witam,
od jakiegoś czasu otwiera mi się sam IE ze stroną Brontok. Próbowałem ściągnąć hijackthis ale za kazdym razem wówczas komputer się sam od początku uruchamiał. Ściągnąłem OTL i zrobiłem log, nie zrobił sie extras
wklejam log, proszę o pomoc
Dostępne tylko dla zarejestrowanych użytkowników
Brontok - potrzebuję pomocy!
-
kominekl
- Posty: 5855
- Rejestracja: 27 lis 2011, 14:25
- Kontaktowanie:
Brontok - potrzebuję pomocy!
Logi.
Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:
:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\NTGLM7X.sys -- (SetupNTGLM7X)
DRV - File not found [Adapter | Unavailable | Unknown] -- -- (PnSson)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\NTACCESS.sys -- (NTACCESS)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src=IE-SearchBox&FORM=IE8SRC
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [Bron-Spizaetus] C:\WINDOWS\ShellNew\sempalong.exe ()
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003..\Run: [Tok-Cirrhatus] C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\smss.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - Startup: C:\Documents and Settings\first\Menu Start\Programy\Autostart\Empty.pif ()
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
[2013-04-29 12:48:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-29
[2013-04-28 07:09:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-28
[2013-04-27 08:25:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-27
[2013-04-26 12:44:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-26
[2013-04-25 19:11:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-25
[2013-04-24 13:52:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-24
[2013-04-23 17:56:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-23
[2013-04-22 15:07:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-22
[2013-04-21 09:08:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-21
[2013-04-20 07:18:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-20
[2013-04-19 12:28:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-19
[2013-04-18 11:25:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-18
[2013-04-16 07:11:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-16
[2013-04-15 19:17:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-15
[2013-04-14 10:46:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-14
[2013-04-13 09:40:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-13
[2013-04-12 09:05:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-12
[2013-04-11 07:02:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-11
[2013-04-10 11:50:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-10
[2013-04-09 12:25:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-9
[2013-04-08 11:35:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-8
[2013-04-07 15:08:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-7
[2013-04-05 14:06:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-5
[2013-04-21 19:27:10 | 000,042,675 | -H-- | M] () -- C:\WINDOWS\eksplorasi.exe
[2013-04-21 19:27:10 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\winlogon.exe
[2013-04-21 19:27:10 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\smss.exe
[2013-04-21 19:27:10 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\services.exe
[2013-04-21 19:27:10 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Moje dokumenty\Moje dokumenty.exe
[2013-04-21 19:27:10 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\lsass.exe
[2013-04-21 19:27:10 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
[2013-04-21 19:27:10 | 000,042,675 | ---- | M] () -- C:\WINDOWS\System32\first's Setting.scr
[2013-04-21 19:27:10 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\csrss.exe
[2013-04-24 15:13:51 | 000,000,523 | ---- | M] () -- C:\hpfr3420.xml
[2013-05-04 15:27:56 | 000,012,393 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Update.12.Bron.Tok.bin
[2013-05-04 15:04:36 | 000,012,393 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok.A12.em.bin
[2012-03-08 14:59:06 | 000,011,761 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\unins000.msg
[2012-03-08 14:59:05 | 000,707,504 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\unins000.exe
[2012-03-08 14:59:05 | 000,002,166 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\unins000.dat
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\winlogon.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\smss.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\services.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\lsass.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\csrss.exe
[2011-06-27 20:34:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nitro PDF
[2011-06-27 20:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\Downloaded Installations
[2011-07-10 15:33:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\ICAClient
[2011-06-27 20:57:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\Nitro PDF
:Services
gupdate
gupdatem
:Files
C:\Program Files\Google\Update
C:\WINDOWS\tasks\*.*
:Commands
[clearallrestorepoints]
[emptytemp]
Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podaj log z Combofix + log z TDSSKiller + nowe logi z OTL (oba! - wykonane dokładnie w ten sposób).
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.
-
lukasztoporek
- Posty: 26
- Rejestracja: 04 maja 2013, 15:40
otl
OTL logfile created on: 2013-05-09 22:26:45 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\first\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
254,80 Mb Total Physical Memory | 61,90 Mb Available Physical Memory | 24,29% Memory free
625,72 Mb Paging File | 311,70 Mb Available in Paging File | 49,81% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 60,41 Gb Free Space | 81,07% Space Free | Partition Type: NTFS
Computer Name: OOO-2DF4F2402D0 | User Name: first | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013-05-09 22:25:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\first\Pulpit\OTL.exe
PRC - [2013-04-09 10:57:09 | 001,312,720 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2011-09-06 22:45:30 | 003,722,416 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011-09-06 22:45:28 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\winlogon.exe
PRC - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\services.exe
PRC - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\lsass.exe
PRC - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\csrss.exe
PRC - [2008-04-14 22:51:36 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ping.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006-12-23 19:05:20 | 000,143,360 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
PRC - [2006-12-23 19:04:42 | 000,905,216 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2003-04-09 18:21:38 | 000,147,456 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
PRC - [2003-04-09 17:59:24 | 000,311,296 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposts08.exe
PRC - [2003-04-09 17:49:36 | 000,286,720 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
========== Modules (No Company Name) ==========
MOD - [2013-04-09 10:57:07 | 000,390,096 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppgooglenaclpluginchrome.dll
MOD - [2013-04-09 10:57:06 | 013,130,704 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll
MOD - [2013-04-09 10:57:05 | 004,050,896 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll
MOD - [2013-04-09 10:56:13 | 001,606,096 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\ffmpegsumo.dll
MOD - [2012-12-18 23:59:18 | 000,019,144 | ---- | M] () -- C:\Program Files\Adobe\Reader 9.0\Reader\ViewerPS.dll
MOD - [2012-02-28 13:22:43 | 001,717,760 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12022801\algo.dll
MOD - [2009-02-27 20:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL
MOD - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\winlogon.exe
MOD - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\services.exe
MOD - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\lsass.exe
MOD - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\csrss.exe
MOD - [2008-04-14 22:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
========== Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2013-04-14 12:27:02 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011-09-06 22:45:28 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2003-03-09 21:31:02 | 000,065,795 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\NTGLM7X.sys -- (SetupNTGLM7X)
DRV - File not found [Adapter | Unavailable | Unknown] -- -- (PnSson)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\NTACCESS.sys -- (NTACCESS)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2011-09-06 22:38:05 | 000,442,200 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011-09-06 22:37:53 | 000,320,856 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011-09-06 22:36:38 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011-09-06 22:36:36 | 000,052,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011-09-06 22:36:23 | 000,110,552 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011-09-06 22:36:12 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011-09-06 22:33:11 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2008-04-14 00:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139)
