OTL logfile created on: 2011-05-29 11:38:46 - Run 1
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Documents and Settings\hp\Moje dokumenty\Downloads
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,49 Gb Total Physical Memory | 0,67 Gb Available Physical Memory | 44,71% Memory free
2,83 Gb Paging File | 2,21 Gb Available in Paging File | 78,01% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 66,40 Gb Total Space | 5,58 Gb Free Space | 8,40% Space Free | Partition Type: NTFS
Drive D: | 7,11 Gb Total Space | 0,26 Gb Free Space | 3,66% Space Free | Partition Type: FAT32
 
Computer Name: NITEK | User Name: hp | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-05-29 11:37:21 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\hp\Moje dokumenty\Downloads\OTL.exe
PRC - [2011-05-20 07:54:14 | 001,010,232 | ---- | M] (Google Inc.) -- C:\Documents and Settings\hp\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
PRC - [2009-12-16 15:22:30 | 000,399,032 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
PRC - [2009-05-14 15:47:54 | 000,731,840 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009-05-14 15:47:08 | 002,029,640 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006-05-12 13:33:22 | 000,581,693 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-05-29 11:37:21 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\hp\Moje dokumenty\Downloads\OTL.exe
MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - File not found [On_Demand | Stopped] --  -- (AppMgmt)
SRV - [2010-07-16 18:23:30 | 006,638,080 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe -- (AllShare)
SRV - [2010-02-26 16:14:04 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009-12-16 15:22:30 | 000,399,032 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe -- (vpnagent)
SRV - [2009-10-20 22:52:24 | 000,054,272 | ---- | M] (SolarWinds) [On_Demand | Stopped] -- C:\Program Files\SolarWinds\TFTPServer\SolarWinds TFTP Server.exe -- (SolarWinds TFTP Server)
SRV - [2009-05-14 15:54:22 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009-05-14 15:47:54 | 000,731,840 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2009-05-11 15:18:34 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2007-12-12 01:05:04 | 001,531,989 | ---- | M] (The Firebird Project) [On_Demand | Stopped] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2007-12-12 01:05:04 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Stopped] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2006-06-12 13:27:28 | 000,126,976 | ---- | M] (Hewlett-Packard Development Company, L.P.) [On_Demand | Stopped] -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe -- (AddFiltr)
SRV - [2005-10-06 18:46:38 | 000,856,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Media Connect 2\wmccds.exe -- (WMConnectCDS)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Running] --  -- (catchme)
DRV - [2009-07-10 19:18:46 | 000,024,176 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vpnva.sys -- (vpnva)
DRV - [2009-05-14 15:49:32 | 000,094,360 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009-05-14 15:47:14 | 000,107,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009-05-14 15:41:10 | 000,114,472 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009-04-07 21:25:38 | 000,079,888 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2009-03-19 20:41:42 | 000,294,472 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\system32\drivers\ExpanDrive.sys -- (ExpanDrive)
DRV - [2008-11-17 15:23:16 | 003,636,864 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw5x32.sys -- (NETw5x32) Intel(R)
DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-04-28 20:22:10 | 000,009,344 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey)
DRV - [2006-07-26 22:44:42 | 000,581,632 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (HdAudAddService)
DRV - [2006-07-06 10:28:58 | 000,047,744 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2006-05-12 13:19:04 | 001,342,602 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2006-05-12 13:17:18 | 000,030,363 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2006-05-12 13:17:10 | 000,030,189 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2006-05-12 13:16:44 | 000,057,320 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2006-05-12 13:13:46 | 000,148,168 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2006-04-22 02:06:24 | 001,429,632 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51) Intel(R)
DRV - [2006-04-21 01:03:20 | 000,995,712 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2006-04-21 01:02:40 | 000,208,000 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2006-04-21 01:02:36 | 000,727,296 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2005-12-23 02:02:22 | 000,051,840 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2005-11-17 05:28:32 | 000,028,928 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2005-11-02 03:08:00 | 000,308,992 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005-09-19 14:24:20 | 000,005,760 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EabUsb.sys -- (eabusb)
