OTL logfile created on: 2015-11-09 21:24:02 - Run 9
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\x\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,03 Gb Available Physical Memory | 51,43% Memory free
3,85 Gb Paging File | 3,08 Gb Available in Paging File | 79,94% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 63,47 Gb Total Space | 0,15 Gb Free Space | 0,24% Space Free | Partition Type: NTFS
Drive D: | 78,13 Gb Total Space | 3,17 Gb Free Space | 4,06% Space Free | Partition Type: NTFS
Drive E: | 78,13 Gb Total Space | 4,73 Gb Free Space | 6,05% Space Free | Partition Type: NTFS
Drive F: | 78,35 Gb Total Space | 8,44 Gb Free Space | 10,77% Space Free | Partition Type: NTFS
Drive G: | 4,40 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: x | User Name: x | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2015-10-05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2015-10-05 09:48:44 | 001,513,784 | ---- | M] (Malwarebytes) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2015-10-05 09:48:34 | 009,832,760 | ---- | M] (Malwarebytes) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
PRC - [2014-09-11 18:10:16 | 002,087,264 | ---- | M] (Wondershare) -- C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
PRC - [2013-11-27 13:43:40 | 001,375,600 | ---- | M] (Binary Fortress Software) -- D:\Program Files\DisplayFusion\DisplayFusionService.exe
PRC - [2013-10-27 22:54:50 | 000,151,552 | ---- | M] () -- C:\WINDOWS\KMService.exe
PRC - [2013-10-27 22:49:34 | 000,008,192 | ---- | M] () -- C:\WINDOWS\system32\srvany.exe
PRC - [2013-10-27 10:44:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Dominik_2\Pulpit\OTL.exe
PRC - [2012-05-31 15:50:30 | 001,082,368 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
PRC - [2012-05-28 17:08:28 | 000,368,726 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe
PRC - [2012-05-21 14:36:12 | 000,110,695 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
PRC - [2012-05-21 14:33:56 | 000,147,563 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
PRC - [2012-03-23 13:56:54 | 004,428,800 | ---- | M] () -- C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe
PRC - [2011-07-29 00:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2010-03-18 21:25:55 | 000,126,976 | ---- | M] (CrypKey (Canada) Ltd.) -- C:\WINDOWS\system32\Crypserv.exe
PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2009-09-15 19:44:44 | 000,126,976 | ---- | M] () -- C:\WINDOWS\system32\UAService7.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008-01-29 10:19:46 | 002,157,096 | ---- | M] (Palit Microsystems, Inc.) -- C:\Program Files\VDOTool\TBPANEL.exe
PRC - [2006-11-03 10:01:16 | 000,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\WINDOWS\PixArt\PAC207\Monitor.exe
PRC - [2006-03-14 12:12:26 | 001,097,728 | ---- | M] (Samsung Electronics, Inc.) -- C:\Program Files\MagicRotation\MagicPvt.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-09-11 18:09:20 | 001,498,112 | ---- | M] () -- C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
MOD - [2014-05-19 17:19:02 | 000,137,728 | ---- | M] () -- C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
MOD - [2014-02-20 20:34:05 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8cd995f00848816e3ec49dc326e3d49b\System.ServiceProcess.ni.dll
MOD - [2014-02-20 16:06:11 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2014-02-20 16:02:58 | 005,462,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\7faf645dc46781225cb722edf9e1e738\System.Xml.ni.dll
MOD - [2014-02-20 16:02:52 | 012,434,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1cdfe1998ad6794db3237006906c6fa2\System.Windows.Forms.ni.dll
MOD - [2014-02-20 16:02:40 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\424bff3295c6e7539cc6df62b9425bd0\System.Drawing.ni.dll
MOD - [2014-02-20 16:01:33 | 007,977,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\4b0455ae94e3cecca4bb3ba8c96828c9\System.ni.dll
MOD - [2014-02-20 16:01:26 | 011,497,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\dae02331a443fb52216ca83292cb2f21\mscorlib.ni.dll
MOD - [2013-10-27 22:54:50 | 000,151,552 | ---- | M] () -- C:\WINDOWS\KMService.exe
MOD - [2013-10-27 22:49:34 | 000,008,192 | ---- | M] () -- C:\WINDOWS\system32\srvany.exe
MOD - [2012-05-31 15:48:32 | 000,127,096 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\setup.dll
MOD - [2012-05-21 14:33:58 | 000,028,672 | ---- | M] () -- C:\WINDOWS\system32\BsMobileCSps.dll
MOD - [2012-03-23 13:56:54 | 004,428,800 | ---- | M] () -- C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe
MOD - [2011-07-29 00:09:42 | 000,096,112 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011-07-29 00:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2011-03-28 10:05:18 | 000,061,440 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\Mobile\ExtraLib.dll
MOD - [2011-03-28 10:04:52 | 000,237,568 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\Mobile\BaseLib.dll
MOD - [2010-05-13 15:30:38 | 000,028,730 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\driver\usb\btcusb.dll
MOD - [2010-03-31 20:59:20 | 000,122,880 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\Mobile\s40pack.dll
MOD - [2010-01-30 01:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009-09-15 19:44:44 | 000,126,976 | ---- | M] () -- C:\WINDOWS\system32\UAService7.exe