DRV - [2004-04-13 14:14:12 | 000,070,144 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src={referrer:source?}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "Allegro"
FF - prefs.js..browser.startup.homepage: "google.pl"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-09-17 13:13:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-04-14 12:27:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-04-14 12:26:22 | 000,000,000 | ---D | M]
[2011-06-27 19:48:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\first\Dane aplikacji\Mozilla\Extensions
[2012-10-23 17:36:59 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\first\Dane aplikacji\Mozilla\Firefox\Profiles\bsablzgx.default\extensions
[2013-04-14 12:26:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013-04-14 12:27:04 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2009-08-14 12:33:22 | 000,070,488 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\CgpCore.dll
[2009-08-14 12:33:30 | 000,091,480 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\confmgr.dll
[2009-08-14 12:33:26 | 000,020,824 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\ctxlogging.dll
[2007-03-16 17:33:48 | 000,479,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\msvcm80.dll
[2007-03-16 17:33:48 | 000,548,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\msvcp80.dll
[2007-03-16 17:33:50 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\msvcr80.dll
[2011-08-10 20:16:51 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009-08-14 12:35:40 | 000,427,344 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\npicaN.dll
[2009-08-14 12:33:22 | 000,023,896 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\TcpPServ.dll
[2013-03-06 18:19:11 | 000,002,980 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2013-03-06 18:19:11 | 000,001,619 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2013-03-06 18:19:10 | 000,001,130 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2013-03-06 18:19:10 | 000,001,071 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2013-03-06 18:19:10 | 000,001,396 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2013-03-06 18:19:10 | 000,001,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Dysk Google = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Szukaj w Google = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: avast! WebRep = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1289_0\
CHR - Extension: Gmail = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2013-03-30 12:13:50 | 000,012,393 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
O1 - Hosts: <html lang='en'>
O1 - Hosts: <head>
O1 - Hosts: <meta name="description" content="Yahoo! GeoCities offers you a free web site and all the tools you need to build a dynamic site. Features include easy-to-use site building tools, online help, web site statistics, secure and reliable hosting, and an intuitive control panel.">
O1 - Hosts: <title>Yahoo! GeoCities: Get a web site with easy-to-use site building tools.</title>
O1 - Hosts: <link rel="stylesheet" type="text/css" media="all" href="http://l.yimg.com/a/combo?yui/2.5.2/build/reset-fonts-grids/reset-fonts-grids.css&smbiz/css/headfoot_6.css&smbiz/css/ysbs_glossary_1.css">
O1 - Hosts: <link rel="stylesheet" type="text/css" media="all" href="http://l.yimg.com/a/lib/smbiz/css/geocities_84954.css">
O1 - Hosts: <style>
O1 - Hosts: h1 { line-height:30px;height:30px; padding-left:15px; font-weight:bold;font-size:1.6em;color:#1f296a;}
O1 - Hosts: .services li { margin-left:1.0em; padding-left:0.5em; background:url("http://l.yimg.com/a/lib/smbiz/i/geo_bullet_3x3_1.gif") no-repeat 0 0.5em; margin-bottom:0.5em;margin-left:1.5em;margin-right:0.5em;width:6em}
O1 - Hosts: .services li {float:left; width:17em; font-size:116%;margin-top:0.8em}
O1 - Hosts: .services { font-size:116%; padding-bottom:20px }
O1 - Hosts: .learnmore a {color:#2882DE;font-size:16px}
O1 - Hosts: .image_web {float:right; margin:15px 0 0 15px}
O1 - Hosts: p {margin:20px;font-size:1em;}
O1 - Hosts: h2 {margin:20px 0 0 20px;color:#1F296;font-weight:bold;font-size:1.25em;color:#1f296a;}
O1 - Hosts: h3 {margin:20px;color:#1F296;font-weight:bold;font-size:1.15em;color:#1f296a;}
O1 - Hosts: li.rule {border-top:solid 1px #DBE1E6;}
O1 - Hosts: </style>
O1 - Hosts: </head>
O1 - Hosts: <body>
O1 - Hosts: <!-- following code added by server. PLEASE REMOVE -->
O1 - Hosts: <!-- preceding code added by server. PLEASE REMOVE -->
O1 - Hosts: <div class="ez-mw" style ="height:900px;width:905px">
O1 - Hosts: <div class="ez-wri ez-oh" style="width:900px">
O1 - Hosts: 90 more lines...
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Bron-Spizaetus] C:\WINDOWS\ShellNew\sempalong.exe ()
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003..\Run: [Tok-Cirrhatus] C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\smss.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\hp psc 1000 series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\first\Menu Start\Programy\Autostart\Empty.pif ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} Dostępne tylko dla zarejestrowanych użytkowników (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{77FEFEDE-18D6-4D20-9ABB-EB94465D3ED6}: DhcpNameServer = 192.168.1.1 0.0.0.0
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - ("C:\WINDOWS\eksplorasi.exe") - C:\WINDOWS\eksplorasi.exe ()
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013-05-09 22:19:00 | 000,000,007 | -HS- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2013-05-09 22:21:20 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\first\Pulpit\OTL.exe
[2013-05-09 22:05:29 | 000,000,000 | --SD | C] -- C:\32788R22FWJFW
[2013-05-09 22:00:17 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2013-05-06 16:43:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-6
[2013-05-05 11:58:42 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2013-04-29 12:48:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-29
[2013-04-28 07:09:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-28
[2013-04-27 08:25:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-27
[2013-04-26 12:44:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-26
[2013-04-25 19:11:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-25
[2013-04-24 13:52:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-24
[2013-04-23 17:56:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-23
[2013-04-22 15:07:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-22
[2013-04-21 09:08:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-21
[2013-04-20 07:18:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-20
[2013-04-19 12:28:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-19
[2013-04-18 11:25:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-18
[2013-04-16 07:11:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-16
[2013-04-15 19:17:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-15
[2013-04-14 12:26:16 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013-04-14 10:46:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-14
[2013-04-13 20:44:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Menu Start\Programy\BusinessCards MX
[2013-04-13 20:43:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Moje dokumenty\BusinessCardsMX templates
[2013-04-13 20:43:51 | 000,000,000 | ---D | C] -- C:\Program Files\mojosoft
[2013-04-13 20:43:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Dane aplikacji\mojosoft
[2013-04-13 09:40:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-13
[2013-04-12 19:56:14 | 000,000,000 | ---D | C] -- C:\Program Files\Citrix
[2013-04-12 19:38:06 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\first\IECompatCache
[2013-04-12 09:05:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-12
[2013-04-11 07:02:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-11
[2013-04-10 11:50:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-10
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013-05-09 22:30:42 | 000,012,393 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok.A12.em.bin
[2013-05-09 22:30:33 | 000,012,393 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Update.12.Bron.Tok.bin
[2013-05-09 22:25:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\first\Pulpit\OTL.exe
[2013-05-09 22:19:04 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013-05-09 22:19:00 | 000,000,007 | -HS- | M] () -- C:\AUTOEXEC.BAT
[2013-05-09 22:18:56 | 000,005,038 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2013-05-09 22:18:48 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-05-09 22:18:47 | 267,243,520 | -HS- | M] () -- C:\hiberfil.sys
[2013-05-09 22:01:37 | 000,189,792 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-05-09 20:44:21 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013-05-09 20:40:13 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{EB043172-76CC-412F-B93B-9907A5BAC036}.job
[2013-05-05 11:58:50 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2013-05-04 21:36:11 | 000,564,150 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\ewelina3.jpg
[2013-05-04 21:29:03 | 000,476,792 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\ewelina2.jpg
[2013-05-04 21:27:24 | 000,509,646 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\ewelina.jpg
[2013-05-04 09:27:52 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013-04-24 15:13:51 | 000,000,523 | ---- | M] () -- C:\hpfr3420.xml
[2013-04-24 06:48:38 | 000,111,908 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\4.jpg
[2013-04-24 06:44:46 | 000,116,734 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\3.jpg
[2013-04-24 06:43:44 | 000,077,410 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\2.jpg
[2013-04-24 06:41:32 | 000,077,796 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\1.jpg
[2013-04-16 18:10:24 | 000,476,648 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\kuchnia2.jpg
[2013-04-16 18:10:08 | 000,276,072 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\kuchnia1.jpg
[2013-04-16 18:09:54 | 000,470,370 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\kuchnia.jpg
[2013-04-13 21:37:34 | 000,782,509 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\construction_93003.bcw
[2013-04-13 20:44:37 | 000,000,875 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\BusinessCardsMX.lnk
[2013-04-11 07:49:42 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013-05-09 22:30:42 | 000,012,393 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok.A12.em.bin
[2013-05-09 22:30:33 | 000,012,393 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Update.12.Bron.Tok.bin
[2013-05-05 11:58:50 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2013-05-05 11:58:47 | 000,262,400 | RHS- | C] () -- C:\cmldr
[2013-05-04 21:30:32 | 000,564,150 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\ewelina3.jpg
[2013-05-04 21:29:03 | 000,476,792 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\ewelina2.jpg
[2013-05-04 21:27:10 | 000,509,646 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\ewelina.jpg
[2013-04-24 14:54:53 | 000,111,908 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\4.jpg
[2013-04-24 14:54:42 | 000,116,734 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\3.jpg
[2013-04-24 14:54:05 | 000,077,410 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\2.jpg
[2013-04-24 14:53:51 | 000,077,796 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\1.jpg
[2013-04-19 12:33:37 | 000,000,462 | -H-- | C] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{EB043172-76CC-412F-B93B-9907A5BAC036}.job
[2013-04-16 19:16:04 | 000,476,648 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\kuchnia2.jpg
[2013-04-16 19:16:04 | 000,470,370 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\kuchnia.jpg
[2013-04-16 19:16:04 | 000,276,072 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\kuchnia1.jpg
[2013-04-13 21:37:34 | 000,782,509 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\construction_93003.bcw
[2013-04-13 20:44:37 | 000,000,875 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\BusinessCardsMX.lnk
[2012-03-08 14:59:06 | 000,011,761 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\unins000.msg
[2012-03-08 14:59:05 | 000,707,504 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\unins000.exe
[2012-03-08 14:59:05 | 000,002,166 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\unins000.dat
[2012-02-15 12:48:56 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-02-05 19:05:10 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011-12-03 14:42:49 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-11-18 15:46:24 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011-06-27 20:50:58 | 000,019,558 | ---- | C] () -- C:\WINDOWS\hpoins01.dat
[2011-06-27 20:50:58 | 000,016,606 | ---- | C] () -- C:\WINDOWS\hpomdl01.dat
[2011-06-27 19:48:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011-06-27 19:41:21 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011-06-27 19:39:56 | 000,189,792 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-06-27 18:14:37 | 000,233,472 | R--- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe
[2011-06-27 18:14:37 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
[2011-06-27 18:14:11 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI
[2011-06-27 18:14:10 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI
[2011-06-27 18:14:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Wininit.ini
[2011-06-27 18:13:56 | 000,130,160 | R--- | C] () -- C:\WINDOWS\Cmuda.ini
[2011-06-27 18:13:54 | 000,266,240 | ---- | C] () -- C:\WINDOWS\CMIUninstall.exe
[2011-06-27 18:13:54 | 000,225,280 | ---- | C] () -- C:\WINDOWS\CmiRmRedundDir.exe
[2011-06-27 18:13:54 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll
[2011-06-27 17:56:08 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011-06-27 17:48:44 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\winlogon.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\smss.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\services.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\lsass.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\csrss.exe
========== ZeroAccess Check ==========
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-14 22:50:48 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008-04-14 22:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2011-06-27 18:22:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2013-05-04 22:24:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2011-06-27 20:34:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nitro PDF
[2013-01-12 23:38:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM
[2011-08-10 20:22:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\.minecraft
[2011-06-27 20:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\Downloaded Installations
[2011-07-10 15:33:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\ICAClient
[2013-05-04 22:25:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\ipla
[2013-04-13 20:43:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\mojosoft
[2011-06-27 20:57:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\Nitro PDF
========== Purity Check ==========
< End of report >
-- 09 maja 2013, 22:44 --
OTL Extras logfile created on: 2013-05-09 22:26:45 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\first\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
254,80 Mb Total Physical Memory | 61,90 Mb Available Physical Memory | 24,29% Memory free
625,72 Mb Paging File | 311,70 Mb Available in Paging File | 49,81% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 60,41 Gb Free Space | 81,07% Space Free | Partition Type: NTFS
Computer Name: OOO-2DF4F2402D0 | User Name: first | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_USERS\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (Dostępne tylko dla zarejestrowanych użytkowników)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0D5B5ED2-3E38-4585-B1F3-64B2A9EA95D6}_is1" = BusinessCards MX
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 26
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}" = Nawigator obrazów i fotografii HP 2.0 - All-in-One Sterowniki
"{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1" = Wtyczka e-Deklaracje
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{9867A917-5D17-40DE-83BA-BEA5293194B1}" = Nawigator obrazów i fotografii HP 2.0 - All-in-One
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-A95000000001}" = Adobe Reader 9.5.4 - Polish
"{ADD9E56D-2DD8-448A-8887-B3AF76AB1045}" = Nero 7 Essentials
"{C1CCF2E9-4851-4783-8076-D9C3F7DDD487}" = Citrix XenApp Plugin for Hosted Apps
"{C900EF06-2E76-49C7-8DB0-41F629B21DC5}" = hp psc 1200 series
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast" = avast! Free Antivirus
"C-Media Audio" = C-Media 3D Audio
"DRUKI IPS_is1" = DRUKI IPS
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Google Chrome" = Google Chrome
"HP PSC 1200 Series" = Nawigator obrazów i fotografii HP 2.0 - hp psc 1200 series
"ie8" = Windows Internet Explorer 8
"ipla" = ipla 2.6.2
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.2.0 (Basic)
"Mozilla Firefox 20.0.1 (x86 pl)" = Mozilla Firefox 20.0.1 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIA Drivers" = NVIDIA Drivers
"PITy 2011_is1" = PITy 2011 dla Windows kompilacja:1.3.2.6
"PRO100 Demo_is1" = PRO100 Demo wersja 4.61
"SopCast" = SopCast 3.4.7
"WinRAR archiver" = WinRAR 4.01 (32-bitowy)
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 2013-03-05 12:07:28 | Computer Name = OOO-2DF4F2402D0 | Source = PerfNet | ID = 2004
Description = Nie można otworzyć usługi Server. Dane wydajności usługi Server nie
zostaną zwrócone. Zwrócony kod stanu to dane DWORD 0.
Error - 2013-03-16 12:30:34 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 11321
Description = Produkt: Adobe Reader 9.5.4 - Polish -- Błąd 1321.Instalator posiada
niewystarczające przywileje, aby modyfikować plik C:\Program Files\Adobe\Reader
9.0\Reader\AcroRd32.exe.
Error - 2013-03-16 12:30:38 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1024
Description = Produkt: Adobe Reader 9.5.4 - Polish - nie można zainstalować aktualizacji
'Adobe Reader 9.5.4 - CPSID_83708'. Kod błędu 1603. Instalator Windows może tworzyć
dzienniki, aby ułatwić rozwiązywanie problemów z instalowaniem pakietów oprogramowania.
Użyj następującego łącza, aby uzyskać instrukcje dotyczące włączania obsługi rejestrowania:
Dostępne tylko dla zarejestrowanych użytkowników
Error - 2013-03-16 12:30:38 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1024
Description = Produkt: Adobe Reader 9.5.4 - Polish - nie można zainstalować aktualizacji
'Adobe Reader 9.5.3 - CPSID_83708'. Kod błędu 1603. Instalator Windows może tworzyć
dzienniki, aby ułatwić rozwiązywanie problemów z instalowaniem pakietów oprogramowania.
Użyj następującego łącza, aby uzyskać instrukcje dotyczące włączania obsługi rejestrowania:
Dostępne tylko dla zarejestrowanych użytkowników
Error - 2013-03-16 12:30:38 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1024
Description = Produkt: Adobe Reader 9.5.4 - Polish - nie można zainstalować aktualizacji
'Adobe Reader 9.5.2 - CPSID_83708'. Kod błędu 1603. Instalator Windows może tworzyć
dzienniki, aby ułatwić rozwiązywanie problemów z instalowaniem pakietów oprogramowania.
Użyj następującego łącza, aby uzyskać instrukcje dotyczące włączania obsługi rejestrowania:
Dostępne tylko dla zarejestrowanych użytkowników
Error - 2013-03-16 12:30:38 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1024
Description = Produkt: Adobe Reader 9.5.4 - Polish - nie można zainstalować aktualizacji
'Adobe Reader 9.5.1 - CPSID_83708'. Kod błędu 1603. Instalator Windows może tworzyć
dzienniki, aby ułatwić rozwiązywanie problemów z instalowaniem pakietów oprogramowania.
Użyj następującego łącza, aby uzyskać instrukcje dotyczące włączania obsługi rejestrowania:
Dostępne tylko dla zarejestrowanych użytkowników
Error - 2013-04-12 13:07:26 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 11500
Description = Product: Citrix XenApp Plugin for Hosted Apps -- Error 1500. Another
installation is in progress. You must complete that installation before continuing
this one.
Error - 2013-04-12 13:07:29 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 11500
Description = Product: Citrix XenApp Plugin for Hosted Apps -- Error 1500. Another
installation is in progress. You must complete that installation before continuing
this one.
Error - 2013-04-12 13:07:30 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 11500
Description = Product: Citrix XenApp Plugin for Hosted Apps -- Error 1500. Another
installation is in progress. You must complete that installation before continuing
this one.
Error - 2013-04-12 13:20:00 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1013
Description = Product: Citrix XenApp Plugin for Hosted Apps -- At least one client
component is already in use. Before running Setup, please exit any of the following
programs that may be running: Program Neighborhood Citrix XenApp Plugin Program Neighborhood
Connection Center Remote Application Manager
< End of report >
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\first\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
254,80 Mb Total Physical Memory | 61,90 Mb Available Physical Memory | 24,29% Memory free
625,72 Mb Paging File | 311,70 Mb Available in Paging File | 49,81% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 60,41 Gb Free Space | 81,07% Space Free | Partition Type: NTFS
Computer Name: OOO-2DF4F2402D0 | User Name: first | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013-05-09 22:25:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\first\Pulpit\OTL.exe
PRC - [2013-04-09 10:57:09 | 001,312,720 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2011-09-06 22:45:30 | 003,722,416 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011-09-06 22:45:28 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\winlogon.exe
PRC - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\services.exe
PRC - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\lsass.exe
PRC - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\csrss.exe
PRC - [2008-04-14 22:51:36 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ping.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006-12-23 19:05:20 | 000,143,360 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
PRC - [2006-12-23 19:04:42 | 000,905,216 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2003-04-09 18:21:38 | 000,147,456 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
PRC - [2003-04-09 17:59:24 | 000,311,296 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposts08.exe
PRC - [2003-04-09 17:49:36 | 000,286,720 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
========== Modules (No Company Name) ==========
MOD - [2013-04-09 10:57:07 | 000,390,096 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppgooglenaclpluginchrome.dll
MOD - [2013-04-09 10:57:06 | 013,130,704 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll
MOD - [2013-04-09 10:57:05 | 004,050,896 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll
MOD - [2013-04-09 10:56:13 | 001,606,096 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\ffmpegsumo.dll
MOD - [2012-12-18 23:59:18 | 000,019,144 | ---- | M] () -- C:\Program Files\Adobe\Reader 9.0\Reader\ViewerPS.dll
MOD - [2012-02-28 13:22:43 | 001,717,760 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12022801\algo.dll
MOD - [2009-02-27 20:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL
MOD - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\winlogon.exe
MOD - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\services.exe
MOD - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\lsass.exe
MOD - [2009-02-24 16:45:06 | 000,042,675 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\csrss.exe
MOD - [2008-04-14 22:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
========== Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2013-04-14 12:27:02 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011-09-06 22:45:28 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2003-03-09 21:31:02 | 000,065,795 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\NTGLM7X.sys -- (SetupNTGLM7X)
DRV - File not found [Adapter | Unavailable | Unknown] -- -- (PnSson)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\NTACCESS.sys -- (NTACCESS)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2011-09-06 22:38:05 | 000,442,200 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011-09-06 22:37:53 | 000,320,856 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011-09-06 22:36:38 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011-09-06 22:36:36 | 000,052,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011-09-06 22:36:23 | 000,110,552 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011-09-06 22:36:12 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011-09-06 22:33:11 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2008-04-14 00:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139)
DRV - [2004-04-13 14:14:12 | 000,070,144 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src={referrer:source?}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "Allegro"
FF - prefs.js..browser.startup.homepage: "google.pl"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-09-17 13:13:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-04-14 12:27:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-04-14 12:26:22 | 000,000,000 | ---D | M]
[2011-06-27 19:48:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\first\Dane aplikacji\Mozilla\Extensions
[2012-10-23 17:36:59 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\first\Dane aplikacji\Mozilla\Firefox\Profiles\bsablzgx.default\extensions
[2013-04-14 12:26:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013-04-14 12:27:04 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2009-08-14 12:33:22 | 000,070,488 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\CgpCore.dll
[2009-08-14 12:33:30 | 000,091,480 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\confmgr.dll
[2009-08-14 12:33:26 | 000,020,824 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\ctxlogging.dll
[2007-03-16 17:33:48 | 000,479,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\msvcm80.dll
[2007-03-16 17:33:48 | 000,548,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\msvcp80.dll
[2007-03-16 17:33:50 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\msvcr80.dll
[2011-08-10 20:16:51 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009-08-14 12:35:40 | 000,427,344 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\npicaN.dll
[2009-08-14 12:33:22 | 000,023,896 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\TcpPServ.dll
[2013-03-06 18:19:11 | 000,002,980 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2013-03-06 18:19:11 | 000,001,619 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2013-03-06 18:19:10 | 000,001,130 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2013-03-06 18:19:10 | 000,001,071 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2013-03-06 18:19:10 | 000,001,396 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2013-03-06 18:19:10 | 000,001,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Dysk Google = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Szukaj w Google = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: avast! WebRep = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1289_0\
CHR - Extension: Gmail = C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2013-03-30 12:13:50 | 000,012,393 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
O1 - Hosts: <html lang='en'>
O1 - Hosts: <head>
O1 - Hosts: <meta name="description" content="Yahoo! GeoCities offers you a free web site and all the tools you need to build a dynamic site. Features include easy-to-use site building tools, online help, web site statistics, secure and reliable hosting, and an intuitive control panel.">
O1 - Hosts: <title>Yahoo! GeoCities: Get a web site with easy-to-use site building tools.</title>
O1 - Hosts: <link rel="stylesheet" type="text/css" media="all" href="http://l.yimg.com/a/combo?yui/2.5.2/build/reset-fonts-grids/reset-fonts-grids.css&smbiz/css/headfoot_6.css&smbiz/css/ysbs_glossary_1.css">
O1 - Hosts: <link rel="stylesheet" type="text/css" media="all" href="http://l.yimg.com/a/lib/smbiz/css/geocities_84954.css">
O1 - Hosts: <style>
O1 - Hosts: h1 { line-height:30px;height:30px; padding-left:15px; font-weight:bold;font-size:1.6em;color:#1f296a;}
O1 - Hosts: .services li { margin-left:1.0em; padding-left:0.5em; background:url("http://l.yimg.com/a/lib/smbiz/i/geo_bullet_3x3_1.gif") no-repeat 0 0.5em; margin-bottom:0.5em;margin-left:1.5em;margin-right:0.5em;width:6em}
O1 - Hosts: .services li {float:left; width:17em; font-size:116%;margin-top:0.8em}
O1 - Hosts: .services { font-size:116%; padding-bottom:20px }
O1 - Hosts: .learnmore a {color:#2882DE;font-size:16px}
O1 - Hosts: .image_web {float:right; margin:15px 0 0 15px}
O1 - Hosts: p {margin:20px;font-size:1em;}
O1 - Hosts: h2 {margin:20px 0 0 20px;color:#1F296;font-weight:bold;font-size:1.25em;color:#1f296a;}
O1 - Hosts: h3 {margin:20px;color:#1F296;font-weight:bold;font-size:1.15em;color:#1f296a;}
O1 - Hosts: li.rule {border-top:solid 1px #DBE1E6;}
O1 - Hosts: </style>
O1 - Hosts: </head>
O1 - Hosts: <body>
O1 - Hosts: <!-- following code added by server. PLEASE REMOVE -->
O1 - Hosts: <!-- preceding code added by server. PLEASE REMOVE -->
O1 - Hosts: <div class="ez-mw" style ="height:900px;width:905px">
O1 - Hosts: <div class="ez-wri ez-oh" style="width:900px">
O1 - Hosts: 90 more lines...
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Bron-Spizaetus] C:\WINDOWS\ShellNew\sempalong.exe ()
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003..\Run: [Tok-Cirrhatus] C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\smss.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\hp psc 1000 series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\first\Menu Start\Programy\Autostart\Empty.pif ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} Dostępne tylko dla zarejestrowanych użytkowników (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{77FEFEDE-18D6-4D20-9ABB-EB94465D3ED6}: DhcpNameServer = 192.168.1.1 0.0.0.0
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - ("C:\WINDOWS\eksplorasi.exe") - C:\WINDOWS\eksplorasi.exe ()
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013-05-09 22:19:00 | 000,000,007 | -HS- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2013-05-09 22:21:20 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\first\Pulpit\OTL.exe
[2013-05-09 22:05:29 | 000,000,000 | --SD | C] -- C:\32788R22FWJFW
[2013-05-09 22:00:17 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2013-05-06 16:43:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-6
[2013-05-05 11:58:42 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2013-04-29 12:48:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-29
[2013-04-28 07:09:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-28
[2013-04-27 08:25:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-27
[2013-04-26 12:44:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-26
[2013-04-25 19:11:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-25
[2013-04-24 13:52:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-24
[2013-04-23 17:56:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-23
[2013-04-22 15:07:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-22
[2013-04-21 09:08:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-21
[2013-04-20 07:18:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-20
[2013-04-19 12:28:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-19
[2013-04-18 11:25:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-18
[2013-04-16 07:11:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-16
[2013-04-15 19:17:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-15
[2013-04-14 12:26:16 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013-04-14 10:46:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-14
[2013-04-13 20:44:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Menu Start\Programy\BusinessCards MX
[2013-04-13 20:43:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Moje dokumenty\BusinessCardsMX templates
[2013-04-13 20:43:51 | 000,000,000 | ---D | C] -- C:\Program Files\mojosoft
[2013-04-13 20:43:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Dane aplikacji\mojosoft
[2013-04-13 09:40:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-13
[2013-04-12 19:56:14 | 000,000,000 | ---D | C] -- C:\Program Files\Citrix
[2013-04-12 19:38:06 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\first\IECompatCache
[2013-04-12 09:05:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-12
[2013-04-11 07:02:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-11
[2013-04-10 11:50:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-10
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013-05-09 22:30:42 | 000,012,393 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok.A12.em.bin
[2013-05-09 22:30:33 | 000,012,393 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Update.12.Bron.Tok.bin
[2013-05-09 22:25:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\first\Pulpit\OTL.exe
[2013-05-09 22:19:04 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013-05-09 22:19:00 | 000,000,007 | -HS- | M] () -- C:\AUTOEXEC.BAT
[2013-05-09 22:18:56 | 000,005,038 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2013-05-09 22:18:48 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-05-09 22:18:47 | 267,243,520 | -HS- | M] () -- C:\hiberfil.sys
[2013-05-09 22:01:37 | 000,189,792 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-05-09 20:44:21 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013-05-09 20:40:13 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{EB043172-76CC-412F-B93B-9907A5BAC036}.job
[2013-05-05 11:58:50 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2013-05-04 21:36:11 | 000,564,150 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\ewelina3.jpg
[2013-05-04 21:29:03 | 000,476,792 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\ewelina2.jpg
[2013-05-04 21:27:24 | 000,509,646 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\ewelina.jpg
[2013-05-04 09:27:52 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013-04-24 15:13:51 | 000,000,523 | ---- | M] () -- C:\hpfr3420.xml
[2013-04-24 06:48:38 | 000,111,908 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\4.jpg
[2013-04-24 06:44:46 | 000,116,734 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\3.jpg
[2013-04-24 06:43:44 | 000,077,410 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\2.jpg
[2013-04-24 06:41:32 | 000,077,796 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\1.jpg
[2013-04-16 18:10:24 | 000,476,648 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\kuchnia2.jpg
[2013-04-16 18:10:08 | 000,276,072 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\kuchnia1.jpg
[2013-04-16 18:09:54 | 000,470,370 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\kuchnia.jpg
[2013-04-13 21:37:34 | 000,782,509 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\construction_93003.bcw
[2013-04-13 20:44:37 | 000,000,875 | ---- | M] () -- C:\Documents and Settings\first\Pulpit\BusinessCardsMX.lnk
[2013-04-11 07:49:42 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013-05-09 22:30:42 | 000,012,393 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok.A12.em.bin
[2013-05-09 22:30:33 | 000,012,393 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Update.12.Bron.Tok.bin
[2013-05-05 11:58:50 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2013-05-05 11:58:47 | 000,262,400 | RHS- | C] () -- C:\cmldr
[2013-05-04 21:30:32 | 000,564,150 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\ewelina3.jpg
[2013-05-04 21:29:03 | 000,476,792 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\ewelina2.jpg
[2013-05-04 21:27:10 | 000,509,646 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\ewelina.jpg
[2013-04-24 14:54:53 | 000,111,908 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\4.jpg
[2013-04-24 14:54:42 | 000,116,734 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\3.jpg
[2013-04-24 14:54:05 | 000,077,410 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\2.jpg
[2013-04-24 14:53:51 | 000,077,796 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\1.jpg
[2013-04-19 12:33:37 | 000,000,462 | -H-- | C] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{EB043172-76CC-412F-B93B-9907A5BAC036}.job
[2013-04-16 19:16:04 | 000,476,648 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\kuchnia2.jpg
[2013-04-16 19:16:04 | 000,470,370 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\kuchnia.jpg
[2013-04-16 19:16:04 | 000,276,072 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\kuchnia1.jpg
[2013-04-13 21:37:34 | 000,782,509 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\construction_93003.bcw
[2013-04-13 20:44:37 | 000,000,875 | ---- | C] () -- C:\Documents and Settings\first\Pulpit\BusinessCardsMX.lnk
[2012-03-08 14:59:06 | 000,011,761 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\unins000.msg
[2012-03-08 14:59:05 | 000,707,504 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\unins000.exe
[2012-03-08 14:59:05 | 000,002,166 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\unins000.dat
[2012-02-15 12:48:56 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-02-05 19:05:10 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011-12-03 14:42:49 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-11-18 15:46:24 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011-06-27 20:50:58 | 000,019,558 | ---- | C] () -- C:\WINDOWS\hpoins01.dat
[2011-06-27 20:50:58 | 000,016,606 | ---- | C] () -- C:\WINDOWS\hpomdl01.dat
[2011-06-27 19:48:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011-06-27 19:41:21 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011-06-27 19:39:56 | 000,189,792 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-06-27 18:14:37 | 000,233,472 | R--- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe
[2011-06-27 18:14:37 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
[2011-06-27 18:14:11 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI
[2011-06-27 18:14:10 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI
[2011-06-27 18:14:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Wininit.ini
[2011-06-27 18:13:56 | 000,130,160 | R--- | C] () -- C:\WINDOWS\Cmuda.ini
[2011-06-27 18:13:54 | 000,266,240 | ---- | C] () -- C:\WINDOWS\CMIUninstall.exe
[2011-06-27 18:13:54 | 000,225,280 | ---- | C] () -- C:\WINDOWS\CmiRmRedundDir.exe
[2011-06-27 18:13:54 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll
[2011-06-27 17:56:08 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011-06-27 17:48:44 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\winlogon.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\smss.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\services.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\lsass.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\csrss.exe
========== ZeroAccess Check ==========
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-14 22:50:48 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008-04-14 22:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2011-06-27 18:22:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2013-05-04 22:24:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2011-06-27 20:34:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nitro PDF
[2013-01-12 23:38:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM
[2011-08-10 20:22:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\.minecraft
[2011-06-27 20:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\Downloaded Installations
[2011-07-10 15:33:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\ICAClient
[2013-05-04 22:25:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\ipla
[2013-04-13 20:43:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\mojosoft
[2011-06-27 20:57:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\Nitro PDF
========== Purity Check ==========
< End of report >
-- 09 maja 2013, 22:44 --
OTL Extras logfile created on: 2013-05-09 22:26:45 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\first\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
254,80 Mb Total Physical Memory | 61,90 Mb Available Physical Memory | 24,29% Memory free
625,72 Mb Paging File | 311,70 Mb Available in Paging File | 49,81% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 60,41 Gb Free Space | 81,07% Space Free | Partition Type: NTFS
Computer Name: OOO-2DF4F2402D0 | User Name: first | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_USERS\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (Dostępne tylko dla zarejestrowanych użytkowników)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0D5B5ED2-3E38-4585-B1F3-64B2A9EA95D6}_is1" = BusinessCards MX
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 26
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}" = Nawigator obrazów i fotografii HP 2.0 - All-in-One Sterowniki
"{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1" = Wtyczka e-Deklaracje
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{9867A917-5D17-40DE-83BA-BEA5293194B1}" = Nawigator obrazów i fotografii HP 2.0 - All-in-One
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-A95000000001}" = Adobe Reader 9.5.4 - Polish
"{ADD9E56D-2DD8-448A-8887-B3AF76AB1045}" = Nero 7 Essentials
"{C1CCF2E9-4851-4783-8076-D9C3F7DDD487}" = Citrix XenApp Plugin for Hosted Apps
"{C900EF06-2E76-49C7-8DB0-41F629B21DC5}" = hp psc 1200 series
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast" = avast! Free Antivirus
"C-Media Audio" = C-Media 3D Audio
"DRUKI IPS_is1" = DRUKI IPS
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Google Chrome" = Google Chrome
"HP PSC 1200 Series" = Nawigator obrazów i fotografii HP 2.0 - hp psc 1200 series
"ie8" = Windows Internet Explorer 8
"ipla" = ipla 2.6.2
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.2.0 (Basic)
"Mozilla Firefox 20.0.1 (x86 pl)" = Mozilla Firefox 20.0.1 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIA Drivers" = NVIDIA Drivers
"PITy 2011_is1" = PITy 2011 dla Windows kompilacja:1.3.2.6
"PRO100 Demo_is1" = PRO100 Demo wersja 4.61
"SopCast" = SopCast 3.4.7
"WinRAR archiver" = WinRAR 4.01 (32-bitowy)
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 2013-03-05 12:07:28 | Computer Name = OOO-2DF4F2402D0 | Source = PerfNet | ID = 2004
Description = Nie można otworzyć usługi Server. Dane wydajności usługi Server nie
zostaną zwrócone. Zwrócony kod stanu to dane DWORD 0.
Error - 2013-03-16 12:30:34 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 11321
Description = Produkt: Adobe Reader 9.5.4 - Polish -- Błąd 1321.Instalator posiada
niewystarczające przywileje, aby modyfikować plik C:\Program Files\Adobe\Reader
9.0\Reader\AcroRd32.exe.
Error - 2013-03-16 12:30:38 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1024
Description = Produkt: Adobe Reader 9.5.4 - Polish - nie można zainstalować aktualizacji
'Adobe Reader 9.5.4 - CPSID_83708'. Kod błędu 1603. Instalator Windows może tworzyć
dzienniki, aby ułatwić rozwiązywanie problemów z instalowaniem pakietów oprogramowania.
Użyj następującego łącza, aby uzyskać instrukcje dotyczące włączania obsługi rejestrowania:
Dostępne tylko dla zarejestrowanych użytkowników
Error - 2013-03-16 12:30:38 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1024
Description = Produkt: Adobe Reader 9.5.4 - Polish - nie można zainstalować aktualizacji
'Adobe Reader 9.5.3 - CPSID_83708'. Kod błędu 1603. Instalator Windows może tworzyć
dzienniki, aby ułatwić rozwiązywanie problemów z instalowaniem pakietów oprogramowania.
Użyj następującego łącza, aby uzyskać instrukcje dotyczące włączania obsługi rejestrowania:
Dostępne tylko dla zarejestrowanych użytkowników
Error - 2013-03-16 12:30:38 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1024
Description = Produkt: Adobe Reader 9.5.4 - Polish - nie można zainstalować aktualizacji
'Adobe Reader 9.5.2 - CPSID_83708'. Kod błędu 1603. Instalator Windows może tworzyć
dzienniki, aby ułatwić rozwiązywanie problemów z instalowaniem pakietów oprogramowania.
Użyj następującego łącza, aby uzyskać instrukcje dotyczące włączania obsługi rejestrowania:
Dostępne tylko dla zarejestrowanych użytkowników
Error - 2013-03-16 12:30:38 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1024
Description = Produkt: Adobe Reader 9.5.4 - Polish - nie można zainstalować aktualizacji
'Adobe Reader 9.5.1 - CPSID_83708'. Kod błędu 1603. Instalator Windows może tworzyć
dzienniki, aby ułatwić rozwiązywanie problemów z instalowaniem pakietów oprogramowania.
Użyj następującego łącza, aby uzyskać instrukcje dotyczące włączania obsługi rejestrowania:
Dostępne tylko dla zarejestrowanych użytkowników
Error - 2013-04-12 13:07:26 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 11500
Description = Product: Citrix XenApp Plugin for Hosted Apps -- Error 1500. Another
installation is in progress. You must complete that installation before continuing
this one.
Error - 2013-04-12 13:07:29 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 11500
Description = Product: Citrix XenApp Plugin for Hosted Apps -- Error 1500. Another
installation is in progress. You must complete that installation before continuing
this one.
Error - 2013-04-12 13:07:30 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 11500
Description = Product: Citrix XenApp Plugin for Hosted Apps -- Error 1500. Another
installation is in progress. You must complete that installation before continuing
this one.
Error - 2013-04-12 13:20:00 | Computer Name = OOO-2DF4F2402D0 | Source = MsiInstaller | ID = 1013
Description = Product: Citrix XenApp Plugin for Hosted Apps -- At least one client
component is already in use. Before running Setup, please exit any of the following
programs that may be running: Program Neighborhood Citrix XenApp Plugin Program Neighborhood
Connection Center Remote Application Manager
< End of report >
-
kominekl
- Posty: 5855
- Rejestracja: 27 lis 2011, 14:25
- Kontaktowanie:
Brontok - potrzebuję pomocy!
Logi.
Nie rozumiem. Nie chce nowych logów. Najpierw wykonaj moje zalecenia. Te poprzednie
.Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.
-
lukasztoporek
- Posty: 26
- Rejestracja: 04 maja 2013, 15:40
Brontok - potrzebuję pomocy!
pojawia się jednak problem bo komputer nie chce się przeskanować combofixem. przy każdym uruchomieniu programu - a próbowałem ze 20 razy - albo się w połowie skanowania komputer uruchamia sam od początku, albo się program wyłącza i nie robi żadnych logów
-
kominekl
- Posty: 5855
- Rejestracja: 27 lis 2011, 14:25
- Kontaktowanie:
Brontok - potrzebuję pomocy!
lukasztoporek pisze:pojawia się jednak problem bo komputer nie chce się przeskanować combofixem. przy każdym uruchomieniu programu - a próbowałem ze 20 razy - albo się w połowie skanowania komputer uruchamia sam od początku, albo się program wyłącza i nie robi żadnych logów
Nie widzę póki co logu z usuwania. Combofix`a użyj w trybie awaryjnym.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.
-
lukasztoporek
- Posty: 26
- Rejestracja: 04 maja 2013, 15:40
Brontok - potrzebuję pomocy!
co to znaczy log z usuwania? jak wklepuję podane dane w skrypt i klikam wykonaj skrypt to komputer się uruchamia od nowa i żadne logi się nie pokazują. poza tym combofix w trybie awaryjnym też się resetuje i nie pokazuje żadnych logów
-
kominekl
- Posty: 5855
- Rejestracja: 27 lis 2011, 14:25
- Kontaktowanie:
Brontok - potrzebuję pomocy!
co to znaczy log z usuwania? jak wklepuję podane dane w skrypt i klikam wykonaj skrypt to komputer się uruchamia od nowa i żadne logi się nie pokazują.
Powinien wyskoczyć w notatniku log po restarcie.
poza tym combofix w trybie awaryjnym też się resetuje i nie pokazuje żadnych logów
Sprawdź, czy nie masz loga na dysku systemowym.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.
-
lukasztoporek
- Posty: 26
- Rejestracja: 04 maja 2013, 15:40
Brontok - potrzebuję pomocy!
nie ma ani jednego ani drugiego
-
kominekl
- Posty: 5855
- Rejestracja: 27 lis 2011, 14:25
- Kontaktowanie:
Brontok - potrzebuję pomocy!
lukasztoporek pisze:nie ma ani jednego ani drugiego
Ponów działanie tego i tego, a jeśli sytuacja dalej będzie wyglądać tak samo to przejdź dalej
.Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.
-
lukasztoporek
- Posty: 26
- Rejestracja: 04 maja 2013, 15:40
Brontok - potrzebuję pomocy!
logi z TDSSKiller
Dostępne tylko dla zarejestrowanych użytkowników
logi z OTL
Dostępne tylko dla zarejestrowanych użytkowników
Dostępne tylko dla zarejestrowanych użytkowników
Combofix ciągle nie robi logów.
Dostępne tylko dla zarejestrowanych użytkowników
logi z OTL
Dostępne tylko dla zarejestrowanych użytkowników
Dostępne tylko dla zarejestrowanych użytkowników
Combofix ciągle nie robi logów.
-
kominekl
- Posty: 5855
- Rejestracja: 27 lis 2011, 14:25
- Kontaktowanie:
Brontok - potrzebuję pomocy!
Logi.
Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:
:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\NTGLM7X.sys -- (SetupNTGLM7X)
DRV - File not found [Adapter | Unavailable | Unknown] -- -- (PnSson)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\NTACCESS.sys -- (NTACCESS)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src=IE-SearchBox&FORM=IE8SRC
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [Bron-Spizaetus] C:\WINDOWS\ShellNew\sempalong.exe ()
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003..\Run: [Tok-Cirrhatus] C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\smss.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Empty.pif ()
O4 - Startup: C:\Documents and Settings\first\Menu Start\Programy\Autostart\Empty.pif ()
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKU\S-1-5-21-1417001333-1123561945-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O20 - HKLM Winlogon: Shell - ("C:\WINDOWS\eksplorasi.exe") - C:\WINDOWS\eksplorasi.exe ()
[2013-05-19 20:06:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-19
[2013-05-19 20:02:48 | 000,000,000 | --SD | C] -- C:\ComboFix
[2013-05-19 20:01:27 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013-05-17 07:06:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-17
[2013-05-06 16:43:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-6
[2013-05-19 20:20:23 | 000,012,393 | ---- | M] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok.A12.em.bin
[2013-05-19 20:25:58 | 000,012,393 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Update.12.Bron.Tok.bin
[2013-05-19 20:20:23 | 000,012,393 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\Bron.tok.A12.em.bin
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\winlogon.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\smss.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\services.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\lsass.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
[2009-04-30 19:41:24 | 000,042,675 | ---- | C] () -- C:\Documents and Settings\first\Ustawienia lokalne\Dane aplikacji\csrss.exe
[2011-06-27 20:34:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nitro PDF
[2011-08-10 20:22:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\.minecraft
[2011-06-27 20:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\Downloaded Installations
[2011-07-10 15:33:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\ICAClient
[2011-06-27 20:57:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\first\Dane aplikacji\Nitro PDF
:Files
C:\WINDOWS\tasks\*.*
RECYCLER /alldrives
:Reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
:Commands
[resethosts]
[clearallrestorepoints]
[emptytemp]
Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.
-
lukasztoporek
- Posty: 26
- Rejestracja: 04 maja 2013, 15:40
-
kominekl
- Posty: 5855
- Rejestracja: 27 lis 2011, 14:25
- Kontaktowanie:
Brontok - potrzebuję pomocy!
lukasztoporek pisze:logi ze sprzątania
Dostępne tylko dla zarejestrowanych użytkowników
nowe logi z otl
Dostępne tylko dla zarejestrowanych użytkowników
Dostępne tylko dla zarejestrowanych użytkowników
Wiedziałem, że robisz błąd. Źle kopiujesz skrypt. Nie można pomijać początkowego :OTL. Jest to element skryptu. Popraw.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.
-
lukasztoporek
- Posty: 26
- Rejestracja: 04 maja 2013, 15:40
-
- Reklama
Kto jest online
Użytkownicy przeglądający to forum: Obecnie na forum nie ma żadnego zarejestrowanego użytkownika i 1 gość
