OTL logfile created on: 2014-11-30 18:39:39 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = J:\
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,75 Gb Total Physical Memory | 1,49 Gb Available Physical Memory | 85,19% Memory free
3,35 Gb Paging File | 3,29 Gb Available in Paging File | 98,03% Paging File free
Paging file location(s): Y:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,66 Gb Total Space | 17,65 Gb Free Space | 18,07% Space Free | Partition Type: NTFS
Drive D: | 648,41 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 368,10 Gb Total Space | 22,06 Gb Free Space | 5,99% Space Free | Partition Type: NTFS
Drive G: | 648,41 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive H: | 198,71 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Drive I: | 1,29 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive J: | 962,10 Mb Total Space | 595,41 Mb Free Space | 61,89% Space Free | Partition Type: FAT32
 
Computer Name: KTOS2 | User Name: ania | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-11-30 18:24:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- J:\OTL.exe
PRC - [2014-09-30 17:00:34 | 000,344,896 | ---- | M] (IObit) -- C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
PRC - [2008-04-14 22:51:10 | 000,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\cmd.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2014-11-30 15:12:15 | 000,123,680 | ---- | M] () [Auto | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\cab4fbb2-1ac7-44d2-9b7d-0c921d8827f4\maintainer.exe -- (MaintainerSvc3.93.1720192)
SRV - [2014-11-30 14:55:14 | 000,526,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files\allgenius\updateallgenius.exe -- (Update allgenius)
SRV - [2014-11-30 14:50:59 | 000,526,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files\allgenius\bin\utilallgenius.exe -- (Util allgenius)
SRV - [2014-11-03 09:29:52 | 000,182,184 | ---- | M] (Oracle Corporation) [Auto | Stopped] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2014-10-30 18:24:49 | 000,166,296 | ---- | M] (APN LLC.) [Auto | Stopped] -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
SRV - [2014-10-28 20:16:48 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014-10-28 20:01:41 | 002,283,296 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
SRV - [2014-09-30 17:00:34 | 000,344,896 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
SRV - [2014-09-19 17:30:54 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2014-09-10 10:23:52 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-08-18 16:36:14 | 000,893,216 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe -- (AdvancedSystemCareService7)
SRV - [2012-06-05 14:56:28 | 000,266,240 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Stopped] -- C:\Program Files\Browny02\BrYNSvc.exe -- (BrYNSvc)
SRV - [2010-06-28 09:50:28 | 000,193,888 | ---- | M] (Ralink Technology, Corp.) [On_Demand | Stopped] -- C:\Program Files\Tenda\Common\RaRegistry.exe -- (RalinkRegistryWriter)
SRV - [2010-03-07 09:47:24 | 000,139,264 | ---- | M] (SOURCENEXT) [On_Demand | Stopped] -- C:\WINDOWS\system32\bgsvcgen.exe -- (bgsvcgen)
SRV - [2009-12-30 12:24:55 | 000,189,760 | ---- | M] (Solid Documents, LLC) [On_Demand | Stopped] -- C:\WINDOWS\Installer\MSI731.tmp -- (SCPDFReadSpool)
SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Stopped] -- E:\wav\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009-12-08 20:39:54 | 000,431,456 | ---- | M] (Seagate) [On_Demand | Stopped] -- C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe -- (SgtSch2Svc)
SRV - [2009-11-25 19:19:11 | 000,814,344 | ---- | M] (ABBYY) [On_Demand | Stopped] -- C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.10.0)
SRV - [2009-10-20 19:19:48 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2009-07-20 10:51:52 | 000,935,208 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2007-12-12 01:05:04 | 001,531,989 | ---- | M] (The Firebird Project) [On_Demand | Stopped] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2007-12-12 01:05:04 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Stopped] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2007-10-12 07:30:24 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2004-12-13 03:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Adapter | On_Demand | Unknown] --  -- (Winsock - Google Desktop Search Backup Before Last Install)
DRV - File not found [Adapter | On_Demand | Unknown] --  -- (Winsock - Google Desktop Search Backup Before First Install)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [File_System | On_Demand | Stopped] --  -- (ucenkpec)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\LV561AV.SYS -- (PID_0928)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Gigabyte\Face_wizard\markfun.w32 -- (MarkFun_NT)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\LVUSBSta.sys -- (LVUSBSta)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\macio\USTAWI~1\Temp\ASFWHide -- (ASFWHide)
DRV - [2014-11-30 02:32:56 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{2ed6f06d-c282-422a-bd97-39d8f3b7bfbe}t.sys -- ({2ed6f06d-c282-422a-bd97-39d8f3b7bfbe}t)
DRV - [2014-11-29 13:32:56 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{66ebe552-c0b3-42d2-8572-ea4c8b37cf9e}t.sys -- ({66ebe552-c0b3-42d2-8572-ea4c8b37cf9e}t)
DRV - [2014-11-28 11:37:10 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{2e099d13-43b4-4786-97b8-180d8e368316}t.sys -- ({2e099d13-43b4-4786-97b8-180d8e368316}t)
DRV - [2014-11-27 02:31:16 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{c1080099-5e1a-43c5-80f0-41cd67821448}t.sys -- ({c1080099-5e1a-43c5-80f0-41cd67821448}t)
DRV - [2014-11-26 16:25:28 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{4658e599-44ac-4503-ad88-1bb24d581e6b}t.sys -- ({4658e599-44ac-4503-ad88-1bb24d581e6b}t)
DRV - [2014-11-25 01:24:24 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{487feb77-84bf-4620-9b7d-e3091f0d8c1a}t.sys -- ({487feb77-84bf-4620-9b7d-e3091f0d8c1a}t)
DRV - [2014-11-22 09:08:00 | 000,779,536 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\aswsnx.sys -- (aswSnx)
DRV - [2014-11-22 08:24:50 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{2d11e69f-33c6-44c6-ac04-bb1b36bd5d05}t.sys -- ({2d11e69f-33c6-44c6-ac04-bb1b36bd5d05}t)
DRV - [2014-11-20 09:56:10 | 002,032,064 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt2860.sys -- (RT80x86)
DRV - [2014-11-19 02:25:18 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{ac0ddd40-091b-4a3f-89cd-5279f84da3bc}t.sys -- ({ac0ddd40-091b-4a3f-89cd-5279f84da3bc}t)
DRV - [2014-11-16 09:23:48 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{69344dc5-97c6-446f-ab93-78620f9ce080}t.sys -- ({69344dc5-97c6-446f-ab93-78620f9ce080}t)
DRV - [2014-11-13 03:25:18 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{cc1c7882-de6a-4305-8b39-485dcaa147b6}t.sys -- ({cc1c7882-de6a-4305-8b39-485dcaa147b6}t)
DRV - [2014-11-12 14:24:40 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{b6bca5b8-0633-4bd4-aff8-a8eac231017e}t.sys -- ({b6bca5b8-0633-4bd4-aff8-a8eac231017e}t)
DRV - [2014-11-07 04:24:28 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{f8625ba0-c2d7-40f8-b773-382964b0698d}t.sys -- ({f8625ba0-c2d7-40f8-b773-382964b0698d}t)
DRV - [2014-11-03 22:24:54 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{3bcd1a06-f942-43b2-83f3-1b446001ad4c}t.sys -- ({3bcd1a06-f942-43b2-83f3-1b446001ad4c}t)
DRV - [2014-10-31 17:35:42 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{f7ba53d8-c3df-4a43-84a3-af76826da955}t.sys -- ({f7ba53d8-c3df-4a43-84a3-af76826da955}t)
DRV - [2014-10-29 04:44:56 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{5f8e00a8-575d-48e6-8d65-64af80d8d3c1}t.sys -- ({5f8e00a8-575d-48e6-8d65-64af80d8d3c1}t)
DRV - [2014-10-25 23:44:20 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{d0e4096d-22f7-4d51-86f7-85e4dcb81f43}t.sys -- ({d0e4096d-22f7-4d51-86f7-85e4dcb81f43}t)
DRV - [2014-10-22 17:47:20 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{1b466f6c-dc3a-43cc-be85-cf3645641e49}t.sys -- ({1b466f6c-dc3a-43cc-be85-cf3645641e49}t)
DRV - [2014-10-20 17:23:20 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{af16652c-3cdd-4795-b89b-2d9cf16806d6}t.sys -- ({af16652c-3cdd-4795-b89b-2d9cf16806d6}t)
DRV - [2014-10-07 05:58:06 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\{af16652c-3cdd-4795-b89b-2d9cf16806d6}Gt.sys -- ({af16652c-3cdd-4795-b89b-2d9cf16806d6}Gt)
DRV - [2014-09-19 19:34:27 | 005,630,168 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2014-09-19 19:34:24 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2014-09-19 19:34:23 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2014-09-19 17:31:12 | 000,414,520 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\aswsp.sys -- (aswSP)
DRV - [2014-09-19 17:30:59 | 000,057,800 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014-09-19 17:30:58 | 000,192,352 | ---- | M] () [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014-09-19 17:30:58 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\aswmonflt.sys -- (aswMonFlt)
DRV - [2014-09-19 17:30:58 | 000,055,112 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\aswrdr.sys -- (aswRdr)
DRV - [2014-09-19 17:30:58 | 000,049,944 | ---- | M] () [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014-09-19 17:30:58 | 000,024,184 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2014-06-04 14:17:12 | 000,015,808 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV - [2013-11-19 16:10:58 | 000,031,776 | ---- | M] (IObit.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\RegFilter.sys -- (RegFilter)
DRV - [2013-11-19 16:10:58 | 000,017,360 | ---- | M] (IObit.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\UrlFilter.sys -- (UrlFilter)
DRV - [2013-03-23 15:51:44 | 000,247,968 | ---- | M] (IObit) [File_System | On_Demand | Stopped] -- C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\FileMonitor.sys -- (FileMonitor)
DRV - [2012-11-12 04:47:48 | 000,255,968 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012-02-02 18:51:02 | 000,441,760 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\timntr.sys -- (timounter)
DRV - [2012-02-02 18:51:02 | 000,044,384 | ---- | M] (Acronis) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2012-02-02 18:50:56 | 000,132,224 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\snapman.sys -- (snapman)
DRV - [2012-02-02 18:50:47 | 000,368,480 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\tdrpman.sys -- (tdrpman)
DRV - [2011-10-07 14:09:23 | 000,436,792 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2011-05-27 18:05:44 | 000,134,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2011-04-04 23:59:56 | 000,297,168 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2011-03-16 15:03:20 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011-03-01 13:25:18 | 000,034,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011-02-22 07:13:02 | 000,022,992 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\AVGIDSEH.sys -- (AVGIDSEH)
DRV - [2011-02-10 06:53:54 | 000,027,216 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2011-02-10 06:53:52 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2010-03-07 09:47:24 | 000,038,944 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\CDRBSDRV.SYS -- (cdrbsdrv)
DRV - [2009-10-20 19:19:44 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2009-04-21 14:31:10 | 000,019,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\Scutum50.sys -- (Scutum50)
DRV - [2009-03-27 00:16:28 | 000,012,672 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\cpuz132_x32.sys -- (cpuz132)
DRV - [2009-02-24 17:42:14 | 000,116,736 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2008-04-14 00:10:48 | 000,036,352 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\disk.sys -- (Disk)
DRV - [2008-04-13 21:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139)
DRV - [2007-09-25 15:59:46 | 000,015,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2007-09-06 19:23:57 | 000,014,656 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2007-07-04 15:27:24 | 000,065,604 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WrKPoETNic2000.sys -- (WRSWanDD)
DRV - [2007-05-02 10:11:18 | 000,109,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm)
DRV - [2007-05-02 10:11:18 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV - [2007-05-02 10:11:16 | 000,083,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus)
DRV - [2006-11-27 16:33:54 | 000,019,968 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006-11-27 16:33:50 | 000,058,368 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006-10-18 16:31:38 | 000,105,472 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2006-10-18 10:38:38 | 000,009,728 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\cxavxbar.sys -- (CXAVXBAR)
DRV - [2006-10-18 10:37:56 | 000,050,816 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\cx88tune.sys -- (CXTUNE)
DRV - [2006-10-18 10:37:26 | 000,162,944 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\cx88vid.sys -- (CX23880)
DRV - [2006-07-24 15:05:00 | 000,005,632 | ---- | M] () [File_System | System | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2006-06-18 22:51:32 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2005-01-06 15:55:38 | 000,009,446 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\WinFast\WFTVFM\WFIOCTL.sys -- (WFIOCTL)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1415003126&from=smt&uid=ST3500418AS_6VM2QEKCXXXX6VM2QEKC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1415003126&from=smt&uid=ST3500418AS_6VM2QEKCXXXX6VM2QEKC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.mystartsearch.com/web/?type=ds&ts=1415003126&from=smt&uid=ST3500418AS_6VM2QEKCXXXX6VM2QEKC&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.mystartsearch.com/web/?type=ds&ts=1415003126&from=smt&uid=ST3500418AS_6VM2QEKCXXXX6VM2QEKC&q={searchTerms}
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.mystartsearch.com/web/?type=ds&ts=1415003126&from=smt&uid=ST3500418AS_6VM2QEKCXXXX6VM2QEKC&q={searchTerms}
 
 
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={E4813609-FBB2-419D-B934-65F64AF28CC1}&mid=391aa2135aace6acf69bd52954677d0b-06ce4fc639803a2e3563922518183d8e94088cb9&lang=pl&ds=AVG&pr=fr&d=2011-12-08 11:10:02&v=15.3.0.11&pid=avg&sg=0&sap=dsp&q={searchTerms}
IE - HKU\.DEFAULT\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={E4813609-FBB2-419D-B934-65F64AF28CC1}&mid=391aa2135aace6acf69bd52954677d0b-06ce4fc639803a2e3563922518183d8e94088cb9&lang=pl&ds=AVG&pr=fr&d=2011-12-08 11:10:02&v=15.3.0.11&pid=avg&sg=0&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-18\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\..\URLSearchHook: {D8278076-BC68-4484-9233-6E7F1628B56C} - C:\Program Files\AskPartnerNetwork\Toolbar\searchhook.dll (APN LLC.)
