[tapionmajin2]

As in topic. I think that my computer is clean but still it has become considerably slower. Please check if there is something in the logs that can be improved.

Here are my logs:

Mbam log (it's in Polish but basicly according to program laptop is spyware/malware free)

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Wersja bazy: 4800

Windows 5.1.2600 Dodatek Service Pack 3
Internet Explorer 8.0.6001.18702

2010-10-27 19:26:25
mbam-log-2010-10-27 (19-26-25).txt

Typ skanowania: Szybkie skanowanie
Przeskanowano obiektów: 137052
Upłynęło: 24 minut(y), 19 sekund(y)

Zainfekowanych procesów w pamięci: 0
Zainfekowanych modułów w pamięci: 0
Zainfekowanych kluczy rejestru: 0
Zainfekowanych wartości rejestru: 0
Zainfekowane informacje rejestru systemowego: 0
Zainfekowanych folderów: 0
Zainfekowanych plików: 0

Zainfekowanych procesów w pamięci:
(Nie znaleziono zagrożeń)

Zainfekowanych modułów w pamięci:
(Nie znaleziono zagrożeń)

Zainfekowanych kluczy rejestru:
(Nie znaleziono zagrożeń)

Zainfekowanych wartości rejestru:
(Nie znaleziono zagrożeń)

Zainfekowane informacje rejestru systemowego:
(Nie znaleziono zagrożeń)

Zainfekowanych folderów:
(Nie znaleziono zagrożeń)

Zainfekowanych plików:
(Nie znaleziono zagrożeń)



OTL LOG:

OTL logfile created on: 2010-10-27 19:02:38 - Run 1
OTL by OldTimer - Version 3.2.17.1 Folder = D:\download
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 35,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 71,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 70,04 Gb Total Space | 15,14 Gb Free Space | 21,62% Space Free | Partition Type: NTFS
Drive D: | 73,00 Gb Total Space | 1,11 Gb Free Space | 1,52% Space Free | Partition Type: NTFS

Computer Name: YOUR-E885695610 | User Name: Artur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010-10-27 18:58:16 | 000,575,488 | ---- | M] (OldTimer Tools) -- D:\download\OTL.exe
PRC - [2010-10-27 17:12:30 | 000,294,912 | ---- | M] () -- C:\Documents and Settings\Artur\Moje dokumenty\Downloads\ppio5xex.exe
PRC - [2010-10-26 22:02:51 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2010-10-20 22:15:39 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-10-13 21:24:54 | 011,087,872 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\BOINC\projects\boinc.bakerlab.org_rosetta\minirosetta_2.16_windows_intelx86.exe
PRC - [2010-10-07 10:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2010-09-08 18:50:38 | 000,340,520 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
PRC - [2010-04-29 07:39:32 | 001,090,952 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2010-02-02 04:35:30 | 000,065,856 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\NLSSRV32.EXE
PRC - [2009-10-28 05:55:18 | 000,783,104 | ---- | M] (Space Sciences Laboratory) -- C:\Program Files\BOINC\boinc.exe
PRC - [2009-10-20 20:34:38 | 000,207,376 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtblfs.exe
PRC - [2009-09-23 07:45:50 | 001,287,176 | ---- | M] (Panda Security) -- C:\Program Files\Panda USB Vaccine\USBVaccine.exe
PRC - [2009-09-15 02:17:16 | 000,061,760 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\ASTSRV.EXE
PRC - [2009-02-18 08:28:14 | 000,170,520 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxext.exe
PRC - [2008-10-06 19:07:26 | 000,679,936 | ---- | M] (SAMSUNG Electronics) -- C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
PRC - [2008-09-17 14:25:46 | 001,440,384 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
PRC - [2008-09-17 14:25:46 | 000,580,200 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2008-08-08 07:04:10 | 001,091,768 | ---- | M] (C. Ghisler & Co.) -- C:\Program Files\Dodatki\Total CMA Pack\TOTALCMD.EXE
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-12-06 12:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
PRC - [2003-02-18 00:01:52 | 000,954,476 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe


========== Modules (SafeList) ==========

MOD - [2010-10-27 18:58:16 | 000,575,488 | ---- | M] (OldTimer Tools) -- D:\download\OTL.exe
MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2008-09-17 14:19:50 | 000,073,728 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\BtMmHook.dll
MOD - [2006-05-03 13:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010-10-11 18:11:16 | 001,181,328 | ---- | M] (Lavasoft) [On_Demand | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2010-09-23 08:44:15 | 002,950,744 | ---- | M] () [Auto | Running] -- c:\Program Files\Common Files\Akamai\netsession_win_062a651.dll -- (Akamai)
SRV - [2010-09-08 18:50:38 | 000,340,520 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe -- (AVP)
SRV - [2010-02-02 04:35:30 | 000,065,856 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2009-09-15 02:17:16 | 000,061,760 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\ASTSRV.EXE -- (astcc)
SRV - [2009-04-21 10:09:00 | 000,282,624 | ---- | M] (Marvell) [Auto | Running] -- C:\WINDOWS\system32\yk51x86.dll -- (yksvc)
SRV - [2007-12-06 12:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\DRIVERS\ntcdrdrv.sys -- (ntcdrdrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys -- (Lavasoft Kernexplorer)
DRV - [2010-10-11 18:18:05 | 000,093,360 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SBREDrv.sys -- (SBRE)
DRV - [2010-09-08 18:50:38 | 000,315,408 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2010-06-04 20:29:04 | 001,606,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2010-04-29 07:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2010-04-13 18:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys -- (WsAudio_DeviceS(5)) WsAudio_DeviceS(5)
DRV - [2010-04-13 18:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys -- (WsAudio_DeviceS(4)) WsAudio_DeviceS(4)
DRV - [2010-04-13 18:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys -- (WsAudio_DeviceS(3)) WsAudio_DeviceS(3)
DRV - [2010-04-13 18:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys -- (WsAudio_DeviceS(2)) WsAudio_DeviceS(2)
DRV - [2010-04-13 18:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys -- (WsAudio_DeviceS(1)) WsAudio_DeviceS(1)
DRV - [2010-03-21 19:09:28 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009-10-14 21:18:34 | 000,036,880 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\klbg.sys -- (klbg)
DRV - [2009-10-02 19:39:44 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2009-09-23 14:55:23 | 000,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2009-09-14 14:42:46 | 000,032,272 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)
DRV - [2009-09-01 15:29:50 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl1.sys -- (kl1)
DRV - [2009-07-27 04:43:18 | 000,058,908 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2009-07-14 13:57:54 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-04-21 10:09:00 | 000,297,344 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2008-11-18 09:53:48 | 000,016,640 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AsAudioDevice_349.sys -- (AsAudioDevice_349)
DRV - [2008-09-23 22:23:58 | 000,238,464 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMC326.sys -- (VMC326)
DRV - [2008-08-28 20:18:14 | 000,224,736 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2008-08-27 01:35:00 | 004,753,920 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008-07-29 17:59:08 | 000,879,832 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2008-07-29 17:59:02 | 000,156,816 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2008-07-27 01:29:54 | 000,074,688 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2008-07-27 01:29:50 | 000,037,280 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2008-07-27 01:29:36 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2008-04-15 14:00:00 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-02-15 13:12:06 | 005,854,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2008-01-14 20:01:02 | 000,030,208 | ---- | M] (Samsung Electronics,.LTD) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SamsungEDS.SYS -- (DNSeFilter)
DRV - [2006-08-01 16:57:24 | 000,019,840 | ---- | M] (Samsung) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SUE_PD.sys -- (SUEPD)
DRV - [2005-12-22 03:24:52 | 000,137,884 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005-12-22 03:24:52 | 000,010,864 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005-12-22 03:24:50 | 000,080,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2005-10-27 06:18:05 | 000,004,300 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\MEMIO.SYS -- (DOSMEMIO)
DRV - [2002-11-22 05:14:36 | 000,122,505 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw)
DRV - [2002-10-11 01:19:00 | 000,046,551 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...=SMSN&bmod=SMSN
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://wyborcza.biz/.../0,0.html?p=005
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "GOOgle.com"
FF - prefs.js..extensions.enabledItems: [email protected]:2.23b2
FF - prefs.js..extensions.enabledItems: [email protected]:4.1.6
FF - prefs.js..extensions.enabledItems: {0200c2a9-70da-4f6d-b527-f5f7d7877228}:0.4.5
FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0
FF - prefs.js..extensions.enabledItems: [email protected]:2.0.6
FF - prefs.js..extensions.enabledItems: [email protected]:2
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 3
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: [email protected]:9.0.0.736
FF - prefs.js..keyword.URL: "http://www.google.co...ient&gfns=1&q="


FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-10-26 22:07:21 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-10-26 22:08:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2009-07-14 13:48:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Extensions
[2010-10-27 10:36:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions
[2010-09-09 14:50:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\{0200c2a9-70da-4f6d-b527-f5f7d7877228}
[2010-05-01 08:49:38 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-09-09 14:50:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}
[2010-09-09 14:49:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\[email protected]
[2010-07-02 21:55:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\[email protected]
[2010-05-01 08:49:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\[email protected]
[2010-09-09 14:50:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\[email protected]
[2009-07-14 14:35:40 | 000,002,234 | ---- | M] () -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\searchplugins\askcom.xml
[2010-10-27 10:36:51 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-04-25 20:47:30 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010-05-08 10:57:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-08-02 06:19:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-09-08 18:34:14 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
[2009-07-17 10:40:12 | 000,704,512 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2010-07-16 21:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009-07-31 04:06:48 | 001,654,784 | ---- | M] (LizardTech) -- C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll
[2010-06-26 00:28:19 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-06-26 00:28:19 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-06-26 00:28:19 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-06-26 00:28:19 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-06-26 00:28:19 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-06-26 00:28:19 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab)
O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [SUPBackground] C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKCU..\Run: [EPSON Stylus D88 Series (Kopia 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKCU..\Run: [Total CMA Pack] C:\Program Files\Dodatki\Total CMA Pack\Total CMA Pack.exe (CMA®)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BOINC Manager.lnk = C:\Program Files\BOINC\boincmgr.exe (Space Sciences Laboratory)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Easy Display Manager.lnk = C:\Program Files\Samsung\Easy Display Manager\DMLauncher_XP.exe (SAMSUNG Electronics)
O4 - Startup: C:\Documents and Settings\Artur\Menu Start\Programy\Autostart\PandaUSBVaccine.lnk = C:\Program Files\Panda USB Vaccine\USBVaccine.exe (Panda Security)
O4 - Startup: C:\Documents and Settings\Artur\Menu Start\Programy\Autostart\WordWeb Pro.lnk = C:\Program Files\WordWeb\wweb32.exe (Antony Lewis)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Wyślij do interfejsu Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: &Virtual keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.21.99.95
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\mzvkbd3.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O20 - Winlogon\Notify\nnnnKeeF: DllName - nnnnKeeF.dll - File not found
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-02-16 12:42:32 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\Autoplay\ComManD - "" = F:\xvxp.exe -- File not found
O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\AutoRun\command - "" = F:\xvxp.exe -- File not found
O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\eXpLoRe\COMmaNd - "" = F:\xvxp.exe -- File not found
O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\oPen\comMaNd - "" = F:\xvxp.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: VIDC.ACDV - ACDV.dll File not found
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.ffds - C:\Program Files\Combined Community Codec Pack\Filters\FFDShow\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (60530730744152064)

