OTL logfile created on: 2014-09-18 13:41:44 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = e:\FIXlog Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1014,36 Mb Total Physical Memory | 336,85 Mb Available Physical Memory | 33,21% Memory free 2,39 Gb Paging File | 1,85 Gb Available in Paging File | 77,54% Paging File free Paging file location(s): C:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 71,04 Gb Total Space | 35,55 Gb Free Space | 50,04% Space Free | Partition Type: NTFS Drive D: | 72,00 Gb Total Space | 69,58 Gb Free Space | 96,64% Space Free | Partition Type: NTFS Drive E: | 1,94 Gb Total Space | 0,80 Gb Free Space | 40,98% Space Free | Partition Type: FAT32 Computer Name: YOUR-89F46DCB53 | User Name: GOSIA | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-09-18 13:27:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- e:\FIXlog\OTL.exe PRC - [2014-08-27 12:08:20 | 002,375,984 | ---- | M] () -- C:\WINDOWS\system32\dmwu.exe PRC - [2014-08-27 12:08:20 | 000,730,928 | ---- | M] () -- C:\WINDOWS\system32\mjcm\dnkt.exe PRC - [2014-07-25 12:52:40 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe PRC - [2014-06-02 12:40:52 | 000,368,272 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\SSL Network Extender\slimsvc.exe PRC - [2013-01-24 14:18:46 | 001,646,216 | ---- | M] (Ask) -- C:\Program Files\Ask.com\Updater\Updater.exe PRC - [2012-08-15 19:08:34 | 000,231,768 | ---- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe PRC - [2012-05-29 15:50:04 | 000,115,032 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe PRC - [2012-04-27 11:24:44 | 000,163,456 | ---- | M] (Atheros) -- C:\Program Files\Bluetooth XP Suite\Ath_CoexAgent.exe PRC - [2012-04-27 10:17:50 | 002,186,880 | ---- | M] (Atheros Commnucations) -- C:\Program Files\Bluetooth XP Suite\BluetoothSuit.exe PRC - [2012-03-07 01:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2011-03-04 11:39:14 | 000,584,488 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Update\NASvc.exe PRC - [2010-12-17 07:56:10 | 003,707,808 | ---- | M] (Ghisler Software GmbH) -- C:\totalcmd\TOTALCMD.EXE PRC - [2010-11-03 13:40:50 | 000,117,248 | ---- | M] () -- C:\Program Files\eMPendium\eMPendiumService.exe PRC - [2010-04-20 14:26:44 | 000,300,912 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe PRC - [2008-10-20 11:32:54 | 002,768,896 | ---- | M] () -- C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe PRC - [2008-10-06 19:07:26 | 000,679,936 | ---- | M] (SAMSUNG Electronics) -- C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe PRC - [2008-05-21 17:44:30 | 000,299,008 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\MagicKBD\PerformanceManager.exe PRC - [2008-05-20 21:02:08 | 000,372,736 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Program Files\Samsung\MagicKBD\MagicKBD.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-03-20 12:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe PRC - [2007-12-20 21:40:30 | 000,659,456 | ---- | M] (Samsung Electronics,.LTD) -- C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe PRC - [2007-04-01 10:02:38 | 000,568,176 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe PRC - [2006-10-30 15:29:28 | 000,036,864 | ---- | M] () -- C:\Program Files\Samsung\Samsung Network Manager\SNMWLANService.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-08-27 12:08:22 | 001,775,920 | ---- | M] () -- C:\WINDOWS\system32\mjcm\5132\nsib.dll MOD - [2014-08-27 12:08:20 | 002,375,984 | ---- | M] () -- C:\WINDOWS\system32\dmwu.exe MOD - [2014-08-27 12:08:20 | 000,730,928 | ---- | M] () -- C:\WINDOWS\system32\mjcm\dnkt.exe MOD - [2012-04-27 10:58:56 | 000,069,248 | ---- | M] () -- C:\Program Files\Bluetooth XP Suite\Sync.dll MOD - [2012-04-27 10:27:14 | 000,102,016 | ---- | M] () -- C:\Program Files\Bluetooth XP Suite\L2capLib.dll MOD - [2010-11-03 13:40:50 | 000,117,248 | ---- | M] () -- C:\Program Files\eMPendium\eMPendiumService.exe MOD - [2010-04-20 14:26:44 | 000,300,912 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe MOD - [2010-04-16 14:11:02 | 000,155,648 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\HMXML.dll MOD - [2008-10-20 11:32:54 | 002,768,896 | ---- | M] () -- C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe MOD - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2007-10-25 13:51:16 | 000,198,656 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libcurl.dll MOD - [2007-04-01 10:00:28 | 002,842,624 | ---- | M] () -- C:\WINDOWS\system32\btwicons.dll MOD - [2006-10-30 15:29:28 | 000,036,864 | ---- | M] () -- C:\Program Files\Samsung\Samsung Network Manager\SNMWLANService.exe MOD - [2006-08-12 13:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll MOD - [2005-07-12 17:34:22 | 000,045,056 | ---- | M] () -- C:\Program Files\Samsung\MagicKBD\EasyBoxDll.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt) SRV - [2014-09-17 15:07:56 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-09-12 04:42:07 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-08-27 12:08:20 | 002,375,984 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\dmwu.exe -- (IBUpdaterService) SRV - [2014-07-25 12:52:40 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2014-06-02 12:40:52 | 000,368,272 | ---- | M] (Check Point Software Technologies) [Auto | Running] -- C:\Program Files\CheckPoint\SSL Network Extender\slimsvc.exe -- (cpextender) SRV - [2013-10-23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-04-27 11:24:44 | 000,163,456 | ---- | M] (Atheros) [Auto | Running] -- C:\Program Files\Bluetooth XP Suite\Ath_CoexAgent.exe -- (ZAtheros Bt&Wlan Coex Agent) SRV - [2012-03-07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2011-03-04 11:39:14 | 000,584,488 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2010-11-03 13:40:50 | 000,117,248 | ---- | M] () [Auto | Running] -- C:\Program Files\eMPendium\eMPendiumService.exe -- (eMPendiumService) SRV - [2006-10-30 15:29:28 | 000,036,864 | ---- | M] () [Auto | Running] -- C:\Program Files\Samsung\Samsung Network Manager\SNMWLANService.exe -- (SNM WLAN Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\zgdcnmea.sys -- (zgdcnmea) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\zgdcnet.sys -- (zgdcnet) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\zgdcmdm.sys -- (zgdcmdm) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\zgdcdiag.sys -- (zgdcdiag) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\zgdcat.sys -- (zgdcat) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\massfilter_LTE.sys -- (massfilter_lte) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2014-06-02 12:40:52 | 000,129,304 | ---- | M] (Check Point Software Technologies) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vna.sys -- (VNA) DRV - [2012-07-24 09:51:14 | 002,092,768 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416) DRV - [2012-04-27 10:23:50 | 000,531,456 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btfilter.sys -- (btfilter) DRV - [2012-04-27 10:23:32 | 000,079,488 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btathusb.sys -- (BTATHUSB) DRV - [2012-04-27 10:22:20 | 000,663,808 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btathprot.sys -- (BTATHPROT) DRV - [2012-03-27 16:48:00 | 000,299,424 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp) DRV - [2012-03-07 01:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2012-03-07 01:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2012-03-07 01:02:00 | 000,035,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (AswRdr) DRV - [2012-03-07 01:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2012-03-07 01:01:39 | 000,095,704 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2012-03-07 01:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2012-03-07 00:58:29 | 000,024,920 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2008-09-29 21:23:00 | 000,119,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hspamdm.sys -- (hspamdm) DRV - [2008-09-29 21:23:00 | 000,098,560 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hspaserd.sys -- (hspaserd) DRV - [2008-09-29 21:23:00 | 000,091,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hspabus.sys -- (hspabus) DRV - [2008-09-29 21:23:00 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hspamdfl.sys -- (hspamdfl) DRV - [2008-09-23 22:23:58 | 000,238,464 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMC326.sys -- (VMC326) DRV - [2008-08-27 01:35:00 | 004,753,920 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2008-01-15 21:50:50 | 000,459,520 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73) DRV - [2008-01-14 20:01:02 | 000,030,208 | ---- | M] (Samsung Electronics,.LTD) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SamsungEDS.SYS -- (DNSeFilter) DRV - [2007-03-31 22:02:42 | 000,876,384 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2007-03-23 19:50:42 | 000,067,960 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2007-03-23 19:50:36 | 000,037,280 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem) DRV - [2007-03-23 19:50:24 | 000,149,123 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS) DRV - [2007-03-23 19:50:08 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2007-03-23 19:49:54 | 000,539,072 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio) DRV - [2006-10-30 15:29:28 | 000,019,840 | ---- | M] (Samsung) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SUE_PD.sys -- (SUEPD) DRV - [2005-10-27 06:18:05 | 000,004,300 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\MEMIO.SYS -- (DOSMEMIO) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\..\SearchScopes,DefaultScope = {0521FE7E-5546-4D79-BA0E-7E0150858D43} IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\..\SearchScopes\{0521FE7E-5546-4D79-BA0E-7E0150858D43}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms}&rlz=1I7SKPB_en IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\..\SearchScopes\{3BFBB3F6-51AF-47B6-87DD-D078DEAC846F}: "URL" = http://en.wikipedia.org/w/index.php?title=Special:Search&search={searchTerms} IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://mysearch.sweetpacks.com?src=6&q={searchTerms}&barid=&&st=23 IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\..\SearchScopes\{F0D29DED-CD5D-4E23-8ABD-5082022F8547}: "URL" = http://www.allegro.pl/search.php?sg=0&string={searchTerms} IE - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:32.0.1 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014-09-17 11:57:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\GOSIA\Dane aplikacji\Mozilla\Extensions [2014-09-17 12:07:44 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\GOSIA\Dane aplikacji\Mozilla\Firefox\Profiles\dflcsib9.default\extensions [2014-09-17 11:56:35 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions [2014-09-17 11:56:35 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://home.sweetim.com/?crg=3.1010000&st=12&barid={FDBD2955-C08C-11E1-B4BE-001377D0B3A9} CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Pierwszy u\u017Cytkownik (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - plugin: Error reading preferences file CHR - Extension: YouTube = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: avast! WebRep = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\ CHR - Extension: SweetIM for Facebook = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\ CHR - Extension: No name found = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.0.0.1_0\ CHR - Extension: Gmail = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ CHR - Extension: YouTube = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: avast! WebRep = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\ CHR - Extension: SweetIM for Facebook = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\ CHR - Extension: No name found = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.0.0.1_0\ CHR - Extension: Gmail = C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\..\Toolbar\WebBrowser: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [AtherosBtXpStack] C:\Program Files\Bluetooth XP Suite\BluetoothSuit.exe (Atheros Commnucations) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [BatteryManager] C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe () O4 - HKLM..\Run: [DMHotKey] C:\Program Files\Samsung\Easy Display Manager\DMLoader.exe (SAMSUNG Electronics) O4 - HKLM..\Run: [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe (Samsung Electronics,.LTD) O4 - HKLM..\Run: [MagicKeyboard] C:\Program Files\Samsung\MagicKBD\PreMKbd.exe () O4 - HKLM..\Run: [SUPBackGround] C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe () O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.) O4 - HKU\S-1-5-21-3818409279-1744527441-83536557-1005..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-3818409279-1744527441-83536557-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O15 - HKLM\..Trusted Domains: 127.0.0.1 ([]http in Trusted sites) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1375690235671 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab (Java Plug-in 10.67.2) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Java Plug-in 1.5.0) O16 - DPF: {CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab (Java Plug-in 1.6.0_45) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab (Java Plug-in 10.67.2) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1AC6AA18-D4EB-4B55-9BDB-2796687A4602}: NameServer = 194.204.159.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A25EC00E-2EA2-4167-AF86-8AFF57684EF2}: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\empbook {F4673987-2C36-49e4-B23C-29DF753D84A5} - C:\Program Files\eMPendium\eMPendiumHandler.dll () O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\GOSIA\Moje dokumenty\Moje obrazy\rdAaCsdjWbQXFnJLiX.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\GOSIA\Moje dokumenty\Moje obrazy\rdAaCsdjWbQXFnJLiX.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-10-31 16:49:53 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{6a2c96fa-0244-11e2-b555-001377d078b5}\Shell - "" = AutoRun O33 - MountPoints2\{6a2c96fa-0244-11e2-b555-001377d078b5}\Shell\AutoRun\command - "" = E:\AutoRun.exe /s O33 - MountPoints2\{a9133670-017b-11e2-b54b-001377d078b5}\Shell - "" = AutoRun O33 - MountPoints2\{a9133670-017b-11e2-b54b-001377d078b5}\Shell\AutoRun\command - "" = E:\AutoRun.exe /s O33 - MountPoints2\{ff7af8cb-f211-11de-ae10-001377d0b3a9}\Shell\AutoRun\command - "" = E:\wd_windows_tools\WDSetup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-09-18 10:38:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Moje dokumenty\Pobrane [2014-09-17 16:04:05 | 000,000,000 | ---D | C] -- C:\Program Files\CheckPoint [2014-09-17 16:02:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Dane aplikacji\CheckPoint [2014-09-17 16:01:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun [2014-09-17 15:33:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Office [2014-09-17 15:31:21 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works [2014-09-17 15:30:51 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio [2014-09-17 15:30:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2014-09-17 15:30:24 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2014-09-17 15:27:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW [2014-09-17 15:27:03 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2014-09-17 15:24:29 | 000,000,000 | RH-D | C] -- C:\MSOCache [2014-09-17 13:56:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\AutoKMS [2014-09-17 12:35:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Microsoft Help [2014-09-17 12:35:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help [2014-09-17 12:03:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\GHISLER [2014-09-17 11:56:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\Mozilla [2014-09-17 11:56:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Dane aplikacji\Mozilla [2014-09-17 11:56:36 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service [2014-09-17 11:56:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Mozilla [2014-09-17 11:56:30 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2014-09-17 11:49:03 | 000,000,000 | ---D | C] -- C:\totalcmd [2014-09-17 11:49:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Menu Start\Programy\Total Commander [2014-09-17 11:49:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Dane aplikacji\GHISLER [2014-09-17 11:46:41 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2014-09-17 11:46:23 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2014-09-17 11:46:23 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2014-09-17 11:46:23 | 000,096,680 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2014-09-17 11:15:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Moje dokumenty\Odebrane pliki [2014-09-06 23:22:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mjcm [2014-09-06 23:21:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\SWDS [2014-09-05 16:29:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-09-18 13:51:01 | 000,000,234 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2014-09-18 13:49:00 | 000,000,460 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{4559B72B-FAEA-48FC-B183-237D3B4A4BC5}.job [2014-09-18 13:41:01 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2014-09-18 13:37:01 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{7F839764-891A-4E8C-AA2E-DF29772567BD}.job [2014-09-18 13:34:10 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2014-09-18 13:34:08 | 000,000,222 | ---- | M] () -- C:\WINDOWS\tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job [2014-09-18 13:32:23 | 000,000,292 | ---- | M] () -- C:\WINDOWS\tasks\AutoKMS.job [2014-09-18 13:32:17 | 000,151,552 | ---- | M] () -- C:\WINDOWS\KMSEmulator.exe [2014-09-18 13:30:51 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2014-09-18 13:30:47 | 1063,702,528 | -HS- | M] () -- C:\hiberfil.sys [2014-09-18 10:44:22 | 000,000,987 | ---- | M] () -- C:\Documents and Settings\GOSIA\bmarchive.bms [2014-09-18 10:04:42 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2014-09-17 16:06:51 | 000,001,832 | ---- | M] () -- C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\SLC_GOSIA.prx [2014-09-17 15:45:05 | 000,213,672 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2014-09-17 15:07:55 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2014-09-17 15:07:55 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2014-09-17 11:56:38 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2014-09-17 11:54:37 | 000,244,264 | ---- | M] () -- C:\Documents and Settings\GOSIA\Pulpit\Firefox Setup Stub 32.0.1.exe [2014-09-17 11:49:05 | 000,000,548 | ---- | M] () -- C:\Documents and Settings\GOSIA\Pulpit\Total Commander.lnk [2014-09-17 11:16:36 | 000,526,810 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2014-09-17 11:16:36 | 000,465,224 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2014-09-17 