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\..\SearchScopes\{9877429D-11F8-4E95-BF19-FCEDF718F3A7}: "URL" = http://www.search.ask.com/web?tpid=ORJ-ST-SPE&o=APN11461&pf=V7&p2=^BE7^OSJ000^YY^PL&gct=sb&itbv=12.18.0.81&apn_uid=B99E999C-BAB2-48FF-98B9-AC7D90990771&apn_ptnrs=BE7&apn_dtid=^OSJ000^YY^PL&apn_dbr=Opera.exe_0_12.17.1863.0&doi=2014-10-28&trgb=IE&q={searchTerms}&psv=&pt=tb
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/?a=6OyZQHDG3O&loc=skw&search={searchTerms}
IE - HKU\S-1-5-21-343818398-823518204-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll File not found
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@IObit.com/np_Asc_Plugin: C:\Program Files\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll (IObit)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.46: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Yahoo!\Common\npyaxmpb.dll File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2008-09-04 20:02:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-09-19 17:30:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\faststartff@gmail.com: C:\Documents and Settings\macio\Dane aplikacji\Mozilla\Firefox\Profiles\wd1c8wso.default\extensions\faststartff@gmail.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: E:\Mozilla Firefox\components [2012-05-27 13:09:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: E:\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.2.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.2.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
 
[2009-11-04 17:21:27 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ania\Dane aplikacji\Mozilla\Extensions
[2014-11-30 16:46:07 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ania\Dane aplikacji\Mozilla\Firefox\Profiles\yjgxq4zu.default\extensions
[2010-04-17 10:46:19 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\ania\Dane aplikacji\Mozilla\Firefox\Profiles\yjgxq4zu.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2014-11-30 16:46:09 | 000,000,000 | ---D | M] (Ads Removal) -- C:\Documents and Settings\ania\Dane aplikacji\Mozilla\Firefox\Profiles\yjgxq4zu.default\extensions\adremoveext@adremoveext.net
[2014-09-19 17:11:56 | 000,000,000 | ---D | M] (Advanced SystemCare Surfing Protection) -- C:\Documents and Settings\ania\Dane aplikacji\Mozilla\Firefox\Profiles\yjgxq4zu.default\extensions\ascsurfingprotection@iobit.com
[2014-11-30 14:49:13 | 000,001,147 | ---- | M] () -- C:\Documents and Settings\ania\Dane aplikacji\Mozilla\Firefox\Profiles\yjgxq4zu.default\searchplugins\dsrlte.xml
[2014-10-28 22:44:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2014-10-28 20:16:13 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2014-10-28 22:44:04 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2014-10-28 21:06:13 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}
[2014-10-28 20:16:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014-10-28 20:16:55 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
O1 HOSTS File: ([2014-06-23 16:20:05 | 000,000,671 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 miniclip.com
O1 - Hosts: 127.0.0.1 www.miniclip.com
O1 - Hosts: 127.0.0.1 http://www.miniclip.com
O1 - Hosts: 127.0.0.1 http://miniclip.com
O1 - Hosts: 127.0.0.1 http://translate.google.com
O1 - Hosts: 127.0.0.1 http://www.translate.google.com
O1 - Hosts: 127.0.0.1 translate.google.com
O1 - Hosts: 127.0.0.1 www.google.translate.com
O1 - Hosts: 127.0.0.1 http://translate.google.pl
O1 - Hosts: 127.0.0.1 http://www.translate.google.pl
O1 - Hosts: 127.0.0.1 translate.google.pl
O1 - Hosts: 127.0.0.1 www.translate.google.pl
O1 - Hosts: 127.0.0.1 http://translate.google.pl/
O1 - Hosts: 127.0.0.1 dailymotion.pl
O1 - Hosts: 127.0.0.1 www.dailymotion.pl
O1 - Hosts: 127.0.0.1 http://www.dailymotion.pl
O1 - Hosts: 127.0.0.1 http://www.dailymotion.com
O1 - Hosts: 127.0.0.1 http:/dailymotion.com
O1 - Hosts: 127.0.0.1 dailymotion.com
O2 - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Shopping App by Ask) - {4F524A2D-5354-2D53-5045-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Passport.dll (APN LLC.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (allgenius 1.0.0.4) - {963e8e8b-052d-46d7-abe6-6728f612ae99} - C:\Program Files\allgenius\allgeniusBHO.dll (allgenius)
O2 - BHO: (Ads Removal) - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock)
O2 - BHO: (allgenius) - {b69e6465-8844-4d10-8a6f-22d056e4c2bf} - C:\Program Files\allgenius\allgeniusBHO.dll (allgenius)
O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
O3 - HKLM\..\Toolbar: (Shopping App by Ask) - {4F524A2D-5354-2D53-5045-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (no name) - {a0b1221c-a3ff-4f7c-a393-dc63af5301e9} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-343818398-823518204-725345543-1004\..\Toolbar\ShellBrowser: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
O4 - HKLM..\Run: [ApnTBMon] C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [IObit Malware Fighter] C:\Program Files\IObit\IObit Malware Fighter\IMF.exe (IObit)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFTVFM\WFWIZ.exe (Leadtek Research Inc.)
O4 - HKU\S-1-5-21-343818398-823518204-725345543-1004..\Run: [Advanced SystemCare 7] C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-343818398-823518204-725345543-1004..\Run: [Odkurzacz] C:\Program Files\Odkurzacz\odkurzacz.exe (FranmoSoftware)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Tenda Wireless Utility.lnk = C:\Program Files\Tenda\Common\RaUI.exe (Tenda Technology, Corp.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-343818398-823518204-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm File not found
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm File not found
O9 - Extra Button: Sothink Flash Downloader For IE - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm ()
O9 - Extra 'Tools' menuitem : Sothink Flash Downloader For IE - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm ()
O16 - DPF: {3C38DEE8-BE1A-4DEC-B232-2C78706CC7EA} http://ps.itv.mop.com/update/update/GUpdate-1.0.0.10-signed.cab (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1189104178875 (WUWebControl Class)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab (CeWe Color AG & Co. OHG Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} https://asp.photoprintit.de/microsite/11471/defaults/activex/ips/IPSUploader4.cab (IPSUploader4 Control)
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab (Java Plug-in 1.7.0_45)
O16 - DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab (Java Plug-in 1.8.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} http://asp03.photoprintit.de/microsite/11471/defaults/activex/IPSUploader.cab (IPSUploader Control)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.17.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2515C67C-77E7-4E3F-8A77-6E8C389A7884}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{279B6087-1329-4AD7-BCCA-26BA3BCAD48F}: DhcpNameServer = 192.168.17.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll (Stardock.net, Inc)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O27 - HKLM IFEO\chrmstp.exe: Debugger - C:\Program Files\IObit\Advanced SystemCare 7\AutoReactivator.exe (IObit)
O30 - LSA: Authentication Packages - (relog_ap) - C:\WINDOWS\System32\relog_ap.dll (Acronis)
O31 - SafeBoot: UseAlternatShell - 1
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007-09-06 18:48:26 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2013-08-09 11:43:54 | 000,000,045 | R--- | M] () - D:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2014-05-14 10:56:31 | 000,000,000 | ---D | M] - E:\Autografy -- [ NTFS ]
O32 - AutoRun File - [2014-02-18 08:44:53 | 000,000,000 | ---D | M] - E:\autografylks -- [ NTFS ]
O32 - AutoRun File - [2013-08-09 11:43:54 | 000,000,045 | R--- | M] () - G:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2014-02-21 11:12:52 | 000,000,065 | R--- | M] () - H:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2013-02-14 14:30:12 | 000,000,057 | R--- | M] () - I:\autorun.inf -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart)
O34 - HKLM BootExecute: (SmartDefragBootTime.exe)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-11-30 18:08:37 | 000,000,000 | ---D | C] -- C:\FRST
[2014-11-30 15:23:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ania\Application Data
[2014-11-30 14:49:16 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{2ed6f06d-c282-422a-bd97-39d8f3b7bfbe}t.sys
[2014-11-30 14:48:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ania\Dane aplikacji\Pay-By-Ads
[2014-11-29 22:47:34 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{66ebe552-c0b3-42d2-8572-ea4c8b37cf9e}t.sys
[2014-11-29 00:26:04 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{2e099d13-43b4-4786-97b8-180d8e368316}t.sys
[2014-11-27 15:43:19 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{c1080099-5e1a-43c5-80f0-41cd67821448}t.sys
[2014-11-27 01:36:06 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{4658e599-44ac-4503-ad88-1bb24d581e6b}t.sys
[2014-11-25 19:16:07 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{487feb77-84bf-4620-9b7d-e3091f0d8c1a}t.sys
[2014-11-22 19:02:40 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
[2014-11-22 18:51:36 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{2d11e69f-33c6-44c6-ac04-bb1b36bd5d05}t.sys
[2014-11-20 16:12:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\IObit Malware Fighter
[2014-11-20 14:16:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ania\Ustawienia lokalne\Dane aplikacji\AskPartnerNetwork
[2014-11-20 09:53:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Driver Booster 2
[2014-11-20 09:53:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\tasks\ImCleanDisabled
[2014-11-19 12:38:14 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{ac0ddd40-091b-4a3f-89cd-5279f84da3bc}t.sys
[2014-11-16 22:14:35 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{69344dc5-97c6-446f-ab93-78620f9ce080}t.sys
[2014-11-13 13:39:37 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{cc1c7882-de6a-4305-8b39-485dcaa147b6}t.sys
[2014-11-13 09:39:36 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{b6bca5b8-0633-4bd4-aff8-a8eac231017e}t.sys
[2014-11-07 19:05:53 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{f8625ba0-c2d7-40f8-b773-382964b0698d}t.sys
[2014-11-04 08:37:41 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{3bcd1a06-f942-43b2-83f3-1b446001ad4c}t.sys
[2014-11-03 09:30:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2014-11-03 09:30:13 | 000,867,240 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll
[2014-11-03 09:30:13 | 000,789,416 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
[2014-11-03 09:30:13 | 000,263,592 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2014-11-03 09:29:19 | 000,000,000 | ---D | C] -- C:\Program Files\globalUpdate
[2014-11-01 08:30:03 | 000,055,872 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{f7ba53d8-c3df-4a43-84a3-af76826da955}t.sys
[32 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-11-30 18:35:46 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014-11-30 17:10:00 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-343818398-823518204-725345543-1003UA.job
[2014-11-30 16:53:22 | 000,000,364 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014-11-30 16:47:43 | 000,000,266 | ---- | M] () -- C:\WINDOWS\tasks\ASC7_PerformanceMonitor.job
[2014-11-30 16:46:06 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefrag3_Startup.job
[2014-11-30 16:46:02 | 000,000,430 | ---- | M] () -- C:\WINDOWS\tasks\Opera scheduled Autoupdate 1377279512.job
[2014-11-30 16:45:59 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefrag3_Update.job
[2014-11-30 16:45:57 | 000,000,272 | ---- | M] () -- C:\WINDOWS\tasks\Driver Booster Update.job
[2014-11-30 16:45:57 | 000,000,270 | ---- | M] () -- C:\WINDOWS\tasks\Driver Booster Scan.job
[2014-11-30 16:45:56 | 000,000,408 | ---- | M] () -- C:\WINDOWS\tasks\RNUpgradeHelperLogonPrompt_macio.job
[2014-11-30 02:32:56 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{2ed6f06d-c282-422a-bd97-39d8f3b7bfbe}t.sys
[2014-11-29 13:32:56 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{66ebe552-c0b3-42d2-8572-ea4c8b37cf9e}t.sys
[2014-11-28 11:37:10 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{2e099d13-43b4-4786-97b8-180d8e368316}t.sys
[2014-11-28 10:10:00 | 000,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-343818398-823518204-725345543-1003Core.job
[2014-11-27 02:31:16 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{c1080099-5e1a-43c5-80f0-41cd67821448}t.sys
[2014-11-26 16:25:28 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{4658e599-44ac-4503-ad88-1bb24d581e6b}t.sys
[2014-11-25 01:24:24 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{487feb77-84bf-4620-9b7d-e3091f0d8c1a}t.sys
[2014-11-22 19:02:48 | 000,001,668 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Thunderbird.lnk
[2014-11-22 16:31:18 | 000,584,892 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2014-11-22 16:31:18 | 000,520,966 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014-11-22 16:31:18 | 000,112,040 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2014-11-22 16:31:18 | 000,090,402 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014-11-22 09:08:00 | 000,779,536 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswsnx.sys
[2014-11-22 08:24:50 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{2d11e69f-33c6-44c6-ac04-bb1b36bd5d05}t.sys
[2014-11-20 16:12:05 | 000,000,826 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\IObit Malware Fighter.lnk
[2014-11-20 09:56:10 | 002,032,064 | ---- | M] (Ralink Technology, Corp.) -- C:\WINDOWS\System32\drivers\rt2860.sys
[2014-11-20 09:56:10 | 000,014,051 | ---- | M] () -- C:\WINDOWS\System32\RaCoInst.dat
[2014-11-20 09:54:08 | 000,001,785 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Driver Booster 2.lnk
[2014-11-19 02:25:18 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{ac0ddd40-091b-4a3f-89cd-5279f84da3bc}t.sys
[2014-11-18 13:30:24 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014-11-16 09:23:48 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{69344dc5-97c6-446f-ab93-78620f9ce080}t.sys
[2014-11-13 03:25:18 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{cc1c7882-de6a-4305-8b39-485dcaa147b6}t.sys
[2014-11-12 14:24:40 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{b6bca5b8-0633-4bd4-aff8-a8eac231017e}t.sys
[2014-11-10 11:24:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2014-11-07 04:24:28 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{f8625ba0-c2d7-40f8-b773-382964b0698d}t.sys
[2014-11-03 22:24:54 | 000,055,872 | ---- | M] (StdLib) -- C:\WINDOWS\System32\drivers\{3bcd1a06-f942-43b2-83f3-1b446001ad4c}t.sys
