1060284298-1004UA.job
[2014-02-01 16:38:17 | 000,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-507921405-1060284298-1004Core.job
[2014-02-01 16:38:10 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
[2014-02-01 16:38:07 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
[2014-02-01 16:00:21 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
[2014-02-01 03:50:06 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014-01-14 06:49:54 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-02-01 21:12:35 | 000,380,416 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\00we3cn1.exe
[2014-02-01 21:11:53 | 000,987,425 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\SecurityCheck.exe
[2014-02-01 18:29:18 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\{5E538386-76B9-4CED-8984-7C5FDC875167}
[2014-02-01 16:48:03 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2014-02-01 16:47:59 | 000,262,400 | RHS- | C] () -- C:\cmldr
[2014-02-01 16:42:46 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2014-02-01 16:42:46 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2014-02-01 16:42:46 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2014-02-01 16:42:46 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2014-02-01 16:42:46 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2014-02-01 16:00:20 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
[2014-01-13 11:31:23 | 000,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2012-09-13 18:15:49 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-23 15:09:23 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012-07-23 13:29:02 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012-07-23 13:25:33 | 000,093,480 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-07-23 12:30:07 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll
[2012-07-23 12:00:26 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-07-23 11:46:03 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2004-08-04 13:00:00 | 001,483,264 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2004-08-04 13:00:00 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2004-08-04 13:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2014-01-13 11:42:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BonanzaDealsLive
[2012-07-23 13:03:21 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2014-02-01 20:38:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData
[2014-02-01 16:36:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WPM
[2013-02-02 11:23:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\TuneUp Software
[2012-07-26 14:54:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\InterVideo
[2014-02-01 22:01:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\newnext.me
[2014-02-01 20:26:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\TuneUp Software
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >