OTL logfile created on: 2014-02-04 01:26:19 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = F:\
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1015,23 Mb Total Physical Memory | 739,84 Mb Available Physical Memory | 72,87% Memory free
2,38 Gb Paging File | 2,21 Gb Available in Paging File | 92,89% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 36,13 Gb Total Space | 2,08 Gb Free Space | 5,77% Space Free | Partition Type: NTFS
Drive D: | 75,65 Gb Total Space | 67,36 Gb Free Space | 89,04% Space Free | Partition Type: NTFS
Drive F: | 3,72 Gb Total Space | 3,71 Gb Free Space | 99,95% Space Free | Partition Type: FAT32
 
Computer Name: MS-D | User Name: xxx | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-02-04 00:28:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- F:\OTL.exe
PRC - [2013-04-02 18:21:08 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Dane aplikacji\rundll32.exe
PRC - [2008-03-18 12:27:12 | 000,013,312 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\agrsmsvc.exe
PRC - [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-04-02 18:21:08 | 000,131,072 | ---- | M] () -- c:\Documents and Settings\All Users\Dane aplikacji\lwigto.dat
MOD - [2009-02-27 18:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL
MOD - [2008-06-19 20:53:03 | 000,060,416 | ---- | M] () -- C:\WINDOWS\system32\antiwpa.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2014-01-05 23:46:52 | 000,166,352 | ---- | M] (APN LLC.) [Disabled | Stopped] -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
SRV - [2013-12-30 11:02:50 | 000,119,408 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013-12-29 20:26:37 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-04-02 18:21:08 | 000,131,072 | ---- | M] () [Disabled | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\lwigto.dat -- (winmgmt)
SRV - [2012-09-20 08:42:13 | 000,008,192 | ---- | M] () [Disabled | Stopped] -- C:\WINDOWS\system32\srvany.exe -- (KMService)
SRV - [2008-03-18 12:27:12 | 000,013,312 | ---- | M] (Agere Systems) [Auto | Running] -- C:\WINDOWS\system32\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2007-10-27 10:31:34 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\sfvpxojw.sys -- (sfvpxojw)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012-02-29 18:50:23 | 001,391,104 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2009-02-05 21:34:32 | 000,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K)
DRV - [2008-03-21 12:13:00 | 001,203,776 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2007-04-23 16:31:36 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2006-06-28 09:54:00 | 000,009,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey)
DRV - [2003-09-06 14:37:22 | 000,062,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2003-09-06 13:27:06 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003-09-06 13:25:52 | 000,051,744 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003-09-06 13:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prosync1.sys -- (prosync1)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?l=dis&o=APN10260&gct=hp&apn_ptnrs=^AGR&apn_dtid=^YYYYYY^YY^PL&p2=^AGR^YYYYYY^YY^PL&tpid=ARS3&apn_dbr=ff_20.0&apn_uid=E0C4FB24-43BA-4CD7-ABEB-E96A0F0934A0&itbv=11.8.1.222&doi=2013-04-06
IE - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\URLSearchHook: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\prxtbTog0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Neostrada TP\SearchPageURL.dll ()
IE - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\URLSearchHook: {D8278076-BC68-4484-9233-6E7F1628B56C} - C:\Program Files\AskPartnerNetwork\Toolbar\searchhook.dll (APN LLC.)
IE - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\SearchScopes,DefaultScope = {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
IE - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://asksearch.ask.com/redirect?client=ie&src=crm&tb=ARS3&itbv=11.8.1.222&o=APN10260&locale=en_US&apn_uid=E0C4FB24-43BA-4CD7-ABEB-E96A0F0934A0&apn_ptnrs=^AGR&apn_dtid=^YYYYYY^YY^PL&apn_dbr=ff_20.0&doi=2013-04-06&q={searchTerms}&
IE - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1708250
IE - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Ask Search"
FF - prefs.js..browser.search.defaultenginename: "Ask Search"
FF - prefs.js..browser.search.order.1: "Ask Search"
FF - prefs.js..browser.search.selectedEngine: "Ask Search"
FF - prefs.js..browser.startup.homepage: "http://www.search.ask.com/?p2=%5EAGR%5EYYYYYY%5EYY%5EPL&gct=hp&o=APN10260&apn_ptnrs=%5EAGR&apn_dtid=%5EYYYYYY%5EYY%5EPL&tpid=ARS3&apn_dbr=ff_20.0&trgb=&apn_uid=E0C4FB24-43BA-4CD7-ABEB-E96A0F0934A0&itbv=11.8.1.222&doi=2013-04-06&psv="
FF - prefs.js..extensions.enabledAddons: %7B038cb5c7-48ea-4af9-94e0-a1646542e62b%7D:10.23.0.822
FF - prefs.js..extensions.enabledAddons: %7Bef4e370e-d9f0-4e00-b93e-a4f274cfdd5a%7D:1.4.9
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - prefs.js..extensions.enabledItems: {038cb5c7-48ea-4af9-94e0-a1646542e62b}:2.7.2.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.4.1
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@macromedia.com/FlashPlayer10: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKCU\Software\MozillaPlugins\@macromedia.com/FlashPlayer10: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-12-30 11:01:37 | 000,000,000 | ---D | M]
 
[2010-05-15 22:35:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\xxx\Dane aplikacji\Mozilla\Extensions
[2014-01-28 10:35:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\xxx\Dane aplikacji\Mozilla\Firefox\Profiles\1ltcdqd0.default\extensions
[2013-12-30 10:09:08 | 000,000,000 | ---D | M] (ToggleEN) -- C:\Documents and Settings\xxx\Dane aplikacji\Mozilla\Firefox\Profiles\1ltcdqd0.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}
[2011-01-06 19:59:28 | 000,000,000 | ---D | M] (Free Lunch Design Toolbar) -- C:\Documents and Settings\xxx\Dane aplikacji\Mozilla\Firefox\Profiles\1ltcdqd0.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}
[2011-05-14 09:05:58 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\xxx\Dane aplikacji\Mozilla\Firefox\Profiles\1ltcdqd0.default\extensions\engine@conduit.com
[2014-01-28 10:35:10 | 000,532,316 | ---- | M] () (No name found) -- C:\Documents and Settings\xxx\Dane aplikacji\Mozilla\Firefox\Profiles\1ltcdqd0.default\extensions\toolbar_ARS3@apn.ask.com.xpi
[2013-04-03 17:30:14 | 000,685,671 | ---- | M] () (No name found) -- C:\Documents and Settings\xxx\Dane aplikacji\Mozilla\Firefox\Profiles\1ltcdqd0.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi
[2013-09-24 20:28:35 | 000,002,537 | ---- | M] () -- C:\Documents and Settings\xxx\Dane aplikacji\Mozilla\Firefox\Profiles\1ltcdqd0.default\searchplugins\ask-search.xml
[2008-12-12 12:46:00 | 000,000,878 | ---- | M] () -- C:\Documents and Settings\xxx\Dane aplikacji\Mozilla\Firefox\Profiles\1ltcdqd0.default\searchplugins\conduit.xml
[2013-12-30 11:01:20 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013-12-30 11:01:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013-12-30 11:03:04 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2010-07-17 04:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2008-10-04 10:02:55 | 000,024,576 | ---- | M] (My Global Search) -- C:\Program Files\mozilla firefox\plugins\NPMyGlSh.dll
 
O1 HOSTS File: ([2010-11-12 23:18:12 | 000,000,789 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (ToggleEN Toolbar) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\prxtbTog0.dll (Conduit Ltd.)
O2 - BHO: (Winamp Toolbar BHO) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
O2 - BHO: (My Global Search Bar BHO) - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search)
O2 - BHO: (Ask Toolbar) - {41525333-0076-A76A-76A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\ARS3\Passport.dll (APN LLC.)
