Sapper utworzono 26 sierpnia 2013 utworzono 26 sierpnia 2013 (edytowane) Witam, od paru dni mam wysoki ping (120, 200) i przez to nie mogę grac w niektóre gdy multiplayer go mi za bardzo laguje. Wcześniej takich pingów nie miałem, dlatego teraz podejrzewam, że przyczyną tego mogą byc wirusy. Wysyłam tutaj logi z OTL i RSIT. Dodam jeszcze, że wcześniej skanowałem komputer Malwarebytes Anti-Malware i on mi wykrył 96 wirusów na kompie. [spoiler] OTL OTL logfile created on: 2013-08-26 23:11:13 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sapper\Moje dokumenty\Downloads Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,12 Gb Available Physical Memory | 55,90% Memory free 3,85 Gb Paging File | 2,85 Gb Available in Paging File | 74,05% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = D:\Program Files Drive C: | 24,41 Gb Total Space | 11,72 Gb Free Space | 48,02% Space Free | Partition Type: NTFS Drive D: | 124,63 Gb Total Space | 84,88 Gb Free Space | 68,11% Space Free | Partition Type: NTFS Computer Name: KUPCZAK-69D913D | User Name: Sapper | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2013-08-26 23:09:05 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sapper\Moje dokumenty\Downloads\OTL.exe PRC - [2013-08-16 05:21:43 | 000,829,392 | ---- | M] (Google Inc.) -- D:\Program Files\Google\Chrome\Application\chrome.exe PRC - [2013-08-02 21:16:05 | 000,182,184 | ---- | M] (Oracle Corporation) -- D:\Program Files\Java\jre7\bin\jqs.exe PRC - [2013-07-23 19:09:28 | 000,283,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Program Files\AVG\AVG2013\avgwdsvc.exe PRC - [2013-07-10 01:33:22 | 000,452,144 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Program Files\AVG\AVG2013\avgcsrvx.exe PRC - [2013-07-08 13:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) -- D:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe PRC - [2013-07-04 15:53:28 | 000,763,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Program Files\AVG\AVG2013\avgrsx.exe PRC - [2013-07-04 15:53:26 | 001,117,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Program Files\AVG\AVG2013\avgnsx.exe PRC - [2013-07-04 15:53:10 | 004,939,312 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Program Files\AVG\AVG2013\avgidsagent.exe PRC - [2013-07-01 01:46:26 | 004,411,440 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Program Files\AVG\AVG2013\avgui.exe PRC - [2013-06-28 14:02:04 | 001,440,080 | ---- | M] (LogMeIn Inc.) -- D:\Program Files\LogMeIn Hamachi\hamachi-2.exe PRC - [2013-03-18 02:38:48 | 000,799,280 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Program Files\AVG\AVG2013\avgemcx.exe PRC - [2008-04-14 22:51:36 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ping.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-04-14 22:51:10 | 000,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\cmd.exe ========== Modules (No Company Name) ========== MOD - [2013-08-16 05:21:41 | 000,410,576 | ---- | M] () -- D:\Program Files\Google\Chrome\Application\29.0.1547.57\ppgooglenaclpluginchrome.dll MOD - [2013-08-16 05:21:40 | 013,594,064 | ---- | M] () -- D:\Program Files\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll MOD - [2013-08-16 05:21:39 | 004,053,456 | ---- | M] () -- D:\Program Files\Google\Chrome\Application\29.0.1547.57\pdf.dll MOD - [2013-08-16 05:20:46 | 001,604,560 | ---- | M] () -- D:\Program Files\Google\Chrome\Application\29.0.1547.57\ffmpegsumo.dll MOD - [2013-08-15 13:46:01 | 011,816,960 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\972dcf9830a64e9802aaca3a83cae24b\System.Web.ni.dll MOD - [2013-08-15 01:49:18 | 005,462,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\f93600ac836b9140e1df13bb0f6bfccf\System.Xml.ni.dll MOD - [2013-08-15 01:49:11 | 012,434,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a12a09aaa2c560a808dea7eaba5040c1\System.Windows.Forms.ni.dll MOD - [2013-08-15 01:48:52 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b34cb206ab0cec687c3730b14cdff57\System.Drawing.ni.dll MOD - [2013-08-15 01:47:01 | 007,977,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\10df39542df7d48462451fc39bce8418\System.ni.dll MOD - [2013-08-15 01:46:10 | 000,372,736 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll MOD - [2013-08-15 01:46:07 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll MOD - [2013-07-11 15:45:56 | 011,497,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\b14359470744c840c59fbe4e58034fd6\mscorlib.ni.dll MOD - [2013-06-30 10:28:48 | 001,675,264 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.2713.38412__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll MOD - [2013-06-30 10:28:48 | 000,688,128 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.2713.38611__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.dll MOD - [2013-06-30 10:28:48 | 000,360,448 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.2713.38640__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll MOD - [2013-06-30 10:28:48 | 000,233,472 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.2713.38368__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll MOD - [2013-06-30 10:28:48 | 000,184,320 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.2713.38425__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll MOD - [2013-06-30 10:28:48 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.2713.38632__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll MOD - [2013-06-30 10:28:48 | 000,065,536 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.2713.38589__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll MOD - [2013-06-30 10:28:48 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.2713.38404__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll MOD - [2013-06-30 10:28:48 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Runtime\2.0.2713.38424__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Runtime.dll MOD - [2013-06-30 10:28:48 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.2713.38525__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll MOD - [2013-06-30 10:28:48 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.2713.38390__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll MOD - [2013-06-30 10:28:46 | 000,483,328 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.2713.38668__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll MOD - [2013-06-30 10:28:08 | 000,331,776 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.2713.38597__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:08 | 000,135,168 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.2713.38674__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:08 | 000,102,400 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.2713.38418__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:08 | 000,090,112 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.2713.38603__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll MOD - [2013-06-30 10:28:08 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.2713.38382__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:08 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.2713.38596__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll MOD - [2013-06-30 10:28:08 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.2713.38417__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.dll MOD - [2013-06-30 10:28:06 | 000,917,504 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.2713.38634__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:06 | 000,667,648 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.2713.38534__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:06 | 000,585,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.2713.38437__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:06 | 000,438,272 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.2713.38391__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:06 | 000,401,408 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.2713.38618__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll MOD - [2013-06-30 10:28:06 | 000,323,584 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.2713.38519__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:06 | 000,208,896 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.2713.38431__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:06 | 000,118,784 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.2713.38555__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:06 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.2713.38526__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll MOD - [2013-06-30 10:28:06 | 000,049,152 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.2713.38532__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll MOD - [2013-06-30 10:28:06 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.2713.38443__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll MOD - [2013-06-30 10:28:06 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.2713.38554__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll MOD - [2013-06-30 10:28:06 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.2713.38575__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll MOD - [2013-06-30 10:28:04 | 000,655,360 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.2713.38591__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:04 | 000,475,136 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.2713.38527__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll MOD - [2013-06-30 10:28:04 | 000,049,152 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.2665.42152__90ba9c70f846762e\CLI.Foundation.dll MOD - [2013-06-30 10:28:04 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll MOD - [2013-06-30 10:28:04 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.2713.38532__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll MOD - [2013-06-30 10:28:04 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2665.42149__90ba9c70f846762e\LOG.Foundation.dll MOD - [2013-06-30 10:28:04 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2665.42240__90ba9c70f846762e\CLI.Foundation.XManifest.dll MOD - [2013-06-30 10:28:04 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2665.42151__90ba9c70f846762e\NEWAEM.Foundation.dll MOD - [2013-06-30 10:28:04 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2665.42178__90ba9c70f846762e\DEM.OS.I0602.dll MOD - [2013-06-30 10:28:04 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2665.42166__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll MOD - [2013-06-30 10:28:04 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2665.42161__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll MOD - [2013-06-30 10:28:04 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2665.42156__90ba9c70f846762e\CLI.Component.Client.Shared.dll MOD - [2013-06-30 10:28:04 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2665.42157__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll MOD - [2013-06-30 10:28:04 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2665.42168__90ba9c70f846762e\MOM.Foundation.dll MOD - [2013-06-30 10:28:04 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2665.42177__90ba9c70f846762e\DEM.OS.dll MOD - [2013-06-30 10:28:04 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.2665.42179__90ba9c70f846762e\DEM.Graphics.dll MOD - [2013-06-30 10:28:04 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll MOD - [2013-06-30 10:28:04 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2665.42164__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll MOD - [2013-06-30 10:28:04 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2665.42187__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll MOD - [2013-06-30 10:28:04 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2665.42196__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll MOD - [2013-06-30 10:28:04 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2665.42166__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll MOD - [2013-06-30 10:28:04 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2665.42196__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll MOD - [2013-06-30 10:28:04 | 000,006,656 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll MOD - [2013-06-30 10:28:02 | 000,057,344 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2665.42187__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Shared\2.0.2665.42182__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2665.42184__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,049,152 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2665.42162__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,049,152 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2665.42186__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2665.42198__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2665.42184__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2665.42186__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2665.42184__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2665.42182__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2665.42167__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2665.42180__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2665.42185__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2665.42166__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2665.42187__90ba9c70f846762e\APM.Foundation.dll MOD - [2013-06-30 10:28:02 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2665.42150__90ba9c70f846762e\AEM.Foundation.dll MOD - [2013-06-30 10:28:02 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll MOD - [2013-06-30 10:28:02 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.2665.42181__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2665.42181__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll MOD - [2013-06-30 10:28:02 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2665.42181__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll MOD - [2013-06-30 10:28:02 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2665.42180__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll MOD - [2013-06-30 10:28:02 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2665.42160__90ba9c70f846762e\AEM.Server.Shared.dll MOD - [2013-06-30 10:27:58 | 000,013,824 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray.resources\2.0.2713.38645_pl_90ba9c70f846762e\CLI.Component.Systemtray.resources.dll MOD - [2013-06-30 10:27:52 | 000,466,944 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.2713.38398__90ba9c70f846762e\CLI.Component.Wizard.dll MOD - [2013-06-30 10:27:52 | 000,397,312 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.2713.38645__90ba9c70f846762e\CLI.Component.Systemtray.dll MOD - [2013-06-30 10:27:52 | 000,102,400 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.2713.38653__90ba9c70f846762e\MOM.Implementation.dll MOD - [2013-06-30 10:27:52 | 000,098,304 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.2713.38367__90ba9c70f846762e\CLI.Component.Runtime.dll MOD - [2013-06-30 10:27:52 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.2713.38652__90ba9c70f846762e\LOG.Foundation.Implementation.dll MOD - [2013-06-30 10:27:52 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2665.42165__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll MOD - [2013-06-30 10:27:52 | 000,036,864 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.2713.38696__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll MOD - [2013-06-30 10:27:52 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2665.42158__90ba9c70f846762e\LOG.Foundation.Private.dll MOD - [2013-06-30 10:27:52 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2665.42196__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll MOD - [2013-06-30 10:27:52 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2665.42169__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll MOD - [2013-06-30 10:27:52 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2665.42154__90ba9c70f846762e\CLI.Foundation.Private.dll MOD - [2013-06-30 10:27:52 | 000,006,656 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.2713.38365__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll MOD - [2013-06-30 10:27:50 | 001,503,232 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.2713.38377__90ba9c70f846762e\CLI.Component.Dashboard.dll MOD - [2013-06-30 10:27:50 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.2713.38367__90ba9c70f846762e\ATIDEMOS.dll MOD - [2013-06-30 10:27:50 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.2713.38365__90ba9c70f846762e\AEM.Server.dll MOD - [2013-06-30 10:27:50 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2665.42160__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll MOD - [2013-06-30 10:27:50 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.2713.38653__90ba9c70f846762e\CCC.Implementation.dll MOD - [2013-06-30 10:27:50 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll MOD - [2013-06-30 10:27:50 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2665.42167__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll MOD - [2013-06-30 10:27:50 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2665.42188__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll MOD - [2008-06-19 20:53:04 | 000,060,416 | ---- | M] () -- C:\WINDOWS\system32\antiwpa.dll MOD - [2008-04-14 22:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2007-03-02 11:44:34 | 000,073,728 | ---- | M] () -- D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll ========== Services (SafeList) ========== SRV - File not found [Auto | Stopped] -- D:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe -- (vToolbarUpdater15.5.0) SRV - File not found [On_Demand | Stopped] -- D:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe -- (SymSnapService) SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - File not found [On_Demand | Stopped] -- D:\Program Files\Norton Ghost\Shared\Drivers\GenericMountHelper.exe -- (GenericMount Helper Service) SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt) SRV - [2013-08-02 21:16:05 | 000,182,184 | ---- | M] (Oracle Corporation) [Auto | Running] -- D:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2013-07-23 19:09:28 | 000,283,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- D:\Program Files\AVG\AVG2013\avgwdsvc.exe -- (avgwd) SRV - [2013-07-08 13:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- D:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8) SRV - [2013-07-04 15:53:10 | 004,939,312 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- D:\Program Files\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent) SRV - [2013-06-28 14:02:04 | 001,440,080 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- D:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2013-06-21 09:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- D:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013-04-04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2013-04-04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\GenericMount.sys -- (GenericMount) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2013-08-14 16:38:39 | 000,037,664 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtpx86.sys -- (avgtp) DRV - [2013-07-20 01:51:00 | 000,246,072 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avglogx.sys -- (Avglogx) DRV - [2013-07-20 01:50:56 | 000,208,184 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgidsdriverx.sys -- (AVGIDSDriver) DRV - [2013-07-20 01:50:56 | 000,060,216 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgidshx.sys -- (AVGIDSHX) DRV - [2013-07-20 01:50:50 | 000,171,320 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2013-07-17 23:01:32 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2013-07-10 01:32:40 | 000,039,224 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgrkx86.sys -- (Avgrkx86) DRV - [2013-07-01 01:45:28 | 000,096,568 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2013-04-04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector) DRV - [2013-03-21 03:08:24 | 000,182,072 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2013-03-01 10:32:20 | 000,022,328 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgidsshimx.sys -- (AVGIDSShim) DRV - [2009-03-25 15:29:52 | 000,130,432 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2009-03-18 18:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2007-06-07 04:52:04 | 002,155,520 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2005-01-07 17:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService) DRV - [2004-08-13 05:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKU\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/ IE - HKU\S-1-5-21-1060284298-220523388-839522115-1004\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1060284298-220523388-839522115-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1060284298-220523388-839522115-1004\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\S-1-5-21-1060284298-220523388-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: D:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: D:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: D:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) [2013-07-21 17:35:30 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR - plugin: Shockwave Flash (Enabled) = D:\Program Files\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = D:\Program Files\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = D:\Program Files\Google\Chrome\Application\29.0.1547.57\pdf.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = D:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 7.0.250.17 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll CHR - plugin: Google Update (Enabled) = D:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U25 (Enabled) = D:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Pando Web Plugin (Enabled) = D:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - Extension: Adblock Plus = C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.4_0\ CHR - Extension: Chrome In-App Payments service = C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0\ O1 HOSTS File: ([2006-03-02 12:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Rich Media Downloader) - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll File not found O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4 - HKLM..\Run: [AVG_UI] D:\Program Files\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] D:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [StartCCC] D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe () O4 - HKU\S-1-5-21-1060284298-220523388-839522115-1004..\Run: [DAEMON Tools Lite] D:\Program Files\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd) O4 - HKU\S-1-5-21-1060284298-220523388-839522115-1004..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1060284298-220523388-839522115-1004..\Run: [MX Skype Recorder] C:\Documents and Settings\All Users\Dane aplikacji\MXSkypeRecorder\MXSkypeRecorder.exe (MX Soft) O4 - HKU\S-1-5-21-1060284298-220523388-839522115-1004..\Run: [WinUpdates] D:\Program Files\Java\jre7\bin\javaw.exe (Oracle Corporation) O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 992 O7 - HKU\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowRun = 1 O7 - HKU\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 1 = hamachi-2-ui.exe O9 - Extra Button: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll File not found O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.20 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C25966DB-30CA-4624-85FC-DF5B1139207F}: DhcpNameServer = 192.168.1.20 O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Program Files\common files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\Antiwpa: DllName - (antiwpa.dll) - C:\WINDOWS\System32\antiwpa.dll () O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013-06-29 18:46:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (D:\PROGRA~1\AVG\AVG2013\avgrsx.exe /sync /restart) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) ========== Files/Folders - Created Within 30 Days ========== [2013-08-24 10:09:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\FileViewPro [2013-08-24 10:09:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\IsolatedStorage [2013-08-24 10:09:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\IsolatedStorage [2013-08-24 10:06:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\Solvusoft [2013-08-24 10:06:14 | 000,017,840 | ---- | C] (solvusoft) -- C:\WINDOWS\System32\roboot.exe [2013-08-24 10:05:22 | 000,000,000 | ---D | C] -- C:\Spacekace [2013-08-23 01:14:06 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Sapper\Menu Start\Programy\Narzędzia administracyjne [2013-08-23 01:14:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData [2013-08-23 01:10:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2013-08-22 22:49:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Menu Start\Programy\Fic_Products [2013-08-21 18:40:04 | 000,140,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comdlg32.ocx [2013-08-21 18:40:04 | 000,115,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSINET.OCX [2013-08-21 18:40:03 | 000,089,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VB5DB.DLL [2013-08-21 18:40:03 | 000,026,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xmlinst.exe [2013-08-21 18:40:03 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll [2013-08-21 18:38:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Ubisoft [2013-08-21 18:32:46 | 000,000,000 | ---D | C] -- D:\Program Files\Ubisoft [2013-08-21 18:29:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\AdobeUM [2013-08-21 18:29:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\Adobe [2013-08-21 18:29:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Moje dokumenty\My eBooks [2013-08-21 18:29:10 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Adobe [2013-08-21 18:13:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\PrintMe Internet Printing [2013-08-21 18:13:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe [2013-08-21 18:13:20 | 000,000,000 | ---D | C] -- D:\Program Files\Adobe [2013-08-21 18:12:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cache [2013-08-20 16:21:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\Malwarebytes [2013-08-20 16:20:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware [2013-08-20 16:20:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2013-08-20 16:20:50 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2013-08-20 16:20:50 | 000,000,000 | ---D | C] -- D:\Program Files\Malwarebytes' Anti-Malware [2013-08-19 15:25:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallMate [2013-08-19 09:01:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Menu Start\Programy\Mount&Blade Warband [2013-08-17 00:29:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Pulpit\world [2013-08-15 01:47:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MRT [2013-08-14 17:36:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Moje dokumenty\iFree Skype Recorder [2013-08-14 17:36:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\iFree [2013-08-14 17:36:41 | 000,000,000 | ---D | C] -- D:\Program Files\iFree Skype Recorder [2013-08-14 17:36:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Menu Start\Programy\iFree Skype Recorder [2013-08-14 17:32:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Moje dokumenty\Recordings [2013-08-14 17:32:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\MXSkypeRecorder [2013-08-14 17:32:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Yahoo! [2013-08-14 17:32:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\Yahoo! [2013-08-11 17:19:29 | 000,000,000 | ---D | C] -- D:\Program Files\Mount&Blade Warband [2013-08-11 09:09:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Moje dokumenty\Mount&Blade Warband [2013-08-11 09:08:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\Movdap [2013-08-11 09:04:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Moje dokumenty\Mount&Blade Warband Savegames [2013-08-11 09:03:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\Mount&Blade Warband [2013-08-11 00:11:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Menu Start\Programy\CPUFSB [2013-08-11 00:04:39 | 000,000,000 | ---D | C] -- D:\Program Files\SystemRequirementsLab [2013-08-11 00:04:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\SystemRequirementsLab [2013-08-11 00:04:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun [2013-08-08 23:49:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\Help [2013-08-08 23:49:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\Help [2013-08-08 23:44:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\WINDOWS [2013-08-03 22:07:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi [2013-08-03 22:07:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi [2013-08-03 22:06:39 | 000,000,000 | ---D | C] -- D:\Program Files\LogMeIn Hamachi [2013-08-03 22:06:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi [2013-08-02 21:42:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Pulpit\Server [2013-08-02 21:30:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sapper\Dane aplikacji\.minecraft [2013-08-02 21:16:25 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Java [2013-08-02 21:16:22 | 000,263,592 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2013-08-02 21:16:22 | 000,144,896 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl [2013-08-02 21:16:17 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2013-08-02 21:16:17 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2013-08-02 21:16:17 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2013-08-02 21:11:45 | 000,000,000 | ---D | C] -- D:\Program Files\Java [2013-08-01 01:17:59 | 000,016,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll [2013-08-01 01:17:15 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\WINDOWS\System32\GEARAspi.dll [2013-08-01 01:15:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Symantec [2013-08-01 01:15:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{1C6FDDD8-FC9E-4C12-9FA5-1AAD377097B3} [2013-08-01 01:15:02 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2013-07-30 18:00:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\AVG [2013-07-29 19:41:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\cache [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [164 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ] [157 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013-08-26 23:15:01 | 000,000,464 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{A6CCC8B2-B50E-4713-9839-E0EEE7EFF97E}.job [2013-08-26 23:06:00 | 000,000,426 | ---- | M] () -- C:\WINDOWS\tasks\At1.job [2013-08-26 22:48:01 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2013-08-26 20:48:00 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2013-08-26 12:10:40 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2013-08-25 22:09:41 | 000,002,177 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2013-08-25 12:45:03 | 000,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2013-08-23 01:12:55 | 000,000,144 | ---- | M] () -- C:\WINDOWS\Eudcedit.ini [2013-08-22 22:49:29 | 000,000,665 | ---- | M] () -- C:\Documents and Settings\Sapper\Pulpit\Dr.Tweak XP.lnk [2013-08-22 20:00:49 | 000,001,693 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk [2013-08-21 18:38:14 | 000,000,804 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Far Cry.lnk [2013-08-21 18:13:28 | 000,001,618 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 6.0.lnk [2013-08-20 16:20:52 | 000,000,666 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk [2013-08-19 09:01:33 | 000,000,699 | ---- | M] () -- C:\Documents and Settings\Sapper\Pulpit\Mount&Blade Warband.lnk [2013-08-18 20:50:43 | 000,004,096 | ---- | M] () -- C:\WINDOWS\System32\crash [2013-08-15 01:49:56 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2013-08-15 01:46:28 | 000,491,064 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2013-08-15 01:46:28 | 000,432,928 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2013-08-15 01:46:28 | 000,084,316 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2013-08-15 01:46:28 | 000,067,884 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2013-08-14 17:36:41 | 000,000,477 | ---- | M] () -- C:\Documents and Settings\Sapper\Pulpit\iFree Skype Recorder.lnk [2013-08-14 16:38:39 | 000,037,664 | ---- | M] (AVG Technologies) -- C:\WINDOWS\System32\drivers\avgtpx86.sys [2013-08-07 13:50:30 | 000,000,372 | ---- | M] () -- C:\Documents and Settings\Sapper\Moje dokumenty\spider.sav [2013-08-03 22:06:41 | 000,000,573 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\LogMeIn Hamachi.lnk [2013-08-03 00:57:54 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2013-08-02 21:30:20 | 000,779,264 | ---- | M] () -- C:\Documents and Settings\Sapper\Pulpit\Minecraft.exe [2013-08-02 21:16:06 | 000,094,632 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2013-08-02 21:16:05 | 000,867,240 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll [2013-08-02 21:16:05 | 000,789,416 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll [2013-08-02 21:16:05 | 000,263,592 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2013-08-02 21:16:05 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2013-08-02 21:16:05 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2013-08-02 21:16:05 | 000,144,896 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl [2013-08-02 20:59:31 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2013-08-01 01:19:04 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_GenericMount_01009.Wdf [2013-08-01 01:18:33 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2013-07-30 18:00:49 | 000,000,642 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG 2013.lnk [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [164 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ] [157 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2013-08-23 01:12:55 | 000,000,144 | ---- | C] () -- C:\WINDOWS\Eudcedit.ini [2013-08-22 22:49:29 | 000,000,665 | ---- | C] () -- C:\Documents and Settings\Sapper\Pulpit\Dr.Tweak XP.lnk [2013-08-21 18:40:03 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll [2013-08-21 18:40:03 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll [2013-08-21 18:40:03 | 000,035,840 | ---- | C] () -- C:\WINDOWS\System32\comdlg32.oca [2013-08-21 18:40:03 | 000,029,184 | ---- | C] () -- C:\WINDOWS\System32\MSINET.oca [2013-08-21 18:38:14 | 000,000,804 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Far Cry.lnk [2013-08-21 18:13:28 | 000,001,866 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader 6.0.lnk [2013-08-21 18:13:28 | 000,001,618 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 6.0.lnk [2013-08-20 16:20:52 | 000,000,666 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk [2013-08-19 09:01:33 | 000,000,699 | ---- | C] () -- C:\Documents and Settings\Sapper\Pulpit\Mount&Blade Warband.lnk [2013-08-14 17:36:41 | 000,000,477 | ---- | C] () -- C:\Documents and Settings\Sapper\Pulpit\iFree Skype Recorder.lnk [2013-08-07 13:50:30 | 000,000,372 | ---- | C] () -- C:\Documents and Settings\Sapper\Moje dokumenty\spider.sav [2013-08-03 22:06:41 | 000,000,573 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\LogMeIn Hamachi.lnk [2013-08-03 22:06:24 | 000,000,426 | ---- | C] () -- C:\WINDOWS\tasks\At1.job [2013-08-02 21:39:58 | 000,779,264 | ---- | C] () -- C:\Documents and Settings\Sapper\Pulpit\Minecraft.exe [2013-08-01 01:19:04 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_GenericMount_01009.Wdf [2013-08-01 01:18:33 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2013-07-25 12:01:32 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-07-05 09:49:45 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2013-06-30 10:21:46 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe [2013-06-30 10:19:21 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2013-06-30 10:17:45 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2013-06-29 21:48:57 | 000,060,416 | ---- | C] () -- C:\WINDOWS\System32\antiwpa.dll [2013-06-29 20:13:19 | 000,005,810 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys [2013-06-29 19:44:11 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll [2013-06-29 19:28:37 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2013-06-29 19:28:37 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2013-06-29 19:28:37 | 000,972,072 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2013-06-29 19:28:37 | 000,144,357 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2013-06-29 18:48:52 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2013-06-29 18:44:24 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2013-06-29 18:16:43 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2013-06-29 18:15:48 | 000,100,640 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT ========== ZeroAccess Check ========== [2013-06-30 10:23:16 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-14 22:50:48 | 001,499,136 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 22:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013-07-09 10:57:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\TuneUp Software [2013-07-06 13:12:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG2013 [2013-07-06 13:09:32 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files [2013-07-17 23:07:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2013-06-29 19:23:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Innovative Solutions [2013-08-19 15:25:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallMate [2013-08-24 10:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IsolatedStorage [2013-08-26 17:49:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData [2013-08-22 10:10:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MXSkypeRecorder [2013-08-26 22:24:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files [2013-08-11 00:04:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SystemRequirementsLab [2013-07-17 01:25:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2013-08-01 01:29:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{1C6FDDD8-FC9E-4C12-9FA5-1AAD377097B3} [2013-07-17 01:24:53 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2013-07-09 10:57:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\TuneUp Software [2013-08-24 18:53:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\.minecraft [2013-07-06 13:13:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\AVG2013 [2013-08-21 18:28:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\DAEMON Tools Lite [2013-08-14 19:15:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\iFree [2013-08-24 10:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\IsolatedStorage [2013-06-30 05:58:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\LolClient [2013-07-24 14:59:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\Mount&Blade [2013-08-11 17:32:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\Mount&Blade Warband [2013-08-19 11:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\Movdap [2013-06-29 22:54:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\Riot Games [2013-08-24 10:07:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\Solvusoft [2013-06-29 22:21:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\TeamViewer [2013-07-17 01:25:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\TuneUp Software [2013-08-21 17:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\uTorrent [2013-06-29 22:10:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sapper\Dane aplikacji\WinZipper ========== Purity Check ========== < End of report > Extras OTL Extras logfile created on: 2013-08-26 23:11:13 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sapper\Moje dokumenty\Downloads Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,12 Gb Available Physical Memory | 55,90% Memory free 3,85 Gb Paging File | 2,85 Gb Available in Paging File | 74,05% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = D:\Program Files Drive C: | 24,41 Gb Total Space | 11,72 Gb Free Space | 48,02% Space Free | Partition Type: NTFS Drive D: | 124,63 Gb Total Space | 84,88 Gb Free Space | 68,11% Space Free | Partition Type: NTFS Computer Name: KUPCZAK-69D913D | User Name: Sapper | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = ChromeHTML] -- D:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) [HKEY_USERS\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. http [open] -- "D:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) https [open] -- "D:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] "DisableMonitoring" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "57203:TCP" = 57203:TCP:*:Enabled:Pando Media Booster "57203:UDP" = 57203:UDP:*:Enabled:Pando Media Booster [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "57203:TCP" = 57203:TCP:*:Enabled:Pando Media Booster "57203:UDP" = 57203:UDP:*:Enabled:Pando Media Booster "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "D:\Program Files\Pando Networks\Media Booster\PMB.exe" = D:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- () "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\Panda Security\Panda Antivirus Pro 2013\ApVxdWin.exe" = C:\Program Files\Panda Security\Panda Antivirus Pro 2013\ApVxdWin.exe:*:Enabled:Panda permanent protection "D:\Program Files\Pando Networks\Media Booster\PMB.exe" = D:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- () "C:\WINDOWS\System32\dpvsetup.exe" = C:\WINDOWS\System32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation) "C:\WINDOWS\System32\rundll32.exe" = C:\WINDOWS\System32\rundll32.exe:*:Enabled:Uruchamia plik DLL jako aplikację -- (Microsoft Corporation) "C:\WINDOWS\System32\javaw.exe" = C:\WINDOWS\System32\javaw.exe:*:Disabled:Java(TM) Platform SE binary -- (Oracle Corporation) "D:\Program Files\Qtorrent\uTorrent.exe" = D:\Program Files\Qtorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent Inc.) "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "C:\Program Files\Panda Security\Panda Secure Vault\ApVxdWin.exe" = C:\Program Files\Panda Security\Panda Secure Vault\ApVxdWin.exe:*:Disabled:Panda permanent protection "D:\Program Files\AVG\AVG2013\avgmfapx.exe" = D:\Program Files\AVG\AVG2013\avgmfapx.exe:*:Enabled:Instalator AVG -- (AVG Technologies CZ, s.r.o.) "C:\Documents and Settings\Sapper\Dane aplikacji\uTorrent\uTorrent.exe" = C:\Documents and Settings\Sapper\Dane aplikacji\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent Inc.) "D:\Program Files\TeamViewer\Version8\TeamViewer.exe" = D:\Program Files\TeamViewer\Version8\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH) "D:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe" = D:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH) "D:\Program Files\Firefly Studios\Stronghold 3\bin\win32_release\Stronghold3.exe" = D:\Program Files\Firefly Studios\Stronghold 3\bin\win32_release\Stronghold3.exe:*:Enabled:Stronghold3 "D:\Program Files\Skype\Phone\Skype.exe" = D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.) "D:\Program Files\AVG\AVG2013\avgnsx.exe" = D:\Program Files\AVG\AVG2013\avgnsx.exe:*:Enabled:Ochrona Sieci -- (AVG Technologies CZ, s.r.o.) "D:\Program Files\AVG\AVG2013\avgdiagex.exe" = D:\Program Files\AVG\AVG2013\avgdiagex.exe:*:Enabled:Diagnostyka AVG 2013 -- (AVG Technologies CZ, s.r.o.) "D:\Program Files\AVG\AVG2013\avgemcx.exe" = D:\Program Files\AVG\AVG2013\avgemcx.exe:*:Enabled:Uniwersalny skaner poczty email -- (AVG Technologies CZ, s.r.o.) "D:\Program Files\Java\jre7\bin\javaw.exe" = D:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Oracle Corporation) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0079B957-5E36-A04C-F116-128790F4C333}" = Catalyst Control Center Localization Italian "{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center "{059FCFFE-8619-F804-25E1-B2D5B59E1A5D}" = Catalyst Control Center Localization Chinese Traditional "{098152F4-1792-D618-D4B2-71CA86C9FADB}" = CCC Help Danish "{0A44540C-1AB5-3940-7E85-B777A2997202}" = CCC Help Turkish "{0ACC2993-2058-4BE7-9A92-9DCDAA9B3412}" = LogMeIn Hamachi "{0D524441-C462-4CBC-AFCF-09916483EE7A}" = Skins "{0E8FCFEE-26D8-3B9F-F42E-45DE4F433EC6}" = CCC Help Finnish "{112F2474-EE2F-D21A-7297-B5019FB9CD8F}" = Catalyst Control Center Localization Danish "{122C4D87-B0E5-55DE-5276-655947FB2928}" = Catalyst Control Center Localization Dutch "{167BD6B7-0507-32BB-93B0-2FD282D3D62D}" = CCC Help Portuguese "{1AED6AF7-2DCC-0210-B145-0A62B3943A5A}" = Catalyst Control Center Localization Greek "{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}" = Need for Speed™ Carbon "{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25 "{306DCF1D-C3EB-742E-2857-0099E690B400}" = CCC Help Polish "{30CB5415-494F-EB96-4221-DC7857D6FD3A}" = Catalyst Control Center Graphics Full New "{33B39070-E54C-3D4D-AD41-0E0025DEF8D9}" = Catalyst Control Center Graphics Previews Common "{34D9106C-A947-47ED-B4AB-764736350769}" = Minecraft "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder "{3ABF08C9-AD7B-C759-7CBD-17D6C26E99EF}" = ccc-core-preinstall "{3B41412A-B46F-FAF1-EAC4-F922486E3A92}" = CCC Help Norwegian "{427ED69B-96CE-E2A1-A611-82447CD60F2C}" = CCC Help Czech "{47D28B65-DA36-6520-DC49-3DAF81AEDA72}" = CCC Help Japanese "{496EDDC1-B95D-7163-B545-CEA974E73756}" = Catalyst Control Center Core Implementation "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4D63402C-A7D5-6C69-977E-CCBA3C56EA92}" = CCC Help English "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6 "{55A8AB10-C274-9495-4DB1-C8EDF5463B0D}" = Catalyst Control Center Localization German "{5A7E2599-07F2-3387-0D6D-5B8C3FC31A3F}" = CCC Help French "{5DE67937-45D5-45E4-923C-0B7F7EC929A7}" = League of Legends "{5E49AD8A-3064-FD56-E09E-9907DCBD1E83}" = Catalyst Control Center Localization Norwegian "{5FF27D65-35E5-4855-B7ED-59BCFBC85776}" = AVG 2013 "{6A3AEA6E-BF88-44FA-637C-2B5A9E1F0BA2}" = CCC Help Spanish "{6C03A586-5677-AFFC-1580-EC952B1BB388}" = CCC Help Swedish "{6D6A6D9A-31DB-BEA6-949E-C23A157FA459}" = CCC Help Greek "{77140E09-2ADA-1C99-9839-E180AC5EA909}" = CCC Help Korean "{7FE027FD-741A-AD35-1448-5254CF4438F4}" = Catalyst Control Center Localization Korean "{810226BF-399C-7F0B-E60A-4882C74DD296}" = Catalyst Control Center Localization Finnish "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8CCB57A6-CF57-F5C7-2BB1-384D7CCE1626}" = CCC Help Italian "{8E9E8B11-BA96-D289-BAF6-F6A84C573D4A}" = Catalyst Control Center Graphics Light "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{9833D9E3-2DD7-AFE8-55EB-E1B6E20B343F}" = Catalyst Control Center Localization Chinese Standard "{9853EBA1-9FB9-02A4-EE1D-E242D197BC65}" = Catalyst Control Center Localization Hungarian "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A22BDEF3-FBBD-9CAE-0C45-620263D0C840}" = CCC Help Russian "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A40C0B0F-CDB6-FFA7-57CE-CF6153B9444B}" = Catalyst Control Center Localization Turkish "{A49D3DF9-B762-C2D8-341A-4AB680817E00}" = Catalyst Control Center Localization Japanese "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1033-7B44-A00000000001}" = Adobe Reader 6.0.1 "{AF675248-596D-E501-77AA-D67308D449F2}" = CCC Help Dutch "{B4C5C98E-EAF2-A7D8-5C5A-20DA2FEEC6B6}" = CCC Help Chinese Traditional "{B756A8C0-53D5-3A20-6CF3-4F6781C0B6EB}" = CCC Help Thai "{B7B0C24A-9930-A669-6525-540CF544BD70}" = ccc-core-static "{BD485D8E-7FFA-7E01-4C1F-29337929BB41}" = ccc-utility "{BD5F4C25-5412-80AB-64A4-22B345940F0A}" = CCC Help Chinese Standard "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C193C8C8-E555-9284-F80D-8F01EE96D6E4}" = Catalyst Control Center Localization French "{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}" = AVIVO Codecs "{C95434BE-425E-17E3-B8F1-A84C71B54B28}" = Catalyst Control Center Localization Swedish "{CBBB226E-2289-4D29-8E5C-1331E7D71ED9}" = AVG 2013 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D5DBFD15-6214-80E6-3F20-1979D6F7FB38}" = Catalyst Control Center Localization Portuguese "{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry "{D7D6164B-C6A7-0AE0-4F47-C26253396DC7}" = Catalyst Control Center Localization Polish "{DB09B1C2-5FD2-C732-0484-703143E0AF79}" = CCC Help Hungarian "{E362724E-9320-4946-AF34-874E7B6B2927}" = System Requirements Lab CYRI "{E3D722F2-0839-92D5-ECEA-8B65085B20D6}" = Catalyst Control Center Localization Thai "{E603DF00-D577-409A-1118-82C6E18F28B0}" = Catalyst Control Center Localization Spanish "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F11B077E-7848-E3E5-95F1-AE694EA28D5D}" = Catalyst Control Center Localization Russian "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F8CBC8AC-FAC0-FD10-D12E-E3D368D09E2B}" = Catalyst Control Center Graphics Full Existing "{FC03B954-D556-1C01-1A88-182A39B42C39}" = CCC Help German "{FCABC23E-2B6B-D69D-C6C2-0F52D9422F0F}" = Catalyst Control Center Localization Czech "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "All ATI Software" = ATI - Software Uninstall Utility "ATI Display Driver" = ATI Display Driver "AVG" = AVG 2013 "CWK" = CWK (Czasowy Wyłącznik Komputera) "DAEMON Tools Lite" = DAEMON Tools Lite "DrTweakXP" = DoctorTweak XP v1.75 "Floris Mod Pack_is1" = Floris Mod Pack 2.54 "Google Chrome" = Google Chrome "ie8" = Windows Internet Explorer 8 "iFree Skype Recorder" = iFree Skype Recorder 6.0.6 "InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry "League of Legends 3.0.1" = League of Legends "LogMeIn Hamachi" = LogMeIn Hamachi "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.75.0.1300 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mount&Blade Warband" = Mount&Blade Warband "Northland" = Northland "Speccy" = Speccy "SpellForce 2 - Shadow Wars_is1" = SpellForce 2 - Shadow Wars "Spolszczenie" = Spolszczenie 1.0 "TeamViewer 8" = TeamViewer 8 "Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = WinRAR 4.20 (32-bitowy) ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "uTorrent" = µTorrent ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 2013-08-24 11:06:03 | Computer Name = KUPCZAK-69D913D | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mbam.exe, wersja 1.75.0.1, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2013-08-24 11:06:04 | Computer Name = KUPCZAK-69D913D | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mbam.exe, wersja 1.75.0.1, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. [ System Events ] Error - 2013-08-26 08:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 09:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 10:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 11:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 12:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 13:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 14:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 15:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 16:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 17:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 < End of report > RSIT LOG OTL Extras logfile created on: 2013-08-26 23:11:13 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sapper\Moje dokumenty\Downloads Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,12 Gb Available Physical Memory | 55,90% Memory free 3,85 Gb Paging File | 2,85 Gb Available in Paging File | 74,05% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = D:\Program Files Drive C: | 24,41 Gb Total Space | 11,72 Gb Free Space | 48,02% Space Free | Partition Type: NTFS Drive D: | 124,63 Gb Total Space | 84,88 Gb Free Space | 68,11% Space Free | Partition Type: NTFS Computer Name: KUPCZAK-69D913D | User Name: Sapper | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = ChromeHTML] -- D:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) [HKEY_USERS\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. http [open] -- "D:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) https [open] -- "D:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] "DisableMonitoring" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "57203:TCP" = 57203:TCP:*:Enabled:Pando Media Booster "57203:UDP" = 57203:UDP:*:Enabled:Pando Media Booster [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "57203:TCP" = 57203:TCP:*:Enabled:Pando Media Booster "57203:UDP" = 57203:UDP:*:Enabled:Pando Media Booster "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "D:\Program Files\Pando Networks\Media Booster\PMB.exe" = D:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- () "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\Panda Security\Panda Antivirus Pro 2013\ApVxdWin.exe" = C:\Program Files\Panda Security\Panda Antivirus Pro 2013\ApVxdWin.exe:*:Enabled:Panda permanent protection "D:\Program Files\Pando Networks\Media Booster\PMB.exe" = D:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- () "C:\WINDOWS\System32\dpvsetup.exe" = C:\WINDOWS\System32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation) "C:\WINDOWS\System32\rundll32.exe" = C:\WINDOWS\System32\rundll32.exe:*:Enabled:Uruchamia plik DLL jako aplikację -- (Microsoft Corporation) "C:\WINDOWS\System32\javaw.exe" = C:\WINDOWS\System32\javaw.exe:*:Disabled:Java(TM) Platform SE binary -- (Oracle Corporation) "D:\Program Files\Qtorrent\uTorrent.exe" = D:\Program Files\Qtorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent Inc.) "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "C:\Program Files\Panda Security\Panda Secure Vault\ApVxdWin.exe" = C:\Program Files\Panda Security\Panda Secure Vault\ApVxdWin.exe:*:Disabled:Panda permanent protection "D:\Program Files\AVG\AVG2013\avgmfapx.exe" = D:\Program Files\AVG\AVG2013\avgmfapx.exe:*:Enabled:Instalator AVG -- (AVG Technologies CZ, s.r.o.) "C:\Documents and Settings\Sapper\Dane aplikacji\uTorrent\uTorrent.exe" = C:\Documents and Settings\Sapper\Dane aplikacji\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent Inc.) "D:\Program Files\TeamViewer\Version8\TeamViewer.exe" = D:\Program Files\TeamViewer\Version8\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH) "D:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe" = D:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH) "D:\Program Files\Firefly Studios\Stronghold 3\bin\win32_release\Stronghold3.exe" = D:\Program Files\Firefly Studios\Stronghold 3\bin\win32_release\Stronghold3.exe:*:Enabled:Stronghold3 "D:\Program Files\Skype\Phone\Skype.exe" = D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.) "D:\Program Files\AVG\AVG2013\avgnsx.exe" = D:\Program Files\AVG\AVG2013\avgnsx.exe:*:Enabled:Ochrona Sieci -- (AVG Technologies CZ, s.r.o.) "D:\Program Files\AVG\AVG2013\avgdiagex.exe" = D:\Program Files\AVG\AVG2013\avgdiagex.exe:*:Enabled:Diagnostyka AVG 2013 -- (AVG Technologies CZ, s.r.o.) "D:\Program Files\AVG\AVG2013\avgemcx.exe" = D:\Program Files\AVG\AVG2013\avgemcx.exe:*:Enabled:Uniwersalny skaner poczty email -- (AVG Technologies CZ, s.r.o.) "D:\Program Files\Java\jre7\bin\javaw.exe" = D:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Oracle Corporation) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0079B957-5E36-A04C-F116-128790F4C333}" = Catalyst Control Center Localization Italian "{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center "{059FCFFE-8619-F804-25E1-B2D5B59E1A5D}" = Catalyst Control Center Localization Chinese Traditional "{098152F4-1792-D618-D4B2-71CA86C9FADB}" = CCC Help Danish "{0A44540C-1AB5-3940-7E85-B777A2997202}" = CCC Help Turkish "{0ACC2993-2058-4BE7-9A92-9DCDAA9B3412}" = LogMeIn Hamachi "{0D524441-C462-4CBC-AFCF-09916483EE7A}" = Skins "{0E8FCFEE-26D8-3B9F-F42E-45DE4F433EC6}" = CCC Help Finnish "{112F2474-EE2F-D21A-7297-B5019FB9CD8F}" = Catalyst Control Center Localization Danish "{122C4D87-B0E5-55DE-5276-655947FB2928}" = Catalyst Control Center Localization Dutch "{167BD6B7-0507-32BB-93B0-2FD282D3D62D}" = CCC Help Portuguese "{1AED6AF7-2DCC-0210-B145-0A62B3943A5A}" = Catalyst Control Center Localization Greek "{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}" = Need for Speed™ Carbon "{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25 "{306DCF1D-C3EB-742E-2857-0099E690B400}" = CCC Help Polish "{30CB5415-494F-EB96-4221-DC7857D6FD3A}" = Catalyst Control Center Graphics Full New "{33B39070-E54C-3D4D-AD41-0E0025DEF8D9}" = Catalyst Control Center Graphics Previews Common "{34D9106C-A947-47ED-B4AB-764736350769}" = Minecraft "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder "{3ABF08C9-AD7B-C759-7CBD-17D6C26E99EF}" = ccc-core-preinstall "{3B41412A-B46F-FAF1-EAC4-F922486E3A92}" = CCC Help Norwegian "{427ED69B-96CE-E2A1-A611-82447CD60F2C}" = CCC Help Czech "{47D28B65-DA36-6520-DC49-3DAF81AEDA72}" = CCC Help Japanese "{496EDDC1-B95D-7163-B545-CEA974E73756}" = Catalyst Control Center Core Implementation "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4D63402C-A7D5-6C69-977E-CCBA3C56EA92}" = CCC Help English "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6 "{55A8AB10-C274-9495-4DB1-C8EDF5463B0D}" = Catalyst Control Center Localization German "{5A7E2599-07F2-3387-0D6D-5B8C3FC31A3F}" = CCC Help French "{5DE67937-45D5-45E4-923C-0B7F7EC929A7}" = League of Legends "{5E49AD8A-3064-FD56-E09E-9907DCBD1E83}" = Catalyst Control Center Localization Norwegian "{5FF27D65-35E5-4855-B7ED-59BCFBC85776}" = AVG 2013 "{6A3AEA6E-BF88-44FA-637C-2B5A9E1F0BA2}" = CCC Help Spanish "{6C03A586-5677-AFFC-1580-EC952B1BB388}" = CCC Help Swedish "{6D6A6D9A-31DB-BEA6-949E-C23A157FA459}" = CCC Help Greek "{77140E09-2ADA-1C99-9839-E180AC5EA909}" = CCC Help Korean "{7FE027FD-741A-AD35-1448-5254CF4438F4}" = Catalyst Control Center Localization Korean "{810226BF-399C-7F0B-E60A-4882C74DD296}" = Catalyst Control Center Localization Finnish "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8CCB57A6-CF57-F5C7-2BB1-384D7CCE1626}" = CCC Help Italian "{8E9E8B11-BA96-D289-BAF6-F6A84C573D4A}" = Catalyst Control Center Graphics Light "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{9833D9E3-2DD7-AFE8-55EB-E1B6E20B343F}" = Catalyst Control Center Localization Chinese Standard "{9853EBA1-9FB9-02A4-EE1D-E242D197BC65}" = Catalyst Control Center Localization Hungarian "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A22BDEF3-FBBD-9CAE-0C45-620263D0C840}" = CCC Help Russian "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A40C0B0F-CDB6-FFA7-57CE-CF6153B9444B}" = Catalyst Control Center Localization Turkish "{A49D3DF9-B762-C2D8-341A-4AB680817E00}" = Catalyst Control Center Localization Japanese "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1033-7B44-A00000000001}" = Adobe Reader 6.0.1 "{AF675248-596D-E501-77AA-D67308D449F2}" = CCC Help Dutch "{B4C5C98E-EAF2-A7D8-5C5A-20DA2FEEC6B6}" = CCC Help Chinese Traditional "{B756A8C0-53D5-3A20-6CF3-4F6781C0B6EB}" = CCC Help Thai "{B7B0C24A-9930-A669-6525-540CF544BD70}" = ccc-core-static "{BD485D8E-7FFA-7E01-4C1F-29337929BB41}" = ccc-utility "{BD5F4C25-5412-80AB-64A4-22B345940F0A}" = CCC Help Chinese Standard "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C193C8C8-E555-9284-F80D-8F01EE96D6E4}" = Catalyst Control Center Localization French "{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}" = AVIVO Codecs "{C95434BE-425E-17E3-B8F1-A84C71B54B28}" = Catalyst Control Center Localization Swedish "{CBBB226E-2289-4D29-8E5C-1331E7D71ED9}" = AVG 2013 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D5DBFD15-6214-80E6-3F20-1979D6F7FB38}" = Catalyst Control Center Localization Portuguese "{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry "{D7D6164B-C6A7-0AE0-4F47-C26253396DC7}" = Catalyst Control Center Localization Polish "{DB09B1C2-5FD2-C732-0484-703143E0AF79}" = CCC Help Hungarian "{E362724E-9320-4946-AF34-874E7B6B2927}" = System Requirements Lab CYRI "{E3D722F2-0839-92D5-ECEA-8B65085B20D6}" = Catalyst Control Center Localization Thai "{E603DF00-D577-409A-1118-82C6E18F28B0}" = Catalyst Control Center Localization Spanish "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F11B077E-7848-E3E5-95F1-AE694EA28D5D}" = Catalyst Control Center Localization Russian "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F8CBC8AC-FAC0-FD10-D12E-E3D368D09E2B}" = Catalyst Control Center Graphics Full Existing "{FC03B954-D556-1C01-1A88-182A39B42C39}" = CCC Help German "{FCABC23E-2B6B-D69D-C6C2-0F52D9422F0F}" = Catalyst Control Center Localization Czech "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "All ATI Software" = ATI - Software Uninstall Utility "ATI Display Driver" = ATI Display Driver "AVG" = AVG 2013 "CWK" = CWK (Czasowy Wyłącznik Komputera) "DAEMON Tools Lite" = DAEMON Tools Lite "DrTweakXP" = DoctorTweak XP v1.75 "Floris Mod Pack_is1" = Floris Mod Pack 2.54 "Google Chrome" = Google Chrome "ie8" = Windows Internet Explorer 8 "iFree Skype Recorder" = iFree Skype Recorder 6.0.6 "InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry "League of Legends 3.0.1" = League of Legends "LogMeIn Hamachi" = LogMeIn Hamachi "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.75.0.1300 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mount&Blade Warband" = Mount&Blade Warband "Northland" = Northland "Speccy" = Speccy "SpellForce 2 - Shadow Wars_is1" = SpellForce 2 - Shadow Wars "Spolszczenie" = Spolszczenie 1.0 "TeamViewer 8" = TeamViewer 8 "Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = WinRAR 4.20 (32-bitowy) ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-1060284298-220523388-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "uTorrent" = µTorrent ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 2013-08-24 11:06:03 | Computer Name = KUPCZAK-69D913D | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mbam.exe, wersja 1.75.0.1, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2013-08-24 11:06:04 | Computer Name = KUPCZAK-69D913D | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mbam.exe, wersja 1.75.0.1, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. [ System Events ] Error - 2013-08-26 08:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 09:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 10:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 11:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 12:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 13:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 14:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 15:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 16:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 Error - 2013-08-26 17:06:00 | Computer Name = KUPCZAK-69D913D | Source = Schedule | ID = 7901 Description = Uruchomienie polecenia At1.job nie powiodło się, ponieważ wystąpił następujący błąd: %%2147942403 < End of report > RSIT INFO info.txt logfile of random's system information tool 1.09 2013-08-26 23:20:15 ======Uninstall list====== -->D:\Program Files\GOG.com\SpellForce 2 - Shadow Wars\unins000.exe -->D:\Program Files\GOG.com\SpellForce 2 - Shadow Wars\unins000.exe -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Reader 6.0.1-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A00000000001} Aktualizacja dla systemu Windows XP (KB2345886)-->"C:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe" Aktualizacja dla systemu Windows XP (KB2661254-v2)-->"C:\WINDOWS\$NtUninstallKB2661254-v2$\spuninst\spuninst.exe" Aktualizacja dla systemu Windows XP (KB2749655)-->"C:\WINDOWS\$NtUninstallKB2749655$\spuninst\spuninst.exe" Aktualizacja dla systemu Windows XP (KB2863058)-->"C:\WINDOWS\$NtUninstallKB2863058$\spuninst\spuninst.exe" Aktualizacja dla systemu Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe" Aktualizacja dla systemu Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Aktualizacja dla systemu Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe" Aktualizacja dla systemu Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe" Aktualizacja dla systemu Windows XP (KB971029)-->"C:\WINDOWS\$NtUninstallKB971029$\spuninst\spuninst.exe" Aktualizacja dla systemu Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla Microsoft Windows (KB2564958)-->"C:\WINDOWS\$NtUninstallKB2564958$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla programu Windows Media Player (KB2378111)-->"C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla programu Windows Media Player (KB2803821)-->"C:\WINDOWS\$NtUninstallKB2803821_WM9$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla programu Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla programu Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla programu Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla programu Windows Media Player (KB975558)-->"C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla programu Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2510531)-->"C:\WINDOWS\ie8updates\KB2510531-IE8\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2838727)-->"C:\WINDOWS\ie8updates\KB2838727-IE8\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2846071)-->"C:\WINDOWS\ie8updates\KB2846071-IE8\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2862772)-->"C:\WINDOWS\ie8updates\KB2862772-IE8\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2296011)-->"C:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2347290)-->"C:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2360937)-->"C:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2387149)-->"C:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2393802)-->"C:\WINDOWS\$NtUninstallKB2393802$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2419632)-->"C:\WINDOWS\$NtUninstallKB2419632$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2440591)-->"C:\WINDOWS\$NtUninstallKB2440591$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2443105)-->"C:\WINDOWS\$NtUninstallKB2443105$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2478960)-->"C:\WINDOWS\$NtUninstallKB2478960$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2478971)-->"C:\WINDOWS\$NtUninstallKB2478971$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2479943)-->"C:\WINDOWS\$NtUninstallKB2479943$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2481109)-->"C:\WINDOWS\$NtUninstallKB2481109$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2483185)-->"C:\WINDOWS\$NtUninstallKB2483185$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2485663)-->"C:\WINDOWS\$NtUninstallKB2485663$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2506212)-->"C:\WINDOWS\$NtUninstallKB2506212$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2507938)-->"C:\WINDOWS\$NtUninstallKB2507938$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2508429)-->"C:\WINDOWS\$NtUninstallKB2508429$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2509553)-->"C:\WINDOWS\$NtUninstallKB2509553$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2535512)-->"C:\WINDOWS\$NtUninstallKB2535512$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2536276-v2)-->"C:\WINDOWS\$NtUninstallKB2536276-v2$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2544893-v2)-->"C:\WINDOWS\$NtUninstallKB2544893-v2$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2566454)-->"C:\WINDOWS\$NtUninstallKB2566454$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2570947)-->"C:\WINDOWS\$NtUninstallKB2570947$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2584146)-->"C:\WINDOWS\$NtUninstallKB2584146$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2585542)-->"C:\WINDOWS\$NtUninstallKB2585542$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2592799)-->"C:\WINDOWS\$NtUninstallKB2592799$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2598479)-->"C:\WINDOWS\$NtUninstallKB2598479$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2603381)-->"C:\WINDOWS\$NtUninstallKB2603381$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2618451)-->"C:\WINDOWS\$NtUninstallKB2618451$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2619339)-->"C:\WINDOWS\$NtUninstallKB2619339$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2620712)-->"C:\WINDOWS\$NtUninstallKB2620712$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2624667)-->"C:\WINDOWS\$NtUninstallKB2624667$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2631813)-->"C:\WINDOWS\$NtUninstallKB2631813$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2653956)-->"C:\WINDOWS\$NtUninstallKB2653956$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2655992)-->"C:\WINDOWS\$NtUninstallKB2655992$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2659262)-->"C:\WINDOWS\$NtUninstallKB2659262$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2661637)-->"C:\WINDOWS\$NtUninstallKB2661637$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2676562)-->"C:\WINDOWS\$NtUninstallKB2676562$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2686509)-->"C:\WINDOWS\$NtUninstallKB2686509$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2691442)-->"C:\WINDOWS\$NtUninstallKB2691442$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2705219-v2)-->"C:\WINDOWS\$NtUninstallKB2705219-v2$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2712808)-->"C:\WINDOWS\$NtUninstallKB2712808$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2719985)-->"C:\WINDOWS\$NtUninstallKB2719985$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2723135-v2)-->"C:\WINDOWS\$NtUninstallKB2723135-v2$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2727528)-->"C:\WINDOWS\$NtUninstallKB2727528$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2753842-v2)-->"C:\WINDOWS\$NtUninstallKB2753842-v2$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2757638)-->"C:\WINDOWS\$NtUninstallKB2757638$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2758857)-->"C:\WINDOWS\$NtUninstallKB2758857$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2770660)-->"C:\WINDOWS\$NtUninstallKB2770660$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2780091)-->"C:\WINDOWS\$NtUninstallKB2780091$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2802968)-->"C:\WINDOWS\$NtUninstallKB2802968$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2807986)-->"C:\WINDOWS\$NtUninstallKB2807986$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2813345)-->"C:\WINDOWS\$NtUninstallKB2813345$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2820197)-->"C:\WINDOWS\$NtUninstallKB2820197$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2820917)-->"C:\WINDOWS\$NtUninstallKB2820917$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2829361)-->"C:\WINDOWS\$NtUninstallKB2829361$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2834886)-->"C:\WINDOWS\$NtUninstallKB2834886$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2839229)-->"C:\WINDOWS\$NtUninstallKB2839229$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2845187)-->"C:\WINDOWS\$NtUninstallKB2845187$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2849470)-->"C:\WINDOWS\$NtUninstallKB2849470$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2850851)-->"C:\WINDOWS\$NtUninstallKB2850851$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2850869)-->"C:\WINDOWS\$NtUninstallKB2850869$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB2859537)-->"C:\WINDOWS\$NtUninstallKB2859537$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf Aktualizacja zabezpieczeń dla systemu Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB979687)-->"C:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB981322)-->"C:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB982132)-->"C:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe" Aktualizacja zabezpieczeń dla systemu Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe" ATI - Software Uninstall Utility-->D:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe ATI Catalyst Control Center-->RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0 ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7} AVG 2013-->"D:\Program Files\AVG\AVG2013\avgmfapx.exe" /AppMode=SETUP /Uninstall AVG 2013-->MsiExec.exe /I{5FF27D65-35E5-4855-B7ED-59BCFBC85776} AVG 2013-->MsiExec.exe /I{CBBB226E-2289-4D29-8E5C-1331E7D71ED9} AVIVO Codecs-->MsiExec.exe /X{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6} CWK (Czasowy Wyłącznik Komputera)-->"D:\Program Files\Damian Pasternak\CWK\CWK.exe" /uninstall DAEMON Tools Lite-->D:\Program Files\DAEMON Tools Lite\uninst.exe DoctorTweak XP v1.75-->C:\Program Files\Fic_Products\DoctorTweak XP\Uninstall.exe Far Cry-->D:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC} /l2057 Floris Mod Pack 2.54-->"D:\Program Files\Mount&Blade Warband\Modules\unins000.exe" Google Chrome-->"D:\Program Files\Google\Chrome\Application\29.0.1547.57\Installer\setup.exe" --uninstall --multi-install --chrome --system-level Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT="" iFree Skype Recorder 6.0.6-->D:\Program Files\iFree Skype Recorder\uninst.exe Java 7 Update 25-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217025FF} League of Legends-->msiexec.exe /x {5DE67937-45D5-45E4-923C-0B7F7EC929A7} League of Legends-->MsiExec.exe /X{5DE67937-45D5-45E4-923C-0B7F7EC929A7} LogMeIn Hamachi-->C:\WINDOWS\system32\\msiexec.exe /i {0ACC2993-2058-4BE7-9A92-9DCDAA9B3412} REMOVE=ALL LogMeIn Hamachi-->MsiExec.exe /I{0ACC2993-2058-4BE7-9A92-9DCDAA9B3412} Malwarebytes Anti-Malware wersja 1.75.0.1300-->"D:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Kernel-Mode Driver Framework Feature Pack 1.9-->"C:\WINDOWS\$NtUninstallWdf01009$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F} Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} Minecraft-->MsiExec.exe /X{34D9106C-A947-47ED-B4AB-764736350769} Mount&Blade Warband-->D:\Program Files\Mount&Blade Warband\uninstall.exe Need for Speed™ Carbon-->D:\Program Files\Electronic Arts\Need for Speed Carbon\EAUninstall.exe Northland-->C:\WINDOWS\IsUninst.exe -fD:\PROGRA~1\GMXMED~1\NORTHL~1\Uninst.isu -cD:\PROGRA~1\GMXMED~1\NORTHL~1\Uninstall.dll Pando Media Booster-->D:\Program Files\Pando Networks\Media Booster\uninst.exe Poprawka dla systemu Windows XP (KB2779562)-->"C:\WINDOWS\$NtUninstallKB2779562$\spuninst\spuninst.exe" Poprawka dla systemu Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe" Realtek High Definition Audio Driver-->RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x15 -removeonly Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {94EFE014-E577-310B-B2D5-6973A21D8A90} /qb+ REBOOTPROMPT="" Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {F6F5AC31-9833-3E77-AC8E-8E910CAB39AE} /qb+ REBOOTPROMPT="" Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {939AF4BC-EC42-38D1-AE82-91D4A7ED8911} /qb+ REBOOTPROMPT="" Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8433C01-319F-3370-850E-87C35496299A} /qb+ REBOOTPROMPT="" Skype™ 6.6-->MsiExec.exe /X{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} Speccy-->"D:\Program Files\Speccy\uninst.exe" SpellForce 2 - Shadow Wars-->"D:\Program Files\GOG.com\SpellForce 2 - Shadow Wars\unins000.exe" Spolszczenie 1.0-->D:\Program Files\Mount&Blade\uninst.exe System Requirements Lab CYRI-->MsiExec.exe /I{E362724E-9320-4946-AF34-874E7B6B2927} TeamViewer 8-->D:\Program Files\TeamViewer\Version8\uninstall.exe Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT="" Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" WinRAR 4.20 (32-bitowy)-->D:\Program Files\WinRAR\uninstall.exe ======System event log====== Computer Name: KUPCZAK-69D913D Event Code: 7036 Message: Usługa Zarządzanie aplikacjami weszła w stan zatrzymania. Record Number: 2720 Source Name: Service Control Manager Time Written: 20130802210933.000000+120 Event Type: informacje User: Computer Name: KUPCZAK-69D913D Event Code: 7035 Message: Do usługi Zarządzanie aplikacjami został pomyślnie wysłany kod sterowania uruchom. Record Number: 2719 Source Name: Service Control Manager Time Written: 20130802210933.000000+120 Event Type: informacje User: KUPCZAK-69D913D\Sapper Computer Name: KUPCZAK-69D913D Event Code: 7035 Message: Do usługi Zarządzanie aplikacjami został pomyślnie wysłany kod sterowania uruchom. Record Number: 2718 Source Name: Service Control Manager Time Written: 20130802210933.000000+120 Event Type: informacje User: KUPCZAK-69D913D\Sapper Computer Name: KUPCZAK-69D913D Event Code: 7023 Message: Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący błąd: Nie można odnaleźć określonego modułu. Record Number: 2717 Source Name: Service Control Manager Time Written: 20130802210933.000000+120 Event Type: błąd User: Computer Name: KUPCZAK-69D913D Event Code: 7036 Message: Usługa Zarządzanie aplikacjami weszła w stan zatrzymania. Record Number: 2716 Source Name: Service Control Manager Time Written: 20130802210933.000000+120 Event Type: informacje User: =====Application event log===== Computer Name: KUPCZAK-69D913D Event Code: 103 Message: SkypeUpdate service is shutting down due to idle timeout. Record Number: 5 Source Name: SkypeUpdate Time Written: 20130822133042.000000+120 Event Type: informacje User: Computer Name: KUPCZAK-69D913D Event Code: 1800 Message: Usługa Centrum zabezpieczeń systemu Windows została uruchomiona. Record Number: 4 Source Name: SecurityCenter Time Written: 20130822132848.000000+120 Event Type: informacje User: Computer Name: KUPCZAK-69D913D Event Code: 100 Message: Service started. Record Number: 3 Source Name: SkypeUpdate Time Written: 20130822132842.000000+120 Event Type: informacje User: Computer Name: KUPCZAK-69D913D Event Code: 0 Message: Record Number: 2 Source Name: gupdate Time Written: 20130822132830.000000+120 Event Type: informacje User: Computer Name: KUPCZAK-69D913D Event Code: 105 Message: The service was started. Record Number: 1 Source Name: ATI Smart Time Written: 20130822132826.000000+120 Event Type: informacje User: ======Environment variables====== "_JAVA_OPTIONS"=-Xmx512M "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "NUMBER_OF_PROCESSORS"=2 "OS"=Windows_NT "Path"=%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;D:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CORE-STATIC "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 11, GenuineIntel "PROCESSOR_LEVEL"=6 "PROCESSOR_REVISION"=0f0b "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "windir"=%SystemRoot% -----------------EOF----------------- [/spoiler]
Natsuki Kuga komentarz 27 sierpnia 2013 komentarz 27 sierpnia 2013 Do OTL w okno Własne opcje skanowania/Skrypt wklej: :Files C:\Documents and Settings\Sapper\Dane aplikacji\Solvusoft C:\WINDOWS\System32\roboot.exe C:\WINDOWS\tasks\At*.job Kliknij Wykonaj skrypt, pokaż raport. Pokaż wszystkie logi ze skanowania MBAM (zakładka Logi).
Sapper komentarz 27 sierpnia 2013 Autor komentarz 27 sierpnia 2013 Wykonałem skrypta, a tu są te logi z MBAM [spoiler] Malwarebytes Anti-Malware (Okres testowy) 1.75.0.1300 www.malwarebytes.org Wersja bazy: v2013.08.24.01 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Sapper :: KUPCZAK-69D913D [administrator] Ochrona: Włączona 2013-08-24 17:06:21 MBAM-log-2013-08-24 (17-45-13).txt Typ skanowania: Pełne skanowanie (C:\|D:\|) Zaznaczone opcje skanowania: Pamięć | Rozruch | Rejestr | System plików | Heurystyka/Dodatkowe | Heuristyka/Shuriken | PUP | PUM Odznaczone opcje skanowania: P2P Przeskanowano obiektów: 289271 Upłynęło: 28 minut(y), 26 sekund(y) Wykrytych procesów w pamięci: 0 (Nie znaleziono zagrożeń) Wykrytych modułów w pamięci: 1 C:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Nie wykonano akcji. Wykrytych kluczy rejestru: 3 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (PUP.Wpakill) -> Nie wykonano akcji. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SETUP.EXE (PUP.Optional.Babylon.A) -> Nie wykonano akcji. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (Trojan.I.Stole.Windows) -> Nie wykonano akcji. Wykrytych wartości rejestru: 0 (Nie znaleziono zagrożeń) Wykryte wpisy rejestru systemowego: 0 (Nie znaleziono zagrożeń) wykrytych folderów: 0 (Nie znaleziono zagrożeń) Wykrytych plików: 92 C:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Dane aplikacji\Movdap\WebCakeDesktop.exe (PUP.WebCake.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\C6.tmp (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\Tsu7F80D9AF.dll (PUP.Optional.Tarma.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\0F9EC6C3-BAB0-7891-BBC8-E574F5313BFA\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\0F9EC6C3-BAB0-7891-BBC8-E574F5313BFA\Latest\ccp.exe (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\0F9EC6C3-BAB0-7891-BBC8-E574F5313BFA\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\22B0C404-BAB0-7891-A5A0-0F37544D01DA\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\22B0C404-BAB0-7891-A5A0-0F37544D01DA\Latest\ccp.exe (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\22B0C404-BAB0-7891-A5A0-0F37544D01DA\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\58510F4E-BAB0-7891-919E-8C151A8DCFD2\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\58510F4E-BAB0-7891-919E-8C151A8DCFD2\Latest\ccp.exe (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\58510F4E-BAB0-7891-919E-8C151A8DCFD2\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\58510F4E-BAB0-7891-919E-8C151A8DCFD2\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\58EBAE0A-BAB0-7891-923E-8DCC416931FE\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\58EBAE0A-BAB0-7891-923E-8DCC416931FE\Latest\ccp.exe (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\58EBAE0A-BAB0-7891-923E-8DCC416931FE\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\7A572396-BAB0-7891-B14F-8E65E29F54AD\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\7A572396-BAB0-7891-B14F-8E65E29F54AD\Latest\BUSolution.dll (PUP.Optional.BabSolution.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\7A572396-BAB0-7891-B14F-8E65E29F54AD\Latest\ccp.exe (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\7A572396-BAB0-7891-B14F-8E65E29F54AD\Latest\NTRedirect.dll (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\7A572396-BAB0-7891-B14F-8E65E29F54AD\Latest\Setup.exe (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\98E696D5-BAB0-7891-86A2-50F16E131C1E\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\98E696D5-BAB0-7891-86A2-50F16E131C1E\Latest\ccp.exe (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\98E696D5-BAB0-7891-86A2-50F16E131C1E\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\BB0364A5-BAB0-7891-9D94-BB41DBAD8934\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\BB0364A5-BAB0-7891-9D94-BB41DBAD8934\Latest\ccp.exe (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\BB0364A5-BAB0-7891-9D94-BB41DBAD8934\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\BB0364A5-BAB0-7891-9D94-BB41DBAD8934\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\C9DC8F30-BAB0-7891-8360-06CD722062B6\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\C9DC8F30-BAB0-7891-8360-06CD722062B6\Latest\ccp.exe (PUP.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\C9DC8F30-BAB0-7891-8360-06CD722062B6\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\is1095167443\5629843_Setup.EXE (PUP.Optional.OpenCandy) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\is1095167443\DeltaTB.exe (PUP.Optional.Delta.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\is1095167443\Setup-D502DD2B71B5.exe (Trojan.PUP.WebCake.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\is1890775716\5272437_Setup.EXE (PUP.Optional.OpenCandy) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\is1890775716\DeltaTB.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temp\{BAFDB361-48A2-4895-AA7E-0080611E9197}\Setup.exe (PUP.Optional.Tarma.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temporary Internet Files\Content.IE5\NB6LFESA\pack[1].7z (PUP.Optional.BrowserDefender.A) -> Nie wykonano akcji. C:\Documents and Settings\Sapper\Ustawienia lokalne\Temporary Internet Files\Content.IE5\S6ACZV81\pack[1].7z (PUP.Optional.BrowserDefender.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP42\A0042540.exe (PUP.Optional.OpenCandy.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP42\A0042708.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP42\A0042719.exe (PUP.Optional.Tarma.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP45\A0043582.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP49\A0044589.dll (Adware.WebCake) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP56\A0048815.dll (Adware.BProtector) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP56\A0048816.exe (PUP.Browser.Defender.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP56\A0048817.exe (PUP.Browser.Defender.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP64\A0049579.exe (PUP.Optional.InstallCore) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP64\A0049585.exe (PUP.Optional.InstallCore) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP64\A0049596.exe (PUP.Optional.OpenCandy) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP64\A0049597.exe (PUP.Optional.OpenCandy) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP68\A0050609.exe (PUP.DealPly.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP77\A0051894.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054716.exe (PUP.Optional.InstallCore) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054802.exe (Adware.WebCake) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054808.exe (PUP.Optional.Tarma.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054832.exe (PUP.Optional.Tarma.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054847.exe (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054848.dll (PUP.Optional.BabSolution.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054851.dll (PUP.Optional.Babylon.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054884.exe (PUP.Optional.E7) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054886.exe (PUP.Optional.Desk365.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054899.dll (PUP.Optional.BrowserDefender.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054900.exe (PUP.Optional.BrowserDefender.A) -> Nie wykonano akcji. C:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054901.exe (PUP.Optional.BrowserDefender.A) -> Nie wykonano akcji. D:\RECYCLER\S-1-5-21-1060284298-220523388-839522115-1004\Dd4.exe (PUP.Optional.Installex) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP42\A0042712.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP42\A0042713.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP42\A0042714.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP42\A0042715.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP42\A0042716.exe (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP43\A0042848.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP43\A0042849.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP43\A0042850.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP43\A0042851.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP43\A0042853.exe (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP43\A0042911.exe (PUP.Optional.OpenCandy) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP43\A0042912.exe (PUP.Optional.InstallCore) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP49\A0044530.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP49\A0044531.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP49\A0044532.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP49\A0044533.dll (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP49\A0044583.exe (PUP.Optional.Delta) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP64\A0049649.exe (PUP.Optional.InstallCore) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP68\A0050610.dll (PUP.DealPly) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP68\A0050612.exe (PUP.Optional.Dealply) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP68\A0050613.exe (PUP.Optional.Dealply) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP68\A0050614.exe (PUP.DealPly.A) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054800.exe (PUP.Optional.OptChrome.A) -> Nie wykonano akcji. D:\System Volume Information\_restore{98960837-BF54-44F9-AF1E-E7C8AF74B8E4}\RP81\A0054801.dll (Adware.WebCake) -> Nie wykonano akcji. C:\WINDOWS\system32\antiwpa.dll (Trojan.I.Stole.Windows) -> Nie wykonano akcji. (zakończone) [/spoiler]
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.