Otóż w innym temacie dotyczącym innego problemu ktoś poprosił mnie o log OTL, (ale i tak chyba nie odegrał większej roli [ten log]) no i ktoś inny poradził mi z tym logiem iść do działu Bezpieczeństwo i założyć właśnie taki temat. Sam też zauważyłem jakieś dziwne toolbary które sam nie wiem kiedy mi się zainstalowały. (pewnie podczas instalacji innych rzeczy czegoś nie odznaczyłem)
To jest ten log:
OTL logfile created on: 2013-01-16 14:38:16 - Run 1
OTL by OldTimer - Version 3.2.48.0 Folder = C:\Users\GOKOP\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
3,00 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 56,90% Memory free
6,19 Gb Paging File | 4,86 Gb Available in Paging File | 78,45% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 279,46 Gb Total Space | 147,85 Gb Free Space | 52,91% Space Free | Partition Type: NTFS
Drive D: | 186,30 Gb Total Space | 148,18 Gb Free Space | 79,54% Space Free | Partition Type: NTFS
Drive F: | 38,28 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: KOMPUTER_GOKOPA | User Name: GOKOP | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2012-11-30 03:06:58 | 001,263,512 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2012-10-30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012-10-30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012-10-21 09:46:36 | 000,197,152 | ---- | M] (PC Utilities Pro) -- C:\Program Files\Optimizer Pro\OptProSmartScan.exe
PRC - [2012-10-21 09:46:16 | 000,218,144 | ---- | M] (PC Utilities Pro) -- C:\Program Files\Optimizer Pro\OptProReminder.exe
PRC - [2012-10-04 16:34:36 | 000,115,032 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe
PRC - [2012-09-19 15:50:47 | 000,233,472 | ---- | M] () -- C:\ProgramData\Premium\VaudiX\VaudiX.exe
PRC - [2012-08-23 14:40:04 | 000,188,760 | ---- | M] () -- C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
PRC - [2012-08-16 12:44:18 | 000,362,104 | ---- | M] () -- C:\Windows\System32\dmwu.exe
PRC - [2012-08-15 19:08:34 | 000,231,768 | ---- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
PRC - [2012-07-09 20:55:03 | 000,038,408 | ---- | M] (MyWebSearch.com) -- C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
PRC - [2012-07-09 20:55:03 | 000,034,336 | ---- | M] (MyWebSearch.com) -- C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
PRC - [2012-07-09 20:55:03 | 000,034,320 | ---- | M] (MyWebSearch.com) -- C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE
PRC - [2012-06-26 21:15:25 | 000,114,688 | ---- | M] () -- C:\Program Files\PLAY ONLINE\PLAY ONLINE.exe
PRC - [2012-06-12 16:26:50 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\GOKOP\Desktop\OTL.exe
PRC - [2012-04-04 14:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- D:\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012-03-21 18:07:53 | 000,172,664 | ---- | M] (http://www.express-files.com/) -- C:\Program Files\ExpressFiles\EFupdater.exe
PRC - [2012-03-21 18:07:52 | 000,453,240 | ---- | M] (http://www.express-files.com/) -- C:\Program Files\ExpressFiles\ExpressFiles.exe
PRC - [2012-02-28 17:38:52 | 001,373,576 | ---- | M] (LogMeIn Inc.) -- D:\Hamahi\hamachi-2.exe
PRC - [2011-01-17 17:01:46 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2011-01-17 17:01:46 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2010-11-16 14:37:38 | 000,264,704 | ---- | M] () -- C:\ProgramData\DatacardService\HWDeviceService.exe
PRC - [2010-11-16 14:37:30 | 000,230,912 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe
PRC - [2009-10-30 12:57:08 | 000,369,200 | ---- | M] (DT Soft Ltd) -- D:\DAEMON Tools Lite\DTLite.exe
PRC - [2009-07-30 11:45:20 | 000,497,024 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDCtrl.exe
PRC - [2009-07-23 13:49:16 | 001,033,448 | ---- | M] (SRS Labs, Inc.) -- C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe
PRC - [2009-04-14 20:28:46 | 000,110,592 | R--- | M] (Huawei Technologies Co., Ltd.) -- C:\Users\GOKOP\AppData\Roaming\PLAY ONLINE\ouc.exe
PRC - [2008-10-29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-01-21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2012-11-30 03:07:48 | 000,100,248 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2012-11-30 03:06:58 | 001,263,512 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2012-06-26 21:15:25 | 000,114,688 | ---- | M] () -- C:\Program Files\PLAY ONLINE\PLAY ONLINE.exe
MOD - [2012-04-09 14:47:23 | 000,985,088 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2011-07-18 22:04:08 | 000,296,448 | ---- | M] () -- D:\Notepad++\NppShell_04.dll
MOD - [2009-12-10 10:52:38 | 000,192,512 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DeviceMgrUIPlugin.dll
MOD - [2009-12-10 10:51:36 | 000,114,688 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DeviceMgrPlugin.dll
MOD - [2009-12-10 10:40:20 | 000,991,232 | ---- | M] () -- C:\Program Files\PLAY ONLINE\NDISAPI.dll
MOD - [2009-10-13 08:28:42 | 000,159,744 | ---- | M] () -- C:\Program Files\PLAY ONLINE\SMSPlugin.dll
MOD - [2009-10-13 08:28:42 | 000,061,440 | ---- | M] () -- C:\Program Files\PLAY ONLINE\XCodec.dll
MOD - [2009-10-13 08:28:40 | 000,557,056 | ---- | M] () -- C:\Program Files\PLAY ONLINE\atcomm.dll
MOD - [2009-10-13 08:28:40 | 000,155,648 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DetectDev.dll
MOD - [2009-10-13 08:28:40 | 000,139,264 | ---- | M] () -- C:\Program Files\PLAY ONLINE\LocaleMgrPlugin.dll
MOD - [2009-10-13 08:28:40 | 000,090,112 | ---- | M] () -- C:\Program Files\PLAY ONLINE\FileManager.dll
MOD - [2009-10-13 08:28:40 | 000,090,112 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DialUpPlugin.dll
MOD - [2009-10-13 08:28:40 | 000,061,440 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DeviceOperate.dll
MOD - [2009-10-13 08:28:40 | 000,057,344 | ---- | M] () -- C:\Program Files\PLAY ONLINE\ConfigFilePlugin.dll
MOD - [2009-10-13 08:28:40 | 000,032,768 | ---- | M] () -- C:\Program Files\PLAY ONLINE\NotifyServicePlugin.dll
MOD - [2009-10-13 08:28:40 | 000,014,848 | ---- | M] () -- C:\Program Files\PLAY ONLINE\isaputrace.dll
MOD - [2009-09-19 10:21:06 | 000,139,264 | ---- | M] () -- C:\Program Files\PLAY ONLINE\NetInfoPlugin.dll
MOD - [2008-07-24 21:51:32 | 000,299,008 | ---- | M] () -- D:\IconChanger\IconChng.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2013-01-09 15:04:05 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-10-30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012-08-23 14:40:04 | 000,188,760 | ---- | M] () [Auto | Running] -- C:\Program Files\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater)
SRV - [2012-08-16 12:44:18 | 000,362,104 | ---- | M] () [Auto | Running] -- C:\Windows\System32\dmwu.exe -- (WebOptimizer)
SRV - [2012-07-13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-07-09 20:55:03 | 000,034,320 | ---- | M] (MyWebSearch.com) [Auto | Running] -- C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE -- (MyWebSearchService)
SRV - [2012-04-04 14:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- D:\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012-02-28 17:38:52 | 001,373,576 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- D:\Hamahi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2010-11-16 14:37:38 | 000,264,704 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\HWDeviceService.exe -- (HWDeviceService.exe)
SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (aav8qiax)
DRV - [2012-10-30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012-10-30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012-10-30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012-10-30 23:51:58 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2012-10-30 23:51:57 | 000,058,680 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2012-10-30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012-05-29 08:03:47 | 000,229,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\VMM.sys -- (vmm)
DRV - [2012-04-04 14:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012-03-12 19:01:03 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2011-12-19 14:12:00 | 000,104,752 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2011-12-19 14:11:58 | 000,158,512 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\VBoxDrv.sys -- (VBoxDrv)
DRV - [2011-12-19 14:11:58 | 000,116,016 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VBoxNetFlt.sys -- (VBoxNetFlt)
DRV - [2011-12-19 14:11:58 | 000,091,440 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\VBoxUSBMon.sys -- (VBoxUSBMon)
DRV - [2011-12-19 14:11:58 | 000,082,736 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VBoxUSB.sys -- (VBoxUSB)
DRV - [2010-10-09 13:48:36 | 000,072,576 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2010-08-27 12:53:46 | 000,116,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2010-08-07 16:48:42 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010-07-27 08:52:02 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2009-09-05 13:25:36 | 001,183,744 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009-07-27 08:12:26 | 000,050,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C60x86.sys -- (L1C)
DRV - [2009-07-01 23:59:00 | 009,786,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009-06-06 04:57:26 | 000,064,544 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008-12-24 09:39:44 | 000,014,392 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2008-11-03 08:03:28 | 000,013,880 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2008-08-11 03:14:12 | 001,752,704 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2008-02-05 01:50:44 | 000,059,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VMNetSrv.sys -- (VPCNetS2)
DRV - [2006-11-02 08:41:49 | 001,010,560 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.just-browse.info/
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZCxdm941YYPL&ptnrS=ZCxdm941YYPL&si=82051606&ptb=UPLB_XpODdcd25qnytpzGQ&ind=2012070915&n=77edc403&psa=&st=sb&searchfor={searchTerms}
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.just-browse.info/?l=1&q={searchTerms}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_Prot
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com)
IE - HKCU\..\SearchScopes,DefaultScope = {56256A51-B582-467e-B8D4-7786EDA79AE0}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://isearch.babylon.com/web/{searchTerms}?babsrc=browsersearch&babsrc=SP_ss&mntrId=2cf39dfc000000000000001e101fb45e
IE - HKCU\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZCxdm941YYPL&ptnrS=ZCxdm941YYPL&si=82051606&ptb=UPLB_XpODdcd25qnytpzGQ&ind=2012070915&n=77edc403&psa=&st=sb&searchfor={searchTerms}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKCU\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.just-browse.info/?l=1&q={searchTerms}
IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb165/?search={searchTerms}&loc=IB_DS&a=6R8EWYGBIw&i=26
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: "WebSearch"
FF - prefs.js..browser.search.defaultenginename,S: S", "WebSearch"
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: "http://websearch.just-browse.info/?l=1&q="
FF - prefs.js..browser.search.order.1: "WebSearch"
FF - prefs.js..browser.search.order.1,S: S", "WebSearch"
FF - prefs.js..browser.search.selectedEngine: "WebSearch"
FF - prefs.js..browser.search.selectedEngine,S: S", "WebSearch"
FF - prefs.js..browser.startup.homepage: "http://websearch.just-browse.info/"
FF - prefs.js..keyword.URL: "http://websearch.just-browse.info/?l=1&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin: C:\Program Files\MyWebSearch\bar\1.bin\NPMyWebS.dll (MyWebSearch.com)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\GOKOP\AppData\Local\Google\Update\1.3.21.129\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\GOKOP\AppData\Local\Google\Update\1.3.21.129\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\GOKOP\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\1.bin [2012-07-09 20:55:16 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-12-04 19:07:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox [2012-09-12 14:49:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-01-09 14:33:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: D:\Firefox\components [2012-09-24 07:15:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: D:\Firefox\plugins [2013-01-09 14:33:54 | 000,000,000 | ---D | M]
[2012-06-20 12:09:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\GOKOP\AppData\Roaming\mozilla\Extensions
[2013-01-15 17:25:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\GOKOP\AppData\Roaming\mozilla\Firefox\Profiles\3asc3b3a.default\extensions
[2013-01-12 19:47:16 | 000,000,000 | ---D | M] (Vaudix) -- C:\Users\GOKOP\AppData\Roaming\mozilla\Firefox\Profiles\3asc3b3a.default\extensions\50ed73416ce51@50ed73416ce8a.com
[2012-11-22 16:08:59 | 000,000,000 | ---D | M] ("Giant Savings") -- C:\Users\GOKOP\AppData\Roaming\mozilla\Firefox\Profiles\3asc3b3a.default\extensions\crossriderapp4479@crossrider.com
[2012-09-12 14:49:29 | 000,000,000 | ---D | M] (incredibar.com) -- C:\Users\GOKOP\AppData\Roaming\mozilla\Firefox\Profiles\3asc3b3a.default\extensions\ffxtlbr@incredibar.com
[2012-09-12 20:21:59 | 000,000,000 | ---D | M] (softonic.com) -- C:\Users\GOKOP\AppData\Roaming\mozilla\Firefox\Profiles\3asc3b3a.default\extensions\ffxtlbra@softonic.com
[2012-07-09 20:55:16 | 000,000,000 | ---D | M] (My Web Search) -- C:\Users\GOKOP\AppData\Roaming\mozilla\Firefox\Profiles\3asc3b3a.default\extensions\m3ffxtbr@mywebsearch.com
[2012-11-22 16:08:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\GOKOP\AppData\Roaming\mozilla\Firefox\Profiles\3asc3b3a.default\extensions\crossriderapp4479@crossrider.com\chrome\content\extensionCode
[2012-09-12 14:48:57 | 000,002,203 | ---- | M] () -- C:\Users\GOKOP\AppData\Roaming\Mozilla\Firefox\Profiles\3asc3b3a.default\searchplugins\MyStart Search.xml
[2013-01-15 17:25:34 | 000,003,915 | ---- | M] () -- C:\Users\GOKOP\AppData\Roaming\Mozilla\Firefox\Profiles\3asc3b3a.default\searchplugins\sweetim.xml
[2013-01-09 14:19:51 | 000,000,556 | ---- | M] () -- C:\Users\GOKOP\AppData\Roaming\Mozilla\Firefox\Profiles\3asc3b3a.default\searchplugins\WebSearch.xml
[2012-12-04 19:07:28 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2013-01-09 14:33:55 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 <video>) -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
[2012-06-20 12:09:50 | 000,000,000 | ---D | M] (General Crawler) -- C:\USERS\GOKOP\APPDATA\ROAMING\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\GENCRAWLER@SOME.COM
[2013-01-15 17:25:25 | 000,189,829 | ---- | M] () (No name found) -- C:\USERS\GOKOP\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3ASC3B3A.DEFAULT\EXTENSIONS\{EEE6C361-6118-11DC-9C72-001320C79847}.XPI
[color=#E56717]========== Chrome ==========[/color]
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciaaiedhdplbckgciamhkoejibpoegke\1.6_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehknjjjkenaongfjojcaajckopoccmg\1_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_1\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\iooicodkiihhpojmmeghjclgihfjdjhj\8.3354.571.444_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcfejfmpolpnopihlomibjllpdpiihem\1.1.0.26_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcfejfmpolpnopihlomibjllpdpiihem\1.1.0.26_0\.svn\text-base\.svn-base
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmaclpniceojefpfgmfadepngamfdnal\1.0_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbabekkfpflhcjloafdefkdaodnefljp\1\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncinafjlmkknejlbfpolhbcableedjif\4.3_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.2_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_1\
CHR - Extension: No name found = C:\Users\GOKOP\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2012-06-28 19:21:01 | 000,000,939 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 74.125.232.248 nk.pl/#aplikacje/modnisia
O1 - Hosts: 74.125.232.248 www.nk.pl/#aplikacje/modnisia
O1 - Hosts: 74.125.232.248 www.nk.pl/#aplikacje/slubmarzen
O1 - Hosts: 74.125.232.248 nk.pl/#aplikacje/slubmarzen
O2 - BHO: (MyWebSearch Search Assistant BHO) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com)
O2 - BHO: (mwsBar BHO) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com)
O2 - BHO: (Giant Savings) - {11111111-1111-1111-1111-110011441179} - C:\Program Files\Giant Savings\Giant Savings.dll (215 Apps)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll ()
O2 - BHO: (Vaudix) - {6E0968B7-C737-4C1D-5AF6-05F41D7868B3} - C:\ProgramData\Vaudix\50ed73416cfbb.dll ()
O2 - BHO: (Incredibar.com Helper Object) - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Help the General-Search Project) - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Users\GOKOP\AppData\Roaming\MEDIAF~1\EXTENS~1\GENCRA~1.DLL ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Softonic Helper Object) - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files\Softonic\Softonic\1.6.7.4\bh\Softonic.dll (Softonic.com)
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com)
O3 - HKLM\..\Toolbar: (Softonic Toolbar) - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files\Softonic\Softonic\1.6.7.4\SoftonicTlbr.dll (Softonic.com)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
O3 - HKCU\..\Toolbar\WebBrowser: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe ()
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [ExpressFiles] C:\Program Files\ExpressFiles\ExpressFiles.exe (http://www.express-files.com/)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] D:\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [My Web Search Bar Search Scope Monitor] C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (MyWebSearch.com)
O4 - HKLM..\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [ALLUpdate] "D:\ALLPlayer\ALLUpdate.exe" "sleep" File not found
O4 - HKCU..\Run: [DAEMON Tools Lite] D:\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent File not found
O4 - HKCU..\Run: [EADM] D:\Nowy folder\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [HW_OPENEYE_OUC_PLAY ONLINE] C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - HKCU..\Run: [Media Finder] "C:\Program Files\Media Finder\Media Finder.exe" /opentotray File not found
O4 - HKCU..\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com)
O4 - HKCU..\Run: [Optimizer Pro] C:\Program Files\Optimizer Pro\OptProLauncher.exe (PC Utilities Pro)
O4 - Startup: C:\Users\GOKOP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 10.0.0)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.108.195.21 89.108.202.21
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CB64A06B-C4A6-450A-99A1-591A0F4E9F30}: DhcpNameServer = 89.108.195.21 89.108.202.21
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D024EF2B-6D3E-45E4-B468-53D09EB60C54}: DhcpNameServer = 89.108.195.21 89.108.202.21
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (c:\progra~1\mocaflix\sprote~1.dll) - c:\Program Files\MocaFlix\sprotector.dll ()
O20 - AppInit_DLLs: (c:\progra~1\vaudix\sprote~1.dll) - c:\Program Files\VaudiX\sprotector.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\GOKOP\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\GOKOP\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [NTFS]
O32 - AutoRun File - [2010-11-16 22:37:37 | 000,142,336 | R--- | M] () - F:\AutoRun.exe -- [CDFS]
O32 - AutoRun File - [2008-03-07 09:34:52 | 000,000,047 | R--- | M] () - F:\AUTORUN.INF -- [CDFS]
O33 - MountPoints2\{1ef58bed-6377-11e1-a5be-001e101fe5e1}\Shell - "" = AutoRun
O33 - MountPoints2\{1ef58bed-6377-11e1-a5be-001e101fe5e1}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-11-16 22:37:37 | 000,142,336 | R--- | M] ()
O33 - MountPoints2\{203f9df4-6310-11e1-a57b-90e6ba3b5449}\Shell - "" = AutoRun
O33 - MountPoints2\{203f9df4-6310-11e1-a57b-90e6ba3b5449}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{203f9e03-6310-11e1-a57b-001e101faa49}\Shell - "" = AutoRun
O33 - MountPoints2\{203f9e03-6310-11e1-a57b-001e101faa49}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-11-16 22:37:37 | 000,142,336 | R--- | M] ()
O33 - MountPoints2\{6142d647-bf89-11e1-a9f1-90e6ba3b5449}\Shell - "" = AutoRun
O33 - MountPoints2\{6142d647-bf89-11e1-a9f1-90e6ba3b5449}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-11-16 22:37:37 | 000,142,336 | R--- | M] ()
O33 - MountPoints2\{6142d653-bf89-11e1-a9f1-da9dc97c9074}\Shell - "" = AutoRun
O33 - MountPoints2\{6142d653-bf89-11e1-a9f1-da9dc97c9074}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-11-16 22:37:37 | 000,142,336 | R--- | M] ()
O33 - MountPoints2\{8d9be35e-6c6d-11e1-86ee-f282f961c0ed}\Shell - "" = AutoRun
O33 - MountPoints2\{8d9be35e-6c6d-11e1-86ee-f282f961c0ed}\Shell\AutoRun\command - "" = H:\autorun.exe
O33 - MountPoints2\{a086d74f-fc06-11e1-8571-fa86cf686647}\Shell - "" = AutoRun
O33 - MountPoints2\{a086d74f-fc06-11e1-8571-fa86cf686647}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-11-16 22:37:37 | 000,142,336 | R--- | M] ()
O33 - MountPoints2\{a6c9b404-6354-11e1-b910-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a6c9b404-6354-11e1-b910-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Autorun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-11-16 22:37:37 | 000,142,336 | R--- | M] ()
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2013-01-16 14:42:02 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
[2013-01-16 14:42:01 | 000,000,000 | ---D | C] -- C:\Program Files\GPU-Z
[2013-01-16 14:41:38 | 001,299,424 | ---- | C] (techPowerUp (www.techpowerup.com)) -- C:\Users\GOKOP\Desktop\GPU-Z.0.6.6_[www.programosy.pl].exe
[2013-01-15 19:10:57 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\AppData\Roaming\Unity
[2013-01-15 17:24:53 | 000,000,000 | ---D | C] -- C:\ProgramData\SweetIM
[2013-01-15 17:24:53 | 000,000,000 | ---D | C] -- C:\Program Files\SweetIM
[2013-01-15 17:24:44 | 000,000,000 | ---D | C] -- C:\Program Files\sweetpacks bundle uninstaller
[2013-01-14 19:11:21 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\AppData\Roaming\MoreTerra
[2013-01-12 11:56:13 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft XNA
[2013-01-12 11:45:20 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2013-01-09 14:36:22 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\AppData\Local\DDMSettings
[2013-01-09 14:33:09 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\AppData\Roaming\DivX
[2013-01-09 14:31:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus
[2013-01-09 14:31:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2013-01-09 14:30:45 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\AppData\Roaming\Optimizer Pro
[2013-01-09 14:30:44 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2013-01-09 14:24:51 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2013-01-09 14:23:23 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX
[2013-01-09 14:21:02 | 000,000,000 | ---D | C] -- C:\ProgramData\WoW Worldwide Software LTD
[2013-01-09 14:20:57 | 000,000,000 | ---D | C] -- C:\Program Files\VaudiX
[2013-01-09 14:20:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Premium
[2013-01-09 14:20:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro
[2013-01-09 14:20:25 | 000,000,000 | ---D | C] -- C:\Program Files\Optimizer Pro
[2013-01-09 14:19:53 | 000,000,000 | ---D | C] -- C:\Program Files\MocaFlix
[2013-01-09 14:19:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vaudix
[2013-01-09 14:19:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Vaudix
[2013-01-09 14:18:56 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate
[2012-12-30 12:19:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
[2012-12-30 12:19:00 | 000,000,000 | ---D | C] -- C:\Program Files\Speccy
[2012-12-30 12:13:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
[2012-12-30 12:13:13 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID
[2012-12-29 15:44:10 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\Documents\daaaaaabaaaaa
[2012-12-28 17:39:12 | 000,000,000 | ---D | C] -- C:\ProgramData\WindowsSearch
[2012-12-25 17:16:34 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\Documents\Electronic Arts
[2012-12-25 16:41:45 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\AppData\Roaming\Origin
[2012-12-25 16:41:44 | 000,000,000 | ---D | C] -- C:\Program Files\Origin Games
[2012-12-25 16:40:59 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\AppData\Local\Origin
[2012-12-25 16:39:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
[2012-12-25 16:39:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
[2012-12-22 20:26:49 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\AppData\Roaming\.minecraft
[2012-12-20 14:42:48 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\Documents\Gothic3ForsakenGods
[2012-12-17 21:05:09 | 000,000,000 | ---D | C] -- C:\Users\GOKOP\Documents\config
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2013-01-16 14:48:06 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-01-16 14:48:05 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-01-16 14:43:02 | 000,023,942 | ---- | M] () -- C:\Users\GOKOP\Documents\gggggggggggg.gif
[2013-01-16 14:41:32 | 001,299,424 | ---- | M] (techPowerUp (www.techpowerup.com)) -- C:\Users\GOKOP\Desktop\GPU-Z.0.6.6_[www.programosy.pl].exe
[2013-01-16 14:33:45 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013-01-16 14:33:45 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013-01-16 14:26:50 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3657531876-1656315217-616032012-1000UA.job
[2013-01-16 14:00:01 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-01-16 11:14:28 | 000,031,871 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2013-01-16 11:14:28 | 000,031,871 | ---- | M] () -- C:\ProgramData\nvModes.001
[2013-01-16 10:33:49 | 000,000,370 | -H-- | M] () -- C:\Windows\tasks\VaudiXUpdaterTask{86C975B7-690D-4AAF-A5F3-707019CFFE4E}.job
[2013-01-16 10:33:23 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-01-16 10:33:19 | 3220,430,848 | -HS- | M] () -- C:\hiberfil.sys
[2013-01-15 21:28:03 | 000,000,418 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{EA76210E-3EE6-4F83-9C89-994BEB178F85}.job
[2013-01-15 20:26:07 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3657531876-1656315217-616032012-1000Core.job
[2013-01-13 13:17:47 | 000,001,204 | ---- | M] () -- C:\Users\GOKOP\Desktop\Dynamic Shooter.lnk
[2013-01-13 10:34:19 | 000,002,049 | ---- | M] () -- C:\Users\GOKOP\Desktop\Google Chrome.lnk
[2013-01-12 11:55:09 | 000,714,064 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2013-01-12 11:55:09 | 000,632,966 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-01-12 11:55:09 | 000,151,034 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2013-01-12 11:55:09 | 000,119,592 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-01-09 15:04:04 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013-01-09 15:04:04 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013-01-01 17:32:19 | 002,017,645 | ---- | M] () -- C:\Users\GOKOP\Documents\Psy - Gangam Style Orginal Mix.mp3
[2012-12-30 17:04:43 | 000,738,676 | ---- | M] () -- C:\Users\GOKOP\Documents\Bez tytułasu.png
[2012-12-30 12:20:39 | 000,065,169 | ---- | M] () -- C:\Users\GOKOP\Documents\ddddddddda.png
[2012-12-30 12:19:01 | 000,000,743 | ---- | M] () -- C:\Users\Public\Desktop\Speccy.lnk
[2012-12-30 12:15:26 | 000,049,048 | ---- | M] () -- C:\Users\GOKOP\Documents\ddddddddd.png
[2012-12-30 12:13:14 | 000,000,885 | ---- | M] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk
[2012-12-25 17:14:58 | 000,000,651 | ---- | M] () -- C:\Users\Public\Desktop\The Sims™ 3.lnk
[2012-12-25 16:39:23 | 000,000,604 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
[2012-12-22 19:53:56 | 000,669,179 | ---- | M] () -- C:\Users\GOKOP\Desktop\MVC (2).zip
[2012-12-22 19:26:52 | 000,385,381 | ---- | M] () -- C:\Users\GOKOP\Desktop\redgame 2.1 activity book.pdf
[2012-12-22 19:26:37 | 002,780,017 | ---- | M] () -- C:\Users\GOKOP\Desktop\redgame 2.3.zip
[2012-12-20 21:38:51 | 000,669,179 | ---- | M] () -- C:\Users\GOKOP\Desktop\MVC(1).zip
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2013-01-16 14:43:02 | 000,023,942 | ---- | C] () -- C:\Users\GOKOP\Documents\gggggggggggg.gif
[2013-01-13 13:17:47 | 000,001,204 | ---- | C] () -- C:\Users\GOKOP\Desktop\Dynamic Shooter.lnk
[2013-01-09 14:20:35 | 000,000,370 | -H-- | C] () -- C:\Windows\tasks\VaudiXUpdaterTask{86C975B7-690D-4AAF-A5F3-707019CFFE4E}.job
[2013-01-01 17:32:37 | 002,017,645 | ---- | C] () -- C:\Users\GOKOP\Documents\Psy - Gangam Style Orginal Mix.mp3
[2012-12-30 17:04:43 | 000,738,676 | ---- | C] () -- C:\Users\GOKOP\Documents\Bez tytułasu.png
[2012-12-30 12:20:39 | 000,065,169 | ---- | C] () -- C:\Users\GOKOP\Documents\ddddddddda.png
[2012-12-30 12:19:01 | 000,000,743 | ---- | C] () -- C:\Users\Public\Desktop\Speccy.lnk
[2012-12-30 12:15:26 | 000,049,048 | ---- | C] () -- C:\Users\GOKOP\Documents\ddddddddd.png
[2012-12-30 12:13:14 | 000,000,885 | ---- | C] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk
[2012-12-25 17:14:58 | 000,000,651 | ---- | C] () -- C:\Users\Public\Desktop\The Sims™ 3.lnk
[2012-12-25 16:39:23 | 000,000,604 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
[2012-12-22 19:54:02 | 000,669,179 | ---- | C] () -- C:\Users\GOKOP\Desktop\MVC (2).zip
[2012-12-22 19:27:47 | 000,385,381 | ---- | C] () -- C:\Users\GOKOP\Desktop\redgame 2.1 activity book.pdf
[2012-12-22 19:27:44 | 002,780,017 | ---- | C] () -- C:\Users\GOKOP\Desktop\redgame 2.3.zip
[2012-12-20 21:37:19 | 000,669,179 | ---- | C] () -- C:\Users\GOKOP\Desktop\MVC(1).zip
[2012-10-04 20:02:33 | 000,042,078 | ---- | C] () -- C:\Users\GOKOP\AppData\Roaming\UserTile.png
[2012-09-12 14:49:43 | 000,362,104 | ---- | C] () -- C:\Windows\System32\dmwu.exe
[2012-09-12 14:49:42 | 000,028,160 | ---- | C] () -- C:\Windows\System32\ImHttpComm.dll
[2012-04-08 19:23:56 | 000,000,029 | ---- | C] () -- C:\Windows\2pic.ini
[2012-03-11 19:31:54 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2012-03-11 19:31:43 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2012-03-11 19:31:42 | 000,074,752 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2012-03-05 23:50:24 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2012-03-05 23:50:24 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2012-03-04 14:44:28 | 000,068,608 | ---- | C] () -- C:\Users\GOKOP\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-03-01 06:02:19 | 000,013,880 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
[2012-02-29 21:02:03 | 000,031,871 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2012-02-29 21:02:03 | 000,031,871 | ---- | C] () -- C:\ProgramData\nvModes.001
[2012-02-29 20:58:12 | 001,752,704 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2012-02-29 20:58:12 | 000,028,672 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys
[2012-02-29 20:53:25 | 000,000,520 | R--- | C] () -- C:\Windows\System32\drivers\SamSfPa.dat
[2012-02-29 20:38:58 | 000,000,680 | ---- | C] () -- C:\Users\GOKOP\AppData\Local\d3d9caps.dat
[color=#E56717]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 64 bytes -> C:\Users\GOKOP\Documents\clip0014.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\GOKOP\Documents\clip0012.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\GOKOP\Documents\clip0011.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\GOKOP\Documents\clip0010.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\GOKOP\Documents\clip0009.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\GOKOP\Documents\clip0008.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\GOKOP\Documents\clip0007.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\GOKOP\Documents\clip0003.avi:TOC.WMV
< End of report >
(wiem, że się pomyliłeś… tylko ci to uświadamiam :D)