11:16:36 | 000,102,628 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2014-09-17 11:16:36 | 000,081,446 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2014-09-17 10:12:12 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2014-09-05 16:33:33 | 000,000,216 | ---- | M] () -- C:\WINDOWS\tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job [2014-08-27 12:08:20 | 002,375,984 | ---- | M] () -- C:\WINDOWS\System32\dmwu.exe [2014-08-27 12:02:18 | 000,027,136 | ---- | M] (IncrediMail, Ltd.) -- C:\WINDOWS\System32\ImHttpComm.dll [2014-08-27 11:24:06 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr80.dll [2014-08-27 11:24:06 | 000,554,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp80.dll [2014-08-27 11:24:06 | 000,479,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcm80.dll [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-09-17 16:05:15 | 000,001,832 | ---- | C] () -- C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\SLC_GOSIA.prx [2014-09-17 13:56:12 | 000,000,292 | ---- | C] () -- C:\WINDOWS\tasks\AutoKMS.job [2014-09-17 13:55:43 | 000,151,552 | ---- | C] () -- C:\WINDOWS\KMSEmulator.exe [2014-09-17 11:56:38 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk [2014-09-17 11:56:38 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2014-09-17 11:54:37 | 000,244,264 | ---- | C] () -- C:\Documents and Settings\GOSIA\Pulpit\Firefox Setup Stub 32.0.1.exe [2014-09-17 11:49:05 | 000,000,548 | ---- | C] () -- C:\Documents and Settings\GOSIA\Pulpit\Total Commander.lnk [2014-09-17 11:49:03 | 000,000,545 | ---- | C] () -- C:\WINDOWS\UC.PIF [2014-09-17 11:49:03 | 000,000,545 | ---- | C] () -- C:\WINDOWS\RAR.PIF [2014-09-17 11:49:03 | 000,000,545 | ---- | C] () -- C:\WINDOWS\PKZIP.PIF [2014-09-17 11:49:03 | 000,000,545 | ---- | C] () -- C:\WINDOWS\PKUNZIP.PIF [2014-09-17 11:49:03 | 000,000,545 | ---- | C] () -- C:\WINDOWS\NOCLOSE.PIF [2014-09-17 11:49:03 | 000,000,545 | ---- | C] () -- C:\WINDOWS\LHA.PIF [2014-09-17 11:49:03 | 000,000,545 | ---- | C] () -- C:\WINDOWS\ARJ.PIF [2013-10-07 15:01:26 | 000,017,735 | ---- | C] () -- C:\Documents and Settings\GOSIA\Menu Start.rar [2013-08-03 15:25:58 | 000,000,987 | ---- | C] () -- C:\Documents and Settings\GOSIA\bmarchive.bms [2013-06-09 15:45:22 | 002,375,984 | ---- | C] () -- C:\WINDOWS\System32\dmwu.exe [2012-10-02 11:17:13 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\GOSIA\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2012-06-06 14:32:51 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2008-10-16 03:02:54 | 001,499,136 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012-05-21 12:46:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software [2011-09-18 21:20:31 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ [2012-06-06 20:07:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\eMPendium [2014-01-25 19:22:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Firefly Studios [2011-07-16 17:13:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2012-04-24 11:54:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PITy [2013-08-03 13:59:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Qualcomm Atheros [2011-07-16 17:13:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2014-09-17 11:20:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SweetIM [2008-10-31 16:57:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WLAN [2011-09-22 14:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\AskToolbar [2014-09-17 16:02:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\CheckPoint [2009-04-30 19:05:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2013-08-03 13:35:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\Easeware [2008-12-14 23:48:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\Gadu-Gadu [2014-09-17 11:49:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\GHISLER [2011-08-08 08:03:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\ipla [2008-12-18 13:21:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\Opera [2011-07-21 12:28:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\PITy2010 [2013-04-29 12:16:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\Podatnik.info [2013-05-31 08:37:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\GOSIA\Dane aplikacji\Unity [2009-04-11 12:25:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Gość\Dane aplikacji\Opera [2012-05-04 22:05:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\tato\Dane aplikacji\AskToolbar [2010-02-05 22:09:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\tato\Dane aplikacji\Opera [2012-09-19 13:07:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\tato\Dane aplikacji\Plus Internet [color=#E56717]========== Purity Check ==========[/color] < End of report >