========== Files/Folders - Created Within 30 Days ==========

[2010-10-27 14:13:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Nahlik Soft
[2010-10-27 14:13:35 | 000,000,000 | ---D | C] -- C:\Program Files\Mistrz Klawiatury II Demo
[2010-10-27 14:13:05 | 000,000,000 | ---D | C] -- C:\Program Files\RapidTyping
[2010-10-26 22:04:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\xing shared
[2010-10-26 22:02:55 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2010-10-26 22:02:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Real
[2010-10-26 22:02:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real
[2010-10-26 22:02:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Dane aplikacji\Real
[2010-10-26 15:20:12 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Artur\Recent
[2010-10-26 12:46:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Pulpit\Stockholm
[2010-10-26 12:43:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Pulpit\CALI
[2010-10-25 23:26:46 | 000,000,000 | ---D | C] -- C:\Program Files\ALLPlayer
[2010-10-23 07:11:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Temp
[2010-10-13 21:15:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010-10-13 11:33:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Pulpit\wyjazdy
[2010-10-11 20:01:47 | 000,000,000 | ---D | C] -- C:\Program Files\SetFileDate
[2010-10-11 17:45:18 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{42E04EE4-AB57-407A-9691-3FFA8B8FEBBE}
[2010-09-29 15:30:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Dane aplikacji\Google

========== Files - Modified Within 30 Days ==========

[2010-10-27 19:11:10 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010-10-27 15:32:57 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010-10-27 15:32:57 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-3386402223-640050984-2597840139-1005.job
[2010-10-27 15:32:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-10-27 15:32:32 | 2137,444,352 | -HS- | M] () -- C:\hiberfil.sys
[2010-10-27 14:33:08 | 000,054,784 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\MCQ - ME.doc
[2010-10-27 12:05:41 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010-10-27 12:05:40 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010-10-27 12:05:40 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010-10-27 12:05:39 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010-10-27 12:05:39 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010-10-27 10:18:21 | 000,000,028 | ---- | M] () -- C:\WINDOWS\powerplayer.ini
[2010-10-27 10:18:21 | 000,000,017 | ---- | M] () -- C:\WINDOWS\psnetwork.ini
[2010-10-26 22:11:00 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-3386402223-640050984-2597840139-1005.job
[2010-10-26 22:03:00 | 000,278,528 | ---- | M] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2010-10-26 18:42:17 | 000,000,645 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\RegCleaner.lnk
[2010-10-26 10:19:28 | 000,102,400 | ---- | M] () -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-10-25 19:30:34 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2010-10-25 19:10:31 | 000,255,629 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\Why most published research findings are false.pdf
[2010-10-15 07:56:38 | 000,141,240 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-10-11 18:18:05 | 000,093,360 | ---- | M] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys
[2010-10-11 18:18:04 | 000,015,880 | ---- | M] () -- C:\WINDOWS\System32\lsdelete.exe
[2010-10-10 15:13:55 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-10-03 03:05:54 | 000,490,866 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-10-03 03:05:54 | 000,432,690 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-10-03 03:05:54 | 000,084,078 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-10-03 03:05:54 | 000,067,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

========== Files Created - No Company Name ==========

[2010-10-27 10:18:21 | 000,000,028 | ---- | C] () -- C:\WINDOWS\powerplayer.ini
[2010-10-27 10:18:21 | 000,000,017 | ---- | C] () -- C:\WINDOWS\psnetwork.ini
[2010-10-26 22:07:59 | 000,000,278 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-3386402223-640050984-2597840139-1005.job
[2010-10-26 22:07:58 | 000,000,286 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-3386402223-640050984-2597840139-1005.job
[2010-10-26 18:42:17 | 000,000,645 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\RegCleaner.lnk
[2010-10-26 15:19:58 | 000,054,784 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\MCQ - ME.doc
[2010-10-25 23:27:07 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-10-25 23:27:07 | 000,797,184 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.ax
[2010-10-25 23:27:07 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010-10-25 19:10:30 | 000,255,629 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\Why most published research findings are false.pdf
[2010-10-11 20:43:12 | 000,015,880 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe
[2010-10-11 18:43:46 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010-10-11 18:01:49 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010-10-11 18:01:49 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010-10-11 18:01:47 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010-10-11 18:01:46 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010-09-06 10:31:11 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010-05-22 10:12:13 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2010-03-21 19:14:29 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2010-03-21 18:23:53 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2010-02-12 16:31:38 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll
[2010-01-30 18:04:25 | 000,000,219 | ---- | C] () -- C:\WINDOWS\NGWP70.INI
[2010-01-30 18:02:25 | 000,000,524 | ---- | C] () -- C:\WINDOWS\ngenxp.INI
[2009-10-22 15:03:43 | 000,000,155 | ---- | C] () -- C:\WINDOWS\adidsl.ini
[2009-10-22 15:03:34 | 000,000,360 | ---- | C] () -- C:\WINDOWS\adiras.ini
[2009-10-22 15:03:30 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll
[2009-10-22 15:03:30 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll
[2009-09-16 10:27:58 | 000,508,224 | ---- | C] () -- C:\WINDOWS\System32\ICCProfiles.dll
[2009-07-14 19:07:56 | 000,102,400 | ---- | C] () -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-07-14 18:30:25 | 000,001,520 | ---- | C] () -- C:\WINDOWS\System32\Artur_KBD.ini
[2009-07-14 14:38:38 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-07-14 13:57:53 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-06-26 09:42:48 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009-02-16 20:20:12 | 000,000,642 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2009-02-16 13:34:17 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-02-16 12:54:58 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\MagicKBD.INI
[2009-02-16 12:54:58 | 000,001,520 | ---- | C] () -- C:\WINDOWS\System32\Właściciel_KBD.ini
[2009-02-16 12:54:55 | 000,003,425 | ---- | C] () -- C:\WINDOWS\System32\KBDR.INI
[2009-02-16 12:54:55 | 000,002,741 | ---- | C] () -- C:\WINDOWS\System32\KBDD.INI
[2009-02-16 12:54:55 | 000,002,699 | ---- | C] () -- C:\WINDOWS\System32\KBDO.INI
[2009-02-16 12:54:55 | 000,002,699 | ---- | C] () -- C:\WINDOWS\System32\KBDC.INI
[2009-02-16 12:54:55 | 000,002,606 | ---- | C] () -- C:\WINDOWS\System32\KBDB.INI
[2009-02-16 12:54:55 | 000,002,236 | ---- | C] () -- C:\WINDOWS\System32\KBDQ.INI
[2009-02-16 12:54:55 | 000,001,956 | ---- | C] () -- C:\WINDOWS\System32\KBDE.INI
[2009-02-16 12:54:55 | 000,001,885 | ---- | C] () -- C:\WINDOWS\System32\KBDP.INI
[2009-02-16 12:54:55 | 000,001,857 | ---- | C] () -- C:\WINDOWS\System32\KBDUU.INI
[2009-02-16 12:54:55 | 000,001,835 | ---- | C] () -- C:\WINDOWS\System32\KBDG.INI
[2009-02-16 12:54:55 | 000,001,835 | ---- | C] () -- C:\WINDOWS\System32\KBDA.INI
[2009-02-16 12:54:55 | 000,001,834 | ---- | C] () -- C:\WINDOWS\System32\KBDU.INI
[2009-02-16 12:54:55 | 000,001,819 | ---- | C] () -- C:\WINDOWS\System32\KBDN.INI
[2009-02-16 12:54:55 | 000,001,699 | ---- | C] () -- C:\WINDOWS\System32\KBDT.INI
[2009-02-16 12:54:55 | 000,001,697 | ---- | C] () -- C:\WINDOWS\System32\KBDV.INI
[2009-02-16 12:54:55 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\KBDS.INI
[2009-02-16 12:54:55 | 000,001,476 | ---- | C] () -- C:\WINDOWS\System32\KBDF.INI
[2009-02-16 12:52:42 | 000,000,135 | R--- | C] () -- C:\WINDOWS\System32\lngEng.ini
[2009-02-16 12:52:42 | 000,000,117 | ---- | C] () -- C:\WINDOWS\System32\lngKor.ini
[2009-02-16 12:49:09 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2009-02-16 12:46:37 | 000,004,300 | ---- | C] () -- C:\WINDOWS\System32\MEMIO.SYS
[2008-09-17 14:20:08 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2001-11-14 13:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll

========== LOP Check ==========

[2009-07-14 13:55:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ACD Systems
[2009-11-12 16:22:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Azureus
[2010-10-27 17:55:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BOINC
[2009-07-14 14:26:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2009-12-05 22:27:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2010-08-17 04:32:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\foldit
[2010-03-25 17:17:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-03-04 09:27:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GARMIN
[2010-02-12 17:13:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\iAR GmbH
[2010-10-27 14:13:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nahlik Soft
[2010-09-06 10:04:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound
[2010-05-22 12:44:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nitro PDF
[2009-10-22 15:42:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Panda Security
[2010-06-29 21:23:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PPLive
[2010-09-26 11:43:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-02-16 12:49:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WLAN
[2010-09-05 13:18:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\xml_param
[2010-10-11 17:45:20 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{42E04EE4-AB57-407A-9691-3FFA8B8FEBBE}
[2010-02-06 11:53:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010-06-29 07:17:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\.anki
[2010-03-01 15:14:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\.matplotlib
[2009-07-27 00:01:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\ACD Systems
[2009-12-02 21:12:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\adma
[2009-12-15 23:49:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Azureus
[2010-02-12 17:44:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\calibre
[2009-07-14 15:09:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\DAEMON Tools Lite
[2010-08-17 10:28:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Downloaded Installations
[2009-12-05 22:29:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\ESET
[2010-03-25 17:17:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Gadu-Gadu 10
[2010-03-04 09:27:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\GARMIN
[2010-02-12 17:13:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\iAR GmbH
[2009-08-04 22:26:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\iSilo
[2009-12-20 19:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\mplayer
[2010-08-10 06:28:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Nitro PDF
[2009-07-14 14:00:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Nowe Gadu-Gadu
[2009-10-05 11:56:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Opera
[2010-05-15 09:19:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Orbit
[2010-06-26 12:14:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\PPStream
[2010-02-12 16:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\PrimoPDF
[2010-03-21 19:17:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Samsung
[2010-06-08 15:56:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\SanDisk
[2009-10-31 16:02:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Uniblue
[2010-10-27 17:45:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\uTorrent
[2009-12-04 07:54:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\VitySoft
[2010-09-22 10:08:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\VOWSoft
[2009-12-05 21:50:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\WordWeb
[2010-02-23 19:49:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\XnView
[2010-10-27 12:05:39 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job
[2010-10-27 12:05:39 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job
[2010-10-27 12:05:40 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job
[2010-10-27 12:05:40 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job
[2010-10-27 12:05:41 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010-10-27 15:32:28 | 000,112,573 | ---- | M] () -- C:\aaw7boot.log
[2009-02-16 12:42:32 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2009-07-14 18:29:06 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2008-04-15 14:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2009-02-16 12:42:32 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010-10-27 15:32:32 | 2137,444,352 | -HS- | M] () -- C:\hiberfil.sys
[2009-02-16 12:42:32 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2009-02-16 12:42:32 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2008-04-15 14:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008-04-15 14:00:00 | 000,251,152 | RHS- | M] () -- C:\ntldr
[2010-10-27 15:32:29 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys
[2010-04-18 19:28:09 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET
[2009-04-03 15:50:20 | 000,000,159 | ---- | M] () -- C:\setup.log
[2010-09-07 16:56:16 | 000,000,330 | R--- | M] () -- C:\YukonInstall.log

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2009-02-16 13:32:53 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2009-02-16 13:32:53 | 001,069,056 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2009-02-16 13:32:53 | 000,438,272 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-10-15 06:39:09

========== Alternate Data Streams ==========

@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2

< End of report >


OTL Extras logfile created on: 2010-10-27 19:02:38 - Run 1
OTL by OldTimer - Version 3.2.17.1 Folder = D:\download
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 35,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 71,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 70,04 Gb Total Space | 15,14 Gb Free Space | 21,62% Space Free | Partition Type: NTFS
Drive D: | 73,00 Gb Total Space | 1,11 Gb Free Space | 1,52% Space Free | Partition Type: NTFS

Computer Name: YOUR-E885695610 | User Name: Artur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
"" =

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"24247:TCP" = 24247:TCP:*:Enabled:BitComet 24247 TCP
"24247:UDP" = 24247:UDP:*:Enabled:BitComet 24247 UDP
"55555:TCP" = 55555:TCP:*:Enabled:BitComet 55555 TCP
"55555:UDP" = 55555:UDP:*:Enabled:BitComet 55555 UDP
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3909:TCP" = 3909:TCP:*:Enabled:Akamai NetSession Interface
"5000:UDP" = 5000:UDP:*:Enabled:Akamai NetSession Interface

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Nowe Gadu-Gadu\gg.exe" = C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu -- File not found
"C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe -- File not found
"C:\Program Files\Vuze\Azureus.exe" = C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus -- File not found
"H:\gtplink\EasySetupAssistant\EasySetupAssistant.exe" = H:\gtplink\EasySetupAssistant\EasySetupAssistant.exe:*:Enabled:TP-LINK Easy Setup Assistant -- File not found
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe" = C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java™ Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)
"C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.)
"C:\Program Files\Foxit Software\PDF Editor\PDFEdit.exe" = C:\Program Files\Foxit Software\PDF Editor\PDFEdit.exe:*:Enabled:Foxit PDF Editor, the first REAL editor for PDF files! -- (Foxit Software Company)
"C:\Program Files\SopCast\adv\SopAdver.exe" = C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com)
"C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com)
"C:\Program Files\TVUPlayer\TVUPlayer.exe" = C:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks)
"C:\Program Files\PPLive\PPTV\PPLive.exe" = C:\Program Files\PPLive\PPTV\PPLive.exe:*:Enabled:PPLive -- File not found
"C:\Program Files\Common Files\PPLiveNetwork\PPAP.exe" = C:\Program Files\Common Files\PPLiveNetwork\PPAP.exe:*:Enabled:PPLive -- File not found
"C:\Program Files\PPLive\PPTV\PPLiveU.exe" = C:\Program Files\PPLive\PPTV\PPLiveU.exe:*:Enabled:PPLiveU -- File not found
"C:\Program Files\PPLive\PPVA\PPLiveVA.exe" = C:\Program Files\PPLive\PPVA\PPLiveVA.exe:*:Enabled:PPLiveVA -- File not found
"C:\Program Files\PPLive\PPVA\PPLiveVA_U.exe" = C:\Program Files\PPLive\PPVA\PPLiveVA_U.exe:*:Enabled:PPLiveVA -- File not found
"C:\Program Files\PPLive\PPVA\FlvPick.exe" = C:\Program Files\PPLive\PPVA\FlvPick.exe:*:Enabled:FlvPick -- File not found
"C:\Program Files\PPLive\PPVA\crashreporter.exe" = C:\Program Files\PPLive\PPVA\crashreporter.exe:*:Enabled:CrashUpload -- File not found
"C:\Program Files\PPLive\PPVA\PPVADownload.exe" = C:\Program Files\PPLive\PPVA\PPVADownload.exe:*:Enabled:Download -- File not found
"C:\Program Files\PPLive\PPVA\DownloadProgress.exe" = C:\Program Files\PPLive\PPVA\DownloadProgress.exe:*:Enabled:DownloadProgress -- File not found
"C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java™ Platform SE binary -- (Sun Microsystems, Inc.)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe" = C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth -- (Google)
"C:\Program Files\Google\Chrome\Application\chrome.exe" = C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome -- (Google Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{078C3718-6621-4FC8-B03A-502FFF83F600}" = Garmin Training Center
"{105CFC7C-6992-11D5-BD9D-000102C10FD8}" = LizardTech DjVu Control
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution III
"{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{177BF48A-A53E-4045-A2E8-1A0BBD2B21B3}" = iSilo
"{18E65799-76BD-46EF-9E53-972FE5A40736}" = Opera 10.62
"{1F8B6CC8-3A3A-4FCA-983D-C259B81A130E}" = Samsung PC Studio
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 21
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{2AFF2951-86B1-3C53-B34D-B440F11E7D0A}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PLK
"{2D95950E-6D76-43E7-94A5-D9DBA2FD29E4}" = ACDSee Pro 2.5
"{3248F0A8-6813-11D6-A77B-00B0D0150000}" = J2SE Runtime Environment 5.0
"{32D6A58F-9659-446C-BBFC-E6F2B41F24DC}" = Samsung Magic Doctor
"{338F08AB-C262-42C7-B000-34DE1A475273}" = Ad-Aware Email Scanner for Outlook
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1" = Panda USB Vaccine 1.0.1.4
"{5A0DDC27-88E5-3CAD-BC3D-28FFD05CA6B9}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PLK
"{5CBB720F-08E6-4043-B83F-76C277AF6DE7}" = Samsung Wallpaper
"{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}" = Garmin USB Drivers
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6F730513-8688-4C3C-90A3-6B9792CE2EF3}" = Samsung Battery Manager
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{71A51B59-E7D3-11DB-A386-005056C00008}" = Namuga 1.3M Webcam
"{76B830B5-AFE2-498E-8A0E-0BB64B5EC87E}" = BOINC
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{7B46F9CF-CF60-492E-816E-95EB1A9D1BB4}" = Play Camera
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84814E6B-2581-46EC-926A-823BD1C670F6}" = WIDCOMM Bluetooth Software
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E106A57-A17E-431D-B48F-175E42EB9F74}" = imagine digital freedom - Samsung
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007
"{90280409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional with FrontPage
"{943B6738-4801-4982-90EC-0442EF7AEB16}" = Kaspersky Anti-Virus 2010
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9CAC71E9-D196-472E-845C-5462356B2AE1}" = Easy Resolution Manager
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A7581D39-EA20-4883-A480-80C21047052B}" = Easy Network Manager
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{ABB14904-A11B-4F42-996C-80FD608A0F17}" = Samsung EDS
"{AC76BA86-7AD7-1045-7B44-A81200000003}" = Adobe Reader 8 - Polish
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide
"{BD723E53-A42C-4702-AA04-1D74A0311590}" = Magic Keyboard
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Picture Package Music Transfer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}" = Samsung Update Plus
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4F41D14-E0DD-4FB4-AA09-A14225C769BD}" = Atheros WLAN Client
"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
"{F9000000-0001-0000-0000-074957833700}" = ABBYY FineReader 9.0 Professional Edition
"24DA573F901348FFDFF7717497830D45BE0C362E" = Windows Driver Package - Dynastream Innovations (libusb0) LibUsbDevices (07/07/2009 1.12.2)
"49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
"Ad-Aware" = Ad-Aware
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Akamai" = Akamai NetSession Interface
"ALLPlayer_is1" = ALLPlayer V4.X
"Anki" = Anki
"CCleaner" = CCleaner
"CHM To PDF PRO_is1" = CHM To PDF Converter PRO
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2008-09-21 16:18
"CrossTrak" = CrossTrak
"EPSON Printer and Utilities" = EPSON Printer Software
"foldit" = foldit
"Foxit Software" = Foxit PDF Suite
"Free Mp3 Wma Converter_is1" = Free Mp3 Wma Converter V 1.7.3
"Gadu-Gadu 10" = Gadu-Gadu 10
"Google Chrome" = Google Chrome
"HDMI" = Intel® Graphics Media Accelerator Driver
"HijackThis" = HijackThis 2.0.2
"ie8" = Windows Internet Explorer 8
"InstallShield_{7B46F9CF-CF60-492E-816E-95EB1A9D1BB4}" = Play Camera
"InstallWIX_{943B6738-4801-4982-90EC-0442EF7AEB16}" = Kaspersky Anti-Virus 2010
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Marvell Miniport Driver" = Marvell Miniport Driver
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"mk2demo_is1" = Mistrz Klawiatury II Demo
"Mozilla Firefox (3.6.11)" = Mozilla Firefox (3.6.11)
"MP4 to MP3 Converter" = MP4 to MP3 Converter
"PHARM_KOMP_3000#_is1" = Odinstaluj Pharmindex CD Kompendium
"PowerISO" = PowerISO
"RapidTyping" = RapidTyping
"RealPlayer 12.0" = RealPlayer
"SAMSUNG CDMA Modem" = SAMSUNG CDMA Modem Driver Set
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SetFileDate_is1" = SetFileDate 2.0
"Slice" = Slice Audio File Splitter
"SopCast" = SopCast 3.2.9
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Total CMA Pack" = Total CMA Pack 0.45 (public)
"TVUPlayer" = TVUPlayer 2.5.3.1
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.18
"VeryPDF Form Filler v3.1_is1" = VeryPDF Form Filler v3.1
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Windows Media Player 10
"WinRAR archiver" = Archiwizator WinRAR
"WordWeb" = WordWeb Pro
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"pdfsam" = pdfsam

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2010-10-11 12:00:05 | Computer Name = YOUR-E885695610 | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 2010-10-12 10:09:15 | Computer Name = YOUR-E885695610 | Source = Google Update | ID = 20
Description =

Error - 2010-10-12 12:27:36 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca Ad-Aware.exe, wersja 8.0.0.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-12 13:52:15 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca mplayerc.exe, wersja 1.1.796.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-14 06:53:33 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca WINWORD.EXE, wersja 10.0.6864.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-18 17:25:43 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca mplayerc.exe, wersja 1.1.796.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-22 18:11:59 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca boinc.scr, wersja 6.10.17.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-26 05:26:09 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca msimn.exe, wersja 6.0.2900.5512, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-26 07:02:49 | Computer Name = YOUR-E885695610 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd acdseepro25.exe, wersja 2.5.358.0, moduł
powodujący błąd ntdll.dll, wersja 5.1.2600.5755, adres błędu 0x0001b21a.

Error - 2010-10-26 17:42:29 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca mplayerc.exe, wersja 1.1.796.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

[ System Events ]
Error - 2010-10-26 06:50:44 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-10-26 06:50:44 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-10-26 06:50:44 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-10-26 11:54:44 | Computer Name = YOUR-E885695610 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%1058

Error - 2010-10-26 15:22:37 | Computer Name = YOUR-E885695610 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%1058

Error - 2010-10-27 01:30:56 | Computer Name = YOUR-E885695610 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%1058

Error - 2010-10-27 05:31:59 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-10-27 05:31:59 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-10-27 05:31:59 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-10-27 09:33:46 | Computer Name = YOUR-E885695610 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%1058


< End of report >


and the gmer log:


GMER 1.0.15.15477 - http://www.gmer.net
Rootkit quick scan 2010-10-27 19:21:22
Windows 5.1.2600 Dodatek Service Pack 3
Running: ppio5xex.exe; Driver: C:\DOCUME~1\Artur\USTAWI~1\Temp\kfpdyfod.sys


---- System - GMER 1.0.15 ----

SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwEnumerateKey [0xA94F7ECA]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwEnumerateValueKey [0xA94F7F74]

Code \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) FsRtlCheckLockForReadAccess
Code \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) IoIsOperationSynchronous

---- Devices - GMER 1.0.15 ----

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 [F783AB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort0 [F783AB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \FileSystem\Ntfs \Ntfs 89C011F8
Device \FileSystem\Fastfat \Fat 886D31F8

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \Driver\Tcpip \Device\Ip kl1.sys (Kaspersky Unified Driver/Kaspersky Lab)
AttachedDevice \Driver\Tcpip \Device\Tcp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab)
AttachedDevice \Driver\Tcpip \Device\Udp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab)
AttachedDevice \Driver\Tcpip \Device\RawIp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

---- EOF - GMER 1.0.15 ----



Any help appreciated.

[Advertisements]

BTW the temps are deleted, discs are defragmented and checked but still it starts up very long and is slower than it used to be (with the same amount of workload)

[tapionmajin2]

BTW the temps are deleted, discs are defragmented and checked but still it starts up very long and is slower than it used to be (with the same amount of workload)

[kahdah]

Hello tapionmajin2

Welcome to G2Go.
=====================
Are you still in need of assistance?
If so please open OTL once more and click on the run scan button and post the log please.

[tapionmajin2]

Gladly,

here you go


OTL logfile created on: 2010-11-10 16:00:19 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Artur\Moje dokumenty\Downloads
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 32,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 69,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 70,04 Gb Total Space | 3,15 Gb Free Space | 4,50% Space Free | Partition Type: NTFS
Drive D: | 73,00 Gb Total Space | 7,56 Gb Free Space | 10,36% Space Free | Partition Type: NTFS
Drive G: | 15,01 Gb Total Space | 9,12 Gb Free Space | 60,79% Space Free | Partition Type: FAT32

Computer Name: YOUR-E885695610 | User Name: Artur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010-11-10 15:42:52 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Artur\Moje dokumenty\Downloads\OTL.exe
PRC - [2010-11-02 16:39:43 | 012,668,928 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\BOINC\projects\boinc.bakerlab.org_rosetta\minirosetta_2.17_windows_intelx86.exe
PRC - [2010-11-01 22:36:03 | 000,974,904 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2010-10-26 21:02:51 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2010-10-07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2010-09-08 17:50:38 | 000,340,520 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
PRC - [2010-02-02 03:35:30 | 000,065,856 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\NLSSRV32.EXE
PRC - [2009-10-28 04:55:18 | 000,783,104 | ---- | M] (Space Sciences Laboratory) -- C:\Program Files\BOINC\boinc.exe
PRC - [2009-09-23 06:45:50 | 001,287,176 | ---- | M] (Panda Security) -- C:\Program Files\Panda USB Vaccine\USBVaccine.exe
PRC - [2009-09-15 01:17:16 | 000,061,760 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\ASTSRV.EXE
PRC - [2009-02-18 07:28:14 | 000,170,520 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxext.exe
PRC - [2008-10-06 18:07:26 | 000,679,936 | ---- | M] (SAMSUNG Electronics) -- C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
PRC - [2008-09-17 13:25:46 | 001,440,384 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
PRC - [2008-09-17 13:25:46 | 000,580,200 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2008-08-08 06:04:10 | 001,091,768 | ---- | M] (C. Ghisler & Co.) -- C:\Program Files\Dodatki\Total CMA Pack\TOTALCMD.EXE
PRC - [2008-04-15 13:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-12-06 11:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
PRC - [2003-02-17 23:01:52 | 000,954,476 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe


========== Modules (SafeList) ==========

MOD - [2010-11-10 15:42:52 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Artur\Moje dokumenty\Downloads\OTL.exe
MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2008-09-17 13:19:50 | 000,073,728 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\BtMmHook.dll
MOD - [2006-05-03 12:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010-09-23 07:44:15 | 002,950,744 | ---- | M] () [Auto | Running] -- c:\Program Files\Common Files\Akamai\netsession_win_062a651.dll -- (Akamai)
SRV - [2010-09-08 17:50:38 | 000,340,520 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe -- (AVP)
SRV - [2010-05-17 11:11:40 | 000,229,376 | ---- | M] (Puran Software) [Disabled | Stopped] -- C:\WINDOWS\System32\PuranDefragS.exe -- (PuranDefrag)
SRV - [2010-02-02 03:35:30 | 000,065,856 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2009-09-15 01:17:16 | 000,061,760 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\ASTSRV.EXE -- (astcc)
SRV - [2009-04-21 09:09:00 | 000,282,624 | ---- | M] (Marvell) [Auto | Running] -- C:\WINDOWS\system32\yk51x86.dll -- (yksvc)
SRV - [2007-12-06 11:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\DRIVERS\ntcdrdrv.sys -- (ntcdrdrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys -- (Lavasoft Kernexplorer)
DRV - [2010-11-05 13:42:30 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\utixndm0.sys -- (utixndm0)
DRV - [2010-10-11 17:18:05 | 000,093,360 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SBREDrv.sys -- (SBRE)
DRV - [2010-09-08 17:50:38 | 000,315,408 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2010-06-04 19:29:04 | 001,606,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2010-04-13 17:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys -- (WsAudio_DeviceS(5)) WsAudio_DeviceS(5)
DRV - [2010-04-13 17:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys -- (WsAudio_DeviceS(4)) WsAudio_DeviceS(4)
DRV - [2010-04-13 17:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys -- (WsAudio_DeviceS(3)) WsAudio_DeviceS(3)
DRV - [2010-04-13 17:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys -- (WsAudio_DeviceS(2)) WsAudio_DeviceS(2)
DRV - [2010-04-13 17:45:36 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys -- (WsAudio_DeviceS(1)) WsAudio_DeviceS(1)
DRV - [2010-03-21 18:09:28 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009-10-14 20:18:34 | 000,036,880 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\klbg.sys -- (klbg)
DRV - [2009-10-02 18:39:44 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2009-09-14 13:42:46 | 000,032,272 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)
DRV - [2009-09-01 14:29:50 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl1.sys -- (kl1)
DRV - [2009-07-27 03:43:18 | 000,058,908 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2009-07-14 12:57:54 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-04-21 09:09:00 | 000,297,344 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2008-11-18 08:53:48 | 000,016,640 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AsAudioDevice_349.sys -- (AsAudioDevice_349)
DRV - [2008-09-23 21:23:58 | 000,238,464 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMC326.sys -- (VMC326)
DRV - [2008-08-28 19:18:14 | 000,224,736 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2008-08-27 00:35:00 | 004,753,920 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008-07-29 16:59:08 | 000,879,832 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2008-07-29 16:59:02 | 000,156,816 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2008-07-27 00:29:54 | 000,074,688 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2008-07-27 00:29:50 | 000,037,280 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2008-07-27 00:29:36 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2008-04-15 13:00:00 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-02-15 12:12:06 | 005,854,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2008-01-14 19:01:02 | 000,030,208 | ---- | M] (Samsung Electronics,.LTD) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SamsungEDS.SYS -- (DNSeFilter)
DRV - [2006-08-01 15:57:24 | 000,019,840 | ---- | M] (Samsung) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SUE_PD.sys -- (SUEPD)
DRV - [2005-12-22 02:24:52 | 000,137,884 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005-12-22 02:24:52 | 000,010,864 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005-12-22 02:24:50 | 000,080,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2005-10-27 05:18:05 | 000,004,300 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\MEMIO.SYS -- (DOSMEMIO)
DRV - [2002-11-22 04:14:36 | 000,122,505 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw)
DRV - [2002-10-11 00:19:00 | 000,046,551 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...=SMSN&bmod=SMSN
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://wyborcza.biz/.../0,0.html?p=005
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "GOOgle.com"
FF - prefs.js..extensions.enabledItems: [email protected]:2.23b2
FF - prefs.js..extensions.enabledItems: [email protected]:4.1.6
FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0
FF - prefs.js..extensions.enabledItems: [email protected]:2
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 3
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: [email protected]:9.0.0.736
FF - prefs.js..keyword.URL: "http://www.google.co...ient&gfns=1&q="


FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-10-28 20:38:39 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-10-28 20:38:39 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2009-07-14 12:48:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Extensions
[2010-11-10 08:43:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions
[2010-09-09 13:50:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\{0200c2a9-70da-4f6d-b527-f5f7d7877228}
[2010-05-01 07:49:38 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-09-09 13:50:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}
[2010-09-09 13:49:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\[email protected]
[2010-07-02 20:55:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\[email protected]
[2010-05-01 07:49:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\[email protected]
[2010-09-09 13:50:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\extensions\[email protected]
[2009-07-14 13:35:40 | 000,002,234 | ---- | M] () -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\pajge4u8.default\searchplugins\askcom.xml
[2010-11-10 08:43:27 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-04-25 19:47:30 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010-05-08 09:57:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-08-02 05:19:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-09-08 17:34:14 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
[2009-07-17 09:40:12 | 000,704,512 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2010-07-16 20:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009-07-31 03:06:48 | 001,654,784 | ---- | M] (LizardTech) -- C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll
[2010-06-25 23:28:19 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-06-25 23:28:19 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-06-25 23:28:19 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-06-25 23:28:19 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-06-25 23:28:19 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-06-25 23:28:19 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2010-10-31 14:23:13 | 000,424,203 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 14621 more lines...
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab)
O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [SUPBackground] C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKCU..\Run: [EPSON Stylus D88 Series (Kopia 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKCU..\Run: [Total CMA Pack] C:\Program Files\Dodatki\Total CMA Pack\Total CMA Pack.exe (CMA®)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BOINC Manager.lnk = C:\Program Files\BOINC\boincmgr.exe (Space Sciences Laboratory)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Easy Display Manager.lnk = C:\Program Files\Samsung\Easy Display Manager\DMLauncher_XP.exe (SAMSUNG Electronics)
O4 - Startup: C:\Documents and Settings\Artur\Menu Start\Programy\Autostart\PandaUSBVaccine.lnk = C:\Program Files\Panda USB Vaccine\USBVaccine.exe (Panda Security)
O4 - Startup: C:\Documents and Settings\Artur\Menu Start\Programy\Autostart\WordWeb Pro.lnk = C:\Program Files\WordWeb\wweb32.exe (Antony Lewis)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Wyślij do interfejsu Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: &Virtual keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.21.99.95
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\mzvkbd3.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O20 - Winlogon\Notify\nnnnKeeF: DllName - nnnnKeeF.dll - File not found
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Tapeta pulpitu.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Tapeta pulpitu.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-02-16 11:42:32 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-10-23 00:42:58 | 000,000,016 | -H-- | M] () - G:\AUTORUN.INF -- [ FAT32 ]
O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\Autoplay\ComManD - "" = F:\xvxp.exe -- File not found
O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\AutoRun\command - "" = F:\xvxp.exe -- File not found
O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\eXpLoRe\COMmaNd - "" = F:\xvxp.exe -- File not found
O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\oPen\comMaNd - "" = F:\xvxp.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010-11-10 15:59:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Dane aplikacji\vlc
[2010-11-10 15:56:53 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2010-11-10 15:35:34 | 000,000,000 | ---D | C] -- C:\Program Files\CoreCodec
[2010-11-09 16:04:49 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Artur\Recent
[2010-11-05 09:51:49 | 000,140,800 | ---- | C] (The Duck Corporation) -- C:\WINDOWS\System32\tm20dec.ax
[2010-11-05 09:46:50 | 000,000,000 | ---D | C] -- C:\TELL ME MORE SI
[2010-10-28 17:22:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\mciPadvga
[2010-10-28 07:52:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Dane aplikacji\RapidTyping
[2010-10-28 07:52:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\RapidTyping
[2010-10-27 20:16:21 | 001,110,016 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranFD.exe
[2010-10-27 20:16:21 | 000,229,376 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranDefragS.exe
[2010-10-27 20:16:21 | 000,221,184 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranDC.exe
[2010-10-27 20:16:21 | 000,212,992 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranDefrag.dll
[2010-10-27 20:16:21 | 000,107,008 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranDefragBT.exe
[2010-10-27 20:16:19 | 000,000,000 | ---D | C] -- C:\Program Files\Puran Defrag
[2010-10-27 13:13:05 | 000,000,000 | ---D | C] -- C:\Program Files\RapidTyping
[2010-10-26 21:04:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\xing shared
[2010-10-26 21:02:55 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2010-10-26 21:02:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Real
[2010-10-26 21:02:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real
[2010-10-26 21:02:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Dane aplikacji\Real
[2010-10-26 11:46:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Pulpit\Stockholm
[2010-10-26 11:43:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Pulpit\CALI
[2010-10-25 22:26:46 | 000,000,000 | ---D | C] -- C:\Program Files\ALLPlayer
[2010-10-23 06:11:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Temp
[2010-10-13 20:15:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010-10-13 10:33:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Pulpit\wyjazdy
[2010-10-11 19:01:47 | 000,000,000 | ---D | C] -- C:\Program Files\SetFileDate
[2010-10-11 16:45:18 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\~0

========== Files - Modified Within 30 Days ==========

[2010-11-10 16:11:01 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010-11-10 12:04:56 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010-11-10 12:04:56 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010-11-10 12:04:55 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010-11-10 12:04:54 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010-11-10 12:04:53 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010-11-10 06:49:24 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010-11-10 06:48:55 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-3386402223-640050984-2597840139-1005.job
[2010-11-10 06:48:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-11-10 06:48:36 | 2137,444,352 | -HS- | M] () -- C:\hiberfil.sys
[2010-11-09 22:27:45 | 000,027,136 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\terminology2.doc
[2010-11-09 22:10:01 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-3386402223-640050984-2597840139-1005.job
[2010-11-08 20:49:08 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\FOXIT_PDF
[2010-11-07 15:10:53 | 000,001,486 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\TeLL me More.lnk
[2010-11-06 19:44:51 | 000,100,864 | ---- | M] () -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-11-06 19:37:34 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2010-11-05 20:49:54 | 000,027,648 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\terminology.doc
[2010-11-05 13:42:30 | 000,007,168 | ---- | M] () -- C:\WINDOWS\System32\drivers\utixndm0.sys
[2010-11-05 09:50:46 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010-11-05 09:50:46 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010-11-04 09:17:58 | 000,637,431 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\The Weirdest People in the World.pdf
[2010-10-31 14:23:13 | 000,424,203 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010-10-29 09:51:27 | 000,032,256 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\zaświadczenie.doc
[2010-10-27 20:46:38 | 000,141,240 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-10-27 19:18:34 | 000,211,167 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\1.%20Wniosek%20W-2.pdf
[2010-10-27 09:18:21 | 000,000,028 | ---- | M] () -- C:\WINDOWS\powerplayer.ini
[2010-10-27 09:18:21 | 000,000,017 | ---- | M] () -- C:\WINDOWS\psnetwork.ini
[2010-10-26 21:03:00 | 000,278,528 | ---- | M] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2010-10-11 17:18:05 | 000,093,360 | ---- | M] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys

========== Files Created - No Company Name ==========

[2010-11-07 22:05:40 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\terminology2.doc
[2010-11-07 15:10:53 | 000,001,486 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\TeLL me More.lnk
[2010-11-05 11:55:22 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\utixndm0.sys
[2010-11-05 09:49:42 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2010-11-05 09:49:42 | 000,005,672 | ---- | C] () -- C:\WINDOWS\System32\quartz.vxd
[2010-11-04 09:17:57 | 000,637,431 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\The Weirdest People in the World.pdf
[2010-11-02 18:51:52 | 000,027,648 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\terminology.doc
[2010-10-29 09:51:27 | 000,032,256 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\zaświadczenie.doc
[2010-10-27 19:18:34 | 000,211,167 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\1.%20Wniosek%20W-2.pdf
[2010-10-27 09:18:21 | 000,000,028 | ---- | C] () -- C:\WINDOWS\powerplayer.ini
[2010-10-27 09:18:21 | 000,000,017 | ---- | C] () -- C:\WINDOWS\psnetwork.ini
[2010-10-26 21:07:59 | 000,000,278 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-3386402223-640050984-2597840139-1005.job
[2010-10-26 21:07:58 | 000,000,286 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-3386402223-640050984-2597840139-1005.job
[2010-10-25 22:27:07 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-10-25 22:27:07 | 000,797,184 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.ax
[2010-10-25 22:27:07 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010-10-11 17:43:46 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010-10-11 17:01:49 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010-10-11 17:01:49 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010-10-11 17:01:47 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010-10-11 17:01:46 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010-09-06 09:31:11 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010-05-22 09:12:13 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2010-03-21 18:14:29 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2010-03-21 17:23:53 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2010-02-12 15:31:38 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll
[2010-01-30 17:04:25 | 000,000,219 | ---- | C] () -- C:\WINDOWS\NGWP70.INI
[2010-01-30 17:02:25 | 000,000,524 | ---- | C] () -- C:\WINDOWS\ngenxp.INI
[2009-10-22 14:03:43 | 000,000,155 | ---- | C] () -- C:\WINDOWS\adidsl.ini
[2009-10-22 14:03:34 | 000,000,360 | ---- | C] () -- C:\WINDOWS\adiras.ini
[2009-10-22 14:03:30 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll
[2009-10-22 14:03:30 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll
[2009-09-16 09:27:58 | 000,508,224 | ---- | C] () -- C:\WINDOWS\System32\ICCProfiles.dll
[2009-07-14 18:07:56 | 000,100,864 | ---- | C] () -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-07-14 17:30:25 | 000,001,520 | ---- | C] () -- C:\WINDOWS\System32\Artur_KBD.ini
[2009-07-14 13:38:38 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-07-14 12:57:53 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-06-26 08:42:48 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009-02-16 19:20:12 | 000,000,642 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2009-02-16 12:34:17 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-02-16 11:54:58 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\MagicKBD.INI
[2009-02-16 11:54:58 | 000,001,520 | ---- | C] () -- C:\WINDOWS\System32\Właściciel_KBD.ini
[2009-02-16 11:54:55 | 000,003,425 | ---- | C] () -- C:\WINDOWS\System32\KBDR.INI
[2009-02-16 11:54:55 | 000,002,741 | ---- | C] () -- C:\WINDOWS\System32\KBDD.INI
[2009-02-16 11:54:55 | 000,002,699 | ---- | C] () -- C:\WINDOWS\System32\KBDO.INI
[2009-02-16 11:54:55 | 000,002,699 | ---- | C] () -- C:\WINDOWS\System32\KBDC.INI
[2009-02-16 11:54:55 | 000,002,606 | ---- | C] () -- C:\WINDOWS\System32\KBDB.INI
[2009-02-16 11:54:55 | 000,002,236 | ---- | C] () -- C:\WINDOWS\System32\KBDQ.INI
[2009-02-16 11:54:55 | 000,001,956 | ---- | C] () -- C:\WINDOWS\System32\KBDE.INI
[2009-02-16 11:54:55 | 000,001,885 | ---- | C] () -- C:\WINDOWS\System32\KBDP.INI
[2009-02-16 11:54:55 | 000,001,857 | ---- | C] () -- C:\WINDOWS\System32\KBDUU.INI
[2009-02-16 11:54:55 | 000,001,835 | ---- | C] () -- C:\WINDOWS\System32\KBDG.INI
[2009-02-16 11:54:55 | 000,001,835 | ---- | C] () -- C:\WINDOWS\System32\KBDA.INI
[2009-02-16 11:54:55 | 000,001,834 | ---- | C] () -- C:\WINDOWS\System32\KBDU.INI
[2009-02-16 11:54:55 | 000,001,819 | ---- | C] () -- C:\WINDOWS\System32\KBDN.INI
[2009-02-16 11:54:55 | 000,001,699 | ---- | C] () -- C:\WINDOWS\System32\KBDT.INI
[2009-02-16 11:54:55 | 000,001,697 | ---- | C] () -- C:\WINDOWS\System32\KBDV.INI
[2009-02-16 11:54:55 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\KBDS.INI
[2009-02-16 11:54:55 | 000,001,476 | ---- | C] () -- C:\WINDOWS\System32\KBDF.INI
[2009-02-16 11:52:42 | 000,000,135 | R--- | C] () -- C:\WINDOWS\System32\lngEng.ini
[2009-02-16 11:52:42 | 000,000,117 | ---- | C] () -- C:\WINDOWS\System32\lngKor.ini
[2009-02-16 11:49:09 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2009-02-16 11:46:37 | 000,004,300 | ---- | C] () -- C:\WINDOWS\System32\MEMIO.SYS
[2008-09-17 13:20:08 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2001-11-14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll

========== LOP Check ==========

[2009-07-14 12:55:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ACD Systems
[2009-11-12 15:22:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Azureus
[2010-11-10 14:58:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BOINC
[2009-07-14 13:26:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2009-12-05 21:27:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2010-10-31 16:43:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\foldit
[2010-03-25 16:17:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-03-04 08:27:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GARMIN
[2010-02-12 16:13:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\iAR GmbH
[2010-09-06 09:04:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound
[2010-05-22 11:44:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nitro PDF
[2009-10-22 14:42:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Panda Security
[2010-06-29 20:23:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PPLive
[2010-10-28 07:52:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RapidTyping
[2010-09-26 10:43:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-02-16 11:49:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WLAN
[2010-09-05 12:18:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\xml_param
[2010-02-06 10:53:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010-11-10 12:15:31 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\~0
[2010-06-29 06:17:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\.anki
[2010-03-01 14:14:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\.matplotlib
[2009-07-26 23:01:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\ACD Systems
[2009-12-02 20:12:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\adma
[2009-12-15 22:49:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Azureus
[2010-02-12 16:44:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\calibre
[2009-07-14 14:09:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\DAEMON Tools Lite
[2010-08-17 09:28:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Downloaded Installations
[2009-12-05 21:29:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\ESET
[2010-03-25 16:17:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Gadu-Gadu 10
[2010-03-04 08:27:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\GARMIN
[2010-02-12 16:13:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\iAR GmbH
[2009-08-04 21:26:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\iSilo
[2009-12-20 18:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\mplayer
[2010-08-10 05:28:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Nitro PDF
[2009-07-14 13:00:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Nowe Gadu-Gadu
[2009-10-05 10:56:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Opera
[2010-05-15 08:19:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Orbit
[2010-06-26 11:14:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\PPStream
[2010-02-12 15:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\PrimoPDF
[2010-10-28 07:52:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\RapidTyping
[2010-03-21 18:17:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Samsung
[2010-06-08 14:56:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\SanDisk
[2009-10-31 15:02:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Uniblue
[2010-11-10 15:57:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\uTorrent
[2009-12-04 06:54:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\VitySoft
[2010-09-22 09:08:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\VOWSoft
[2009-12-05 20:50:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\WordWeb
[2010-02-23 18:49:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\XnView
[2010-11-10 12:04:53 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job
[2010-11-10 12:04:54 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job
[2010-11-10 12:04:55 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job
[2010-11-10 12:04:56 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job
[2010-11-10 12:04:56 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2

< End of report >


EXTRAS

OTL Extras logfile created on: 2010-11-10 16:00:19 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Artur\Moje dokumenty\Downloads
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 32,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 69,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 70,04 Gb Total Space | 3,15 Gb Free Space | 4,50% Space Free | Partition Type: NTFS
Drive D: | 73,00 Gb Total Space | 7,56 Gb Free Space | 10,36% Space Free | Partition Type: NTFS
Drive G: | 15,01 Gb Total Space | 9,12 Gb Free Space | 60,79% Space Free | Partition Type: FAT32

Computer Name: YOUR-E885695610 | User Name: Artur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
"" =

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"24247:TCP" = 24247:TCP:*:Enabled:BitComet 24247 TCP
"24247:UDP" = 24247:UDP:*:Enabled:BitComet 24247 UDP
"55555:TCP" = 55555:TCP:*:Enabled:BitComet 55555 TCP
"55555:UDP" = 55555:UDP:*:Enabled:BitComet 55555 UDP
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"2254:TCP" = 2254:TCP:*:Enabled:Akamai NetSession Interface
"5000:UDP" = 5000:UDP:*:Enabled:Akamai NetSession Interface

