x-kom hosting

Logi (Włamywanie się na poczte)

szczotek
utworzono
utworzono

Ktoś włamuje mi się na pocztę może tu coś widać

logi z programu OTL

Extras

Log do sprawdzenia
OTL Extras logfile created on: 2009-08-13 21:53:07 - Run 1

OTL by OldTimer - Version 3.0.10.6 Folder = C:\Documents and Settings\P4RYK\Moje dokumenty\Pobieranie

Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,24 Gb Available Physical Memory | 61,79% Memory free

3,85 Gb Paging File | 3,16 Gb Available in Paging File | 82,05% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 58,59 Gb Total Space | 6,41 Gb Free Space | 10,94% Space Free | Partition Type: NTFS

Drive D: | 232,88 Gb Total Space | 24,17 Gb Free Space | 10,38% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: UZYTKOWNIK

Current User Name: P4RYK

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Company Name Whitelist: On

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.exe [@ = exefile] -- C:\WINDOWS\System32 \smss.exe ()

.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

.inf [@ = inffile] -- C:\WINDOWS\System32\NOTEPAD.EXE ()

.ini [@ = inifile] -- C:\WINDOWS\System32\NOTEPAD.EXE ()

.txt [@ = txtfile] -- C:\WINDOWS\System32\NOTEPAD.EXE ()

[HKEY_USERS\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox 3.5 Beta 4\firefox.exe (Mozilla Corporation)

.url [@ = InternetShortcut] -- Reg Error: Key error. File not found

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"AntiVirusDisableNotify" = 1

"AntiVirusOverride" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 0

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

"DisableUnicastResponsesToMulticastBroadcast" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

"DisableUnicastResponsesToMulticastBroadcast" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)

"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

"C:\WINDOWS\system32 \smss.exe" = C:\WINDOWS\system32 \smss.exe:*:Enabled:SMS Services -- ()

"C:\DOCUME~1\P4RYK\Moje dokumenty\smss.exe" = C:\DOCUME~1\P4RYK\Moje dokumenty\smss.exe:*:Enabled:SMS Services -- ()

"C:\Program Files\Codemasters\GRID\GRID.exe" = C:\Program Files\Codemasters\GRID\GRID.exe:*:Disabled:GRID -- (Codemasters)

"C:\Program Files\Nowe Gadu-Gadu\gg.exe" = C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu -- (GG Network S.A.)

"C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe" = C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater -- (Nokia Corporation)

"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe" = C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process -- (Nokia Corporation)

"C:\Program Files\HLSW\hlsw.exe" = C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application -- (Stripf Software)

"D:\Program Files\THQ\Juiced2_HIN\Juiced2_HIN.exe" = D:\Program Files\THQ\Juiced2_HIN\Juiced2_HIN.exe:*:Enabled:Juiced2_HIN -- (Juice Games)

"D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" = D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe -- (Hewlett-Packard Co.)

"D:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" = D:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -- (Hewlett-Packard Co.)

"D:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = D:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)

"D:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = D:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)

"D:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = D:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)

"D:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" = D:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe -- ()

"D:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = D:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard)

"D:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = D:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Co.)

"D:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = D:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)

"D:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = D:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)

"D:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = D:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- ()

"D:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = D:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )

"D:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = D:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)

"D:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" = D:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Disabled:Rockstar Games Social Club -- (Take-Two Interactive Software, Inc.)

"C:\Program Files\Valve\Steam\SteamApps\szczotek91\counter-strike\hl.exe" = C:\Program Files\Valve\Steam\SteamApps\szczotek91\counter-strike\hl.exe:*:Enabled:Half-Life Launcher -- (Valve)

"C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java Platform SE binary -- (Sun Microsystems, Inc.)

"D:\Program Files\Codemasters\FUEL\FUEL.exe" = D:\Program Files\Codemasters\FUEL\FUEL.exe:*:Enabled:FUEL -- (Codemasters)

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)

"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)

"C:\Program Files\mIRC\mirc.exe" = C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC -- (mIRC Co. Ltd.)

"C:\Program Files\Valve\Steam\SteamApps\skinek0703\counter-strike\hl.exe" = C:\Program Files\Valve\Steam\SteamApps\skinek0703\counter-strike\hl.exe:*:Enabled:Half-Life Launcher -- (Valve)

"C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java Platform SE binary -- (Sun Microsystems, Inc.)

"C:\Program Files\Valve\Steam\Steam.exe" = C:\Program Files\Valve\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)

"C:\Program Files\KONAMI\Pro Evolution Soccer 2009\pes2009.exe" = C:\Program Files\KONAMI\Pro Evolution Soccer 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009 -- (Konami Digital Entertainment Co., Ltd.)

"D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe" = D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty® - World at War -- (Activision Blizzard, Inc.)

"D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe" = D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty® - World at War -- (Activision Blizzard, Inc.)

"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe" = C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java Platform SE binary -- (Sun Microsystems, Inc.)

"C:\Program Files\Valve\Steam\SteamApps\common\america's army 3\Binaries\AA3Game.exe" = C:\Program Files\Valve\Steam\SteamApps\common\america's army 3\Binaries\AA3Game.exe:*:Enabled:America's Army 3 -- ()

"C:\Program Files\Valve\Steam\SteamApps\szczotek91\counter-strike source\hl2.exe" = C:\Program Files\Valve\Steam\SteamApps\szczotek91\counter-strike source\hl2.exe:*:Enabled:hl2 -- ()

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0240C3B0-AD14-4AB4-966A-484E8D14477F}" = Bezpieczeństwo rodzinne usługi Windows Live

"{03528A01-7E5E-4C5F-94DF-1D8012E969EF}" = Nokia Map Loader

"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam

"{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}" = Microsoft Games for Windows - LIVE Redistributable

"{0611BD4E-4FE4-4a62-B0C0-18A4CC463428}" = CP_Package_Variety1

"{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club

"{09984AEC-6B9F-4ca7-B78D-CB44D4771DA3}" = Destinations

"{0A2A5039-B37F-489D-B1DC-A5258DF9E697}" = FIFA 08

"{0B33B738-AD79-4E32-90C5-E67BFB10BBFF}" = AiO_Scan

"{0BA6B649-579C-4C8B-8B2D-9DD0A75E6E40}" = Nokia Photos

"{0CFF0BFE-B750-4ECA-882D-03B8C6A9F26A}" = Nokia Ovi Content Copier

"{14DCD95A-EBA3-4BF0-B7EF-533852E99BE6}" = LG PC Suite II

"{15EE79F4-4ED1-4267-9B0F-351009325D7D}" = HP Software Update

"{1933FE45-AF8D-482D-9BC7-5F651BBF0A4F}" = Nokia Ovi System Utilities

"{193DB24F-9A66-4896-8404-22D53EA89075}" = 1400_Help

"{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A}" = CP_Package_Variety3

"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Narzędzie do przekazywania usługi Windows Live

"{208B110E-76EA-45A9-9FFC-33597A68981C}" = CodeZulu Bind Maker

"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT

"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2

"{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}" = Need for Speed™ Carbon

"{266959FA-0AEE-41D0-A88E-F1EAC10A7C14}" = 1400

"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java 6 Update 13

"{2A5FBE73-76DA-4A31-BD86-1B0E01DC33F8}" = Windows Live Messenger

"{2BAB23B0-70CE-4E7C-85B4-36154482CD57}" = Nokia Ovi Suite

"{2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C}" = Unload

"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp

"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform

"{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}" = DAEMON Tools

"{49B6F667-76EB-4E9D-ACD2-84B7437901C0}" = LG PC Suite II

"{4D243BA7-9AC4-46D1-90E5-EEB88974F501}" = Microsoft Games for Windows - LIVE

"{4DBF3C3D-5B6D-45B2-A08B-B06490E2666F}_is1" = Wru! 1.1.1

"{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}" = Junk Mail filter update

"{50E4FCC7-90B9-48C6-9D17-7AE66F282878}" = Juiced2_HIN

"{51958BA7-21E4-4A8B-9098-CD8375BD17B2}" = Asystent rejestracji usługi Windows Live

"{54E3707F-808E-4fd4-95C9-15D1AB077E5D}" = NewCopy

"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg

"{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV

"{5A0B7BA5-4682-4273-81C2-69B17E649103}" = GRID

"{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}" = HP PSC & OfficeJet 5.3.B

"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder

"{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724}" = DocProc

"{6CEC5DEA-44D1-4C56-978E-56BFD84AF10D}" = Nokia Ovi One Touch Access

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{7850A6D2-CBEA-4728-9877-F1BEDEA9F619}" = AiOSoftware

"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0

"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo

"{7C9B95B7-B598-4398-B30F-7F6827192E6C}" = ProductContext

"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP

"{81EC7A2F-EB36-44EB-A89D-C11A7D9A9EE8}" = Opera 10.00

"{82427977-8776-4087-90CA-9F65174D3C4D}" = Nokia Connectivity Cable Driver

"{886C92E6-4AF1-4290-BB86-4B5064A1BB7D}" = AMD Dual-Core Optimizer

"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)

"{8C5FAD77-F678-4758-A296-C12F08D179E0}" = Microsoft IntelliPoint 6.2

"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer

"{8FDC4F3F-1DD7-433E-841E-E20C294609B4}" = Windows Live Sync

"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard

"{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F}" = Readme

"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9C7C8898-DC29-4E8B-9E77-55A77C3250F6}" = PC Connectivity Solution

"{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}" = Microsoft Search Enhancement Pack

"{9DC696F3-BEDF-4069-A18D-89B41BF89769}" = Command Prompt Explorer Bar

"{9F59C3AE-81B0-4EF6-9762-D674BB079705}" = Nokia Software Updater

"{A195B13E-A5E3-4BAF-A995-7F70F445CD06}" = ScannerCopy

"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{A398D0A0-EE68-4CA6-8984-78AEF841CDE7}" = SBK09

"{A7388312-4FBB-48E5-8DC0-B63DA02658AE}" = Windows Live Toolbar

"{A8DB611A-D80E-450D-85F6-3ACDD164BE31}" = Pro Evolution Soccer 2009

"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder

"{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty® - World at War 1.1 Patch

"{B32D6CE8-D6C1-4615-8FC4-4EE822F7BD4B}" = SBK09

"{B6892A3F-51F5-4BA4-92E5-3F4A1A10720D}" = Podstawowe programy Windows Live

"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0

"{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA}" = CP_Package_Variety2

"{B996AE66-10DB-4ac5-B151-E8B4BFBC42FC}" = BufferChm

"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)

"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem driver

"{C506A18C-1469-4678-B094-F4EC9DAE6DB7}" = Scan

"{C510CA36-98D6-4F07-8AFF-81E7399A075B}" = 1400Trb

"{C93C7A4B-7DD9-4725-9993-4F032063926B}_is1" = VPX.PL Uploader 1.0

"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1

"{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC}" = Fax

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{CF589477-3D27-4C6F-82A3-78547ACAC55D}" = Galeria fotografii usługi Windows Live

"{D353C323-5E95-4873-9825-9FEC1C8A3794}" = Nokia Download!

"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty® - World at War

"{DAC63ECB-4571-435F-9B19-51F54BC88109}" = Nokia Home Media Server

"{DB4690C5-9015-401D-A96C-A49909B7C372}" = Poczta usługi Windows Live

"{DD49053A-0140-44EF-AE75-C4BC1FDB8286}" = Windows Live Writer

"{DF5A03CC-D5AA-43D8-B948-D9903F2AF94A}" = Counter-Strike

"{E1BBBAC5-2857-4155-82A6-54492CE88620}" = Opera 9.64

"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant

"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0

"{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}" = Styler

"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status

"{F51FF206-2273-4B3E-A90A-4752AE288C12}" = FUEL

"{FC762E57-B09D-41AE-AA5F-3DAC3CBE453E}" = Nokia Ovi Application Installer

"{FC8D21C8-7B29-4104-ADB0-FEE9CA1C7922}" = Folder Size for Windows

"{FE64AE29-0883-4C70-8388-DC026019C900}" = HP Image Zone Express

"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)

"4shared Desktop" = 4shared Desktop

"7-Zip" = 7-Zip 4.65

"AbiWord2" = AbiWord 2.6.8

"AbiwordIEPlugins" = AbiWord Importer/Exporter Plugins

"AbiwordToolsPlugins" = AbiWord Tools Plugins

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2

"Adobe Shockwave Player" = Adobe Shockwave Player

"AIMP2" = AIMP2

"AQQ" = WapSter AQQ

"ASCII Art Generator_is1" = ASCII Art Generator 3.2.4.4

"Audacity_is1" = Audacity 1.2.6

"CCleaner" = CCleaner (remove only)

"CD Art Display_is1" = CD Art Display 2.0

"Counter-Strike 1.6" = Counter-Strike 1.6

"CPLBonus" = Kels' CPL Bonus Pack!

"Deep Space 3D Screensaver" = Deep Space 3D Screensaver

"Defraggler" = Defraggler (remove only)

"Driver Magician_is1" = Driver Magician 3.42

"DriveSpace" = Drive Space Indicator

"FastStone Capture" = FastStone Capture 6.3

"FileZilla Client" = FileZilla Client 3.2.4.1

"foobar2000" = foobar2000 v0.9.6.8

"Fotosik Manager" = Fotosik Manager 0.23

"Fraps" = Fraps (remove only)

"Google Desktop" = Google Desktop

"HashCheck Shell Extension" = HashCheck Shell Extension (x86-32)

"HFSLIPTotalSlipstream" = HFSLIP Total Slipstream (v1.7.8, build 80614)

"HLSW_is1" = HLSW v1.3.1

"HP Imaging Device Functions" = HP Imaging Device Functions 5.3

"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.3

"InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty® - World at War 1.1 Patch

"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty® - World at War

"IrfanView" = IrfanView (remove only)

"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 4.7.5

"Koi Fish 3D Screensaver" = Koi Fish 3D Screensaver

"Mechanical Clock 3D Screensaver" = Mechanical Clock 3D Screensaver

"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"mIRC" = mIRC

"Mobiola Remote Control for S60_is1" = Mobiola Remote Control for S60 3.0.2

"Mobiola Web Camera for S60_is1" = Mobiola Web Camera for S60 3.0

"Mozilla Firefox (3.5.2)" = Mozilla Firefox (3.5.2)

"NAPIPROJEKT_is1" = NAPIPROJEKT 1.0.6.2

"Nokia Ovi Application Installer" = Nokia Ovi Application Installer 6.85.3008

"Nokia Ovi Content Copier" = Nokia Ovi Content Copier 6.85.3008

"Nokia Ovi One Touch Access" = Nokia Ovi One Touch Access 6.85.3008

"Nokia Ovi System Utilities" = Nokia Ovi System Utilities 6.85.3008

"Nowe Gadu-Gadu" = Nowe Gadu-Gadu

"NVIDIA Drivers" = NVIDIA Drivers

"OpenAL" = OpenAL

"PokerStars" = PokerStars

"PowerISO" = PowerISO

"Prio" = Prio v1.9.9.1732

"QuicktimeAlt_is1" = QuickTime Alternative 2.8.0

"Rainmeter" = Rainmeter (remove only)

"RegCompact.NET" = RegCompact.NET 2.0

"RocketDock_is1" = RocketDock 1.3.5

"SmartMovie Converter" = SmartMovie Converter

"StartMenuLSTRemover" = StartMenuLSTRemover

"Steam App 240" = Counter-Strike: Source

"StyleFolder_is1" = StyleFolder 1.0.3

"SubEdit-Player_is1" = SubEdit-Player

"SwitchOff" = Switch Off

"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2

"Total Copy 1.1 NetHorror Edition" = Total Copy 1.1 NetHorror Edition

"twkmastr1_is1" = TweakMASTER

"TwonkyvisionUPnPTwonkyMedia" = TwonkyMedia

"VDOTool_is1" = VDOTool 4.6

"Visual Task Tips" = Visual Task Tips 3.4

"vjpeg" = VJPEG Image Viewer (remove)

"Vtune_is1" = Vtune 7.4

"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5

"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"WinLiveSuite_Wave3" = Podstawowe programy Windows Live

"WinRAR archiver" = Archiwizator WinRAR

"WMFDist11" = Windows Media Format 11 runtime

"Wudf01005" = Microsoft User-Mode Driver Framework Feature Pack 1.5

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Headshot Player" = Headshot Player

========== Last 10 Event Log Errors ==========

[ Application Events ]

Error - 2009-06-13 12:05:33 | Computer Name = UZYTKOWNIK | Source = MsiInstaller | ID = 11706

Description = Produkt: Nokia Photos -- Błąd 1706. Pakiet instalacyjny dla produktu

Nokia Photos nie został odnaleziony. Spróbuj uruchomić instalację ponownie przy

użyciu aktualnej kopii pakietu instalacyjnego 'Nokia Photos.msi'.

Error - 2009-07-18 10:28:56 | Computer Name = UZYTKOWNIK | Source = Nokia Ovi Suite | ID = 100

Description = Timestamp: 2009-07-18 14:28:56 Message: HandlingInstanceID: b76d5c9e-92d6-4c02-86bf-feef3341b96a

An

exception of type 'System.Net.WebException' occurred and was caught. -----------------------------------------------------------------------

07/18/2009

16:28:55 Type : System.Net.WebException, System, Version=2.0.0.0, Culture=neutral,

PublicKeyToken=b77a5c561934e089 Message : The remote name could not be resolved:

'nds1.nokia.com' Source : System Help link : Status : NameResolutionFailure Response

: Data : System.Collections.ListDictionaryInternal TargetSite : System.Net.WebResponse

EndGetResponse(System.IAsyncResult) Stack Trace : at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult

asyncResult) at System.Net.WebClient.GetWebResponse(WebRequest request, IAsyncResult

result) at System.Net.WebClient.DownloadBitsResponseCallback(IAsyncResult result)

Additional

Info: MachineName : UZYTKOWNIK TimeStamp : 2009-07-18 14:28:56 FullName : Microsoft.Practices.EnterpriseLibrary.ExceptionHandling,

Version=3.1.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a AppDomainName

: NokiaOviSuite.exe ThreadIdentity : UZYTKOWNIK\P4RYK WindowsIdentity : UZYTKOWNIK\P4RYK

Category:

Default Category Priority: 3 EventId: 100 Severity: Error Title:Nokia Ovi Suite Exception

Machine:

UZYTKOWNIK Application Domain: NokiaOviSuite.exe Process Id: 2156 Process Name: C:\Program

Files\Nokia\Ovi\Suite\NokiaOviSuite.exe Win32 Thread Id: 1852 Thread Name: Extended

Properties: URL - http://www.google.pl/search?q=%s'>http://www.google.pl/search?q=%s'>http://www.google.pl/search?q=%s'>http://www.google.pl/search?q=%s

IE - HKU\S-1-5-20\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com

IE - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/

IE - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s

IE - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\S-1-5-21-3999254995-4045107473-1832837850-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.6

FF - prefs.js..extensions.enabledItems: hidemenubar@moztw.org:1.0.20090705

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.2.2

FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.2

FF - prefs.js..extensions.enabledItems: {da677c80-7714-11de-8a39-0800200c9a66}:1.1

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-06-03 14:18:19 | 00,000,000 | ---D | M]

FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-06-03 14:21:46 | 00,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Components: C:\Program Files\Mozilla Firefox 3.5 Beta 4\components [2009-08-03 22:00:23 | 00,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox 3.5 Beta 4\plugins [2009-08-03 00:04:50 | 00,000,000 | ---D | M]

[2009-06-03 15:30:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Extensions

[2009-06-03 15:30:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

[2009-08-13 12:57:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions

[2009-08-09 11:44:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2009-08-03 10:17:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\{da677c80-7714-11de-8a39-0800200c9a66}

[2009-06-26 22:01:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}

[2009-08-03 10:17:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\hidemenubar@moztw.org

[2009-08-09 11:44:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\personas@christopher.beard

O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)

O2 - BHO: (TweakMASTER Component) - {7DAAC7DE-9EF0-4FF0-BFA5-AFF3E899054C} - C:\Program Files\TweakMASTER\TweakBHO.dll (Hagel Technologies Ltd)

O2 - BHO: (Pomocnik rejestracji usługi Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (D) - {D26236EE-E95F-3000-BA56-8B3CE1DF6E20} - C:\WINDOWS\System32\xwr83134.dll (Microsoft Corporation)

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)

O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\P4RYK\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)

O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (StylerToolBar) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll (StyleFantasist)

O3 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.

O3 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\..\Toolbar\ShellBrowser: (no name) - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - No CLSID value found.

O3 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O4 - HKLM..\Run: [4shared Update] C:\Program Files\4shared Desktop\checkUpdate.exe (New IT Solutions)

O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe ()

O4 - HKLM..\Run: [intelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)

O4 - HKLM..\Run: [iSUSPM] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)

O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()

O4 - HKLM..\Run: [Resume copy] C:\WINDOWS\copyfstq.exe ()

O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)

O4 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()

O4 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002..\Run: [steam] c:\program files\valve\steam\steam.exe (Valve Corporation)

O4 - HKU\.DEFAULT..\RunOnce: [_nltide_3] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)

O4 - HKU\.DEFAULT..\RunOnce: [iE8] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)

O4 - HKU\.DEFAULT..\RunOnce: [showDeskFix] File not found

O4 - HKU\S-1-5-18..\RunOnce: [_nltide_3] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)

O4 - HKU\S-1-5-18..\RunOnce: [iE8] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)

O4 - HKU\S-1-5-18..\RunOnce: [showDeskFix] File not found

O4 - HKU\S-1-5-20..\RunOnce: [_nltide_3] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)

O4 - HKU\S-1-5-20..\RunOnce: [iE8] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)

O4 - HKU\S-1-5-20..\RunOnce: [showDeskFix] File not found

O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\del.exe ()

O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\starter.lnk = C:\Program Files\WindowZ\Kreator post-instalacyjny\starter.cmd ()

O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Transparent fx - lite.lnk = C:\Program Files\Fadebar\Fadebar.exe (Nookian Apps)

O4 - Startup: C:\Documents and Settings\Ania\Menu Start\Programy\Autostart\SMS Services.lnk = C:\Documents and Settings\P4RYK\Moje dokumenty\smss.exe ()

O4 - Startup: C:\Documents and Settings\Ania\Menu Start\Programy\Autostart\Transparent fx - lite.lnk = C:\Program Files\Fadebar\Fadebar.exe (Nookian Apps)

O4 - Startup: C:\Documents and Settings\Default User\Menu Start\Programy\Autostart\Transparent fx - lite.lnk = C:\Program Files\Fadebar\Fadebar.exe (Nookian Apps)

O4 - Startup: C:\Documents and Settings\Default User\Menu Start\Programy\Autostart\z.cmd ()

O4 - Startup: C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe File not found

O4 - Startup: C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Styler.lnk = C:\Documents and Settings\P4RYK\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()

O4 - Startup: C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Transparent fx - lite.lnk = C:\Program Files\Fadebar\Fadebar.exe (Nookian Apps)

O4 - Startup: C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Transparent fx.lnk = C:\Program Files\Fadebar\Fadebar.exe (Nookian Apps)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuEjectPC = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0

O8 - Extra context menu item: &Download all 4shared files - C:\Program Files\4shared Desktop\down_all.htm ()

O8 - Extra context menu item: &Download using 4shared Desktop - C:\Program Files\4shared Desktop\down_link.htm ()

O9 - Extra Button: Wpis w blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : &Wpis w blogu w Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)

O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.24.16.2

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ipp - No CLSID value found

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp - No CLSID value found

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O20 - AppInit_DLLs: (prio.dll) - C:\Program Files\Prio\prio.dll (O&K Software)

O20 - AppInit_DLLs: (wbsys.dll) - C:\WINDOWS\System32\wbsys.dll (Stardock.Net, Inc)

O20 - AppInit_DLLs: ("C:\PROGRA~1\Google\Google) - File not found

O20 - AppInit_DLLs: (Desktop) - File not found

O20 - AppInit_DLLs: (Search\GoogleDesktopNetwork3.dll") - File not found

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32 \smss.exe) - C:\WINDOWS\System32 \smss.exe ()

O20 - Winlogon\Notify\WBSrv: DllName - d:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll - d:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll (Stardock Corporation)

O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home

O31 - SafeBoot: AlternateShell - cmd.exe

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009-06-03 14:14:59 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O33 - MountPoints2\{17503f88-8115-11de-93c5-001617903f4b}\Shell\Autoplay\command - "" = H:\usb_installer.exe -- File not found

O33 - MountPoints2\{17503f88-8115-11de-93c5-001617903f4b}\Shell\explore\Command - "" = H:\usb_installer.exe -- File not found

O33 - MountPoints2\{17503f88-8115-11de-93c5-001617903f4b}\Shell\Open\Command - "" = H:\usb_installer.exe -- File not found

O33 - MountPoints2\{17503f89-8115-11de-93c5-001617903f4b}\Shell\Autoplay\command - "" = I:\usb_smss.exe -- File not found

O33 - MountPoints2\{17503f89-8115-11de-93c5-001617903f4b}\Shell\explore\Command - "" = I:\usb_smss.exe -- File not found

O33 - MountPoints2\{17503f89-8115-11de-93c5-001617903f4b}\Shell\Open\Command - "" = I:\usb_smss.exe -- File not found

O33 - MountPoints2\{29833356-751f-11de-93b5-001617903f4b}\Shell\Autoplay\command - "" = G:\autorun.exe -- File not found

O33 - MountPoints2\{29833356-751f-11de-93b5-001617903f4b}\Shell\explore\Command - "" = G:\autorun.exe -- File not found

O33 - MountPoints2\{29833356-751f-11de-93b5-001617903f4b}\Shell\Open\Command - "" = G:\autorun.exe -- File not found

O33 - MountPoints2\{721b85c4-5047-11de-b8b6-806d6172696f}\Shell\Autoplay\command - "" = I:\auto_run.exe -- File not found

O33 - MountPoints2\{721b85c4-5047-11de-b8b6-806d6172696f}\Shell\explore\Command - "" = I:\auto_run.exe -- File not found

O33 - MountPoints2\{721b85c4-5047-11de-b8b6-806d6172696f}\Shell\Open\Command - "" = I:\auto_run.exe -- File not found

O33 - MountPoints2\{aa035d6c-7565-11de-93b6-001617903f4b}\Shell\Autoplay\command - "" = G:\autorun.exe -- File not found

O33 - MountPoints2\{aa035d6c-7565-11de-93b6-001617903f4b}\Shell\explore\Command - "" = G:\autorun.exe -- File not found

O33 - MountPoints2\{aa035d6c-7565-11de-93b6-001617903f4b}\Shell\Open\Command - "" = G:\autorun.exe -- File not found

O33 - MountPoints2\{cbf2a59b-6883-11de-938c-001617903f4b}\Shell\Autoplay\command - "" = H:\usb_auto.exe -- File not found

O33 - MountPoints2\{cbf2a59b-6883-11de-938c-001617903f4b}\Shell\explore\Command - "" = H:\usb_auto.exe -- File not found

O33 - MountPoints2\{cbf2a59b-6883-11de-938c-001617903f4b}\Shell\Open\Command - "" = H:\usb_auto.exe -- File not found

O33 - MountPoints2\{fd3a60cc-8755-11de-93cb-001617903f4b}\Shell\Autoplay\command - "" = G:\usb_installer.exe -- File not found

O33 - MountPoints2\{fd3a60cc-8755-11de-93cb-001617903f4b}\Shell\explore\Command - "" = G:\usb_installer.exe -- File not found

O33 - MountPoints2\{fd3a60cc-8755-11de-93cb-001617903f4b}\Shell\Open\Command - "" = G:\usb_installer.exe -- File not found

O34 - HKLM BootExecute: (autocheck) - File not found

O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)

O34 - HKLM BootExecute: (*) - File not found

========== Files/Folders - Created Within 30 Days ==========

[3 C:\WINDOWS\System32\*.tmp files]

[2009-08-13 21:43:29 | 00,217,117 | ---- | C] () -- C:\Documents and Settings\P4RYK\Pulpit\2009-08-13_214327.jpg

[2009-08-13 17:07:51 | 00,049,048 | ---- | C] () -- C:\Documents and Settings\P4RYK\Pulpit\f48ea88904.jpg

[2009-08-13 16:38:54 | 00,000,481 | ---- | C] () -- C:\Documents and Settings\P4RYK\Pulpit\Produkty.doc

[2009-08-13 00:26:57 | 01,029,465 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\My Desktop.png

[2009-08-13 00:10:19 | 00,011,225 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\USB_Drive_by_Agamemmnon.png

[2009-08-13 00:09:51 | 00,011,267 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\Windows_System_Drive_by_Agamemmnon.png

[2009-08-12 22:15:12 | 00,046,212 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090812_221511.reg

[2009-08-12 22:02:25 | 00,705,844 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\Ensueno-1920x1200.jpg

[2009-08-12 18:05:19 | 00,000,283 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\(D) Download.lnk

[2009-08-12 18:05:16 | 00,000,299 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\© System.lnk

[2009-08-12 17:51:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\AveDesk

[2009-08-12 17:37:06 | 00,094,208 | ---- | C] (MediaTexX) -- C:\WINDOWS\System32\wmpuice.dll

[2009-08-12 17:37:06 | 00,069,632 | ---- | C] (CD Art Display) -- C:\WINDOWS\cadSSaver.scr

[2009-08-12 17:37:06 | 00,000,000 | ---D | C] -- C:\Program Files\CD Art Display

[2009-08-12 01:21:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\foobar2000

[2009-08-11 19:08:35 | 00,000,000 | ---D | C] -- C:\Sounds

[2009-08-11 19:04:25 | 00,000,000 | ---D | C] -- C:\Program Files\LG Electronics

[2009-08-11 19:03:37 | 01,164,728 | ---- | C] (NuMedia Soft, Inc.) -- C:\WINDOWS\System32\NMSDVDXU.dll

[2009-08-11 19:03:37 | 00,630,784 | ---- | C] (ComponentOne) -- C:\WINDOWS\System32\vsflex8u.ocx

[2009-08-11 19:03:37 | 00,419,240 | ---- | C] (VideoSoft) -- C:\WINDOWS\System32\Vsflex7L.ocx

[2009-08-11 19:03:37 | 00,244,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Msflxgrd.ocx

[2009-08-11 19:03:24 | 00,000,000 | ---D | C] -- C:\Program Files\LG PC Suite II

[2009-08-11 19:03:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\LG Electronics

[2009-08-10 20:12:23 | 00,137,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys

[2009-08-10 20:12:16 | 00,189,288 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe

[2009-08-10 20:12:14 | 00,189,288 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.xtr

[2009-08-10 20:12:08 | 00,075,064 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe

[2009-08-10 20:12:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\PunkBuster

[2009-08-10 19:53:51 | 00,000,000 | ---D | C] -- C:\Steam

[2009-08-10 13:40:48 | 00,000,130 | ---- | C] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\fusioncache.dat

[2009-08-10 13:40:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\ApplicationHistory

[2009-08-10 13:40:42 | 00,000,000 | ---D | C] -- C:\Program Files\CZ

[2009-08-09 22:27:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\AGD plugin

[2009-08-09 17:50:39 | 00,000,084 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\2009-08-09_175037.png

[2009-08-09 14:30:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Downloads

[2009-08-09 14:30:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\GetRightToGo

[2009-08-09 14:05:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\Activision

[2009-08-08 22:01:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\KONAMI

[2009-08-08 21:59:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI

[2009-08-08 21:57:02 | 00,000,000 | ---D | C] -- C:\Program Files\KONAMI

[2009-08-07 21:38:57 | 00,024,675 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\4vs1 ;p.png

[2009-08-07 21:30:24 | 00,060,522 | ---- | C] () -- C:\Kontakty_6864664.xml

[2009-08-05 21:00:30 | 00,230,425 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#3.png

[2009-08-05 20:59:11 | 00,516,190 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#2.png

[2009-08-05 20:58:29 | 00,185,949 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#1.png

[2009-08-05 20:53:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Styler

[2009-08-05 20:53:35 | 00,002,241 | ---- | C] () -- C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Styler.lnk

[2009-08-05 20:53:35 | 00,000,000 | ---D | C] -- C:\Program Files\Styler

[2009-08-05 17:10:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Magix

[2009-08-05 16:29:39 | 00,093,600 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\9.jpg

[2009-08-05 16:28:21 | 00,077,027 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\10.png

[2009-08-05 11:30:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Rainmeter

[2009-08-05 11:27:06 | 00,000,000 | ---D | C] -- C:\Program Files\Rainmeter

[2009-08-04 18:36:15 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll

[2009-08-04 18:36:11 | 00,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll

[2009-08-03 22:00:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Moje rozszerzenia Google Gadgets

[2009-08-03 22:00:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\Google

[2009-08-03 22:00:19 | 00,000,000 | ---D | C] -- C:\Program Files\Google

[2009-08-03 20:13:16 | 00,228,948 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\brush_test_by_Superkoe.jpg

[2009-08-03 15:12:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Odebrane pliki

[2009-08-03 15:07:17 | 00,055,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fssfltr_tdi.sys

[2009-08-03 15:06:55 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework

[2009-08-03 15:06:22 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition

[2009-08-03 15:05:52 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft

[2009-08-03 15:05:38 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive

[2009-08-03 15:05:29 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live

[2009-08-03 14:47:15 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live

[2009-08-01 14:56:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\FUEL

[2009-07-31 22:55:06 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\SecuROM

[2009-07-31 22:55:05 | 00,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll

[2009-07-31 22:53:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\microsoft

[2009-07-31 22:50:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\Rockstar Games

[2009-07-31 22:46:43 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xlive

[2009-07-31 22:46:43 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE

[2009-07-31 20:56:26 | 00,000,000 | ---D | C] -- C:\Program Files\7-Zip

[2009-07-30 18:18:12 | 00,006,250 | ---- | C] () -- C:\webcam_000001.jpg

[2009-07-30 18:16:10 | 00,000,000 | ---D | C] -- C:\Program Files\Mobiola Web Camera for S60

[2009-07-30 17:45:36 | 00,000,000 | ---D | C] -- C:\Program Files\Lonely Cat Games

[2009-07-29 16:19:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Mobiola Video Files

[2009-07-29 16:19:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Mobiola Image Files

[2009-07-29 16:17:19 | 00,114,688 | ---- | C] (Warelex LLC) -- C:\WINDOWS\System32\BTCamVideoSource.dll

[2009-07-29 16:17:19 | 00,000,000 | ---D | C] -- C:\Program Files\Mobiola Remote Control for S60

[2009-07-28 18:00:56 | 00,118,773 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\L4d Userbar by roman.rar

[2009-07-28 17:58:00 | 00,339,536 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\L4d Userbar by roman.psd

[2009-07-26 08:17:33 | 00,000,000 | ---D | C] -- C:\Program Files\4shared Desktop

[2009-07-26 08:17:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\4shared Desktop

[2009-07-24 18:19:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Wru Downloads

[2009-07-24 18:19:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Wru

[2009-07-24 18:19:54 | 01,040,384 | ---- | C] (John Marshall) -- C:\WINDOWS\System32\GnucDNA.dll

[2009-07-24 18:19:54 | 01,040,384 | ---- | C] (John Marshall Group) -- C:\WINDOWS\System32\GnucCOM.dll

[2009-07-24 18:19:54 | 00,000,000 | ---D | C] -- C:\Program Files\Wru

[2009-07-24 17:42:04 | 00,021,330 | R--- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\321.nbu

[2009-07-24 16:09:57 | 00,000,000 | ---D | C] -- C:\DqQ

[2009-07-24 16:06:20 | 00,074,436 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090724_160619.reg

[2009-07-23 20:00:06 | 00,000,000 | ---D | C] -- C:\Program Files\Counter-Strike 1.6

[2009-07-23 19:27:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Zdjecia

[2009-07-22 19:22:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Nowy folder

[2009-07-20 13:51:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\HP

[2009-07-20 13:50:49 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\HP

[2009-07-20 13:49:54 | 00,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard

[2009-07-20 13:49:18 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Hewlett-Packard

[2009-07-20 13:48:35 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbscan.sys

[2009-07-20 13:23:02 | 00,000,000 | ---D | C] -- C:\Program Files\HP

[2009-07-20 13:22:56 | 00,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbprint.sys

[2009-07-20 13:22:32 | 00,000,000 | -H-D | C] -- C:\Config.Msi

[2009-07-20 13:22:23 | 00,113,595 | ---- | C] () -- C:\WINDOWS\hpoins07.dat

[2009-07-20 13:22:23 | 00,021,124 | ---- | C] () -- C:\WINDOWS\hpomdl07.dat

[2009-07-20 13:22:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\HP

[2009-07-20 07:39:22 | 00,098,124 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090720_073921.reg

[2009-07-19 23:17:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\My Games

[2009-07-19 23:17:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\THQ

[2009-07-19 23:16:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallShield

[2009-07-19 23:09:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\InstallShield

[2009-07-19 12:32:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\FIFA 08

[2009-07-19 11:54:30 | 00,000,000 | ---D | C] -- C:\Program Files\EA Sports

[2009-07-19 11:54:08 | 00,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages

[2009-07-19 11:53:54 | 01,962,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quartz.dll

[2009-07-19 11:53:54 | 01,798,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qedit.dll

[2009-07-19 11:53:54 | 01,230,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msvidctl.dll

[2009-07-19 11:53:54 | 00,733,184 | ---- | C] () -- C:\WINDOWS\System32\dllcache\qedwipes.dll

[2009-07-19 11:53:54 | 00,667,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dinput8.dll

[2009-07-19 11:53:54 | 00,590,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dramp.dll

[2009-07-19 11:53:54 | 00,470,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qdvd.dll

[2009-07-19 11:53:54 | 00,436,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dim.dll

[2009-07-19 11:53:54 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll

[2009-07-19 11:53:54 | 00,350,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3drm.dll

[2009-07-19 11:53:54 | 00,324,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mswebdvd.dll

[2009-07-19 11:53:54 | 00,316,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qdv.dll

[2009-07-19 11:53:54 | 00,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax

[2009-07-19 11:53:54 | 00,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qcap.dll

[2009-07-19 11:53:54 | 00,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax

[2009-07-19 11:53:54 | 00,211,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qasf.dll

[2009-07-19 11:53:54 | 00,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmime.dll

[2009-07-19 11:53:54 | 00,136,192 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mpg2splt.ax

[2009-07-19 11:53:54 | 00,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\devenum.dll

[2009-07-19 11:53:54 | 00,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmusic.dll

[2009-07-19 11:53:54 | 00,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmsynth.dll

[2009-07-19 11:53:54 | 00,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmstyle.dll

[2009-07-19 11:53:54 | 00,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nabtsfec.sys

[2009-07-19 11:53:54 | 00,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmscript.dll

[2009-07-19 11:53:54 | 00,064,512 | ---- | C] () -- C:\WINDOWS\System32\dllcache\amstream.dll

[2009-07-19 11:53:54 | 00,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmcompos.dll

[2009-07-19 11:53:54 | 00,052,224 | ---- | C] () -- C:\WINDOWS\System32\msdvbnp.ax

[2009-07-19 11:53:54 | 00,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msdv.sys

[2009-07-19 11:53:54 | 00,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dxof.dll

[2009-07-19 11:53:54 | 00,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstdecod.dll

[2009-07-19 11:53:54 | 00,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax

[2009-07-19 11:53:54 | 00,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dpmesh.dll

[2009-07-19 11:53:54 | 00,034,304 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mciqtz32.dll

[2009-07-19 11:53:54 | 00,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmloader.dll

[2009-07-19 11:53:54 | 00,030,208 | ---- | C] () -- C:\WINDOWS\System32\psisrndr.ax

[2009-07-19 11:53:54 | 00,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmband.dll

[2009-07-19 11:53:54 | 00,018,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wstcodec.sys

[2009-07-19 11:53:54 | 00,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dswave.dll

[2009-07-19 11:53:54 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdaplgin.ax

[2009-07-19 11:53:54 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ccdecode.sys

[2009-07-19 11:53:54 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mpe.sys

[2009-07-19 11:53:54 | 00,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\streamip.sys

[2009-07-19 11:53:54 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax

[2009-07-19 11:53:54 | 00,013,312 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdmo.dll

[2009-07-19 11:53:54 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksolay.ax

[2009-07-19 11:53:54 | 00,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bdasup.sys

[2009-07-19 11:53:54 | 00,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\slip.sys

[2009-07-19 11:53:54 | 00,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxapi.sys

[2009-07-19 11:53:54 | 00,010,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ndisip.sys

[2009-07-19 11:53:54 | 00,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mstee.sys

[2009-07-19 11:53:53 | 01,294,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsound3d.dll

[2009-07-19 11:53:53 | 01,201,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3d8.dll

[2009-07-19 11:53:53 | 01,189,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dx8vb.dll

[2009-07-19 11:53:53 | 00,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxdiag.exe

[2009-07-19 11:53:53 | 00,797,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dim700.dll

[2009-07-19 11:53:53 | 00,723,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnet.dll

[2009-07-19 11:53:53 | 00,648,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dinput.dll

[2009-07-19 11:53:53 | 00,602,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dx7vb.dll

[2009-07-19 11:53:53 | 00,491,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsdmoprp.dll

[2009-07-19 11:53:53 | 00,467,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\diactfrm.dll

[2009-07-19 11:53:53 | 00,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsound.dll

[2009-07-19 11:53:53 | 00,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvoice.dll

[2009-07-19 11:53:53 | 00,292,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ddraw.dll

[2009-07-19 11:53:53 | 00,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dplayx.dll

[2009-07-19 11:53:53 | 00,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gcdef.dll

[2009-07-19 11:53:53 | 00,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\joy.cpl

[2009-07-19 11:53:53 | 00,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsdmo.dll

[2009-07-19 11:53:53 | 00,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvvox.dll

[2009-07-19 11:53:53 | 00,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvsetup.exe

[2009-07-19 11:53:53 | 00,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpwsockx.dll

[2009-07-19 11:53:53 | 00,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpmodemx.dll

[2009-07-19 11:53:53 | 00,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnhupnp.dll

[2009-07-19 11:53:53 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdllreg.exe

[2009-07-19 11:53:53 | 00,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dimap.dll

[2009-07-19 11:53:53 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnhpast.dll

[2009-07-19 11:53:53 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pid.dll

[2009-07-19 11:53:53 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dplaysvr.exe

[2009-07-19 11:53:53 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ddrawex.dll

[2009-07-19 11:53:53 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvacm.dll

[2009-07-19 11:53:53 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnsvr.exe

[2009-07-19 11:53:53 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3d8thk.dll

[2009-07-19 11:53:53 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnlobby.dll

[2009-07-19 11:53:53 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnaddr.dll

[2009-07-18 16:24:00 | 00,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf

[2009-07-18 16:23:59 | 00,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf

[2009-07-18 16:23:56 | 00,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll

[2009-07-18 16:18:26 | 00,136,704 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsu.sys

[2009-07-18 16:18:26 | 00,008,320 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsuc.sys

[2009-07-18 16:18:26 | 00,007,808 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys

[2009-07-18 16:18:25 | 00,022,016 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys

[2009-07-18 16:18:25 | 00,007,808 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerflt.sys

[2009-07-18 16:18:24 | 01,112,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01007.dll

[2009-07-18 16:18:24 | 00,659,968 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll

[2009-07-18 16:18:24 | 00,017,664 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys

[2009-07-18 16:14:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia

[2009-06-20 19:23:28 | 01,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll

[2009-06-20 19:23:28 | 01,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll

[2009-06-20 19:23:27 | 01,503,232 | ---- | C] () -- C:\WINDOWS\System32\nview.dll

[2009-06-20 19:23:27 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll

[2009-06-20 16:24:21 | 00,000,000 | ---- | C] () -- C:\WINDOWS\WB.ini

[2009-06-18 21:43:36 | 00,002,560 | ---- | C] () -- C:\WINDOWS\System32\SpeedCrunch.ini

[2009-06-07 09:44:27 | 00,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys

[2009-06-07 09:44:27 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys

[2009-06-06 11:46:37 | 00,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll

[2009-06-03 16:00:53 | 00,000,558 | ---- | C] () -- C:\WINDOWS\DFC.INI

[2009-06-03 15:19:33 | 00,003,574 | ---- | C] () -- C:\WINDOWS\System32\NOTEPAD.ini

[2009-06-03 15:13:54 | 00,135,168 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll

[2009-06-03 14:23:43 | 00,348,160 | ---- | C] () -- C:\WINDOWS\labels.dll

[2009-06-03 14:23:27 | 00,013,339 | ---- | C] () -- C:\WINDOWS\System32\shConvert.dll

[2009-06-03 14:23:27 | 00,013,312 | ---- | C] () -- C:\WINDOWS\System32\shpicgf.dll

[2009-06-03 14:23:26 | 00,211,968 | ---- | C] () -- C:\WINDOWS\System32\Formats.dll

[2009-06-03 14:23:25 | 00,040,448 | ---- | C] () -- C:\WINDOWS\System32\cdeject.dll

[2009-06-03 14:23:18 | 00,000,026 | ---- | C] () -- C:\WINDOWS\prio.ini

[2009-06-03 14:22:39 | 00,001,958 | ---- | C] () -- C:\WINDOWS\uninstall.ini

[2009-06-03 14:22:11 | 00,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[2009-06-03 14:22:07 | 00,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2009-06-03 14:22:07 | 00,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2009-06-03 14:22:06 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll

[2009-06-03 14:22:04 | 00,067,584 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2009-06-03 14:22:04 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest

[2009-04-22 00:19:06 | 00,172,173 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat

[2008-04-15 14:00:00 | 00,000,609 | ---- | C] () -- C:\WINDOWS\win.ini

[2008-04-15 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini

[2004-08-22 17:04:56 | 00,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll

[2003-06-09 15:05:18 | 00,094,636 | ---- | C] () -- C:\WINDOWS\dropcpyr.dll

[2001-07-06 15:30:02 | 00,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

========== Files - Modified Within 30 Days ==========

[3 C:\WINDOWS\System32\*.tmp files]

[2009-08-13 21:43:29 | 00,217,117 | ---- | M] () -- C:\Documents and Settings\P4RYK\Pulpit\2009-08-13_214327.jpg

[2009-08-13 17:07:51 | 00,049,048 | ---- | M] () -- C:\Documents and Settings\P4RYK\Pulpit\f48ea88904.jpg

[2009-08-13 16:40:19 | 00,000,481 | ---- | M] () -- C:\Documents and Settings\P4RYK\Pulpit\Produkty.doc

[2009-08-13 12:45:46 | 00,002,241 | ---- | M] () -- C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Styler.lnk

[2009-08-13 12:45:45 | 00,215,869 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml

[2009-08-13 12:44:13 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT

[2009-08-13 12:44:11 | 00,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2009-08-13 12:44:10 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2009-08-13 12:44:08 | 02,111,512 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2009-08-13 00:27:09 | 01,029,465 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\My Desktop.png

[2009-08-13 00:10:19 | 00,011,225 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\USB_Drive_by_Agamemmnon.png

[2009-08-13 00:09:51 | 00,011,267 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\Windows_System_Drive_by_Agamemmnon.png

[2009-08-12 23:06:02 | 00,648,448 | ---- | M] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT

[2009-08-12 23:04:33 | 00,003,574 | ---- | M] () -- C:\WINDOWS\System32\NOTEPAD.ini

[2009-08-12 22:15:14 | 00,046,212 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090812_221511.reg

[2009-08-12 22:02:25 | 00,705,844 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\Ensueno-1920x1200.jpg

[2009-08-12 18:05:19 | 00,000,283 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\(D) Download.lnk

[2009-08-12 18:05:16 | 00,000,299 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\© System.lnk

[2009-08-11 19:28:56 | 39,787,166 | -H-- | M] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\IconCache.db

[2009-08-11 19:27:26 | 01,106,650 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI

[2009-08-11 19:27:26 | 00,497,574 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat

[2009-08-11 19:27:26 | 00,438,928 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2009-08-11 19:27:26 | 00,087,372 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat

[2009-08-11 19:27:26 | 00,070,104 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2009-08-11 19:25:45 | 00,007,168 | ---- | M] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009-08-10 20:12:22 | 00,137,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys

[2009-08-10 20:12:14 | 00,189,288 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr

[2009-08-10 20:12:14 | 00,189,288 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.exe

[2009-08-10 20:12:08 | 00,075,064 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrA.exe

[2009-08-10 13:40:48 | 00,000,130 | ---- | M] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\fusioncache.dat

[2009-08-09 17:50:39 | 00,000,084 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\2009-08-09_175037.png

[2009-08-07 21:38:57 | 00,024,675 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\4vs1 ;p.png

[2009-08-07 21:30:24 | 00,060,522 | ---- | M] () -- C:\Kontakty_6864664.xml

[2009-08-05 21:01:57 | 00,516,190 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#2.png

[2009-08-05 21:00:34 | 00,230,425 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#3.png

[2009-08-05 20:58:30 | 00,185,949 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#1.png

[2009-08-05 16:29:41 | 00,093,600 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\9.jpg

[2009-08-05 16:28:23 | 00,077,027 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\10.png

[2009-08-03 20:13:17 | 00,228,948 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\brush_test_by_Superkoe.jpg

[2009-08-01 13:49:36 | 00,002,560 | ---- | M] () -- C:\WINDOWS\System32\SpeedCrunch.ini

[2009-07-31 22:55:05 | 00,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll

[2009-07-30 18:18:12 | 00,006,250 | ---- | M] () -- C:\webcam_000001.jpg

[2009-07-28 18:00:56 | 00,118,773 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\L4d Userbar by roman.rar

[2009-07-28 17:58:00 | 00,339,536 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\L4d Userbar by roman.psd

[2009-07-26 15:40:18 | 00,000,609 | ---- | M] () -- C:\WINDOWS\win.ini

[2009-07-24 17:42:29 | 00,021,330 | R--- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\321.nbu

[2009-07-24 16:06:22 | 00,074,436 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090724_160619.reg

[2009-07-20 13:52:10 | 00,113,595 | ---- | M] () -- C:\WINDOWS\hpoins07.dat

[2009-07-20 13:16:04 | 00,000,558 | ---- | M] () -- C:\WINDOWS\DFC.INI

[2009-07-20 07:39:24 | 00,098,124 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090720_073921.reg

[2009-07-18 16:24:00 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf

[2009-07-18 16:23:59 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf

========== LOP Check ==========

[2009-06-03 14:26:29 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji

[2009-06-03 14:24:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\FindeXer

[2009-06-03 14:26:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Xentient

[2009-08-08 21:59:26 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji

[2009-06-07 09:55:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Codemasters

[2009-06-03 14:26:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Finder Bar

[2009-06-27 14:09:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Hagel Technologies

[2009-07-18 16:17:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations

[2009-08-08 21:59:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI

[2009-08-05 17:10:56 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Magix

[2009-07-18 16:14:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia

[2009-07-26 12:23:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM

[2009-07-18 17:10:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite

[2009-06-08 16:26:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony

[2009-07-29 16:17:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP

[2009-07-24 18:34:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Wru

[2009-07-28 16:17:40 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Ania\Dane aplikacji

[2009-04-05 16:43:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ania\Dane aplikacji\AIMP

[2009-06-03 14:37:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ania\Dane aplikacji\Finder Bar

[2009-05-02 22:43:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ania\Dane aplikacji\FindeXer

[2009-07-28 16:17:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ania\Dane aplikacji\Opera

[2009-07-28 10:36:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ania\Dane aplikacji\Xentient

[2009-06-03 14:26:17 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji

[2009-04-05 16:43:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\AIMP

[2009-06-03 14:37:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\Finder Bar

[2009-05-02 22:43:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\FindeXer

[2009-07-23 15:49:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji

[2009-07-23 15:49:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Xentient

[2009-07-23 16:43:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji

[2009-07-23 16:43:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Xentient

[2009-08-12 17:51:18 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji

[2009-07-26 08:20:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\4shared Desktop

[2009-08-09 22:27:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\AGD plugin

[2009-08-13 21:08:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\AIMP

[2009-08-12 18:06:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\AveDesk

[2009-06-07 17:08:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\BlackBean

[2009-07-02 21:22:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Canneverbe_Limited

[2009-06-29 19:57:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\FileZilla

[2009-06-03 14:37:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Finder Bar

[2009-05-02 22:43:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\FindeXer

[2009-08-12 12:08:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\foobar2000

[2009-08-01 14:56:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\FUEL

[2009-08-09 18:24:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\GetRightToGo

[2009-06-29 19:58:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\GHISLER

[2009-08-12 00:03:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\HLSW

[2009-08-11 19:03:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\LG Electronics

[2009-08-13 02:01:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mIRC

[2009-06-03 17:20:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Nokia

[2009-06-03 15:37:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Nowe Gadu-Gadu

[2009-07-18 17:04:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Nseries

[2009-07-14 17:42:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\OpenFM

[2009-07-01 00:10:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Opera

[2009-08-11 19:33:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\PC Suite

[2009-06-08 16:26:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Publish Providers

[2009-07-31 22:55:06 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\SecuROM

[2009-06-08 17:12:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Sony

[2009-08-05 20:53:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Styler

[2009-06-13 12:40:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\teamspeak2

[2009-07-19 23:17:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\THQ

[2009-06-16 23:07:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\TinyPic Uploader

[2009-06-03 16:25:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Ventrilo

[2009-06-03 15:13:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\VitySoft

[2009-07-22 19:18:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Xentient

[2008-04-15 14:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini

[2009-08-13 12:44:13 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF

@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:95E14BBC

@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:888AFB86

< End of report >

MarekM25
komentarz
komentarz

Wygląda na to, że masz jakiegoś keyloggera.

Uruchom OTL i w oknie Custom Scans/Fixes wklej następujący skrypt:

:OTLPRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)O3 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.O3 - HKU\S-1-5-21-3999254995-4045107473-1832837850-1002\..\Toolbar\ShellBrowser: (no name) - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - No CLSID value found.O4 - HKU\.DEFAULT..\RunOnce: [showDeskFix] File not foundO4 - HKU\S-1-5-18..\RunOnce: [showDeskFix] File not foundO4 - HKU\S-1-5-20..\RunOnce: [showDeskFix] File not foundO4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\del.exe ()O4 - Startup: C:\Documents and Settings\Ania\Menu Start\Programy\Autostart\SMS Services.lnk = C:\Documents and Settings\P4RYK\Moje dokumenty\smss.exe ()O4 - Startup: C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe File not foundO20 - AppInit_DLLs: ("C:\PROGRA~1\Google\Google) - File not foundO20 - AppInit_DLLs: (Desktop) - File not foundO20 - AppInit_DLLs: (Search\GoogleDesktopNetwork3.dll") - File not foundO33 - MountPoints2\{17503f88-8115-11de-93c5-001617903f4b}\Shell\Autoplay\command - "" = H:\usb_installer.exe -- File not foundO33 - MountPoints2\{17503f88-8115-11de-93c5-001617903f4b}\Shell\explore\Command - "" = H:\usb_installer.exe -- File not foundO33 - MountPoints2\{17503f88-8115-11de-93c5-001617903f4b}\Shell\Open\Command - "" = H:\usb_installer.exe -- File not foundO33 - MountPoints2\{17503f89-8115-11de-93c5-001617903f4b}\Shell\Autoplay\command - "" = I:\usb_smss.exe -- File not foundO33 - MountPoints2\{17503f89-8115-11de-93c5-001617903f4b}\Shell\explore\Command - "" = I:\usb_smss.exe -- File not foundO33 - MountPoints2\{17503f89-8115-11de-93c5-001617903f4b}\Shell\Open\Command - "" = I:\usb_smss.exe -- File not foundO33 - MountPoints2\{29833356-751f-11de-93b5-001617903f4b}\Shell\Autoplay\command - "" = G:\autorun.exe -- File not foundO33 - MountPoints2\{29833356-751f-11de-93b5-001617903f4b}\Shell\explore\Command - "" = G:\autorun.exe -- File not foundO33 - MountPoints2\{29833356-751f-11de-93b5-001617903f4b}\Shell\Open\Command - "" = G:\autorun.exe -- File not foundO33 - MountPoints2\{721b85c4-5047-11de-b8b6-806d6172696f}\Shell\Autoplay\command - "" = I:\auto_run.exe -- File not foundO33 - MountPoints2\{721b85c4-5047-11de-b8b6-806d6172696f}\Shell\explore\Command - "" = I:\auto_run.exe -- File not foundO33 - MountPoints2\{721b85c4-5047-11de-b8b6-806d6172696f}\Shell\Open\Command - "" = I:\auto_run.exe -- File not foundO33 - MountPoints2\{aa035d6c-7565-11de-93b6-001617903f4b}\Shell\Autoplay\command - "" = G:\autorun.exe -- File not foundO33 - MountPoints2\{aa035d6c-7565-11de-93b6-001617903f4b}\Shell\explore\Command - "" = G:\autorun.exe -- File not foundO33 - MountPoints2\{aa035d6c-7565-11de-93b6-001617903f4b}\Shell\Open\Command - "" = G:\autorun.exe -- File not foundO33 - MountPoints2\{cbf2a59b-6883-11de-938c-001617903f4b}\Shell\Autoplay\command - "" = H:\usb_auto.exe -- File not foundO33 - MountPoints2\{cbf2a59b-6883-11de-938c-001617903f4b}\Shell\explore\Command - "" = H:\usb_auto.exe -- File not foundO33 - MountPoints2\{cbf2a59b-6883-11de-938c-001617903f4b}\Shell\Open\Command - "" = H:\usb_auto.exe -- File not foundO33 - MountPoints2\{fd3a60cc-8755-11de-93cb-001617903f4b}\Shell\Autoplay\command - "" = G:\usb_installer.exe -- File not foundO33 - MountPoints2\{fd3a60cc-8755-11de-93cb-001617903f4b}\Shell\explore\Command - "" = G:\usb_installer.exe -- File not foundO33 - MountPoints2\{fd3a60cc-8755-11de-93cb-001617903f4b}\Shell\Open\Command - "" = G:\usb_installer.exe -- File not found:FilesC:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\del.exeC:\Documents and Settings\P4RYK\Moje dokumenty\smss.exe:Reg[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]"SuperHidden"=dword:00000001[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]"Hidden"=dword:00000001[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]"ShowSuperHidden"=dword:00000001[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]"CheckedValue"=dword:00000001[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]@="":Commands[emptytemp][start explorer][Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera.

Następnie uruchamiasz OTL ponownie, tym razem wywołujesz opcję Run Scan. Pokazujesz nowy log OTL.txt (z czyszczenia + skan)

Jeszcze dla pewności znasz to: C:\Program Files\WindowZ\Kreator post-instalacyjny\starter.cmd,C:\Program Files\Fadebar\Fadebar.exe, C:\Documents and Settings\Default User\Menu Start\Programy\Autostart\z.cmd.

  • Dobra wypowiedź 1
szczotek
komentarz
komentarz

net fodebar.exe to od paska autostartu po na kursorem nie robi się przeźroczysty

a ten z.cmd też od tego

Log do sprawdzenia
jeOTL logfile created on: 2009-08-13 22:55:15 - Run 2

OTL by OldTimer - Version 3.0.10.6 Folder = C:\Documents and Settings\P4RYK\Moje dokumenty\Pobieranie

Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,41 Gb Available Physical Memory | 70,37% Memory free

3,85 Gb Paging File | 3,42 Gb Available in Paging File | 88,85% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 58,59 Gb Total Space | 6,51 Gb Free Space | 11,11% Space Free | Partition Type: NTFS

Drive D: | 232,88 Gb Total Space | 24,17 Gb Free Space | 10,38% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: UZYTKOWNIK

Current User Name: P4RYK

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: Current user

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Processes (SafeList) ==========

PRC - [2007-11-14 21:46:00 | 00,131,072 | ---- | M] (Brio) -- C:\Program Files\FolderSize\FolderSizeSvc.exe

PRC - [2009-03-27 10:03:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe

PRC - [2004-09-29 12:14:36 | 00,069,632 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe

PRC - [2009-08-10 20:12:08 | 00,075,064 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrA.exe

PRC - [2009-08-10 20:12:14 | 00,189,288 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.exe

PRC - [2009-01-14 17:53:02 | 00,226,656 | ---- | M] (Microsoft Corp.) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

PRC - [2008-07-09 16:03:48 | 00,102,400 | ---- | M] (PacketVideo) -- C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe

PRC - [2008-07-09 16:20:42 | 00,696,320 | ---- | M] () -- C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMediaServer.exe

PRC - [2009-05-13 00:50:59 | 00,425,984 | -HS- | M] () -- C:\WINDOWS\System32 \smss.exe

PRC - [2009-05-13 00:50:59 | 01,597,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE

PRC - [2007-08-31 21:01:21 | 01,037,736 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exe

PRC - [2006-05-18 08:27:06 | 16,207,872 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE

PRC - [2009-06-10 19:47:41 | 01,217,784 | ---- | M] (Valve Corporation) -- C:\program files\valve\steam\steam.exe

PRC - [2006-05-16 10:58:18 | 00,213,936 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

PRC - [2007-09-02 13:58:52 | 00,495,616 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe

PRC - [2006-05-03 10:48:46 | 00,307,200 | ---- | M] (ta2027) -- C:\Program Files\Styler\Styler.exe

PRC - [2008-12-25 23:45:06 | 00,211,333 | ---- | M] (Nookian Apps) -- C:\Program Files\Fadebar\Fadebar.exe

PRC - [2009-08-03 00:04:50 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox 3.5 Beta 4\firefox.exe

PRC - [2009-05-08 02:45:19 | 00,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\wmiprvse.exe

PRC - [2009-08-13 21:50:53 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\P4RYK\Moje dokumenty\Pobieranie\OTL.exe

========== Win32 Services (SafeList) ==========

SRV - [2009-06-03 17:31:06 | 00,072,704 | ---- | M] (Adobe Systems) -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service [On_Demand | Stopped])

SRV - [2008-07-25 17:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])

SRV - [2008-07-25 17:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])

SRV - [2007-11-14 21:46:00 | 00,131,072 | ---- | M] (Brio) -- C:\Program Files\FolderSize\FolderSizeSvc.exe -- (FolderSize [Auto | Running])

SRV - [2008-07-30 03:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])

SRV - [2009-02-06 18:08:58 | 00,533,360 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc [On_Demand | Stopped])

SRV - [2009-08-03 22:00:19 | 00,030,192 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe -- (GoogleDesktopManager-060409-093314 [On_Demand | Stopped])

SRV - [2008-07-30 01:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [unknown | Stopped])

SRV - [2009-06-03 14:21:46 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Disabled | Stopped])

SRV - [2008-07-30 01:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])

SRV - [2008-10-20 22:18:26 | 00,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU [On_Demand | Stopped])

SRV - [2009-03-27 10:03:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running])

SRV - [2004-09-29 12:14:36 | 00,069,632 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe -- (Pml Driver HPZ12 [Auto | Running])

SRV - [2009-08-10 20:12:08 | 00,075,064 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrA.exe -- (PnkBstrA [Auto | Running])

SRV - [2009-08-10 20:12:14 | 00,189,288 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.exe -- (PnkBstrB [Auto | Running])

SRV - [2009-01-12 17:18:54 | 00,005,120 | ---- | M] () -- C:\Program Files\Prio\prio_svc.exe -- (prio_svc [Disabled | Stopped])

SRV - [2009-01-14 17:53:02 | 00,226,656 | ---- | M] (Microsoft Corp.) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort [Auto | Running])

SRV - [2008-05-30 12:32:16 | 00,572,416 | ---- | M] (Nokia.) -- C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer [On_Demand | Stopped])

SRV - [2008-07-09 16:03:48 | 00,102,400 | ---- | M] (PacketVideo) -- C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe -- (TwonkyMedia [Auto | Running])

SRV - [2006-12-01 12:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

========== Driver Services (SafeList) ==========

DRV - [2009-05-16 15:41:04 | 00,007,311 | ---- | M] (ALi Corporation) -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde [boot | Running])

DRV - [2006-06-27 14:24:16 | 00,031,744 | ---- | M] (AMD, Inc.) -- C:\WINDOWS\System32\DRIVERS\AmdTools.sys -- (AmdTools [On_Demand | Running])

DRV - [2004-08-22 16:31:10 | 00,155,136 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus [boot | Running])

DRV - [2004-08-22 16:31:48 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt [boot | Running])

DRV - [2009-02-06 18:08:42 | 00,055,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\fssfltr_tdi.sys -- (fssfltr [Auto | Running])

DRV - [2008-04-15 14:00:00 | 00,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])

DRV - [2005-03-08 05:43:25 | 00,051,120 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZid412.sys -- (HPZid412 [On_Demand | Stopped])

DRV - [2005-03-08 05:43:26 | 00,016,496 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZipr12.sys -- (HPZipr12 [On_Demand | Stopped])

DRV - [2005-03-08 05:43:27 | 00,021,744 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZius12.sys -- (HPZius12 [On_Demand | Stopped])

DRV - [2006-05-16 11:32:58 | 04,275,712 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])

DRV - [2009-05-16 15:42:18 | 00,210,304 | ---- | M] (ULi Electronics Inc.) -- C:\WINDOWS\system32\DRIVERS\m5288.sys -- (m5288 [boot | Running])

DRV - [2009-02-09 07:37:46 | 00,017,664 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys -- (nmwcd [On_Demand | Stopped])

DRV - [2009-02-09 07:37:46 | 00,022,016 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys -- (nmwcdc [On_Demand | Stopped])

DRV - [2009-03-19 13:48:18 | 00,136,704 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu [On_Demand | Stopped])

DRV - [2009-03-19 13:48:12 | 00,008,320 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc [On_Demand | Stopped])

DRV - [2009-03-27 10:03:00 | 06,280,416 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running])

DRV - [2007-09-17 15:53:26 | 00,021,632 | ---- | M] (Nokia) -- C:\WINDOWS\System32\DRIVERS\pccsmcfd.sys -- (pccsmcfd [On_Demand | Stopped])

DRV - [2009-08-10 20:12:22 | 00,137,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys -- (PnkBstrK [On_Demand | Stopped])

DRV - [2007-08-21 10:12:59 | 00,021,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\point32.sys -- (Point32 [On_Demand | Running])

DRV - [2008-04-15 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])

DRV - [2009-03-15 12:25:46 | 00,056,268 | ---- | M] (PowerISO Computing, Inc.) -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu [system | Running])

DRV - [2008-04-15 14:00:00 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])

DRV - [2009-05-16 15:42:09 | 00,069,168 | ---- | M] (Silicon Image, Inc.) -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112 [boot | Running])

DRV - [2009-05-16 15:42:01 | 00,209,200 | ---- | M] (Silicon Image, Inc) -- C:\WINDOWS\System32\drivers\Si3114r5.sys -- (Si3114r5 [boot | Stopped])

DRV - [2009-05-16 15:42:03 | 00,076,208 | ---- | M] (Silicon Image, Inc.) -- C:\WINDOWS\System32\drivers\si3124.sys -- (Si3124 [boot | Running])

DRV - [2009-05-16 15:42:05 | 00,080,424 | ---- | M] (Silicon Image, Inc) -- C:\WINDOWS\System32\drivers\si3132.sys -- (Si3132 [boot | Running])

DRV - [2009-05-16 15:42:06 | 00,217,128 | ---- | M] (Silicon Image, Inc) -- C:\WINDOWS\System32\drivers\Si3132r5.sys -- (Si3132r5 [boot | Running])

DRV - [2009-05-16 15:42:07 | 00,210,736 | ---- | M] (Silicon Image, Inc) -- C:\WINDOWS\System32\drivers\Si3531.sys -- (Si3531 [boot | Running])

DRV - [2007-03-16 10:11:38 | 00,012,256 | ---- | M] (Windows ® 2000 DDK provider) -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel [Auto | Running])

DRV - [2005-03-22 14:36:40 | 00,028,672 | R--- | M] (ULi Electronics Inc.) -- C:\WINDOWS\System32\DRIVERS\ULILAN51.SYS -- (ULI5261XP [On_Demand | Running])

DRV - [2009-02-09 07:37:48 | 00,007,808 | ---- | M] (Nokia) -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys -- (upperdev [On_Demand | Stopped])

DRV - [2008-09-04 06:27:28 | 00,013,056 | ---- | M] (LG Electronics Inc.) -- C:\WINDOWS\System32\DRIVERS\lgusbbus.sys -- (usbbus [On_Demand | Stopped])

DRV - [2008-09-04 06:28:22 | 00,019,968 | ---- | M] (LG Electronics Inc.) -- C:\WINDOWS\System32\DRIVERS\lgusbdiag.sys -- (UsbDiag [On_Demand | Stopped])

DRV - [2008-09-04 06:27:54 | 00,024,832 | ---- | M] (LG Electronics Inc.) -- C:\WINDOWS\System32\DRIVERS\lgusbmodem.sys -- (USBModem [On_Demand | Stopped])

DRV - [2009-05-08 00:47:10 | 00,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbser.sys -- (usbser [On_Demand | Stopped])

DRV - [2009-02-09 07:37:56 | 00,007,808 | ---- | M] (Nokia) -- C:\WINDOWS\System32\DRIVERS\usbser_lowerfltj.sys -- (UsbserFilt [On_Demand | Stopped])

DRV - [2001-12-19 11:45:00 | 00,008,576 | ---- | M] (Microsoft Corporation) -- C:\Program Files\System\CPL Bonus\Vcdrom.sys -- (vcdrom [system | Running])

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/

IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.6

FF - prefs.js..extensions.enabledItems: hidemenubar@moztw.org:1.0.20090705

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.2.2

FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.2

FF - prefs.js..extensions.enabledItems: {da677c80-7714-11de-8a39-0800200c9a66}:1.1

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-06-03 14:18:19 | 00,000,000 | ---D | M]

FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-06-03 14:21:46 | 00,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Components: C:\Program Files\Mozilla Firefox 3.5 Beta 4\components [2009-08-03 22:00:23 | 00,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox 3.5 Beta 4\plugins [2009-08-03 00:04:50 | 00,000,000 | ---D | M]

[2009-06-03 15:30:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Extensions

[2009-06-03 15:30:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

[2009-08-13 12:57:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions

[2009-08-09 11:44:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2009-08-03 10:17:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\{da677c80-7714-11de-8a39-0800200c9a66}

[2009-06-26 22:01:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}

[2009-08-03 10:17:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\hidemenubar@moztw.org

[2009-08-09 11:44:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\P4RYK\Dane aplikacji\mozilla\Firefox\Profiles\sd58t0gq.default\extensions\personas@christopher.beard

O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)

O2 - BHO: (TweakMASTER Component) - {7DAAC7DE-9EF0-4FF0-BFA5-AFF3E899054C} - C:\Program Files\TweakMASTER\TweakBHO.dll (Hagel Technologies Ltd)

O2 - BHO: (Pomocnik rejestracji usługi Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (D) - {D26236EE-E95F-3000-BA56-8B3CE1DF6E20} - C:\WINDOWS\System32\xwr83134.dll (Microsoft Corporation)

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)

O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\P4RYK\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)

O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (StylerToolBar) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll (StyleFantasist)

O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O4 - HKLM..\Run: [4shared Update] C:\Program Files\4shared Desktop\checkUpdate.exe (New IT Solutions)

O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe ()

O4 - HKLM..\Run: [intelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)

O4 - HKLM..\Run: [iSUSPM] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)

O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()

O4 - HKLM..\Run: [Resume copy] C:\WINDOWS\copyfstq.exe ()

O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)

O4 - HKCU..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()

O4 - HKCU..\Run: [steam] c:\program files\valve\steam\steam.exe (Valve Corporation)

O4 - Startup: C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Styler.lnk = C:\Documents and Settings\P4RYK\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()

O4 - Startup: C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Transparent fx - lite.lnk = C:\Program Files\Fadebar\Fadebar.exe (Nookian Apps)

O4 - Startup: C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Transparent fx.lnk = C:\Program Files\Fadebar\Fadebar.exe (Nookian Apps)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuEjectPC = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0

O8 - Extra context menu item: &Download all 4shared files - C:\Program Files\4shared Desktop\down_all.htm ()

O8 - Extra context menu item: &Download using 4shared Desktop - C:\Program Files\4shared Desktop\down_link.htm ()

O9 - Extra Button: Wpis w blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : &Wpis w blogu w Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)

O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.24.16.2

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ipp - No CLSID value found

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp - No CLSID value found

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O20 - AppInit_DLLs: (prio.dll) - C:\Program Files\Prio\prio.dll (O&K Software)

O20 - AppInit_DLLs: (wbsys.dll) - C:\WINDOWS\System32\wbsys.dll (Stardock.Net, Inc)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32 \smss.exe) - C:\WINDOWS\System32 \smss.exe ()

O20 - Winlogon\Notify\WBSrv: DllName - d:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll - d:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll (Stardock Corporation)

O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home

O31 - SafeBoot: AlternateShell - cmd.exe

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009-06-03 14:14:59 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck) - File not found

O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)

O34 - HKLM BootExecute: (*) - File not found

========== Files/Folders - Created Within 30 Days ==========

[3 C:\WINDOWS\System32\*.tmp files]

[2009-08-13 22:49:45 | 00,000,000 | ---D | C] -- C:\_OTL

[2009-08-13 21:56:13 | 00,000,000 | -H-D | C] -- C:\WINDOWS\PIF

[2009-08-13 21:43:29 | 00,217,117 | ---- | C] () -- C:\Documents and Settings\P4RYK\Pulpit\2009-08-13_214327.jpg

[2009-08-13 17:07:51 | 00,049,048 | ---- | C] () -- C:\Documents and Settings\P4RYK\Pulpit\f48ea88904.jpg

[2009-08-13 16:38:54 | 00,000,481 | ---- | C] () -- C:\Documents and Settings\P4RYK\Pulpit\Produkty.doc

[2009-08-13 00:26:57 | 01,029,465 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\My Desktop.png

[2009-08-13 00:10:19 | 00,011,225 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\USB_Drive_by_Agamemmnon.png

[2009-08-13 00:09:51 | 00,011,267 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\Windows_System_Drive_by_Agamemmnon.png

[2009-08-12 22:15:12 | 00,046,212 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090812_221511.reg

[2009-08-12 22:02:25 | 00,705,844 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\Ensueno-1920x1200.jpg

[2009-08-12 18:05:19 | 00,000,283 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\(D) Download.lnk

[2009-08-12 18:05:16 | 00,000,299 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\© System.lnk

[2009-08-12 17:51:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\AveDesk

[2009-08-12 17:37:06 | 00,094,208 | ---- | C] (MediaTexX) -- C:\WINDOWS\System32\wmpuice.dll

[2009-08-12 17:37:06 | 00,069,632 | ---- | C] (CD Art Display) -- C:\WINDOWS\cadSSaver.scr

[2009-08-12 17:37:06 | 00,000,000 | ---D | C] -- C:\Program Files\CD Art Display

[2009-08-12 01:21:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\foobar2000

[2009-08-11 19:08:35 | 00,000,000 | ---D | C] -- C:\Sounds

[2009-08-11 19:04:25 | 00,024,832 | ---- | C] (LG Electronics Inc.) -- C:\WINDOWS\System32\drivers\lgusbmodem.sys

[2009-08-11 19:04:25 | 00,019,968 | ---- | C] (LG Electronics Inc.) -- C:\WINDOWS\System32\drivers\lgusbdiag.sys

[2009-08-11 19:04:25 | 00,013,056 | ---- | C] (LG Electronics Inc.) -- C:\WINDOWS\System32\drivers\lgusbbus.sys

[2009-08-11 19:04:25 | 00,000,000 | ---D | C] -- C:\Program Files\LG Electronics

[2009-08-11 19:03:37 | 01,164,728 | ---- | C] (NuMedia Soft, Inc.) -- C:\WINDOWS\System32\NMSDVDXU.dll

[2009-08-11 19:03:37 | 00,630,784 | ---- | C] (ComponentOne) -- C:\WINDOWS\System32\vsflex8u.ocx

[2009-08-11 19:03:37 | 00,419,240 | ---- | C] (VideoSoft) -- C:\WINDOWS\System32\Vsflex7L.ocx

[2009-08-11 19:03:37 | 00,244,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Msflxgrd.ocx

[2009-08-11 19:03:24 | 00,000,000 | ---D | C] -- C:\Program Files\LG PC Suite II

[2009-08-11 19:03:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\LG Electronics

[2009-08-10 20:12:23 | 00,137,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys

[2009-08-10 20:12:16 | 00,189,288 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe

[2009-08-10 20:12:14 | 00,189,288 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.xtr

[2009-08-10 20:12:08 | 00,075,064 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe

[2009-08-10 20:12:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\PunkBuster

[2009-08-10 19:53:51 | 00,000,000 | ---D | C] -- C:\Steam

[2009-08-10 13:40:48 | 00,000,130 | ---- | C] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\fusioncache.dat

[2009-08-10 13:40:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\ApplicationHistory

[2009-08-10 13:40:42 | 00,000,000 | ---D | C] -- C:\Program Files\CZ

[2009-08-09 22:27:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\AGD plugin

[2009-08-09 17:50:39 | 00,000,084 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\2009-08-09_175037.png

[2009-08-09 14:30:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Downloads

[2009-08-09 14:30:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\GetRightToGo

[2009-08-09 14:05:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\Activision

[2009-08-08 22:01:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\KONAMI

[2009-08-08 21:59:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI

[2009-08-08 21:57:02 | 00,000,000 | ---D | C] -- C:\Program Files\KONAMI

[2009-08-07 21:38:57 | 00,024,675 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\4vs1 ;p.png

[2009-08-07 21:30:24 | 00,060,522 | ---- | C] () -- C:\Kontakty_6864664.xml

[2009-08-05 21:00:30 | 00,230,425 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#3.png

[2009-08-05 20:59:11 | 00,516,190 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#2.png

[2009-08-05 20:58:29 | 00,185,949 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#1.png

[2009-08-05 20:53:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\Styler

[2009-08-05 20:53:35 | 00,002,241 | ---- | C] () -- C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Styler.lnk

[2009-08-05 20:53:35 | 00,000,000 | ---D | C] -- C:\Program Files\Styler

[2009-08-05 17:10:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Magix

[2009-08-05 16:29:39 | 00,093,600 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\9.jpg

[2009-08-05 16:28:21 | 00,077,027 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\10.png

[2009-08-05 11:30:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Rainmeter

[2009-08-05 11:27:06 | 00,000,000 | ---D | C] -- C:\Program Files\Rainmeter

[2009-08-04 18:36:15 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll

[2009-08-04 18:36:11 | 00,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll

[2009-08-03 22:00:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Moje rozszerzenia Google Gadgets

[2009-08-03 22:00:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\Google

[2009-08-03 22:00:19 | 00,000,000 | ---D | C] -- C:\Program Files\Google

[2009-08-03 20:13:16 | 00,228,948 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\brush_test_by_Superkoe.jpg

[2009-08-03 15:12:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Odebrane pliki

[2009-08-03 15:07:17 | 00,055,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fssfltr_tdi.sys

[2009-08-03 15:06:55 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework

[2009-08-03 15:06:22 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition

[2009-08-03 15:05:52 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft

[2009-08-03 15:05:38 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive

[2009-08-03 15:05:29 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live

[2009-08-03 14:47:15 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live

[2009-08-01 14:56:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\FUEL

[2009-07-31 22:55:06 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\SecuROM

[2009-07-31 22:55:05 | 00,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll

[2009-07-31 22:53:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\microsoft

[2009-07-31 22:50:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\Rockstar Games

[2009-07-31 22:46:43 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xlive

[2009-07-31 22:46:43 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE

[2009-07-31 20:56:26 | 00,000,000 | ---D | C] -- C:\Program Files\7-Zip

[2009-07-30 18:18:12 | 00,006,250 | ---- | C] () -- C:\webcam_000001.jpg

[2009-07-30 18:16:10 | 00,000,000 | ---D | C] -- C:\Program Files\Mobiola Web Camera for S60

[2009-07-30 17:45:36 | 00,000,000 | ---D | C] -- C:\Program Files\Lonely Cat Games

[2009-07-29 16:19:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Mobiola Video Files

[2009-07-29 16:19:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Mobiola Image Files

[2009-07-29 16:17:19 | 00,114,688 | ---- | C] (Warelex LLC) -- C:\WINDOWS\System32\BTCamVideoSource.dll

[2009-07-29 16:17:19 | 00,000,000 | ---D | C] -- C:\Program Files\Mobiola Remote Control for S60

[2009-07-28 18:00:56 | 00,118,773 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\L4d Userbar by roman.rar

[2009-07-28 17:58:00 | 00,339,536 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\L4d Userbar by roman.psd

[2009-07-26 08:17:33 | 00,000,000 | ---D | C] -- C:\Program Files\4shared Desktop

[2009-07-26 08:17:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\4shared Desktop

[2009-07-24 18:19:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Wru Downloads

[2009-07-24 18:19:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Wru

[2009-07-24 18:19:54 | 01,040,384 | ---- | C] (John Marshall) -- C:\WINDOWS\System32\GnucDNA.dll

[2009-07-24 18:19:54 | 01,040,384 | ---- | C] (John Marshall Group) -- C:\WINDOWS\System32\GnucCOM.dll

[2009-07-24 18:19:54 | 00,000,000 | ---D | C] -- C:\Program Files\Wru

[2009-07-24 17:42:04 | 00,021,330 | R--- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\321.nbu

[2009-07-24 16:09:57 | 00,000,000 | ---D | C] -- C:\DqQ

[2009-07-24 16:06:20 | 00,074,436 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090724_160619.reg

[2009-07-23 20:00:06 | 00,000,000 | ---D | C] -- C:\Program Files\Counter-Strike 1.6

[2009-07-23 19:27:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Zdjecia

[2009-07-22 19:22:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\Nowy folder

[2009-07-20 13:51:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\HP

[2009-07-20 13:50:49 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\HP

[2009-07-20 13:49:54 | 00,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard

[2009-07-20 13:49:18 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Hewlett-Packard

[2009-07-20 13:48:35 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbscan.sys

[2009-07-20 13:24:15 | 00,306,688 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUninst.exe

[2009-07-20 13:24:15 | 00,278,584 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZidr12.dll

[2009-07-20 13:24:15 | 00,204,800 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZipr12.dll

[2009-07-20 13:24:15 | 00,094,208 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZipt12.dll

[2009-07-20 13:24:15 | 00,069,632 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZipm12.exe

[2009-07-20 13:24:15 | 00,061,440 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZinw12.exe

[2009-07-20 13:24:15 | 00,057,344 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZisn12.dll

[2009-07-20 13:23:02 | 00,000,000 | ---D | C] -- C:\Program Files\HP

[2009-07-20 13:22:56 | 00,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbprint.sys

[2009-07-20 13:22:32 | 00,000,000 | -H-D | C] -- C:\Config.Msi

[2009-07-20 13:22:23 | 00,113,595 | ---- | C] () -- C:\WINDOWS\hpoins07.dat

[2009-07-20 13:22:23 | 00,021,124 | ---- | C] () -- C:\WINDOWS\hpomdl07.dat

[2009-07-20 13:22:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\HP

[2009-07-20 07:39:22 | 00,098,124 | ---- | C] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090720_073921.reg

[2009-07-19 23:17:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\My Games

[2009-07-19 23:17:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\THQ

[2009-07-19 23:16:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallShield

[2009-07-19 23:09:27 | 00,073,728 | ---- | C] (Macrovision Corporation) -- C:\WINDOWS\System32\ISUSPM.cpl

[2009-07-19 23:09:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Dane aplikacji\InstallShield

[2009-07-19 12:32:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\P4RYK\Moje dokumenty\FIFA 08

[2009-07-19 11:54:30 | 00,000,000 | ---D | C] -- C:\Program Files\EA Sports

[2009-07-19 11:54:08 | 00,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages

[2009-07-19 11:53:54 | 01,962,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quartz.dll

[2009-07-19 11:53:54 | 01,798,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qedit.dll

[2009-07-19 11:53:54 | 01,230,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msvidctl.dll

[2009-07-19 11:53:54 | 00,733,184 | ---- | C] () -- C:\WINDOWS\System32\dllcache\qedwipes.dll

[2009-07-19 11:53:54 | 00,667,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dinput8.dll

[2009-07-19 11:53:54 | 00,590,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dramp.dll

[2009-07-19 11:53:54 | 00,470,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qdvd.dll

[2009-07-19 11:53:54 | 00,436,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dim.dll

[2009-07-19 11:53:54 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll

[2009-07-19 11:53:54 | 00,350,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3drm.dll

[2009-07-19 11:53:54 | 00,324,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mswebdvd.dll

[2009-07-19 11:53:54 | 00,316,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qdv.dll

[2009-07-19 11:53:54 | 00,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax

[2009-07-19 11:53:54 | 00,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qcap.dll

[2009-07-19 11:53:54 | 00,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax

[2009-07-19 11:53:54 | 00,211,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qasf.dll

[2009-07-19 11:53:54 | 00,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmime.dll

[2009-07-19 11:53:54 | 00,136,192 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mpg2splt.ax

[2009-07-19 11:53:54 | 00,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\devenum.dll

[2009-07-19 11:53:54 | 00,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmusic.dll

[2009-07-19 11:53:54 | 00,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmsynth.dll

[2009-07-19 11:53:54 | 00,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmstyle.dll

[2009-07-19 11:53:54 | 00,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nabtsfec.sys

[2009-07-19 11:53:54 | 00,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmscript.dll

[2009-07-19 11:53:54 | 00,064,512 | ---- | C] () -- C:\WINDOWS\System32\dllcache\amstream.dll

[2009-07-19 11:53:54 | 00,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmcompos.dll

[2009-07-19 11:53:54 | 00,052,224 | ---- | C] () -- C:\WINDOWS\System32\msdvbnp.ax

[2009-07-19 11:53:54 | 00,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msdv.sys

[2009-07-19 11:53:54 | 00,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dxof.dll

[2009-07-19 11:53:54 | 00,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstdecod.dll

[2009-07-19 11:53:54 | 00,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax

[2009-07-19 11:53:54 | 00,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dpmesh.dll

[2009-07-19 11:53:54 | 00,034,304 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mciqtz32.dll

[2009-07-19 11:53:54 | 00,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmloader.dll

[2009-07-19 11:53:54 | 00,030,208 | ---- | C] () -- C:\WINDOWS\System32\psisrndr.ax

[2009-07-19 11:53:54 | 00,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmband.dll

[2009-07-19 11:53:54 | 00,018,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wstcodec.sys

[2009-07-19 11:53:54 | 00,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dswave.dll

[2009-07-19 11:53:54 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdaplgin.ax

[2009-07-19 11:53:54 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ccdecode.sys

[2009-07-19 11:53:54 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mpe.sys

[2009-07-19 11:53:54 | 00,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\streamip.sys

[2009-07-19 11:53:54 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax

[2009-07-19 11:53:54 | 00,013,312 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdmo.dll

[2009-07-19 11:53:54 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksolay.ax

[2009-07-19 11:53:54 | 00,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bdasup.sys

[2009-07-19 11:53:54 | 00,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\slip.sys

[2009-07-19 11:53:54 | 00,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxapi.sys

[2009-07-19 11:53:54 | 00,010,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ndisip.sys

[2009-07-19 11:53:54 | 00,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mstee.sys

[2009-07-19 11:53:53 | 01,294,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsound3d.dll

[2009-07-19 11:53:53 | 01,201,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3d8.dll

[2009-07-19 11:53:53 | 01,189,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dx8vb.dll

[2009-07-19 11:53:53 | 00,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxdiag.exe

[2009-07-19 11:53:53 | 00,797,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dim700.dll

[2009-07-19 11:53:53 | 00,723,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnet.dll

[2009-07-19 11:53:53 | 00,648,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dinput.dll

[2009-07-19 11:53:53 | 00,602,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dx7vb.dll

[2009-07-19 11:53:53 | 00,491,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsdmoprp.dll

[2009-07-19 11:53:53 | 00,467,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\diactfrm.dll

[2009-07-19 11:53:53 | 00,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsound.dll

[2009-07-19 11:53:53 | 00,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvoice.dll

[2009-07-19 11:53:53 | 00,292,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ddraw.dll

[2009-07-19 11:53:53 | 00,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dplayx.dll

[2009-07-19 11:53:53 | 00,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gcdef.dll

[2009-07-19 11:53:53 | 00,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\joy.cpl

[2009-07-19 11:53:53 | 00,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsdmo.dll

[2009-07-19 11:53:53 | 00,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvvox.dll

[2009-07-19 11:53:53 | 00,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvsetup.exe

[2009-07-19 11:53:53 | 00,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpwsockx.dll

[2009-07-19 11:53:53 | 00,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpmodemx.dll

[2009-07-19 11:53:53 | 00,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnhupnp.dll

[2009-07-19 11:53:53 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdllreg.exe

[2009-07-19 11:53:53 | 00,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dimap.dll

[2009-07-19 11:53:53 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnhpast.dll

[2009-07-19 11:53:53 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pid.dll

[2009-07-19 11:53:53 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dplaysvr.exe

[2009-07-19 11:53:53 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ddrawex.dll

[2009-07-19 11:53:53 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvacm.dll

[2009-07-19 11:53:53 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnsvr.exe

[2009-07-19 11:53:53 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3d8thk.dll

[2009-07-19 11:53:53 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnlobby.dll

[2009-07-19 11:53:53 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnaddr.dll

[2009-07-18 16:24:00 | 00,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf

[2009-07-18 16:23:59 | 00,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf

[2009-07-18 16:23:56 | 00,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll

[2009-07-18 16:18:26 | 00,136,704 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsu.sys

[2009-07-18 16:18:26 | 00,008,320 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsuc.sys

[2009-07-18 16:18:26 | 00,007,808 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys

[2009-07-18 16:18:25 | 00,022,016 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys

[2009-07-18 16:18:25 | 00,007,808 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerflt.sys

[2009-07-18 16:18:24 | 01,112,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01007.dll

[2009-07-18 16:18:24 | 00,659,968 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll

[2009-07-18 16:18:24 | 00,017,664 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys

[2009-07-18 16:14:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia

[2009-06-20 19:23:28 | 01,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll

[2009-06-20 19:23:28 | 01,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll

[2009-06-20 19:23:27 | 01,503,232 | ---- | C] () -- C:\WINDOWS\System32\nview.dll

[2009-06-20 19:23:27 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll

[2009-06-20 16:24:21 | 00,000,000 | ---- | C] () -- C:\WINDOWS\WB.ini

[2009-06-18 21:43:36 | 00,002,560 | ---- | C] () -- C:\WINDOWS\System32\SpeedCrunch.ini

[2009-06-07 09:44:27 | 00,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys

[2009-06-07 09:44:27 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys

[2009-06-06 11:46:37 | 00,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll

[2009-06-03 16:00:53 | 00,000,558 | ---- | C] () -- C:\WINDOWS\DFC.INI

[2009-06-03 15:19:33 | 00,003,574 | ---- | C] () -- C:\WINDOWS\System32\NOTEPAD.ini

[2009-06-03 15:13:54 | 00,135,168 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll

[2009-06-03 14:23:43 | 00,348,160 | ---- | C] () -- C:\WINDOWS\labels.dll

[2009-06-03 14:23:27 | 00,013,339 | ---- | C] () -- C:\WINDOWS\System32\shConvert.dll

[2009-06-03 14:23:27 | 00,013,312 | ---- | C] () -- C:\WINDOWS\System32\shpicgf.dll

[2009-06-03 14:23:26 | 00,211,968 | ---- | C] () -- C:\WINDOWS\System32\Formats.dll

[2009-06-03 14:23:25 | 00,040,448 | ---- | C] () -- C:\WINDOWS\System32\cdeject.dll

[2009-06-03 14:23:18 | 00,000,026 | ---- | C] () -- C:\WINDOWS\prio.ini

[2009-06-03 14:22:39 | 00,001,958 | ---- | C] () -- C:\WINDOWS\uninstall.ini

[2009-06-03 14:22:11 | 00,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[2009-06-03 14:22:07 | 00,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2009-06-03 14:22:07 | 00,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2009-06-03 14:22:06 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll

[2009-06-03 14:22:04 | 00,067,584 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2009-06-03 14:22:04 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest

[2009-04-22 00:19:06 | 00,172,173 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat

[2008-04-15 14:00:00 | 00,000,609 | ---- | C] () -- C:\WINDOWS\win.ini

[2008-04-15 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini

[2004-08-22 17:04:56 | 00,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll

[2003-06-09 15:05:18 | 00,094,636 | ---- | C] () -- C:\WINDOWS\dropcpyr.dll

[2001-07-06 15:30:02 | 00,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

========== Files - Modified Within 30 Days ==========

[3 C:\WINDOWS\System32\*.tmp files]

[2009-08-13 22:53:53 | 00,002,241 | ---- | M] () -- C:\Documents and Settings\P4RYK\Menu Start\Programy\Autostart\Styler.lnk

[2009-08-13 22:53:51 | 00,215,869 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml

[2009-08-13 22:52:36 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT

[2009-08-13 22:52:32 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2009-08-13 22:29:07 | 00,003,574 | ---- | M] () -- C:\WINDOWS\System32\NOTEPAD.ini

[2009-08-13 21:43:29 | 00,217,117 | ---- | M] () -- C:\Documents and Settings\P4RYK\Pulpit\2009-08-13_214327.jpg

[2009-08-13 17:07:51 | 00,049,048 | ---- | M] () -- C:\Documents and Settings\P4RYK\Pulpit\f48ea88904.jpg

[2009-08-13 16:40:19 | 00,000,481 | ---- | M] () -- C:\Documents and Settings\P4RYK\Pulpit\Produkty.doc

[2009-08-13 12:44:11 | 00,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2009-08-13 12:44:08 | 02,111,512 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2009-08-13 00:27:09 | 01,029,465 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\My Desktop.png

[2009-08-13 00:10:19 | 00,011,225 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\USB_Drive_by_Agamemmnon.png

[2009-08-13 00:09:51 | 00,011,267 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\Windows_System_Drive_by_Agamemmnon.png

[2009-08-12 23:06:02 | 00,648,448 | ---- | M] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT

[2009-08-12 22:15:14 | 00,046,212 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090812_221511.reg

[2009-08-12 22:02:25 | 00,705,844 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\Ensueno-1920x1200.jpg

[2009-08-12 18:05:19 | 00,000,283 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\(D) Download.lnk

[2009-08-12 18:05:16 | 00,000,299 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\© System.lnk

[2009-08-11 19:28:56 | 39,787,166 | -H-- | M] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\IconCache.db

[2009-08-11 19:27:26 | 01,106,650 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI

[2009-08-11 19:27:26 | 00,497,574 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat

[2009-08-11 19:27:26 | 00,438,928 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2009-08-11 19:27:26 | 00,087,372 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat

[2009-08-11 19:27:26 | 00,070,104 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2009-08-11 19:25:45 | 00,007,168 | ---- | M] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009-08-10 20:12:22 | 00,137,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys

[2009-08-10 20:12:14 | 00,189,288 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr

[2009-08-10 20:12:14 | 00,189,288 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.exe

[2009-08-10 20:12:08 | 00,075,064 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrA.exe

[2009-08-10 13:40:48 | 00,000,130 | ---- | M] () -- C:\Documents and Settings\P4RYK\Ustawienia lokalne\Dane aplikacji\fusioncache.dat

[2009-08-09 17:50:39 | 00,000,084 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\2009-08-09_175037.png

[2009-08-07 21:38:57 | 00,024,675 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\4vs1 ;p.png

[2009-08-07 21:30:24 | 00,060,522 | ---- | M] () -- C:\Kontakty_6864664.xml

[2009-08-05 21:01:57 | 00,516,190 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#2.png

[2009-08-05 21:00:34 | 00,230,425 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#3.png

[2009-08-05 20:58:30 | 00,185,949 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\#1.png

[2009-08-05 16:29:41 | 00,093,600 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\9.jpg

[2009-08-05 16:28:23 | 00,077,027 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\10.png

[2009-08-03 20:13:17 | 00,228,948 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\brush_test_by_Superkoe.jpg

[2009-08-01 13:49:36 | 00,002,560 | ---- | M] () -- C:\WINDOWS\System32\SpeedCrunch.ini

[2009-07-31 22:55:05 | 00,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll

[2009-07-30 18:18:12 | 00,006,250 | ---- | M] () -- C:\webcam_000001.jpg

[2009-07-28 18:00:56 | 00,118,773 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\L4d Userbar by roman.rar

[2009-07-28 17:58:00 | 00,339,536 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\L4d Userbar by roman.psd

[2009-07-26 15:40:18 | 00,000,609 | ---- | M] () -- C:\WINDOWS\win.ini

[2009-07-24 17:42:29 | 00,021,330 | R--- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\321.nbu

[2009-07-24 16:06:22 | 00,074,436 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090724_160619.reg

[2009-07-20 13:52:10 | 00,113,595 | ---- | M] () -- C:\WINDOWS\hpoins07.dat

[2009-07-20 13:16:04 | 00,000,558 | ---- | M] () -- C:\WINDOWS\DFC.INI

[2009-07-20 07:39:24 | 00,098,124 | ---- | M] () -- C:\Documents and Settings\P4RYK\Moje dokumenty\cc_20090720_073921.reg

[2009-07-18 16:24:00 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf

[2009-07-18 16:23:59 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf

========== Alternate Data Streams ==========

@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF

@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:95E14BBC

@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:888AFB86

< End of report >

MarekM25
komentarz
komentarz

Teraz log wygląda lepiej.

Kroki końcowe i kroki do zabezpieczenia systemu:

1. Zainstaluj antywirusa + firewalla

2. Zmień hasła, ponieważ miałeś keyloggera

3. Wykonaj skan programem MBAM: http://www.forumpc.pl/index.php?showtopic=107753

  • Dobra wypowiedź 1
szczotek
komentarz
komentarz
2. Zmień hasła, ponieważ miałeś keyloggera

to już go nie mam ? , może przeskanować combo fixem ?

MarekM25
komentarz
komentarz

po coś robiłem przecież ten skrypt :)

myślę, że skan combofixem jest zbędny i jest niebezpieczny czasami dla komputera, zabezpiecz komputer tak jak mówiłem i obserwuj co się dzieje z komputerem, jeżeli znowu zobaczysz jakieś niepożądane efekty to znowu zgłoś się z logami

  • Dobra wypowiedź 1
szczotek
komentarz
komentarz (edytowane)

ok dzięki ;-)

@edit

dać jeszcze z niego raport ?

Edytowane przez szczotek
Mateusz J.
komentarz
komentarz

raport z MBAM: tak

szczotek
komentarz
komentarz

można zamknąć format c:\ d:\

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.