MOD - [2003-05-01 16:23:28 | 000,041,472 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\Mobile\CsCvt.dll
MOD - [2001-10-29 01:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfmonnt.dll
MOD - [2001-10-26 18:27:02 | 000,015,360 | ---- | M] () -- C:\WINDOWS\system32\tsd32.dll
MOD - [1998-10-31 03:55:56 | 000,005,120 | ---- | M] () -- C:\Program Files\VDOTool\TBMANAGE.DLL
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2015-11-07 23:30:47 | 000,147,624 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015-10-05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2015-10-05 09:48:44 | 001,513,784 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2015-02-18 19:11:32 | 000,315,488 | R--- | M] (Skype Technologies) [Auto | Stopped] -- D:\Program Files\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-11-27 13:43:40 | 001,375,600 | ---- | M] (Binary Fortress Software) [Auto | Running] -- D:\Program Files\DisplayFusion\DisplayFusionService.exe -- (DisplayFusionService)
SRV - [2013-10-27 22:49:34 | 000,008,192 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\srvany.exe -- (KMService)
SRV - [2013-02-04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2012-05-31 15:50:30 | 001,082,368 | ---- | M] (IVT Corporation) [Auto | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe -- (BlueSoleilCS)
SRV - [2012-05-21 14:36:12 | 000,110,695 | ---- | M] (IVT Corporation) [On_Demand | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe -- (BsHelpCS)
SRV - [2012-05-21 14:33:56 | 000,147,563 | ---- | M] (IVT Corporation) [Auto | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe -- (BsMobileCS)
SRV - [2012-04-22 12:51:04 | 000,720,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2012-01-05 16:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- D:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv)
SRV - [2011-06-12 10:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- E:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2010-03-18 21:25:55 | 000,126,976 | ---- | M] (CrypKey (Canada) Ltd.) [Auto | Running] -- C:\WINDOWS\system32\Crypserv.exe -- (CrypKey License)
SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009-11-06 09:18:50 | 000,051,168 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper)
SRV - [2009-09-15 19:44:44 | 000,126,976 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\UAService7.exe -- (UserAccess7)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\KBFiltr.sys -- (KBFiltr)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (a2kd613f)
DRV - [2015-11-09 21:22:03 | 000,170,200 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV - [2015-10-05 09:50:04 | 000,023,256 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2015-05-03 00:21:16 | 000,015,600 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2014-07-31 15:55:50 | 000,025,632 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudioDevice_383.sys -- (WsAudioDevice_383)
DRV - [2014-05-12 14:49:59 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2014-03-26 16:16:46 | 000,320,120 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2013-11-02 00:29:44 | 000,043,720 | ---- | M] (AnchorFree Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hssdrv.sys -- (HssDrv)
DRV - [2013-10-04 20:01:28 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\utm3nzg2.sys -- (utm3nzg2)
DRV - [2013-08-12 23:16:40 | 000,033,512 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\taphss.sys -- (taphss)
DRV - [2013-02-12 01:32:23 | 000,012,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (USB_RNDIS)
DRV - [2012-06-19 15:54:20 | 006,141,584 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2012-06-05 15:33:00 | 000,158,552 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxDrv.sys -- (VBoxDrv)
DRV - [2012-06-05 15:33:00 | 000,116,056 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VBoxNetFlt.sys -- (VBoxNetFlt)
DRV - [2012-06-05 15:33:00 | 000,104,792 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2012-06-05 15:33:00 | 000,091,992 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxUSBMon.sys -- (VBoxUSBMon)
DRV - [2012-06-05 15:33:00 | 000,082,776 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VBoxUSB.sys -- (VBoxUSB)
DRV - [2012-04-22 12:51:38 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2012-03-08 15:21:08 | 000,089,728 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\TPLINKUDSMBus.sys -- (TPLINKUDSMBus)
DRV - [2012-03-08 15:20:18 | 000,146,304 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\TPLINKUDSTcpBus.sys -- (TPLINKUDSTcpBus)
DRV - [2012-01-09 16:28:20 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2012-01-09 16:28:20 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2012-01-09 16:28:20 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2012-01-09 16:28:20 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2011-12-27 09:18:46 | 000,037,344 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2011-12-21 13:47:50 | 000,027,744 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btnetBus.sys -- (IvtPanBusSrv)
DRV - [2011-12-21 13:47:50 | 000,027,744 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btnetBus.sys -- (btnetBUs)
DRV - [2011-12-21 13:47:06 | 000,021,600 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\BtHidBus.sys -- (BtHidBus)
DRV - [2011-11-25 00:26:04 | 000,013,440 | ---- | M] (June Fabrics Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pneteth.sys -- (pneteth)
DRV - [2011-07-27 09:29:04 | 000,022,024 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btcombus.sys -- (IvtComBusSrv)
DRV - [2011-07-27 09:29:04 | 000,022,024 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btcombus.sys -- (BTCOMBUS)
DRV - [2011-07-27 09:28:54 | 000,025,992 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btcomport.sys -- (BTCOM)
DRV - [2011-01-01 10:12:18 | 000,081,168 | ---- | M] (MotioninJoy) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MijXfilt.sys -- (MotioninJoyXFilter)
DRV - [2010-08-18 21:19:24 | 000,014,088 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btnetdrv.sys -- (BT)
DRV - [2010-07-04 20:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2010-04-06 17:32:48 | 000,023,048 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV - [2010-04-06 17:32:48 | 000,023,048 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\IvtBtBus.sys -- (IvtAudioBusSrv)
DRV - [2010-03-19 00:11:11 | 000,023,360 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\Ckldrv.sys -- (NetWorkX)
DRV - [2009-11-18 06:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 06:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009-07-13 16:51:12 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\winusb.sys -- (WinUSB)
DRV - [2009-06-17 13:02:16 | 000,027,528 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - [2009-06-17 13:02:08 | 000,033,800 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2009-02-24 18:42:14 | 000,116,736 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2007-09-28 14:25:22 | 000,614,912 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PFC027.SYS -- (PAC207)
DRV - [2007-03-16 09:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel)
DRV - [2007-03-16 09:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex)
DRV - [2007-02-16 01:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2006-11-27 15:33:54 | 000,019,968 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006-11-27 15:33:50 | 000,058,368 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006-11-22 12:41:18 | 000,022,416 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\device\Win2k\BTNetFilter.sys -- (BTNetFilter)
DRV - [2006-10-18 15:31:38 | 000,105,472 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2006-06-18 22:51:32 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2005-11-14 02:26:34 | 000,009,728 | R--- | M] (Samsung Electronics, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\magicpvt.sys -- (magicpvt)
DRV - [2005-04-30 13:50:20 | 000,011,860 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2005-04-30 13:50:10 | 000,028,271 | ---- | M] (IVT Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2005-03-25 16:18:48 | 000,082,148 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2005-03-09 20:50:16 | 000,033,792 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\libusb0.sys -- (libusb0)
DRV - [2004-10-19 12:37:38 | 000,061,312 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2004-02-01 04:53:20 | 000,026,166 | ---- | M] (Compuware Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbfilt.sys -- (Usbfilt)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\..\SearchScopes,DefaultScope = {0191A6B0-1154-4C22-9182-23A95BBE92D9}
IE - HKLM\..\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\SearchScopes,DefaultScope = {0191A6B0-1154-4C22-9182-23A95BBE92D9}
IE - HKCU\..\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}: "URL" = http://www.google.com/search?q={searchTerms}&rlz=1I7GGLD_pl
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rlz=1I7GGLD_pl&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKCU\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = http://127.0.0.1:4664/search&s=uy0xzWRHC7GvonCsoHg6YvPhISk?q={searchTerms}
IE - HKCU\..\SearchScopes\{E1FFD9CA-CBD9-446B-B6B5-BBE7134AD8A0}: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.countryCode: "PL"
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.search.region: "PL"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledAddons: %7B1A2D0EC4-75F5-4c91-89C4-3656F6E44B68%7D:0.6.3.1-signed
FF - prefs.js..extensions.enabledAddons: %7B71328583-3CA7-4809-B4BA-570A85818FBB%7D:0.8.6.3
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:42.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_19_0_0_226.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.65.2: C:\Program Files\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.65.2: C:\Program Files\Java\jre1.8.0_65\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.40620.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: E:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: E:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\Documents and Settings\All Users\Dane aplikacji\Mozilla\Firefox Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2008-05-15 13:08:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-07-01 22:06:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 42.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2015-11-07 23:29:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 42.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2015-11-07 23:30:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.4.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2014-04-10 12:21:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.4.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2014-08-14 19:07:55 | 000,000,000 | ---D | M]
 
[2012-09-15 13:05:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Extensions
[2015-11-09 19:40:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Firefox\Profiles\7wu4pgwm.default\extensions
[2014-01-17 16:32:13 | 000,000,000 | ---D | M] (Forecastfox) -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Firefox\Profiles\7wu4pgwm.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
[2015-04-25 21:12:38 | 000,000,000 | ---D | M] (Google Minimalist) -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Firefox\Profiles\7wu4pgwm.default\extensions\{64312dc5-3fc3-40d1-b183-0e4060fc52ac}
[2015-07-17 16:41:31 | 000,470,468 | ---- | M] () (No name found) -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Firefox\Profiles\7wu4pgwm.default\extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi
[2015-10-26 20:54:42 | 002,594,940 | ---- | M] () (No name found) -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Firefox\Profiles\7wu4pgwm.default\extensions\firebug@software.joehewitt.com.xpi
[2014-01-15 19:51:23 | 001,027,741 | ---- | M] () (No name found) -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Firefox\Profiles\7wu4pgwm.default\extensions\{03A4A97B-1A44-4a3b-8A41-D982F0B6E73F}.xpi
[2015-05-30 12:42:48 | 000,103,648 | ---- | M] () (No name found) -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Firefox\Profiles\7wu4pgwm.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi
[2015-09-11 19:21:39 | 000,085,716 | ---- | M] () (No name found) -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Firefox\Profiles\7wu4pgwm.default\extensions\{71328583-3CA7-4809-B4BA-570A85818FBB}.xpi
[2014-03-29 14:37:02 | 000,001,636 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Mozilla\Firefox\Profiles\7wu4pgwm.default\searchplugins\dodatki-dla-firefox.xml
[2015-11-07 23:29:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2015-11-07 23:29:42 | 000,000,000 | ---D | M] (Click to call with Skype) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2015-11-07 23:29:42 | 000,000,000 | ---D | M] (Hotspot Shield Extension) -- C:\Program Files\Mozilla Firefox\extensions\afext@anchorfree.com
[2015-11-07 23:29:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2015-11-07 23:30:48 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015-11-07 23:29:36 | 000,000,000 | ---D | M] (Hotspot Shield Extension) -- C:\Program Files\Mozilla Firefox\browser\extensions\afext@anchorfree.com
[2012-01-12 09:58:30 | 000,917,816 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2009-01-28 19:46:54 | 000,307,200 | ---- | M] (ESKA) -- C:\Program Files\mozilla firefox\plugins\npOggX.dll
 
O1 HOSTS File: ([2014-03-30 15:08:17 | 000,000,219 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1    
O1 - Hosts: 127.0.0.1    license.bluesoleil.com
O1 - Hosts: 127.0.0.1    license2.bluesoleil.com
O1 - Hosts: 127.0.0.1     license3.bluesoleil.com
O1 - Hosts: 127.0.0.1     www.bluesoleil.com
O1 - Hosts: 127.0.0.1    bluesoleil.com
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O2 - BHO: (Idea2 SidebarBrowserMonitor Class) - {45AD732C-2CE2-4666-B366-B2214AD57A49} - F:\Program Files\Sidebar\sbhelp.dll (Idea2)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5825.1100\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - E:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BCSSync] E:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [BtTray] C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe (IVT Corporation)
O4 - HKLM..\Run: [CloneCDTray] D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [MagicRotation] C:\Program Files\MagicRotation\MagicPvt.exe (Samsung Electronics, Inc.)
O4 - HKLM..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [TBPanel] C:\Program Files\VDOTool\TBPanel.exe (Palit Microsystems, Inc.)
O4 - HKLM..\Run: [TP-Link USB Printer Controller] C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe ()
O4 - HKLM..\Run: [Wondershare Helper Compact.exe] C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)
O4 - HKCU..\Run: [DAEMON Tools Lite] D:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - Startup: C:\Documents and Settings\Dominik_2\Menu Start\Programy\Autostart\USB Printer Controller.lnk = C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8 - Extra context menu item: &P&obierz &za pomocą BitComet - D:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - E:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - D:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Wyślij &do programu OneNote - E:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - F:\Program Files\Sidebar\sbhelp.dll (Idea2)
O9 - Extra 'Tools' menuitem : Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - F:\Program Files\Sidebar\sbhelp.dll (Idea2)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - E:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - E:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - D:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (InterTrust Technologies Corporation, Inc.)
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.64.0.cab (SysInfo Class)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab (Groove Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab (Java Plug-in 11.65.2)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab (Java Plug-in 1.7.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab (Java Plug-in 11.65.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5170DE58-EF1C-4CF7-8794-187CC64E6C24}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E3B2E47D-4FBE-4F86-A6E1-AEBC5F58B3B1}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O18 - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O20 - AppInit_DLLs: (c:\progra~1\google\google~4\goec62~1.dll) - c:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - E:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-05-14 20:49:15 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2015-07-14 19:24:30 | 000,000,000 | ---D | M] - D:\AutoMapa 6.18 1506 -- [ NTFS ]
O32 - AutoRun File - [2010-09-05 15:30:04 | 000,000,000 | ---D | M] - E:\AutoData -- [ NTFS ]
O32 - AutoRun File - [2009-02-05 11:56:44 | 000,000,061 | R--- | M] () - G:\autorun.inf -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk /k:E *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2015-11-09 18:33:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes Anti-Malware
[2015-11-09 18:33:45 | 000,121,560 | ---- | C] (Malwarebytes) -- C:\WINDOWS\System32\drivers\mbamchameleon.sys
[2015-11-09 18:33:45 | 000,023,256 | ---- | C] (Malwarebytes) -- C:\WINDOWS\System32\drivers\mbam.sys
[2015-11-09 18:33:45 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
[2015-11-09 18:33:36 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Dominik_2\Recent
[2015-11-09 18:24:57 | 022,908,888 | ---- | C] (Malwarebytes                                                ) -- C:\Documents and Settings\Dominik_2\Pulpit\mbam-setup-2.2.0.1024.exe
[2015-11-07 23:29:36 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2015-10-26 18:56:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik_2\Moje dokumenty\OziBox
[2015-10-26 18:52:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\OziboxSync
[2015-10-26 18:52:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik_2\Ustawienia lokalne\Dane aplikacji\PackageAware
[2015-10-26 00:15:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik_2\Pulpit\wos
[2015-10-22 20:03:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2015-10-19 20:25:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik_2\.oracle_jre_usage
[2015-10-19 20:22:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Oracle
[2015-10-16 19:29:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Radmin
[2015-10-16 19:29:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik_2\Menu Start\Programy\Radmin Viewer 3
[2015-10-16 19:29:07 | 000,000,000 | ---D | C] -- C:\Program Files\Radmin Viewer 3
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2015-11-09 21:25:53 | 000,000,558 | ---- | M] () -- C:\WINDOWS\DFC.INI
[2015-11-09 21:24:53 | 000,779,350 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2015-11-09 21:24:53 | 000,713,532 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2015-11-09 21:24:53 | 000,186,684 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2015-11-09 21:24:53 | 000,167,156 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2015-11-09 21:22:03 | 000,170,200 | ---- | M] (Malwarebytes) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys
[2015-11-09 21:21:33 | 000,001,060 | ---- | M] () -- C:\WINDOWS\System32\bscs.ini
[2015-11-09 21:21:28 | 000,006,178 | ---- | M] () -- C:\WINDOWS\System32\LOCALSERVICE.INI
[2015-11-09 21:21:23 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\AutoKMS.job
[2015-11-09 21:21:06 | 000,000,099 | ---- | M] () -- C:\WINDOWS\System32\LOCALDEVICE.INI
[2015-11-09 21:21:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2015-11-09 21:20:33 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2015-11-09 21:20:32 | 000,000,230 | ---- | M] () -- C:\WINDOWS\tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
[2015-11-09 21:20:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2015-11-09 21:20:27 | 000,000,016 | ---- | M] () -- C:\WINDOWS\System32\magicpvt.dat
[2015-11-09 21:20:17 | 000,000,032 | ---- | M] () -- C:\WINDOWS\System32\driver.dat
[2015-11-09 21:07:48 | 000,071,437 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\5640f724e4b09015438dcd90.jpg
[2015-11-09 20:55:12 | 000,041,809 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\5640f954e4b09015438e3839.jpg
[2015-11-09 20:46:15 | 000,062,691 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\5640f7fae4b09015438df520.jpg
[2015-11-09 20:17:48 | 000,110,858 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\5640f155e4b09015438cb9b2.jpg
[2015-11-09 18:33:55 | 000,000,777 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
[2015-11-09 18:26:15 | 022,908,888 | ---- | M] (Malwarebytes                                                ) -- C:\Documents and Settings\Dominik_2\Pulpit\mbam-setup-2.2.0.1024.exe
[2015-11-08 19:15:01 | 000,000,271 | ---- | M] () -- C:\WINDOWS\System32\REMOTEDEVICE.INI
[2015-11-08 17:47:58 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2015-11-08 17:18:47 | 000,000,224 | ---- | M] () -- C:\WINDOWS\tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
[2015-11-08 14:34:26 | 000,172,455 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\563f4f46e4b090154357467d.png
[2015-11-08 14:19:12 | 000,009,574 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\563f4bb3e4b090154356924e.jpg
[2015-11-08 13:43:52 | 000,438,543 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\instrukcje_lab_analityka.zip
[2015-11-08 00:02:47 | 000,656,186 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\563e8215e4b09015434105d1.jpg