DRV - [2005-09-19 14:23:52 | 000,007,808 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\eabfiltr.sys -- (eabfiltr)
DRV - [2005-04-14 14:12:32 | 000,019,968 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x)
DRV - [2005-04-04 12:43:22 | 000,048,640 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005-02-23 17:59:54 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2004-08-04 15:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3257914288-59243771-1629657950-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?sc=2
IE - HKU\S-1-5-21-3257914288-59243771-1629657950-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=971163"
FF - prefs.js..browser.search.selectedEngine: "PHP.net"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledItems: {6AC85730-7D0F-4de0-B3FA-21142DD85326}:2.5.5
FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.6.2
FF - prefs.js..extensions.enabledItems: {e3f6c2cc-d8db-498c-af6c-499fb211db97}:1.10.2
FF - prefs.js..extensions.enabledItems: VMwareVMRC@vmware.com:2.5.0.122581
FF - prefs.js..extensions.enabledItems: {c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.9
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}:0.16
FF - prefs.js..extensions.enabledItems: validator@totalvalidator.com:6.11.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {3d7eb24f-2740-49df-8937-200b1cc08f8a}:1.5.14.2
FF - prefs.js..extensions.enabledItems: pencil@evolus.vn:1.0.6
 
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009-08-18 21:38:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-04-30 16:33:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-03-24 00:17:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-09-29 20:25:08 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2009-09-23 22:44:13 | 000,000,000 | ---D | M]
 
[2010-04-12 20:57:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Extensions
[2010-04-12 20:57:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011-05-24 18:24:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions
[2010-04-28 22:30:31 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-10-16 11:27:27 | 000,000,000 | ---D | M] (Flashblock) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2011-03-23 23:55:56 | 000,000,000 | ---D | M] (ColorZilla) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}
[2011-05-17 17:35:28 | 000,000,000 | ---D | M] (Live HTTP Headers) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
[2011-01-09 23:45:03 | 000,000,000 | ---D | M] (Web Developer) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}
[2011-05-24 18:24:25 | 000,000,000 | ---D | M] (Page Speed) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}
[2011-02-18 23:04:13 | 000,000,000 | ---D | M] ("Pencil") -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions\pencil@evolus.vn
[2010-07-21 17:19:05 | 000,000,000 | ---D | M] (RapidShare DownloadHelper) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions\rsDownloadHelper@yevgenyandrov.net
[2009-05-25 15:01:08 | 000,000,000 | ---D | M] (VMware Remote Console Plug-in) -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\extensions\VMwareVMRC@vmware.com
[2010-03-10 00:33:04 | 000,000,728 | ---- | M] () -- C:\Documents and Settings\hp\Dane aplikacji\Mozilla\Firefox\Profiles\f69ubcyv.default\searchplugins\phpnet.xml
[2011-03-23 23:56:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-05-28 22:58:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
File not found (No name found) -- 
() (No name found) -- C:\DOCUMENTS AND SETTINGS\HP\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\F69UBCYV.DEFAULT\EXTENSIONS\FIREBUG@SOFTWARE.JOEHEWITT.COM.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\HP\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\F69UBCYV.DEFAULT\EXTENSIONS\VALIDATOR@TOTALVALIDATOR.COM.XPI
[2010-05-28 22:58:18 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011-04-30 16:33:11 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2010-05-28 22:58:08 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2011-03-24 00:17:50 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2011-03-24 00:17:50 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2011-03-24 00:17:50 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2011-03-24 00:17:50 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2011-03-24 00:17:50 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2011-03-24 00:17:50 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2011-05-28 21:10:55 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (IE Developer Toolbar BHO) - {CC7E636D-39AA-49b6-B511-65413DA137A1} - C:\Program Files\Microsoft\Internet Explorer Developer Toolbar\IEDevToolbar.dll (Microsoft Corporation)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} -  File not found
O3 - HKU\S-1-5-21-3257914288-59243771-1629657950-1006\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKU\S-1-5-21-3257914288-59243771-1629657950-1006..\Run: [ExpanDrive] C:\Program Files\ExpanDrive\ExpanDrive.exe (ExpanDrive Inc)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3257914288-59243771-1629657950-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3257914288-59243771-1629657950-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-3257914288-59243771-1629657950-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-3257914288-59243771-1629657950-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: IE Developer Toolbar - {48FFE35F-36D9-44bd-A6CC-1D34414EAC0D} - C:\Program Files\Microsoft\Internet Explorer Developer Toolbar\IEDevToolbar.dll (Microsoft Corporation)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1239792539343 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\hp\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\hp\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2001-07-27 13:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-05-28 21:13:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2011-05-28 21:05:34 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011-05-28 21:01:06 | 000,000,000 | R--D | C] -- C:\Documents and Settings\hp\Menu Start\Programy\Narzędzia administracyjne
[2011-05-28 21:01:06 | 000,000,000 | R--D | C] -- C:\Documents and Settings\hp\Moje dokumenty\Moje wideo
[2011-05-25 23:26:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\hp\Pulpit\cut
[2011-05-21 20:52:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\hp\Pulpit\zarządzanie projektami
[2011-05-11 00:04:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\hp\Pulpit\kredyt
[2011-05-10 23:27:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype Extras
[2011-05-10 23:26:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype
[2011-05-10 23:26:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2006-07-10 00:47:09 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\csnp2uvc.dll
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-05-29 09:05:10 | 000,001,120 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3257914288-59243771-1629657950-1006UA.job
[2011-05-28 23:05:01 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3257914288-59243771-1629657950-1006Core.job
[2011-05-28 21:10:55 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011-05-28 21:05:41 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2011-05-28 14:02:49 | 1600,180,224 | -HS- | M] () -- C:\hiberfil.sys
[2011-05-28 14:01:46 | 001,228,854 | ---- | M] () -- C:\fsqwr.bmp
[2011-05-27 22:08:21 | 000,193,024 | ---- | M] () -- C:\Documents and Settings\hp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-05-25 23:26:21 | 001,391,349 | ---- | M] () -- C:\Documents and Settings\hp\Pulpit\cut.rar
[2011-05-23 22:15:01 | 000,038,007 | ---- | M] () -- C:\Documents and Settings\hp\Pulpit\Specyfikacja funkcjonalna aplikacji tfCredit.pdf
[2011-05-21 21:11:54 | 000,036,345 | ---- | M] () -- C:\Documents and Settings\hp\Pulpit\SCHEMAT OBIEGU DOC.pdf
[2011-05-19 00:03:15 | 000,000,760 | ---- | M] () -- C:\Documents and Settings\hp\Pulpit\question-balloon.png
[2011-05-13 18:36:06 | 000,000,600 | ---- | M] () -- C:\Documents and Settings\hp\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
[2011-05-11 00:04:21 | 000,010,714 | ---- | M] () -- C:\Documents and Settings\hp\Pulpit\kredyt.zip
[2011-05-04 23:20:01 | 000,040,285 | ---- | M] () -- C:\Documents and Settings\hp\Pulpit\iditpl_aconto.sql
[2011-05-04 22:11:39 | 000,000,788 | ---- | M] () -- C:\Documents and Settings\hp\Pulpit\Ftp mbluepl@mblue.pl.xml
[2011-05-01 11:52:35 | 000,496,188 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-05-01 11:52:35 | 000,437,538 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-05-01 11:52:35 | 000,086,044 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-05-01 11:52:35 | 000,069,382 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-05-28 21:01:39 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011-05-28 14:01:46 | 001,228,854 | ---- | C] () -- C:\fsqwr.bmp
[2011-05-28 12:52:54 | 000,000,023 | ---- | C] () -- C:\Documents and Settings\hp\Pulpit\CurrentMap.dat
[2011-05-25 23:26:22 | 001,391,349 | ---- | C] () -- C:\Documents and Settings\hp\Pulpit\cut.rar
[2011-05-23 22:14:59 | 000,038,007 | ---- | C] () -- C:\Documents and Settings\hp\Pulpit\Specyfikacja funkcjonalna aplikacji tfCredit.pdf
[2011-05-21 21:11:52 | 000,036,345 | ---- | C] () -- C:\Documents and Settings\hp\Pulpit\SCHEMAT OBIEGU DOC.pdf
[2011-05-19 00:03:14 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\hp\Pulpit\question-balloon.png
[2011-05-04 23:20:03 | 000,040,285 | ---- | C] () -- C:\Documents and Settings\hp\Pulpit\iditpl_aconto.sql
[2011-05-04 22:39:55 | 000,010,714 | ---- | C] () -- C:\Documents and Settings\hp\Pulpit\kredyt.zip
[2011-05-04 22:11:42 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\hp\Pulpit\Ftp mbluepl@mblue.pl.xml
[2010-04-02 19:13:13 | 000,000,619 | R--- | C] () -- C:\WINDOWS\System32\hppapr13.dat
[2010-03-03 20:11:45 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-03-03 20:11:43 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010-03-03 20:11:28 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-01-26 18:50:18 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009-10-02 11:30:17 | 000,000,235 | ---- | C] () -- C:\WINDOWS\hpbafd.ini
[2009-09-22 16:15:52 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2009-08-06 15:06:52 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2009-08-06 15:06:52 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2009-08-06 15:06:52 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2009-08-06 15:06:52 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2009-08-05 16:14:10 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\hp\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
[2009-07-09 13:38:41 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\08EC1B8026.sys
[2009-07-09 13:38:40 | 000,003,660 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys
[2009-07-09 09:23:00 | 000,034,332 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009-06-11 22:32:30 | 000,003,619 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2009-05-25 14:59:08 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009-05-19 11:47:04 | 000,000,458 | ---- | C] () -- C:\WINDOWS\kredyty.ini
[2009-05-19 10:43:00 | 000,176,640 | ---- | C] () -- C:\WINDOWS\System32\c5uninst.dll
[2009-04-29 18:29:01 | 000,001,089 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009-04-22 17:22:13 | 000,193,024 | ---- | C] () -- C:\Documents and Settings\hp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-04-16 08:17:12 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-04-15 13:09:40 | 000,002,837 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2009-04-15 12:49:03 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009-04-15 11:49:51 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\hp\Dane aplikacji\wklnhst.dat
[2009-03-19 20:41:42 | 000,294,472 | ---- | C] () -- C:\WINDOWS\System32\drivers\ExpanDrive.sys
[2006-07-10 00:47:09 | 000,102,400 | ---- | C] () -- C:\WINDOWS\HPWebcam.exe
[2006-07-10 00:44:57 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\hp\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2006-07-09 22:54:16 | 000,029,006 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006-07-06 19:28:58 | 000,047,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys
[2006-05-12 13:23:22 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2006-05-12 12:33:28 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006-05-12 11:52:52 | 000,087,890 | ---- | C] () -- C:\WINDOWS\hpqins69.dat
[2006-05-12 11:50:00 | 000,000,059 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2006-05-12 11:36:58 | 000,496,188 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2006-05-12 11:36:58 | 000,437,538 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2006-05-12 11:36:58 | 000,086,044 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2006-05-12 11:36:58 | 000,069,382 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2006-05-12 11:32:02 | 000,206,512 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2006-05-12 11:27:24 | 000,004,499 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2006-05-12 11:23:56 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005-12-03 03:09:10 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005-05-07 03:06:32 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll
[2005-04-06 17:27:14 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2005-04-06 17:24:40 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2004-08-05 06:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004-08-05 06:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2004-08-05 06:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004-08-05 06:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004-08-05 06:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004-08-05 06:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2004-08-05 06:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004-08-05 06:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004-08-05 06:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004-08-05 06:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002-05-29 06:55:42 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2002-05-29 06:54:40 | 000,004,605 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001-11-14 13:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2009-05-22 13:54:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Brontes Processing
[2009-07-10 19:18:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Cisco
[2011-02-21 13:44:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Easy CD-DA Extractor
[2009-04-15 12:22:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2010-05-10 22:11:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2009-11-12 15:39:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MySQL
[2010-05-10 22:32:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia
[2009-08-18 21:41:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2010-01-16 12:57:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SolarWinds
[2010-08-24 23:43:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-10-14 19:46:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:EF6E4E62

< End of report >