x-kom hosting

Zawieszający się komputer (Zawiesza się oraz lami się)

Gość
utworzono
utworzono (edytowane)

Intel Pentium 4 3ghz
1gb ramu
256 radeon
dysk 320gb

OTL:[log]OTL logfile created on: 2009-10-16 17:41:52 - Run 1
OTL by OldTimer - Version 3.0.21.0 Folder = C:\Documents and Settings\pl\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

1023,48 Mb Total Physical Memory | 493,63 Mb Available Physical Memory | 48,23% Memory free
2,40 Gb Paging File | 1,98 Gb Available in Paging File | 82,54% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 29,29 Gb Total Space | 23,73 Gb Free Space | 81,00% Space Free | Partition Type: NTFS
Drive D: | 136,71 Gb Total Space | 105,08 Gb Free Space | 76,86% Space Free | Partition Type: NTFS
Drive E: | 132,07 Gb Total Space | 78,10 Gb Free Space | 59,13% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PP
Current User Name: pl
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2009-10-16 17:38:04 | 00,521,216 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\pl\Pulpit\OTL.exe
PRC - [2009-10-02 19:20:46 | 05,999,000 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files\ipla\ipla.exe
PRC - [2009-08-24 22:23:38 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-01-26 15:31:16 | 02,144,088 | RHS- | M] (Safer Networking Limited) -- D:\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2008-04-14 22:51:52 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wscntfy.exe
PRC - [2008-04-14 22:51:18 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008-02-28 01:07:26 | 00,594,600 | ---- | M] ( ) -- C:\WINDOWS\System32\lxdncoms.exe
PRC - [2008-01-22 22:34:04 | 00,512,000 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe
PRC - [2004-05-05 11:38:08 | 00,479,232 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files\RALINK\RT2400 Wireless LAN Card\Installer\WINXP\RaConfig.exe

[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found -- -- (aspnet_state [On_Demand | Stopped])
SRV - [2009-07-03 15:56:14 | 00,303,376 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe -- (AVP [Auto | Running])
SRV - [2008-04-14 22:50:46 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2008-02-28 01:07:26 | 00,594,600 | ---- | M] ( ) -- C:\WINDOWS\System32\lxdncoms.exe -- (lxdn_device [Auto | Running])
SRV - [2008-02-28 01:07:14 | 00,098,984 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdnserv.exe -- (lxdnCATSCustConnectService [Auto | Stopped])
SRV - [2008-01-22 22:34:04 | 00,512,000 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running])
SRV - [2008-01-22 14:42:00 | 00,593,920 | ---- | M] () -- C:\WINDOWS\System32\ati2sgag.exe -- (ATI Smart [Auto | Stopped])
SRV - [2008-01-22 11:13:26 | 00,275,752 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Stopped])
SRV - [2006-12-01 11:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
SRV - [2004-02-05 01:54:00 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])

[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2009-10-12 20:59:39 | 00,296,976 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\DRIVERS\klif.sys -- (KLIF [System | Running])
DRV - [2009-09-19 12:29:44 | 00,015,781 | ---- | M] (Meetinghouse Data Communications) -- C:\WINDOWS\System32\DRIVERS\mdc8021x.sys -- (MDC8021X [Auto | Running])
DRV - [2009-06-15 14:01:00 | 00,128,016 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\system32\drivers\kl1.sys -- (kl1 [Boot | Running])
DRV - [2009-05-16 20:59:44 | 00,019,472 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\DRIVERS\klmouflt.sys -- (klmouflt [On_Demand | Running])
DRV - [2009-05-13 17:46:52 | 00,031,760 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\DRIVERS\klim5.sys -- (klim5 [On_Demand | Running])
DRV - [2008-12-15 20:41:32 | 00,033,808 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\system32\drivers\klbg.sys -- (klbg [Boot | Running])
DRV - [2008-05-02 08:48:55 | 00,062,208 | ---- | M] (Silicon Image, Inc.) -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112 [Boot | Running])
DRV - [2008-04-14 02:15:30 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running])
DRV - [2008-04-14 00:05:40 | 00,020,992 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\DRIVERS\RTL8139.SYS -- (rtl8139 [On_Demand | Running])
DRV - [2008-04-13 22:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2008-01-22 23:38:03 | 02,845,696 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running])
DRV - [2004-12-01 14:40:08 | 02,300,928 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running])
DRV - [2004-04-22 10:57:34 | 00,062,848 | ---- | M] (Ralink Technology Inc.) -- C:\WINDOWS\System32\DRIVERS\RT2400.sys -- (RT2400 [On_Demand | Running])
DRV - [2001-08-17 23:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003\S-1-5-21-1659004503-1708537768-1275210071-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.startup.homepage: "www.google.pl"
FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.6
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.3

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-09-29 19:44:34 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-09-19 15:07:57 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2009-10-12 21:02:34 | 00,000,000 | ---D | M]

[2009-09-19 13:03:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\mozilla\Extensions
[2009-09-19 13:03:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009-10-14 14:28:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\mozilla\Firefox\Profiles\zzpfudy2.default\extensions
[2009-10-10 07:42:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\mozilla\Firefox\Profiles\zzpfudy2.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
[2009-10-14 13:48:42 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009-09-19 13:02:53 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009-08-24 22:23:38 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009-08-24 22:23:38 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009-08-24 22:23:38 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2004-02-05 01:54:00 | 00,013,888 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL
[2009-02-27 12:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2009-08-24 21:19:13 | 00,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2009-08-24 21:19:13 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2009-08-24 21:19:13 | 00,002,371 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009-08-24 21:19:13 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2009-08-24 21:19:13 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2009-08-24 21:19:13 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2009-08-24 21:19:13 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml

O1 HOSTS File: (27 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (Expressivo) - {85F685C3-20D9-4943-95E4-EB4224056C3F} - D:\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll (IVO Software Sp. z o.o.)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O3 - HKLM\..\Toolbar: (Expressivo) - {85F685C3-20D9-4943-95E4-EB4224056C3F} - D:\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll (IVO Software Sp. z o.o.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] D:\adobe reader\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003..\Run: [SpybotSD TeaTimer] D:\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] D:\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] File not found
O4 - HKU\.DEFAULT..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Raconfig.lnk = C:\Program Files\RALINK\RT2400 Wireless LAN Card\Installer\WINXP\RaConfig.exe (Ralink Technology, Corp.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1659004503-1708537768-1275210071-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - D:\microsoft office 2003\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\microsoft office 2003\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\kloehk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\Ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\System32\klogon.dll (Kaspersky Lab)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-09-19 12:22:53 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{e79073d0-aea7-11de-a173-0013d317f670}\Shell\AutoRun\command - "" = mje12tni.exe
O33 - MountPoints2\{e79073d0-aea7-11de-a173-0013d317f670}\Shell\open\Command - "" = mje12tni.exe
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[1 C:\WINDOWS\System32\drivers\*.tmp files]
[1 C:\WINDOWS\System32\*.tmp files]
[3 C:\WINDOWS\*.tmp files]
[2009-09-19 14:03:39 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji
[2009-09-19 13:53:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe
[2009-09-19 13:14:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2009-10-06 17:22:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2009-10-12 21:00:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
[2009-10-12 17:52:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files
[2009-10-16 17:42:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2009-09-19 14:03:39 | 00,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
[2009-09-19 14:25:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Nero
[2009-09-19 14:05:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-09-19 12:40:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real
[2009-10-10 14:53:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype
[2009-10-13 20:00:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
[2009-09-19 12:26:00 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\pl\Dane aplikacji
[2009-09-19 13:48:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Adobe
[2009-09-20 09:44:20 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Ahead
[2009-09-19 13:08:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\BESTplayer
[2009-09-19 13:22:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\DMCache
[2009-09-19 16:27:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Expressivo
[2009-09-19 12:26:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Identities
[2009-10-06 17:22:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\ipla
[2009-09-19 13:48:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Macromedia
[2009-10-16 17:43:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Malwarebytes
[2009-10-14 13:55:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Media Player Classic
[2009-09-19 12:26:00 | 00,000,000 | --SD | C] -- C:\Documents and Settings\pl\Dane aplikacji\Microsoft
[2009-09-19 13:02:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Mozilla
[2009-09-19 13:46:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Nowe Gadu-Gadu
[2009-09-19 14:05:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\OpenFM
[2009-09-19 12:40:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Real
[2009-10-10 14:58:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\Skype
[2009-10-10 15:01:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\skypePM
[2009-09-19 13:22:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Dane aplikacji\WinRAR
[2009-09-19 12:26:00 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji
[2009-09-19 13:51:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Adobe
[2009-09-19 14:29:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Ahead
[2009-09-19 13:48:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\cache
[2009-10-03 08:39:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\ESET
[2009-09-26 07:46:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Identities
[2009-09-19 12:26:00 | 00,000,000 | --SD | C] -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-09-19 13:02:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla
[2009-09-19 12:40:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Real
[2009-09-19 14:05:17 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files
[2009-09-19 13:53:38 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2009-09-19 14:25:11 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead
[2009-09-19 15:06:01 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2009-09-19 12:29:20 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2009-09-19 14:05:17 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2009-09-19 12:20:42 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2009-09-19 14:05:23 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2009-09-19 12:20:46 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2009-10-10 14:56:06 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2009-09-19 14:05:18 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2009-09-19 12:19:47 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2009-09-19 14:05:17 | 00,000,000 | R--D | C] -- C:\Program Files
[2009-09-19 12:40:46 | 00,000,000 | ---D | C] -- C:\Program Files\ACE Mega CoDecS Pack
[2009-09-19 12:34:52 | 00,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2009-09-19 14:05:17 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files
[2009-09-19 12:19:07 | 00,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2009-09-19 12:29:29 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009-09-19 12:19:46 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2009-10-06 17:22:07 | 00,000,000 | ---D | C] -- C:\Program Files\ipla
[2009-10-12 21:00:50 | 00,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab
[2009-10-02 20:13:49 | 00,000,000 | ---D | C] -- C:\Program Files\Lexmark 2600 Series
[2009-09-19 12:18:43 | 00,000,000 | ---D | C] -- C:\Program Files\Messenger
[2009-10-14 16:55:30 | 00,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2009-09-19 15:07:33 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2009-09-19 12:20:29 | 00,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2009-09-19 13:02:52 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2009-09-19 12:18:39 | 00,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2009-09-20 19:09:53 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2009-09-19 14:25:11 | 00,000,000 | ---D | C] -- C:\Program Files\Nero
[2009-09-19 12:19:58 | 00,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2009-09-19 12:19:55 | 00,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2009-09-19 12:29:29 | 00,000,000 | ---D | C] -- C:\Program Files\RALINK
[2009-09-19 12:40:07 | 00,000,000 | ---D | C] -- C:\Program Files\Real Alternative
[2009-10-10 14:55:54 | 00,000,000 | R--D | C] -- C:\Program Files\Skype
[2009-10-16 17:45:00 | 00,000,000 | ---D | C] -- C:\Program Files\trend micro
[2009-09-19 12:26:04 | 00,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2009-09-19 12:21:28 | 00,000,000 | ---D | C] -- C:\Program Files\Usługi online
[2009-09-19 12:18:46 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2
[2009-09-19 12:18:45 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2009-09-19 12:18:06 | 00,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2009-09-19 12:21:31 | 00,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2009-10-14 16:55:31 | 00,000,000 | ---D | C] -- C:\Program Files\xerox
[2009-10-16 17:42:52 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009-10-16 17:42:34 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009-10-16 17:39:02 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\pl\Pulpit\HJTInstall.exe
[2009-10-16 17:38:17 | 04,045,528 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\pl\Pulpit\mbam-setup.exe
[2009-10-16 17:37:53 | 00,521,216 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\pl\Pulpit\OTL.exe
[2009-10-16 06:55:23 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2009-10-14 20:22:24 | 11,440,833 | ---- | C] (Meteoryt.pl ) -- C:\Documents and Settings\pl\Pulpit\AsystentPIM_2010.exe
[2009-10-14 17:03:23 | 00,000,000 | ---D | C] -- C:\WINDOWS\temp
[2009-10-14 16:55:30 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2009-10-14 16:34:10 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2009-10-14 16:34:10 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2009-10-14 16:34:10 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2009-10-14 16:34:10 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2009-10-14 16:33:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009-10-14 16:33:38 | 00,000,000 | ---D | C] -- C:\Qoobox
[2009-10-13 19:50:43 | 16,409,960 | ---- | C] (Safer Networking Limited ) -- C:\Documents and Settings\pl\Pulpit\spybotsd162.exe
[2009-10-13 19:44:35 | 03,309,072 | ---- | C] (Piriform Ltd) -- C:\Documents and Settings\pl\Pulpit\ccsetup224.exe
[2009-10-13 19:01:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Pulpit\podklady do muzyki klasy 5
[2009-10-13 17:36:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Pulpit\Sony ericsson C905
[2009-10-13 14:35:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Pulpit\muzyka i my kl 5
[2009-10-12 20:59:39 | 00,296,976 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys
[2009-10-12 20:31:30 | 69,524,424 | ---- | C] (Kaspersky Lab) -- C:\Documents and Settings\pl\Pulpit\kis9.0.0.463pl.exe
[2009-10-12 17:32:42 | 42,808,008 | ---- | C] (Kaspersky Lab) -- C:\Documents and Settings\pl\Pulpit\kis8.0.0.506pl.exe
[2009-10-10 14:45:24 | 22,227,752 | ---- | C] (Skype Technologies S.A.) -- C:\Documents and Settings\pl\Pulpit\SkypeSetupFull.exe
[2009-10-08 15:09:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Moje dokumenty\Downloads
[2009-10-06 17:21:52 | 01,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll
[2009-10-06 17:21:50 | 01,700,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll
[2009-10-03 06:51:11 | 00,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbprint.sys
[2009-10-03 06:50:56 | 00,032,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbccgp.sys
[2009-10-03 06:49:53 | 00,000,000 | ---D | C] -- C:\logs
[2009-10-03 06:47:01 | 00,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiafbdrv.dll
[2009-10-03 06:47:01 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbscan.sys
[2009-10-02 20:19:09 | 00,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2009-10-02 20:15:49 | 00,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2009-10-02 20:14:05 | 00,438,272 | ---- | C] ( ) -- C:\WINDOWS\System32\LXDNhcp.dll
[2009-10-02 20:14:05 | 00,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdninpa.dll
[2009-10-02 20:14:05 | 00,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdniesc.dll
[2009-10-02 20:14:04 | 01,101,824 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdnserv.dll
[2009-10-02 20:14:04 | 00,843,776 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdnusb1.dll
[2009-10-02 20:14:04 | 00,647,168 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdnpmui.dll
[2009-10-02 20:14:04 | 00,569,344 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdnlmpm.dll
[2009-10-02 20:14:04 | 00,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdnprox.dll
[2009-10-02 20:14:03 | 00,983,121 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lxdngf.dll
[2009-10-02 20:14:03 | 00,663,552 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdnhbn3.dll
[2009-10-02 20:14:03 | 00,320,168 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdnih.exe
[2009-10-02 20:14:02 | 00,851,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdncomc.dll
[2009-10-02 20:14:02 | 00,594,600 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdncoms.exe
[2009-10-02 20:14:02 | 00,376,832 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdncomm.dll
[2009-10-02 20:14:02 | 00,365,224 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdncfg.exe
[2009-10-02 20:14:02 | 00,077,906 | R--- | C] (Lexmark International) -- C:\WINDOWS\System32\lxdncfg.dll
[2009-10-02 15:03:12 | 00,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2009-10-01 18:56:18 | 00,010,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidusb.sys
[2009-10-01 16:41:57 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss
[2009-09-27 19:49:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Pulpit\prowokator gg1.4
[2009-09-21 20:31:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\AM
[2009-09-21 19:45:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Pulpit\gry
[2009-09-20 19:16:12 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\KB905474
[2009-09-20 19:13:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\ie7updates
[2009-09-20 10:45:47 | 00,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiprvse.exe
[2009-09-20 10:45:45 | 02,190,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2009-09-20 10:45:43 | 00,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcss.dll
[2009-09-20 10:45:43 | 00,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pdh.dll
[2009-09-20 10:45:43 | 00,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\services.exe
[2009-09-20 10:45:41 | 00,473,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fastprox.dll
[2009-09-20 10:45:41 | 00,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sc.exe
[2009-09-20 10:45:40 | 00,686,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\advapi32.dll
[2009-09-20 10:45:39 | 00,732,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll
[2009-09-20 10:45:39 | 00,722,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntdll.dll
[2009-09-20 10:45:39 | 00,453,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiprvsd.dll
[2009-09-20 10:45:36 | 02,146,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2009-09-20 10:45:34 | 02,025,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2009-09-20 10:44:39 | 00,128,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dhtmled.ocx
[2009-09-20 10:33:18 | 00,273,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthport.sys
[2009-09-20 10:33:18 | 00,273,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys
[2009-09-20 10:18:26 | 00,765,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll
[2009-09-20 10:10:23 | 00,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\triedit.dll
[2009-09-20 10:08:22 | 00,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys
[2009-09-20 10:08:08 | 00,333,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys
[2009-09-20 10:07:39 | 01,315,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoe.dll
[2009-09-20 10:03:52 | 00,455,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2009-09-20 09:56:57 | 00,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll
[2009-09-20 09:50:54 | 00,247,326 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\strmdll.dll
[2009-09-20 09:50:41 | 00,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll
[2009-09-20 09:46:04 | 00,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wordpad.exe
[2009-09-20 09:44:57 | 00,512,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll
[2009-09-20 09:44:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2009-09-20 09:44:02 | 00,026,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2009-09-19 16:27:53 | 00,000,000 | R--D | C] -- C:\Documents and Settings\pl\Moje dokumenty\Expressivo Podcasts
[2009-09-19 16:27:53 | 00,000,000 | R--D | C] -- C:\Documents and Settings\pl\Moje dokumenty\Expressivo Documents
[2009-09-19 15:56:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\pl\Moje dokumenty\My Games
[2009-09-19 15:08:50 | 00,024,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdimon.dll
[2009-09-19 15:04:58 | 00,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2009-09-19 14:24:39 | 02,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_30.dll
[2009-09-19 14:24:38 | 02,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll
[2009-09-19 14:15:14 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\audstub.sys
[2009-09-19 14:14:41 | 00,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\redbook.sys
[2009-09-19 14:14:15 | 00,010,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\gameenum.sys
[2009-09-19 14:14:02 | 00,020,992 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\drivers\RTL8139.sys
[2009-09-19 14:13:29 | 00,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
[2009-09-19 14:13:25 | 00,042,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\AGP440.SYS
[2009-09-19 14:11:50 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moja muzyka
[2009-09-19 14:05:24 | 00,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2009-09-19 14:05:17 | 00,000,000 | R--D | C] -- C:\Program Files
[2009-09-19 14:04:56 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll
[2009-09-19 14:04:56 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll
[2009-09-19 14:04:56 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll
[2009-09-19 14:04:53 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll
[2009-09-19 14:04:53 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll
[2009-09-19 14:04:52 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll
[2009-09-19 14:04:49 | 00,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll
[2009-09-19 14:04:49 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll
[2009-09-19 14:04:49 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll
[2009-09-19 14:04:49 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll
[2009-09-19 14:04:49 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll
[2009-09-19 14:04:48 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll
[2009-09-19 14:04:48 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll
[2009-09-19 14:04:46 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll
[2009-09-19 14:04:46 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll
[2009-09-19 14:04:46 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll
[2009-09-19 14:04:46 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll
[2009-09-19 14:04:46 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll
[2009-09-19 14:04:33 | 00,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll
[2009-09-19 14:04:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll
[2009-09-19 14:04:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll
[2009-09-19 14:04:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll
[2009-09-19 14:04:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll
[2009-09-19 14:04:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll
[2009-09-19 14:04:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll
[2009-09-19 14:04:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL
[2009-09-19 14:04:33 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll
[2009-09-19 14:04:33 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll
[2009-09-19 14:04:32 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll
[2009-09-19 14:04:28 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2009-09-19 14:04:27 | 00,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL
[2009-09-19 14:04:27 | 00,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV
[2009-09-19 14:04:27 | 00,009,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL
[2009-09-19 14:04:27 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV
[2009-09-19 14:04:27 | 00,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV
[2009-09-19 14:04:26 | 00,127,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL
[2009-09-19 14:04:26 | 00,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL
[2009-09-19 14:04:26 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL
[2009-09-19 14:04:26 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL
[2009-09-19 14:04:26 | 00,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV
[2009-09-19 14:04:26 | 00,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV
[2009-09-19 14:04:25 | 00,073,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV
[2009-09-19 14:04:25 | 00,033,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL
[2009-09-19 14:04:25 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV
[2009-09-19 14:04:25 | 00,025,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV
[2009-09-19 14:04:25 | 00,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL
[2009-09-19 14:04:25 | 00,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV
[2009-09-19 14:04:25 | 00,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV
[2009-09-19 14:04:25 | 00,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK
[2009-09-19 14:04:24 | 00,109,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL
[2009-09-19 14:04:24 | 00,070,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL
[2009-09-19 14:04:24 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE
[2009-09-19 14:04:23 | 00,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WINSPOOL.DRV
[2009-09-19 14:04:23 | 00,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\NOTEPAD.EXE
[2009-09-19 14:04:23 | 00,069,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL
[2009-09-19 14:04:23 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irenum.sys
[2009-09-19 14:04:23 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll
[2009-09-19 14:04:21 | 00,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll
[2009-09-19 14:03:45 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2009-09-19 14:03:45 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2009-09-19 14:03:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings
[2009-09-19 14:03:14 | 00,000,000 | -HSD | C] -- C:\System Volume Information
[2009-09-19 13:55:03 | 00,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2009-09-19 13:55:03 | 00,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2009-09-19 13:55:03 | 00,000,000 | R--D | C] -- C:\WINDOWS\Web
[2009-09-19 13:55:03 | 00,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\pl-pl
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\pl
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1045
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\system32
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\system
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\security
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\repair
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Offline Web Pages
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\NLDRV
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\mui
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Media
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\java
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\ime
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Help
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\Config
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\addins
[2009-09-19 13:55:03 | 00,000,000 | ---D | C] -- C:\WINDOWS
[2009-09-19 13:27:29 | 00,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll
[2009-09-19 13:27:03 | 01,106,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll
[2009-09-19 13:08:29 | 01,213,952 | ---- | C] (Karol Winnicki) -- C:\Documents and Settings\pl\Pulpit\BESTplayer.exe
[2009-09-19 12:58:21 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2009-09-19 12:56:16 | 00,000,000 | R--D | C] -- C:\Documents and Settings\pl\Moje dokumenty\Moje wideo
[2009-09-19 12:52:53 | 00,006,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\splitter.sys
[2009-09-19 12:52:51 | 00,083,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wdmaud.sys
[2009-09-19 12:52:50 | 00,052,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\DMusic.sys
[2009-09-19 12:52:49 | 00,056,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\swmidi.sys
[2009-09-19 12:52:47 | 00,142,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\aec.sys
[2009-09-19 12:52:46 | 00,172,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\kmixer.sys
[2009-09-19 12:52:45 | 00,002,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmkaud.sys
[2009-09-19 12:52:44 | 00,060,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sysaudio.sys
[2009-09-19 12:52:43 | 00,007,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MSKSSRV.sys
[2009-09-19 12:52:41 | 00,004,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MSPQM.sys
[2009-09-19 12:52:39 | 00,005,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MSPCLOCK.sys
[2009-09-19 12:52:34 | 00,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys
[2009-09-19 12:52:34 | 00,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax
[2009-09-19 12:52:34 | 00,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys
[2009-09-19 12:52:34 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll
[2009-09-19 12:40:50 | 01,650,688 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplva6.dll
[2009-09-19 12:40:50 | 01,581,056 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvw7.dll
[2009-09-19 12:40:50 | 01,552,384 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvm6.dll
[2009-09-19 12:40:50 | 01,122,304 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvpx.dll
[2009-09-19 12:40:50 | 00,077,824 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplaw7.dll
[2009-09-19 12:40:50 | 00,077,824 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplaa6.dll
[2009-09-19 12:40:50 | 00,065,536 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplapx.dll
[2009-09-19 12:40:50 | 00,065,536 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplam6.dll
[2009-09-19 12:40:08 | 00,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2009-09-19 12:40:07 | 00,499,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp71.dll
[2009-09-19 12:40:07 | 00,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr71.dll
[2009-09-19 12:34:22 | 00,000,000 | ---D | C] -- C:\ATI
[2009-09-19 12:30:01 | 00,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS
[2009-09-19 12:29:32 | 00,062,848 | ---- | C] (Ralink Technology Inc.) -- C:\WINDOWS\System32\drivers\RT2400.sys
[2009-09-19 12:26:04 | 00,000,000 | R--D | C] -- C:\Documents and Settings\pl\Moje dokumenty\Moje obrazy
[2009-09-19 12:26:04 | 00,000,000 | R--D | C] -- C:\Documents and Settings\pl\Moje dokumenty\Moja muzyka
[2009-09-19 12:25:29 | 00,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2009-09-19 12:25:28 | 00,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2009-09-19 12:25:27 | 00,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2009-09-19 12:23:22 | 00,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieakeng.dll
[2009-09-19 12:23:21 | 02,452,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dat
[2009-09-19 12:23:21 | 01,036,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2009-09-19 12:23:21 | 00,671,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll
[2009-09-19 12:23:21 | 00,385,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2009-09-19 12:23:21 | 00,380,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2009-09-19 12:23:21 | 00,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2009-09-19 12:23:21 | 00,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieaksie.dll
[2009-09-19 12:23:21 | 00,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieakui.dll
[2009-09-19 12:23:21 | 00,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\url.dll
[2009-09-19 12:23:21 | 00,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\occache.dll
[2009-09-19 12:23:21 | 00,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pngfilt.dll
[2009-09-19 12:23:21 | 00,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iernonce.dll
[2009-09-19 12:23:21 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieudinit.exe
[2009-09-19 12:23:20 | 01,159,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll
[2009-09-19 12:23:20 | 00,827,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll
[2009-09-19 12:23:20 | 00,634,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iexplore.exe
[2009-09-19 12:23:20 | 00,477,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll
[2009-09-19 12:23:20 | 00,347,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxtmsft.dll
[2009-09-19 12:23:20 | 00,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\webcheck.dll
[2009-09-19 12:23:20 | 00,193,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msrating.dll
[2009-09-19 12:23:20 | 00,133,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\extmgr.dll
[2009-09-19 12:23:20 | 00,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\advpack.dll
[2009-09-19 12:23:20 | 00,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsproxy.dll
[2009-09-19 12:23:19 | 01,830,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2009-09-19 12:23:19 | 00,459,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2009-09-19 12:23:19 | 00,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxtrans.dll
[2009-09-19 12:23:19 | 00,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2009-09-19 12:23:19 | 00,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icardie.dll
[2009-09-19 12:23:19 | 00,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2009-09-19 12:23:18 | 06,067,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2009-09-19 12:23:11 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2009-09-19 12:23:07 | 00,019,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2009-09-19 12:22:34 | 00,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
[2009-09-19 12:22:32 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dllcache
[2009-09-19 12:21:10 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2009-09-19 12:21:02 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll
[2009-09-19 12:20:48 | 00,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg723.acm
[2009-09-19 12:20:48 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll
[2009-09-19 12:20:47 | 00,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll
[2009-09-19 12:20:43 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll
[2009-09-19 12:20:43 | 00,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2009-09-19 12:20:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2009-09-19 12:20:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2009-09-19 12:20:34 | 01,929,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng.dll
[2009-09-19 12:20:34 | 00,217,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaucpl.cpl
[2009-09-19 12:20:34 | 00,209,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuweb.dll
[2009-09-19 12:20:34 | 00,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll
[2009-09-19 12:20:34 | 00,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe
[2009-09-19 12:20:34 | 00,053,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt.exe
[2009-09-19 12:20:34 | 00,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
[2009-09-19 12:20:34 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauserv.dll
[2009-09-19 12:20:33 | 00,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2009-09-19 12:20:33 | 00,409,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgr.dll
[2009-09-19 12:20:33 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll
[2009-09-19 12:20:33 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll
[2009-09-19 12:20:33 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll
[2009-09-19 12:20:33 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll
[2009-09-19 12:20:08 | 00,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll
[2009-09-19 12:20:08 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll
[2009-09-19 12:20:08 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
[2009-09-19 12:20:08 | 00,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll
[2009-09-19 12:20:04 | 00,129,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fltMgr.sys
[2009-09-19 12:20:04 | 00,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltMc.exe
[2009-09-19 12:20:04 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltlib.dll
[2009-09-19 12:20:03 | 00,240,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
[2009-09-19 12:20:03 | 00,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srsvc.dll
[2009-09-19 12:20:03 | 00,073,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sr.sys
[2009-09-19 12:20:03 | 00,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srclient.dll
[2009-09-19 12:20:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2009-09-19 12:20:02 | 00,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msh261.drv
[2009-09-19 12:20:02 | 00,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll
[2009-09-19 12:20:02 | 00,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll
[2009-09-19 12:20:02 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll
[2009-09-19 12:20:01 | 00,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll
[2009-09-19 12:20:01 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmsrvc.exe
[2009-09-19 12:19:58 | 00,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
[2009-09-19 12:19:58 | 00,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
[2009-09-19 12:19:57 | 00,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcomm.dll
[2009-09-19 12:19:57 | 00,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll
[2009-09-19 12:19:55 | 00,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schedsvc.dll
[2009-09-19 12:19:54 | 00,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstask.dll
[2009-09-19 12:19:54 | 00,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll
[2009-09-19 12:19:54 | 00,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll
[2009-09-19 12:19:54 | 00,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll
[2009-09-19 12:19:54 | 00,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll
[2009-09-19 12:19:54 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe
[2009-09-19 12:19:44 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje obrazy
[2009-09-19 12:19:02 | 00,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2009-09-19 12:18:39 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
[2009-09-19 12:18:28 | 00,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2009-09-19 12:18:27 | 00,231,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll
[2009-09-19 12:18:27 | 00,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll
[2009-09-19 12:18:27 | 00,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe
[2009-09-19 12:18:27 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll
[2009-09-19 12:18:19 | 00,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
[2009-09-19 12:18:18 | 00,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
[2009-09-19 12:18:18 | 00,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
[2009-09-19 12:18:17 | 00,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe
[2009-09-19 12:18:17 | 00,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe
[2009-09-19 12:18:17 | 00,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe
[2009-09-19 12:18:17 | 00,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe
[2009-09-19 12:18:16 | 00,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2009-09-19 12:18:16 | 00,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe
[2009-09-19 12:18:16 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe
[2009-09-19 12:18:16 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
[2009-09-19 12:18:16 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
[2009-09-19 12:18:16 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
[2009-09-19 12:18:16 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe
[2009-09-19 12:18:16 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
[2009-09-19 12:18:16 | 00,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
[2009-09-19 12:18:15 | 00,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
[2009-09-19 12:18:15 | 00,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
[2009-09-19 12:18:15 | 00,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
[2009-09-19 12:18:15 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
[2009-09-19 12:18:15 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll
[2009-09-19 12:18:07 | 00,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe
[2009-09-19 12:18:07 | 00,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe
[2009-09-19 12:18:07 | 00,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe
[2009-09-19 12:18:07 | 00,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl
[2009-09-19 12:18:06 | 00,345,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2009-09-19 12:18:06 | 00,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe
[2009-09-19 12:18:05 | 00,538,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe
[2009-09-19 12:18:04 | 00,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll
[2009-09-19 12:18:04 | 00,139,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rdpwd.sys
[2009-09-19 12:18:04 | 00,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll
[2009-09-19 12:18:04 | 00,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
[2009-09-19 12:18:04 | 00,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdtcp.sys
[2009-09-19 12:18:04 | 00,012,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdpipe.sys
[2009-09-19 12:18:03 | 02,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstscax.dll
[2009-09-19 12:18:03 | 00,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstsc.exe
[2009-09-19 12:18:03 | 00,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll
[2009-09-19 12:18:02 | 00,296,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\termsrv.dll
[2009-09-19 12:18:02 | 00,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll
[2009-09-19 12:18:02 | 00,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sessmgr.exe
[2009-09-19 12:18:02 | 00,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll
[2009-09-19 12:18:02 | 00,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe
[2009-09-19 12:18:02 | 00,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2009-09-19 12:18:02 | 00,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\remotepg.dll
[2009-09-19 12:18:02 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll
[2009-09-19 12:18:02 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe
[2009-09-19 12:18:01 | 00,428,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
[2009-09-19 12:18:01 | 00,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
[2009-09-19 12:18:01 | 00,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll
[2009-09-19 12:18:01 | 00,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
[2009-09-19 12:18:01 | 00,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
[2009-09-19 12:18:01 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll
[2009-09-19 12:18:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2009-09-19 12:18:00 | 00,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
[2009-09-19 12:18:00 | 00,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
[2009-09-19 12:18:00 | 00,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
[2009-09-19 12:18:00 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtc.exe
[2009-09-19 12:17:59 | 00,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll
[2009-09-19 12:17:59 | 00,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
[2009-09-19 12:17:59 | 00,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
[2009-09-19 12:17:59 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2009-09-19 12:17:59 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
[2009-09-19 12:17:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2009-09-19 12:17:58 | 00,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll
[2009-09-19 12:17:58 | 00,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll
[2009-09-19 12:17:58 | 00,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll
[2009-09-19 12:17:58 | 00,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
[2009-09-19 12:17:58 | 00,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
[2009-09-19 12:17:58 | 00,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
[2009-09-19 12:17:58 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll
[2009-09-19 12:17:57 | 01,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll
[2009-09-19 12:17:57 | 00,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
[2009-09-19 12:17:57 | 00,498,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatq.dll
[2009-09-19 12:17:57 | 00,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
[2009-09-19 12:17:50 | 00,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll
[2009-09-19 12:17:50 | 00,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll
[2009-09-19 12:17:50 | 00,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll
[2009-09-19 12:17:49 | 00,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll
[2009-09-19 12:17:46 | 00,196,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rdpdr.sys
[2009-09-19 12:17:45 | 00,040,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\termdd.sys
[2009-09-19 12:17:45 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[1 C:\WINDOWS\System32\drivers\*.tmp files]
[1 C:\WINDOWS\System32\*.tmp files]
[3 C:\WINDOWS\*.tmp files]
[2009-10-16 17:42:59 | 00,000,474 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2009-10-16 17:41:04 | 00,781,909 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\RSIT.exe
[2009-10-16 17:40:02 | 04,045,528 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\pl\Pulpit\mbam-setup.exe
[2009-10-16 17:39:22 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\pl\Pulpit\HJTInstall.exe
[2009-10-16 17:38:04 | 00,521,216 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\pl\Pulpit\OTL.exe
[2009-10-16 17:21:35 | 00,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2009-10-16 17:20:52 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-10-16 17:20:49 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-10-14 21:21:23 | 01,197,568 | ---- | M] () -- C:\Documents and Settings\pl\Moje dokumenty\Historia Góry.ppt
[2009-10-14 20:27:07 | 11,440,833 | ---- | M] (Meteoryt.pl ) -- C:\Documents and Settings\pl\Pulpit\AsystentPIM_2010.exe
[2009-10-14 16:58:12 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009-10-14 16:56:23 | 00,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009-10-14 14:03:51 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2009-10-14 13:54:56 | 00,008,704 | ---- | M] () -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-10-13 20:01:13 | 00,000,677 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\Spybot - Search & Destroy.lnk
[2009-10-13 19:57:30 | 16,409,960 | ---- | M] (Safer Networking Limited ) -- C:\Documents and Settings\pl\Pulpit\spybotsd162.exe
[2009-10-13 19:47:05 | 00,000,510 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\CCleaner.lnk
[2009-10-13 19:46:03 | 03,309,072 | ---- | M] (Piriform Ltd) -- C:\Documents and Settings\pl\Pulpit\ccsetup224.exe
[2009-10-13 17:44:12 | 03,901,262 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\morandi - colors(new 2009).mp3
[2009-10-13 17:39:05 | 00,187,728 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\Burn_Energy_by_ArgeIntegro.rar
[2009-10-13 14:05:02 | 06,846,592 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\4ever - Kobiety w zlosci - vokal.mp3
[2009-10-13 13:49:24 | 03,874,930 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\szafir-hej teresa.mp3.mp3
[2009-10-13 13:46:12 | 03,347,885 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\marco van dj - aniol i diabel 2009 hit nowosc.mp3.mp3
[2009-10-13 13:42:08 | 03,776,293 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\mega dance - moze to jest ten hit 2008 .mp3.mp3
[2009-10-12 21:21:31 | 00,107,547 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat
[2009-10-12 21:21:31 | 00,095,259 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat
[2009-10-12 21:20:16 | 00,000,977 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\Kaspersky Internet Security 2010.lnk
[2009-10-12 21:11:47 | 00,604,140 | -HS- | M] () -- C:\WINDOWS\System32\drivers\ISwift3.dat
[2009-10-12 20:59:39 | 00,296,976 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys
[2009-10-12 20:57:00 | 69,524,424 | ---- | M] (Kaspersky Lab) -- C:\Documents and Settings\pl\Pulpit\kis9.0.0.463pl.exe
[2009-10-12 17:48:25 | 42,808,008 | ---- | M] (Kaspersky Lab) -- C:\Documents and Settings\pl\Pulpit\kis8.0.0.506pl.exe
[2009-10-11 08:10:09 | 00,236,544 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2009-10-10 16:35:44 | 00,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2009-10-10 16:20:41 | 00,026,624 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\geografia sciaga.doc
[2009-10-10 16:16:51 | 00,002,353 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\Microsoft Office Word 2003.lnk
[2009-10-10 15:37:57 | 00,000,603 | ---- | M] () -- C:\WINDOWS\win.ini
[2009-10-10 15:37:57 | 00,000,211 | -HS- | M] () -- C:\boot.ini
[2009-10-10 15:01:58 | 00,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009-10-10 14:53:28 | 22,227,752 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\pl\Pulpit\SkypeSetupFull.exe
[2009-10-10 07:51:57 | 04,806,726 | -H-- | M] () -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-10-09 18:42:03 | 03,518,456 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\11 - sidney polak - skuter.mp3
[2009-10-08 15:05:10 | 00,000,532 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\inster.lnk
[2009-10-06 17:22:21 | 00,000,626 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\ipla.lnk
[2009-10-06 17:21:53 | 01,060,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll
[2009-10-06 17:21:52 | 01,700,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll
[2009-10-05 17:33:05 | 03,679,371 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\czy ten pan i pani club mix w.r.mp3
[2009-10-05 14:19:33 | 00,008,529 | ---- | M] () -- C:\WINDOWS\System32\LexFiles.ulf
[2009-10-05 12:58:18 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-10-02 20:20:32 | 00,815,188 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-10-02 20:20:32 | 00,386,110 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2009-10-02 20:20:32 | 00,339,820 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009-10-02 20:20:32 | 00,065,894 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2009-10-02 20:20:32 | 00,052,104 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009-10-02 15:09:02 | 04,656,515 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\maxel - lekcja milosci (club version)(www.o-mp3.pl).mp3
[2009-09-30 21:11:05 | 00,039,416 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\c1bd2230e67f.jpg
[2009-09-27 18:24:44 | 00,042,560 | ---- | M] () -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-09-26 21:45:31 | 00,192,184 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-09-26 20:04:30 | 00,402,944 | ---- | M] () -- C:\WINDOWS\system32AKV.exe
[2009-09-26 20:04:30 | 00,000,908 | ---- | M] () -- C:\WINDOWS\system32YIUW.002
[2009-09-26 20:04:30 | 00,000,518 | ---- | M] () -- C:\WINDOWS\system32YIUW.005
[2009-09-26 20:04:29 | 00,000,476 | ---- | M] () -- C:\WINDOWS\system32YIUW.001
[2009-09-26 20:02:59 | 00,007,680 | ---- | M] () -- C:\WINDOWS\system32YIUW.006
[2009-09-26 20:02:59 | 00,005,632 | ---- | M] () -- C:\WINDOWS\system32YIUW.007
[2009-09-26 18:40:21 | 00,000,788 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\Windows Media Player.lnk
[2009-09-26 18:08:58 | 03,675,565 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\pitbull - go girl.mp3
[2009-09-23 16:27:22 | 00,000,501 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\WinRAR.lnk
[2009-09-21 19:34:43 | 00,004,096 | ---- | M] () -- C:\WINDOWS\d3dx.dat
[2009-09-19 16:28:08 | 00,000,534 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Expressivo.lnk
[2009-09-19 15:12:06 | 00,000,553 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\IrfanView Thumbnails.lnk
[2009-09-19 15:12:06 | 00,000,489 | ---- | M] () -- C:\Documents and Settings\pl\Pulpit\IrfanView.lnk
[2009-09-19 15:08:57 | 00,000,421 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2009-09-19 14:29:11 | 00,002,385 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Nero StartSmart Essentials.lnk
[2009-09-19 14:05:33 | 00,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2009-09-19 13:53:50 | 00,001,449 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk
[2009-09-19 13:46:56 | 00,000,485 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk
[2009-09-19 13:46:56 | 00,000,466 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Nowe Gadu-Gadu.lnk
[2009-09-19 13:08:29 | 01,213,952 | ---- | M] (Karol Winnicki) -- C:\Documents and Settings\pl\Pulpit\BESTplayer.exe
[2009-09-19 13:02:57 | 00,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2009-09-19 13:02:54 | 00,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
[2009-09-19 12:37:16 | 00,000,000 | ---- | M] () -- C:\WINDOWS\ativpsrm.bin
[2009-09-19 12:30:32 | 00,001,913 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Raconfig.lnk
[2009-09-19 12:25:05 | 00,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2009-09-19 12:23:56 | 00,000,777 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2009-09-19 12:22:53 | 00,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-09-19 12:22:53 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2009-09-19 12:22:53 | 00,000,000 | RHS- | M] () -- C:\IO.SYS
[2009-09-19 12:22:53 | 00,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2009-09-19 12:22:53 | 00,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2009-09-19 12:22:53 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2009-09-19 12:22:44 | 00,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2009-09-19 12:22:44 | 00,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2009-09-19 12:22:42 | 00,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2009-09-19 12:22:34 | 00,004,293 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2009-09-19 12:21:40 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2009-09-19 12:21:40 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009-09-19 12:19:15 | 00,021,856 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-09-19 12:19:05 | 00,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2009-09-19 12:19:05 | 00,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini

[color=#E56717]========== Files - No Company Name ==========[/color]
[2009-10-16 17:42:59 | 00,000,474 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2009-10-16 17:40:26 | 00,781,909 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\RSIT.exe
[2009-10-14 16:34:10 | 00,236,544 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2009-10-14 16:34:10 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2009-10-14 16:34:10 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2009-10-14 16:34:10 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2009-10-14 16:24:01 | 03,776,293 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\mega dance - moze to jest ten hit 2008 .mp3.mp3
[2009-10-14 16:24:01 | 03,347,885 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\marco van dj - aniol i diabel 2009 hit nowosc.mp3.mp3
[2009-10-14 16:23:57 | 06,846,592 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\4ever - Kobiety w zlosci - vokal.mp3
[2009-10-14 16:23:56 | 03,874,930 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\szafir-hej teresa.mp3.mp3
[2009-10-13 20:01:13 | 00,000,677 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\Spybot - Search & Destroy.lnk
[2009-10-13 19:47:05 | 00,000,510 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\CCleaner.lnk
[2009-10-13 17:41:00 | 03,901,262 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\morandi - colors(new 2009).mp3
[2009-10-13 17:39:01 | 00,187,728 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\Burn_Energy_by_ArgeIntegro.rar
[2009-10-12 21:20:16 | 00,000,977 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\Kaspersky Internet Security 2010.lnk
[2009-10-12 21:11:47 | 00,604,140 | -HS- | C] () -- C:\WINDOWS\System32\drivers\ISwift3.dat
[2009-10-12 21:03:33 | 00,107,547 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat
[2009-10-12 21:03:33 | 00,095,259 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat
[2009-10-10 19:11:10 | 01,197,568 | ---- | C] () -- C:\Documents and Settings\pl\Moje dokumenty\Historia Góry.ppt
[2009-10-10 16:20:41 | 00,026,624 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\geografia sciaga.doc
[2009-10-10 15:01:58 | 00,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009-10-10 14:56:11 | 00,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2009-10-08 15:05:10 | 00,000,532 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\inster.lnk
[2009-10-06 17:22:21 | 00,000,626 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\ipla.lnk
[2009-10-06 15:15:42 | 03,518,456 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\11 - sidney polak - skuter.mp3
[2009-10-05 17:24:51 | 03,679,371 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\czy ten pan i pani club mix w.r.mp3
[2009-10-03 06:47:45 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdnvs.dll
[2009-10-03 06:47:41 | 00,348,160 | R--- | C] () -- C:\WINDOWS\System32\lxdncoin.dll
[2009-10-03 06:47:32 | 00,082,537 | R--- | C] () -- C:\WINDOWS\System32\lxdnprpr.chm
[2009-10-03 06:46:40 | 00,782,336 | ---- | C] () -- C:\WINDOWS\System32\lxdndrs.dll
[2009-10-03 06:46:40 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\lxdncaps.dll
[2009-10-03 06:46:39 | 00,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdncnv4.dll
[2009-10-02 20:14:29 | 00,000,044 | ---- | C] () -- C:\WINDOWS\System32\lxdnrwrd.ini
[2009-10-02 20:14:05 | 00,348,160 | ---- | C] () -- C:\WINDOWS\System32\LXDNinst.dll
[2009-10-02 20:14:03 | 00,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdngrd.dll
[2009-10-02 20:14:02 | 00,008,529 | ---- | C] () -- C:\WINDOWS\System32\LexFiles.ulf
[2009-10-02 20:14:02 | 00,001,633 | R--- | C] () -- C:\WINDOWS\System32\lxdn.loc
[2009-10-02 15:04:34 | 04,656,515 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\maxel - lekcja milosci (club version)(www.o-mp3.pl).mp3
[2009-09-30 21:10:30 | 00,039,416 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\c1bd2230e67f.jpg
[2009-09-26 20:03:45 | 00,000,518 | ---- | C] () -- C:\WINDOWS\system32YIUW.005
[2009-09-26 20:03:44 | 00,000,908 | ---- | C] () -- C:\WINDOWS\system32YIUW.002
[2009-09-26 20:02:43 | 00,402,944 | ---- | C] () -- C:\WINDOWS\system32AKV.exe
[2009-09-26 20:02:43 | 00,007,680 | ---- | C] () -- C:\WINDOWS\system32YIUW.006
[2009-09-26 20:02:43 | 00,005,632 | ---- | C] () -- C:\WINDOWS\system32YIUW.007
[2009-09-26 20:02:43 | 00,000,476 | ---- | C] () -- C:\WINDOWS\system32YIUW.001
[2009-09-26 18:40:21 | 00,000,788 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\Windows Media Player.lnk
[2009-09-26 18:05:57 | 03,675,565 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\pitbull - go girl.mp3
[2009-09-23 16:27:22 | 00,000,501 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\WinRAR.lnk
[2009-09-21 19:34:43 | 00,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2009-09-20 19:16:12 | 00,000,260 | ---- | C] () -- C:\WINDOWS\tasks\WGASetup.job
[2009-09-20 09:46:04 | 01,203,922 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009-09-19 16:28:08 | 00,000,534 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Expressivo.lnk
[2009-09-19 15:12:06 | 00,000,553 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\IrfanView Thumbnails.lnk
[2009-09-19 15:12:06 | 00,000,489 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\IrfanView.lnk
[2009-09-19 15:09:31 | 00,002,353 | ---- | C] () -- C:\Documents and Settings\pl\Pulpit\Microsoft Office Word 2003.lnk
[2009-09-19 15:08:56 | 00,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-09-19 14:38:03 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-09-19 14:29:11 | 00,002,385 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Nero StartSmart Essentials.lnk
[2009-09-19 14:05:33 | 00,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF
[2009-09-19 14:05:00 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2009-09-19 14:04:55 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2009-09-19 14:04:55 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2009-09-19 14:04:55 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2009-09-19 14:04:52 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2009-09-19 14:04:51 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2009-09-19 14:04:51 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2009-09-19 14:04:48 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2009-09-19 14:04:48 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2009-09-19 14:04:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2009-09-19 14:04:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2009-09-19 14:04:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2009-09-19 14:04:46 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2009-09-19 14:04:45 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2009-09-19 14:04:45 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2009-09-19 14:04:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2009-09-19 14:04:32 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2009-09-19 14:04:32 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2009-09-19 14:04:32 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2009-09-19 14:04:24 | 00,001,734 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2009-09-19 14:04:07 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
[2009-09-19 14:03:13 | 00,192,184 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-09-19 14:02:03 | 00,000,211 | -HS- | C] () -- C:\boot.ini
[2009-09-19 14:02:00 | 00,000,777 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2009-09-19 13:53:50 | 00,001,449 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk
[2009-09-19 13:46:56 | 00,000,485 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk
[2009-09-19 13:46:56 | 00,000,466 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Nowe Gadu-Gadu.lnk
[2009-09-19 13:11:16 | 00,008,704 | ---- | C] () -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-09-19 13:02:57 | 00,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009-09-19 13:02:54 | 00,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
[2009-09-19 12:56:49 | 00,042,560 | ---- | C] () -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-09-19 12:52:29 | 00,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2009-09-19 12:52:29 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009-09-19 12:52:28 | 00,141,016 | ---- | C] () -- C:\WINDOWS\System32\ALSNDMGR.WAV
[2009-09-19 12:40:50 | 00,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2009-09-19 12:40:49 | 00,152,064 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-09-19 12:40:48 | 00,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-09-19 12:40:46 | 00,417,792 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.cpl
[2009-09-19 12:37:16 | 00,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2009-09-19 12:36:38 | 04,806,726 | -H-- | C] () -- C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-09-19 12:35:59 | 00,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2009-09-19 12:30:32 | 00,001,913 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Raconfig.lnk
[2009-09-19 12:29:32 | 00,110,592 | ---- | C] () -- C:\WINDOWS\System32\AegisI5.exe
[2009-09-19 12:29:32 | 00,086,016 | ---- | C] () -- C:\WINDOWS\System32\install.dll
[2009-09-19 12:29:32 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\DEDriverDLL.dll
[2009-09-19 12:29:32 | 00,036,864 | ---- | C] () -- C:\WINDOWS\System32\WRLSetup.exe
[2009-09-19 12:29:32 | 00,032,768 | ---- | C] () -- C:\WINDOWS\System32\SmartInstallCfg2.dll
[2009-09-19 12:29:32 | 00,028,672 | ---- | C] () -- C:\WINDOWS\System32\CCS24.exe
[2009-09-19 12:26:01 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\pl\Dane aplikacji\desktop.ini
[2009-09-19 12:25:28 | 00,000,006 | -H-- | C] () -- C:\WINDOWS\tasks\SA.DAT
[2009-09-19 12:25:05 | 00,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2009-09-19 12:23:56 | 00,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009-09-19 12:23:00 | 00,050,105 | ---- | C] () -- C:\WINDOWS\activ.exe
[2009-09-19 12:22:53 | 00,002,596 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-09-19 12:22:53 | 00,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2009-09-19 12:22:53 | 00,000,000 | RHS- | C] () -- C:\IO.SYS
[2009-09-19 12:22:53 | 00,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2009-09-19 12:22:53 | 00,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2009-09-19 12:22:44 | 00,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2009-09-19 12:22:44 | 00,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2009-09-19 12:22:42 | 00,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2009-09-19 12:21:40 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2009-09-19 12:21:40 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2009-09-19 12:21:36 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009-09-19 12:21:00 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2009-09-19 12:21:00 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2009-09-19 12:20:34 | 00,327,896 | ---- | C] () -- C:\WINDOWS\System32\wucltui.dll
[2009-09-19 12:19:15 | 00,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-09-19 12:18:21 | 00,009,522 | ---- | C] () -- C:\WINDOWS\Indiański pled.bmp
[2009-09-19 12:18:20 | 00,065,978 | ---- | C] () -- C:\WINDOWS\Bąbelki.bmp
[2009-09-19 12:18:20 | 00,065,954 | ---- | C] () -- C:\WINDOWS\Pod mikroskopem.bmp
[2009-09-19 12:18:20 | 00,065,832 | ---- | C] () -- C:\WINDOWS\Stiuk z Santa Fe.bmp
[2009-09-19 12:18:20 | 00,026,680 | ---- | C] () -- C:\WINDOWS\Wachlarze.bmp
[2009-09-19 12:18:20 | 00,026,582 | ---- | C] () -- C:\WINDOWS\Nefryt.bmp
[2009-09-19 12:18:20 | 00,017,362 | ---- | C] () -- C:\WINDOWS\Rododendron.bmp
[2009-09-19 12:18:20 | 00,017,336 | ---- | C] () -- C:\WINDOWS\Na rybkach.bmp
[2009-09-19 12:18:20 | 00,017,062 | ---- | C] () -- C:\WINDOWS\Kawa.bmp
[2009-09-19 12:18:20 | 00,016,730 | ---- | C] () -- C:\WINDOWS\Puch.bmp
[2009-09-19 12:18:19 | 00,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2009-09-19 12:18:19 | 00,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2009-09-19 12:18:19 | 00,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2009-09-19 12:18:19 | 00,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2009-09-19 12:18:19 | 00,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2009-09-19 12:18:19 | 00,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2009-09-19 12:18:19 | 00,001,272 | ---- | C] () -- C:\WINDOWS\Niebieska koronka 16.bmp
[2009-09-19 12:18:18 | 00,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2009-09-19 12:18:18 | 00,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2009-09-19 12:18:16 | 00,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2009-09-19 12:18:16 | 00,001,225 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2009-09-19 12:18:15 | 00,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2009-09-19 12:18:08 | 00,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2008-05-03 09:24:01 | 00,000,082 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2008-04-14 22:50:58 | 00,013,824 | ---- | C] () -- C:\WINDOWS\System32\uniplat.dll
[2004-02-05 01:54:00 | 00,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001-07-22 00:16:20 | 00,000,603 | ---- | C] () -- C:\WINDOWS\win.ini
[2001-07-22 00:15:52 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini

[color=#E56717]========== LOP Check ==========[/color]

[2009-09-19 14:04:07 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji
[2009-10-16 17:42:42 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji
[2009-09-19 13:14:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2009-10-06 17:22:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2009-09-19 14:07:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-09-19 14:04:07 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji
[2009-09-19 12:25:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji
[2009-09-19 12:25:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji
[2009-10-16 17:43:15 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\pl\Dane aplikacji
[2009-09-20 09:44:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\Ahead
[2009-10-14 08:49:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\BESTplayer
[2009-10-09 07:03:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\DMCache
[2009-09-19 19:42:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\Expressivo
[2009-10-16 17:21:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\ipla
[2009-09-19 14:10:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\Nowe Gadu-Gadu
[2009-09-19 14:05:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\pl\Dane aplikacji\OpenFM
[2001-07-22 00:17:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini
[2009-10-16 17:20:52 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT
[2009-10-16 17:21:35 | 00,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job

[color=#E56717]========== Purity Check ==========[/color]


< End of report >
[/log]

Hijack:
[log]Logfile of random's system information tool 1.06 (written by random/random)
Run by pl at 2009-10-16 17:44:51
Microsoft Windows XP Professional Dodatek Service Pack 3
System drive C: has 24 GB (81%) free of 30 GB
Total RAM: 1023 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:45:41, on 2009-10-16
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\lxdncoms.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ipla\ipla.exe
D:\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\RALINK\RT2400 Wireless LAN Card\Installer\WINXP\RaConfig.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\pl\Pulpit\OTL.exe
C:\Documents and Settings\pl\Pulpit\mbam-setup.exe
C:\DOCUME~1\pl\USTAWI~1\Temp\is-1MDQN.tmp\mbam-setup.tmp
D:\Malwarebytes' Anti-Malware\mbam.exe
C:\Documents and Settings\pl\Pulpit\RSIT.exe
C:\Program Files\trend micro\pl.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - D:\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O3 - Toolbar: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - D:\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\adobe reader\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] D:\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe /autorun
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: Raconfig.lnk = C:\Program Files\RALINK\RT2400 Wireless LAN Card\Installer\WINXP\RaConfig.exe
O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{05F43472-2E4C-4099-83D5-F83ED1A28270}: NameServer = 194.204.159.1,194.204.152.34
O17 - HKLM\System\CCS\Services\Tcpip\..\{38D667AB-E4E8-4DC5-802F-70554D1960B2}: NameServer = 194.204.152.34 194.204.159.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{05F43472-2E4C-4099-83D5-F83ED1A28270}: NameServer = 194.204.159.1,194.204.152.34
O17 - HKLM\System\CS2\Services\Tcpip\..\{05F43472-2E4C-4099-83D5-F83ED1A28270}: NameServer = 194.204.159.1,194.204.152.34
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: lxdnCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdnserv.exe
O23 - Service: lxdn_device - - C:\WINDOWS\system32\lxdncoms.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

--
End of file - 6845 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - D:\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll [2009-07-03 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{85F685C3-20D9-4943-95E4-EB4224056C3F}]
Expressivo - D:\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll [2008-06-02 335872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll [2009-10-12 264720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{85F685C3-20D9-4943-95E4-EB4224056C3F} - Expressivo - D:\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll [2008-06-02 335872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-12-01 77824]
"Adobe Reader Speed Launcher"=D:\adobe reader\Reader\Reader_sl.exe [2009-02-27 35696]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2008-07-14 570664]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-07-03 303376]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=D:\Malwarebytes' Anti-Malware\mbamgui.exe [2009-09-10 420176]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"IPLA!"=C:\Program Files\ipla\ipla.exe [2009-10-02 5999000]
"SpybotSD TeaTimer"=D:\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nowe Gadu-Gadu]
D:\Nowe Gadu-Gadu\gg.exe [2009-08-31 11391592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2009-09-02 25623336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Systems]
C:\Windows\Systems.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^pl^Menu Start^Programy^Autostart^taskmgr.exe]
C:\Documents and Settings\pl\Menu Start\Programy\Autostart\taskmgr.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"wuauserv"=2
"wscsvc"=2

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
Raconfig.lnk - C:\Program Files\RALINK\RT2400 Wireless LAN Card\Installer\WINXP\RaConfig.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-01-22 122880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\system32\klogon.dll [2009-07-03 219664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-05-02 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Nowe Gadu-Gadu\gg.exe"="D:\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu"
"E:\fms\metin2.bin"="E:\fms\metin2.bin:*:Enabled:metin2"
"E:\fms\metin2client.bin"="E:\fms\metin2client.bin:*:Enabled:metin2client"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdnpswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdnpswx.exe:*:Enabled:Printer Status Window Interface"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdntime.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdntime.exe:*:Enabled:Lexmark Connect Time Executable"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdnjswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdnjswx.exe:*:Enabled:Job Status Window Interface"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e79073d0-aea7-11de-a173-0013d317f670}]
shell\AutoRun\command - mje12tni.exe
shell\open\command - mje12tni.exe


======List of files/folders created in the last 1 months======

2009-10-16 17:45:00 ----D---- C:\Program Files\trend micro
2009-10-16 17:44:51 ----D---- C:\rsit
2009-10-16 17:43:15 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Malwarebytes
2009-10-16 17:42:42 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2009-10-16 06:55:23 ----SHD---- C:\RECYCLER
2009-10-14 17:03:23 ----D---- C:\WINDOWS\temp
2009-10-14 17:03:19 ----A---- C:\ComboFix.txt
2009-10-14 16:55:31 ----D---- C:\Program Files\xerox
2009-10-14 16:55:30 ----D---- C:\WINDOWS\system32\xircom
2009-10-14 16:55:30 ----D---- C:\Program Files\microsoft frontpage
2009-10-14 16:34:10 ----A---- C:\WINDOWS\zip.exe
2009-10-14 16:34:10 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-10-14 16:34:10 ----A---- C:\WINDOWS\SWSC.exe
2009-10-14 16:34:10 ----A---- C:\WINDOWS\SWREG.exe
2009-10-14 16:34:10 ----A---- C:\WINDOWS\sed.exe
2009-10-14 16:34:10 ----A---- C:\WINDOWS\PEV.exe
2009-10-14 16:34:10 ----A---- C:\WINDOWS\NIRCMD.exe
2009-10-14 16:34:10 ----A---- C:\WINDOWS\grep.exe
2009-10-14 16:33:59 ----D---- C:\WINDOWS\ERDNT
2009-10-14 16:33:38 ----AD---- C:\Qoobox
2009-10-14 13:55:55 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Media Player Classic
2009-10-13 20:00:58 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2009-10-12 21:00:50 ----D---- C:\Program Files\Kaspersky Lab
2009-10-12 21:00:50 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2009-10-12 17:52:17 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files
2009-10-10 15:01:57 ----D---- C:\Documents and Settings\pl\Dane aplikacji\skypePM
2009-10-10 14:58:25 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Skype
2009-10-10 14:56:06 ----D---- C:\Program Files\Common Files\Skype
2009-10-10 14:55:54 ----RD---- C:\Program Files\Skype
2009-10-10 14:53:41 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Skype
2009-10-06 17:22:42 ----D---- C:\Documents and Settings\pl\Dane aplikacji\ipla
2009-10-06 17:22:42 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\ipla
2009-10-06 17:22:07 ----D---- C:\Program Files\ipla
2009-10-06 17:21:52 ----A---- C:\WINDOWS\system32\mfc71.dll
2009-10-06 17:21:50 ----A---- C:\WINDOWS\system32\gdiplus.dll
2009-10-03 06:49:53 ----D---- C:\logs
2009-10-03 06:47:45 ----A---- C:\WINDOWS\system32\lxdnvs.dll
2009-10-03 06:47:41 ----RA---- C:\WINDOWS\system32\lxdncoin.dll
2009-10-03 06:47:01 ----A---- C:\WINDOWS\system32\wiafbdrv.dll
2009-10-03 06:46:40 ----A---- C:\WINDOWS\system32\lxdndrs.dll
2009-10-03 06:46:40 ----A---- C:\WINDOWS\system32\lxdncaps.dll
2009-10-03 06:46:39 ----A---- C:\WINDOWS\system32\lxdncnv4.dll
2009-10-02 20:19:09 ----RSD---- C:\WINDOWS\assembly
2009-10-02 20:15:49 ----D---- C:\WINDOWS\Microsoft.NET
2009-10-02 20:14:31 ----A---- C:\WINDOWS\system32\lxdnwupd.exe
2009-10-02 20:14:31 ----A---- C:\WINDOWS\system32\lxdnwupd.dll
2009-10-02 20:14:29 ----A---- C:\WINDOWS\system32\lxdnrwrd.ini
2009-10-02 20:14:05 ----A---- C:\WINDOWS\system32\lxdnutil.dll
2009-10-02 20:14:05 ----A---- C:\WINDOWS\system32\LXDNinst.dll
2009-10-02 20:14:05 ----A---- C:\WINDOWS\system32\lxdninpa.dll
2009-10-02 20:14:05 ----A---- C:\WINDOWS\system32\lxdniesc.dll
2009-10-02 20:14:05 ----A---- C:\WINDOWS\system32\LXDNhcp.dll
2009-10-02 20:14:04 ----A---- C:\WINDOWS\system32\lxdnusb1.dll
2009-10-02 20:14:04 ----A---- C:\WINDOWS\system32\lxdnserv.dll
2009-10-02 20:14:04 ----A---- C:\WINDOWS\system32\lxdnprox.dll
2009-10-02 20:14:04 ----A---- C:\WINDOWS\system32\lxdnpmui.dll
2009-10-02 20:14:04 ----A---- C:\WINDOWS\system32\lxdnlmpm.dll
2009-10-02 20:14:04 ----A---- C:\WINDOWS\system32\lxdnjswr.dll
2009-10-02 20:14:03 ----A---- C:\WINDOWS\system32\lxdninsr.dll
2009-10-02 20:14:03 ----A---- C:\WINDOWS\system32\lxdninsb.dll
2009-10-02 20:14:03 ----A---- C:\WINDOWS\system32\lxdnins.dll
2009-10-02 20:14:03 ----A---- C:\WINDOWS\system32\lxdnih.exe
2009-10-02 20:14:03 ----A---- C:\WINDOWS\system32\lxdnhbn3.dll
2009-10-02 20:14:03 ----A---- C:\WINDOWS\system32\lxdngrd.dll
2009-10-02 20:14:03 ----A---- C:\WINDOWS\system32\lxdngf.dll
2009-10-02 20:14:03 ----A---- C:\WINDOWS\system32\lxdncur.dll
2009-10-02 20:14:03 ----A---- C:\WINDOWS\system32\lxdncub.dll
2009-10-02 20:14:02 ----RA---- C:\WINDOWS\system32\lxdncfg.dll
2009-10-02 20:14:02 ----A---- C:\WINDOWS\system32\lxdncu.dll
2009-10-02 20:14:02 ----A---- C:\WINDOWS\system32\lxdncoms.exe
2009-10-02 20:14:02 ----A---- C:\WINDOWS\system32\lxdncomm.dll
2009-10-02 20:14:02 ----A---- C:\WINDOWS\system32\lxdncomc.dll
2009-10-02 20:14:02 ----A---- C:\WINDOWS\system32\lxdncfg.exe
2009-10-02 20:13:49 ----D---- C:\Program Files\Lexmark 2600 Series
2009-10-02 15:03:12 ----D---- C:\WINDOWS\Minidump
2009-10-01 16:41:57 ----D---- C:\WINDOWS\pss
2009-09-26 21:54:12 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-09-26 20:02:43 ----A---- C:\WINDOWS\system32AKV.exe
2009-09-21 20:31:33 ----D---- C:\WINDOWS\AM
2009-09-20 19:16:56 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-09-20 19:16:48 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-09-20 19:16:41 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-09-20 19:16:33 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-09-20 19:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-09-20 19:16:16 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-09-20 19:16:12 ----D---- C:\WINDOWS\system32\KB905474
2009-09-20 19:16:04 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-09-20 19:15:57 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-09-20 19:15:51 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-09-20 19:15:42 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-09-20 19:15:25 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-09-20 19:15:18 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-09-20 19:15:10 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-09-20 19:15:02 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2009-09-20 19:14:54 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-09-20 19:14:40 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-09-20 19:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-09-20 19:14:24 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-09-20 19:14:18 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-09-20 19:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-09-20 19:14:03 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-09-20 19:13:51 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-09-20 19:13:22 ----D---- C:\WINDOWS\ie7updates
2009-09-20 19:13:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-09-20 19:13:02 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-09-20 19:12:54 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-09-20 19:12:47 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-09-20 19:12:40 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-09-20 19:12:33 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-09-20 19:12:25 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-09-20 19:12:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2009-09-20 19:12:11 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-09-20 19:11:37 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-09-20 19:11:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-09-20 19:11:00 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-09-20 19:10:54 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-09-20 19:10:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-09-20 19:10:41 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-09-20 19:10:36 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-09-20 19:10:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-09-20 19:10:25 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-09-20 19:10:19 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-09-20 19:10:14 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-09-20 19:10:08 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-09-20 19:10:03 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-09-20 19:09:53 ----D---- C:\Program Files\MSXML 4.0
2009-09-20 19:09:42 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-09-20 19:09:37 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-09-20 19:09:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2009-09-20 19:09:23 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2009-09-20 09:44:20 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Ahead
2009-09-20 09:44:03 ----D---- C:\WINDOWS\system32\PreInstall
2009-09-20 09:44:02 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-09-20 09:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-09-19 16:27:53 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Expressivo
2009-09-19 15:08:56 ----A---- C:\WINDOWS\ODBC.INI
2009-09-19 15:08:50 ----A---- C:\WINDOWS\system32\mdimon.dll
2009-09-19 15:07:33 ----D---- C:\Program Files\Microsoft.NET
2009-09-19 15:06:01 ----D---- C:\Program Files\Common Files\DESIGNER
2009-09-19 15:04:58 ----D---- C:\WINDOWS\SHELLNEW
2009-09-19 14:38:03 ----A---- C:\WINDOWS\NeroDigital.ini
2009-09-19 14:25:11 ----D---- C:\Program Files\Nero
2009-09-19 14:25:11 ----D---- C:\Program Files\Common Files\Ahead
2009-09-19 14:25:11 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Nero
2009-09-19 14:24:39 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-09-19 14:24:38 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-09-19 14:16:37 ----A---- C:\WINDOWS\system32\h323log.txt
2009-09-19 14:13:29 ----A---- C:\WINDOWS\system32\usbui.dll
2009-09-19 14:05:24 ----SHD---- C:\WINDOWS\Installer
2009-09-19 14:05:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-09-19 14:05:23 ----D---- C:\Program Files\Common Files\ODBC
2009-09-19 14:05:23 ----A---- C:\WINDOWS\ODBCINST.INI
2009-09-19 14:05:18 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-09-19 14:05:17 ----RD---- C:\Program Files
2009-09-19 14:05:17 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-09-19 14:05:17 ----D---- C:\Program Files\Common Files
2009-09-19 14:05:10 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
2009-09-19 14:05:07 ----D---- C:\Documents and Settings\pl\Dane aplikacji\OpenFM
2009-09-19 14:04:56 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-09-19 14:04:56 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-09-19 14:04:56 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-09-19 14:04:53 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-09-19 14:04:53 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-09-19 14:04:52 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-09-19 14:04:49 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-09-19 14:04:49 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-09-19 14:04:49 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-09-19 14:04:49 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-09-19 14:04:49 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-09-19 14:04:48 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-09-19 14:04:48 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-09-19 14:04:46 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-09-19 14:04:46 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-09-19 14:04:46 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-09-19 14:04:46 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-09-19 14:04:46 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-09-19 14:04:33 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-09-19 14:04:32 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-09-19 14:04:28 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-09-19 14:04:28 ----A---- C:\WINDOWS\system32\irclass.dll
2009-09-19 14:04:28 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-09-19 14:04:28 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-09-19 14:04:28 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-09-19 14:04:24 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-09-19 14:04:24 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-09-19 14:04:23 ----A---- C:\WINDOWS\system32\batt.dll
2009-09-19 14:04:23 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-09-19 14:04:21 ----A---- C:\WINDOWS\system32\storprop.dll
2009-09-19 14:04:07 ----ASH---- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
2009-09-19 14:03:57 ----RA---- C:\WINDOWS\SET8.tmp
2009-09-19 14:03:53 ----RA---- C:\WINDOWS\SET4.tmp
2009-09-19 14:03:51 ----RA---- C:\WINDOWS\SET3.tmp
2009-09-19 14:03:45 ----D---- C:\WINDOWS\system32\CatRoot2
2009-09-19 14:03:45 ----D---- C:\WINDOWS\system32\CatRoot
2009-09-19 14:03:39 ----SD---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
2009-09-19 14:03:15 ----D---- C:\Documents and Settings
2009-09-19 14:03:14 ----SHD---- C:\System Volume Information
2009-09-19 14:02:03 ----SH---- C:\boot.ini
2009-09-19 13:55:03 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-09-19 13:55:03 ----RSD---- C:\WINDOWS\Fonts
2009-09-19 13:55:03 ----RD---- C:\WINDOWS\Web
2009-09-19 13:55:03 ----HD---- C:\WINDOWS\inf
2009-09-19 13:55:03 ----D---- C:\WINDOWS\WinSxS
2009-09-19 13:55:03 ----D---- C:\WINDOWS\WBEM
2009-09-19 13:55:03 ----D---- C:\WINDOWS\twain_32
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\wins
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\wbem
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\usmt
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\spool
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\ShellExt
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\Setup
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\ras
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\pl-pl
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\pl
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\oobe
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\npp
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\mui
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\inetsrv
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\IME
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\icsxml
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\ias
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\export
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\drivers
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\dhcp
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\config
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\3com_dmi
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\3076
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\2052
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\1054
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\1045
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\1042
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\1041
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\1037
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\1033
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\1031
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\1028
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32\1025
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system32
2009-09-19 13:55:03 ----D---- C:\WINDOWS\system
2009-09-19 13:55:03 ----D---- C:\WINDOWS\security
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Resources
2009-09-19 13:55:03 ----D---- C:\WINDOWS\repair
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Provisioning
2009-09-19 13:55:03 ----D---- C:\WINDOWS\PeerNet
2009-09-19 13:55:03 ----D---- C:\WINDOWS\pchealth
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Offline Web Pages
2009-09-19 13:55:03 ----D---- C:\WINDOWS\NLDRV
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Network Diagnostic
2009-09-19 13:55:03 ----D---- C:\WINDOWS\mui
2009-09-19 13:55:03 ----D---- C:\WINDOWS\msapps
2009-09-19 13:55:03 ----D---- C:\WINDOWS\msagent
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Media
2009-09-19 13:55:03 ----D---- C:\WINDOWS\L2Schemas
2009-09-19 13:55:03 ----D---- C:\WINDOWS\java
2009-09-19 13:55:03 ----D---- C:\WINDOWS\ime
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Help
2009-09-19 13:55:03 ----D---- C:\WINDOWS\ehome
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Driver Cache
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Debug
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Cursors
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Connection Wizard
2009-09-19 13:55:03 ----D---- C:\WINDOWS\Config
2009-09-19 13:55:03 ----D---- C:\WINDOWS\AppPatch
2009-09-19 13:55:03 ----D---- C:\WINDOWS\addins
2009-09-19 13:55:03 ----D---- C:\WINDOWS
2009-09-19 13:53:43 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Adobe
2009-09-19 13:53:38 ----D---- C:\Program Files\Common Files\Adobe
2009-09-19 13:48:49 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Macromedia
2009-09-19 13:48:49 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Adobe
2009-09-19 13:46:55 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Nowe Gadu-Gadu
2009-09-19 13:22:19 ----D---- C:\Documents and Settings\pl\Dane aplikacji\DMCache
2009-09-19 13:22:02 ----D---- C:\Documents and Settings\pl\Dane aplikacji\WinRAR
2009-09-19 13:14:59 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\ESET
2009-09-19 13:08:54 ----D---- C:\Documents and Settings\pl\Dane aplikacji\BESTplayer
2009-09-19 13:02:56 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Mozilla
2009-09-19 13:02:52 ----D---- C:\Program Files\Mozilla Firefox
2009-09-19 12:58:21 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-09-19 12:52:34 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-09-19 12:52:29 ----N---- C:\WINDOWS\system32\ChCfg.exe
2009-09-19 12:52:29 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2009-09-19 12:52:29 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2009-09-19 12:52:28 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2009-09-19 12:52:25 ----A---- C:\WINDOWS\alcupd.exe
2009-09-19 12:52:25 ----A---- C:\WINDOWS\alcrmv.exe
2009-09-19 12:40:50 ----A---- C:\WINDOWS\system32\mplvw7.dll
2009-09-19 12:40:50 ----A---- C:\WINDOWS\system32\mplvpx.dll
2009-09-19 12:40:50 ----A---- C:\WINDOWS\system32\mplvm6.dll
2009-09-19 12:40:50 ----A---- C:\WINDOWS\system32\mplva6.dll
2009-09-19 12:40:50 ----A---- C:\WINDOWS\system32\mplaw7.dll
2009-09-19 12:40:50 ----A---- C:\WINDOWS\system32\mplapx.dll
2009-09-19 12:40:50 ----A---- C:\WINDOWS\system32\mplam6.dll
2009-09-19 12:40:50 ----A---- C:\WINDOWS\system32\mplaa6.dll
2009-09-19 12:40:50 ----A---- C:\WINDOWS\system32\cpuinf32.dll
2009-09-19 12:40:49 ----A---- C:\WINDOWS\system32\unrar.dll
2009-09-19 12:40:48 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-09-19 12:40:46 ----D---- C:\Program Files\ACE Mega CoDecS Pack
2009-09-19 12:40:08 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2009-09-19 12:40:08 ----A---- C:\WINDOWS\system32\pndx5032.dll
2009-09-19 12:40:08 ----A---- C:\WINDOWS\system32\pndx5016.dll
2009-09-19 12:40:08 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-09-19 12:40:07 ----D---- C:\Program Files\Real Alternative
2009-09-19 12:40:07 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Real
2009-09-19 12:40:07 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Real
2009-09-19 12:40:07 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-09-19 12:40:07 ----A---- C:\WINDOWS\system32\msvcp71.dll
2009-09-19 12:35:59 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2009-09-19 12:34:52 ----D---- C:\Program Files\ATI Technologies
2009-09-19 12:34:22 ----D---- C:\ATI
2009-09-19 12:29:32 ----A---- C:\WINDOWS\system32\WRLSetup.exe
2009-09-19 12:29:32 ----A---- C:\WINDOWS\system32\SmartInstallCfg2.dll
2009-09-19 12:29:32 ----A---- C:\WINDOWS\system32\install.dll
2009-09-19 12:29:32 ----A---- C:\WINDOWS\system32\DEDriverDLL.dll
2009-09-19 12:29:32 ----A---- C:\WINDOWS\system32\CCS24.exe
2009-09-19 12:29:32 ----A---- C:\WINDOWS\system32\AegisI5.exe
2009-09-19 12:29:29 ----HD---- C:\Program Files\InstallShield Installation Information
2009-09-19 12:29:29 ----D---- C:\Program Files\RALINK
2009-09-19 12:29:20 ----D---- C:\Program Files\Common Files\InstallShield
2009-09-19 12:26:07 ----D---- C:\Documents and Settings\pl\Dane aplikacji\Identities
2009-09-19 12:26:04 ----HD---- C:\Program Files\Uninstall Information
2009-09-19 12:26:01 ----ASH---- C:\Documents and Settings\pl\Dane aplikacji\desktop.ini
2009-09-19 12:26:00 ----SD---- C:\Documents and Settings\pl\Dane aplikacji\Microsoft
2009-09-19 12:25:29 ----D---- C:\WINDOWS\SoftwareDistribution
2009-09-19 12:25:28 ----D---- C:\WINDOWS\Prefetch
2009-09-19 12:25:27 ----SD---- C:\WINDOWS\system32\Microsoft
2009-09-19 12:25:27 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-09-19 12:23:11 ----HD---- C:\WINDOWS\$hf_mig$
2009-09-19 12:23:07 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-09-19 12:23:00 ----A---- C:\WINDOWS\activ.exe
2009-09-19 12:22:53 ----A---- C:\WINDOWS\control.ini
2009-09-19 12:22:53 ----A---- C:\AUTOEXEC.BAT
2009-09-19 12:22:34 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-09-19 12:22:32 ----D---- C:\WINDOWS\system32\dllcache
2009-09-19 12:21:40 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-09-19 12:21:36 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-09-19 12:21:31 ----HD---- C:\Program Files\WindowsUpdate
2009-09-19 12:21:28 ----D---- C:\Program Files\Usługi online
2009-09-19 12:21:10 ----D---- C:\WINDOWS\system32\DirectX
2009-09-19 12:21:02 ----A---- C:\WINDOWS\system32\atrace.dll
2009-09-19 12:20:59 ----A---- C:\WINDOWS\system32\desktop.ini
2009-09-19 12:20:59 ----A---- C:\WINDOWS\desktop.ini
2009-09-19 12:20:48 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-09-19 12:20:47 ----A---- C:\WINDOWS\system32\acctres.dll
2009-09-19 12:20:46 ----D---- C:\Program Files\Common Files\Services
2009-09-19 12:20:43 ----SD---- C:\WINDOWS\Tasks
2009-09-19 12:20:43 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-09-19 12:20:42 ----D---- C:\Program Files\Common Files\MSSoap
2009-09-19 12:20:37 ----D---- C:\WINDOWS\srchasst
2009-09-19 12:20:36 ----D---- C:\WINDOWS\system32\Macromed
2009-09-19 12:20:34 ----N---- C:\WINDOWS\system32\wuauclt.exe
2009-09-19 12:20:34 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-09-19 12:20:34 ----A---- C:\WINDOWS\system32\wups.dll
2009-09-19 12:20:34 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-09-19 12:20:34 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-09-19 12:20:34 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-09-19 12:20:34 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-09-19 12:20:34 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-09-19 12:20:33 ----N---- C:\WINDOWS\system32\qmgr.dll
2009-09-19 12:20:33 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-09-19 12:20:33 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-09-19 12:20:33 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-09-19 12:20:33 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-09-19 12:20:33 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-09-19 12:20:29 ----D---- C:\Program Files\Movie Maker
2009-09-19 12:20:08 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-09-19 12:20:08 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-09-19 12:20:08 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-09-19 12:20:08 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-09-19 12:20:04 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-09-19 12:20:04 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-09-19 12:20:03 ----N---- C:\WINDOWS\system32\srsvc.dll
2009-09-19 12:20:03 ----D---- C:\WINDOWS\system32\Restore
2009-09-19 12:20:03 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-09-19 12:20:03 ----A---- C:\WINDOWS\system32\srclient.dll
2009-09-19 12:20:02 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-09-19 12:20:02 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-09-19 12:20:02 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-09-19 12:20:02 ----A---- C:\WINDOWS\system32\ils.dll
2009-09-19 12:20:01 ----A---- C:\WINDOWS\system32\msconf.dll
2009-09-19 12:20:01 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-09-19 12:19:58 ----D---- C:\Program Files\NetMeeting
2009-09-19 12:19:58 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-09-19 12:19:58 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-09-19 12:19:57 ----A---- C:\WINDOWS\system32\inetres.dll
2009-09-19 12:19:57 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-09-19 12:19:55 ----N---- C:\WINDOWS\system32\schedsvc.dll
2009-09-19 12:19:55 ----D---- C:\Program Files\Outlook Express
2009-09-19 12:19:54 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-09-19 12:19:54 ----A---- C:\WINDOWS\system32\mstask.dll
2009-09-19 12:19:54 ----A---- C:\WINDOWS\system32\isign32.dll
2009-09-19 12:19:54 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-09-19 12:19:54 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-09-19 12:19:54 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-09-19 12:19:47 ----D---- C:\Program Files\Common Files\System
2009-09-19 12:19:46 ----D---- C:\Program Files\Internet Explorer
2009-09-19 12:19:07 ----D---- C:\Program Files\ComPlus Applications
2009-09-19 12:19:05 ----A---- C:\WINDOWS\vbaddin.ini
2009-09-19 12:19:05 ----A---- C:\WINDOWS\vb.ini
2009-09-19 12:19:02 ----D---- C:\WINDOWS\Registration
2009-09-19 12:18:46 ----D---- C:\Program Files\Windows Media Connect 2
2009-09-19 12:18:45 ----D---- C:\Program Files\Windows Media Player
2009-09-19 12:18:43 ----D---- C:\Program Files\Messenger
2009-09-19 12:18:39 ----D---- C:\Program Files\MSN Gaming Zone
2009-09-19 12:18:39 ----A---- C:\WINDOWS\system32\write.exe
2009-09-19 12:18:28 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-09-19 12:18:28 ----A---- C:\WINDOWS\system32\hticons.dll
2009-09-19 12:18:27 ----A---- C:\WINDOWS\system32\winchat.exe
2009-09-19 12:18:27 ----A---- C:\WINDOWS\system32\avwav.dll
2009-09-19 12:18:27 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-09-19 12:18:27 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-09-19 12:18:19 ----A---- C:\WINDOWS\system32\getuname.dll
2009-09-19 12:18:18 ----A---- C:\WINDOWS\system32\charmap.exe
2009-09-19 12:18:18 ----A---- C:\WINDOWS\system32\calc.exe
2009-09-19 12:18:17 ----A---- C:\WINDOWS\system32\winmine.exe
2009-09-19 12:18:17 ----A---- C:\WINDOWS\system32\sol.exe
2009-09-19 12:18:17 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-09-19 12:18:17 ----A---- C:\WINDOWS\system32\freecell.exe
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\tskill.exe
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\tscon.exe
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\shadow.exe
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\reset.exe
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\regini.exe
2009-09-19 12:18:16 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-09-19 12:18:15 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-09-19 12:18:15 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-09-19 12:18:15 ----A---- C:\WINDOWS\system32\msg.exe
2009-09-19 12:18:15 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-09-19 12:18:15 ----A---- C:\WINDOWS\system32\logoff.exe
2009-09-19 12:18:15 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-09-19 12:18:08 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-09-19 12:18:07 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-09-19 12:18:07 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-09-19 12:18:07 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-09-19 12:18:06 ----D---- C:\Program Files\Windows NT
2009-09-19 12:18:06 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-09-19 12:18:06 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-09-19 12:18:06 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-09-19 12:18:05 ----A---- C:\WINDOWS\system32\spider.exe
2009-09-19 12:18:04 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-09-19 12:18:04 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-09-19 12:18:04 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-09-19 12:18:03 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-09-19 12:18:03 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-09-19 12:18:03 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-09-19 12:18:02 ----N---- C:\WINDOWS\system32\termsrv.dll
2009-09-19 12:18:02 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-09-19 12:18:02 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-09-19 12:18:02 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-09-19 12:18:02 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-09-19 12:18:02 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-09-19 12:18:02 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-09-19 12:18:02 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-09-19 12:18:02 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-09-19 12:18:01 ----D---- C:\WINDOWS\system32\MsDtc
2009-09-19 12:18:01 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-09-19 12:18:01 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-09-19 12:18:01 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-09-19 12:18:01 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-09-19 12:18:01 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-09-19 12:18:01 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-09-19 12:18:00 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-09-19 12:18:00 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-09-19 12:18:00 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-09-19 12:18:00 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-09-19 12:17:59 ----D---- C:\WINDOWS\system32\Com
2009-09-19 12:17:59 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-09-19 12:17:59 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-09-19 12:17:59 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-09-19 12:17:59 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-09-19 12:17:59 ----A---- C:\WINDOWS\system32\colbact.dll
2009-09-19 12:17:58 ----A---- C:\WINDOWS\system32\stclient.dll
2009-09-19 12:17:58 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-09-19 12:17:58 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-09-19 12:17:58 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-09-19 12:17:58 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-09-19 12:17:58 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-09-19 12:17:58 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-09-19 12:17:57 ----A---- C:\WINDOWS\system32\comuid.dll
2009-09-19 12:17:57 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-09-19 12:17:57 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-09-19 12:17:57 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-09-19 12:17:50 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-09-19 12:17:50 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-09-19 12:17:50 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-09-19 12:17:49 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2009-10-14 16:58:12 ----A---- C:\WINDOWS\system.ini
2009-10-10 15:37:57 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-10-12 296976]
R2 MDC8021X;AEGIS Protocol (IEEE 802.1x) v2.3.1.9; C:\WINDOWS\system32\DRIVERS\mdc8021x.sys [2009-09-19 15781]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-12-01 2300928]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-01-22 2845696]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2009-05-13 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [2009-05-16 19472]
R3 RT2400;RT2400 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2400.sys [2004-04-22 62848]
R3 rtl8139;Sterownik NT karty Realtek RTL8139(A/B/C)-based PCI Fast Ethernet; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-14 20992]
R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 GMSIPCI;GMSIPCI; \??\G:\INSTALL\GMSIPCI.SYS []
S3 HidUsb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Klasa PRINTER USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Sterownik skanera USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-05-02 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-05-02 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-01-22 512000]
R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-07-03 303376]
R2 lxdn_device;lxdn_device; C:\WINDOWS\system32\lxdncoms.exe [2008-02-28 594600]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-01-22 593920]
S2 lxdnCATSCustConnectService;lxdnCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdnserv.exe [2008-02-28 98984]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2008-01-22 275752]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2004-02-05 89136]
S3 WMPNetworkSvc;Usługa udostępniania w sieci programu Windows Media Player; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-12-01 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------
[/log]

kajzer
komentarz
komentarz

zmień nazwę tematu na bardziej konkretną i opisz dokładnie swój problem. jeżeli tego nie zrobisz, będę zmuszony przenieść Twój temat do kosza.

Psycholandia
komentarz
komentarz

1. Wykonaj: http://support.microsoft.com/kb/310405/pl
2. W okienko OTL wklej poniższy skrypt i klik na Run Fix:

[code]:Processes
explorer.exe

:OTL
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] File not found
O33 - MountPoints2\{e79073d0-aea7-11de-a173-0013d317f670}\Shell\AutoRun\command - "" = mje12tni.exe
O33 - MountPoints2\{e79073d0-aea7-11de-a173-0013d317f670}\Shell\open\Command - "" = mje12tni.exe

:Files
C:\RECYCLER
C:\WINDOWS\SWXCACLS.exe
C:\WINDOWS\SWREG.exe
C:\WINDOWS\SWSC.exe
C:\WINDOWS\NIRCMD.exe
C:\WINDOWS\ERDNT
C:\Qoobox
C:\WINDOWS\tasks\WGASetup.job
C:\WINDOWS\PEV.exe
C:\WINDOWS\sed.exe
C:\WINDOWS\grep.exe
C:\WINDOWS\zip.exe

:Commands
[emptytemp]
[start explorer]
[Reboot][/code]

3. Otwórz notatnik tekstowy i wklej do niego poniższy tekst: [code]Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
[/code]
Zapisz jako->Wybierz [b]Wszystkie pliki[/b]->wpisz [b]Fix.reg[/b]->Następnie kliknij na zapisany plik i uruchom komputer ponownie.

4. Przeskanuj komputer tym: [url="http://www.programosy.pl/program,malwarebytes-anti-malware.html"]Malware[/url] usuń wszystko co znajdzie i daj loga po kasowaniu (loga z Malware)

5. Wykonaj optymalizację: http://www.forumpc.pl/index.php?showtopic=17478

Gość
komentarz
komentarz

[log]All processes killed
========== PROCESSES ==========
Process explorer.exe killed successfully!
========== OTL ==========
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\nltide_2 deleted successfully.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\nltide_2 not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e79073d0-aea7-11de-a173-0013d317f670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e79073d0-aea7-11de-a173-0013d317f670}\ not found.
File mje12tni.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e79073d0-aea7-11de-a173-0013d317f670}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e79073d0-aea7-11de-a173-0013d317f670}\ not found.
File mje12tni.exe not found.
========== FILES ==========
C:\RECYCLER\S-1-5-21-1659004503-1708537768-1275210071-1003 moved successfully.
C:\RECYCLER moved successfully.
C:\WINDOWS\SWXCACLS.exe moved successfully.
C:\WINDOWS\SWREG.exe moved successfully.
C:\WINDOWS\SWSC.exe moved successfully.
C:\WINDOWS\NIRCMD.exe moved successfully.
C:\WINDOWS\ERDNT\subs\Users\00000006 moved successfully.
C:\WINDOWS\ERDNT\subs\Users\00000005 moved successfully.
C:\WINDOWS\ERDNT\subs\Users\00000004 moved successfully.
C:\WINDOWS\ERDNT\subs\Users\00000003 moved successfully.
C:\WINDOWS\ERDNT\subs\Users\00000002 moved successfully.
C:\WINDOWS\ERDNT\subs\Users\00000001 moved successfully.
C:\WINDOWS\ERDNT\subs\Users moved successfully.
C:\WINDOWS\ERDNT\subs moved successfully.
C:\WINDOWS\ERDNT\Hiv-backup\Users\00000006 moved successfully.
C:\WINDOWS\ERDNT\Hiv-backup\Users\00000005 moved successfully.
C:\WINDOWS\ERDNT\Hiv-backup\Users\00000004 moved successfully.
C:\WINDOWS\ERDNT\Hiv-backup\Users\00000003 moved successfully.
C:\WINDOWS\ERDNT\Hiv-backup\Users\00000002 moved successfully.
C:\WINDOWS\ERDNT\Hiv-backup\Users\00000001 moved successfully.
C:\WINDOWS\ERDNT\Hiv-backup\Users moved successfully.
C:\WINDOWS\ERDNT\Hiv-backup moved successfully.
C:\WINDOWS\ERDNT\cache moved successfully.
C:\WINDOWS\ERDNT moved successfully.
C:\Qoobox\Quarantine\Registry_backups moved successfully.
C:\Qoobox\Quarantine\E moved successfully.
C:\Qoobox\Quarantine\D moved successfully.
C:\Qoobox\Quarantine\C\WINDOWS\Installer moved successfully.
C:\Qoobox\Quarantine\C\WINDOWS moved successfully.
C:\Qoobox\Quarantine\C moved successfully.
C:\Qoobox\Quarantine moved successfully.
C:\Qoobox\BackEnv moved successfully.
C:\Qoobox moved successfully.
C:\WINDOWS\tasks\WGASetup.job moved successfully.
C:\WINDOWS\PEV.exe moved successfully.
C:\WINDOWS\sed.exe moved successfully.
C:\WINDOWS\grep.exe moved successfully.
C:\WINDOWS\zip.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\LocalService\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: pl
->Temp folder emptied: 100164 bytes
File delete failed. C:\Documents and Settings\pl\Ustawienia lokalne\Temporary Internet Files\Content.IE5\621OZLRR\patch_metin2_pl[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\pl\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 4170915 bytes
File delete failed. C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\XUL.mfl scheduled to be deleted on reboot.
->FireFox cache emptied: 87342690 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2352022 bytes
%systemroot%\System32 .tmp files removed: 2596 bytes
File delete failed. C:\WINDOWS\temp\cch1F.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\cch20.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\cch44D.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\cch44E.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\cch453.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\cch454.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\cch45C.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\cch45D.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\cch465.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\cch466.tmp scheduled to be deleted on reboot.
Windows Temp folder emptied: 393216 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 90,02 mb


OTL by OldTimer - Version 3.0.21.0 log created on 10162009_182247

Files\Folders moved on Reboot...
C:\Documents and Settings\pl\Ustawienia lokalne\Temporary Internet Files\Content.IE5\621OZLRR\patch_metin2_pl[1].htm moved successfully.
C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\pl\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\zzpfudy2.default\XUL.mfl moved successfully.
File\Folder C:\WINDOWS\temp\cch1F.tmp not found!
File\Folder C:\WINDOWS\temp\cch20.tmp not found!
File\Folder C:\WINDOWS\temp\cch44D.tmp not found!
File\Folder C:\WINDOWS\temp\cch44E.tmp not found!
File\Folder C:\WINDOWS\temp\cch453.tmp not found!
File\Folder C:\WINDOWS\temp\cch454.tmp not found!
File\Folder C:\WINDOWS\temp\cch45C.tmp not found!
File\Folder C:\WINDOWS\temp\cch45D.tmp not found!
File\Folder C:\WINDOWS\temp\cch465.tmp not found!
File\Folder C:\WINDOWS\temp\cch466.tmp not found!

Registry entries deleted on Reboot...
[/log]

Psycholandia
komentarz
komentarz

Daj loga z Malware i zmień nazwę tematu, na konkretną i opisującą problem jak kolega wyżej pisał.

Gość
komentarz
komentarz

Jak sie zmienia nazwe tematu.?

Psycholandia
komentarz
komentarz

Klikasz na Edytuj, wybierasz pełną edycję i zmieniasz

Gość
komentarz
komentarz

Toż dałem już... :|

Psycholandia
komentarz
komentarz

[quote]4. Przeskanuj komputer tym: [url="http://www.programosy.pl/program,malwarebytes-anti-malware.html"]Malware[/url] usuń wszystko co znajdzie i daj loga po kasowaniu (loga z Malware)[/quote]

Gość
komentarz
komentarz

log z MALWARE
[log]Malwarebytes' Anti-Malware 1.41
Wersja bazy definicji: 2971
Windows 5.1.2600 Dodatek Service Pack 3

2009-10-16 18:18:36
mbam-log-2009-10-16 (18-18-36).txt

Typ skanowania: Szybkie skanowanie
Przeskanowane obiekty: 98040
Upłynęło: 20 minute(s), 40 second(s)

Zainfekowane procesy w pamięci: 0
Zainfekowane moduły pamięci: 0
Zainfekowane klucze rejestru: 0
Zainfekowane wartości rejestru: 0
Zainfekowane pliki rejestru: 0
Zainfekowane foldery: 0
Zainfekowane pliki: 2

Zainfekowane procesy w pamięci:
(Nie wykryto groźnych plików)

Zainfekowane moduły pamięci:
(Nie wykryto groźnych plików)

Zainfekowane klucze rejestru:
(Nie wykryto groźnych plików)

Zainfekowane wartości rejestru:
(Nie wykryto groźnych plików)

Zainfekowane pliki rejestru:
(Nie wykryto groźnych plików)

Zainfekowane foldery:
(Nie wykryto groźnych plików)

Zainfekowane pliki:
C:\WINDOWS\system32YIUW.007 (PUP.ArdamaxKeyLogger) -> Quarantined and deleted successfully.
C:\WINDOWS\system32AKV.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
[/log]

Psycholandia
komentarz
komentarz

Uruchom OTL i kliknij na CleanUP.
Optymalizacja wykonana? Jak działa teraz komputer?

Gość
komentarz
komentarz

Nie bardzo:) Powiedz mi co jeszcze mogę zrobic?? Dalej sie przymula?

Psycholandia
komentarz
komentarz

Logi są czyste, więc to na pewno nie wina wirusów. Problemu musisz szukać, gdzie indziej. Sprawdź temperatury programem Everest i podaj je.

daniel_10
komentarz
komentarz

[quote name='Andziorka' date='16 październik 2009 - 20:32 ' timestamp='1255721551' post='881715']
Logi są czyste, więc to na pewno nie wina wirusów. Problemu musisz szukać, gdzie indziej. Sprawdź temperatury programem Everest i podaj je.
[/quote]
Temperatury:
Płyta główna:81 C
Procesor: 41 C
Dysk twardy: 37 C

I co jeszcze moge zrobic? Podałem już temperatury...

Psycholandia
komentarz
komentarz

[quote]Płyta główna:81 C[/quote]
bardzo wysoka temperatura, przeczyść z kurzu komputer, tu masz poradnik: http://www.forumpc.pl/index.php?showtopic=66621 , temperatury powinny spaść i komputer lepiej funkcjonować powinien

daniel_10
komentarz
komentarz

ok dzięki ale w razie jakiś problemów będę pisał

a jak włańczam jakiś odtwarzacz muzyki to mi się czasami tnie? Czym to może być spowodowane?

Psycholandia
komentarz
komentarz

to wszystko może być spowodowane zbyt wysoką temperaturą, dlatego wyczyść komputer i zobacz jak będzie się zachowywał

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.