API tools faq
paste
Guest User

Untitled

a guest
Oct 24th, 2013
45
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.61 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2013-10-25 00:39:59 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = F:\Serwis\Serwis
  3. Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.6001.18702)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 1023,48 Mb Total Physical Memory | 619,24 Mb Available Physical Memory | 60,50% Memory free
  8. 2,40 Gb Paging File | 2,15 Gb Available in Paging File | 89,30% Paging File free
  9. Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
  12. Drive C: | 25,69 Gb Total Space | 13,15 Gb Free Space | 51,18% Space Free | Partition Type: NTFS
  13. Drive D: | 48,83 Gb Total Space | 2,24 Gb Free Space | 4,59% Space Free | Partition Type: NTFS
  14. Drive E: | 200,25 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
  15. Drive F: | 1,92 Gb Total Space | 0,83 Gb Free Space | 43,18% Space Free | Partition Type: FAT
  16.  
  17. Computer Name: MARTYKA-82152A8 | User Name: Kasia | Logged in as Administrator.
  18. Boot Mode: Normal | Scan Mode: All users
  19. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  20.  
  21. [color=#E56717]========== Processes (SafeList) ==========[/color]
  22.  
  23. PRC - [2013-10-24 23:23:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- F:\Serwis\Serwis\OTL.exe
  24. PRC - [2013-08-30 09:47:34 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  25. PRC - [2013-08-30 09:47:33 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  26. PRC - [2013-06-06 21:50:04 | 000,181,664 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
  27. PRC - [2013-06-03 21:50:26 | 000,577,536 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe
  28. PRC - [2013-03-12 07:32:58 | 000,506,744 | ---- | M] (Oracle Corporation) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
  29. PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
  30.  
  31.  
  32. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  33.  
  34. MOD - [2013-10-24 20:15:02 | 002,105,856 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13102400\algo.dll
  35. MOD - [2013-09-03 15:54:22 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL
  36. MOD - [2011-03-17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
  37.  
  38.  
  39. [color=#E56717]========== Services (SafeList) ==========[/color]
  40.  
  41. SRV - [2013-10-12 22:14:09 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  42. SRV - [2013-08-30 09:47:33 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  43. SRV - [2013-06-06 21:50:04 | 000,181,664 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
  44. SRV - [2012-09-20 13:28:48 | 030,785,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
  45.  
  46.  
  47. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  48.  
  49. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
  50. DRV - File not found [Kernel | Boot | Stopped] -- -- (viaxbus)
  51. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
  52. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
  53. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
  54. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
  55. DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
  56. DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
  57. DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
  58. DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
  59. DRV - [2013-08-30 09:48:13 | 000,369,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
  60. DRV - [2013-08-30 09:48:13 | 000,177,864 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
  61. DRV - [2013-08-30 09:48:13 | 000,056,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
  62. DRV - [2013-08-30 09:48:12 | 000,770,344 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
  63. DRV - [2013-08-30 09:48:12 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (AswRdr)
  64. DRV - [2013-08-30 09:48:12 | 000,049,376 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
  65. DRV - [2013-08-30 09:48:11 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
  66. DRV - [2013-08-30 09:48:11 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
  67. DRV - [2013-06-03 21:50:23 | 004,027,456 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM)
  68. DRV - [2008-05-02 08:49:00 | 000,094,208 | ---- | M] (VIA Technologies inc,.ltd) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\viaxraid.sys -- (viaxraid)
  69. DRV - [2008-05-02 08:48:55 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112)
  70. DRV - [2006-05-03 18:50:42 | 001,540,608 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
  71.  
  72.  
  73. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  74.  
  75.  
  76. [color=#E56717]========== Internet Explorer ==========[/color]
  77.  
  78. IE - HKLM\..\SearchScopes,DefaultScope =
  79. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  80. IE - HKLM\..\SearchScopes\{DE73FB55-BC82-4975-AF9D-91E2C82ADF6B}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  81.  
  82.  
  83. IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  84. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
  85. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  86.  
  87. IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  88. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
  89. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  90.  
  91. IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  92. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
  93.  
  94. IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  95. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
  96.  
  97. IE - HKU\S-1-5-21-1390067357-562591055-1644491937-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/
  98. IE - HKU\S-1-5-21-1390067357-562591055-1644491937-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  99. IE - HKU\S-1-5-21-1390067357-562591055-1644491937-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  100. IE - HKU\S-1-5-21-1390067357-562591055-1644491937-1003\..\SearchScopes\{DE73FB55-BC82-4975-AF9D-91E2C82ADF6B}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  101. IE - HKU\S-1-5-21-1390067357-562591055-1644491937-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  102.  
  103.  
  104. [color=#E56717]========== FireFox ==========[/color]
  105.  
  106. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
  107. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  108. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  109. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  110. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  111.  
  112.  
  113. [2013-09-20 16:09:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
  114.  
  115. O1 HOSTS File: ([2001-10-26 17:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
  116. O1 - Hosts: 127.0.0.1 localhost
  117. O2 - BHO: (IE7Pro BHO) - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
  118. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
  119. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  120. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  121. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
  122. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  123. O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  124. O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll ()
  125. O3 - HKU\S-1-5-21-1390067357-562591055-1644491937-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
  126. O3 - HKU\S-1-5-21-1390067357-562591055-1644491937-1003\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll ()
  127. O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
  128. O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
  129. O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
  130. O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
  131. O4 - HKU\S-1-5-19..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
  132. O4 - HKU\S-1-5-20..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
  133. O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  134. O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  135. O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  136. O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  137. O7 - HKU\S-1-5-21-1390067357-562591055-1644491937-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  138. O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
  139. O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  140. O9 - Extra Button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
  141. O9 - Extra 'Tools' menuitem : IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
  142. O9 - Extra Button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
  143. O9 - Extra 'Tools' menuitem : IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
  144. O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  145. O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  146. O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  147. O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  148. O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
  149. O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} http://game.zylom.com/activex/zylomgamesplayer.cab (Zylom Games Player)
  150. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  151. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5DA0D30E-6C1F-4847-9261-EFE8CBEEEB29}: DhcpNameServer = 192.168.1.1
  152. O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  153. O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
  154. O20 - HKU\S-1-5-21-1390067357-562591055-1644491937-1003 Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  155. O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
  156. O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
  157. O24 - Desktop WallPaper: C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
  158. O24 - Desktop BackupWallPaper: C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
  159. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
  160. O32 - HKLM CDRom: AutoRun - 1
  161. O32 - AutoRun File - [2013-06-02 23:06:42 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
  162. O32 - AutoRun File - [2012-11-18 23:23:26 | 000,000,016 | -H-- | M] () - F:\AUTORUN.INF -- [ FAT ]
  163. O33 - MountPoints2\{b1ac8ee1-ce20-11e2-853b-00115b4a7ead}\Shell - "" = AutoRun
  164. O33 - MountPoints2\{b1ac8ee1-ce20-11e2-853b-00115b4a7ead}\Shell\AutoRun\command - "" = G:\Autorun.exe
  165. O34 - HKLM BootExecute: (autocheck autochk *)
  166. O35 - HKLM\..comfile [open] -- "%1" %*
  167. O35 - HKLM\..exefile [open] -- "%1" %*
  168. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  169. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  170. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  171. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  172.  
  173. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  174.  
  175. [2013-10-25 00:36:08 | 000,000,000 | ---D | C] -- C:\FRST
  176. [2013-10-24 23:42:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Pulpit\Serwis
  177. [2013-10-24 22:49:40 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
  178. [2013-10-24 20:18:09 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
  179. [2013-10-24 20:08:59 | 000,000,000 | -HSD | C] -- C:\found.000
  180. [2013-10-15 09:40:39 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidparse.sys
  181. [2013-10-15 09:40:39 | 000,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys
  182. [2013-10-15 09:38:00 | 000,032,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbccgp.sys
  183. [2013-10-15 09:38:00 | 000,005,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbd.sys
  184. [2013-10-15 09:37:59 | 000,144,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbport.sys
  185. [2013-10-15 09:37:59 | 000,030,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbehci.sys
  186. [2013-10-12 23:37:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Kasia\Recent
  187. [2013-10-12 22:15:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Dane aplikacji\Malwarebytes
  188. [2013-10-12 22:15:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
  189. [2013-10-12 19:24:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
  190. [2013-10-11 22:58:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner
  191. [2013-10-11 22:57:56 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
  192. [2013-09-26 10:10:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Temp
  193. [2013-09-26 10:10:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Adobe
  194. [2013-09-25 09:44:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Dane aplikacji\Google
  195. [2013-09-25 09:37:07 | 000,000,000 | ---D | C] -- C:\Program Files\Google
  196. [2013-09-25 09:37:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kasia\Ustawienia lokalne\Dane aplikacji\Google
  197. [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  198.  
  199. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  200.  
  201. [2013-10-25 00:22:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  202. [2013-10-24 22:44:47 | 000,000,316 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
  203. [2013-10-24 22:43:05 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  204. [2013-10-24 22:43:02 | 1073,270,784 | -HS- | M] () -- C:\hiberfil.sys
  205. [2013-10-23 23:15:44 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
  206. [2013-10-23 21:53:35 | 524,288,000 | ---- | M] () -- C:\REMOVE_THIS_FILE.livecd.swap
  207. [2013-10-22 08:36:59 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
  208. [2013-10-16 15:46:24 | 000,273,376 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
  209. [2013-10-15 10:32:21 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
  210. [2013-10-12 23:40:02 | 000,000,065 | ---- | M] () -- C:\Documents and Settings\Kasia\Dane aplikacji\burnaware.ini
  211. [2013-10-12 23:39:45 | 000,000,735 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\BurnAware Free.lnk
  212. [2013-10-12 23:37:34 | 000,002,168 | ---- | M] () -- C:\Documents and Settings\Kasia\Moje dokumenty\cc_20131011_225911.reg
  213. [2013-10-12 22:14:07 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
  214. [2013-10-12 22:14:07 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
  215. [2013-10-11 21:04:39 | 000,000,004 | ---- | M] () -- C:\Documents and Settings\Kasia\Dane aplikacji\settings.ini
  216. [2013-09-25 09:22:53 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
  217. [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  218.  
  219. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  220.  
  221. [2013-10-24 22:43:02 | 1073,270,784 | -HS- | C] () -- C:\hiberfil.sys
  222. [2013-10-23 23:15:44 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
  223. [2013-10-23 21:52:35 | 524,288,000 | ---- | C] () -- C:\REMOVE_THIS_FILE.livecd.swap
  224. [2013-10-15 10:25:16 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK
  225. [2013-10-11 22:59:13 | 000,002,168 | ---- | C] () -- C:\Documents and Settings\Kasia\Moje dokumenty\cc_20131011_225911.reg
  226. [2013-10-05 00:14:37 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\Kasia\Dane aplikacji\settings.ini
  227. [2013-06-28 08:23:52 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys.sum
  228. [2013-06-27 09:39:58 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSP.sys.sum
  229. [2013-06-27 09:39:58 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSnx.sys.sum
  230. [2013-06-05 22:50:48 | 000,000,065 | ---- | C] () -- C:\Documents and Settings\Kasia\Dane aplikacji\burnaware.ini
  231. [2013-06-05 22:45:10 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
  232. [2013-06-05 22:45:10 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
  233. [2013-06-05 22:45:10 | 000,216,064 | ---- | C] ( ) -- C:\WINDOWS\System32\lagarith.dll
  234. [2013-06-05 22:45:07 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
  235. [2013-06-05 22:44:59 | 000,112,640 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
  236. [2013-06-03 23:16:19 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
  237. [2013-06-03 22:58:31 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
  238. [2013-06-03 22:41:45 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI
  239. [2013-06-03 21:57:18 | 000,177,864 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
  240. [2013-06-03 21:57:18 | 000,049,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
  241. [2013-06-03 21:52:08 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
  242. [2013-06-03 21:51:29 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
  243. [2013-06-03 21:51:13 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
  244. [2013-06-03 00:59:13 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
  245. [2013-06-03 00:56:09 | 000,273,376 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
  246. [2013-06-02 23:07:45 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  247. [2013-06-02 23:06:50 | 000,050,105 | ---- | C] () -- C:\WINDOWS\activ.exe
  248. [2013-06-02 23:02:55 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
  249.  
  250. [color=#E56717]========== ZeroAccess Check ==========[/color]
  251.  
  252.  
  253. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  254.  
  255. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  256.  
  257. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  258. "" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-14 22:50:48 | 001,499,136 | ---- | M] (Microsoft Corporation)
  259. "ThreadingModel" = Apartment
  260.  
  261. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  262. "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
  263. "ThreadingModel" = Free
  264.  
  265. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  266. "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 22:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
  267. "ThreadingModel" = Both
  268.  
  269. [color=#E56717]========== LOP Check ==========[/color]
  270.  
  271. [2013-06-03 21:19:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
  272. [2013-06-05 23:01:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
  273. [2013-07-17 13:09:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Zylom
  274. [2013-10-11 22:58:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kasia\Dane aplikacji\DAEMON Tools Lite
  275. [2013-06-05 22:51:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kasia\Dane aplikacji\GrabPro
  276. [2013-06-05 22:53:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kasia\Dane aplikacji\IEPro
  277. [2013-09-19 15:27:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kasia\Dane aplikacji\MiniDm
  278.  
  279. [color=#E56717]========== Purity Check ==========[/color]
  280.  
  281.  
  282.  
  283. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!