OTL logfile created on: 2014-03-25 09:04:12 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = D:\Justyna\Downloads
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,50 Gb Total Physical Memory | 1,90 Gb Available Physical Memory | 54,22% Memory free
7,20 Gb Paging File | 5,74 Gb Available in Paging File | 79,76% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 98,11 Gb Total Space | 35,99 Gb Free Space | 36,68% Space Free | Partition Type: NTFS
Drive D: | 134,77 Gb Total Space | 76,79 Gb Free Space | 56,98% Space Free | Partition Type: NTFS
 
Computer Name: PC | User Name: fabisiak | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-03-25 08:57:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Justyna\Downloads\OTL.exe
PRC - [2014-03-20 08:22:39 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013-07-08 12:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2013-01-19 23:22:14 | 000,729,744 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe
PRC - [2010-02-18 20:21:50 | 000,094,208 | ---- | M] (Panasonic System Networks Co.Ltd.) -- C:\Program Files\panasonic\KX-FLB800_FLM650 Series\ResPcDev.exe
PRC - [2010-02-02 12:41:40 | 000,135,168 | ---- | M] (                                 ) -- C:\Program Files\panasonic\MFStation\PCCMFSDM.exe
PRC - [2010-01-18 12:21:26 | 000,765,952 | ---- | M] (Panasonic System Networks Co.,Ltd.) -- C:\Program Files\panasonic\MFStation\KmPcFax.exe
PRC - [2010-01-09 11:39:48 | 000,413,696 | ---- | M] (Panasonic System Networks Co., Ltd.) -- C:\Program Files\panasonic\Device Monitor\DMWakeup.exe
PRC - [2010-01-09 11:37:20 | 000,049,152 | ---- | M] (Panasonic System Networks Co., Ltd.) -- C:\Program Files\panasonic\LocalCom\lmsrvnt.exe
PRC - [2009-12-04 07:49:40 | 000,099,896 | R--- | M] (HP) -- C:\Windows\System32\HPSIsvc.exe
PRC - [2009-11-20 14:14:02 | 000,245,760 | ---- | M] (Marvell) -- C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe
PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2007-02-12 13:38:04 | 000,355,096 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2007-02-12 13:37:58 | 000,174,872 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2005-05-29 11:59:56 | 000,249,856 | ---- | M] (Aladdin Knowledge Systems Ltd.) -- C:\Program Files\Aladdin\HASP LM\nhsrvice.exe
PRC - [2004-02-26 07:15:58 | 000,069,632 | ---- | M] (Panasonic) -- C:\Program Files\panasonic\TrapMonitor\Trapmnnt.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-03-20 08:22:37 | 003,642,480 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013-01-19 23:21:06 | 000,106,920 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\BundlesController.ppl
MOD - [2013-01-19 23:16:04 | 000,141,736 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\disk_encryption_meta.dll
MOD - [2013-01-19 23:16:00 | 000,121,544 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\data_processing_meta.dll
MOD - [2007-11-02 05:09:00 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2014-03-20 08:22:38 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014-03-12 09:36:05 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013-09-05 09:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-07-08 12:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2013-01-19 23:22:14 | 000,729,744 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe -- (AVP)
SRV - [2012-08-01 15:07:16 | 000,724,888 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010-04-21 18:46:17 | 000,373,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2010-04-21 18:46:17 | 000,373,760 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2010-01-09 11:37:20 | 000,049,152 | ---- | M] (Panasonic System Networks Co., Ltd.) [Auto | Running] -- C:\Program Files\panasonic\LocalCom\lmsrvnt.exe -- (Panasonic Local Printer Service)
SRV - [2009-12-04 07:49:40 | 000,099,896 | R--- | M] (HP) [Auto | Running] -- C:\Windows\System32\HPSIsvc.exe -- (HPSIService)
SRV - [2009-11-20 14:14:02 | 000,245,760 | ---- | M] (Marvell) [Auto | Running] -- C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe -- (HPM1210RcvFaxSrvc)
SRV - [2009-10-15 11:13:50 | 000,136,192 | ---- | M] (HP) [Auto | Stopped] -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe -- (HP LaserJet Service)
SRV - [2009-04-11 07:28:17 | 000,052,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2008-01-19 08:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008-01-19 08:34:43 | 000,035,328 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lpdsvc.dll -- (LPDSVC)
SRV - [2007-03-17 14:06:52 | 000,091,265 | ---- | M] (Kaspersky Lab) [Disabled | Stopped] -- C:\Program Files\Kaspersky Lab\NetworkAgent\klnagent.exe -- (klnagent)
SRV - [2007-02-12 13:38:04 | 000,355,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2005-05-29 11:59:56 | 000,249,856 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Auto | Running] -- C:\Program Files\Aladdin\HASP LM\nhsrvice.exe -- (HASP Loader)
SRV - [2004-02-26 07:15:58 | 000,069,632 | ---- | M] (Panasonic) [Auto | Running] -- C:\Program Files\panasonic\TrapMonitor\Trapmnnt.exe -- (Panasonic Trap Monitor Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\massfilter.sys -- (massfilter)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\fabisiak\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2013-01-17 22:29:24 | 000,164,624 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\System32\drivers\klvfs.sys -- (klvfs)
DRV - [2013-01-11 15:37:12 | 000,615,184 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)
DRV - [2012-12-15 08:13:28 | 000,131,088 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\klfde.sys -- (klfde)
DRV - [2012-11-23 13:18:54 | 000,023,896 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)
DRV - [2012-11-22 11:48:12 | 000,043,864 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kltdi.sys -- (kltdi)
DRV - [2012-11-16 16:46:56 | 000,144,344 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kneps.sys -- (kneps)
DRV - [2012-09-13 11:05:32 | 000,027,480 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\klfltdev.sys -- (KLFLTDEV)
DRV - [2012-06-27 14:18:52 | 000,019,072 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2012-06-19 16:28:12 | 000,136,024 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (KL1)
DRV - [2012-01-09 16:28:20 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2012-01-09 16:28:20 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2012-01-09 16:28:20 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2012-01-09 16:28:20 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010-06-23 08:21:32 | 000,259,176 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2009-11-20 15:06:38 | 000,013,824 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HPM1210FAX.sys -- (HP1210FAX)
DRV - [2009-11-20 14:35:46 | 000,017,408 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mvusbews.sys -- (mvusbews)
DRV - [2009-04-11 05:38:59 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbccid.sys -- (USBCCID)
DRV - [2008-01-19 07:14:59 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV - [2007-12-20 13:14:41 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2007-11-02 05:20:11 | 003,170,304 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2006-11-22 10:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006-11-22 10:01:48 | 000,100,096 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\aksusb.sys -- (aksusb)
DRV - [2006-11-22 10:01:46 | 000,327,168 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\akshasp.sys -- (akshasp)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-106956021-4012275320-818645542-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
IE - HKU\S-1-5-21-106956021-4012275320-818645542-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-106956021-4012275320-818645542-1000\..\SearchScopes,DefaultScope = {592EC655-7C5D-49EE-862D-261064BA2104}
IE - HKU\S-1-5-21-106956021-4012275320-818645542-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-106956021-4012275320-818645542-1000\..\SearchScopes\{592EC655-7C5D-49EE-862D-261064BA2104}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
IE - HKU\S-1-5-21-106956021-4012275320-818645542-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.renypicot.pl"
FF - prefs.js..extensions.enabledAddons: %7B6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65%7D:0.9.6
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:28.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.3.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.3.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 28.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 28.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.3.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.3.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
 
[2011-06-29 14:53:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fabisiak\AppData\Roaming\mozilla\Extensions
[2014-03-24 08:24:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fabisiak\AppData\Roaming\mozilla\Firefox\Profiles\nbp0lg39.default-1363594922252\extensions
[2013-06-03 09:35:59 | 000,081,156 | ---- | M] () (No name found) -- C:\Users\fabisiak\AppData\Roaming\mozilla\firefox\profiles\nbp0lg39.default-1363594922252\extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi
[2014-03-25 08:26:43 | 000,005,721 | ---- | M] () -- C:\Users\fabisiak\AppData\Roaming\mozilla\firefox\profiles\nbp0lg39.default-1363594922252\searchplugins\startpage-https---polski.xml
[2014-03-20 08:22:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014-03-20 08:22:40 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,736 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: ::1             localhost
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [HPUsageTrackingLEDM] C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [Panasonic Device Manager for KX-FLB800/FLM650 Series] C:\Program Files\panasonic\KX-FLB800_FLM650 Series\ResPcDev.exe (Panasonic System Networks Co.Ltd.)
O4 - HKLM..\Run: [Panasonic Device Manager for Multi-Function Station software] C:\Program Files\panasonic\MFStation\PCCMFSDM.exe (                                 )
O4 - HKLM..\Run: [Panasonic Device Monitor Wakeup] C:\Program Files\panasonic\Device Monitor\DMWakeup.exe (Panasonic System Networks Co., Ltd.)
O4 - HKLM..\Run: [Panasonic PCFAX for KX-FLB800/FLM650 Series] C:\Program Files\Panasonic\KX-FLB800_FLM650 Series\KmPcFax.exe (Panasonic System Networks Co.Ltd.)
O4 - HKLM..\Run: [Panasonic PCFAX for Multi-Function Station software] C:\Program Files\Panasonic\MFStation\KmPcFax.exe (Panasonic System Networks Co.,Ltd.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-106956021-4012275320-818645542-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-106956021-4012275320-818645542-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O15 - HKU\S-1-5-21-106956021-4012275320-818645542-1000\..Trusted Domains: com.pl ([www.ibre] https in Trusted sites)
O15 - HKU\S-1-5-21-106956021-4012275320-818645542-1000\..Trusted Domains: ilas ([]* in Local intranet)
O15 - HKU\S-1-5-21-106956021-4012275320-818645542-1000\..Trusted Ranges: Range1 ([http] in Trusted sites)
O15 - HKU\S-1-5-21-106956021-4012275320-818645542-1000\..Trusted Ranges: Range2 ([*] in Local intranet)
O15 - HKU\S-1-5-21-106956021-4012275320-818645542-1000\..Trusted Ranges: Range2 ([http] in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{093141BE-C889-4707-874D-9FB3DFB6DC1C}: DhcpNameServer = 194.204.152.34 194.204.159.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Users\fabisiak\Pictures\szymek\2012-07-28-066.jpg
O24 - Desktop BackupWallPaper: C:\Users\fabisiak\Pictures\szymek\2012-07-28-066.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006-05-09 19:36:18 | 000,000,034 | -HS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2006-05-09 19:36:18 | 000,000,034 | -HS- | M] () - D:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-03-25 08:58:14 | 000,000,000 | ---D | C] -- C:\FRST
[2014-03-24 13:29:59 | 000,000,000 | ---D | C] -- C:\Users\fabisiak\Desktop\goalscape
[2014-03-20 08:22:26 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014-03-18 15:39:34 | 000,000,000 | ---D | C] -- C:\Users\fabisiak\AppData\Roaming\com.goalscape.app.GoalscapeDesktop
[2014-03-18 15:39:32 | 000,000,000 | ---D | C] -- C:\Users\fabisiak\AppData\Roaming\com.goalscape.app.GoalscapeDesktop.7AC31F0C6B613204057EF6C630FDA9AC3AF1DB7F.1
[2014-03-18 15:39:26 | 000,000,000 | ---D | C] -- C:\Program Files\Goalscape
[2014-03-18 15:39:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2014-03-18 12:33:00 | 000,000,000 | ---D | C] -- C:\Users\fabisiak\Desktop\seguridad ibiza
[2014-02-26 10:50:49 | 002,050,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014-02-26 10:50:44 | 001,304,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMALFXGFXDSP.dll
[2014-02-26 10:50:44 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
[2014-02-26 10:50:44 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
[2014-02-26 10:50:44 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
[2014-02-25 11:02:47 | 000,000,000 | ---D | C] -- C:\Windows\Migration
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-03-25 08:35:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014-03-25 08:22:42 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014-03-25 07:56:57 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1cec8e791eb3910.job
[2014-03-25 07:50:46 | 000,000,012 | ---- | M] () -- C:\Windows\System32\haspaddr.dat
[2014-03-25 07:50:37 | 000,004,176 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2014-03-25 07:50:37 | 000,004,176 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2014-03-24 14:45:12 | 000,259,407 | ---- | M] () -- C:\Users\fabisiak\Desktop\20140324_144439.pdf
[2014-03-24 14:43:58 | 000,524,984 | ---- | M] () -- C:\Users\fabisiak\Desktop\20140324_144325.pdf
[2014-03-24 14:43:14 | 000,682,877 | ---- | M] () -- C:\Users\fabisiak\Desktop\20140324_144240.pdf
[2014-03-24 09:09:50 | 000,079,360 | ---- | M] () -- C:\Users\fabisiak\Desktop\bledy win update komp 3.jpg
[2014-03-19 11:42:41 | 000,012,936 | ---- | M] () -- C:\Users\fabisiak\Documents\cc_20140319_114238.reg
[2014-03-19 10:51:04 | 000,000,542 | ---- | M] () -- C:\Users\fabisiak\Desktop\odzież ochronna — skrót.lnk
[2014-03-18 15:39:27 | 000,000,722 | ---- | M] () -- C:\Users\Public\Desktop\Goalscape.lnk
[2014-03-12 13:40:05 | 000,053,798 | ---- | M] () -- C:\Users\fabisiak\Desktop\zapytanie ofertowe.eml
[2014-03-12 09:36:05 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014-03-12 09:36:05 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014-03-11 13:44:57 | 000,000,764 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014-03-07 07:36:33 | 000,761,674 | ---- | M] () -- C:\Windows\System32\perfh00A.dat
[2014-03-07 07:36:33 | 000,761,226 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2014-03-07 07:36:33 | 000,675,182 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014-03-07 07:36:33 | 000,172,824 | ---- | M] () -- C:\Windows\System32\perfc00A.dat
[2014-03-07 07:36:33 | 000,169,680 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2014-03-07 07:36:33 | 000,133,094 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014-03-03 13:29:25 | 000,000,464 | ---- | M] () -- C:\Users\fabisiak\Documents\cc_20140303_132922.reg
[2014-02-27 18:01:06 | 000,238,259 | ---- | M] () -- C:\Users\fabisiak\Desktop\trijan.jpg
[2014-02-27 09:24:02 | 000,016,384 | ---- | M] () -- C:\Users\fabisiak\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014-02-26 14:38:19 | 000,004,670 | ---- | M] () -- C:\Users\fabisiak\Documents\cc_20140226_143815.reg
[2014-02-26 11:19:14 | 000,286,416 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014-02-26 10:50:49 | 002,050,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014-02-26 10:50:44 | 001,304,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMALFXGFXDSP.dll
[2014-02-26 10:50:44 | 000,335,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
[2014-02-26 10:50:44 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
[2014-02-26 10:50:44 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
[2014-02-24 12:36:27 | 000,000,484 | ---- | M] () -- C:\Users\fabisiak\Documents\cc_20140224_123624.reg
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-03-24 14:46:42 | 000,682,877 | ---- | C] () -- C:\Users\fabisiak\Desktop\20140324_144240.pdf
[2014-03-24 14:46:42 | 000,524,984 | ---- | C] () -- C:\Users\fabisiak\Desktop\20140324_144325.pdf
[2014-03-24 14:46:42 | 000,259,407 | ---- | C] () -- C:\Users\fabisiak\Desktop\20140324_144439.pdf
[2014-03-24 09:09:50 | 000,079,360 | ---- | C] () -- C:\Users\fabisiak\Desktop\bledy win update komp 3.jpg
[2014-03-19 11:42:39 | 000,012,936 | ---- | C] () -- C:\Users\fabisiak\Documents\cc_20140319_114238.reg
[2014-03-19 10:51:04 | 000,000,542 | ---- | C] () -- C:\Users\fabisiak\Desktop\odzież ochronna — skrót.lnk
[2014-03-18 15:39:27 | 000,000,734 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Goalscape.lnk
[2014-03-18 15:39:27 | 000,000,722 | ---- | C] () -- C:\Users\Public\Desktop\Goalscape.lnk
[2014-03-12 13:39:50 | 000,053,798 | ---- | C] () -- C:\Users\fabisiak\Desktop\zapytanie ofertowe.eml
[2014-03-03 13:29:24 | 000,000,464 | ---- | C] () -- C:\Users\fabisiak\Documents\cc_20140303_132922.reg
[2014-02-27 18:01:06 | 000,238,259 | ---- | C] () -- C:\Users\fabisiak\Desktop\trijan.jpg
[2014-02-26 14:38:18 | 000,004,670 | ---- | C] () -- C:\Users\fabisiak\Documents\cc_20140226_143815.reg
[2014-02-24 12:36:26 | 000,000,484 | ---- | C] () -- C:\Users\fabisiak\Documents\cc_20140224_123624.reg
[2013-11-13 13:43:41 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013-11-13 13:43:41 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013-11-13 13:43:41 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013-11-13 13:43:41 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013-11-13 13:43:41 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013-07-29 09:15:14 | 000,000,091 | ---- | C] () -- C:\Users\fabisiak\AppData\Roaming\WB.CFG
[2013-07-15 07:14:24 | 000,000,005 | ---- | C] () -- C:\Users\fabisiak\AppData\Roaming\WBPU-TTL.DAT
[2013-07-12 15:20:49 | 000,645,632 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2013-07-12 15:20:49 | 000,240,640 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2013-07-12 15:20:14 | 000,178,688 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2013-07-12 15:20:13 | 000,079,360 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2013-07-12 15:20:12 | 000,715,038 | ---- | C] () -- C:\Windows\unins000.exe
[2013-07-12 15:20:12 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\lagarith.dll
[2013-07-12 15:20:12 | 000,001,781 | ---- | C] () -- C:\Windows\unins000.dat
[2013-04-24 09:15:32 | 000,336,930 | ---- | C] () -- C:\Windows\System32\perfi00A.dat
[2013-04-24 09:15:30 | 000,761,674 | ---- | C] () -- C:\Windows\System32\perfh00A.dat
[2013-04-24 09:15:30 | 000,172,824 | ---- | C] () -- C:\Windows\System32\perfc00A.dat
[2013-04-24 09:15:30 | 000,040,258 | ---- | C] () -- C:\Windows\System32\perfd00A.dat
[2011-09-20 14:29:26 | 000,000,096 | ---- | C] () -- C:\Users\fabisiak\AppData\Local\fusioncache.dat
[2011-07-05 15:54:28 | 000,038,443 | ---- | C] () -- C:\Users\fabisiak\AppData\Roaming\Wartości rozdzielane tabulatorem (Windows).ADR
[2011-07-05 15:50:58 | 000,038,447 | ---- | C] () -- C:\Users\fabisiak\AppData\Roaming\Wartości rozdzielane przecinkiem (Windows).ADR
[2011-07-05 15:49:11 | 000,038,414 | ---- | C] () -- C:\Users\fabisiak\AppData\Roaming\Microsoft Excel.ADR
[2011-06-30 11:19:42 | 000,038,047 | ---- | C] () -- C:\Users\fabisiak\AppData\Roaming\dBase.ADR
[2011-06-30 11:09:15 | 000,027,203 | ---- | C] () -- C:\Users\fabisiak\AppData\Roaming\Osobista książka adresowa.ADR
[2008-02-14 08:53:54 | 000,016,384 | ---- | C] () -- C:\Users\fabisiak\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-01-15 10:14:40 | 000,000,600 | ---- | C] () -- C:\Users\fabisiak\AppData\Local\PUTTY.RND
[2007-12-11 15:47:51 | 000,000,680 | ---- | C] () -- C:\Users\fabisiak\AppData\Local\d3d9caps.dat
[2007-01-01 21:12:28 | 000,000,426 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2006-05-12 11:25:13 | 000,000,600 | ---- | C] () -- C:\Users\fabisiak\PUTTY.RND
[2004-10-22 08:29:54 | 000,001,768 | ---- | C] () -- C:\Users\fabisiak\AppData\Roaming\Access10.pip
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2006-11-02 13:53:06 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-01-18 11:11:12 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\blueconnect
[2013-07-12 15:20:13 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\CDXReader
[2014-03-18 15:39:34 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\com.goalscape.app.GoalscapeDesktop
[2014-03-18 15:39:32 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\com.goalscape.app.GoalscapeDesktop.7AC31F0C6B613204057EF6C630FDA9AC3AF1DB7F.1
[2013-07-12 15:14:58 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\DSite
[2013-07-31 14:56:13 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\FileZilla
[2007-12-12 11:23:56 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\Gadu-Gadu
[2013-09-09 12:17:14 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\Imaging Sciences International
[2013-10-17 07:12:56 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\IrfanView
[2013-07-12 15:20:18 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\LavFilters
[2013-05-02 07:21:19 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\Nokia
[2013-05-02 07:21:20 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\Nokia Suite
[2011-07-07 16:29:36 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\OpenOffice.org
[2011-09-28 10:30:21 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\Panasonic
[2012-07-02 07:46:16 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\PC Suite
[2013-09-26 13:31:36 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\PhotoScape
[2013-12-11 13:45:23 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\TeamViewer
[2011-08-05 11:00:18 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\Thinstall
[2013-12-11 13:42:27 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\Thunderbird
[2009-03-13 14:16:23 | 000,000,000 | ---D | M] -- C:\Users\fabisiak\AppData\Roaming\WKPolska
[2013-05-09 11:12:54 | 000,000,000 | ---D | M] -- C:\Users\Gość\AppData\Roaming\Panasonic
[2010-05-06 09:32:30 | 000,000,000 | ---D | M] -- C:\Users\Gość\AppData\Roaming\WKPolska
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 720 bytes -> C:\Users\fabisiak\Desktop\zapytanie ofertowe.eml:OECustomProperty
@Alternate Data Stream - 502 bytes -> C:\Users\fabisiak\Desktop\automatyczna odp.eml:OECustomProperty

< End of report >