O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O3 - HKLM\..\Toolbar: (ToggleEN Toolbar) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\prxtbTog0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (My Global Search Bar) - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {41525333-0076-A76A-76A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\ARS3\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
O3 - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\Toolbar\ShellBrowser: (My Global Search Bar) - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search)
O3 - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\Toolbar\WebBrowser: (ToggleEN Toolbar) - {038CB5C7-48EA-4AF9-94E0-A1646542E62B} - C:\Program Files\ToggleEN\prxtbTog0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\Toolbar\WebBrowser: (My Global Search Bar) - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search)
O3 - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\Toolbar\WebBrowser: (Ask Toolbar) - {41525333-0076-A76A-76A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\ARS3\Passport.dll (APN LLC.)
O3 - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [WOOTASKBARICON] C:\Program Files\Neostrada TP\TaskBarIcon.exe (France Télécom R&D)
O4 - HKLM..\Run: [WOOWATCH] C:\Program Files\Neostrada TP\Watch.exe (France Télécom R&D)
O4 - HKU\S-1-5-21-1644491937-2147091713-839522115-1004..\Run: [ctfmon.exe] c:\Documents and Settings\All Users\Dane aplikacji\lwigto.dat ()
O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\xtqqeeyo.exe (Avira GmbH)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\svchost.exe ()
O4 - Startup: C:\Documents and Settings\xxx\Menu Start\Programy\Autostart\xtqqeeyo.exe (Avira GmbH)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1644491937-2147091713-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = FF 00 00 00  [binary data]
O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - c:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D6F8EC83-50E3-4E09-BBDC-BFDFE2EDE9F5}: DhcpNameServer = 192.168.1.100
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE6673C9-F6EE-4F35-8281-54EE22F00A2C}: DhcpNameServer = 192.168.1.100
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Program Files\NbrCLiBd\xtqqeeyo.exe) - C:\Program Files\NbrCLiBd\xtqqeeyo.exe (Avira GmbH)
O20 - Winlogon\Notify\Antiwpa: DllName - (antiwpa.dll) - C:\WINDOWS\System32\antiwpa.dll ()
O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) -  File not found
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\xxx\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\xxx\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-07-26 13:58:19 | 000,006,473 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
O32 - AutoRun File - [2012-12-25 13:55:49 | 000,000,089 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ]
O33 - MountPoints2\{13d27d98-63db-11e1-bf47-001a73ae4b01}\Shell - "" = AutoRun
O33 - MountPoints2\{13d27d98-63db-11e1-bf47-001a73ae4b01}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL \RECYCLER\S-7-8-46-4257740867-8547071284-227317622-6721\ynjBNQlN.exe
O33 - MountPoints2\{13d27d98-63db-11e1-bf47-001a73ae4b01}\Shell\explore\command - "" = \RECYCLER\S-7-8-46-4257740867-8547071284-227317622-6721\ynjBNQlN.exe
O33 - MountPoints2\{13d27d98-63db-11e1-bf47-001a73ae4b01}\Shell\Open\command - "" = \RECYCLER\S-7-8-46-4257740867-8547071284-227317622-6721\ynjBNQlN.exe
O33 - MountPoints2\{41d29baa-26b8-11e3-8048-001a73ae4b01}\Shell - "" = AutoRun
O33 - MountPoints2\{41d29baa-26b8-11e3-8048-001a73ae4b01}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL \RECYCLER\S-0-6-62-1205103830-1076225053-361133240-1517\DwVpOxJM.exe
O33 - MountPoints2\{41d29baa-26b8-11e3-8048-001a73ae4b01}\Shell\explore\command - "" = \RECYCLER\S-0-6-62-1205103830-1076225053-361133240-1517\DwVpOxJM.exe
O33 - MountPoints2\{41d29baa-26b8-11e3-8048-001a73ae4b01}\Shell\Open\command - "" = \RECYCLER\S-0-6-62-1205103830-1076225053-361133240-1517\DwVpOxJM.exe
O33 - MountPoints2\{5136b8ef-f1f0-11dd-b5ce-001a73ae4b01}\Shell\AutoRun\command - "" = pook.com
O33 - MountPoints2\{5136b8ef-f1f0-11dd-b5ce-001a73ae4b01}\Shell\open\Command - "" = pook.com
O33 - MountPoints2\{7d90cf2d-ac41-11de-b796-001a73ae4b01}\Shell\AutoRun\command - "" = F:\m9ma.exe
O33 - MountPoints2\{7d90cf2d-ac41-11de-b796-001a73ae4b01}\Shell\explore\Command - "" = F:\m9ma.exe
O33 - MountPoints2\{7d90cf2d-ac41-11de-b796-001a73ae4b01}\Shell\open\Command - "" = F:\m9ma.exe
O33 - MountPoints2\{899376fa-52ab-11e3-805d-001a73ae4b01}\Shell - "" = AutoRun
O33 - MountPoints2\{899376fa-52ab-11e3-805d-001a73ae4b01}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL \RECYCLER\S-2-4-10-1886805623-4401758574-752238163-2365\vDMTctxL.exe
O33 - MountPoints2\{899376fa-52ab-11e3-805d-001a73ae4b01}\Shell\explore\command - "" = \RECYCLER\S-2-4-10-1886805623-4401758574-752238163-2365\vDMTctxL.exe
O33 - MountPoints2\{899376fa-52ab-11e3-805d-001a73ae4b01}\Shell\Open\command - "" = \RECYCLER\S-2-4-10-1886805623-4401758574-752238163-2365\vDMTctxL.exe
O33 - MountPoints2\{8a54db9e-3d50-11e2-bfe0-001a73ae4b01}\Shell - "" = AutoRun
O33 - MountPoints2\{8a54db9e-3d50-11e2-bfe0-001a73ae4b01}\Shell\AutoRun\command - "" = H:\iStudio.exe
O33 - MountPoints2\{9a37a206-f164-11dd-b5cb-001a73ae4b01}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\ntldr.com j:
O33 - MountPoints2\{9a37a206-f164-11dd-b5cb-001a73ae4b01}\Shell\Open\command - "" = G:\resycled\ntldr.com j:
O33 - MountPoints2\{ca7787d6-05b1-11de-b607-001a73ae4b01}\Shell - "" = AutoRun
O33 - MountPoints2\{ca7787d6-05b1-11de-b607-001a73ae4b01}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL KapEF.exe
O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\setupSNK.exe -- [2004-08-04 00:44:30 | 000,028,672 | ---- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-02-04 01:19:27 | 000,000,000 | ---D | C] -- C:\FRST
[2014-02-04 00:41:54 | 000,076,148 | --S- | C] (Avira GmbH) -- C:\Documents and Settings\xxx\Menu Start\Programy\Autostart\xtqqeeyo.exe
[2014-02-03 23:56:48 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\xxx\Recent
[2014-02-03 23:55:06 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2014-02-03 23:55:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner
[2014-02-02 22:46:45 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2014-01-28 00:17:41 | 000,180,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxres.dll
[2013-04-02 18:21:08 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Dane aplikacji\rundll32.exe
[22 C:\Documents and Settings\xxx\Pulpit\*.tmp files -> C:\Documents and Settings\xxx\Pulpit\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-02-04 01:18:15 | 095,023,320 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\otgiwl.pad
[2014-02-04 01:15:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014-02-04 00:36:48 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2014-02-04 00:03:12 | 001,442,832 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014-02-04 00:00:39 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014-02-02 23:33:35 | 000,000,794 | ---- | M] () -- C:\Documents and Settings\xxx\Menu Start\Programy\Autostart\msconfig.lnk
[2014-02-02 14:39:14 | 000,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014-01-31 16:39:22 | 000,463,910 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2014-01-31 16:39:22 | 000,406,162 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014-01-31 16:39:22 | 000,081,256 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2014-01-31 16:39:22 | 000,063,614 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[22 C:\Documents and Settings\xxx\Pulpit\*.tmp files -> C:\Documents and Settings\xxx\Pulpit\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-02-02 23:33:35 | 000,000,794 | ---- | C] () -- C:\Documents and Settings\xxx\Menu Start\Programy\Autostart\msconfig.lnk
[2013-04-06 16:44:10 | 000,088,688 | ---- | C] () -- C:\WINDOWS\System32\cpwmon2k.dll
[2013-04-02 18:21:53 | 000,003,063 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\otgiwl.js
[2013-04-02 18:21:49 | 095,023,320 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\otgiwl.pad
[2013-04-02 18:21:08 | 000,131,072 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\lwigto.dat
[2012-09-20 08:42:43 | 000,151,552 | ---- | C] () -- C:\WINDOWS\KMService.exe
[2012-09-20 08:42:43 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\srvany.exe
[2012-07-31 15:30:23 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2012-07-31 15:30:23 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2012-03-20 08:14:35 | 000,049,152 | ---- | C] () -- C:\Documents and Settings\xxx\duedue.exe
[2012-01-12 19:04:15 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\xxx\Video.lnk
[2012-01-12 19:04:15 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\xxx\Pictures.lnk
[2012-01-12 19:04:15 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\xxx\Passwords.lnk
[2012-01-12 19:04:15 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\xxx\New Folder.lnk
[2012-01-12 19:04:15 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\xxx\Music.lnk
[2012-01-12 19:04:15 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\xxx\Documents.lnk
[2012-01-12 19:04:15 | 000,000,134 | RHS- | C] () -- C:\Documents and Settings\xxx\autorun.inf
[2012-01-03 09:32:42 | 000,049,152 | RHS- | C] () -- C:\Documents and Settings\xxx\zoazu.scr
[2011-06-18 10:02:14 | 000,000,475 | ---- | C] () -- C:\Documents and Settings\xxx\Dane aplikacji\ImageTuner.ini
[2009-02-03 13:41:52 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\xxx\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2008-11-13 16:00:59 | 000,048,128 | ---- | C] () -- C:\Documents and Settings\xxx\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-11-09 16:20:52 | 000,000,686 | ---- | C] () -- C:\Documents and Settings\xxx\.plugin140_03.trace
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-02-03 13:15:51 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\System32\shdocvw.dll -- [2010-04-16 16:37:03 | 001,506,304 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\System32\wbem\fastprox.dll -- [2009-02-09 11:22:07 | 000,473,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\System32\wbem\wbemess.dll -- [2004-08-03 23:44:14 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-04-06 16:44:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\APN
[2013-04-06 16:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AskPartnerNetwork
[2010-01-05 13:10:18 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ
[2013-02-09 20:05:30 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2010-08-26 23:01:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2011-06-01 15:12:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2009-09-28 15:00:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-08-19 17:48:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OrbNetworks
[2011-06-01 15:12:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM
[2013-02-09 20:05:30 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2008-12-17 14:49:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\ACD Systems
[2010-03-19 18:24:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\BESTplayer
[2009-02-03 12:52:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\Folder przesyłania Share-to-Web
[2008-11-09 16:53:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\Gadu-Gadu
[2012-01-03 15:17:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\Gadu-Gadu 10
[2009-02-03 12:40:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\InterVideo
[2010-12-03 22:00:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\ipla
[2012-12-06 16:27:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\NapiProjekt
[2009-10-07 15:08:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\Nowe Gadu-Gadu
[2009-09-28 14:59:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\OpenFM
[2011-08-01 08:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\Opera
[2014-02-04 00:54:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\PriceGong
[2010-12-02 21:35:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\RDRM
[2011-02-20 00:50:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx\Dane aplikacji\RST
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >