Anonim / 5 lat, 7 miesięcy temu | Download | Plaintext | Odpowiedz |

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
OTL logfile created on: 2012-07-26 09:23:31 - Run 1
OTL by OldTimer - Version 3.2.54.1     Folder = C:\Users\Paweł Mortas\Documents
Windows Vista Business Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,99 Gb Total Physical Memory | 1,55 Gb Available Physical Memory | 77,67% Memory free
4,21 Gb Paging File | 3,91 Gb Available in Paging File | 92,97% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 59,62 Gb Total Space | 14,30 Gb Free Space | 23,99% Space Free | Partition Type: NTFS
Drive E: | 58,16 Gb Total Space | 58,06 Gb Free Space | 99,84% Space Free | Partition Type: NTFS
 
Computer Name: ROGER | User Name: Paweł Mortas | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-26 09:20:39 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Paweł Mortas\Documents\OTL.exe
PRC - [2008-10-29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-01-19 09:33:11 | 000,498,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] -- c:\usr/MYSQL/bin/mysqld.exe -- (MySql)
SRV - [2011-10-27 11:34:30 | 000,718,384 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008-10-24 21:56:30 | 000,019,200 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2008-10-24 21:51:16 | 000,468,224 | ---- | M] (ESET) [Auto | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2008-04-24 10:21:56 | 000,099,720 | ---- | M] (Toshiba Europe GmbH) [Auto | Stopped] -- C:\Program Files\Toshiba TEMPRO\TempoSVC.exe -- (TempoMonitoringService)
SRV - [2007-12-03 18:03:52 | 000,126,976 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe -- (TOSHIBA SMART Log Service)
SRV - [2007-04-27 06:21:32 | 000,009,216 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\TAMSvr.exe -- (Authentec memory manager)
SRV - [2007-03-29 10:39:00 | 000,427,576 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV - [2007-02-25 21:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- c:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2006-11-28 09:50:40 | 000,077,824 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files\Toshiba\3GUty\tw3gsvc.exe -- (TW3GSVC)
SRV - [2006-11-14 20:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs)
SRV - [2006-05-25 19:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | Auto | Stopped] -- G:\Portable-VirtualBox\app32\drivers\USB\filter\VBoxUSBMon.sys -- (VBoxUSBMon)
DRV - File not found [Kernel | Auto | Stopped] -- G:\Portable-VirtualBox\app32\drivers\VBoxDrv\VBoxDrv.sys -- (VBoxDRV)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\usbser_lowerflt.sys -- (upperdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\PCASp50.sys -- (PCASp50)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbdev.sys -- (hwusbdev)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2011-07-04 20:58:18 | 000,085,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - [2011-07-04 20:58:18 | 000,072,576 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2011-07-04 20:58:16 | 000,116,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2011-07-04 20:58:16 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2011-07-04 20:58:16 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2010-11-25 06:59:16 | 000,541,800 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RTL8192su.sys -- (RTL8192su)
DRV - [2008-10-24 21:53:28 | 000,034,824 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2008-10-24 21:46:24 | 000,053,256 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\easdrv.sys -- (easdrv)
DRV - [2008-10-24 21:45:32 | 000,039,944 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2008-08-26 11:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-06-06 15:29:52 | 000,037,120 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\gtuqbus.sys -- (GTUQBUS)
DRV - [2008-06-06 15:29:52 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\gtptser.sys -- (GTPTSER)
DRV - [2008-01-19 09:42:12 | 000,045,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tpm.sys -- (TPM)
DRV - [2007-06-11 14:25:28 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2007-06-08 17:45:52 | 000,029,440 | ---- | M] (Alfa Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AlfaFF.sys -- (AlfaFF)
DRV - [2007-06-01 11:27:00 | 000,145,288 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atswpdrv.sys -- (ATSWPDRV)
DRV - [2007-05-30 16:50:54 | 000,092,288 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nwtshser2.sys -- (NWTshPort2)
DRV - [2007-05-30 16:50:54 | 000,092,288 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nwtshser.sys -- (NWTshPort)
DRV - [2007-05-30 16:50:54 | 000,092,288 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nwtshmdm.sys -- (NWTshModem)
DRV - [2007-05-24 14:27:30 | 000,064,000 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2007-04-27 04:09:38 | 002,216,448 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32)
DRV - [2007-04-24 13:20:06 | 000,113,920 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2007-04-13 13:22:56 | 000,228,224 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2007-03-01 16:53:10 | 000,073,728 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2007-01-22 10:43:26 | 000,053,376 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2007-01-18 16:47:18 | 000,211,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10N.sys -- (KR10N)
DRV - [2007-01-18 16:40:56 | 000,219,392 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10I.sys -- (KR10I)
DRV - [2007-01-18 16:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2006-11-20 17:55:16 | 000,036,480 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2006-10-23 16:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2006-10-18 12:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV - [2006-10-10 19:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
DRV - [2006-10-05 22:13:12 | 000,016,768 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ.SYS -- (TVALZ)
DRV - [2006-08-30 10:35:58 | 000,140,800 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2005-01-06 13:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1331794646_476292
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1331794646_476292
IE - HKLM\..\SearchScopes,DefaultScope = {D69F456F-0AAF-40A0-9675-2C442681C83A}
IE - HKLM\..\SearchScopes\{D69F456F-0AAF-40A0-9675-2C442681C83A}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1687602414-887211192-516478698-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1331794646_476292
IE - HKU\S-1-5-21-1687602414-887211192-516478698-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-1687602414-887211192-516478698-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-1687602414-887211192-516478698-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1687602414-887211192-516478698-1000\..\SearchScopes,DefaultScope = {D69F456F-0AAF-40A0-9675-2C442681C83A}
IE - HKU\S-1-5-21-1687602414-887211192-516478698-1000\..\SearchScopes\{D69F456F-0AAF-40A0-9675-2C442681C83A}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;
IE - HKU\S-1-5-21-1687602414-887211192-516478698-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Paweł Mortas\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Paweł Mortas\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fe_7.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0 [2011-12-29 21:59:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\te_7.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_7.0 [2011-12-29 21:59:50 | 000,000,000 | ---D | M]
 
[2012-03-15 08:51:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paweł Mortas\AppData\Roaming\mozilla\Extensions
[2012-03-15 08:51:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paweł Mortas\AppData\Roaming\mozilla\Extensions\{718e30fb-e89b-41dd-9da7-e25a45638b28}
[2008-09-11 16:03:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paweł Mortas\AppData\Roaming\mozilla\eclipse\extensions
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Pawe\u0142 Mortas\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Pawe\u0142 Mortas\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Pawe\u0142 Mortas\AppData\Local\Google\Chrome\Application\20.0.1132.57\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Pawe\u0142 Mortas\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Web Player\npdivx32.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Pawe\u0142 Mortas\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
 
O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Plus Internet] C:\Program Files\Plus Internet\PlusInternetChecker.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [TOSHIBA_3G_UTY] C:\Program Files\TOSHIBA\3GUty\tw3gctrl.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1687602414-887211192-516478698-1000..\Run: []  File not found
O4 - HKU\S-1-5-21-1687602414-887211192-516478698-1000..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
O4 - HKU\S-1-5-21-1687602414-887211192-516478698-1000..\RunOnce: [036DFF98F2781D1600092FBF6C44B0BF] C:\ProgramData\036DFF98F2781D1600092FBF6C44B0BF\036DFF98F2781D1600092FBF6C44B0BF.exe ()
O4 - Startup: C:\Users\Paweł Mortas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\UniSpiker-2.6.lnk =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O7 - HKU\S-1-5-21-1687602414-887211192-516478698-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra Button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/4908-44618-9400-3/4 File not found
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home File not found
O13 - gopher Prefix: missing
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{10D461E3-C543-4703-8481-3A324C1306A4}: DhcpNameServer = 192.168.1.40 192.168.1.30
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2B40FC53-3508-41E1-8100-EC76FCD531F0}: DhcpNameServer = 62.179.1.63 62.179.1.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8C492DC2-4B26-48C1-9D7C-326351D5485D}: DhcpNameServer = 62.179.1.63 62.179.1.62
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Paweł Mortas\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Paweł Mortas\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{030c0d73-21b7-11e0-8306-001e101f79c9}\Shell - "" = AutoRun
O33 - MountPoints2\{030c0d73-21b7-11e0-8306-001e101f79c9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{2770f4e9-e179-11de-ac25-001c7e42b4a8}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\solea.exe
O33 - MountPoints2\{2f463784-0e79-11de-937c-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{2f463784-0e79-11de-937c-806e6f6e6963}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{51339958-c3e4-11df-beb8-001c7e42b4a8}\Shell - "" = AutoRun
O33 - MountPoints2\{51339958-c3e4-11df-beb8-001c7e42b4a8}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{562047ce-c4cd-11df-bf08-001e101f1f81}\Shell - "" = AutoRun
O33 - MountPoints2\{562047ce-c4cd-11df-bf08-001e101f1f81}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{97c4ca72-c877-11df-a8b0-001e101f3315}\Shell - "" = Autorun
O33 - MountPoints2\{97c4ca72-c877-11df-a8b0-001e101f3315}\Shell\AutoRun\command - "" = H:\Install_Nokia_Ovi_Suite.exe
O33 - MountPoints2\{bf749d70-862f-11dd-b4d6-001c7e42b4a8}\Shell - "" = AutoRun
O33 - MountPoints2\{bf749d70-862f-11dd-b4d6-001c7e42b4a8}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{c663a2ab-fa33-11de-a4ed-00215c14bf01}\Shell\AutoRun\command - "" = G:\SamsungSoftware\APPInst.exe
O33 - MountPoints2\{e4344023-2f1d-11e1-a8e0-00215c14bf01}\Shell - "" = AutoRun
O33 - MountPoints2\{e4344023-2f1d-11e1-a8e0-00215c14bf01}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{e4344030-2f1d-11e1-a8e0-001c7e42b4a8}\Shell - "" = AutoRun
O33 - MountPoints2\{e4344030-2f1d-11e1-a8e0-001c7e42b4a8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{eafadf22-4c25-11e1-b3de-00215c14bf01}\Shell - "" = AutoRun
O33 - MountPoints2\{eafadf22-4c25-11e1-b3de-00215c14bf01}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{f9942e5e-c3e1-11df-bd2c-00215c14bf01}\Shell - "" = AutoRun
O33 - MountPoints2\{f9942e5e-c3e1-11df-bd2c-00215c14bf01}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-26 09:20:36 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Paweł Mortas\Documents\OTL.exe
[2012-07-25 22:16:14 | 000,000,000 | ---D | C] -- C:\Users\Paweł Mortas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum
[2012-07-25 22:13:52 | 000,000,000 | ---D | C] -- C:\ProgramData\036DFF98F2781D1600092FBF6C44B0BF
[2012-07-21 18:34:22 | 000,000,000 | -HSD | C] -- C:\found.000
[2012-07-17 13:03:30 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2012-07-16 12:13:35 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-26 09:20:39 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Paweł Mortas\Documents\OTL.exe
[2012-07-26 09:07:28 | 000,671,154 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-07-26 09:07:28 | 000,595,386 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-07-26 09:07:28 | 000,129,932 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-07-26 09:07:28 | 000,103,460 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-07-26 09:03:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-07-25 22:33:08 | 000,003,552 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-07-25 22:33:08 | 000,003,552 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-07-25 22:30:00 | 000,001,086 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1687602414-887211192-516478698-1000UA.job
[2012-07-25 22:21:21 | 000,196,608 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2012-07-25 22:16:14 | 000,001,983 | ---- | M] () -- C:\Users\Paweł Mortas\Desktop\Live Security Platinum.lnk
[2012-07-21 18:38:54 | 000,020,992 | ---- | M] () -- C:\Users\Paweł Mortas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-07-17 21:11:53 | 275,238,199 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012-07-17 13:30:00 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1687602414-887211192-516478698-1000Core.job
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-25 22:16:14 | 000,001,983 | ---- | C] () -- C:\Users\Paweł Mortas\Desktop\Live Security Platinum.lnk
[2012-07-25 22:12:56 | 000,019,968 | ---- | C] () -- C:\Windows\Installer\{2d645617-10fa-319e-cbee-5f70cf2d7f5a}\U\800000cb.@
[2012-07-25 22:12:53 | 000,013,312 | ---- | C] () -- C:\Windows\Installer\{2d645617-10fa-319e-cbee-5f70cf2d7f5a}\U\80000000.@
[2012-07-25 22:12:53 | 000,001,712 | ---- | C] () -- C:\Windows\Installer\{2d645617-10fa-319e-cbee-5f70cf2d7f5a}\U\00000001.@
[2012-05-23 18:20:05 | 000,000,680 | ---- | C] () -- C:\Users\Paweł Mortas\AppData\Local\d3d9caps.dat
[2012-04-05 23:33:14 | 000,000,126 | ---- | C] () -- C:\Windows\Historia.ini
[2012-03-17 22:23:08 | 000,000,272 | ---- | C] () -- C:\Windows\System32\Kolor2.ini
[2012-03-17 22:23:08 | 000,000,272 | ---- | C] () -- C:\Windows\System32\Kolor.ini
[2012-03-17 22:23:08 | 000,000,018 | ---- | C] () -- C:\Windows\Prog2.ini
[2012-03-17 22:23:08 | 000,000,000 | ---- | C] () -- C:\Windows\System32\Kolor3.ini
[2012-03-17 22:19:04 | 000,000,075 | ---- | C] () -- C:\Windows\Ustawienia.ini
[2012-03-17 22:18:24 | 000,000,013 | ---- | C] () -- C:\Windows\Prog1.ini
[2012-03-17 20:50:44 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011-12-27 21:29:40 | 000,002,048 | -HS- | C] () -- C:\Windows\Installer\{2d645617-10fa-319e-cbee-5f70cf2d7f5a}\@
[2011-12-27 21:29:40 | 000,002,048 | -HS- | C] () -- C:\Users\Paweł Mortas\AppData\Local\{2d645617-10fa-319e-cbee-5f70cf2d7f5a}\@
[2010-09-25 09:40:45 | 000,000,000 | ---- | C] () -- C:\Windows\tosOBEX.INI
[2008-12-28 22:23:20 | 005,285,241 | ---- | C] (                                                            ) -- C:\Users\Paweł Mortas\iplus_manager_2_0.exe
[2008-12-27 14:59:20 | 000,020,992 | ---- | C] () -- C:\Users\Paweł Mortas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-11-12 22:59:40 | 000,408,985 | ---- | C] () -- C:\Users\Paweł Mortas\Ford Mustang Shelby GT [_wmv].mht
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-09-24 21:55:23 | 000,000,000 | ---D | M] -- C:\Users\Pawe³ Mortas\AppData\Roaming\Nokia
[2012-03-17 21:51:50 | 000,000,000 | ---D | M] -- C:\Users\Paweł Mortas\AppData\Roaming\BESTplayer
[2012-03-19 22:19:27 | 000,000,000 | ---D | M] -- C:\Users\Paweł Mortas\AppData\Roaming\BSplayer
[2012-03-17 22:48:42 | 000,000,000 | ---D | M] -- C:\Users\Paweł Mortas\AppData\Roaming\BSplayer Pro
[2008-10-11 22:48:06 | 000,000,000 | ---D | M] -- C:\Users\Paweł Mortas\AppData\Roaming\InterVideo
[2008-09-11 16:02:27 | 000,000,000 | ---D | M] -- C:\Users\Paweł Mortas\AppData\Roaming\Lotus
[2010-09-24 22:34:50 | 000,000,000 | ---D | M] -- C:\Users\Paweł Mortas\AppData\Roaming\PC Suite
[2011-12-25 19:40:32 | 000,000,000 | ---D | M] -- C:\Users\Paweł Mortas\AppData\Roaming\Plus Internet
[2009-03-10 01:26:51 | 000,000,000 | ---D | M] -- C:\Users\Paweł Mortas\AppData\Roaming\Toshiba
[2012-07-25 22:30:05 | 000,032,548 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >