Gość utworzono 21 lipca 2014 utworzono 21 lipca 2014 Witam, w imieniu znajomej zamieszczam logi z OTL. Problemem najprawdopodobniej jest odinstaloany już pseudo antywirus YAC. Mimo deinstalacji nadal nie można włączyć zainstalowanego wcześniej avasta i automatycznych aktualizacji. Proszę o pomoc, próbowałem adwcleaner i malwarebytes antimalware ale bezskutecznie. Poniżej logi: [log]OTL logfile created on: 2014-07-21 15:28:35 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\user\Moje dokumenty\Downloads Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,03 Gb Available Physical Memory | 51,71% Memory free 3,85 Gb Paging File | 2,91 Gb Available in Paging File | 75,73% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 21,00 Gb Free Space | 43,01% Space Free | Partition Type: NTFS Drive H: | 100,22 Gb Total Space | 35,04 Gb Free Space | 34,96% Space Free | Partition Type: NTFS Computer Name: MARIOLA | User Name: user | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-07-21 15:28:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Moje dokumenty\Downloads\OTL.exe PRC - [2014-07-06 12:48:24 | 003,890,208 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe PRC - [2013-12-04 04:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe PRC - [2013-05-17 22:41:19 | 000,181,664 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe PRC - [2013-04-23 09:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe PRC - [2012-09-12 09:36:39 | 000,045,056 | ---- | M] () -- C:\WINDOWS\system32\UTSCSI.EXE PRC - [2008-06-26 10:21:38 | 000,217,088 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControl.exe PRC - [2008-06-23 20:16:24 | 002,482,176 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-01-23 15:34:42 | 007,766,016 | ---- | M] () -- C:\Program Files\ATKOSD2\ATKOSD2.exe PRC - [2008-01-23 10:51:28 | 000,151,552 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe PRC - [2008-01-11 22:40:10 | 000,098,304 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe PRC - [2007-11-04 19:48:06 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe PRC - [2007-05-22 16:57:26 | 002,756,608 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe PRC - [2007-04-26 14:53:38 | 000,274,432 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe PRC - [2007-02-27 20:21:08 | 000,278,528 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe PRC - [2007-02-25 21:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe PRC - [2006-07-26 18:01:06 | 000,090,112 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe PRC - [2006-01-23 23:14:10 | 000,069,632 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-04-06 21:22:37 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll MOD - [2014-02-16 14:36:24 | 011,906,048 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\f0b0625c2db624ba9c97ad1b12490d79\System.Web.ni.dll MOD - [2014-02-14 22:45:58 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll MOD - [2014-02-14 22:40:23 | 005,462,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\7faf645dc46781225cb722edf9e1e738\System.Xml.ni.dll MOD - [2014-02-14 22:40:09 | 012,434,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1cdfe1998ad6794db3237006906c6fa2\System.Windows.Forms.ni.dll MOD - [2014-02-14 22:39:33 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\424bff3295c6e7539cc6df62b9425bd0\System.Drawing.ni.dll MOD - [2014-02-14 22:36:16 | 007,977,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\4b0455ae94e3cecca4bb3ba8c96828c9\System.ni.dll MOD - [2014-02-14 22:35:50 | 011,497,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\dae02331a443fb52216ca83292cb2f21\mscorlib.ni.dll MOD - [2013-12-04 04:48:04 | 000,399,312 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppgooglenaclpluginchrome.dll MOD - [2013-12-04 04:48:03 | 013,586,896 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll MOD - [2013-12-04 04:48:02 | 004,055,504 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll MOD - [2013-12-04 04:47:08 | 001,619,408 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll MOD - [2012-09-12 09:36:39 | 000,045,056 | ---- | M] () -- C:\WINDOWS\system32\UTSCSI.EXE MOD - [2011-10-14 15:28:37 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2011-10-13 16:01:21 | 001,679,360 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3034.36909__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll MOD - [2011-10-13 16:01:21 | 000,253,952 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3034.36868__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll MOD - [2011-10-13 16:01:21 | 000,196,608 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3034.36922__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll MOD - [2011-10-13 16:01:21 | 000,077,824 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3034.37102__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll MOD - [2011-10-13 16:01:21 | 000,065,536 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3034.37066__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll MOD - [2011-10-13 16:01:21 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3034.36901__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll MOD - [2011-10-13 16:01:21 | 000,036,864 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3034.37022__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll MOD - [2011-10-13 16:01:21 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3034.36888__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll MOD - [2011-10-13 16:01:20 | 000,483,328 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3034.37132__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll MOD - [2011-10-13 16:01:02 | 000,135,168 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3034.37138__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll MOD - [2011-10-13 16:01:02 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3034.36881__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll MOD - [2011-10-13 16:01:01 | 000,352,256 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3034.37074__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll MOD - [2011-10-13 16:01:01 | 000,139,264 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Dashboard\2.0.3034.37144__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Dashboard.dll MOD - [2011-10-13 16:01:01 | 000,090,112 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3034.37080__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll MOD - [2011-10-13 16:01:01 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3034.37073__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll MOD - [2011-10-13 16:01:01 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Runtime\2.0.3034.37144__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Runtime.dll MOD - [2011-10-13 16:01:00 | 000,802,816 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3034.37030__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll MOD - [2011-10-13 16:01:00 | 000,585,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3034.36935__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll MOD - [2011-10-13 16:01:00 | 000,438,272 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3034.36889__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll MOD - [2011-10-13 16:01:00 | 000,401,408 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3034.37094__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll MOD - [2011-10-13 16:01:00 | 000,217,088 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3034.36928__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll MOD - [2011-10-13 16:01:00 | 000,118,784 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3034.37045__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll MOD - [2011-10-13 16:01:00 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3034.37030__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll MOD - [2011-10-13 16:01:00 | 000,036,864 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3034.37044__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll MOD - [2011-10-13 16:00:59 | 000,479,232 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3034.37023__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll MOD - [2011-10-13 16:00:59 | 000,446,464 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3034.37016__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll MOD - [2011-10-13 16:00:59 | 000,401,408 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3034.37059__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll MOD - [2011-10-13 16:00:59 | 000,307,200 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3034.36941__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll MOD - [2011-10-13 16:00:59 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3034.37022__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll MOD - [2011-10-13 16:00:59 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3034.36941__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll MOD - [2011-10-13 16:00:59 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3034.37030__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll MOD - [2011-10-13 16:00:59 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3034.37058__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll MOD - [2011-10-13 16:00:59 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2939.23687__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll MOD - [2011-10-13 16:00:59 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2939.23679__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll MOD - [2011-10-13 16:00:59 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2939.23767__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll MOD - [2011-10-13 16:00:59 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2939.23710__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll MOD - [2011-10-13 16:00:59 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2939.23768__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll MOD - [2011-10-13 16:00:59 | 000,006,656 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll MOD - [2011-10-13 16:00:58 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.2939.23668__90ba9c70f846762e\CLI.Foundation.dll MOD - [2011-10-13 16:00:58 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2939.23689__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll MOD - [2011-10-13 16:00:58 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2939.23743__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll MOD - [2011-10-13 16:00:58 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll MOD - [2011-10-13 16:00:58 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2939.23764__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll MOD - [2011-10-13 16:00:58 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2939.23662__90ba9c70f846762e\LOG.Foundation.dll MOD - [2011-10-13 16:00:58 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2939.23802__90ba9c70f846762e\CLI.Foundation.XManifest.dll MOD - [2011-10-13 16:00:58 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2939.23667__90ba9c70f846762e\NEWAEM.Foundation.dll MOD - [2011-10-13 16:00:58 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2939.23717__90ba9c70f846762e\DEM.OS.I0602.dll MOD - [2011-10-13 16:00:58 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2939.23693__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll MOD - [2011-10-13 16:00:58 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2939.23687__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll MOD - [2011-10-13 16:00:58 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2939.23679__90ba9c70f846762e\CLI.Component.Client.Shared.dll MOD - [2011-10-13 16:00:58 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2939.23707__90ba9c70f846762e\MOM.Foundation.dll MOD - [2011-10-13 16:00:58 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2939.23717__90ba9c70f846762e\DEM.OS.dll MOD - [2011-10-13 16:00:58 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll MOD - [2011-10-13 16:00:58 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.2939.23718__90ba9c70f846762e\DEM.Graphics.dll MOD - [2011-10-13 16:00:58 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll MOD - [2011-10-13 16:00:58 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2939.23688__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll MOD - [2011-10-13 16:00:58 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2939.23734__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll MOD - [2011-10-13 16:00:58 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2939.23718__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll MOD - [2011-10-13 16:00:57 | 000,065,536 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2965.22300__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2939.23739__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,049,152 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2939.23740__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2939.23738__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2939.23742__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2939.23708__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Shared\2.0.2939.23766__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2939.23735__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2939.23719__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2939.23741__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2939.23711__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2939.23665__90ba9c70f846762e\AEM.Foundation.dll MOD - [2011-10-13 16:00:57 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll MOD - [2011-10-13 16:00:57 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2939.23719__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll MOD - [2011-10-13 16:00:57 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2939.23709__90ba9c70f846762e\APM.Foundation.dll MOD - [2011-10-13 16:00:57 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2939.23687__90ba9c70f846762e\AEM.Server.Shared.dll MOD - [2011-10-13 16:00:55 | 000,005,120 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray.resources\2.0.3034.37115_pl_90ba9c70f846762e\CLI.Component.Systemtray.resources.dll MOD - [2011-10-13 16:00:51 | 000,102,400 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.3034.37123__90ba9c70f846762e\MOM.Implementation.dll MOD - [2011-10-13 16:00:51 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3034.37122__90ba9c70f846762e\LOG.Foundation.Implementation.dll MOD - [2011-10-13 16:00:51 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3034.37150__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll MOD - [2011-10-13 16:00:51 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2939.23679__90ba9c70f846762e\LOG.Foundation.Private.dll MOD - [2011-10-13 16:00:51 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2939.23712__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll MOD - [2011-10-13 16:00:51 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOCALIZATION.Foundation.Private\2.0.2939.23677__90ba9c70f846762e\LOCALIZATION.Foundation.Private.dll MOD - [2011-10-13 16:00:51 | 000,011,264 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOCALIZATION.Foundation.Implementation\2.0.3034.37160__90ba9c70f846762e\LOCALIZATION.Foundation.Implementation.dll MOD - [2011-10-13 16:00:51 | 000,006,656 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3034.36860__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll MOD - [2011-10-13 16:00:50 | 001,511,424 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3034.36876__90ba9c70f846762e\CLI.Component.Dashboard.dll MOD - [2011-10-13 16:00:50 | 000,491,520 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3034.36895__90ba9c70f846762e\CLI.Component.Wizard.dll MOD - [2011-10-13 16:00:50 | 000,413,696 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3034.37115__90ba9c70f846762e\CLI.Component.Systemtray.dll MOD - [2011-10-13 16:00:50 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3034.36861__90ba9c70f846762e\CLI.Component.Runtime.dll MOD - [2011-10-13 16:00:50 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2939.23713__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll MOD - [2011-10-13 16:00:50 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2939.23678__90ba9c70f846762e\CLI.Foundation.Private.dll MOD - [2011-10-13 16:00:50 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2939.23694__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll MOD - [2011-10-13 16:00:50 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2939.23711__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll MOD - [2011-10-13 16:00:49 | 000,065,536 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.3034.36861__90ba9c70f846762e\ATIDEMOS.dll MOD - [2011-10-13 16:00:49 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.3034.36859__90ba9c70f846762e\APM.Server.dll MOD - [2011-10-13 16:00:49 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.3034.36860__90ba9c70f846762e\AEM.Server.dll MOD - [2011-10-13 16:00:49 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2939.23689__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll MOD - [2011-10-13 16:00:49 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.3034.37123__90ba9c70f846762e\CCC.Implementation.dll MOD - [2011-10-13 16:00:49 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll MOD - [2011-10-13 16:00:49 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2939.23746__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll MOD - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2008-01-23 15:34:42 | 007,766,016 | ---- | M] () -- C:\Program Files\ATKOSD2\ATKOSD2.exe MOD - [2008-01-23 10:51:28 | 000,151,552 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe MOD - [2008-01-11 22:40:10 | 000,098,304 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe MOD - [2007-11-12 15:41:50 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTran.dll MOD - [2007-11-04 19:48:06 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe MOD - [2006-08-23 23:32:26 | 000,163,840 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\ASUSNet.dll MOD - [2005-07-22 21:30:18 | 000,065,536 | ---- | M] () -- C:\WINDOWS\system32\TosCommAPI.dll MOD - [2004-05-27 18:13:10 | 000,057,344 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\CMSSC.DLL [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2014-06-25 14:53:44 | 000,037,248 | ---- | M] () [Unknown (-1) | Unknown] -- C:\WINDOWS\System32\drivers\b291dd33cf2b07d.sys -- (b291dd33cf2b07d) SRV - [2014-06-25 14:45:21 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-04-27 20:18:15 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2013-05-17 22:41:19 | 000,181,664 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2013-04-23 09:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8) SRV - [2012-09-12 09:36:39 | 000,045,056 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\UTSCSI.EXE -- (UTSCSI) SRV - [2011-10-14 15:46:10 | 001,045,256 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2007-02-25 21:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2014-06-25 14:53:44 | 000,037,248 | ---- | M] () [Unknown (-1) | Unknown (-1) | Unknown] -- C:\WINDOWS\System32\drivers\b291dd33cf2b07d.sys -- (b291dd33cf2b07d) DRV - [2014-05-15 17:56:54 | 000,777,488 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswsnx.sys -- (aswSnx) DRV - [2014-05-15 17:56:53 | 000,411,680 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswsp.sys -- (aswSP) DRV - [2014-05-15 17:56:53 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswrdr.sys -- (AswRdr) DRV - [2014-04-27 20:18:21 | 000,180,632 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm) DRV - [2014-04-27 20:18:21 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2014-04-27 20:18:21 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi) DRV - [2014-04-27 20:18:21 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt) DRV - [2014-04-27 20:18:21 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aswHwid.sys -- (aswHwid) DRV - [2010-03-25 11:08:30 | 000,105,728 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2010-03-20 12:54:04 | 000,100,992 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbdev.sys -- (hwusbdev) DRV - [2010-03-20 11:28:00 | 000,117,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbnet.sys -- (ewusbnet) DRV - [2009-06-03 22:05:26 | 001,570,240 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416) DRV - [2008-06-20 16:58:08 | 004,741,120 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2008-04-23 00:34:52 | 002,880,000 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008-03-03 20:00:00 | 000,043,392 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SiSGbeXP.sys -- (SiSGbeXP) DRV - [2007-06-11 14:25:28 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (tosrfusb) DRV - [2007-05-24 14:27:30 | 000,064,000 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom) DRV - [2007-04-24 13:20:06 | 000,113,920 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfbd.sys -- (tosrfbd) DRV - [2007-03-01 16:53:10 | 000,073,728 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Tosrfhid.sys -- (Tosrfhid) DRV - [2007-01-22 10:43:26 | 000,053,376 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TosRfSnd.sys -- (TosRfSnd) DRV - [2006-12-17 23:11:58 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor) DRV - [2006-11-20 17:55:16 | 000,036,480 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfbnp.sys -- (tosrfbnp) DRV - [2006-10-10 19:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte) DRV - [2005-01-06 13:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfnds.sys -- (tosrfnds) DRV - [2004-05-27 18:13:04 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\Program Files\ASUS\ATK Hotkey\ASNDIS5.SYS -- (ASNDIS5) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1409082233-492894223-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-1409082233-492894223-1417001333-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-1409082233-492894223-1417001333-1003\..\SearchScopes\{2EC256CF-E9CD-4191-9444-704569B5BB4A}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=BDB54C8B-5096-4420-B2E4-2F20FF8FD1DB&apn_sauid=2CB27AB1-93CF-449C-A0D6-9C74067BDB03 IE - HKU\S-1-5-21-1409082233-492894223-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename,S: S", "" FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.order.1,S: S", "" FF - prefs.js..browser.search.selectedEngine,S: S", "" FF - prefs.js..browser.startup.homepage: "www.google.pl" FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:30.0 FF - prefs.js..keyword.URL: "" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Plus Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-05-17 21:39:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-27 20:18:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 30.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 30.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014-07-21 15:08:29 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012-03-30 09:21:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2014-07-21 15:08:29 | 000,000,000 | ---D | M] [2013-05-17 22:36:48 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Extensions [2014-07-21 15:22:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\fvvp2mpd.default\Extensions [2013-12-30 08:33:37 | 000,000,000 | ---D | M] (AllSAveR) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\fvvp2mpd.default\Extensions\yeiikfr.p@a-rqqjo.com [2014-02-02 09:56:52 | 000,000,000 | ---D | M] (UUTuBeoADBlock) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\fvvp2mpd.default\Extensions\yu-cvotkc@dwqtl-.edu [2014-06-25 14:44:59 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions [2014-06-25 14:45:23 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: CHR - Extension: UUTuBeoADBlock = C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gknllodomgfbjmdfpifdklefekepmofd\2.2_0\ CHR - Extension: AllSAveR = C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\iaakopnlhdhnackfepcbdfhljkcfkgae\1.4\ CHR - Extension: Google Wallet = C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [ATKHOTKEY] C:\Program Files\ASUS\ATK Hotkey\HControl.exe (ASUS) O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ATKOSD2\ATKOSD2.exe () O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe () O4 - HKLM..\Run: [MsgTranAgt] C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe () O4 - HKLM..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Manager.lnk = C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.) O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1409082233-492894223-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.21.2) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.21.2) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.172.224.160 89.231.1.206 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2895C8C4-ED74-4AE5-AFC7-1A8E3EE0BEDD}: DhcpNameServer = 217.172.224.160 89.231.1.206 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-10-14 14:28:00 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2011-10-13 15:25:42 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2014-05-11 09:45:53 | 000,171,372 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O33 - MountPoints2\{0fc8853b-5ef4-11e1-aec2-001e101f5329}\Shell - "" = AutoRun O33 - MountPoints2\{0fc8853b-5ef4-11e1-aec2-001e101f5329}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{0fc8853e-5ef4-11e1-aec2-001e101f5329}\Shell - "" = AutoRun O33 - MountPoints2\{0fc8853e-5ef4-11e1-aec2-001e101f5329}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{10c80d22-016b-11e1-9973-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{10c80d22-016b-11e1-9973-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{11949cf0-0bd4-11e1-9992-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{11949cf0-0bd4-11e1-9992-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{36030c31-95ee-11e1-84da-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{36030c31-95ee-11e1-84da-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{6c46bf05-acef-11e1-80f9-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{6c46bf05-acef-11e1-80f9-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{6c46bf06-acef-11e1-80f9-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{6c46bf06-acef-11e1-80f9-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{6c46bf09-acef-11e1-80f9-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{6c46bf09-acef-11e1-80f9-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8b3db5d3-016b-11e1-9974-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{8b3db5d3-016b-11e1-9974-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8b3db5d9-016b-11e1-9974-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{8b3db5d9-016b-11e1-9974-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{9b6a5435-9085-11e1-b263-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{9b6a5435-9085-11e1-b263-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{9b6a5437-9085-11e1-b263-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{9b6a5437-9085-11e1-b263-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{ce40898c-019c-11e1-9975-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{ce40898c-019c-11e1-9975-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{d8ac9e39-ad54-11e1-98a3-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{d8ac9e39-ad54-11e1-98a3-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{d8ac9e3a-ad54-11e1-98a3-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{d8ac9e3a-ad54-11e1-98a3-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{ee9daadf-7f23-11e1-8cf8-002215b30c1d}\Shell - "" = AutoRun O33 - MountPoints2\{ee9daadf-7f23-11e1-8cf8-002215b30c1d}\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-07-21 15:21:45 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\WINDOWS\System32\sqlite3.dll [2014-07-21 15:20:47 | 000,000,000 | ---D | C] -- C:\AdwCleaner [2014-07-21 15:10:19 | 000,110,296 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [2014-07-21 15:10:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes Anti-Malware [2014-07-21 15:10:06 | 000,053,208 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamchameleon.sys [2014-07-21 15:10:06 | 000,023,256 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2014-07-21 15:10:06 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware [2014-07-21 15:10:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2014-07-21 15:09:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Moje dokumenty\Downloads [2014-07-19 21:36:48 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\user\Recent [2014-07-19 21:36:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Dane aplikacji\Toshiba [2014-07-17 15:04:38 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll [2014-07-17 15:04:36 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll [2014-06-26 10:05:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Moje dokumenty\Pobrane [2014-06-25 14:44:59 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2014-06-25 10:50:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\Moje dokumenty\Dropbox [2014-06-24 19:56:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Identities [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\Documents and Settings\user\Pulpit\*.tmp files -> C:\Documents and Settings\user\Pulpit\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-07-21 15:24:22 | 000,000,364 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job [2014-07-21 15:23:24 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2014-07-21 15:23:24 | 000,000,220 | ---- | M] () -- C:\WINDOWS\tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job [2014-07-21 15:23:23 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2014-07-21 15:23:17 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2014-07-21 15:11:09 | 000,110,296 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [2014-07-18 15:36:00 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2014-07-18 11:50:29 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2014-07-17 10:50:21 | 000,000,320 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Skrót do 2750316551_2750316551_0.ttx.lnk [2014-07-10 14:39:56 | 000,016,896 | ---- | M] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2014-07-08 15:10:23 | 000,000,214 | ---- | M] () -- C:\WINDOWS\tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job [2014-06-27 17:04:45 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2014-06-25 14:53:44 | 000,037,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\b291dd33cf2b07d.sys [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\Documents and Settings\user\Pulpit\*.tmp files -> C:\Documents and Settings\user\Pulpit\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-07-17 10:50:21 | 000,000,320 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Skrót do 2750316551_2750316551_0.ttx.lnk [2014-07-17 10:31:11 | 000,026,368 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBSTOR.SYS [2014-06-25 14:53:44 | 000,037,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\b291dd33cf2b07d.sys [2014-04-27 20:18:25 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys [2014-02-14 22:50:22 | 000,796,496 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2014-02-02 09:46:37 | 000,002,454 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol [2013-06-21 20:47:12 | 000,180,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys [2013-06-21 20:47:12 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys [2013-05-17 21:37:11 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2013-05-17 21:36:24 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2013-02-14 13:03:55 | 000,031,872 | ---- | C] () -- C:\WINDOWS\System32\drivers\wceusbsh.sys [2013-01-05 13:52:06 | 000,019,463 | ---- | C] () -- C:\Documents and Settings\user\Menu Start.rar [2012-10-12 03:50:40 | 000,049,738 | ---- | C] () -- C:\Program Files\AutoMapa EU.md5 [2012-09-12 09:36:39 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\UTSCSI.EXE [2012-04-23 20:46:45 | 000,041,131 | ---- | C] () -- C:\Documents and Settings\user\.recently-used.xbel [2012-01-12 09:50:03 | 000,008,347 | ---- | C] () -- C:\Documents and Settings\user\.TransferManager.db [2012-01-11 18:07:12 | 000,017,408 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\WebpageIcons.db [2011-10-14 13:15:00 | 000,001,024 | ---- | C] () -- C:\Documents and Settings\user\.rnd [2011-10-14 12:55:40 | 000,016,896 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-10-13 15:30:09 | 003,407,872 | -H-- | C] () -- C:\Documents and Settings\user\NTUSER.bak [color=#E56717]========== ZeroAccess Check ==========[/color] [2011-10-13 15:58:02 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2011-09-05 15:56:10 | 001,510,400 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2014-07-19 20:50:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\187ad41faeacb4d4 [2014-07-19 21:36:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AllSAveR [2011-10-24 18:26:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Autodesk [2014-04-06 21:14:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software [2014-02-02 09:46:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\gknllodomgfbjmdfpifdklefekepmofd [2013-12-30 08:26:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\hcdcoonebbgifaciopajkmofeiafdcop [2014-02-26 10:06:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallMate [2013-05-17 17:24:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2014-07-21 15:19:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\UUTuBeoADBlock [2011-11-06 17:05:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Softland [2011-10-14 12:41:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\.wtw [2011-10-24 18:27:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Autodesk [2014-04-06 21:30:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\AVAST Software [2014-07-19 21:33:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Azureus [2013-05-17 21:36:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\CDXReader [2014-07-13 22:50:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\foobar2000 [2012-04-23 19:36:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\gtk-2.0 [2013-05-17 21:36:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\LavFilters [2012-11-05 23:17:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\OTi [2012-11-05 23:17:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\PLAux [2014-03-17 21:05:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Podatnik.info [2011-11-06 17:05:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Softland [2011-10-13 16:10:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Thunderbird [2014-07-19 21:36:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Toshiba [2012-03-06 12:04:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Wise Registry Cleaner [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:373E1720 < End of report > [/log] [log] OTL Extras logfile created on: 2014-07-21 15:28:35 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\user\Moje dokumenty\Downloads Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,03 Gb Available Physical Memory | 51,71% Memory free 3,85 Gb Paging File | 2,91 Gb Available in Paging File | 75,73% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 21,00 Gb Free Space | 43,01% Space Free | Partition Type: NTFS Drive H: | 100,22 Gb Total Space | 35,04 Gb Free Space | 34,96% Space Free | Partition Type: NTFS Computer Name: MARIOLA | User Name: user | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) [HKEY_USERS\S-1-5-21-1409082233-492894223-1417001333-1003\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation) "C:\Program Files\K2T\WTW\wtw.exe" = C:\Program Files\K2T\WTW\wtw.exe:*:Enabled:WTW Instant Messenger -- (K2T.eu, Kaworu) "C:\WINDOWS\system32\msiexec.exe" = C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup -- (Microsoft Corporation) "D:\EasySetupAssistant\wr741n\EasySetupAssistant.exe" = D:\EasySetupAssistant\wr741n\EasySetupAssistant.exe:*:Enabled:TP-LINK Easy Setup Assistant "C:\Program Files\TeamViewer\Version8\TeamViewer.exe" = C:\Program Files\TeamViewer\Version8\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH) "C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe" = C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center "{1CA7ACD6-B21B-4240-AA05-4FC55F6E1045}" = Nero 8 "{1DF5019A-68B5-4ba1-8E59-E185C7B7FF11}" = Komunikator WTW 0.8.20.3003 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{2580117B-C14B-F48D-A327-6D90AEF2F61D}" = Catalyst Control Center Localization Turkish "{26A24AE4-039D-4CA4-87B4-2F83216029FF}" = Java(TM) 6 Update 29 "{26A24AE4-039D-4CA4-87B4-2F83217021FF}" = Java 7 Update 21 "{281B2F20-B2E6-E3F0-ACD7-235209A9B313}" = Catalyst Control Center Localization Danish "{2AFF2951-86B1-3C53-B34D-B440F11E7D0A}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PLK "{2C9E18E4-68A2-D53E-00E0-4AEFAC8E9ACF}" = Skins "{2D9465E8-863A-8661-58CD-D2748D132B25}" = CCC Help Greek "{2E14AE17-EF98-D6EB-3B1C-4A9C735DD79E}" = Catalyst Control Center Localization Chinese Standard "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{3B768993-0866-E671-D4DE-138DE07BA174}" = CCC Help Japanese "{3E2CC5AA-6318-4364-4E44-453F480729EE}" = CCC Help Portuguese "{3FDBE6F9-FC0A-8E5B-305F-3BA1980888E7}" = CCC Help Danish "{412FE81D-BE52-508F-BA83-4EE163D194DB}" = Catalyst Control Center Localization Finnish "{4369109E-E519-3CE3-C2FC-4B24E69FE53C}" = CCC Help Turkish "{4462AD13-F2AA-4CBD-9F95-293C38EED870}" = Power4 Gear "{46E1B1F2-A279-4356-9B17-029F9CC72EAE}" = Brother MFL-Pro Suite "{488FE5C5-D9DF-D25D-6DC9-610732EB9A0E}" = CCC Help Hungarian "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A3DEAEA-D4F6-EA38-452D-09ED51FFD894}" = CCC Help Czech "{4A8926B8-F56D-EAD4-8839-FC5C3052EE00}" = Catalyst Control Center Localization Thai "{4A965C96-AC5F-6DD4-8189-BD6EDD479041}" = ccc-core-preinstall "{539139C6-9165-2608-1C67-0F6E2C2D12D0}" = CCC Help Chinese Traditional "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{56D4499E-AC3E-4B8D-91C9-C700C148C44B}" = Google Drive "{5783F2D7-9001-0415-0002-0060B0CE6BBA}" = AutoCAD 2011 - Polski "{5783F2D7-9001-0415-1002-0060B0CE6BBA}" = AutoCAD 2011 Language Pack - Polski "{5A0DDC27-88E5-3CAD-BC3D-28FFD05CA6B9}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PLK "{5A9240FC-D86C-8D7B-4BE3-4BE0C223863B}" = Catalyst Control Center Localization Italian "{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2 "{5FFE06F8-158F-1434-5F59-DA7F3BB8B427}" = CCC Help Polish "{60CB7D6D-D55F-174E-6FBD-841A0FB75DF7}" = ccc-utility "{612DF751-0F94-B0B2-113B-E711F31871AC}" = CCC Help Spanish "{65875C76-C064-7875-0828-CC4978B4941D}" = Catalyst Control Center Graphics Light "{66706938-B1B8-48AB-1A0D-E1341AD79313}" = CCC Help English "{6A69D94E-C569-4154-9643-72E94D1DDFDA}" = XPS Essentials Pack "{6BBCAE88-F7AD-4085-B362-BFE8C85168ED}" = PIT pro 2012 "{6C383E5A-A8D6-2F06-DAAD-474176487162}" = CCC Help Thai "{6FE97F8E-C4B0-39C1-BFD6-8445C931F69C}" = Catalyst Control Center Localization Japanese "{73CFD1B1-6E78-6804-2347-FC3A8641F2C3}" = CCC Help Korean "{768AEFF6-0ADB-EC94-0F0B-DAA54B52B365}" = Catalyst Control Center Localization Chinese Traditional "{790263AF-A697-0F38-06EB-5939B0CE17F9}" = Catalyst Control Center Graphics Full New "{7A271D30-6D65-ED23-872F-3F7A3E6BF2A3}" = Catalyst Control Center Localization Polish "{7C05592D-424B-46CB-B505-E0013E8E75C9}" = ATK Hotkey "{82A64F42-6C9E-9740-6962-968A0D01205F}" = CCC Help Italian "{831F4245-19C0-84C2-9D9C-7EE90295D200}" = Catalyst Control Center Localization German "{8441FF59-54B7-03A3-5740-B7A5E90C0018}" = CCC Help German "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8DF31BC6-7BEF-22C5-64AA-1D18049BAAD2}" = Catalyst Control Center Graphics Previews Common "{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12 "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In "{920AB7AD-AC2F-3D20-14E9-BA90E7906B37}" = CCC Help Russian "{92E15E9B-1B5F-A0B3-3267-B27D7F38E90C}" = Catalyst Control Center Localization Greek "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58 "{990EF1F3-0C93-AB86-DDC1-7CD7BECD3D94}" = CCC Help Norwegian "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A7912A0-A08F-073D-3A58-BCC6166F0B7D}" = Catalyst Control Center Localization Portuguese "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}" = Autodesk Material Library 2011 "{9ED10FE8-6A6D-012F-8ED7-2D88CE8AF6E3}" = Catalyst Control Center Graphics Full Existing "{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk "{A2D19B52-046B-F483-7354-C2F66EC8F89A}" = CCC Help Finnish "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A3CAB163-3EE3-0DDD-28FC-8FDC387111FF}" = Catalyst Control Center Localization Swedish "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.10) "{AEE5AB86-8C98-8BB8-7405-8A386EF6ABC6}" = Catalyst Control Center Core Implementation "{B239B43B-3E99-40B0-80BF-1B1BCA868D4E}_is1" = Podatnik.info PIT pro 2013 wersja 2.0.15.26451 "{B26FB649-D13B-5D5D-BA13-8620C13CA698}" = Catalyst Control Center Localization Norwegian "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C2C16C6B-AAFE-0371-08AD-8D17D4B375FD}" = Catalyst Control Center Localization Dutch "{CD1E078C-A6B9-47DA-B035-6365C85C7832}" = Autodesk Material Library 2011 Base Image library "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba "{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader "{DC9766F2-A95D-FCD0-16A3-F7DFD6185210}" = Catalyst Control Center Localization Spanish "{DD952146-DDA5-6640-8DCF-FAB255EB6120}" = Catalyst Control Center Localization Hungarian "{E6640A29-18EB-87B8-7EC5-A48FE518EC5C}" = Catalyst Control Center Localization Czech "{E82B17D6-4A94-0124-E96D-3068DC60B4E7}" = ccc-core-static "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F7B2328E-523D-D652-0449-F1EAE1B0A937}" = CCC Help Dutch "{F8DE24C2-64E5-57A9-ECB5-077D36EEBB60}" = CCC Help Chinese Standard "{F98025F9-CA5F-03E7-2C38-4D88D7FE7F1B}" = Catalyst Control Center Localization Korean "{FCEC5C39-8E8F-376C-B426-78FC723DBC03}" = Catalyst Control Center Localization French "{FDC868E5-9338-042E-15C6-46732984E247}" = CCC Help Swedish "{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR "{FF1E9419-269F-96F5-4D07-92B111A7EA69}" = CCC Help French "{FF255BD9-A26D-B524-8728-F5CD18DE55E2}" = Catalyst Control Center Localization Russian "8461-7759-5462-8226" = Vuze "Adobe AIR" = Adobe AIR "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI "ALLPlayer_is1" = ALLPlayer V4.X "ATI Display Driver" = ATI Display Driver "AutoCAD 2011 - Polski" = AutoCAD 2011 - Polski "AutoCAD 2011 - Polski Version 2.1" = AutoCAD 2011 - Polski Version 2.1 "avast" = avast! Free Antivirus "CCleaner" = CCleaner "Defraggler" = Defraggler "DivX Setup" = DivX Setup "doPDF 7 printer_is1" = doPDF 7.2 printer "ENTERPRISE" = Microsoft Office Enterprise 2007 "ffdshow_is1" = ffdshow v1.1.4399 [2012-03-22] "foobar2000" = foobar2000 v1.1.7 "Google Chrome" = Google Chrome "HaaliMkx" = Haali Media Splitter "ie8" = Windows Internet Explorer 8 "KLiteCodecPack_is1" = K-Lite Codec Pack 8.6.0 (Full) "Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 2.0.2.1012 "Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox 30.0 (x86 pl)" = Mozilla Firefox 30.0 (x86 pl) "Mozilla Thunderbird 12.0.1 (x86 pl)" = Mozilla Thunderbird 12.0.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "OpenSource Flash Video Splitter" = OpenSource Flash Video Splitter 1.0.0.5 "TeamViewer 8" = TeamViewer 8 "VLC media player" = VLC media player 2.0.6 "Windows Media Format Runtime" = Windows Media Format Runtime "WinRAR archiver" = WinRAR 4.01 (32-bitowy) "Wise Registry Cleaner_is1" = Wise Registry Cleaner 6.21 "XpsEP" = XPS Essentials Pack 1.0 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 "Xvid Video Codec 1.3.2" = Xvid Video Codec [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2013-08-10 14:39:32 | Computer Name = MARIOLA | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca firefox.exe, wersja 22.0.0.4917, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. [ System Events ] Error - 2014-07-21 09:24:20 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7001 Description = Usługa avast! Antivirus zależy od usługi aswMonFlt, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2014-07-21 09:24:20 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7009 Description = Limit czasu (30000 milisekund) podczas oczekiwania na połączenie się z usługą Performancer. Error - 2014-07-21 09:25:04 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi aswMonFlt z powodu następującego błędu: %%31 Error - 2014-07-21 09:25:04 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7001 Description = Usługa avast! Antivirus zależy od usługi aswMonFlt, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2014-07-21 09:25:05 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi aswMonFlt z powodu następującego błędu: %%31 Error - 2014-07-21 09:25:05 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7001 Description = Usługa avast! Antivirus zależy od usługi aswMonFlt, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2014-07-21 09:25:06 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi aswMonFlt z powodu następującego błędu: %%31 Error - 2014-07-21 09:25:06 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7001 Description = Usługa avast! Antivirus zależy od usługi aswMonFlt, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2014-07-21 09:25:06 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi aswMonFlt z powodu następującego błędu: %%31 Error - 2014-07-21 09:25:06 | Computer Name = MARIOLA | Source = Service Control Manager | ID = 7001 Description = Usługa avast! Antivirus zależy od usługi aswMonFlt, której nie można uruchomić z powodu następującego błędu: %%31 < End of report > [/log]
Zayfi komentarz 21 lipca 2014 komentarz 21 lipca 2014 Uruchom OTL i w oknie własne opcje skanowania/skrypt wklej :Services b291dd33cf2b07d :Commands [emptytemp] Kliknij w Wykonaj skrypt po restarcie pojawi się log z usuwania > przedstaw go.
Gość komentarz 21 lipca 2014 komentarz 21 lipca 2014 Cytuj [log] All processes killed ========== SERVICES/DRIVERS ========== Error: No service named b291dd33cf2b07d was found to stop! Service\Driver key b291dd33cf2b07d not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 1434146 bytes ->Temporary Internet Files folder emptied: 206099 bytes ->Google Chrome cache emptied: 557424 bytes ->Flash cache emptied: 56475 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 56475 bytes User: LocalService ->Temp folder emptied: 82513 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: user ->Temp folder emptied: 75437172 bytes ->Temporary Internet Files folder emptied: 2027735 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 18599319 bytes ->Google Chrome cache emptied: 19793165 bytes ->Flash cache emptied: 506 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2352022 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 2810878 bytes RecycleBin emptied: 4028 bytes Total Files Cleaned = 118,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 07212014_155513 Files\Folders moved on Reboot... C:\Documents and Settings\user\Ustawienia lokalne\Temp\AutoCAD 2011 Language Pack - Polski.log moved successfully. C:\Documents and Settings\user\Ustawienia lokalne\Temp\Perflib_Perfdata_a88.dat moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot... [/log] oto on
Zayfi komentarz 21 lipca 2014 komentarz 21 lipca 2014 Hm, dziwne OTL twierdzi że tej usługi nie ma Error: No service named b291dd33cf2b07d was found to stop! Service\Driver key b291dd33cf2b07d not found. a w logu z OTL jest SRV - [2014-06-25 14:53:44 | 000,037,248 | ---- | M] () [Unknown (-1) | Unknown] -- C:\WINDOWS\System32\drivers\b291dd33cf2b07d.sys -- (b291dd33cf2b07d) Zrób mi skan z FRST i wstaw raporty http://www.forumpc.pl/topic/277786-nieingerencyjne-narz%C4%99dzia-do-tworzenia-log%C3%B3w-systemowych/
Gość komentarz 21 lipca 2014 komentarz 21 lipca 2014 [log] Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:20-07-2014 Ran by user (administrator) on MARIOLA on 21-07-2014 16:26:44 Running from C:\Documents and Settings\user\Moje dokumenty\Downloads Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe () C:\WINDOWS\system32\UTSCSI.EXE () C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe () C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe (ASUS) C:\Program Files\ASUS\ATK Hotkey\HControl.exe () C:\Program Files\ATKOSD2\ATKOSD2.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe (ASUSTeK Computer Inc.) C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe (ASUS) C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe () C:\Program Files\ASUS\ATK Hotkey\WDC.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.) HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {0fc8853b-5ef4-11e1-aec2-001e101f5329} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {0fc8853e-5ef4-11e1-aec2-001e101f5329} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {10c80d22-016b-11e1-9973-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {11949cf0-0bd4-11e1-9992-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {36030c31-95ee-11e1-84da-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {6c46bf05-acef-11e1-80f9-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {6c46bf06-acef-11e1-80f9-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {6c46bf09-acef-11e1-80f9-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {8b3db5d3-016b-11e1-9974-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {8b3db5d9-016b-11e1-9974-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {9b6a5435-9085-11e1-b263-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {9b6a5437-9085-11e1-b263-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {ce40898c-019c-11e1-9975-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {d8ac9e39-ad54-11e1-98a3-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {d8ac9e3a-ad54-11e1-98a3-002215b30c1d} - F:\AutoRun.exe HKU\S-1-5-21-1409082233-492894223-1417001333-1003\...\MountPoints2: {ee9daadf-7f23-11e1-8cf8-002215b30c1d} - F:\AutoRun.exe Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Manager.lnk ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com URLSearchHook: ATTENTION ==> Default URLSearchHook is missing. SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {2EC256CF-E9CD-4191-9444-704569B5BB4A} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=BDB54C8B-5096-4420-B2E4-2F20FF8FD1DB&apn_sauid=2CB27AB1-93CF-449C-A0D6-9C74067BDB03 BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab Tcpip\Parameters: [DhcpNameServer] 217.172.224.160 89.231.1.206 FireFox: ======== FF ProfilePath: C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\fvvp2mpd.default FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", ""); FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", ""); FF Homepage: www.google.pl FF Keyword.URL: user_pref("keyword.URL", ""); FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll () FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll No File FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Extension: AllSAveR - C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\fvvp2mpd.default\Extensions\yeiikfr.p@a-rqqjo.com [2013-12-30] FF Extension: UUTuBeoADBlock - C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\fvvp2mpd.default\Extensions\yu-cvotkc@dwqtl-.edu [2014-02-02] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-10-14] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-06-21] Chrome: ======= CHR HomePage: hxxp://www.google.pl/ CHR Extension: (UUTuBeoADBlock) - C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gknllodomgfbjmdfpifdklefekepmofd [2014-07-21] CHR Extension: (Google Wallet) - C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-21] CHR Extension: (BiitSaver) - C:\Documents and Settings\All Users\Dane aplikacji\hcdcoonebbgifaciopajkmofeiafdcop\ [2014-07-21] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= Locked "b291dd33cf2b07d" service could not be unlocked. <===== ATTENTION S4 Alerter; C:\WINDOWS\system32\alrsvc.dll [17408 2008-04-15] (Microsoft Corporation) [File not signed] R3 ALG; C:\WINDOWS\System32\alg.exe [44544 2008-04-15] (Microsoft Corporation) [File not signed] R3 AppMgmt; C:\WINDOWS\System32\appmgmts.dll [172032 2008-04-15] (Microsoft Corporation) [File not signed] R2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [536576 2008-04-22] (ATI Technologies Inc.) [File not signed] R2 AudioSrv; C:\WINDOWS\System32\audiosrv.dll [42496 2008-04-15] (Microsoft Corporation) [File not signed] S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-27] (AVAST Software) U2 BITS; C:\WINDOWS\system32\qmgr.dll [409088 2008-04-15] (Microsoft Corporation) [File not signed] R2 Browser; C:\WINDOWS\System32\browser.dll [78336 2012-07-06] (Microsoft Corporation) [File not signed] S3 CiSvc; C:\WINDOWS\system32\cisvc.exe [5632 2008-04-15] (Microsoft Corporation) [File not signed] S4 ClipSrv; C:\WINDOWS\system32\clipsrv.exe [33280 2008-04-15] (Microsoft Corporation) [File not signed] S3 COMSysApp; C:\WINDOWS\system32\dllhost.exe [5120 2008-04-15] (Microsoft Corporation) [File not signed] R2 CryptSvc; C:\WINDOWS\System32\cryptsvc.dll [62464 2008-04-15] (Microsoft Corporation) [File not signed] R2 DcomLaunch; C:\WINDOWS\system32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed] R2 Dhcp; C:\WINDOWS\System32\dhcpcsvc.dll [126464 2008-04-15] (Microsoft Corporation) [File not signed] S3 dmadmin; C:\WINDOWS\System32\dmadmin.exe [225280 2008-04-15] (Microsoft Corp., Veritas Software) [File not signed] R2 dmserver; C:\WINDOWS\System32\dmserver.dll [24064 2008-04-15] (Microsoft Corp.) [File not signed] R2 Dnscache; C:\WINDOWS\System32\dnsrslvr.dll [45568 2009-04-20] (Microsoft Corporation) [File not signed] S3 Dot3svc; C:\WINDOWS\System32\dot3svc.dll [133632 2008-04-15] (Microsoft Corporation) [File not signed] S3 EapHost; C:\WINDOWS\System32\eapsvc.dll [33792 2008-04-15] (Microsoft Corporation) [File not signed] R2 ERSvc; C:\WINDOWS\System32\ersvc.dll [23040 2008-04-15] (Microsoft Corporation) [File not signed] R2 Eventlog; C:\WINDOWS\system32\services.exe [111104 2009-02-09] (Microsoft Corporation) [File not signed] R3 EventSystem; C:\WINDOWS\system32\es.dll [253952 2008-07-07] (Microsoft Corporation) [File not signed] R3 FastUserSwitchingCompatibility; C:\WINDOWS\System32\shsvcs.dll [135680 2009-07-28] (Microsoft Corporation) [File not signed] R2 helpsvc; C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400 2008-04-15] (Microsoft Corporation) [File not signed] R2 HidServ; C:\WINDOWS\System32\hidserv.dll [21504 2008-04-14] (Microsoft Corporation) [File not signed] S3 hkmsvc; C:\WINDOWS\System32\kmsvc.dll [61440 2008-04-15] (Microsoft Corporation) [File not signed] R3 HTTPFilter; C:\WINDOWS\System32\w3ssl.dll [15872 2008-04-15] (Microsoft Corporation) [File not signed] S3 ImapiService; C:\WINDOWS\system32\imapi.exe [150528 2008-04-15] (Microsoft Corporation) [File not signed] R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [181664 2013-05-17] (Oracle Corporation) R2 LanmanServer; C:\WINDOWS\System32\srvsvc.dll [99840 2010-08-27] (Microsoft Corporation) [File not signed] R2 lanmanworkstation; C:\WINDOWS\System32\wkssvc.dll [132096 2009-06-10] (Microsoft Corporation) [File not signed] R2 LmHosts; C:\WINDOWS\System32\lmhsvc.dll [13824 2008-04-15] (Microsoft Corporation) [File not signed] S4 Messenger; C:\WINDOWS\System32\msgsvc.dll [33792 2008-04-15] (Microsoft Corporation) [File not signed] S3 mnmsrvc; C:\WINDOWS\system32\mnmsrvc.exe [32768 2008-04-15] (Microsoft Corporation) [File not signed] S3 MSDTC; C:\WINDOWS\system32\msdtc.exe [6144 2008-04-15] (Microsoft Corporation) [File not signed] R3 MSIServer; C:\WINDOWS\System32\msiexec.exe [95744 2008-05-19] (Microsoft Corporation) [File not signed] S3 napagent; C:\WINDOWS\System32\qagentrt.dll [293376 2008-04-15] (Microsoft Corporation) [File not signed] S4 NetDDE; C:\WINDOWS\system32\netdde.exe [114688 2008-04-15] (Microsoft Corporation) [File not signed] S4 NetDDEdsdm; C:\WINDOWS\system32\netdde.exe [114688 2008-04-15] (Microsoft Corporation) [File not signed] S3 Netlogon; C:\WINDOWS\system32\lsass.exe [13312 2008-04-15] (Microsoft Corporation) [File not signed] R3 Netman; C:\WINDOWS\System32\netman.dll [198144 2008-04-15] (Microsoft Corporation) [File not signed] R3 Nla; C:\WINDOWS\System32\mswsock.dll [246784 2008-06-20] (Microsoft Corporation) [File not signed] S3 NtLmSsp; C:\WINDOWS\system32\lsass.exe [13312 2008-04-15] (Microsoft Corporation) [File not signed] S3 NtmsSvc; C:\WINDOWS\system32\ntmssvc.dll [435712 2008-04-15] (Microsoft Corporation) [File not signed] R2 PlugPlay; C:\WINDOWS\system32\services.exe [111104 2009-02-09] (Microsoft Corporation) [File not signed] R2 PolicyAgent; C:\WINDOWS\system32\lsass.exe [13312 2008-04-15] (Microsoft Corporation) [File not signed] R2 ProtectedStorage; C:\WINDOWS\system32\lsass.exe [13312 2008-04-15] (Microsoft Corporation) [File not signed] S3 RasAuto; C:\WINDOWS\System32\rasauto.dll [88576 2008-04-15] (Microsoft Corporation) [File not signed] R3 RasMan; C:\WINDOWS\System32\rasmans.dll [186368 2008-04-15] (Microsoft Corporation) [File not signed] S3 RDSessMgr; C:\WINDOWS\system32\sessmgr.exe [142336 2008-04-15] (Microsoft Corporation) [File not signed] S4 RemoteAccess; C:\WINDOWS\System32\mprdim.dll [53248 2008-04-15] (Microsoft Corporation) [File not signed] R2 RemoteRegistry; C:\WINDOWS\system32\regsvc.dll [59904 2008-04-15] (Microsoft Corporation) [File not signed] S3 RpcLocator; C:\WINDOWS\system32\locator.exe [75264 2008-04-15] (Microsoft Corporation) [File not signed] R2 RpcSs; C:\WINDOWS\system32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed] S3 RSVP; C:\WINDOWS\system32\rsvp.exe [132608 2008-04-15] (Microsoft Corporation) [File not signed] R2 SamSs; C:\WINDOWS\system32\lsass.exe [13312 2008-04-15] (Microsoft Corporation) [File not signed] S3 SCardSvr; C:\WINDOWS\System32\SCardSvr.exe [98304 2008-04-15] (Microsoft Corporation) [File not signed] R2 Schedule; C:\WINDOWS\system32\schedsvc.dll [193536 2008-04-15] (Microsoft Corporation) [File not signed] R2 seclogon; C:\WINDOWS\System32\seclogon.dll [18944 2008-04-15] (Microsoft Corporation) [File not signed] R2 SENS; C:\WINDOWS\system32\sens.dll [39424 2008-04-15] (Microsoft Corporation) [File not signed] R2 SharedAccess; C:\WINDOWS\System32\ipnathlp.dll [330752 2008-04-15] (Microsoft Corporation) [File not signed] R2 ShellHWDetection; C:\WINDOWS\System32\shsvcs.dll [135680 2009-07-28] (Microsoft Corporation) [File not signed] R2 Spooler; C:\WINDOWS\system32\spoolsv.exe [58880 2010-08-17] (Microsoft Corporation) [File not signed] R2 srservice; C:\WINDOWS\system32\srsvc.dll [171520 2008-04-15] (Microsoft Corporation) [File not signed] R3 SSDPSRV; C:\WINDOWS\System32\ssdpsrv.dll [71680 2008-04-15] (Microsoft Corporation) [File not signed] R2 stisvc; C:\WINDOWS\system32\wiaservc.dll [334336 2008-04-15] (Microsoft Corporation) [File not signed] S3 SwPrv; C:\WINDOWS\system32\dllhost.exe [5120 2008-04-15] (Microsoft Corporation) [File not signed] S3 SysmonLog; C:\WINDOWS\system32\smlogsvc.exe [91136 2008-04-15] (Microsoft Corporation) [File not signed] R3 TapiSrv; C:\WINDOWS\System32\tapisrv.dll [249856 2008-04-15] (Microsoft Corporation) [File not signed] R3 TermService; C:\WINDOWS\System32\termsrv.dll [296448 2008-04-15] (Microsoft Corporation) [File not signed] R2 Themes; C:\WINDOWS\System32\shsvcs.dll [135680 2009-07-28] (Microsoft Corporation) [File not signed] S4 TlntSvr; C:\WINDOWS\system32\tlntsvr.exe [75264 2008-04-15] (Microsoft Corporation) [File not signed] R2 TrkWks; C:\WINDOWS\system32\trkwks.dll [90112 2008-04-15] (Microsoft Corporation) [File not signed] R2 UMWdf; C:\WINDOWS\system32\wdfmgr.exe [38912 2004-08-11] (Microsoft Corporation) [File not signed] S3 upnphost; C:\WINDOWS\System32\upnphost.dll [186880 2008-04-15] (Microsoft Corporation) [File not signed] S3 UPS; C:\WINDOWS\System32\ups.exe [18432 2008-04-15] (Microsoft Corporation) [File not signed] R2 UTSCSI; C:\WINDOWS\system32\UTSCSI.EXE [45056 2012-09-12] () [File not signed] S3 VSS; C:\WINDOWS\System32\vssvc.exe [291840 2008-04-15] (Microsoft Corporation) [File not signed] R2 W32Time; C:\WINDOWS\system32\w32time.dll [176128 2008-04-15] (Microsoft Corporation) [File not signed] R2 WebClient; C:\WINDOWS\System32\webclnt.dll [68096 2008-04-15] (Microsoft Corporation) [File not signed] R2 winmgmt; C:\WINDOWS\system32\wbem\WMIsvc.dll [145408 2008-04-15] (Microsoft Corporation) [File not signed] S3 WmdmPmSN; C:\WINDOWS\system32\MsPMSNSv.dll [25088 2004-08-11] (Microsoft Corporation) [File not signed] S3 Wmi; C:\WINDOWS\System32\advapi32.dll [686592 2009-02-09] (Microsoft Corporation) [File not signed] R3 WmiApSrv; C:\WINDOWS\system32\wbem\wmiapsrv.exe [126464 2008-04-15] (Microsoft Corporation) [File not signed] R2 wscsvc; C:\WINDOWS\system32\wscsvc.dll [80896 2008-04-15] (Microsoft Corporation) [File not signed] U2 wuauserv; C:\WINDOWS\system32\wuauserv.dll [6656 2008-04-15] (Microsoft Corporation) [File not signed] R2 WZCSVC; C:\WINDOWS\System32\wzcsvc.dll [483840 2008-04-15] (Microsoft Corporation) [File not signed] S3 xmlprov; C:\WINDOWS\System32\xmlprov.dll [129024 2008-04-15] (Microsoft Corporation) [File not signed] S2 4b00edf9; "C:\WINDOWS\system32\rundll32.exe" "c:\docume~1\alluse~1\daneap~1\perfor~1\PerformancerSvc.dll",service ==================== Drivers (Whitelisted) ==================== R0 ACPI; C:\WINDOWS\System32\DRIVERS\ACPI.sys [188544 2008-04-15] (Microsoft Corporation) [File not signed] R0 ACPIEC; C:\WINDOWS\System32\DRIVERS\ACPIEC.sys [12032 2008-04-15] (Microsoft Corporation) [File not signed] S3 aec; C:\WINDOWS\System32\drivers\aec.sys [142592 2008-04-13] (Microsoft Corporation) [File not signed] R1 AFD; C:\WINDOWS\System32\drivers\afd.sys [138496 2011-08-17] (Microsoft Corporation) [File not signed] R3 AR5416; C:\WINDOWS\System32\DRIVERS\athw.sys [1570240 2009-06-03] (Atheros Communications, Inc.) R3 ASNDIS5; C:\Program Files\ASUS\ATK Hotkey\ASNDIS5.SYS [16269 2004-05-27] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed] R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-04-27] () S2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-04-27] (AVAST Software) R1 AswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2014-05-15] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-04-27] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [777488 2014-05-15] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411680 2014-05-15] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2014-04-27] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-04-27] () S3 AsyncMac; C:\WINDOWS\System32\DRIVERS\asyncmac.sys [14336 2008-04-15] (Microsoft Corporation) [File not signed] R0 atapi; C:\WINDOWS\System32\DRIVERS\atapi.sys [96512 2008-04-15] (Microsoft Corporation) [File not signed] R3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2880000 2008-04-23] (ATI Technologies Inc.) [File not signed] S3 Atmarpc; C:\WINDOWS\System32\DRIVERS\atmarpc.sys [59904 2008-04-15] (Microsoft Corporation) [File not signed] R3 audstub; C:\WINDOWS\System32\DRIVERS\audstub.sys [3072 2001-08-17] (Microsoft Corporation) [File not signed] R1 Beep; C:\WINDOWS\system32\Drivers\Beep.sys [4224 2008-04-15] (Microsoft Corporation) [File not signed] S3 BrScnUsb; C:\WINDOWS\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.) [File not signed] S4 cbidf2k; C:\WINDOWS\system32\Drivers\cbidf2k.sys [13952 2008-04-15] (Microsoft Corporation) [File not signed] S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation) [File not signed] S1 Cdaudio; C:\WINDOWS\system32\Drivers\Cdaudio.sys [18688 2008-04-15] (Microsoft Corporation) [File not signed] R4 Cdfs; C:\WINDOWS\system32\Drivers\Cdfs.sys [63744 2008-04-15] (Microsoft Corporation) [File not signed] R1 Cdrom; C:\WINDOWS\System32\DRIVERS\cdrom.sys [62976 2008-04-15] (Microsoft Corporation) [File not signed] R3 CmBatt; C:\WINDOWS\System32\DRIVERS\CmBatt.sys [13952 2008-04-14] (Microsoft Corporation) [File not signed] R0 Compbatt; C:\WINDOWS\System32\DRIVERS\compbatt.sys [10240 2008-04-14] (Microsoft Corporation) [File not signed] R0 Disk; C:\WINDOWS\System32\DRIVERS\disk.sys [36352 2008-04-14] (Microsoft Corporation) [File not signed] S4 dmboot; C:\WINDOWS\System32\drivers\dmboot.sys [800000 2008-04-15] (Microsoft Corp., Veritas Software) [File not signed] R0 dmio; C:\WINDOWS\System32\drivers\dmio.sys [153856 2008-04-15] (Microsoft Corp., Veritas Software) [File not signed] R0 dmload; C:\WINDOWS\System32\drivers\dmload.sys [5888 2008-04-15] (Microsoft Corp., Veritas Software.) [File not signed] S3 DMusic; C:\WINDOWS\System32\drivers\DMusic.sys [52864 2008-04-14] (Microsoft Corporation) [File not signed] S3 drmkaud; C:\WINDOWS\System32\drivers\drmkaud.sys [2944 2008-04-14] (Microsoft Corporation) [File not signed] S3 ewusbnet; C:\WINDOWS\System32\DRIVERS\ewusbnet.sys [117504 2010-03-20] (Huawei Technologies Co., Ltd.) [File not signed] S4 Fastfat; C:\WINDOWS\system32\Drivers\Fastfat.sys [143744 2008-04-15] (Microsoft Corporation) [File not signed] S1 Fdc; C:\WINDOWS\system32\Drivers\Fdc.sys [27392 2008-04-15] (Microsoft Corporation) [File not signed] R1 Fips; C:\WINDOWS\system32\Drivers\Fips.sys [44672 2008-04-15] (Microsoft Corporation) [File not signed] S1 Flpydisk; C:\WINDOWS\system32\Drivers\Flpydisk.sys [20480 2008-04-15] (Microsoft Corporation) [File not signed] R0 FltMgr; C:\WINDOWS\System32\DRIVERS\fltMgr.sys [129792 2008-04-15] (Microsoft Corporation) [File not signed] U1 Fs_Rec; C:\WINDOWS\system32\Drivers\Fs_Rec.sys [7936 2008-04-15] (Microsoft Corporation) [File not signed] R0 Ftdisk; C:\WINDOWS\System32\DRIVERS\ftdisk.sys [125568 2008-04-15] (Microsoft Corporation) [File not signed] R3 Gpc; C:\WINDOWS\System32\DRIVERS\msgpc.sys [35072 2008-04-15] (Microsoft Corporation) [File not signed] R3 HDAudBus; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [144384 2008-04-15] (Windows (R) Server 2003 DDK provider) [File not signed] R3 HidUsb; C:\WINDOWS\System32\DRIVERS\hidusb.sys [10368 2008-04-14] (Microsoft Corporation) [File not signed] R3 HTTP; C:\WINDOWS\System32\Drivers\HTTP.sys [265728 2009-10-20] (Microsoft Corporation) [File not signed] S3 hwdatacard; C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys [105728 2010-03-25] (Huawei Technologies Co., Ltd.) [File not signed] S3 hwusbdev; C:\WINDOWS\System32\DRIVERS\ewusbdev.sys [100992 2010-03-20] (Huawei Technologies Co., Ltd.) [File not signed] R1 i8042prt; C:\WINDOWS\System32\DRIVERS\i8042prt.sys [53248 2008-04-14] (Microsoft Corporation) [File not signed] R1 Imapi; C:\WINDOWS\System32\DRIVERS\imapi.sys [42112 2008-04-15] (Microsoft Corporation) [File not signed] R3 IntcAzAudAddService; C:\WINDOWS\System32\drivers\RtkHDAud.sys [4741120 2008-06-20] (Realtek Semiconductor Corp.) [File not signed] R1 intelppm; C:\WINDOWS\System32\DRIVERS\intelppm.sys [40448 2008-04-15] (Microsoft Corporation) [File not signed] S3 Ip6Fw; C:\WINDOWS\System32\DRIVERS\Ip6Fw.sys [36608 2008-04-15] (Microsoft Corporation) [File not signed] S3 IpFilterDriver; C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys [32896 2008-04-15] (Microsoft Corporation) [File not signed] S3 IpInIp; C:\WINDOWS\System32\DRIVERS\ipinip.sys [20864 2008-04-15] (Microsoft Corporation) [File not signed] R3 IpNat; C:\WINDOWS\System32\DRIVERS\ipnat.sys [152832 2008-04-15] (Microsoft Corporation) [File not signed] R1 IPSec; C:\WINDOWS\System32\DRIVERS\ipsec.sys [75264 2008-04-15] (Microsoft Corporation) [File not signed] S3 IRENUM; C:\WINDOWS\System32\DRIVERS\irenum.sys [11264 2008-04-15] (Microsoft Corporation) [File not signed] R0 isapnp; C:\WINDOWS\System32\DRIVERS\isapnp.sys [37632 2008-04-15] (Microsoft Corporation) [File not signed] R1 Kbdclass; C:\WINDOWS\System32\DRIVERS\kbdclass.sys [24960 2008-04-14] (Microsoft Corporation) [File not signed] R3 kmixer; C:\WINDOWS\System32\drivers\kmixer.sys [172416 2008-04-14] (Microsoft Corporation) [File not signed] R0 KSecDD; C:\WINDOWS\system32\Drivers\KSecDD.sys [92928 2009-06-24] (Microsoft Corporation) [File not signed] R1 mnmdd; C:\WINDOWS\system32\Drivers\mnmdd.sys [4224 2008-04-15] (Microsoft Corporation) [File not signed] R3 Modem; C:\WINDOWS\system32\Drivers\Modem.sys [30208 2008-04-15] (Microsoft Corporation) [File not signed] R1 Mouclass; C:\WINDOWS\System32\DRIVERS\mouclass.sys [23296 2008-04-14] (Microsoft Corporation) [File not signed] R3 mouhid; C:\WINDOWS\System32\DRIVERS\mouhid.sys [12160 2001-10-26] (Microsoft Corporation) [File not signed] R0 MountMgr; C:\WINDOWS\system32\Drivers\MountMgr.sys [42368 2008-04-15] (Microsoft Corporation) [File not signed] R3 MRxDAV; C:\WINDOWS\System32\DRIVERS\mrxdav.sys [180608 2008-04-15] (Microsoft Corporation) [File not signed] R1 MRxSmb; C:\WINDOWS\System32\DRIVERS\mrxsmb.sys [456320 2011-07-15] (Microsoft Corporation) [File not signed] R1 Msfs; C:\WINDOWS\system32\Drivers\Msfs.sys [19072 2008-04-15] (Microsoft Corporation) [File not signed] S3 MSKSSRV; C:\WINDOWS\System32\drivers\MSKSSRV.sys [7552 2008-04-14] (Microsoft Corporation) [File not signed] S3 MSPCLOCK; C:\WINDOWS\System32\drivers\MSPCLOCK.sys [5376 2008-04-14] (Microsoft Corporation) [File not signed] S3 MSPQM; C:\WINDOWS\System32\drivers\MSPQM.sys [4992 2008-04-14] (Microsoft Corporation) [File not signed] R3 mssmbios; C:\WINDOWS\System32\DRIVERS\mssmbios.sys [15488 2008-04-15] (Microsoft Corporation) [File not signed] S3 MSTEE; C:\WINDOWS\System32\drivers\MSTEE.sys [5504 2008-04-14] (Microsoft Corporation) [File not signed] R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ATKACPI.sys [7680 2006-12-17] (ATK0100) [File not signed] R0 Mup; C:\WINDOWS\system32\Drivers\Mup.sys [105472 2011-04-21] (Microsoft Corporation) [File not signed] S3 NABTSFEC; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [85248 2008-04-14] (Microsoft Corporation) [File not signed] R0 NDIS; C:\WINDOWS\system32\Drivers\NDIS.sys [182656 2008-04-15] (Microsoft Corporation) [File not signed] S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation) [File not signed] R3 NdisTapi; C:\WINDOWS\System32\DRIVERS\ndistapi.sys [10496 2011-07-08] (Microsoft Corporation) [File not signed] R3 Ndisuio; C:\WINDOWS\System32\DRIVERS\ndisuio.sys [14592 2008-04-15] (Microsoft Corporation) [File not signed] R3 NdisWan; C:\WINDOWS\System32\DRIVERS\ndiswan.sys [91520 2008-04-15] (Microsoft Corporation) [File not signed] R1 NetBIOS; C:\WINDOWS\System32\DRIVERS\netbios.sys [34688 2008-04-15] (Microsoft Corporation) [File not signed] R1 NetBT; C:\WINDOWS\System32\DRIVERS\netbt.sys [162816 2008-04-15] (Microsoft Corporation) [File not signed] R1 Npfs; C:\WINDOWS\system32\Drivers\Npfs.sys [30848 2008-04-15] (Microsoft Corporation) [File not signed] R4 Ntfs; C:\WINDOWS\system32\Drivers\Ntfs.sys [574976 2008-04-15] (Microsoft Corporation) [File not signed] R1 Null; C:\WINDOWS\system32\Drivers\Null.sys [2944 2008-04-15] (Microsoft Corporation) [File not signed] S3 NwlnkFlt; C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys [12416 2008-04-15] (Microsoft Corporation) [File not signed] S3 NwlnkFwd; C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys [32512 2008-04-15] (Microsoft Corporation) [File not signed] S3 Parport; C:\WINDOWS\system32\Drivers\Parport.sys [80256 2008-04-15] (Microsoft Corporation) [File not signed] R0 PartMgr; C:\WINDOWS\system32\Drivers\PartMgr.sys [19712 2008-04-15] (Microsoft Corporation) [File not signed] S2 ParVdm; C:\WINDOWS\system32\Drivers\ParVdm.sys [6912 2008-04-15] (Microsoft Corporation) [File not signed] R0 PCI; C:\WINDOWS\System32\DRIVERS\pci.sys [68608 2008-04-15] (Microsoft Corporation) [File not signed] R0 PCIIde; C:\WINDOWS\System32\DRIVERS\pciide.sys [3456 2008-04-15] (Microsoft Corporation) [File not signed] S4 Pcmcia; C:\WINDOWS\system32\Drivers\Pcmcia.sys [120320 2008-04-15] (Microsoft Corporation) [File not signed] R3 PptpMiniport; C:\WINDOWS\System32\DRIVERS\raspptp.sys [48384 2008-04-15] (Microsoft Corporation) [File not signed] R3 PSched; C:\WINDOWS\System32\DRIVERS\psched.sys [69120 2008-04-15] (Microsoft Corporation) [File not signed] R3 Ptilink; C:\WINDOWS\System32\DRIVERS\ptilink.sys [17792 2008-04-15] (Parallel Technologies, Inc.) [File not signed] R1 RasAcd; C:\WINDOWS\System32\DRIVERS\rasacd.sys [8832 2008-04-15] (Microsoft Corporation) [File not signed] R3 Rasl2tp; C:\WINDOWS\System32\DRIVERS\rasl2tp.sys [51328 2008-04-15] (Microsoft Corporation) [File not signed] R3 RasPppoe; C:\WINDOWS\System32\DRIVERS\raspppoe.sys [41472 2008-04-15] (Microsoft Corporation) [File not signed] R3 Raspti; C:\WINDOWS\System32\DRIVERS\raspti.sys [16512 2008-04-15] (Microsoft Corporation) [File not signed] R1 Rdbss; C:\WINDOWS\System32\DRIVERS\rdbss.sys [175744 2008-04-15] (Microsoft Corporation) [File not signed] R1 RDPCDD; C:\WINDOWS\System32\DRIVERS\RDPCDD.sys [4224 2008-04-15] (Microsoft Corporation) [File not signed] R3 rdpdr; C:\WINDOWS\System32\DRIVERS\rdpdr.sys [196224 2008-04-14] (Microsoft Corporation) [File not signed] S3 RDPWD; C:\WINDOWS\system32\Drivers\RDPWD.sys [139784 2012-07-04] (Microsoft Corporation) [File not signed] R1 redbook; C:\WINDOWS\System32\DRIVERS\redbook.sys [58880 2008-04-14] (Microsoft Corporation) [File not signed] R3 ROOTMODEM; C:\WINDOWS\System32\Drivers\RootMdm.sys [5888 2008-04-15] (Microsoft Corporation) [File not signed] R3 RTSTOR; C:\WINDOWS\System32\drivers\RTSTOR.SYS [46976 2007-10-25] (Realtek Semiconductor Corp.) [File not signed] S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [20480 2008-04-15] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed] S2 Serial; C:\WINDOWS\system32\Drivers\Serial.sys [65280 2008-04-15] (Microsoft Corporation) [File not signed] S1 Sfloppy; C:\WINDOWS\system32\Drivers\Sfloppy.sys [11392 2008-04-15] (Microsoft Corporation) [File not signed] R3 SiSGbeXP; C:\WINDOWS\System32\DRIVERS\SiSGbeXP.sys [43392 2008-03-03] (Silicon Integrated Systems Corp.) [File not signed] S3 SLIP; C:\WINDOWS\System32\DRIVERS\SLIP.sys [11136 2008-04-14] (Microsoft Corporation) [File not signed] S3 splitter; C:\WINDOWS\System32\drivers\splitter.sys [6272 2008-04-14] (Microsoft Corporation) [File not signed] R0 sr; C:\WINDOWS\System32\DRIVERS\sr.sys [73472 2008-04-15] (Microsoft Corporation) [File not signed] R3 Srv; C:\WINDOWS\System32\DRIVERS\srv.sys [357888 2011-02-17] (Microsoft Corporation) [File not signed] S3 streamip; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [15232 2008-04-14] (Microsoft Corporation) [File not signed] R3 swenum; C:\WINDOWS\System32\DRIVERS\swenum.sys [4352 2008-04-15] (Microsoft Corporation) [File not signed] S3 swmidi; C:\WINDOWS\System32\drivers\swmidi.sys [56576 2008-04-14] (Microsoft Corporation) [File not signed] R3 sysaudio; C:\WINDOWS\System32\drivers\sysaudio.sys [60800 2008-04-14] (Microsoft Corporation) [File not signed] R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361600 2008-06-20] (Microsoft Corporation) [File not signed] S3 TDPIPE; C:\WINDOWS\system32\Drivers\TDPIPE.sys [12040 2008-04-15] (Microsoft Corporation) [File not signed] S3 TDTCP; C:\WINDOWS\system32\Drivers\TDTCP.sys [21896 2008-04-15] (Microsoft Corporation) [File not signed] R1 TermDD; C:\WINDOWS\System32\DRIVERS\termdd.sys [40840 2008-04-14] (Microsoft Corporation) [File not signed] R3 tosporte; C:\WINDOWS\System32\DRIVERS\tosporte.sys [41600 2006-10-10] (TOSHIBA Corporation) [File not signed] S3 tosrfbd; C:\WINDOWS\System32\DRIVERS\tosrfbd.sys [113920 2007-04-24] (TOSHIBA CORPORATION) [File not signed] S3 tosrfbnp; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [36480 2006-11-20] (TOSHIBA Corporation) [File not signed] R1 Tosrfcom; C:\WINDOWS\System32\Drivers\tosrfcom.sys [64000 2007-05-24] (TOSHIBA Corporation) [File not signed] S3 Tosrfhid; C:\WINDOWS\System32\DRIVERS\Tosrfhid.sys [73728 2007-03-01] (TOSHIBA Corporation.) [File not signed] S3 tosrfnds; C:\WINDOWS\System32\DRIVERS\tosrfnds.sys [18612 2005-01-06] (TOSHIBA Corporation.) [File not signed] S3 TosRfSnd; C:\WINDOWS\System32\drivers\tosrfsnd.sys [53376 2007-01-22] (TOSHIBA Corporation) [File not signed] S3 tosrfusb; C:\WINDOWS\System32\DRIVERS\tosrfusb.sys [41856 2007-06-11] (TOSHIBA CORPORATION) [File not signed] S4 Udfs; C:\WINDOWS\system32\Drivers\Udfs.sys [66048 2008-04-15] (Microsoft Corporation) [File not signed] R3 Update; C:\WINDOWS\System32\DRIVERS\update.sys [384768 2008-04-15] (Microsoft Corporation) [File not signed] R3 usbccgp; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [32128 2008-04-15] (Microsoft Corporation) [File not signed] R3 usbhub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [59520 2008-04-15] (Microsoft Corporation) [File not signed] R3 usbohci; C:\WINDOWS\System32\DRIVERS\usbohci.sys [17152 2008-04-15] (Microsoft Corporation) [File not signed] S3 usbprint; C:\WINDOWS\System32\DRIVERS\usbprint.sys [25856 2008-04-14] (Microsoft Corporation) [File not signed] S3 usbstor; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [26368 2008-04-14] (Microsoft Corporation) [File not signed] R1 VgaSave; C:\WINDOWS\System32\drivers\vga.sys [20992 2008-04-15] (Microsoft Corporation) [File not signed] R0 VolSnap; C:\WINDOWS\system32\Drivers\VolSnap.sys [52864 2008-04-15] (Microsoft Corporation) [File not signed] R3 Wanarp; C:\WINDOWS\System32\DRIVERS\wanarp.sys [34560 2008-04-15] (Microsoft Corporation) [File not signed] S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31872 2008-04-14] (Microsoft Corporation) [File not signed] R3 wdmaud; C:\WINDOWS\System32\drivers\wdmaud.sys [83072 2008-04-14] (Microsoft Corporation) [File not signed] S3 WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [18944 2004-08-11] (Microsoft Corporation) [File not signed] S3 WSTCODEC; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [19200 2008-04-14] (Microsoft Corporation) [File not signed] U5 b291dd33cf2b07d; C:\Windows\System32\Drivers\b291dd33cf2b07d.sys [37248 2014-06-25] () <===== ATTENTION Necurs Rootkit? U5 BattC; C:\Windows\System32\Drivers\BattC.sys [14208 2008-04-14] (Microsoft Corporation) [File not signed] S4 IntelIde; No ImagePath U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-21 16:25 - 2014-07-21 16:26 - 00000000 ____D () C:\FRST 2014-07-21 16:02 - 2014-07-21 16:02 - 00003728 _____ () C:\Documents and Settings\user\Pulpit\07212014_155513.log 2014-07-21 16:02 - 2014-07-21 16:02 - 00000000 ____D () C:\Program Files\Autodesk 2014-07-21 15:55 - 2014-07-21 15:55 - 00000000 ____D () C:\_OTL 2014-07-21 15:21 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\system32\sqlite3.dll 2014-07-21 15:20 - 2014-07-21 15:22 - 00000000 ____D () C:\AdwCleaner 2014-07-21 15:10 - 2014-07-21 15:11 - 00110296 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 15:10 - 2014-07-21 15:10 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware 2014-07-21 15:10 - 2014-07-21 15:10 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes Anti-Malware 2014-07-21 15:10 - 2014-07-21 15:10 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes 2014-07-21 15:10 - 2014-05-12 07:26 - 00053208 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-07-21 15:10 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-07-21 15:08 - 2014-07-21 15:08 - 00000034 _____ () C:\WINDOWS\setupact.log 2014-07-21 15:08 - 2014-07-21 15:08 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-07-21 15:07 - 2008-04-14 21:41 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys 2014-07-21 15:07 - 2008-04-14 21:25 - 00023296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys 2014-07-21 15:07 - 2001-10-26 16:57 - 00012160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start\Programy\Akcesoria 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start\Programy 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\user\Dane aplikacji\Toshiba 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft Help 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\Administrator\Ulubione 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\Administrator\Moje dokumenty 2014-07-19 21:16 - 2014-07-21 15:08 - 00043617 _____ () C:\WINDOWS\setupapi.log 2014-07-19 21:14 - 2014-07-21 16:00 - 00011044 _____ () C:\WINDOWS\WindowsUpdate.log 2014-07-19 20:57 - 2014-07-19 20:57 - 00077880 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2014-07-19 20:55 - 2014-07-21 15:55 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp 2014-07-19 20:55 - 2014-07-19 21:36 - 00000000 __SHD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia 2014-07-19 20:55 - 2014-07-19 21:36 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji 2014-07-19 20:55 - 2014-07-19 21:36 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne 2014-07-19 20:55 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google 2014-07-19 20:55 - 2014-07-19 21:22 - 00000000 __RHD () C:\Documents and Settings\Administrator\Dane aplikacji 2014-07-19 20:55 - 2014-07-19 21:22 - 00000000 ___HD () C:\Documents and Settings\Administrator\Szablony 2014-07-19 20:55 - 2014-07-19 21:22 - 00000000 ____D () C:\Documents and Settings\Administrator 2014-07-19 20:55 - 2014-07-19 21:04 - 00000188 ___SH () C:\Documents and Settings\Administrator\ntuser.ini 2014-07-19 20:55 - 2014-07-19 20:55 - 00000000 __SHD () C:\Documents and Settings\Administrator\IETldCache 2014-07-19 20:55 - 2012-01-11 19:35 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\Macromedia 2014-07-19 20:55 - 2011-10-13 15:25 - 00001599 _____ () C:\Documents and Settings\Administrator\Menu Start\Programy\Pomoc zdalna.lnk 2014-07-19 20:55 - 2011-10-13 15:25 - 00000792 _____ () C:\Documents and Settings\Administrator\Menu Start\Programy\Windows Media Player.lnk 2014-07-17 15:10 - 2008-04-15 14:00 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpns.dll 2014-07-17 15:04 - 2008-04-14 22:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpusd.dll 2014-07-17 15:04 - 2001-10-26 17:29 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpusb.dll 2014-07-17 10:31 - 2008-04-14 00:15 - 00026368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-07-17 10:31 - 2008-04-14 00:10 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys 2014-06-26 10:05 - 2014-07-17 17:01 - 00000000 ____D () C:\Documents and Settings\user\Moje dokumenty\Pobrane 2014-06-25 14:53 - 2014-06-25 14:53 - 00037248 _____ () C:\WINDOWS\system32\Drivers\b291dd33cf2b07d.sys 2014-06-25 14:44 - 2014-07-21 16:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-25 10:50 - 2014-06-25 12:14 - 00000000 ___RD () C:\Documents and Settings\user\Moje dokumenty\Dropbox ==================== One Month Modified Files and Folders ======= 2014-07-21 16:27 - 2011-10-13 15:30 - 00000000 ____D () C:\Documents and Settings\user\Ustawienia lokalne\Temp 2014-07-21 16:26 - 2014-07-21 16:25 - 00000000 ____D () C:\FRST 2014-07-21 16:21 - 2011-10-13 15:30 - 00000000 ____D () C:\Documents and Settings\user\Pulpit 2014-07-21 16:19 - 2014-06-25 14:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-07-21 16:19 - 2011-10-27 18:10 - 00000000 ____D () C:\Program Files\Java 2014-07-21 16:19 - 2011-10-13 15:30 - 00000000 ___RD () C:\Documents and Settings\user\Menu Start\Programy 2014-07-21 16:18 - 2013-03-20 18:59 - 00000000 ____D () C:\Program Files\Google 2014-07-21 16:18 - 2013-03-20 18:59 - 00000000 ____D () C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google 2014-07-21 16:18 - 2011-10-13 17:10 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-07-21 16:15 - 2011-10-13 17:10 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-07-21 16:12 - 2013-05-17 21:34 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\DivX 2014-07-21 16:11 - 2011-10-14 15:39 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared 2014-07-21 16:02 - 2014-07-21 16:02 - 00003728 _____ () C:\Documents and Settings\user\Pulpit\07212014_155513.log 2014-07-21 16:02 - 2014-07-21 16:02 - 00000000 ____D () C:\Program Files\Autodesk 2014-07-21 16:02 - 2013-06-09 21:03 - 00000000 ____D () C:\Documents and Settings\user\Dane aplikacji\DivX 2014-07-21 16:02 - 2013-05-17 21:36 - 00000000 ____D () C:\Program Files\DivX 2014-07-21 16:02 - 2011-10-14 14:40 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Autodesk 2014-07-21 16:00 - 2014-07-19 21:14 - 00011044 _____ () C:\WINDOWS\WindowsUpdate.log 2014-07-21 15:58 - 2013-06-21 20:47 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2014-07-21 15:58 - 2011-10-13 16:03 - 00045864 _____ () C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2014-07-21 15:57 - 2014-03-17 18:23 - 00000220 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2014-07-21 15:57 - 2013-03-20 19:00 - 00001028 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-21 15:57 - 2011-10-13 17:13 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-07-21 15:57 - 2011-10-13 17:13 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-07-21 15:57 - 2011-10-13 15:29 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-07-21 15:57 - 2008-04-15 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl 2014-07-21 15:56 - 2011-10-13 17:09 - 00202528 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-07-21 15:55 - 2014-07-21 15:55 - 00000000 ____D () C:\_OTL 2014-07-21 15:55 - 2014-07-19 20:55 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp 2014-07-21 15:55 - 2011-10-13 16:02 - 00524288 _____ () C:\WINDOWS\system32\config\ACEEvent.evt 2014-07-21 15:55 - 2011-10-13 15:30 - 00000188 ___SH () C:\Documents and Settings\user\ntuser.ini 2014-07-21 15:55 - 2011-10-13 15:29 - 00032524 _____ () C:\WINDOWS\SchedLgU.Txt 2014-07-21 15:55 - 2011-10-13 15:29 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Temp 2014-07-21 15:36 - 2013-03-20 19:00 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-21 15:23 - 2013-07-10 22:35 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2845187$ 2014-07-21 15:22 - 2014-07-21 15:20 - 00000000 ____D () C:\AdwCleaner 2014-07-21 15:22 - 2011-10-13 17:10 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2014-07-21 15:22 - 2011-10-13 15:30 - 00000000 __RHD () C:\Documents and Settings\user\Dane aplikacji 2014-07-21 15:19 - 2014-02-02 09:46 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\UUTuBeoADBlock 2014-07-21 15:11 - 2014-07-21 15:10 - 00110296 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 15:10 - 2014-07-21 15:10 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware 2014-07-21 15:10 - 2014-07-21 15:10 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes Anti-Malware 2014-07-21 15:10 - 2014-07-21 15:10 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes 2014-07-21 15:09 - 2011-10-13 15:30 - 00000000 ___RD () C:\Documents and Settings\user\Moje dokumenty 2014-07-21 15:08 - 2014-07-21 15:08 - 00000034 _____ () C:\WINDOWS\setupact.log 2014-07-21 15:08 - 2014-07-21 15:08 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-07-21 15:08 - 2014-07-19 21:16 - 00043617 _____ () C:\WINDOWS\setupapi.log 2014-07-21 15:08 - 2012-01-11 19:35 - 00002347 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader X.lnk 2014-07-21 15:08 - 2011-10-13 17:00 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start\Programy\Akcesoria 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start\Programy 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\user\Dane aplikacji\Toshiba 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft Help 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\Administrator\Ulubione 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit 2014-07-19 21:36 - 2014-07-19 21:36 - 00000000 ____D () C:\Documents and Settings\Administrator\Moje dokumenty 2014-07-19 21:36 - 2014-07-19 20:55 - 00000000 __SHD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia 2014-07-19 21:36 - 2014-07-19 20:55 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji 2014-07-19 21:36 - 2014-07-19 20:55 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne 2014-07-19 21:36 - 2014-07-19 20:55 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google 2014-07-19 21:36 - 2013-12-30 08:25 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AllSAveR 2014-07-19 21:36 - 2013-05-17 21:35 - 00000000 ____D () C:\Program Files\DSP-worx 2014-07-19 21:36 - 2011-12-06 19:15 - 00000000 ____D () C:\WINDOWS\system32\appmgmt 2014-07-19 21:36 - 2011-10-13 16:06 - 00000000 __SHD () C:\Documents and Settings\user\UserData 2014-07-19 21:36 - 2011-10-13 15:30 - 00000000 ___RD () C:\Documents and Settings\user\Menu Start\Programy\Autostart 2014-07-19 21:33 - 2013-05-17 22:36 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-07-19 21:33 - 2013-02-14 20:16 - 00000000 ____D () C:\Documents and Settings\user\Dane aplikacji\Azureus 2014-07-19 21:22 - 2014-07-19 20:55 - 00000000 __RHD () C:\Documents and Settings\Administrator\Dane aplikacji 2014-07-19 21:22 - 2014-07-19 20:55 - 00000000 ___HD () C:\Documents and Settings\Administrator\Szablony 2014-07-19 21:22 - 2014-07-19 20:55 - 00000000 ____D () C:\Documents and Settings\Administrator 2014-07-19 21:22 - 2014-06-17 13:27 - 00000000 ____D () C:\Program Files\iSafe 2014-07-19 21:04 - 2014-07-19 20:55 - 00000188 ___SH () C:\Documents and Settings\Administrator\ntuser.ini 2014-07-19 20:58 - 2011-10-13 17:10 - 00000000 __RHD () C:\Documents and Settings\Default User\Dane aplikacji 2014-07-19 20:58 - 2011-10-13 17:10 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start 2014-07-19 20:57 - 2014-07-19 20:57 - 00077880 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2014-07-19 20:55 - 2014-07-19 20:55 - 00000000 __SHD () C:\Documents and Settings\Administrator\IETldCache 2014-07-19 20:50 - 2013-12-30 08:25 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\187ad41faeacb4d4 2014-07-18 11:50 - 2012-02-24 10:10 - 00000069 _____ () C:\WINDOWS\NeroDigital.ini 2014-07-17 17:01 - 2014-06-26 10:05 - 00000000 ____D () C:\Documents and Settings\user\Moje dokumenty\Pobrane 2014-07-17 16:17 - 2012-01-04 20:39 - 00000000 ____D () C:\Documents and Settings\user\Moje dokumenty\Bluetooth 2014-07-17 15:10 - 2011-10-13 15:30 - 00000792 _____ () C:\Documents and Settings\user\Menu Start\Programy\Windows Media Player.lnk 2014-07-17 15:00 - 2011-10-13 17:02 - 00000000 ____D () C:\WINDOWS\security 2014-07-13 22:50 - 2011-10-14 15:43 - 00000000 ____D () C:\Documents and Settings\user\Dane aplikacji\foobar2000 2014-07-10 19:00 - 2014-05-11 09:24 - 00000000 ____D () C:\Program Files\AutoMapa EU 2014-07-10 14:39 - 2011-10-14 12:55 - 00016896 ____C () C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-07-08 15:10 - 2014-03-17 18:23 - 00000214 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job 2014-06-30 21:33 - 2011-10-13 16:09 - 00000000 ____D () C:\Documents and Settings\user\Moje dokumenty\Pobieranie 2014-06-29 21:29 - 2013-05-17 23:07 - 00000000 ____D () C:\Documents and Settings\user\Dane aplikacji\vlc 2014-06-27 17:04 - 2012-05-12 20:23 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.dat 2014-06-25 14:53 - 2014-06-25 14:53 - 00037248 _____ () C:\WINDOWS\system32\Drivers\b291dd33cf2b07d.sys 2014-06-25 12:14 - 2014-06-25 10:50 - 00000000 ___RD () C:\Documents and Settings\user\Moje dokumenty\Dropbox 2014-06-24 19:56 - 2011-10-13 15:30 - 00000000 ___HD () C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji ==================== Bamital & volsnap Check ================= C:\WINDOWS\explorer.exe [2008-04-15 14:00] - [2008-04-15 14:00] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\WINDOWS\system32\winlogon.exe [2008-04-15 14:00] - [2008-04-15 14:00] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\WINDOWS\system32\svchost.exe [2008-04-15 14:00] - [2008-04-15 14:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\WINDOWS\system32\services.exe [2008-04-15 14:00] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\WINDOWS\system32\User32.dll [2008-04-15 14:00] - [2008-04-15 14:00] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\WINDOWS\system32\userinit.exe [2008-04-15 14:00] - [2008-04-15 14:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\WINDOWS\system32\rpcss.dll [2008-04-15 14:00] - [2009-02-09 12:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected. C:\WINDOWS\system32\Drivers\volsnap.sys [2008-04-15 14:00] - [2008-04-15 14:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================ [/log] [log]Additional scan result of Farbar Recovery Scan Tool (x86) Version:20-07-2014 Ran by user at 2014-07-21 16:27:43 Running from C:\Documents and Settings\user\Moje dokumenty\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D} FW: avast! Antivirus (Disabled) {7591DB91-41F0-48A3-B128-1A293FD8233D} ==================== Installed Programs ====================== Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe AIR (Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.7.700.202 - Adobe Systems Incorporated) Adobe Reader X (10.1.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated) Aktualizacja dla systemu Windows Internet Explorer 8 (KB2447568) (HKLM\...\KB2447568-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2467659) (HKLM\...\KB2467659) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2541763) (HKLM\...\KB2541763) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2616676-v2) (HKLM\...\KB2616676-v2) (Version: 2 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2661254-v2) (HKLM\...\KB2661254-v2) (Version: 2 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2718704) (HKLM\...\KB2718704) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2736233) (HKLM\...\KB2736233) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2863058) (HKLM\...\KB2863058) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB898461) (HKLM\...\KB898461) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB951978) (HKLM\...\KB951978) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation) Aktualizacja dla systemu Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB2378111) (HKLM\...\KB2378111_WM9) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB2834902) (HKLM\...\KB2834902_WM10) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB2834902-v2) (HKLM\...\KB2834902-v2_WM10) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB952069) (HKLM\...\KB952069_WM9) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB954155) (HKLM\...\KB954155_WM9) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB973540) (HKLM\...\KB973540_WM9) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB975558) (HKLM\...\KB975558_WM8) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB978695) (HKLM\...\KB978695_WM9) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2510531) (HKLM\...\KB2510531-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2544521) (HKLM\...\KB2544521-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2586448) (HKLM\...\KB2586448-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2618444) (HKLM\...\KB2618444-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2647516) (HKLM\...\KB2647516-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2675157) (HKLM\...\KB2675157-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2699988) (HKLM\...\KB2699988-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2744842) (HKLM\...\KB2744842-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2761465) (HKLM\...\KB2761465-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2792100) (HKLM\...\KB2792100-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2797052) (HKLM\...\KB2797052-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2799329) (HKLM\...\KB2799329-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2809289) (HKLM\...\KB2809289-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2817183) (HKLM\...\KB2817183-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2829530) (HKLM\...\KB2829530-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2838727) (HKLM\...\KB2838727-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2846071) (HKLM\...\KB2846071-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2847204) (HKLM\...\KB2847204-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2862772) (HKLM\...\KB2862772-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2870699) (HKLM\...\KB2870699-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2879017) (HKLM\...\KB2879017-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2888505) (HKLM\...\KB2888505-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2898785) (HKLM\...\KB2898785-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2909210) (HKLM\...\KB2909210-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2909921) (HKLM\...\KB2909921-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2925418) (HKLM\...\KB2925418-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2936068) (HKLM\...\KB2936068-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2964358) (HKLM\...\KB2964358-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB982381) (HKLM\...\KB982381-IE8) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2079403) (HKLM\...\KB2079403) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2360937) (HKLM\...\KB2360937) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2412687) (HKLM\...\KB2412687) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2440591) (HKLM\...\KB2440591) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2476490) (HKLM\...\KB2476490) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2479943) (HKLM\...\KB2479943) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2507618) (HKLM\...\KB2507618) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2508272) (HKLM\...\KB2508272) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2510581) (Version: 1 - Microsoft Corporation) Hidden Aktualizacja zabezpieczeń dla systemu Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2544521) (Version: 1 - Microsoft Corporation) Hidden Aktualizacja zabezpieczeń dla systemu Windows XP (KB2544893) (HKLM\...\KB2544893) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2562937) (HKLM\...\KB2562937) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2567053) (HKLM\...\KB2567053) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2567680) (HKLM\...\KB2567680) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2570222) (HKLM\...\KB2570222) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2584146) (HKLM\...\KB2584146) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2585542) (HKLM\...\KB2585542) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2586448) (Version: 1 - Microsoft Corporation) Hidden Aktualizacja zabezpieczeń dla systemu Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2598479) (HKLM\...\KB2598479) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2603381) (HKLM\...\KB2603381) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2618451) (HKLM\...\KB2618451) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2619339) (HKLM\...\KB2619339) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2620712) (HKLM\...\KB2620712) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2621440) (HKLM\...\KB2621440) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2624667) (HKLM\...\KB2624667) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2631813) (HKLM\...\KB2631813) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2633171) (HKLM\...\KB2633171) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2639417) (HKLM\...\KB2639417) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2641653) (HKLM\...\KB2641653) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2646524) (HKLM\...\KB2646524) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2647518) (HKLM\...\KB2647518) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2653956) (HKLM\...\KB2653956) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2655992) (HKLM\...\KB2655992) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2659262) (HKLM\...\KB2659262) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2660465) (HKLM\...\KB2660465) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2661637) (HKLM\...\KB2661637) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2676562) (HKLM\...\KB2676562) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2685939) (HKLM\...\KB2685939) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2686509) (HKLM\...\KB2686509) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2691442) (HKLM\...\KB2691442) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2695962) (HKLM\...\KB2695962) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2698365) (HKLM\...\KB2698365) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2705219-v2) (HKLM\...\KB2705219-v2) (Version: 2 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2707511) (HKLM\...\KB2707511) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2709162) (HKLM\...\KB2709162) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2712808) (HKLM\...\KB2712808) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2719985) (HKLM\...\KB2719985) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2723135-v2) (HKLM\...\KB2723135-v2) (Version: 2 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2724197) (HKLM\...\KB2724197) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2727528) (HKLM\...\KB2727528) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2731847-v2) (HKLM\...\KB2731847-v2) (Version: 2 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2753842) (HKLM\...\KB2753842) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2753842-v2) (HKLM\...\KB2753842-v2) (Version: 2 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2757638) (HKLM\...\KB2757638) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2758857) (HKLM\...\KB2758857) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2761226) (HKLM\...\KB2761226) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2770660) (HKLM\...\KB2770660) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2778344) (HKLM\...\KB2778344) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2779030) (HKLM\...\KB2779030) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2780091) (HKLM\...\KB2780091) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2799494) (HKLM\...\KB2799494) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2802968) (HKLM\...\KB2802968) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2807986) (HKLM\...\KB2807986) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2808735) (HKLM\...\KB2808735) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2813170) (HKLM\...\KB2813170) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2813345) (HKLM\...\KB2813345) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2820197) (HKLM\...\KB2820197) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2820917) (HKLM\...\KB2820917) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2829361) (HKLM\...\KB2829361) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2834886) (HKLM\...\KB2834886) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2839229) (HKLM\...\KB2839229) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2845187) (HKLM\...\KB2845187) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2847311) (HKLM\...\KB2847311) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2849470) (HKLM\...\KB2849470) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2850851) (HKLM\...\KB2850851) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2850869) (HKLM\...\KB2850869) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2859537) (HKLM\...\KB2859537) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2862152) (HKLM\...\KB2862152) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2862330) (HKLM\...\KB2862330) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2862335) (HKLM\...\KB2862335) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2864063) (HKLM\...\KB2864063) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2868038) (HKLM\...\KB2868038) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2868626) (HKLM\...\KB2868626) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2876217) (HKLM\...\KB2876217) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2876315) (HKLM\...\KB2876315) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2876331) (HKLM\...\KB2876331) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2883150) (HKLM\...\KB2883150) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2892075) (HKLM\...\KB2892075) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2893294) (HKLM\...\KB2893294) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2893984) (HKLM\...\KB2893984) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2898715) (HKLM\...\KB2898715) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2900986) (HKLM\...\KB2900986) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2914368) (HKLM\...\KB2914368) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2916036) (HKLM\...\KB2916036) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2922229) (HKLM\...\KB2922229) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2929961) (HKLM\...\KB2929961) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2930275) (HKLM\...\KB2930275) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB923789) (HKLM\...\KB923789) (Version: - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB946648) (HKLM\...\KB946648) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB954459) (HKLM\...\KB954459) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956744) (HKLM\...\KB956744) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956802) (HKLM\...\KB956802) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB958644) (HKLM\...\KB958644) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB961501) (HKLM\...\KB961501) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB975562) (HKLM\...\KB975562) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB975713) (Version: 1 - Microsoft Corporation) Hidden Aktualizacja zabezpieczeń dla systemu Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB978601) (HKLM\...\KB978601) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB980436) (HKLM\...\KB980436) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB981322) (HKLM\...\KB981322) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla systemu Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation) Aktualizacja zabezpieczeń dla Windows XP (KB941569) (HKLM\...\KB941569) (Version: - Microsoft Corporation) ALLPlayer V4.X (HKLM\...\ALLPlayer_is1) (Version: - ALLCinema Ltd.) ATI Catalyst Control Center (HKLM\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.008.0422.2138 - ) ATI Display Driver (HKLM\...\ATI Display Driver) (Version: 8.479-080422a-063915C - ) ATK Hotkey (HKLM\...\{7C05592D-424B-46CB-B505-E0013E8E75C9}) (Version: 1.0.0036 - ASUS) ATKOSD2 (HKLM\...\{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}) (Version: 6.64.1.8 - ATK) AutoCAD 2011 Language Pack - Polski (Version: 18.1.49.0 - Autodesk) Hidden avast! Free Antivirus (HKLM\...\avast) (Version: 9.0.2018 - Avast Software) Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v5.10.14.6 - ) Brother MFL-Pro Suite (HKLM\...\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 1.00 - Brother Industries, Ltd.) Catalyst Control Center Core Implementation (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Graphics Full Existing (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Graphics Full New (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Graphics Light (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Graphics Previews Common (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Chinese Standard (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Chinese Traditional (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Czech (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Danish (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Dutch (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Finnish (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization French (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization German (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Greek (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Hungarian (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Italian (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Japanese (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Korean (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Norwegian (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Polish (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Portuguese (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Russian (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Spanish (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Swedish (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Thai (Version: 2008.0422.2139.36895 - ATI) Hidden Catalyst Control Center Localization Turkish (Version: 2008.0422.2139.36895 - ATI) Hidden CCC Help Chinese Standard (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Chinese Traditional (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Czech (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Danish (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Dutch (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help English (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Finnish (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help French (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help German (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Greek (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Hungarian (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Italian (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Japanese (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Korean (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Norwegian (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Polish (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Portuguese (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Russian (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Spanish (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Swedish (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Thai (Version: 2008.0422.2138.36895 - ATI) Hidden CCC Help Turkish (Version: 2008.0422.2138.36895 - ATI) Hidden ccc-core-preinstall (Version: 2008.0422.2139.36895 - ATI) Hidden ccc-core-static (Version: 2008.0422.2139.36895 - ATI) Hidden ccc-utility (Version: 2008.0422.2139.36895 - ATI) Hidden CCleaner (HKLM\...\CCleaner) (Version: 3.15 - Piriform) Defraggler (HKLM\...\Defraggler) (Version: 2.09 - Piriform) DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC) doPDF 7.2 printer (HKLM\...\doPDF 7 printer_is1) (Version: - Softland) FARO LS 1.1.406.58 (HKLM\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production) ffdshow v1.1.4399 [2012-03-22] (HKLM\...\ffdshow_is1) (Version: 1.1.4399.0 - ) foobar2000 v1.1.7 (HKLM\...\foobar2000) (Version: 1.1.7 - Peter Pawlowski) Google Chrome (HKLM\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.) Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden Haali Media Splitter (HKLM\...\HaaliMkx) (Version: - ) Java 7 Update 21 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle) Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden K-Lite Codec Pack 8.6.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 8.6.0 - ) Malwarebytes Anti-Malware wersja 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PLK (HKLM\...\{2AFF2951-86B1-3C53-B34D-B440F11E7D0A}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PLK (HKLM\...\{5A0DDC27-88E5-3CAD-BC3D-28FFD05CA6B9}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - plk (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft National Language Support Downlevel APIs (Version: - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (Polish) 2007 (Version: 12.0.4518.1020 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Software Update for Web Folders (Polish) 12 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Mozilla Firefox 30.0 (x86 pl) (HKLM\...\Mozilla Firefox 30.0 (x86 pl)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Mozilla Thunderbird 12.0.1 (x86 pl) (HKLM\...\Mozilla Thunderbird 12.0.1 (x86 pl)) (Version: 12.0.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Narzędzie Software Uninstall Utility firmy ATI (HKLM\...\All ATI Software) (Version: 6.14.10.1021 - ) Nero 8 (HKLM\...\{1CA7ACD6-B21B-4240-AA05-4FC55F6E1045}) (Version: 8.3.465 - Nero AG) neroxml (Version: 1.0.0 - Nero AG) Hidden OpenSource Flash Video Splitter 1.0.0.5 (HKLM\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - ) Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - plk) (Version: - Microsoft Corporation) PIT pro 2012 (HKLM\...\{6BBCAE88-F7AD-4085-B362-BFE8C85168ED}) (Version: 1.3.13 - Podatnik.info Sp z o.o.) Podatnik.info PIT pro 2013 wersja 2.0.15.26451 (HKLM\...\{B239B43B-3E99-40B0-80BF-1B1BCA868D4E}_is1) (Version: 2.0.15.26451 - Podatnik.info Sp. z o.o.) Poprawka dla systemu Windows XP (KB2570791) (HKLM\...\KB2570791) (Version: 1 - Microsoft Corporation) Poprawka dla systemu Windows XP (KB2633952) (HKLM\...\KB2633952) (Version: 1 - Microsoft Corporation) Poprawka dla systemu Windows XP (KB2756822) (HKLM\...\KB2756822) (Version: 1 - Microsoft Corporation) Poprawka dla systemu Windows XP (KB2779562) (HKLM\...\KB2779562) (Version: 1 - Microsoft Corporation) Poprawka dla systemu Windows XP (KB942288-v3) (HKLM\...\KB942288-v3) (Version: 3 - Microsoft Corporation) Poprawka dla systemu Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation) Poprawka dla systemu Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation) Power4 Gear (HKLM\...\{4462AD13-F2AA-4CBD-9F95-293C38EED870}) (Version: - ) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5648 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: - Realtek Semiconductor Corp.) Skins (Version: 2008.0422.2139.36895 - ATI) Hidden TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.18051 - TeamViewer) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{840D15BD-72E8-4710-ABDD-8E883B88BD5D}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2881065) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B7EF38F7-1D58-4085-A9A4-0F6C69A5AA1E}) (Version: - Microsoft) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden VLC media player 2.0.6 (HKLM\...\VLC media player) (Version: 2.0.6 - VideoLAN) Vuze (HKLM\...\8461-7759-5462-8226) (Version: 4.8.1.0 - Azureus Software, Inc.) WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation) Windows Media Format Runtime (HKLM\...\Windows Media Format Runtime) (Version: - ) WinRAR 4.01 (32-bitowy) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH) Wise Registry Cleaner 6.21 (HKLM\...\Wise Registry Cleaner_is1) (Version: - WiseCleaner.com, Inc.) XML Paper Specification Shared Components Language Pack 1.0 (Version: - Microsoft Corporation) Hidden XPS Essentials Pack (HKLM\...\{6A69D94E-C569-4154-9643-72E94D1DDFDA}) (Version: 1.0.6000 - Microsoft Corporation) XPS Essentials Pack 1.0 (Version: - Microsoft Corporation) Hidden Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team) ==================== Restore Points ========================= 09-06-2014 19:06:07 Software Distribution Service 3.0 10-06-2014 19:51:31 Punkt kontrolny systemu 10-06-2014 20:02:36 Software Distribution Service 3.0 14-06-2014 08:04:16 Punkt kontrolny systemu 15-06-2014 17:07:47 Instalacja niepodpisanego sterownika 15-06-2014 19:46:36 Software Distribution Service 3.0 16-06-2014 09:18:18 Software Distribution Service 3.0 16-06-2014 10:35:08 Software Distribution Service 3.0 16-06-2014 19:09:38 Software Distribution Service 3.0 17-06-2014 08:32:36 Software Distribution Service 3.0 17-06-2014 11:51:25 Software Distribution Service 3.0 17-06-2014 18:05:47 Software Distribution Service 3.0 24-06-2014 16:00:07 Punkt kontrolny systemu 24-06-2014 18:21:39 Software Distribution Service 3.0 25-06-2014 09:55:25 Software Distribution Service 3.0 25-06-2014 13:31:29 Software Distribution Service 3.0 27-06-2014 15:42:04 Punkt kontrolny systemu 02-07-2014 16:31:41 Punkt kontrolny systemu 03-07-2014 16:33:46 Punkt kontrolny systemu 06-07-2014 11:46:55 Punkt kontrolny systemu 08-07-2014 11:00:41 Punkt kontrolny systemu 10-07-2014 15:33:12 Punkt kontrolny systemu 13-07-2014 18:17:00 Punkt kontrolny systemu 15-07-2014 15:49:32 Punkt kontrolny systemu 16-07-2014 16:35:41 Punkt kontrolny systemu 17-07-2014 08:31:11 Instalacja niepodpisanego sterownika 17-07-2014 12:54:20 Instalacja niepodpisanego sterownika 17-07-2014 13:04:34 Instalacja niepodpisanego sterownika 17-07-2014 13:08:51 Installed Windows Media Player 11 17-07-2014 14:06:37 Instalacja niepodpisanego sterownika 18-07-2014 09:37:11 Instalacja niepodpisanego sterownika 19-07-2014 18:51:00 Removed ccc-Branding 19-07-2014 19:07:57 Removed SweetPacks bundle uninstaller 19-07-2014 19:08:19 Removed Update Manager for SweetPacks 1.1 19-07-2014 19:08:48 Removed SweetIM for Messenger 3.7 19-07-2014 19:09:25 Removed Delta Chrome Toolbar 19-07-2014 19:38:23 Operacja przywracania 21-07-2014 13:07:12 Instalacja niepodpisanego sterownika 21-07-2014 14:14:23 Removed Autodesk Material Library 2011. 21-07-2014 14:17:24 Removed Autodesk Material Library 2011 Base Image library. 21-07-2014 14:18:41 Removed Google Drive 21-07-2014 14:19:02 Removed Java(TM) 6 Update 29 ==================== Hosts content: ========================== 2008-04-15 14:00 - 2008-04-15 14:00 - 00000742 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job => C:\WINDOWS\system32\xp_eos.exe Task: C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job => C:\WINDOWS\system32\xp_eos.exe Task: C:\WINDOWS\Tasks\Wise Registry Cleaner Schedule Task.job => C:\Program Files\Wise Registry Cleaner\WiseRegCleaner.exe ==================== Loaded Modules (whitelisted) ============= 2008-02-04 13:29 - 2008-02-04 13:29 - 00688128 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll 2012-09-12 09:36 - 2012-09-12 09:36 - 00045056 _____ () C:\WINDOWS\system32\UTSCSI.EXE 2007-11-04 19:48 - 2007-11-04 19:48 - 00106496 _____ () C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe 2008-01-11 22:40 - 2008-01-11 22:40 - 00098304 _____ () C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe 2007-11-12 15:41 - 2007-11-12 15:41 - 00106496 _____ () C:\Program Files\ASUS\ATK Hotkey\MsgTran.dll 2004-05-27 18:13 - 2004-05-27 18:13 - 00057344 _____ () C:\Program Files\ASUS\ATK Hotkey\CMSSC.dll 2006-08-23 23:32 - 2006-08-23 23:32 - 00163840 _____ () C:\Program Files\ASUS\ATK Hotkey\ASUSNET.dll 2011-10-13 15:52 - 2008-01-23 15:34 - 07766016 _____ () C:\Program Files\ATKOSD2\ATKOSD2.exe 2014-04-06 21:22 - 2014-04-06 21:22 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2005-07-22 21:30 - 2005-07-22 21:30 - 00065536 _____ () C:\WINDOWS\system32\TosCommAPI.dll 2008-01-23 10:51 - 2008-01-23 10:51 - 00151552 _____ () C:\Program Files\ASUS\ATK Hotkey\WDC.exe 2008-04-15 14:00 - 2008-04-15 14:00 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll 2013-12-07 20:43 - 2013-12-04 04:48 - 04055504 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-07 20:43 - 2013-12-04 04:48 - 00399312 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-07 20:43 - 2013-12-04 04:47 - 01619408 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2013-12-07 20:43 - 2013-12-04 04:48 - 13586896 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Documents and Settings\All Users\Dane aplikacji\TEMP:373E1720 ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: ALLUpdate => "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" MSCONFIG\startupreg: BrMfcWnd => C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN MSCONFIG\startupreg: Catcher => C:\Documents and Settings\user\Pulpit\Catcher.exe MSCONFIG\startupreg: ControlCenter3 => C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun MSCONFIG\startupreg: DivXMediaServer => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW MSCONFIG\startupreg: IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 MSCONFIG\startupreg: NeroFilterCheck => C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe MSCONFIG\startupreg: Optimizer Pro => C:\Program Files\Optimizer Pro\OptProLauncher.exe MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe" ==================== Faulty Device Manager Devices ============= Name: Urządzenie modemowe na magistrali High Definition Audio Description: Urządzenie modemowe na magistrali High Definition Audio Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318} Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/21/2014 04:18:10 PM) (Source: MsiInstaller) (EventID: 11721) (User: MARIOLA) Description: Product: Autodesk Material Library 2011 Base Image library -- Error 1721.There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: LaunchLuc.exe_Removal, location: C:\Program Files\Common Files\Autodesk Shared\Materials2011\AssetFiles\Luc.exe, command: -l -r "C:\Program Files\Common Files\Autodesk Shared\Materials2011\assetlibrary_base.adsklib" Error: (07/21/2014 04:12:42 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Aplikacja powodująca błąd div12.tmp, wersja 2.6.1.8, moduł powodujący błąd div12.tmp, wersja 2.6.1.8, adres błędu 0x0003271d. Przetwarzanie zdarzenia określonego nośnika dla [div12.tmp!ws!] Error: (07/19/2014 08:58:01 PM) (Source: WmiAdapter) (EventID: 4099) (User: MARIOLA) Description: Otwarcie usługi nie powiodło się. Error: (07/19/2014 08:58:01 PM) (Source: WmiAdapter) (EventID: 4099) (User: MARIOLA) Description: Otwarcie usługi nie powiodło się. Error: (07/19/2014 08:58:01 PM) (Source: WmiAdapter) (EventID: 4099) (User: MARIOLA) Description: Otwarcie usługi nie powiodło się. Error: (07/19/2014 08:58:00 PM) (Source: WmiAdapter) (EventID: 4099) (User: MARIOLA) Description: Otwarcie usługi nie powiodło się. Error: (07/19/2014 08:58:00 PM) (Source: WmiAdapter) (EventID: 4099) (User: MARIOLA) Description: Otwarcie usługi nie powiodło się. Error: (07/19/2014 08:58:00 PM) (Source: WmiAdapter) (EventID: 4099) (User: MARIOLA) Description: Otwarcie usługi nie powiodło się. Error: (07/19/2014 08:57:59 PM) (Source: WmiAdapter) (EventID: 4099) (User: MARIOLA) Description: Otwarcie usługi nie powiodło się. Error: (07/19/2014 08:57:59 PM) (Source: WmiAdapter) (EventID: 4099) (User: MARIOLA) Description: Otwarcie usługi nie powiodło się. System errors: ============= Error: (07/21/2014 03:58:01 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Limit czasu (30000 milisekund) podczas oczekiwania na połączenie się z usługą Performancer. Error: (07/21/2014 03:58:01 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa avast! Antivirus zależy od usługi aswMonFlt, której nie można uruchomić z powodu następującego błędu: %%31 Error: (07/21/2014 03:58:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi aswMonFlt z powodu następującego błędu: %%31 Error: (07/21/2014 03:55:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa CLCV0 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/21/2014 03:55:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa TOSHIBA Bluetooth Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/21/2014 03:55:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa TeamViewer 8 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 2000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (07/21/2014 03:55:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Java Quick Starter niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/21/2014 03:55:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Ati HotKey Poller niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/21/2014 03:25:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa avast! Antivirus zależy od usługi aswMonFlt, której nie można uruchomić z powodu następującego błędu: %%31 Error: (07/21/2014 03:25:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi aswMonFlt z powodu następującego błędu: %%31 Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 52% Total physical RAM: 2047.2 MB Available physical RAM: 977.7 MB Total Pagefile: 3939.96 MB Available Pagefile: 2973.28 MB Total Virtual: 2047.88 MB Available Virtual: 1937.43 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:48.83 GB) (Free:24.43 GB) NTFS ==>[Drive with boot components (Windows XP)] Drive h: (Data) (Fixed) (Total:100.22 GB) (Free:35.04 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 149 GB) (Disk ID: A8D32665) Partition 1: (Active) - (Size=49 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS) ==================== End Of Log ============================[/log] zauważyłem jeszcze, że same otwierają się jakieś strony z filmikami itp w chromie i mimo ustawienia strony startowej na google.pl uruchamia się jakaś strona użytkownika na YouTube. Dodatkowo mimo usuwania rozszerzeń Biitsaver i UUTuBeoADBlock po ponownym uruchomieniu są one nadal.
Zayfi komentarz 21 lipca 2014 komentarz 21 lipca 2014 (edytowane) Nie mam dla ciebie dobrych wiadomość. Jest tu infekcja Necrus Rootkit U5 b291dd33cf2b07d; C:\Windows\System32\Drivers\b291dd33cf2b07d.sys [37248 2014-06-25] () <===== ATTENTION Necurs Rootkit? Pobierz kasperski TDSSKiller i wykonaj nim skan. Jak coś wykryje nie usuwaj tylko przyznaj opcje Skip i podaj raport. Raporty zamieszcaj na wklej.org http://www.fixitpc.pl/topic/8-dezynfekcja-zbi%C3%B3r-narz%C4%99dzi-usuwaj%C4%85cych/#entry33542 Edytowane 21 lipca 2014 przez Zayfi
Gość komentarz 21 lipca 2014 komentarz 21 lipca 2014 (edytowane) http://wklej.org/id/1422023/ Czy pomoże tutaj kaspersky rescue disc? Mam na własnym komputerze oryginalnego kasperskiego i może po prostu odpalić taki dysk ratunkowy z USB? Próba uruchomienia rescue disc skończyła się fatal errorem, także czekam na dalsze instrukcje :). Edytowane 21 lipca 2014 przez Gość
Zayfi komentarz 21 lipca 2014 komentarz 21 lipca 2014 (edytowane) Próba uruchomienia rescue disc skończyła się fatal errorem, także czekam na dalsze instrukcje nie cuduj, bo kaspersky sobie z tym poradzi uruchom Kasperski TDSSKiler i dla tego wyniku wybierz akcję DELETE 19:00:19.0593 0x07c8 b291dd33cf2b07d ( Rootkit.Win32.Necurs.gen ) - User select action: Skip 2. Po usuwaniu zrób nowy skan FRST - opcjii Aditions nie zaznaczaj. Edytowane 21 lipca 2014 przez Zayfi
Gość komentarz 21 lipca 2014 komentarz 21 lipca 2014 (edytowane) http://wklej.org/id/1422095/ OK, usunięte, Avast spowrotem ruszył. Mógłbyś jeszcze coś poradzić na te dwa dodatki w chromie? ADWcleaner ani malwarebytes sobie nie radzą. BiitSaver i UUTuBeoADBlock. Avast za każdym razem usuwa, ale po restarcie jest to samo. Jakieś logi Ci potrzebne czy te co były wystarczą? Edytowane 21 lipca 2014 przez Gość
Zayfi komentarz 21 lipca 2014 komentarz 21 lipca 2014 Mógłbyś jeszcze coś poradzić na te dwa dodatki w chromie? ADWcleaner ani malwarebytes sobie nie radzą. BiitSaver i UUTuBeoADBlock. Mozliwe. Otwórz notatnik i wklej CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR Extension: (BiitSaver) - C:\Documents and Settings\All Users\Dane aplikacji\hcdcoonebbgifaciopajkmofeiafdcop\ [2014-07-21] CHR Extension: (UUTuBeoADBlock) - C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions plik zapisz jako fixlist.txt i umieść w C:\Documents and Settings\user\Moje dokumenty\Downloads. Zamknij koniecznie Chrome. Uruchom FRST i kliknij w Fix. Powstanie fixlog.txt pokaż go.
Gość komentarz 22 lipca 2014 komentarz 22 lipca 2014 http://wklej.org/id/1422503/ biit saver usunięty, jednak ten drugi nadal siedzi.
Zayfi komentarz 22 lipca 2014 komentarz 22 lipca 2014 Otwórz notatnik i wklej C:\Documents and Settings\All Users\Dane aplikacji\hcdcoonebbgifaciopajkmofeiafdcop C:\TDSSKiller_Quarantine C:\WINDOWS\$NtUninstallKB2845187$ C:\Documents and Settings\user\Ustawienia lokalne\Temp\Quarantine.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\{CBAD434E-999B-4879-8CD7-5C509941FB5D}.exe plik zapisz jako fixlist.txt i umieść w C:\Documents and Settings\user\Moje dokumenty\Downloads. Uruchom FRST i kliknij w Fix. 2. Zresetuj ustawienia Chrome Ustawienia > karta Ustawienia > Pokaż ustawienia zaawansowane > zjedź na sam spód i uruchom opcję Zresetuj ustawienia przeglądarki. Zakładki i hasła nie zostaną naruszone, ale rozszerzenia zostaną wyłączone, więc ponownie aktywuj AdBlock. Ustawienia > karta Historia > wyczyść Zresetuj cache wtyczek. W pasku adresów wpisz chrome://plugins i ENTER. Na liście wtyczek wybierz dowolną i kliknij Wyłącz. Następnie wtyczkę ponownie Włącz.
Zayfi komentarz 22 lipca 2014 komentarz 22 lipca 2014 na koniec trzeba posprzatać. uruchom OTL i kliknij Sprzatanie. To usunie program zdysku. 2. Przez Shift+Del skasuj folder C:\FRST i sam program. 3. Wyczyść foldery przywracania systemu http://www.fixitpc.pl/topic/5-dezynfekcja-kroki-finalizuj%C4%85ce-temat/?p=42415#entry42415 4. Zmien hasła dla poczty i portali. Rootkity lubią je wykradać.
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.