Proszę o rade co mam dalej zrobić poniżej scany OTL:
OTL logfile created on: 2014-02-13 09:28:30 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\oo\Moje dokumenty\Pobieranie
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
2,00 Gb Total Physical Memory | 1,24 Gb Available Physical Memory | 61,94% Memory free
3,85 Gb Paging File | 3,10 Gb Available in Paging File | 80,73% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 52,74 Gb Free Space | 70,78% Space Free | Partition Type: NTFS
Drive D: | 148,07 Gb Total Space | 120,51 Gb Free Space | 81,39% Space Free | Partition Type: NTFS
Computer Name: OO-73F8BE8FD91A | User Name: oo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2014-02-13 09:25:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\oo\Moje dokumenty\Pobieranie\OTL.exe
PRC - [2014-02-10 12:50:55 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2014-01-10 12:28:01 | 000,499,856 | ---- | M] (Cherished Technololgy LIMITED) -- C:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe
PRC - [2014-01-02 13:17:00 | 003,153,904 | ---- | M] () -- C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\fst_pl_30\upfst_pl_30.exe
PRC - [2013-12-18 18:28:08 | 011,671,024 | ---- | M] () -- C:\Program Files\fst_pl_19\fst_pl_19.exe
PRC - [2013-11-18 21:59:36 | 000,590,352 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgcsrvx.exe
PRC - [2013-11-11 22:02:14 | 003,478,544 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgidsagent.exe
PRC - [2013-11-07 22:03:50 | 004,956,176 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgui.exe
PRC - [2013-11-07 22:00:48 | 000,680,976 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgemcx.exe
PRC - [2013-10-28 23:24:02 | 000,729,648 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgrsx.exe
PRC - [2013-10-28 23:17:36 | 000,892,976 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgnsx.exe
PRC - [2013-09-24 01:33:08 | 000,348,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgwdsvc.exe
PRC - [2010-09-30 11:47:44 | 000,093,360 | ---- | M] (OLYMPUS IMAGING CORP.) -- C:\Program Files\OLYMPUS\ib\olycamdetect.exe
PRC - [2008-04-15 13:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2002-12-16 16:51:24 | 000,036,864 | ---- | M] (Hewlett-Packard) -- C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
PRC - [2001-05-06 11:14:22 | 000,020,549 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
========== Modules (No Company Name) ==========
MOD - [2014-02-10 12:50:55 | 003,583,600 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2014-01-02 13:17:00 | 003,153,904 | ---- | M] () -- C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\fst_pl_30\upfst_pl_30.exe
MOD - [2013-12-19 12:14:11 | 011,808,768 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\1d30757221f8b047b2b48c345a38d672\System.Web.ni.dll
MOD - [2013-12-19 12:13:55 | 000,962,560 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\29bb616398d35b4ca95475439be31c2b\System.Configuration.ni.dll
MOD - [2013-12-19 12:13:47 | 000,026,624 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\8b754b83ff0e6e42aec0b2dd9a26d28e\Accessibility.ni.dll
MOD - [2013-12-19 12:12:06 | 005,640,192 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\72ccd65c3db524458d01c025dd03a085\System.Xml.ni.dll
MOD - [2013-12-19 12:12:02 | 013,107,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\97545dcb2bd21f41b6fd0658c1cd4ae0\System.Windows.Forms.ni.dll
MOD - [2013-12-19 12:11:55 | 001,626,112 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\838b5df29df0da43b36bce80d1ef4aac\System.Drawing.ni.dll
MOD - [2013-12-19 12:11:52 | 008,093,696 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\407f04dde6aeee4c811d016b555b919a\System.ni.dll
MOD - [2013-12-19 12:11:42 | 011,415,552 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\6623ecd84e1c0b439582cd4982420746\mscorlib.ni.dll
MOD - [2013-12-19 12:11:20 | 000,299,008 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2013-12-19 10:34:29 | 016,242,056 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
MOD - [2013-12-18 18:28:08 | 011,671,024 | ---- | M] () -- C:\Program Files\fst_pl_19\fst_pl_19.exe
MOD - [2012-07-27 21:21:24 | 000,270,336 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2010-03-16 12:22:12 | 000,014,848 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\AxInterop.WBOCXLib.dll
MOD - [2008-06-19 20:53:03 | 000,060,416 | ---- | M] () -- C:\WINDOWS\system32\antiwpa.dll
MOD - [2001-07-31 11:17:12 | 000,094,274 | ---- | M] () -- C:\WINDOWS\system32\HPBHEALR.DLL
MOD - [2001-05-06 11:14:24 | 000,765,952 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\hotspot\jvm.dll
MOD - [2001-05-06 11:14:22 | 000,086,093 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\java.dll
MOD - [2001-05-06 11:14:22 | 000,053,326 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\zip.dll
MOD - [2001-05-06 11:14:22 | 000,053,319 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\verify.dll
MOD - [2001-05-06 11:14:22 | 000,032,841 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\net.dll
MOD - [2001-05-06 11:14:22 | 000,028,753 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\hpi.dll
MOD - [2001-05-06 11:14:22 | 000,020,549 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
========== Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2014-02-10 12:50:55 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014-01-10 12:28:01 | 000,499,856 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe -- (Wpm)
SRV - [2014-01-09 13:00:52 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-11-11 22:02:14 | 003,478,544 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2013-09-24 01:33:08 | 000,348,008 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2014\avgwdsvc.exe -- (avgwd)
SRV - [2012-06-11 11:33:26 | 000,724,376 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2002-08-01 10:22:40 | 000,065,536 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\hpzipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\zd1211Bu.sys -- (ZD1211BU(Atheros)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2013-12-19 10:31:00 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50)
DRV - [2013-11-05 21:50:48 | 000,120,600 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgdiskx.sys -- (Avgdiskx)
DRV - [2013-11-04 21:57:30 | 000,209,176 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2013-10-31 23:00:28 | 000,176,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2013-10-31 22:30:08 | 000,222,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avglogx.sys -- (Avglogx)
DRV - [2013-10-24 22:28:32 | 000,147,768 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2013-10-01 00:49:38 | 000,102,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2013-09-17 00:57:26 | 000,022,840 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2013-09-10 00:43:20 | 000,027,448 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2013-08-01 16:08:52 | 000,193,848 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2013-01-23 11:31:50 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2013-01-23 11:31:50 | 000,018,560 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2013-01-23 11:31:50 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2013-01-23 11:31:50 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2012-07-27 17:05:12 | 006,646,784 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2012-06-19 09:54:20 | 006,141,584 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2012-06-11 11:33:46 | 000,019,072 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2012-05-13 19:12:12 | 000,103,040 | R--- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtihdXP3.sys -- (AtiHDAudioService)
DRV - [2011-12-08 07:09:16 | 000,327,400 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2011-12-02 11:38:00 | 004,125,352 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtKHDMI.sys -- (RTHDMIAzAudService)
DRV - [2009-11-18 00:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 00:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "https://www.google.pl/"
FF - prefs.js..extensions.enabledAddons: battlefieldplay4free%40ea.com:1.0.96.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2013-12-19 10:33:44 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\oo\Dane aplikacji\Mozilla\Extensions
[2014-01-09 17:33:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\oo\Dane aplikacji\Mozilla\Firefox\Profiles\3xe1pa8a.default\extensions
[2013-12-21 16:01:08 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Documents and Settings\oo\Dane aplikacji\Mozilla\Firefox\Profiles\3xe1pa8a.default\extensions\battlefieldplay4free@ea.com
[2014-02-10 12:50:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014-02-10 12:50:56 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - Extension: Dokumenty Google = C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Adblock Plus = C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.4_0\
CHR - Extension: Google Wallet = C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Battlefield Play4Free = C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0\
O1 HOSTS File: ([2008-04-15 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AutoEJCD_0ACE20FF] File not found
O4 - HKLM..\Run: [AVG_UI] C:\Program Files\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [fst_pl_19] C:\Program Files\fst_pl_19\fst_pl_19.exe ()
O4 - HKLM..\Run: [fst_pl_30] File not found
O4 - HKLM..\Run: [MDS_Menu] C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files\Mobogenie\DaemonProcess.exe File not found
O4 - HKLM..\Run: [Olympus ib] C:\Program Files\Olympus\ib\olycamdetect.exe (OLYMPUS IMAGING CORP.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe (Hewlett-Packard)
O4 - HKLM..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe (Hewlett-Packard)
O4 - HKLM..\Run: [upfst_pl_30.exe] C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\fst_pl_30\upfst_pl_30.exe ()
O4 - HKLM..\Run: [UsageTemp] C:\Documents and Settings\oo\Ustawienia lokalne\Temp\UsageTemp.exe ()
O4 - HKLM..\Run: [ZDWLan_Utility] File not found
O4 - HKCU..\Run: [ares] D:\Program Files\Ares\Ares.exe (Seekar Ltd)
O4 - HKCU..\Run: [NextLive] C:\Documents and Settings\oo\Dane aplikacji\newnext.me\nengine.dll (NewNextDotMe)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 88.156.222.92 82.139.8.40 95.160.170.92
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7D7E1D56-C59D-477A-8897-92A1E56508BC}: DhcpNameServer = 88.156.222.92 82.139.8.40 95.160.170.92
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\Antiwpa: DllName - (antiwpa.dll) - C:\WINDOWS\System32\antiwpa.dll ()
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013-12-19 09:29:51 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{1b0e7ce6-6af1-11e3-bfbf-1c6f65bca8ba}\Shell\AutoRun\command - "" = J:\urDrive.exe
O33 - MountPoints2\{3448222e-6890-11e3-bfac-f8aa579e14e6}\Shell - "" = AutoRun
O33 - MountPoints2\{3448222e-6890-11e3-bfac-f8aa579e14e6}\Shell\AutoRun\command - "" = K:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2014\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2014-02-10 12:50:45 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014-02-04 15:20:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Pulpit\zdjęcia syncia
[2014-02-03 10:15:13 | 000,008,192 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys
[2014-02-03 10:15:12 | 000,023,168 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys
[2014-02-03 10:15:12 | 000,008,192 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerflt.sys
[2014-02-03 10:15:11 | 000,018,560 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys
[2014-02-03 10:15:10 | 000,000,000 | ---D | C] -- C:\Program Files\Nokia
[2014-02-03 09:14:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Moje dokumenty\Downloads
[2014-02-02 09:45:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome
[2014-02-02 09:27:58 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2014-02-01 15:05:49 | 017,888,136 | ---- | C] (Adobe Systems Incorporated) -- C:\Documents and Settings\oo\Moje dokumenty\install_flash_player.exe
[2014-01-29 17:19:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\fst_pl_19
[2014-01-29 17:19:22 | 000,000,000 | ---D | C] -- C:\Program Files\fst_pl_19
[2014-01-20 12:31:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Pulpit\foty
[2014-01-20 12:26:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Dane aplikacji\CyberLink
[2014-01-20 12:24:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\CyberLink
[2014-01-19 17:50:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Menu Start\Programy\OLYMPUS ib
[2014-01-19 17:50:10 | 000,000,000 | R--D | C] -- C:\Documents and Settings\oo\Menu Start\Programy\Narzędzia administracyjne
[2014-01-19 17:50:10 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo
[2014-01-19 17:50:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\OLYMPUS
[2014-01-19 17:47:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Temp
[2014-01-19 17:40:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Program aktualizujący aparaty cyfrowe OLYMPUS
[2014-01-19 17:40:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\OLYMPUS Viewer 2
[2014-01-19 17:39:53 | 000,000,000 | ---D | C] -- C:\Program Files\OLYMPUS
[2014-01-19 17:39:11 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2014-01-19 17:39:06 | 000,095,744 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atl80.dll
[2014-01-19 17:39:05 | 000,626,688 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr80.dll
[2014-01-19 17:39:04 | 000,548,864 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp80.dll
[2014-01-19 17:39:03 | 001,079,808 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc80u.dll
[2014-01-18 13:11:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Pulpit\nokia
[2014-01-18 13:09:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\oo\Moje dokumenty\Moje wideo
[2014-01-18 13:08:06 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\oo\Phone Browser
[2014-01-18 13:07:55 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbser.sys
[2014-01-18 13:07:30 | 000,016,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll
[2014-01-18 13:07:27 | 000,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2014-01-18 13:05:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Dane aplikacji\Nokia
[2014-01-18 13:05:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\oo\Dane aplikacji\PC Suite
[2014-01-18 13:05:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2014-01-18 13:05:27 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2014-01-18 13:05:26 | 000,019,072 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys
[2014-01-18 13:05:21 | 000,000,000 | ---D | C] -- C:\Program Files\PC Connectivity Solution
[2014-01-18 13:05:15 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01009.dll
[2014-01-18 13:05:15 | 000,123,904 | ---- | C] (Nokia) -- C:\WINDOWS\System32\ccdcmbwu.dll
[2014-01-18 13:05:15 | 000,069,632 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll
[2014-01-18 13:05:14 | 000,075,264 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcls.dll
[2014-01-18 13:04:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2014-01-15 18:02:41 | 000,000,000 | ---D | C] -- C:\Program Files\predm
[2014-01-09 12:59:36 | 000,823,160 | ---- | C] (AnyProtect.com) -- C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\AnyProtectScannerSetup.exe
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2014-02-13 08:50:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014-02-13 08:39:42 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014-02-13 08:39:00 | 000,001,024 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014-02-13 08:22:37 | 000,448,004 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2014-02-13 08:22:37 | 000,392,296 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014-02-13 08:22:37 | 000,074,230 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2014-02-13 08:22:37 | 000,058,596 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014-02-13 08:18:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014-02-12 22:06:49 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014-02-12 20:49:46 | 000,139,424 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2014-02-12 20:49:36 | 000,282,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2014-02-12 20:23:01 | 000,282,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.ex0
[2014-02-09 15:15:36 | 000,002,300 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014-02-04 17:36:33 | 000,001,819 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
[2014-02-01 15:05:48 | 017,888,136 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\oo\Moje dokumenty\install_flash_player.exe
[2014-01-20 11:06:52 | 000,001,556 | ---- | M] () -- C:\Documents and Settings\oo\Pulpit\ib.lnk
[2014-01-19 17:40:58 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2014-01-19 17:40:26 | 000,000,774 | ---- | M] () -- C:\Documents and Settings\oo\Pulpit\Program aktualizujący aparaty cyfrowe OLYMPUS.lnk
[2014-01-19 17:40:07 | 000,000,794 | ---- | M] () -- C:\Documents and Settings\oo\Pulpit\OLYMPUS Viewer 2.lnk
[2014-01-18 13:07:36 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2014-01-18 13:07:34 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2014-01-18 13:04:02 | 067,963,216 | ---- | M] () -- C:\Documents and Settings\oo\Moje dokumenty\Nokia_PC_Suite_ALL.exe
[2014-01-15 15:24:50 | 000,002,513 | ---- | M] () -- C:\Documents and Settings\oo\Pulpit\Microsoft Office Word 2007.lnk
[2014-01-14 20:04:45 | 000,064,224 | ---- | M] () -- C:\WINDOWS\System32\wupdater.exe
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2014-02-02 09:45:34 | 000,001,819 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
[2014-02-02 09:28:06 | 000,001,028 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014-02-02 09:28:05 | 000,001,024 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014-01-19 17:50:04 | 000,001,556 | ---- | C] () -- C:\Documents and Settings\oo\Pulpit\ib.lnk
[2014-01-19 17:40:26 | 000,000,774 | ---- | C] () -- C:\Documents and Settings\oo\Pulpit\Program aktualizujący aparaty cyfrowe OLYMPUS.lnk
[2014-01-19 17:40:07 | 000,000,794 | ---- | C] () -- C:\Documents and Settings\oo\Pulpit\OLYMPUS Viewer 2.lnk
[2014-01-18 13:07:36 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2014-01-18 13:07:34 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2014-01-18 13:04:03 | 067,963,216 | ---- | C] () -- C:\Documents and Settings\oo\Moje dokumenty\Nokia_PC_Suite_ALL.exe
[2014-01-14 20:04:45 | 000,064,224 | ---- | C] () -- C:\WINDOWS\System32\wupdater.exe
[2014-01-10 17:38:48 | 000,139,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2014-01-10 17:38:35 | 000,282,104 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2014-01-10 17:37:22 | 000,076,888 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2014-01-09 18:12:44 | 000,015,416 | ---- | C] () -- C:\WINDOWS\hplj1010.ini
[2014-01-09 18:12:15 | 000,000,417 | ---- | C] () -- C:\WINDOWS\hpbvspst.ini
[2014-01-09 18:12:14 | 000,001,131 | ---- | C] () -- C:\WINDOWS\hpbvnstp.ini
[2013-12-22 11:13:09 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\oo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-12-21 16:15:33 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\oo\Dane aplikacji\PnkBstrK.sys
[2013-12-19 12:37:55 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2013-12-19 12:37:54 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2013-12-19 12:37:53 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2013-12-19 12:37:53 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2013-12-19 12:37:52 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2013-12-19 12:13:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2013-12-19 12:12:54 | 000,637,743 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2013-12-19 11:18:44 | 000,025,548 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2013-12-19 10:24:47 | 000,060,416 | ---- | C] () -- C:\WINDOWS\System32\antiwpa.dll
[2013-12-19 10:21:37 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2013-12-19 10:20:25 | 000,324,320 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-12-19 09:31:27 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013-12-19 09:27:15 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
========== ZeroAccess Check ==========
[2013-12-19 12:11:05 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-15 13:00:00 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2008-04-15 13:00:00 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 13:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
< End of report >
EXTRAS
OTL Extras logfile created on: 2014-02-13 09:28:30 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\oo\Moje dokumenty\Pobieranie
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
2,00 Gb Total Physical Memory | 1,24 Gb Available Physical Memory | 61,94% Memory free
3,85 Gb Paging File | 3,10 Gb Available in Paging File | 80,73% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 52,74 Gb Free Space | 70,78% Space Free | Partition Type: NTFS
Drive D: | 148,07 Gb Total Space | 120,51 Gb Free Space | 81,39% Space Free | Partition Type: NTFS
Computer Name: OO-73F8BE8FD91A | User Name: oo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 1
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\AVG\AVG2014\avgnsx.exe" = C:\Program Files\AVG\AVG2014\avgnsx.exe:*:Enabled:Ochrona Sieci -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2014\avgdiagex.exe" = C:\Program Files\AVG\AVG2014\avgdiagex.exe:*:Enabled:Diagnostyka AVG 2014 -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2014\avgmfapx.exe" = C:\Program Files\AVG\AVG2014\avgmfapx.exe:*:Enabled:Instalator AVG -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2014\avgemcx.exe" = C:\Program Files\AVG\AVG2014\avgemcx.exe:*:Enabled:Uniwersalny skaner poczty email -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\WINDOWS\system32\PnkBstrA.exe" = C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA -- ()
"C:\WINDOWS\system32\PnkBstrB.exe" = C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB -- ()
"D:\battelfield\BFP4f.exe" = D:\battelfield\BFP4f.exe:*:Enabled:BFP4f Application -- (Easy)
"D:\Games\World_of_Tanks\WoTLauncher.exe" = D:\Games\World_of_Tanks\WoTLauncher.exe:*:Enabled:World of Tanks Launcher -- (Wargaming.net)
"D:\Games\World_of_Tanks\WorldOfTanks.exe" = D:\Games\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks -- (Wargaming.net)
"D:\Program Files\Ares\Ares.exe" = D:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows -- (Seekar Ltd)
"C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe" = C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe:*:Disabled:javaw -- ()
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03C84BA5-715D-3D1B-0E91-C57ABA7C63E4}" = CCC Help Korean
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1" = World of Tanks
"{25CAF704-AAB4-F333-33B3-5FB53568A714}" = CCC Help Dutch
"{292C47B2-8DB7-47BF-896C-C3C5EE8108C4}" = hp LaserJet 1010 Series
"{2D73530B-97FC-675D-D531-80000E9EF25F}" = CCC Help Finnish
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3B97ADB7-3DA1-4964-BC10-68384BA6A66F}" = AVG 2014
"{401C04AC-99A0-4DE2-879F-30D03A633FEF}" = AVG 2014
"{41042E28-CCA1-4147-869F-9E928B38F04C}" = Adobe Flash Player 11 ActiveX
"{474E8F7E-4DF1-511C-2CEA-1408A763C7D6}" = CCC Help German
"{4A693E5F-8BBF-89C0-8480-BD29AC3C77B6}" = Catalyst Control Center
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{59695725-D85D-B2B2-913D-67565A1C163B}" = CCC Help Spanish
"{5C88B78A-D260-D67D-D11B-B3C91BC1E88D}" = CCC Help Norwegian
"{644F4910-E812-49AD-93EC-86828CB81A0D}" = PC Connectivity Solution
"{64C09A8D-4768-7DAD-0558-7ADF97117810}" = CCC Help Greek
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7177EE4E-3D1D-4F45-85B5-B93DC758BA0B}" = OLYMPUS Viewer 2
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{87686C21-8A15-4b4d-A3F1-11141D9BE094}" = Battlefield Play4Free
"{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}" = Olympus ib
"{8E0112F4-645A-2B0B-3EB8-1E26A9117142}" = ccc-utility
"{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{9219077C-E904-BCE2-DD7C-41FFB8A2722D}" = CCC Help Portuguese
"{958D7241-6B59-0934-EE7F-B873512A1BAB}" = AMD Catalyst Install Manager
"{97478E54-1124-9CC3-422D-9D55686A1CFC}" = CCC Help Turkish
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{999F66C7-9F92-651B-51D8-83CFAA624A49}" = CCC Help Hungarian
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9ACDC641-D5A5-0D04-27D2-61C93DFE1FDD}" = HydraVision
"{A064C986-090D-C5F1-A2AA-C2B564B381E9}" = CCC Help Thai
"{A1D879FC-1CEC-99BC-1B75-49D172857681}" = CCC Help French
"{A65921CB-4679-C5B6-BEF3-D8BB750DF934}" = Catalyst Control Center Localization All
"{A68C62E8-B243-4777-89BB-12173DFA1D45}" = OLYMPUS Digital Camera Updater
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI - Polish
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B0EF4541-498A-7E24-975C-F3383D2F51FA}" = CCC Help English
"{B257BA52-A859-E9F8-7B17-BAD33B58E0DF}" = CCC Help Chinese Traditional
"{C8977DE8-8546-59AB-FEBA-EBD2419B0E98}" = CCC Help Swedish
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CAA28AC3-1F34-E511-B15C-2A8647CE6A5E}" = Catalyst Control Center Graphics Previews Common
"{CE2E2939-D2B8-810C-BE80-C57B4D568798}" = CCC Help Czech
"{CE88F009-C0CC-F721-8689-959A90729261}" = CCC Help Chinese Standard
"{D4BF151C-70A8-4CE2-906F-4173A575BAD9}" = Nokia Connectivity Cable Driver
"{DECC5BEE-9F27-EF08-3BB2-2312E6D97088}" = Catalyst Control Center InstallProxy
"{E1A98A7F-FB3F-1FFE-357D-EE03AD25C08C}" = CCC Help Polish
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E5304161-9FAA-ACDD-2BF6-A840AE07E3F9}" = CCC Help Russian
"{E62E5720-6756-11EA-8EF8-4209C45880B2}" = CCC Help Danish
"{E7612D0C-DD02-DA5D-B3A7-98CF39ABCA52}" = CCC Help Italian
"{ED3CCFA6-CB06-AE14-FBB3-1169420B100E}" = CCC Help Japanese