[2015-11-07 01:04:06 | 000,224,905 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d3f83e4b0901543142cf8.jpg
[2015-11-07 01:00:02 | 000,155,748 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d3e73e4b090154314015f.jpg
[2015-11-07 00:50:23 | 000,269,517 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d3c0be4b0901543138f44.jpg
[2015-11-07 00:41:06 | 000,282,432 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d3a6ae4b09015431348b2.jpg
[2015-11-06 20:40:54 | 000,402,741 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d0230e4b0901543088fce.jpg
[2015-11-06 18:22:02 | 000,063,148 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\legostarwarsthecompletesaga11trainer.zip
[2015-11-06 15:43:30 | 000,103,424 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015-11-05 17:00:50 | 000,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2015-10-27 15:04:25 | 000,000,566 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\Logitech adapter.lnk
[2015-10-26 22:32:01 | 000,000,275 | ---- | M] () -- C:\WINDOWS\System32\SHORTCUT.INI
[2015-10-22 20:01:54 | 000,097,888 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2015-10-22 20:01:49 | 000,146,432 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2015-10-19 20:45:28 | 000,091,719 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\sol_elem_progresstest_1b.pdf
[2015-10-19 20:44:26 | 000,098,902 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\sol_elem_progresstest_2b.pdf
[2015-10-19 20:44:22 | 000,092,776 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\sol_elem_progresstest_2a.pdf
[2015-10-19 20:43:06 | 009,191,076 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\New Matura Solutions - podręcznik do języka angielskiego dla szkół ponadgimnazjalnych cz.1 wyd. Oxford.pdf
[2015-10-19 20:42:08 | 000,092,237 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\sol_elem_progresstest_5b.pdf
[2015-10-19 20:33:43 | 000,780,488 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2015-10-19 20:33:43 | 000,142,536 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2015-10-18 16:56:16 | 000,080,014 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\schemat_pod____czenia_gniazda_13_stykowego_w_samochodzie_16e9d11.png
[2015-10-15 22:56:11 | 000,223,726 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\bez tytułu.bmp
[2015-10-14 19:31:16 | 000,045,568 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\Zeszyt2.xlk
[2015-10-14 19:31:12 | 000,018,944 | ---- | M] () -- C:\Documents and Settings\Dominik_2\Pulpit\Zeszyt1.xlk
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2015-11-09 21:07:47 | 000,071,437 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\5640f724e4b09015438dcd90.jpg
[2015-11-09 20:55:11 | 000,041,809 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\5640f954e4b09015438e3839.jpg
[2015-11-09 20:46:14 | 000,062,691 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\5640f7fae4b09015438df520.jpg
[2015-11-09 20:17:47 | 000,110,858 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\5640f155e4b09015438cb9b2.jpg
[2015-11-09 18:33:55 | 000,000,777 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
[2015-11-08 14:34:25 | 000,172,455 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\563f4f46e4b090154357467d.png
[2015-11-08 14:19:12 | 000,009,574 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\563f4bb3e4b090154356924e.jpg
[2015-11-08 13:43:51 | 000,438,543 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\instrukcje_lab_analityka.zip
[2015-11-08 00:02:45 | 000,656,186 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\563e8215e4b09015434105d1.jpg
[2015-11-07 01:02:37 | 000,224,905 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d3f83e4b0901543142cf8.jpg
[2015-11-07 00:58:08 | 000,155,748 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d3e73e4b090154314015f.jpg
[2015-11-07 00:50:22 | 000,269,517 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d3c0be4b0901543138f44.jpg
[2015-11-07 00:41:05 | 000,282,432 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d3a6ae4b09015431348b2.jpg
[2015-11-06 20:40:53 | 000,402,741 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\563d0230e4b0901543088fce.jpg
[2015-11-06 18:28:02 | 000,388,608 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\brewers.exe
[2015-11-06 18:28:02 | 000,011,146 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\brewers.nfo
[2015-11-06 18:22:01 | 000,063,148 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\legostarwarsthecompletesaga11trainer.zip
[2015-11-03 19:43:18 | 000,335,451 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\DSC_1305.JPG
[2015-10-27 15:04:25 | 000,000,566 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\Logitech adapter.lnk
[2015-10-19 20:45:28 | 000,091,719 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\sol_elem_progresstest_1b.pdf
[2015-10-19 20:44:26 | 000,098,902 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\sol_elem_progresstest_2b.pdf
[2015-10-19 20:44:22 | 000,092,776 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\sol_elem_progresstest_2a.pdf
[2015-10-19 20:42:34 | 009,191,076 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\New Matura Solutions - podręcznik do języka angielskiego dla szkół ponadgimnazjalnych cz.1 wyd. Oxford.pdf
[2015-10-19 20:42:07 | 000,092,237 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\sol_elem_progresstest_5b.pdf
[2015-10-18 16:56:15 | 000,080,014 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\schemat_pod____czenia_gniazda_13_stykowego_w_samochodzie_16e9d11.png
[2015-10-15 22:56:11 | 000,223,726 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\bez tytułu.bmp
[2015-10-14 19:31:15 | 000,045,568 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\Zeszyt2.xlk
[2015-10-14 19:31:11 | 000,018,944 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Pulpit\Zeszyt1.xlk
[2015-03-06 20:04:33 | 000,000,068 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2015-03-06 20:02:48 | 000,000,494 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\Sls.ini
[2015-03-06 20:02:48 | 000,000,086 | ---- | C] () -- C:\WINDOWS\System32\ToleSec.ini
[2014-03-29 23:24:33 | 000,000,032 | ---- | C] () -- C:\WINDOWS\System32\driver.dat
[2014-03-29 22:49:04 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2014-03-29 22:49:04 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2014-03-29 22:49:04 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2014-03-29 22:49:04 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2014-03-29 22:49:04 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2014-02-15 14:49:59 | 000,000,004 | ---- | C] () -- C:\WINDOWS\vx86036.dat
[2014-02-15 14:49:24 | 000,000,056 | ---- | C] () -- C:\WINDOWS\Crypkey.ini
[2014-02-15 14:49:21 | 000,023,360 | ---- | C] () -- C:\WINDOWS\System32\Ckldrv.sys
[2014-02-15 14:49:21 | 000,011,776 | ---- | C] () -- C:\WINDOWS\Ckrfresh.exe
[2013-12-12 21:39:20 | 000,000,056 | ---- | C] () -- C:\WINDOWS\Kulki.ini
[2013-12-02 21:12:38 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfmonnt.dll
[2013-11-13 18:14:17 | 000,000,182 | ---- | C] () -- C:\WINDOWS\System32\EBPPORT.DAT
[2013-11-09 13:06:56 | 000,103,424 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-10-26 13:56:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Dominik_2\TempWmicBatchFile.bat
[2013-10-06 16:09:03 | 000,721,378 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1935655697-1275210071-682003330-1004-0.dat
[2013-10-05 22:26:32 | 000,360,630 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1935655697-1275210071-682003330-500-0.dat
[2013-10-04 20:30:05 | 001,666,188 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1935655697-1275210071-682003330-1011-0.dat
[2013-10-04 20:30:05 | 000,362,998 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2013-07-12 12:58:14 | 000,003,513 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
[2012-12-12 17:17:11 | 000,028,273 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Dominik_2.msc
[2012-12-11 22:13:55 | 000,229,669 | ---- | C] () -- C:\Documents and Settings\Dominik_2\nova6.xcf
[2012-11-04 19:01:35 | 000,027,642 | ---- | C] () -- C:\Documents and Settings\Dominik_2\Konsola1.msc
[2012-11-04 18:55:17 | 000,001,782 | ---- | C] () -- C:\Documents and Settings\Dominik_2\qwerty.CER.PFX
[2012-11-04 18:55:17 | 000,000,583 | ---- | C] () -- C:\Documents and Settings\Dominik_2\qwerty.CER.CER
[2012-11-04 18:29:53 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\Dominik_2\qwertyui.pfx
[2012-11-04 18:29:30 | 000,001,786 | ---- | C] () -- C:\Documents and Settings\Dominik_2\qwertyu.pfx
[2012-11-04 18:12:02 | 000,001,158 | ---- | C] () -- C:\Documents and Settings\Dominik_2\qwerty.p7b
[2012-11-04 18:07:58 | 000,002,309 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012-11-04 18:01:00 | 000,001,786 | ---- | C] () -- C:\Documents and Settings\Dominik_2\qwerty.PFX
[2012-11-04 18:01:00 | 000,000,583 | ---- | C] () -- C:\Documents and Settings\Dominik_2\qwerty.CER
[2012-10-21 22:05:53 | 000,000,074 | ---- | C] () -- C:\Documents and Settings\Dominik_2\default.pls
[2012-06-01 22:41:56 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\sysqcl1129067056.dat
[2011-06-28 20:24:14 | 000,005,632 | ---- | C] () -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-03-15 20:34:42 | 000,002,596 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Config.nt.bak
[2010-03-15 20:34:42 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Autoexec.nt.bak
[2010-03-15 20:34:41 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\hosts.bak
[2009-01-26 21:24:30 | 000,000,126 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-06-06 13:14:18 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2010-04-16 17:09:01 | 001,509,888 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-02-09 11:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008-04-14 22:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-10-14 12:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\.Beniamin
[2014-12-02 17:57:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2308189059
[2013-10-27 21:53:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\abelhadigital.com
[2008-07-06 13:18:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ableton
[2010-03-08 14:45:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Activision
[2010-06-01 17:46:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software
[2012-04-10 17:00:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Astroburn Lite
[2014-02-10 23:47:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2013-08-27 13:34:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Binary Fortress Software
[2013-12-30 21:43:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BlueStacksSetup
[2013-07-13 13:20:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Bluetooth
[2013-09-02 15:53:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CDB
[2013-09-02 15:51:34 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2012-01-20 14:05:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2011-10-23 12:47:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Easybits GO
[2009-01-26 21:27:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Elaborate Bytes
[2011-09-02 18:58:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FlashFXP
[2010-02-25 23:56:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2011-12-08 20:29:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GameXN
[2012-06-30 21:45:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GG
[2013-07-12 13:56:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2009-12-28 19:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2014-11-05 19:58:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IsolatedStorage
[2013-09-02 15:52:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData
[2008-05-14 20:48:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\muvee Technologies
[2009-09-27 11:34:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia
[2010-10-03 21:31:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaInstallerCache
[2010-06-13 11:07:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaMusic
[2010-11-16 19:05:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2015-07-24 17:10:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Oracle
[2014-02-15 14:49:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\organiser
[2015-02-13 18:07:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Package Cache
[2009-09-27 10:29:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2008-05-25 17:13:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft
[2014-03-28 15:23:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SlySoft
[2012-10-30 19:06:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony
[2014-06-05 16:13:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\thriXXX
[2012-01-20 15:37:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft
[2015-02-22 17:46:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Vbsedit
[2011-07-12 14:20:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\webcamXP 5
[2014-12-26 21:15:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Wondershare
[2012-05-26 11:58:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\YoWindow
[2013-10-27 21:53:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\abelhadigital.com
[2015-01-20 20:22:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Activision
[2015-01-28 20:24:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\AdvertismentImages
[2013-07-14 10:54:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\AnvSoft
[2012-12-11 18:58:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Artisteer
[2015-07-18 00:13:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Audacity
[2014-08-15 22:34:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\BitComet
[2013-07-13 13:31:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\BluetoothDriverInstaller
[2013-07-14 09:19:22 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Common
[2014-04-11 20:02:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\CrystalIdea Software
[2015-05-17 16:25:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\DAEMON Tools Lite
[2014-03-28 13:35:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Desktop Sidebar
[2013-09-18 15:19:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\DesktopIconGoodgame
[2014-03-26 14:50:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\DisplayFusion
[2013-09-16 22:08:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Downloaded Installations
[2013-08-08 16:54:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Easeware
[2014-03-30 17:51:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\FileZilla
[2014-06-04 20:54:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Gadu-Gadu 10
[2012-09-22 15:42:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\GHISLER
[2013-01-22 15:31:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\gtk-2.0
[2014-11-05 19:58:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\IsolatedStorage
[2014-11-11 17:31:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Kingosoft
[2014-11-11 19:20:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\mgyun
[2012-09-16 09:56:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Nokia
[2012-10-06 10:30:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\OpenFM
[2012-09-30 13:39:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\OpenOffice.org
[2015-10-19 20:22:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Oracle
[2015-11-03 19:45:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\OziboxSync
[2014-02-21 16:11:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Passware
[2012-09-16 09:56:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\PC Suite
[2015-01-20 22:11:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\PE Explorer
[2015-10-16 19:29:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Radmin
[2013-08-01 19:12:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\RegistryDefense
[2012-09-21 10:08:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\ScanSoft
[2012-09-16 10:55:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Serif
[2014-06-16 21:59:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\thriXXX
[2012-09-17 23:00:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Thunderbird
[2012-12-21 18:33:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Ubisoft
[2014-03-15 14:22:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Ultimate Player Radio
[2014-07-21 21:15:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Utherverse
[2013-09-21 16:34:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\VSRevoGroup
[2014-05-10 16:30:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Wise Registry Cleaner
[2015-06-27 14:12:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\Wondershare
[2013-11-04 20:23:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\xVideoServiceThief
[2013-07-14 11:27:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\YoWindow
[2014-11-12 19:22:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dominik_2\Dane aplikacji\zhuodashi
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2013-11-09 12:56:54 | 000,000,000 | ---- | M] ()(C:\WINDOWS\System32\??????????????????????????????????????????????????) -- C:\WINDOWS\System32\㩣摜捯浵湥獴愠摮猠瑥楴杮屳污獵牥屳慤敮愠汰歩捡楪歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤
[2013-11-09 12:56:54 | 000,000,000 | ---- | C] ()(C:\WINDOWS\System32\??????????????????????????????????????????????????) -- C:\WINDOWS\System32\㩣摜捯浵湥獴愠摮猠瑥楴杮屳污獵牥屳慤敮愠汰歩捡楪歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤

< End of report >