[2014-11-03 09:29:49 | 000,263,592 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2014-11-03 09:29:48 | 000,144,896 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2014-11-03 09:29:47 | 000,867,240 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll
[2014-11-03 09:29:46 | 000,789,416 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
[2014-11-03 09:25:31 | 000,001,688 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk
[2014-11-01 14:46:53 | 000,000,472 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol
[32 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-11-22 19:02:48 | 000,001,674 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Thunderbird.lnk
[2014-11-22 19:02:48 | 000,001,668 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Thunderbird.lnk
[2014-11-20 16:12:05 | 000,000,826 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\IObit Malware Fighter.lnk
[2014-11-20 09:53:50 | 000,000,272 | ---- | C] () -- C:\WINDOWS\tasks\Driver Booster Update.job
[2014-11-20 09:53:50 | 000,000,270 | ---- | C] () -- C:\WINDOWS\tasks\Driver Booster Scan.job
[2014-11-20 09:53:49 | 000,001,785 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Driver Booster 2.lnk
[2014-11-01 14:46:53 | 000,000,472 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2014-10-19 10:29:45 | 000,347,922 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2014-10-15 07:44:16 | 000,018,248 | ---- | C] () -- C:\WINDOWS\System32\roboot.exe
[2014-10-15 07:16:31 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2014-10-14 08:11:24 | 000,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2014-08-10 12:29:13 | 000,004,950 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\uxxadbmu.rlu
[2014-05-26 07:20:01 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys
[2013-12-21 20:00:32 | 000,192,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013-12-21 20:00:32 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013-12-21 17:35:59 | 000,000,256 | ---- | C] () -- C:\WINDOWS\_delis32.ini
[2013-12-10 09:23:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\UMXADDIN.INI
[2013-12-10 09:23:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\pexplore.ini
[2013-12-03 14:44:15 | 000,026,084 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2013-09-30 18:47:11 | 000,003,728 | ---- | C] () -- C:\Program Files\Mozilla Firefoxavg-secure-search.xml
[2013-09-17 14:23:58 | 018,049,948 | ---- | C] () -- C:\WINDOWS\System32\Colorland.pl_Easy Color Basic 2.0_uninstaller.exe
[2013-08-23 08:40:47 | 000,480,608 | ---- | C] () -- C:\WINDOWS\System32\DiagFunc.dll
[2013-08-23 08:40:47 | 000,001,191 | ---- | C] () -- C:\WINDOWS\System32\W32N55.INI
[2013-08-23 08:40:47 | 000,000,449 | ---- | C] () -- C:\WINDOWS\System32\DiagFunc.ini
[2013-08-23 08:39:59 | 000,014,051 | ---- | C] () -- C:\WINDOWS\System32\RaCoInst.dat
[2013-07-05 20:12:25 | 000,000,120 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\{738611E3-FE95-B2C9-660D-5564-53AFEACA}.ini
[2013-07-03 11:33:16 | 001,072,544 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2013-07-03 11:33:16 | 001,072,544 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2013-07-03 11:33:16 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2013-02-27 20:49:33 | 000,753,152 | ---- | C] () -- C:\WINDOWS\is-BHJBB.exe
[2013-02-08 04:03:08 | 002,816,504 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2012-04-14 09:42:55 | 000,000,116 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\{B45BDB07-8A0B-E3CA-BC69-29F7-BDD618F5}.ini
[2009-05-13 20:23:26 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2008-12-28 20:13:45 | 000,000,047 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\GetRight.snk
[2008-09-14 14:09:17 | 000,001,755 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\QTSBandwidthCache
[2008-03-28 12:45:48 | 000,009,420 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\GRGames.ini
[2008-03-28 12:45:48 | 000,000,520 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\GetRight.001
[2008-03-28 09:36:15 | 000,000,486 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\GRFolder.ini
[2008-03-19 15:28:37 | 000,014,290 | ---- | C] () -- C:\Program Files\settings.dat
[2008-01-05 14:53:59 | 000,029,696 | ---- | C] () -- C:\Documents and Settings\ania\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2007-10-12 07:19:36 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2014-02-25 04:30:38 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 11:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 22:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-08-05 12:53:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2014-10-28 20:54:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\APN
[2009-03-08 20:41:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2014-10-28 20:55:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AskPartnerNetwork
[2007-10-12 07:23:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Autodesk
[2013-12-21 19:55:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2014-08-30 21:42:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG
[2011-02-17 17:17:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG10
[2011-11-23 17:02:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Badoo
[2014-11-30 15:12:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\cab4fbb2-1ac7-44d2-9b7d-0c921d8827f4
[2011-02-17 17:16:59 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2013-08-03 18:14:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ControlCenter4
[2014-10-19 09:08:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Freemake
[2010-03-27 09:21:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2013-06-25 15:18:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GG
[2011-06-26 11:57:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GlobalSCAPE
[2009-03-06 20:54:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Grisoft
[2013-06-24 08:26:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\install_clap
[2014-09-22 18:03:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IObit
[2014-08-14 22:08:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2014-10-15 07:17:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Leawo
[2013-09-17 14:35:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\M-Photo
[2013-11-28 18:35:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData
[2012-01-28 18:30:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\mpSOFT
[2013-07-05 20:12:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\muzo
[2012-01-14 20:38:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2014-10-28 21:42:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Oracle
[2014-11-27 19:27:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ProductData
[2013-09-26 10:23:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM
[2011-09-17 11:40:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.1986-12.com.adobe
[2012-02-02 18:51:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Seagate
[2009-12-30 12:24:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SolidDocuments
[2013-06-24 08:26:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2013-08-23 08:39:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tenda Driver
[2009-08-26 15:18:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl
[2013-09-09 16:45:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\tmp
[2012-12-09 21:48:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software
[2007-09-08 11:36:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems
[2014-10-15 07:36:32 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
[2014-09-23 09:04:07 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{1C533CDB-BAC7-4600-B3DE-0B628D9AC643}
[2014-09-19 17:11:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
[2012-03-04 10:04:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012-12-09 21:47:28 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2009-07-30 12:17:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\AutoUpdate
[2013-12-21 20:02:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\AVAST Software
[2014-09-11 18:48:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\AVG
[2011-04-29 14:23:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\AVG10
[2013-08-22 16:05:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\ControlCenter4
[2012-03-08 17:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\Foxit Software
[2008-04-08 15:31:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\GetRight
[2014-09-19 17:27:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\IObit
[2013-05-11 18:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\ipla
[2010-01-08 20:08:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\Nowe Gadu-Gadu
[2010-09-08 07:39:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\OpenOffice.ux.pl2
[2008-01-22 08:04:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\Opera
[2013-12-03 14:53:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\Opera Software
[2014-11-30 14:48:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\Pay-By-Ads
[2014-09-19 17:12:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\ProductData
[2013-04-22 17:52:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\SolidDocuments
[2013-12-21 17:11:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\TuneUp Software
[2013-12-21 18:11:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ania\Dane aplikacji\VSRevoGroup
[2012-12-12 17:39:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\TuneUp Software
[2014-08-30 21:48:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\AVG
[2014-07-05 10:49:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Systweak
[2012-12-10 17:10:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\TuneUp Software
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C895616B

< End of report >