OTL logfile created on: 2014-07-27 18:49:22 - Run 4 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Misiek\Pulpit\do kompa Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,99 Gb Total Physical Memory | 1,57 Gb Available Physical Memory | 78,79% Memory free 3,84 Gb Paging File | 3,57 Gb Available in Paging File | 92,96% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 74,52 Gb Total Space | 14,59 Gb Free Space | 19,57% Space Free | Partition Type: NTFS Computer Name: MICHAŁ | User Name: Misiek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-07-10 10:04:28 | 004,086,432 | ---- | M] (AVAST Software) -- C:\Programy\AVAST Software\Avast\AvastUI.exe PRC - [2014-07-10 10:04:27 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Programy\AVAST Software\Avast\AvastSvc.exe PRC - [2014-05-08 01:29:35 | 000,841,032 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe PRC - [2013-10-12 14:29:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Misiek\Pulpit\do kompa\OTL.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-04-15 14:00:00 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\savedump.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-07-27 16:22:00 | 002,795,008 | ---- | M] () -- C:\Programy\AVAST Software\Avast\defs\14072700\algo.dll MOD - [2014-07-10 10:04:42 | 019,329,904 | ---- | M] () -- C:\Programy\AVAST Software\Avast\libcef.dll MOD - [2014-07-10 10:04:38 | 000,301,152 | ---- | M] () -- C:\Programy\AVAST Software\Avast\aswProperty.dll MOD - [2014-05-08 01:29:24 | 000,065,352 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\34.0.1847.137\chrome_elf.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt) SRV - [2014-07-10 10:04:27 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programy\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2014-05-30 12:36:31 | 000,182,696 | ---- | M] (Oracle Corporation) [Disabled | Stopped] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2014-05-30 12:25:51 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-05-07 13:01:30 | 001,324,544 | ---- | M] (Research In Motion Limited) [Disabled | Stopped] -- C:\Program Files\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe -- (RIM Tunnel Service) SRV - [2014-05-07 12:53:28 | 000,389,632 | ---- | M] (Apple Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Research in Motion\Tunnel Manager\mDNSResponder.exe -- (RIM MDNS) SRV - [2014-04-15 10:46:26 | 001,682,256 | ---- | M] (LogMeIn Inc.) [Disabled | Stopped] -- C:\Programy\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2014-04-03 20:21:48 | 000,315,008 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2014-01-21 14:41:16 | 000,585,728 | ---- | M] (BlackBerry Limited) [Disabled | Stopped] -- C:\Program Files\Common Files\Research in Motion\USB Drivers\BbDevMgr.exe -- (BlackBerry Device Manager) SRV - [2013-07-10 03:56:22 | 000,559,016 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2013-02-04 18:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [Disabled | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2012-06-11 12:33:26 | 000,724,376 | ---- | M] (Nokia) [Disabled | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | Disabled | Stopped] -- system32\DRIVERS\s24trans.sys -- (s24trans) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2014-07-10 10:05:53 | 000,414,520 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswsp.sys -- (aswSP) DRV - [2014-07-10 10:04:47 | 000,779,536 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSnx.sys -- (aswSnx) DRV - [2014-07-10 10:04:47 | 000,192,352 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm) DRV - [2014-07-10 10:04:47 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2014-07-10 10:04:47 | 000,057,800 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi) DRV - [2014-07-10 10:04:47 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt) DRV - [2014-07-10 10:04:47 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aswHwid.sys -- (aswHwid) DRV - [2014-07-10 10:04:46 | 000,055,112 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr) DRV - [2014-05-07 12:41:04 | 000,012,800 | ---- | M] (Research in Motion Limited) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rimvndis.sys -- (rimvndis) DRV - [2013-12-29 20:47:28 | 000,025,200 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc) DRV - [2013-12-29 20:47:28 | 000,012,400 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt) DRV - [2012-06-11 12:33:46 | 000,019,072 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2012-01-09 18:28:20 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2012-01-09 18:28:20 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2012-01-09 18:28:20 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2012-01-09 18:28:20 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2010-02-11 14:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6) DRV - [2009-11-11 14:26:02 | 002,216,064 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) DRV - [2009-07-13 17:51:12 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\winusb.sys -- (WinUSB) DRV - [2009-03-18 18:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2008-04-14 00:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) DRV - [2000-01-01 02:00:00 | 005,589,720 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2000-01-01 02:00:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt) DRV - [2000-01-01 02:00:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt) DRV - [2000-01-01 02:00:00 | 001,035,008 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2000-01-01 02:00:00 | 000,718,464 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf) DRV - [2000-01-01 02:00:00 | 000,201,600 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\..\SearchScopes,DefaultScope = IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox IE - HKCU\..\SearchScopes\{E071D01E-71A1-4851-8F6E-29D541057469}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll () FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Programy\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Programy\AVAST Software\Avast\WebRep\FF [2014-07-10 10:04:50 | 000,000,000 | ---D | M] [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: http://www.google.pl/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\34.0.1847.137\pdf.dll CHR - plugin: Microsoft® DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Microsoft® DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.149\npGoogleUpdate3.dll CHR - Extension: Dokumenty Google = C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\ CHR - Extension: Dysk Google = C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: AdBlock = C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.8_0\ CHR - Extension: Google Wallet = C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ CHR - Extension: Gmail = C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programy\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4 - HKLM..\Run: [AvastUI.exe] C:\Programy\AVAST Software\Avast\AvastUI.exe (AVAST Software) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Programy\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programy\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programy\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{05F2EDCF-3451-4FB3-BE54-61290247907A}: DhcpNameServer = 192.168.1.254 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013-07-05 16:12:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{1b6dace3-641c-11e3-9ee0-0013ce0d71dd}\Shell - "" = AutoRun O33 - MountPoints2\{1b6dace3-641c-11e3-9ee0-0013ce0d71dd}\Shell\AutoRun\command - "" = E:\Startme.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-07-26 12:43:14 | 000,000,000 | -HSD | C] -- C:\found.001 [2014-07-20 22:47:52 | 000,000,000 | ---D | C] -- C:\zdn [2014-07-17 20:17:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Misiek\Pulpit\ebay [2014-07-10 11:12:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\jumpshot.com [2014-07-10 10:16:13 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\WINDOWS\System32\sqlite3.dll [2014-07-10 10:15:08 | 000,000,000 | ---D | C] -- C:\AdwCleaner [2014-07-10 10:04:45 | 000,043,152 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2014-06-30 00:00:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Misiek\Moje dokumenty\Misiek [2014-06-29 23:59:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Misiek\Moje dokumenty\BlackBerry [2014-06-29 23:59:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Misiek\Dane aplikacji\XCPCSync.OEM [2014-06-29 23:58:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Misiek\Dane aplikacji\Research In Motion [2014-06-29 23:56:59 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys [2014-06-29 23:56:59 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rndismpx.sys [2014-06-29 23:48:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\Research In Motion [2014-06-29 23:47:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Research In Motion [2014-06-29 23:47:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\BlackBerry [2014-06-29 23:46:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Research in Motion [2014-06-29 23:45:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\XCPCSync.OEM [2014-05-21 17:44:14 | 005,310,224 | ---- | C] (PC Cleaners) -- C:\Documents and Settings\All Users\Dane aplikacji\pclunst.exe [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\Documents and Settings\Misiek\Pulpit\*.tmp files -> C:\Documents and Settings\Misiek\Pulpit\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-07-27 18:49:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2014-07-27 18:47:51 | 000,000,354 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job [2014-07-27 18:47:19 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2014-07-27 18:47:19 | 000,000,224 | ---- | M] () -- C:\WINDOWS\tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job [2014-07-27 18:45:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2014-07-27 18:44:54 | 2137,116,672 | -HS- | M] () -- C:\hiberfil.sys [2014-07-27 18:44:52 | 133,029,888 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP [2014-07-27 18:15:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2014-07-27 17:56:15 | 000,022,092 | ---- | M] () -- C:\Documents and Settings\Misiek\Pulpit\dmp.rar [2014-07-27 17:44:54 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\Misiek\Pulpit\Mini072714-01.dmp [2014-07-26 22:57:53 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\Misiek\Pulpit\Mini072614-03.dmp [2014-07-26 19:55:18 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\Misiek\Pulpit\Mini072614-02.dmp [2014-07-26 12:44:43 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\Misiek\Pulpit\Mini072614-01.dmp [2014-07-26 11:29:07 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2014-07-15 22:39:04 | 000,542,822 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2014-07-15 22:39:04 | 000,482,016 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2014-07-15 22:39:04 | 000,099,372 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2014-07-15 22:39:03 | 000,080,090 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2014-07-10 10:05:53 | 000,414,520 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswsp.sys [2014-07-10 10:04:47 | 000,779,536 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2014-07-10 10:04:47 | 000,192,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys [2014-07-10 10:04:47 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [2014-07-10 10:04:47 | 000,057,800 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2014-07-10 10:04:47 | 000,049,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys [2014-07-10 10:04:47 | 000,024,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswHwid.sys [2014-07-10 10:04:46 | 000,055,112 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2014-07-10 10:04:45 | 000,276,432 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2014-07-10 10:04:45 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2014-07-02 20:25:10 | 000,000,572 | ---- | M] () -- C:\Documents and Settings\Misiek\Moje dokumenty\spider.sav [2014-07-02 12:27:46 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2014-06-30 11:05:14 | 000,014,658 | ---- | M] () -- C:\ads_err.adt [2014-06-30 11:05:14 | 000,003,072 | ---- | M] () -- C:\ads_err.adi [2014-06-29 23:59:25 | 000,004,562 | ---- | M] () -- C:\ads_err.adm [2014-06-29 23:48:45 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_RimUsb_01007.Wdf [2014-06-29 23:47:59 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_RimSerial_01007.Wdf [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\Documents and Settings\Misiek\Pulpit\*.tmp files -> C:\Documents and Settings\Misiek\Pulpit\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-07-27 17:56:15 | 000,022,092 | ---- | C] () -- C:\Documents and Settings\Misiek\Pulpit\dmp.rar [2014-07-27 17:44:47 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\Misiek\Pulpit\Mini072714-01.dmp [2014-07-26 22:57:45 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\Misiek\Pulpit\Mini072614-03.dmp [2014-07-26 19:55:10 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\Misiek\Pulpit\Mini072614-02.dmp [2014-07-26 12:44:35 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\Misiek\Pulpit\Mini072614-01.dmp [2014-06-30 00:55:59 | 000,150,138 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-746137067-1123561945-1177238915-1004-0.dat [2014-06-30 00:55:57 | 000,150,138 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2014-06-29 23:59:23 | 000,014,658 | ---- | C] () -- C:\ads_err.adt [2014-06-29 23:59:23 | 000,004,562 | ---- | C] () -- C:\ads_err.adm [2014-06-29 23:59:23 | 000,003,072 | ---- | C] () -- C:\ads_err.adi [2014-06-29 23:48:45 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_RimUsb_01007.Wdf [2014-06-29 23:47:59 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_RimSerial_01007.Wdf [2014-06-16 23:42:22 | 000,026,084 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT [2014-06-16 23:29:55 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4764.dll [2014-05-22 08:49:10 | 000,362,029 | ---- | C] () -- C:\Documents and Settings\Misiek\sqlite3.dll [2014-04-22 20:55:32 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys [2014-03-29 12:09:37 | 000,192,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys [2014-03-29 12:09:35 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys [2013-11-13 20:41:25 | 000,035,822 | ---- | C] () -- C:\Documents and Settings\Misiek\Expert2.lst [2013-11-13 20:41:24 | 000,000,100 | ---- | C] () -- C:\Documents and Settings\Misiek\Expert2.prf [2013-11-13 20:41:17 | 000,004,645 | ---- | C] () -- C:\Documents and Settings\Misiek\Expert2.dic [2013-10-28 13:14:39 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2013-07-11 09:11:47 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2013-07-10 16:34:44 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2013-07-10 14:10:53 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2013-07-05 17:53:28 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2013-07-05 17:51:55 | 000,149,992 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013-07-05 17:38:35 | 000,008,704 | ---- | C] () -- C:\Documents and Settings\Misiek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-07-05 16:15:08 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2013-07-05 16:09:32 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2013-07-10 17:37:03 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2013-05-29 09:43:43 | 001,510,400 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2013-12-29 20:29:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Avanquest [2014-03-29 12:06:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software [2013-12-29 20:29:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software [2014-05-30 12:39:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2014-02-19 14:17:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2014-04-17 23:29:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LogMeIn [2014-02-19 13:44:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2014-05-25 18:30:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC1Data [2014-06-29 23:47:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Research In Motion [2013-12-29 20:33:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony [2013-12-29 20:46:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony Mobile [2014-06-04 18:34:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\.mono [2014-03-29 12:10:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\AVAST Software [2014-05-30 12:39:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\DAEMON Tools Lite [2014-06-18 20:57:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\Dropbox [2014-06-18 20:56:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\DropboxMaster [2014-03-21 17:15:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\NapiProjekt [2014-02-19 14:10:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\Nokia [2014-02-19 14:10:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\PC Suite [2014-06-30 00:01:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\Research In Motion [2013-08-07 11:13:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\Sports Interactive [2014-06-04 18:44:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\Unity [2014-07-27 16:48:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\uTorrent [2014-06-29 23:59:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Misiek\Dane aplikacji\XCPCSync.OEM [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2013-11-23 17:09:57 | 105,869,762 | ---- | M] ()(C:\WINDOWS\System32\?i?;) -- C:\WINDOWS\System32\ﻢì啼; [2013-11-23 17:09:57 | 105,869,762 | ---- | C] ()(C:\WINDOWS\System32\?i?;) -- C:\WINDOWS\System32\ﻢì啼; [2013-11-06 08:34:36 | 105,150,902 | ---- | M] ()(C:\WINDOWS\System32\Ż??;) -- C:\WINDOWS\System32\ˉ칡啼; [2013-11-06 08:34:36 | 105,150,902 | ---- | C] ()(C:\WINDOWS\System32\Ż??;) -- C:\WINDOWS\System32\ˉ칡啼; [2013-10-30 15:09:24 | 104,158,698 | ---- | M] ()(C:\WINDOWS\System32\???;) -- C:\WINDOWS\System32\茎棱啼; [2013-10-30 15:09:24 | 104,158,698 | ---- | C] ()(C:\WINDOWS\System32\???;) -- C:\WINDOWS\System32\茎棱啼; [2013-10-28 08:58:59 | 103,334,033 | ---- | M] ()(C:\WINDOWS\System32\?í?;) -- C:\WINDOWS\System32\⏉í啼; [2013-10-27 17:24:50 | 103,334,033 | ---- | C] ()(C:\WINDOWS\System32\?í?;) -- C:\WINDOWS\System32\⏉í啼; < End of report >