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382" = Pakiet sterowników systemu Windows - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0)
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Ares" = Ares 2.2.6
"AVG" = AVG 2014
"E77704EF5E71F4F18CADFBFA68595AFE036D5D97" = Pakiet sterowników systemu Windows - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0)
"ENTERPRISE" = Microsoft Office Enterprise 2007
"fst_pl_19_is1" = fst_pl_19
"Google Chrome" = Google Chrome
"InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}" = Olympus ib
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.7.0 (Full)
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Mozilla Firefox 27.0 (x86 pl)" = Mozilla Firefox 27.0 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"RealAlt_is1" = Real Alternative 2.0.1
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WPM" = WPM17.8.0.3297
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 2014-01-15 13:00:57 | Computer Name = OO-73F8BE8FD91A | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca firefox.exe, wersja 26.0.0.5087, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2014-01-18 10:17:15 | Computer Name = OO-73F8BE8FD91A | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd pcsuite.exe, wersja 7.1.180.94, moduł powodujący
błąd qtcore4.dll, wersja 4.7.2.0, adres błędu 0x0005e414.
[ System Events ]
Error - 2014-01-23 14:50:02 | Computer Name = OO-73F8BE8FD91A | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne.
Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu.
Error - 2014-01-23 14:50:02 | Computer Name = OO-73F8BE8FD91A | Source = W32Time | ID = 39452689
Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera
DNS ręcznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi
próbę wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji,
wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751)
Error - 2014-01-23 14:50:02 | Computer Name = OO-73F8BE8FD91A | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne.
Przez 15 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu.
Error - 2014-01-30 15:12:35 | Computer Name = OO-73F8BE8FD91A | Source = W32Time | ID = 39452689
Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera
DNS ręcznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi
próbę wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji,
wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751)
Error - 2014-01-30 15:12:35 | Computer Name = OO-73F8BE8FD91A | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne.
Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu.
Error - 2014-01-30 15:12:35 | Computer Name = OO-73F8BE8FD91A | Source = W32Time | ID = 39452689
Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera
DNS ręcznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi
próbę wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji,
wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751)
Error - 2014-01-30 15:12:35 | Computer Name = OO-73F8BE8FD91A | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne.
Przez 15 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu.
Error - 2014-02-07 14:54:57 | Computer Name = OO-73F8BE8FD91A | Source = W32Time | ID = 39452689
Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera
DNS ręcznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi
próbę wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji,
wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751)
Error - 2014-02-07 14:54:57 | Computer Name = OO-73F8BE8FD91A | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne.
Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu.
Error - 2014-02-10 12:41:56 | Computer Name = OO-73F8BE8FD91A | Source = Cdrom | ID = 262151
Description = W urządzeniu \Device\CdRom0 wystąpił zły blok.
< End of report >
OTL scan
- bajbus
- Posty: 632
- Rejestracja: 22 kwie 2012, 12:10
- Lokalizacja: Działdowo
OTL scan
Logi wrzuciłem na zewnętrzy serwer ale nie mogłem edytować postu założyciela tematu
OTL Dostępne tylko dla zarejestrowanych użytkowników
EXTRAS Dostępne tylko dla zarejestrowanych użytkowników
OTL Dostępne tylko dla zarejestrowanych użytkowników
EXTRAS Dostępne tylko dla zarejestrowanych użytkowników
-
- Reklama
Kto jest online
Użytkownicy przeglądający to forum: Obecnie na forum nie ma żadnego zarejestrowanego użytkownika i 2 gości