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Nowe Gadu-Gadu\gg.exe" = C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu -- File not found
"C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe -- File not found
"C:\Program Files\Vuze\Azureus.exe" = C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus -- File not found
"H:\gtplink\EasySetupAssistant\EasySetupAssistant.exe" = H:\gtplink\EasySetupAssistant\EasySetupAssistant.exe:*:Enabled:TP-LINK Easy Setup Assistant -- File not found
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe" = C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java™ Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)
"C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.)
"C:\Program Files\Foxit Software\PDF Editor\PDFEdit.exe" = C:\Program Files\Foxit Software\PDF Editor\PDFEdit.exe:*:Enabled:Foxit PDF Editor, the first REAL editor for PDF files! -- (Foxit Software Company)
"C:\Program Files\SopCast\adv\SopAdver.exe" = C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com)
"C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com)
"C:\Program Files\TVUPlayer\TVUPlayer.exe" = C:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks)
"C:\Program Files\PPLive\PPTV\PPLive.exe" = C:\Program Files\PPLive\PPTV\PPLive.exe:*:Enabled:PPLive -- File not found
"C:\Program Files\Common Files\PPLiveNetwork\PPAP.exe" = C:\Program Files\Common Files\PPLiveNetwork\PPAP.exe:*:Enabled:PPLive -- File not found
"C:\Program Files\PPLive\PPTV\PPLiveU.exe" = C:\Program Files\PPLive\PPTV\PPLiveU.exe:*:Enabled:PPLiveU -- File not found
"C:\Program Files\PPLive\PPVA\PPLiveVA.exe" = C:\Program Files\PPLive\PPVA\PPLiveVA.exe:*:Enabled:PPLiveVA -- File not found
"C:\Program Files\PPLive\PPVA\PPLiveVA_U.exe" = C:\Program Files\PPLive\PPVA\PPLiveVA_U.exe:*:Enabled:PPLiveVA -- File not found
"C:\Program Files\PPLive\PPVA\FlvPick.exe" = C:\Program Files\PPLive\PPVA\FlvPick.exe:*:Enabled:FlvPick -- File not found
"C:\Program Files\PPLive\PPVA\crashreporter.exe" = C:\Program Files\PPLive\PPVA\crashreporter.exe:*:Enabled:CrashUpload -- File not found
"C:\Program Files\PPLive\PPVA\PPVADownload.exe" = C:\Program Files\PPLive\PPVA\PPVADownload.exe:*:Enabled:Download -- File not found
"C:\Program Files\PPLive\PPVA\DownloadProgress.exe" = C:\Program Files\PPLive\PPVA\DownloadProgress.exe:*:Enabled:DownloadProgress -- File not found
"C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java™ Platform SE binary -- (Sun Microsystems, Inc.)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe" = C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth -- (Google)
"C:\Program Files\Google\Chrome\Application\chrome.exe" = C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome -- (Google Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{078C3718-6621-4FC8-B03A-502FFF83F600}" = Garmin Training Center
"{105CFC7C-6992-11D5-BD9D-000102C10FD8}" = LizardTech DjVu Control
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution III
"{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{177BF48A-A53E-4045-A2E8-1A0BBD2B21B3}" = iSilo
"{18E65799-76BD-46EF-9E53-972FE5A40736}" = Opera 10.62
"{1F8B6CC8-3A3A-4FCA-983D-C259B81A130E}" = Samsung PC Studio
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 21
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{2AFF2951-86B1-3C53-B34D-B440F11E7D0A}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PLK
"{2D95950E-6D76-43E7-94A5-D9DBA2FD29E4}" = ACDSee Pro 2.5
"{3248F0A8-6813-11D6-A77B-00B0D0150000}" = J2SE Runtime Environment 5.0
"{32D6A58F-9659-446C-BBFC-E6F2B41F24DC}" = Samsung Magic Doctor
"{338F08AB-C262-42C7-B000-34DE1A475273}" = Ad-Aware Email Scanner for Outlook
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1" = Panda USB Vaccine 1.0.1.4
"{5A0DDC27-88E5-3CAD-BC3D-28FFD05CA6B9}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PLK
"{5CBB720F-08E6-4043-B83F-76C277AF6DE7}" = Samsung Wallpaper
"{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}" = Garmin USB Drivers
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6F730513-8688-4C3C-90A3-6B9792CE2EF3}" = Samsung Battery Manager
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{71A51B59-E7D3-11DB-A386-005056C00008}" = Namuga 1.3M Webcam
"{76B830B5-AFE2-498E-8A0E-0BB64B5EC87E}" = BOINC
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{7B46F9CF-CF60-492E-816E-95EB1A9D1BB4}" = Play Camera
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84814E6B-2581-46EC-926A-823BD1C670F6}" = WIDCOMM Bluetooth Software
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E106A57-A17E-431D-B48F-175E42EB9F74}" = imagine digital freedom - Samsung
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007
"{90280409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional with FrontPage
"{943B6738-4801-4982-90EC-0442EF7AEB16}" = Kaspersky Anti-Virus 2010
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9CAC71E9-D196-472E-845C-5462356B2AE1}" = Easy Resolution Manager
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A7581D39-EA20-4883-A480-80C21047052B}" = Easy Network Manager
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{ABB14904-A11B-4F42-996C-80FD608A0F17}" = Samsung EDS
"{AC76BA86-7AD7-1045-7B44-A81200000003}" = Adobe Reader 8 - Polish
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide
"{BD723E53-A42C-4702-AA04-1D74A0311590}" = Magic Keyboard
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Picture Package Music Transfer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}" = Samsung Update Plus
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4F41D14-E0DD-4FB4-AA09-A14225C769BD}" = Atheros WLAN Client
"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
"{F9000000-0001-0000-0000-074957833700}" = ABBYY FineReader 9.0 Professional Edition
"24DA573F901348FFDFF7717497830D45BE0C362E" = Windows Driver Package - Dynastream Innovations (libusb0) LibUsbDevices (07/07/2009 1.12.2)
"49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Akamai" = Akamai NetSession Interface
"ALLPlayer_is1" = ALLPlayer V4.X
"Anki" = Anki
"CCleaner" = CCleaner
"CHM To PDF PRO_is1" = CHM To PDF Converter PRO
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2008-09-21 16:18
"CoreAVC Professional Edition" = CoreAVC Professional Edition (remove only)
"CrossTrak" = CrossTrak
"EPSON Printer and Utilities" = EPSON Printer Software
"foldit" = foldit
"Foxit Software" = Foxit PDF Suite
"Free Mp3 Wma Converter_is1" = Free Mp3 Wma Converter V 1.7.3
"Gadu-Gadu 10" = Gadu-Gadu 10
"Google Chrome" = Google Chrome
"HDMI" = Intel® Graphics Media Accelerator Driver
"HijackThis" = HijackThis 2.0.2
"ie8" = Windows Internet Explorer 8
"InstallShield_{7B46F9CF-CF60-492E-816E-95EB1A9D1BB4}" = Play Camera
"InstallWIX_{943B6738-4801-4982-90EC-0442EF7AEB16}" = Kaspersky Anti-Virus 2010
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Marvell Miniport Driver" = Marvell Miniport Driver
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"MP4 to MP3 Converter" = MP4 to MP3 Converter
"PHARM_KOMP_3000#_is1" = Odinstaluj Pharmindex CD Kompendium
"PowerISO" = PowerISO
"Puran Defrag Free Edition_is1" = Puran Defrag Free Edition 7.1
"RapidTyping" = RapidTyping
"RealPlayer 12.0" = RealPlayer
"SAMSUNG CDMA Modem" = SAMSUNG CDMA Modem Driver Set
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SetFileDate_is1" = SetFileDate 2.0
"Slice" = Slice Audio File Splitter
"SopCast" = SopCast 3.2.9
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TMM60" = TeLL me More
"Total CMA Pack" = Total CMA Pack 0.45 (public)
"TVUPlayer" = TVUPlayer 2.5.3.1
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.18
"VeryPDF Form Filler v3.1_is1" = VeryPDF Form Filler v3.1
"VLC media player" = VLC media player 1.1.4
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Windows Media Player 10
"WinRAR archiver" = Archiwizator WinRAR
"WordWeb" = WordWeb Pro
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"pdfsam" = pdfsam

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2010-10-18 17:25:43 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca mplayerc.exe, wersja 1.1.796.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-22 18:11:59 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca boinc.scr, wersja 6.10.17.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-26 05:26:09 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca msimn.exe, wersja 6.0.2900.5512, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-26 07:02:49 | Computer Name = YOUR-E885695610 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd acdseepro25.exe, wersja 2.5.358.0, moduł
powodujący błąd ntdll.dll, wersja 5.1.2600.5755, adres błędu 0x0001b21a.

Error - 2010-10-26 17:42:29 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca mplayerc.exe, wersja 1.1.796.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-29 04:31:49 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca boinc.scr, wersja 6.10.17.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-10-29 04:32:05 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca boinc.scr, wersja 6.10.17.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-11-03 11:04:16 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca boinc.scr, wersja 6.10.17.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-11-05 10:52:11 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca boinc.scr, wersja 6.10.17.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-11-05 10:52:43 | Computer Name = YOUR-E885695610 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca boinc.scr, wersja 6.10.17.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

[ System Events ]
Error - 2010-11-09 06:59:05 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-11-09 06:59:05 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-11-10 01:49:03 | Computer Name = YOUR-E885695610 | Source = Print | ID = 19
Description = Udostępnienie drukarki + 1722 nie powiodło się: drukarka Foxit PDF
Printer z nazwą udziału Drukarka2.

Error - 2010-11-10 01:49:04 | Computer Name = YOUR-E885695610 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%1058

Error - 2010-11-10 03:33:26 | Computer Name = YOUR-E885695610 | Source = Service Control Manager | ID = 7011
Description = Limit czasu (30000 milisekund) podczas oczekiwania na odpowiedź transakcji
z usługi Dnscache.

Error - 2010-11-10 03:34:11 | Computer Name = YOUR-E885695610 | Source = Service Control Manager | ID = 7011
Description = Limit czasu (30000 milisekund) podczas oczekiwania na odpowiedź transakcji
z usługi Dnscache.

Error - 2010-11-10 03:35:31 | Computer Name = YOUR-E885695610 | Source = Service Control Manager | ID = 7011
Description = Limit czasu (30000 milisekund) podczas oczekiwania na odpowiedź transakcji
z usługi Dnscache.

Error - 2010-11-10 05:38:16 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-11-10 05:38:16 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding

Error - 2010-11-10 05:38:16 | Computer Name = YOUR-E885695610 | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}.
Błąd:
„%3”
wystąpił
podczas uruchamiania tego polecenia: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcrobatInfo.exe"
/PDFShell -Embedding


< End of report >


Thanks

[kahdah]

Please submit the following file to one of these online file scanners.
(All you have to do is copy and paste the file path into the box when you click on Browse then once you have done that click on the open button then submit)

C:\WINDOWS\System32\drivers\utixndm0.sys

Jotti File Scan
VirusTotal File Scan

This will produce a report after the scan is complete, please copy and paste those results in your next post.

[tapionmajin2]

Antivirus Version Last Update Result
AhnLab-V3 2010.11.10.00 2010.11.09 -
AntiVir 7.10.13.198 2010.11.10 -
Antiy-AVL 2.0.3.7 2010.11.10 -
Authentium 5.2.0.5 2010.11.10 W32/Bagle.IJ
Avast 4.8.1351.0 2010.11.09 -
Avast5 5.0.594.0 2010.11.09 -
AVG 9.0.0.851 2010.11.09 -
BitDefender 7.2 2010.11.10 Rootkit.Bagle.K
CAT-QuickHeal 11.00 2010.11.09 -
ClamAV 0.96.4.0 2010.11.09 Trojan.Agent-66914
Comodo 6670 2010.11.10 -
DrWeb 5.0.2.03300 2010.11.10 -
Emsisoft 5.0.0.50 2010.11.10 Trojan.Win32.Bagle!IK
eSafe 7.0.17.0 2010.11.09 Win32.Bagle.RC.worm
eTrust-Vet 36.1.7966 2010.11.10 -
F-Prot 4.6.2.117 2010.11.09 W32/Bagle.IJ
F-Secure 9.0.16160.0 2010.11.10 Rootkit:W32/Bagle.SR
Fortinet 4.2.249.0 2010.11.09 W32/Bagle.ZNG!worm
GData 21 2010.11.10 Rootkit.Bagle.K
Ikarus T3.1.1.90.0 2010.11.10 Trojan.Win32.Bagle
Jiangmin 13.0.900 2010.11.10 Trojan/Agent.cmdf
K7AntiVirus 9.67.2940 2010.11.09 Trojan
Kaspersky 7.0.0.125 2010.11.10 -
McAfee 5.400.0.1158 2010.11.10 -
McAfee-GW-Edition 2010.1C 2010.11.10 -
Microsoft 1.6301 2010.11.10 -
NOD32 5605 2010.11.09 -
Norman 6.06.10 2010.11.09 -
nProtect 2010-11-10.01 2010.11.10 Worm/W32.Bagle.7168
Panda 10.0.2.7 2010.11.09 -
PCTools 7.0.3.5 2010.11.10 Trojan-Downloader.Bagle
Prevx 3.0 2010.11.10 Medium Risk Malware
Rising 22.73.01.03 2010.11.10 Trojan.Win32.Generic.51E920C9
Sophos 4.59.0 2010.11.10 -
Sunbelt 7269 2010.11.10 -
SUPERAntiSpyware 4.40.0.1006 2010.11.10 Trojan.Agent/Gen
Symantec 20101.2.0.161 2010.11.10 -
TheHacker 6.7.0.1.081 2010.11.10 Trojan/Rootkit.gen
TrendMicro 9.120.0.1004 2010.11.10 -
TrendMicro-HouseCall 9.120.0.1004 2010.11.10 -
VBA32 3.12.14.1 2010.11.09 -
ViRobot 2010.10.30.4121 2010.11.10 Trojan.Win32.Bagle.7168
VirusBuster 12.72.5.0 2010.11.09 -
Additional informationShow all
MD5 : 524d8d450622db4a7875b111c299a76b
SHA1 : fe22db1e0b864e77baeca5520c05c42431784fd8
SHA256: 7ae9aae77884ac0baa2f8168b3ed4de0c0c9834a42d8e5a775f47a2c66cec237
ssdeep: 96:wQQovxXZHQ7SioGfU2zSVeUvaUOPLNI8n1Sw1xJj0o:w+PQ/oV2z2eaaUOW8RI
File size : 7168 bytes
First seen: 2009-01-30 14:00:58
Last seen : 2010-11-10 09:00:50
Magic: PE32 executable for MS Windows (DLL) (native) Intel 80386 32-bit
TrID:
Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: n/a
copyright....: Zaitsev Oleg, Copyright © 2004-2006
product......: AVZ Driver
description..: AVZ Driver
original name: avz.sys
internal name: avz.sys
file version.: 1, 2, 0, 0
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEiD: -
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x1990
timedatestamp....: 0x4788D40F (Sat Jan 12 14:51:59 2008)
machinetype......: 0x14C (Intel I386)

[[ 6 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x9D4, 0xA00, 5.78, b65e29f81689fbde8b3d49891e4011de
.rdata, 0x2000, 0x144, 0x200, 2.93, 4c5e3a3a7d9a4ad57704be677563d7ca
.data, 0x3000, 0x20, 0x200, 0.26, 4f4f5306b935a3d853c02c6c206aa506
INIT, 0x4000, 0x292, 0x400, 3.74, a077364ef66a2ed1ad88d7557f37474a
.rsrc, 0x5000, 0x300, 0x400, 2.56, 85021f99de084aa59772f678fd7aaf3a
.reloc, 0x6000, 0x106, 0x200, 2.65, 173202905f3e2cfaecaf72eb73fd3c1c

[kahdah]

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  

  :OTL
  DRV - [2010-11-05 13:42:30 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\utixndm0.sys -- (utixndm0)
  O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\Autoplay\ComManD - "" = F:\xvxp.exe -- File not found
  O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\AutoRun\command - "" = F:\xvxp.exe -- File not found
  O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\eXpLoRe\COMmaNd - "" = F:\xvxp.exe -- File not found
  O33 - MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\Shell\oPen\comMaNd - "" = F:\xvxp.exe -- File not found
  [2010-10-13 10:33:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Pulpit\wyjazdy
  
  
  :Commands
  [emptytemp]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot when it is done
• It will produce a log for you on reboot, please post that log in your next reply.

================================Malwarebytes' Anti-Malware=================================
Please update\run Malwarebytes' Anti-Malware.

Double Click the Malwarebytes Anti-Malware icon to run the application.

• Click on the update tab then click on Check for updates.
• If an update is found, it will download and install the latest version.
• Once the update has loaded, go to the Scanner tab and select "Perform Full Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatley.
================================Online scan=================================
* Go here to run an online scannner from ESET.

• Note: You will need to use Internet explorer for this scan
• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• When asked, allow the activex control to install
• Click Start
• Check next options: Remove found threats and Scan unwanted applications.
• Click Scan
• Wait for the scan to finish
• Use notepad to open the logfile located at C:\Program Files\ESET\ESET Online Scanner\log.txt
• Copy and paste that log as a reply to this topic

[tapionmajin2]

Hi,

I did all you told me to but eset didn't produce any log but then again it didn't find anything as MBAM. Here are other logs

BTW why did OTL move the C:\Documents and Settings\Artur\Pulpit\wyjazdy catalog??

thanks



All processes killed
========== OTL ==========
Service utixndm0 stopped successfully!
Service utixndm0 deleted successfully!
C:\WINDOWS\system32\drivers\utixndm0.sys moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ab6783a-8d83-11de-a6df-00242ce158fa}\ not found.
File F:\xvxp.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ab6783a-8d83-11de-a6df-00242ce158fa}\ not found.
File F:\xvxp.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ab6783a-8d83-11de-a6df-00242ce158fa}\ not found.
File F:\xvxp.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0ab6783a-8d83-11de-a6df-00242ce158fa}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ab6783a-8d83-11de-a6df-00242ce158fa}\ not found.
File F:\xvxp.exe not found.
C:\Documents and Settings\Artur\Pulpit\wyjazdy\frankfurt hotel_pliki folder moved successfully.
C:\Documents and Settings\Artur\Pulpit\wyjazdy\Ewa OZ zdjecia folder moved successfully.
C:\Documents and Settings\Artur\Pulpit\wyjazdy\dokumenty AU\2010-10-05 folder moved successfully.
C:\Documents and Settings\Artur\Pulpit\wyjazdy\dokumenty AU folder moved successfully.
C:\Documents and Settings\Artur\Pulpit\wyjazdy\BookTripPlan.action_pliki folder moved successfully.
C:\Documents and Settings\Artur\Pulpit\wyjazdy folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Artur
->Temp folder emptied: 676417 bytes
->Temporary Internet Files folder emptied: 79264 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 62829763 bytes
->Google Chrome cache emptied: 213984961 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 7587 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 34464 bytes
RecycleBin emptied: 227114895 bytes

Total Files Cleaned = 481,00 mb


OTL by OldTimer - Version 3.2.17.3 log created on 11112010_110402

Files\Folders moved on Reboot...
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_908.dat not found!

Registry entries deleted on Reboot...


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Wersja bazy: 5094

Windows 5.1.2600 Dodatek Service Pack 3
Internet Explorer 6.0.2900.5512

2010-11-11 13:12:46
mbam-log-2010-11-11 (13-12-46).txt

Typ skanowania: Pełne skanowanie (C:\|D:\|)
Przeskanowano obiektów: 243449
Upłynęło: 1 godzin(y), 49 minut(y), 18 sekund(y)

Zainfekowanych procesów w pamięci: 0
Zainfekowanych modułów w pamięci: 0
Zainfekowanych kluczy rejestru: 0
Zainfekowanych wartości rejestru: 0
Zainfekowane informacje rejestru systemowego: 0
Zainfekowanych folderów: 0
Zainfekowanych plików: 0

Zainfekowanych procesów w pamięci:
(Nie znaleziono zagrożeń)

Zainfekowanych modułów w pamięci:
(Nie znaleziono zagrożeń)

Zainfekowanych kluczy rejestru:
(Nie znaleziono zagrożeń)

Zainfekowanych wartości rejestru:
(Nie znaleziono zagrożeń)

Zainfekowane informacje rejestru systemowego:
(Nie znaleziono zagrożeń)

Zainfekowanych folderów:
(Nie znaleziono zagrożeń)

Zainfekowanych plików:
(Nie znaleziono zagrożeń)

[kahdah]

BTW why did OTL move the C:\Documents and Settings\Artur\Pulpit\wyjazdy catalog??

That was a copy\paste error.
Please do this to place it back in it's original location:
Go to Start > My Computer Double click on C:\ then go to C:\_OTL\Moved files\C\Documents and Settings\Artur\Pulpit\
Right click on this folder wyjazdy and choose cut.
Then browse to this location C:\Documents and Settings\Artur\Pulpit\ and paste the folder there then all done.

My apologies for that.

How are things running after that?

[tapionmajin2]

Now everythings is going better.
Thanks for help!

[kahdah]

=======Cleanup=======

• Double click on OTL to run it.
• Click on the Cleanup button at the top.
• You will be asked to reboot the machine to finish the Cleanup process. Choose Yes.
• This will remove itself and other tools we may have used.

===============Update Java===============

Your Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Please follow these steps to remove older version Java components and update:

• Download the latest version of Java SE Runtime Environment (JRE) and save it to your desktop.
• Scroll down to where it says "(JRE) then click on it
• Click the "Download" button to the right.
• Select your Platform: "Windows".
• Select your Language: "Multi-language".
• Read the License Agreement, and then check the box that says: "Accept License Agreement".
• Click Continue and the page will refresh.
• Click on the link to download Windows Offline Installation and save the file to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.
• Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-6u22-windows-i586.exe to install the newest version.

=================

Delete\uninstall anything else that we have used that is leftover.

After that your all set.

===The following are some articles and a Windows Update link that I like to suggest to people to prevent malware and general PC maintenance===

Windows Updates - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.

Prevention article Some great guidelines to follow to prevent future infections please read the Prevention artice by Miekiemoes.

"How did I get infected in the first place?" Also this one by Tony Klein.

If your computer is slow Is a tutorial on what you can do if your computer is slow.

File sharing program dangers Reasons to stay away from File sharing programs for ex: BitTorrent,Limewire,Kazaa,emule,Utorrent etc...

===Free antimalware tools used for on demand scanning and cleaning no real time unless purchased===

Malwarebytes Antimalware
superantispyware

===Free antivirus links===

This is antivirus and antispyware.
Microsoft Security Essentials
This is free antispyware protection and Antivirus protection.
AVG free
This is just antivirus protection.
Antivir
This is antivirus and antispyware protection.
Avast