woj15tek utworzono 4 lutego 2010 utworzono 4 lutego 2010 (edytowane) Witam, mam taki problem. Nie mogę wyłączyć procesu Au_.exe nawet nie wiem do czego on jest. Ten proces włącza się przy próbie deinstalacji Deamon Toolsa. Obawiam się, że to jest jakiś niechciany program. Skanowałem spy botem i nic nie wykrył. Jak mam to coś wyłączyć? Dodam jeszcze, że jak ta aplikacja jest włączona to nie mogę zakończyć żadnego nagrywania płyt. Aaa bym zapomniał, komputer nie chce się wyłączyć. Proszę o pomoc.
danielek316 komentarz 4 lutego 2010 komentarz 4 lutego 2010 Poczytaj ten temat: http://www.forumpc.pl/index.php?showtopic=104338 Następnie wykonaj i wklej tu loga z OTL
woj15tek komentarz 4 lutego 2010 Autor komentarz 4 lutego 2010 (edytowane) Tutaj ten OTL [log] OTL logfile created on: 2010-02-04 14:10:28 - Run 1 OTL by OldTimer - Version 3.1.27.1 Folder = C:\Users\Komputer\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 69,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 97,65 Gb Total Space | 44,76 Gb Free Space | 45,83% Space Free | Partition Type: NTFS Drive D: | 368,10 Gb Total Space | 73,46 Gb Free Space | 19,96% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KOMPUTER-1 Current User Name: Komputer Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-02-04 14:09:06 | 000,548,864 | ---- | M] (OldTimer Tools) -- C:\Users\Komputer\Desktop\OTL.exe PRC - [2010-01-28 14:38:29 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2010-01-20 17:03:09 | 003,179,952 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe PRC - [2010-01-06 14:40:53 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2009-12-18 19:22:10 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe PRC - [2009-10-26 14:54:56 | 000,107,176 | ---- | M] (Lexmark International Inc.) -- C:\Program Files (x86)\Lexmark 3600-4600 Series\ezprint.exe PRC - [2009-10-26 14:54:52 | 000,672,424 | ---- | M] () -- C:\Program Files (x86)\Lexmark 3600-4600 Series\lxdxmon.exe PRC - [2009-10-15 10:51:51 | 000,263,600 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe PRC - [2009-10-11 04:17:36 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Java\jre6\bin\jusched.exe PRC - [2009-09-27 16:48:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2009-09-23 13:38:18 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2009-05-12 15:43:36 | 002,181,672 | ---- | M] (Gainward Co.) -- C:\Program Files (x86)\EXPERTool\TBPANEL.exe PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2009-02-06 15:14:34 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe PRC - [2008-07-24 16:02:24 | 000,378,824 | ---- | M] (DT Soft Ltd.) -- C:\Users\Komputer\AppData\Local\Temp\~nsu.tmp\Au_.exe PRC - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe PRC - [2006-02-28 12:42:38 | 000,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-02-04 14:09:06 | 000,548,864 | ---- | M] (OldTimer Tools) -- C:\Users\Komputer\Desktop\OTL.exe MOD - [2009-07-14 02:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 02:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll MOD - [2009-03-26 16:35:39 | 000,034,224 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\idmmkb.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-10-16 18:00:54 | 000,029,184 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxdxserv.exe -- (lxdxCATSCustConnectService) SRV:[b]64bit:[/b] - [2009-10-16 14:10:44 | 001,039,872 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysNative\lxdxcoms.exe -- (lxdx_device) SRV:[b]64bit:[/b] - [2009-07-14 02:41:59 | 000,229,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:56 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2009-07-14 02:41:56 | 000,163,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpo.dll -- (Power) SRV:[b]64bit:[/b] - [2009-07-14 02:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes) SRV:[b]64bit:[/b] - [2009-07-14 02:41:54 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify) SRV:[b]64bit:[/b] - [2009-07-14 02:41:54 | 000,029,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,067,072 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:41:18 | 000,231,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener) SRV:[b]64bit:[/b] - [2009-07-14 02:40:54 | 001,127,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FntCache.dll -- (FontCache) SRV:[b]64bit:[/b] - [2009-07-14 02:40:28 | 000,314,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp) SRV:[b]64bit:[/b] - [2009-07-14 02:40:28 | 000,291,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc) SRV:[b]64bit:[/b] - [2009-07-14 02:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2009-07-14 02:40:13 | 000,083,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bthserv.dll -- (bthserv) SRV:[b]64bit:[/b] - [2009-07-14 02:40:10 | 000,100,864 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC) SRV:[b]64bit:[/b] - [2009-07-14 02:40:05 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:39:51 | 001,503,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine) SRV:[b]64bit:[/b] - [2009-07-14 02:39:28 | 003,524,608 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc) SRV:[b]64bit:[/b] - [2009-07-14 02:39:11 | 000,689,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FXSSVC.exe -- (Fax) SRV - [2010-01-28 14:38:29 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2010-01-06 16:56:15 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009-12-18 19:21:38 | 000,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdate1ca800ef1d15bbd) Usługa Google Update (gupdate1ca800ef1d15bbd) SRV - [2009-10-31 10:23:26 | 000,320,760 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2009-10-16 14:10:34 | 000,589,824 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysWow64\lxdxcoms.exe -- (lxdx_device) SRV - [2009-09-27 16:48:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009-09-23 13:38:18 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2009-07-26 06:43:14 | 000,025,832 | ---- | M] (BioWare) [On_Demand | Stopped] -- D:\Program Files (x86)\Dragon Age\bin_ship\daupdatersvc.service.exe -- (DAUpdaterSvc) SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-07-14 04:20:14 | 000,000,000 | ---D | M] [On_Demand | Stopped] -- C:\Windows\Vss -- (VSS) SRV - [2009-07-14 04:20:14 | 000,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC) SRV - [2009-07-14 02:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider) SRV - [2009-07-14 02:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp) SRV - [2009-07-13 21:30:11 | 000,061,056 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds) SRV - [2009-06-10 21:39:58 | 000,089,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64) SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-02-06 15:14:34 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe -- (GEST Service) SRV - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Auto | Running] -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0) SRV - [2006-10-27 00:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2006-02-28 12:42:38 | 000,229,376 | ---- | M] (Apple Computer, Inc.) [Auto | Running] -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe -- (Bonjour Service) SRV - [2005-04-04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2009-12-08 16:27:14 | 000,074,880 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:[b]64bit:[/b] - [2009-11-07 10:17:15 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin) DRV:[b]64bit:[/b] - [2009-11-02 18:27:34 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2009-11-02 16:50:09 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2009-11-02 16:50:08 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2009-09-23 10:42:58 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,153,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,014,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy) DRV:[b]64bit:[/b] - [2009-07-14 02:47:49 | 000,055,376 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fsdepends.sys -- (FsDepends) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:56 | 000,022,096 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wimmount.sys -- (WIMMount) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,217,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,036,432 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vdrvroot.sys -- (vdrvroot) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:45:46 | 000,214,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost) DRV:[b]64bit:[/b] - [2009-07-14 02:45:45 | 000,050,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pcw.sys -- (pcw) DRV:[b]64bit:[/b] - [2009-07-14 02:43:14 | 000,460,504 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cng.sys -- (CNG) DRV:[b]64bit:[/b] - [2009-07-14 02:43:13 | 000,223,448 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol) DRV:[b]64bit:[/b] - [2009-07-14 01:17:46 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpbus.sys -- (rdpbus) DRV:[b]64bit:[/b] - [2009-07-14 01:16:35 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\RDPREFMP.sys -- (RDPREFMP) DRV:[b]64bit:[/b] - [2009-07-14 01:10:24 | 000,060,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agilevpn.sys -- (RasAgileVpn) WAN Miniport (IKEv2) DRV:[b]64bit:[/b] - [2009-07-14 01:09:26 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\wfplwf.sys -- (WfpLwf) DRV:[b]64bit:[/b] - [2009-07-14 01:08:13 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndiscap.sys -- (NdisCap) DRV:[b]64bit:[/b] - [2009-07-14 01:07:21 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vwifibus.sys -- (vwifibus) DRV:[b]64bit:[/b] - [2009-07-14 01:07:13 | 000,227,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci) DRV:[b]64bit:[/b] - [2009-07-14 01:07:00 | 000,350,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService) DRV:[b]64bit:[/b] - [2009-07-14 01:06:52 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\umpass.sys -- (UmPass) DRV:[b]64bit:[/b] - [2009-07-14 01:06:28 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winusb.sys -- (WinUsb) DRV:[b]64bit:[/b] - [2009-07-14 01:06:24 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidkmdf.sys -- (mshidkmdf) DRV:[b]64bit:[/b] - [2009-07-14 01:05:37 | 000,112,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf) DRV:[b]64bit:[/b] - [2009-07-14 01:02:08 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MTConfig.sys -- (MTConfig) DRV:[b]64bit:[/b] - [2009-07-14 01:00:34 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus) DRV:[b]64bit:[/b] - [2009-07-14 01:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\beep.sys -- (Beep) DRV:[b]64bit:[/b] - [2009-07-14 00:52:39 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appid.sys -- (AppID) DRV:[b]64bit:[/b] - [2009-07-14 00:50:17 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter) DRV:[b]64bit:[/b] - [2009-07-14 00:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2009-07-14 00:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2009-07-14 00:37:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\discache.sys -- (discache) DRV:[b]64bit:[/b] - [2009-07-14 00:31:06 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidbatt.sys -- (HidBatt) DRV:[b]64bit:[/b] - [2009-07-14 00:31:03 | 000,017,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CmBatt.sys -- (CmBatt) DRV:[b]64bit:[/b] - [2009-07-14 00:27:17 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi) DRV:[b]64bit:[/b] - [2009-07-14 00:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2009-07-14 00:19:25 | 000,060,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdppm.sys -- (AmdPPM) DRV:[b]64bit:[/b] - [2009-06-10 21:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-02-17 18:11:25 | 000,031,400 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO) DRV - [2010-02-04 13:29:27 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2009-11-01 15:19:51 | 000,000,000 | ---D | M] [Kernel | System | Running] -- C:\Windows\CSC -- (CSC) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2009-07-14 02:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\winusb.dll -- (WinUsb) DRV - [2009-07-14 02:16:02 | 000,014,336 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysWOW64\netbios.dll -- (NetBIOS) DRV - [2009-06-10 22:28:14 | 000,001,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv) DRV - [2009-06-10 22:15:18 | 000,003,066 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip) DRV - [2009-02-17 14:33:14 | 000,089,256 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysWOW64\ElbyCDIO.dll -- (ElbyCDIO) DRV - [2007-11-07 11:42:28 | 000,104,912 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive) DRV - [2007-03-16 10:11:20 | 000,015,648 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\TBPanelx64.sys -- (Cardex) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\URLSearchHook: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files (x86)\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1708250 IE - HKCU\..\URLSearchHook: {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\Windows\SysWOW64\dvmurl.dll (DeviceVM Inc.) IE - HKCU\..\URLSearchHook: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files (x86)\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: "Free Lunch Design Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1708250&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.selectedEngine: "DAEMON Search" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: firegestures@xuldev.org:1.5.6 FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:6.8.2 FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.5.1 FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1708250&q=" FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-02-01 21:01:47 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-02-01 21:01:47 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6b1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 3.6 Beta 1\components [2010-02-01 21:01:47 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6b1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 3.6 Beta 1\plugins [2010-02-01 21:01:47 | 000,000,000 | ---D | M] [2009-11-01 15:31:05 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\mozilla\Extensions [2010-02-04 12:53:45 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\mozilla\Firefox\Profiles\fqd9ddag.default\extensions [2010-01-28 17:35:03 | 000,000,000 | ---D | M] (Free Lunch Design Toolbar) -- C:\Users\Komputer\AppData\Roaming\mozilla\Firefox\Profiles\fqd9ddag.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} [2010-01-27 16:31:03 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\mozilla\Firefox\Profiles\fqd9ddag.default\extensions\firegestures@xuldev.org [2010-01-27 16:53:35 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\mozilla\Firefox\Profiles\fqd9ddag.default\extensions\personas@christopher.beard [2009-05-31 18:45:28 | 000,000,896 | ---- | M] () -- C:\Users\Komputer\AppData\Roaming\Mozilla\FireFox\Profiles\fqd9ddag.default\searchplugins\conduit.xml [2010-02-04 12:46:04 | 000,000,523 | ---- | M] () -- C:\Users\Komputer\AppData\Roaming\Mozilla\FireFox\Profiles\fqd9ddag.default\searchplugins\daemon-search.xml [2010-02-04 12:46:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2009-10-16 19:45:02 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2009-10-16 19:45:02 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2009-10-16 19:45:02 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2009-10-16 19:45:02 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2009-10-16 19:45:02 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-10-16 19:45:02 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Tonec Inc.) O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files (x86)\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKLM\..\Toolbar: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files (x86)\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (Free Lunch Design Toolbar) - {57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} - C:\Program Files (x86)\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [EzPrint] C:\Program Files (x86)\Lexmark 3600-4600 Series\ezprint.exe (Lexmark International Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [lxdxmon.exe] C:\Program Files (x86)\Lexmark 3600-4600 Series\lxdxmon.exe () O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe File not found O4 - HKCU..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [GAINWARD] C:\Program Files (x86)\EXPERTool\TBPanel.exe (Gainward Co.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8:[b]64bit:[/b] - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8:[b]64bit:[/b] - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8:[b]64bit:[/b] - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm () O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm () O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.100.252 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-10 20:06:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{2cc1c7cc-c7d5-11de-9d15-00241d8ec394}\Shell - "" = AutoRun O33 - MountPoints2\{2cc1c7cc-c7d5-11de-9d15-00241d8ec394}\Shell\AutoRun\command - "" = F:\Autorun.exe -- File not found O33 - MountPoints2\{2cc1c7ce-c7d5-11de-9d15-00241d8ec394}\Shell - "" = AutoRun O33 - MountPoints2\{2cc1c7ce-c7d5-11de-9d15-00241d8ec394}\Shell\AutoRun\command - "" = M:\Autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found [b]64bit:[/b] O35 - comfile [open] -- "%1" %* File not found [b]64bit:[/b] O35 - exefile [open] -- "%1" %* File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* NetSvcs:[b]64bit:[/b] Ias - C:\Windows\SysNative\ias [2009-07-14 04:20:14 | 000,000,000 | ---D | M] NetSvcs:[b]64bit:[/b] Irmon - C:\Windows\SysNative\irmon.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] Wmi - C:\Windows\SysNative\wmi.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] Themes - C:\Windows\SysNative\themeservice.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] BDESVC - C:\Windows\SysNative\bdesvc.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) NetSvcs: Ias - C:\Windows\SysWOW64\ias.dll (Microsoft Corporation) NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-02-04 14:08:21 | 000,548,864 | ---- | C] (OldTimer Tools) -- C:\Users\Komputer\Desktop\OTL.exe [2010-02-04 14:03:16 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Desktopicon [2010-02-04 13:28:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spycheck Fast AntiSpyware [2010-02-04 13:08:59 | 016,409,960 | ---- | C] (Safer Networking Limited ) -- C:\Users\Komputer\Desktop\spybotsd162.exe [2010-02-04 12:46:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Toolbar [2010-02-04 12:45:58 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\DAEMON Tools [2010-02-03 13:19:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2010-02-01 21:03:23 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Apple Computer [2010-02-01 21:01:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010-02-01 21:01:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010-02-01 21:01:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2010-02-01 21:00:58 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Apple [2010-02-01 21:00:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2010-02-01 21:00:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010-02-01 20:26:04 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Desktop\prezent.juha [2010-01-30 14:47:11 | 000,000,000 | ---D | C] -- C:\Windows\65F1CF6331E0450B96F34A88BE7361A6.TMP [2010-01-29 20:37:54 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\IDM [2010-01-29 20:37:54 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\DMCache [2010-01-29 11:49:01 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Desktop\minia [2010-01-28 21:13:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nowe Gadu-Gadu [2010-01-28 20:56:25 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Gadu-Gadu 10 [2010-01-28 20:54:07 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\ipla [2010-01-28 20:54:07 | 000,000,000 | ---D | C] -- C:\ProgramData\ipla [2010-01-28 20:53:59 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gdiplus.dll [2010-01-28 16:18:57 | 000,000,000 | ---D | C] -- C:\My Recordings [2010-01-28 16:18:44 | 001,355,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvbvm50.dll [2010-01-28 16:18:44 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr70.dll [2010-01-28 16:18:44 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comdlg32.ocx [2010-01-28 16:18:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FREE Hi-Q Recorder [2010-01-28 14:42:25 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\PunkBuster [2010-01-28 14:42:21 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Activision [2010-01-28 14:30:38 | 000,000,000 | -HSD | C] -- C:\Windows\ftpcache [2010-01-27 12:46:12 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2010-01-27 12:46:12 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2010-01-27 12:46:11 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2010-01-22 14:08:12 | 001,192,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wininet.dll [2010-01-22 14:08:12 | 000,977,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wininet.dll [2010-01-22 14:08:12 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iedkcs32.dll [2010-01-22 14:08:12 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iedkcs32.dll [2010-01-22 14:08:11 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedsbs.dll [2010-01-22 14:08:11 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedsbs.dll [2010-01-21 18:32:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Solidshield [2010-01-21 18:24:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2010-01-20 13:42:55 | 000,210,352 | ---- | C] (Tonec Inc.) -- C:\Windows\SysWow64\idmmbc.dll [2010-01-17 14:02:32 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\Call of Juarez - Bound in Blood [2010-01-16 10:15:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2010-01-16 10:15:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy [2010-01-13 20:30:06 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Divinity 2 [2010-01-13 20:24:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Divinity 2 [2010-01-13 17:42:19 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Steganos [2010-01-13 17:24:24 | 000,000,000 | ---D | C] -- C:\ProgramData\TrueCrypt [2010-01-13 17:24:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TrueCrypt [2010-01-13 14:28:01 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2010-01-13 14:28:00 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2010-01-13 14:28:00 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2010-01-13 14:28:00 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2010-01-12 21:01:11 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\ABBYY [2010-01-12 20:57:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ABBYY [2010-01-12 20:55:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ABBYY FineReader 9.0 [2010-01-12 20:55:41 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\ABBYY [2010-01-12 20:55:41 | 000,000,000 | ---D | C] -- C:\ProgramData\ABBYY [2010-01-12 20:51:36 | 000,000,000 | ---D | C] -- C:\temp [2010-01-12 20:06:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Ezprint [2010-01-12 20:06:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lexmark Toolbar [2010-01-12 20:06:32 | 000,110,592 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxwupd.dll [2010-01-12 20:06:32 | 000,011,264 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxwupd.exe [2010-01-12 20:06:32 | 000,000,000 | ---D | C] -- C:\Program Files\Lexmark 3600-4600 Series [2010-01-12 20:06:31 | 001,105,920 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxserv.dll [2010-01-12 20:06:31 | 000,983,121 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lxdxgf.dll [2010-01-12 20:06:31 | 000,851,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcomc.dll [2010-01-12 20:06:31 | 000,843,776 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxusb1.dll [2010-01-12 20:06:31 | 000,663,552 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxhbn3.dll [2010-01-12 20:06:31 | 000,647,168 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxpmui.dll [2010-01-12 20:06:31 | 000,589,824 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcoms.exe [2010-01-12 20:06:31 | 000,569,344 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxlmpm.dll [2010-01-12 20:06:31 | 000,544,768 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxutil.dll [2010-01-12 20:06:31 | 000,376,832 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcomm.dll [2010-01-12 20:06:31 | 000,364,544 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxinpa.dll [2010-01-12 20:06:31 | 000,360,448 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcfg.exe [2010-01-12 20:06:31 | 000,339,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxiesc.dll [2010-01-12 20:06:31 | 000,315,392 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxih.exe [2010-01-12 20:06:31 | 000,200,704 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxinsb.dll [2010-01-12 20:06:31 | 000,176,128 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxins.dll [2010-01-12 20:06:31 | 000,151,552 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxjswr.dll [2010-01-12 20:06:31 | 000,126,976 | ---- | C] (Lexmark International Inc.) -- C:\Windows\SysWow64\lxdxlnks.dll [2010-01-12 20:06:31 | 000,110,592 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxinsr.dll [2010-01-12 20:06:31 | 000,090,112 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxcub.dll [2010-01-12 20:06:31 | 000,077,824 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxcu.dll [2010-01-12 20:06:31 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxprox.dll [2010-01-12 20:06:31 | 000,036,864 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxcur.dll [2010-01-12 20:06:30 | 000,675,328 | ---- | C] ( ) -- C:\Windows\SysNative\LXDXhcp.dll [2010-01-12 20:06:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lexmark 3600-4600 Series [2010-01-12 19:55:02 | 000,000,000 | ---D | C] -- C:\drivers [2010-01-09 12:08:41 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\NinjaBlade [2010-01-09 12:02:36 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\InstallShield [2010-01-06 19:30:34 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\Adobe Scripts [2010-01-06 19:29:37 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\Version Cue [2010-01-06 19:29:37 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\AdobeStockPhotos [2010-01-06 17:03:28 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet [2010-01-06 16:59:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2010-01-06 16:57:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool [2010-01-06 16:56:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared [2010-01-06 15:08:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager [2009-11-07 10:17:15 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Komputer\AppData\Roaming\pcouffin.sys [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-02-04 14:12:11 | 005,505,024 | -HS- | M] () -- C:\Users\Komputer\NTUSER.DAT [2010-02-04 14:09:06 | 000,548,864 | ---- | M] (OldTimer Tools) -- C:\Users\Komputer\Desktop\OTL.exe [2010-02-04 14:03:16 | 000,001,248 | ---- | M] () -- C:\Users\Komputer\Desktop\eBay.lnk [2010-02-04 14:02:58 | 000,220,454 | ---- | M] () -- C:\Users\Komputer\Desktop\unlocker1.8.8.exe [2010-02-04 13:59:45 | 000,000,000 | ---- | M] () -- C:\Users\Komputer\del [2010-02-04 13:36:24 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-02-04 13:36:24 | 000,687,590 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-02-04 13:36:24 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-02-04 13:36:24 | 000,131,176 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-02-04 13:36:24 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-02-04 13:34:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-02-04 13:29:27 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys [2010-02-04 13:29:26 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-02-04 13:29:25 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-02-04 13:29:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-02-04 13:29:17 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys [2010-02-04 13:28:02 | 000,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-02-04 13:28:02 | 000,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-02-04 13:27:56 | 002,718,416 | -H-- | M] () -- C:\Users\Komputer\AppData\Local\IconCache.db [2010-02-04 13:11:31 | 000,001,262 | ---- | M] () -- C:\Users\Komputer\Desktop\Spybot - Search & Destroy.lnk [2010-02-04 13:10:07 | 016,409,960 | ---- | M] (Safer Networking Limited ) -- C:\Users\Komputer\Desktop\spybotsd162.exe [2010-02-04 12:46:03 | 000,001,062 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk [2010-02-04 12:39:26 | 000,002,094 | ---- | M] () -- C:\Users\Komputer\Desktop\Y A S U_1 5 8100_[FULL]_[ENG][Torrenty.org].torrent [2010-02-04 11:41:55 | 000,146,812 | ---- | M] () -- C:\Users\Komputer\Desktop\Mass_Effect_2_ 2010 _[2DVD]_[ENG]_[Razor1911]_[ iso][Torrenty.org].torrent [2010-02-03 19:39:09 | 000,082,802 | ---- | M] () -- C:\Users\Komputer\Desktop\Mass_Effect_2-Razor1911.5297589.TPB.torrent [2010-02-03 18:43:20 | 000,014,754 | ---- | M] () -- C:\Users\Komputer\Desktop\Surogaci_-_Surrogates_ 2009 _[DVDRip XviD-B0DZi0]_[Lektor_PL][Torrenty.org].torrent [2010-02-03 11:02:45 | 000,000,116 | ---- | M] () -- C:\Windows\NeroDigital.ini [2010-02-03 10:57:41 | 000,224,262 | ---- | M] () -- C:\Users\Komputer\Desktop\Surrogaci_-_Surrogates_ 2009 _[BRRip]_[XviD]_[AC3]_[Lektor_PL]_[delfin][Torrenty.org].torrent [2010-02-03 10:55:42 | 000,029,184 | ---- | M] () -- C:\Users\Komputer\Desktop\Spis Filmów.xls [2010-02-02 12:08:45 | 000,000,886 | ---- | M] () -- C:\Users\Komputer\Desktop\Call of Duty Modern Warfare 2.lnk [2010-02-02 12:08:45 | 000,000,886 | ---- | M] () -- C:\Users\Komputer\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.lnk [2010-02-02 09:35:29 | 000,002,198 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2010-02-01 21:04:58 | 000,008,192 | ---- | M] () -- C:\Users\Komputer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-02-01 20:54:42 | 000,000,137 | ---- | M] () -- C:\Users\Komputer\AppData\Roaming\default.rss [2010-02-01 11:07:06 | 000,000,082 | ---- | M] () -- C:\Users\Komputer\Desktop\pbuser.htm [2010-02-01 10:29:48 | 000,000,331 | ---- | M] () -- C:\Windows\game.ini [2010-01-31 14:59:32 | 000,001,889 | ---- | M] () -- C:\Users\Komputer\Desktop\CCleaner.lnk [2010-01-28 21:13:07 | 000,001,017 | ---- | M] () -- C:\Users\Public\Desktop\Nowe Gadu-Gadu.lnk [2010-01-28 21:13:00 | 000,002,432 | ---- | M] () -- C:\Users\Komputer\AppData\Local\TempMa1868.html [2010-01-28 21:13:00 | 000,002,089 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Tempof1868.html [2010-01-28 20:53:59 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\gdiplus.dll [2010-01-28 16:59:58 | 006,121,044 | ---- | M] () -- C:\Users\Komputer\Desktop\mgla-soundtrack.mp3 [2010-01-28 16:18:44 | 000,000,990 | ---- | M] () -- C:\Users\Komputer\Desktop\FREE Hi-Q Recorder.lnk [2010-01-28 16:09:03 | 000,292,650 | ---- | M] () -- C:\Users\Komputer\Desktop\Nie tykać.pptx [2010-01-28 16:02:40 | 000,072,225 | ---- | M] () -- C:\Users\Komputer\Desktop\poczatek.jpg [2010-01-28 15:38:16 | 000,147,556 | ---- | M] () -- C:\Users\Komputer\Desktop\KL_Treblinka_-_memorial.jpg [2010-01-28 14:46:29 | 000,111,928 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010-01-28 14:40:13 | 000,000,630 | ---- | M] () -- C:\Users\Komputer\Desktop\Call of Duty® World at War.lnk [2010-01-28 14:38:29 | 000,682,280 | ---- | M] () -- C:\Windows\SysWow64\pbsvc.exe [2010-01-28 14:38:29 | 000,066,872 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010-01-26 20:00:55 | 000,036,352 | ---- | M] () -- C:\Users\Komputer\Desktop\sprawozd. realizacja podst.(doc).doc [2010-01-26 18:37:29 | 000,004,096 | -H-- | M] () -- C:\Users\Komputer\AppData\Local\keyfile3.drm [2010-01-26 13:07:00 | 000,000,085 | -HS- | M] () -- C:\ProgramData\.zreglib [2010-01-24 15:27:34 | 000,013,899 | ---- | M] () -- C:\Users\Komputer\Desktop\sprawozd. realizacja podst..docx [2010-01-21 18:30:11 | 000,000,784 | ---- | M] () -- C:\Users\Komputer\Desktop\James Cameron's AVATAR THE GAME.lnk [2010-01-18 15:11:33 | 000,000,000 | -H-- | M] () -- C:\Users\Komputer\Documents\Default.rdp [2010-01-17 14:04:06 | 000,000,738 | ---- | M] () -- C:\Users\Komputer\Desktop\Call of Juarez Więzy Krwi.lnk [2010-01-16 10:35:51 | 000,000,077 | ---- | M] () -- C:\Windows\wininit.ini [2010-01-13 20:24:37 | 000,001,007 | ---- | M] () -- C:\Users\Komputer\Desktop\Divinity II - Ego Draconis.lnk [2010-01-13 17:09:42 | 000,000,639 | ---- | M] () -- C:\Users\Komputer\Desktop\Wojtek.lnk [2010-01-12 20:12:03 | 000,020,469 | ---- | M] () -- C:\Windows\SysNative\LexFiles.ulf [2010-01-11 08:44:17 | 000,445,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iedkcs32.dll [2010-01-11 08:12:38 | 000,381,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iedkcs32.dll [2010-01-09 14:41:18 | 000,014,242 | ---- | M] () -- C:\Users\Komputer\Documents\cc_20100109_144111.reg [2010-01-09 12:07:38 | 000,000,964 | ---- | M] () -- C:\Users\Public\Desktop\Ninja Blade.lnk [2010-01-07 15:36:50 | 002,344,904 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-01-06 17:03:38 | 000,108,840 | ---- | M] () -- C:\Users\Komputer\AppData\Local\GDIPFONTCACHEV1.DAT [2010-01-06 14:33:07 | 000,030,702 | ---- | M] () -- C:\Users\Komputer\Desktop\1262250442_by_kalmar1991_500.jpg [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-02-04 14:03:16 | 000,001,248 | ---- | C] () -- C:\Users\Komputer\Desktop\eBay.lnk [2010-02-04 14:02:56 | 000,220,454 | ---- | C] () -- C:\Users\Komputer\Desktop\unlocker1.8.8.exe [2010-02-04 13:59:45 | 000,000,000 | ---- | C] () -- C:\Users\Komputer\del [2010-02-04 13:11:31 | 000,001,262 | ---- | C] () -- C:\Users\Komputer\Desktop\Spybot - Search & Destroy.lnk [2010-02-04 12:39:25 | 000,002,094 | ---- | C] () -- C:\Users\Komputer\Desktop\Y A S U_1 5 8100_[FULL]_[ENG][Torrenty.org].torrent [2010-02-04 12:36:51 | 000,000,284 | ---- | C] () -- C:\Users\Komputer\Desktop\rld.bin [2010-02-04 11:41:54 | 000,146,812 | ---- | C] () -- C:\Users\Komputer\Desktop\Mass_Effect_2_ 2010 _[2DVD]_[ENG]_[Razor1911]_[ iso][Torrenty.org].torrent [2010-02-03 19:39:08 | 000,082,802 | ---- | C] () -- C:\Users\Komputer\Desktop\Mass_Effect_2-Razor1911.5297589.TPB.torrent [2010-02-03 18:43:19 | 000,014,754 | ---- | C] () -- C:\Users\Komputer\Desktop\Surogaci_-_Surrogates_ 2009 _[DVDRip XviD-B0DZi0]_[Lektor_PL][Torrenty.org].torrent [2010-02-03 10:57:35 | 000,224,262 | ---- | C] () -- C:\Users\Komputer\Desktop\Surrogaci_-_Surrogates_ 2009 _[BRRip]_[XviD]_[AC3]_[Lektor_PL]_[delfin][Torrenty.org].torrent [2010-02-02 12:08:45 | 000,000,886 | ---- | C] () -- C:\Users\Komputer\Desktop\Call of Duty Modern Warfare 2.lnk [2010-02-02 12:08:45 | 000,000,886 | ---- | C] () -- C:\Users\Komputer\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.lnk [2010-02-01 11:06:24 | 000,000,082 | ---- | C] () -- C:\Users\Komputer\Desktop\pbuser.htm [2010-02-01 10:29:48 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini [2010-01-28 21:13:07 | 000,001,017 | ---- | C] () -- C:\Users\Public\Desktop\Nowe Gadu-Gadu.lnk [2010-01-28 21:02:14 | 000,002,432 | ---- | C] () -- C:\Users\Komputer\AppData\Local\TempMa1868.html [2010-01-28 21:02:14 | 000,002,089 | ---- | C] () -- C:\Users\Komputer\AppData\Local\Tempof1868.html [2010-01-28 16:54:54 | 006,121,044 | ---- | C] () -- C:\Users\Komputer\Desktop\mgla-soundtrack.mp3 [2010-01-28 16:18:44 | 000,000,990 | ---- | C] () -- C:\Users\Komputer\Desktop\FREE Hi-Q Recorder.lnk [2010-01-28 16:02:39 | 000,072,225 | ---- | C] () -- C:\Users\Komputer\Desktop\poczatek.jpg [2010-01-28 15:38:15 | 000,147,556 | ---- | C] () -- C:\Users\Komputer\Desktop\KL_Treblinka_-_memorial.jpg [2010-01-28 14:40:13 | 000,000,630 | ---- | C] () -- C:\Users\Komputer\Desktop\Call of Duty® World at War.lnk [2010-01-28 14:38:30 | 000,111,928 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010-01-28 14:38:29 | 000,682,280 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe [2010-01-28 14:38:29 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010-01-26 20:00:55 | 000,036,352 | ---- | C] () -- C:\Users\Komputer\Desktop\sprawozd. realizacja podst.(doc).doc [2010-01-26 19:58:48 | 000,013,899 | ---- | C] () -- C:\Users\Komputer\Desktop\sprawozd. realizacja podst..docx [2010-01-26 18:37:29 | 000,004,096 | -H-- | C] () -- C:\Users\Komputer\AppData\Local\keyfile3.drm [2010-01-26 18:21:04 | 000,292,650 | ---- | C] () -- C:\Users\Komputer\Desktop\Nie tykać.pptx [2010-01-21 18:30:11 | 000,000,784 | ---- | C] () -- C:\Users\Komputer\Desktop\James Cameron's AVATAR THE GAME.lnk [2010-01-18 15:11:33 | 000,000,000 | -H-- | C] () -- C:\Users\Komputer\Documents\Default.rdp [2010-01-17 14:04:06 | 000,000,738 | ---- | C] () -- C:\Users\Komputer\Desktop\Call of Juarez Więzy Krwi.lnk [2010-01-17 12:28:27 | 000,029,184 | ---- | C] () -- C:\Users\Komputer\Desktop\Spis Filmów.xls [2010-01-16 10:35:51 | 000,000,077 | ---- | C] () -- C:\Windows\wininit.ini [2010-01-13 20:24:37 | 000,001,007 | ---- | C] () -- C:\Users\Komputer\Desktop\Divinity II - Ego Draconis.lnk [2010-01-13 17:09:42 | 000,000,639 | ---- | C] () -- C:\Users\Komputer\Desktop\Wojtek.lnk [2010-01-12 20:06:42 | 000,000,252 | ---- | C] () -- C:\ProgramData\FastPics.log [2010-01-12 20:06:31 | 000,348,160 | ---- | C] () -- C:\Windows\SysWow64\LXDXinst.dll [2010-01-12 20:06:31 | 000,335,872 | ---- | C] () -- C:\Windows\SysWow64\lxdxcomx.dll [2010-01-12 20:06:31 | 000,001,875 | ---- | C] () -- C:\Windows\SysWow64\lxdx.loc [2010-01-12 20:06:30 | 000,530,432 | ---- | C] () -- C:\Windows\SysNative\LXDXinst.dll [2010-01-09 14:41:15 | 000,014,242 | ---- | C] () -- C:\Users\Komputer\Documents\cc_20100109_144111.reg [2010-01-09 12:07:38 | 000,000,964 | ---- | C] () -- C:\Users\Public\Desktop\Ninja Blade.lnk [2010-01-06 14:33:06 | 000,030,702 | ---- | C] () -- C:\Users\Komputer\Desktop\1262250442_by_kalmar1991_500.jpg [2009-12-31 15:28:35 | 000,000,116 | ---- | C] () -- C:\Windows\NeroDigital.ini [2009-12-26 22:04:22 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2009-12-24 22:57:14 | 000,000,137 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\default.rss [2009-12-24 22:57:13 | 000,000,000 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\downloads.m3u [2009-12-18 19:23:04 | 000,000,025 | ---- | C] () -- C:\Windows\cdplayer.ini [2009-12-12 10:09:55 | 000,782,336 | ---- | C] () -- C:\Windows\SysWow64\lxdxdrs.dll [2009-12-12 10:09:55 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\lxdxcaps.dll [2009-12-12 10:09:55 | 000,069,632 | ---- | C] () -- C:\Windows\SysWow64\lxdxcnv4.dll [2009-12-10 20:12:59 | 000,008,192 | ---- | C] () -- C:\Users\Komputer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-11-07 10:30:44 | 000,000,085 | -HS- | C] () -- C:\ProgramData\.zreglib [2009-11-07 10:18:43 | 000,000,014 | ---- | C] () -- C:\Windows\SysWow64\systeminfo3.dll [2009-11-07 10:17:34 | 000,000,033 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\pcouffin.log [2009-11-07 10:17:15 | 000,099,384 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\inst.exe [2009-11-07 10:17:15 | 000,007,859 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\pcouffin.cat [2009-11-07 10:17:15 | 000,001,167 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\pcouffin.inf [2009-11-01 15:58:33 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2009-11-01 15:58:32 | 000,205,824 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2009-11-01 15:58:31 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest [2009-11-01 15:40:22 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2009-08-07 19:51:34 | 000,178,430 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-07-03 04:11:18 | 000,007,274 | ---- | C] () -- C:\Windows\cadx2.ini [2008-10-07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll [2008-10-07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2002-10-15 23:54:04 | 000,153,088 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2009-09-10 20:06:28 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2009-10-08 14:37:30 | 000,000,281 | -H-- | M] () -- C:\Boot.BAK [2009-11-01 15:24:05 | 000,000,295 | RHS- | M] () -- C:\boot.ini [2009-11-01 15:17:58 | 000,000,425 | RHS- | M] () -- C:\Boot.ini.saved [2009-06-09 22:45:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin [2009-07-14 02:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr [2009-11-01 15:18:00 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2004-08-03 19:30:14 | 000,262,400 | ---- | M] () -- C:\cmldr [2009-09-10 20:06:28 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2009-11-01 15:48:06 | 000,000,010 | ---- | M] () -- C:\csb.log [2010-02-04 13:29:17 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys [2009-11-01 15:47:44 | 000,000,087 | ---- | M] () -- C:\Install.log [2009-09-10 20:06:28 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2009-09-10 20:06:28 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2009-06-09 22:45:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM [2009-06-09 22:45:00 | 000,251,152 | RHS- | M] () -- C:\ntldr [2010-02-04 13:29:21 | 4293,386,240 | -HS- | M] () -- C:\pagefile.sys [2009-11-01 15:46:01 | 000,001,705 | ---- | M] () -- C:\RHDSetup.log [2010-02-04 14:12:52 | 000,023,207 | ---- | M] () -- C:\service.log [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 48 bytes -> C:\Windows:FFB628B9A47D9609 < End of report > [/log] Tutaj Extras [log]OTL Extras logfile created on: 2010-02-04 14:10:28 - Run 1 OTL by OldTimer - Version 3.1.27.1 Folder = C:\Users\Komputer\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 69,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 97,65 Gb Total Space | 44,76 Gb Free Space | 45,83% Space Free | Partition Type: NTFS Drive D: | 368,10 Gb Total Space | 73,46 Gb Free Space | 19,96% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KOMPUTER-1 Current User Name: Komputer Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007 "Lexmark 3600-4600 Series" = Lexmark 3600-4600 Series "NVIDIA Drivers" = NVIDIA Drivers [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0297078F-D4C8-4774-B7A3-6BBF2C164C76}_is1" = Dirt 2 Spolszczenie by O22y "{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3 "{06F478B0-053F-45C7-B7F4-B81520345720}" = Ninja Blade "{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting "{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club "{11202615-E557-4ECF-9B86-F59C81E52909}" = FIFA 10 "{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime "{155F4A0E-76ED-45A2-91FB-FF2A2133C31A}" = Risen "{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin "{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 17 "{293D5729-7C01-4FA4-A4DE-BB6A1587BBB9}" = PDF Settings "{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3 "{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}" = Bitwa o Śródziemie™ II "{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}" = Microsoft Games for Windows - LIVE Redistributable "{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed "{3514C22B-C3A9-41C6-A818-FAEF474CA879}_is1" = ALLConverter to iPhone "{359CFC0A-BEB1-440D-95BA-CF63A86DA34F}" = Nero Recode "{368BA326-73AD-4351-84ED-3C0A7A52CC53}" = Nero Rescue Agent "{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support "{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision "{4C6F02E1-D873-45F3-B852-D83F84BEA8D4}" = TMPGEnc Plus 2.5 "{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3 "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV "{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress "{5DB65884-C963-4454-AABA-4CA3089281FA}" = NVIDIA PhysX "{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871}" = Adobe Color NA Extra Settings "{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All "{6D12B99F-EAAA-49D8-8E2F-74FA7459CCB2}" = Adobe Asset Services CS3 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart "{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights "{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo "{78EFD06D-7583-42F1-9E77-671D8782EB70}" = Adobe Photoshop CS3 "{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III "{7E19B002-4CA3-4C9F-BA92-91D101B97219}" = James Cameron's AVATAR(tm): THE GAME "{7ED169D4-5053-4166-93DF-53B12AE6C539}" = Energy Saver Advance B9.0316.1 "{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed "{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3 "{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support "{8FD4236C-E373-4ADB-9B41-62D60ED0CC2B}_is1" = GTAIV Patch Universe V2 by knyz "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3 "{9E82B934-9A25-445B-B8DF-8012808074AC}" = Nero PhotoSnap "{A209525B-3377-43F4-B886-32F6B6E7356F}" = Nero WaveEditor "{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR "{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A59BB15D-51B7-F12B-4548-8C0368243441}" = EA Download Manager UI "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC08BBA0-96B9-431A-A7D0-D8598E493775}" = RESIDENT EVIL 5 "{AC76BA86-7AD7-1045-7B44-A92000000001}" = Adobe Reader 9.2 - Polish "{AEC81925-9C76-4707-84A9-40696C613ED3}" = Dragon Age: Origins "{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles "{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center "{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0 "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit "{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3 "{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT "{BD087F50-46B2-43E4-BD73-5DB3DC20B47C}" = Adobe Color EU Recommended Settings "{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter "{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2 "{C5A7CB6C-E76D-408F-BA0E-85605420FE9D}" = SoundTrax "{CBF4DADD-974D-49C8-BC83-C6F31554001E}" = Adobe Setup "{D025A639-B9C9-417D-8531-208859000AF8}" = NeroBurningROM "{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1 "{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game "{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM) "{D92B72E2-C854-4738-8ED6-4C3661CC17AE}" = Adobe Color JA Extra Settings "{D9DCF92E-72EB-412D-AC71-3B01276E5F8B}" = Nero ShowTime "{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings "{E498385E-1C51-459A-B45F-1721E37AA1A0}" = Movie Templates - Starter Kit "{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3 "{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer "{E8AEA11B-E60A-455E-B008-E4E763604612}" = Browser Configuration Utility "{F112F66E-25CA-42DD-983C-6118EB38F606}" = Microsoft Games for Windows - LIVE "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}" = Wiedźmin "{F1861F30-3419-44DB-B2A1-C274825698B3}" = Nero Disc Copy Gadget "{F9000000-0001-0000-0000-074957833700}" = ABBYY FineReader 9.0 Professional Edition "{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool "{FEFAF112-4DA8-479C-89E2-7DE25091711A}" = Call of Juarez - Bound in Blood "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe_678cd98c8365a5647f9a2e539d120a8" = Adobe Photoshop CS3 "ALLConverter to 3GP_is1" = ALLConverter to 3GP "ALLConverter to PSP_is1" = ALLConverter to PSP "ALLPlayer_is1" = ALLPlayer V4.X "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "CCleaner" = CCleaner "CloneDVD2" = CloneDVD2 "com.ea.Vault.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Download Manager UI "Dirt 2_is1" = Dirt 2 "Divinity II - Ego Draconis_is1" = Divinity II - Ego Draconis "EA Download Manager" = EA Download Manager "eBay Icon" = eBay Icon "ENTERPRISE" = Microsoft Office Enterprise 2007 "EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.30 "EXPERTool_is1" = EXPERTool 7.5 "Fraps" = Fraps "FREE Hi-Q Recorder_is1" = FREE Hi-Q Recorder 1.92 "Free_Lunch_Design Toolbar" = Free_Lunch_Design Toolbar "Google Chrome" = Google Chrome "Icy Tower v1.4_is1" = Icy Tower v1.4 "InstallShield_{4C6F02E1-D873-45F3-B852-D83F84BEA8D4}" = TMPGEnc Plus 2.5 "InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III "InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch "InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM) "InstallShield_{FEFAF112-4DA8-479C-89E2-7DE25091711A}" = Call of Juarez - Bound in Blood "Internet Download Manager" = Internet Download Manager "KLiteCodecPack_is1" = K-Lite Codec Pack 5.1.0 (Full) "Mount&Blade" = Mount&Blade "Mozilla Firefox (3.5.7)" = Mozilla Firefox (3.5.7) "Mozilla Firefox (3.6b1)" = Mozilla Firefox (3.6b1) "Native Instruments Traktor DJ Studio 3" = Native Instruments Traktor DJ Studio 3 "Nowe Gadu-Gadu" = Nowe Gadu-Gadu "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "OpenAL" = OpenAL "PunkBusterSvc" = PunkBuster Services "RealPlayer 12.0" = RealPlayer "Steam App 10180" = Call of Duty: Modern Warfare 2 "Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer "Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2 "UltraISO_is1" = UltraISO Premium V9.32 "uTorrent" = µTorrent "VobSub" = VobSub v2.23 (Remove Only) "Winamp" = Winamp "WinRAR archiver" = Archiwizator WinRAR [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2010-02-03 06:00:48 | Computer Name = Komputer-1 | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: shift.exe, wersja: 1.0.0.0, sygnatura czasowa: 0x4a953d01 Nazwa modułu powodującego błąd: shift.exe, wersja: 1.0.0.0, sygnatura czasowa: 0x4a953d01 Kod wyjątku: 0x80000003 Przesunięcie błędu: 0x009837c7 Identyfikator procesu powodującego błąd: 0x188 Godzina uruchomienia aplikacji powodującej błąd: 0x01caa4b7c2341e77 Ścieżka aplikacji powodującej błąd: D:\Program Files (x86)\Electronic Arts\Need for Speed SHIFT\shift.exe Ścieżka modułu powodującego błąd: D:\Program Files (x86)\Electronic Arts\Need for Speed SHIFT\shift.exe Identyfikator raportu: 0019ca5e-10ab-11df-8a31-00241d8ec394 Error - 2010-02-03 08:22:30 | Computer Name = Komputer-1 | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: shift.exe, wersja: 1.0.0.0, sygnatura czasowa: 0x4a953d01 Nazwa modułu powodującego błąd: shift.exe, wersja: 1.0.0.0, sygnatura czasowa: 0x4a953d01 Kod wyjątku: 0x80000003 Przesunięcie błędu: 0x009837c7 Identyfikator procesu powodującego błąd: 0x4d8 Godzina uruchomienia aplikacji powodującej błąd: 0x01caa4cb8d68a769 Ścieżka aplikacji powodującej błąd: D:\Program Files (x86)\Electronic Arts\Need for Speed SHIFT\shift.exe Ścieżka modułu powodującego błąd: D:\Program Files (x86)\Electronic Arts\Need for Speed SHIFT\shift.exe Identyfikator raportu: cc0fab2d-10be-11df-bf33-00241d8ec394 Error - 2010-02-03 12:25:45 | Computer Name = Komputer-1 | Source = SideBySide | ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C:\Program Files (x86)\Nero\Nero 9\Nero PhotoSnap\PhotoSnapViewer.exe.Manifest”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest. Składnik 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest. Error - 2010-02-03 12:25:45 | Computer Name = Komputer-1 | Source = SideBySide | ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C:\Program Files (x86)\Nero\Nero 9\Nero PhotoSnap\PhotoSnapViewer.exe.Manifest”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest. Składnik 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest. Error - 2010-02-03 12:25:45 | Computer Name = Komputer-1 | Source = SideBySide | ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C:\Program Files (x86)\Nero\Nero 9\Nero PhotoSnap\PhotoSnapViewer.exe.Manifest”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest. Składnik 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest. Error - 2010-02-04 07:35:36 | Computer Name = Komputer-1 | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: shift.exe, wersja: 1.0.0.0, sygnatura czasowa: 0x4a953d01 Nazwa modułu powodującego błąd: shift.exe, wersja: 1.0.0.0, sygnatura czasowa: 0x4a953d01 Kod wyjątku: 0x80000003 Przesunięcie błędu: 0x009837c7 Identyfikator procesu powodującego błąd: 0xd58 Godzina uruchomienia aplikacji powodującej błąd: 0x01caa58e29bc2b6e Ścieżka aplikacji powodującej błąd: D:\Program Files (x86)\Electronic Arts\Need for Speed SHIFT\shift.exe Ścieżka modułu powodującego błąd: D:\Program Files (x86)\Electronic Arts\Need for Speed SHIFT\shift.exe Identyfikator raportu: 690b0a67-1181-11df-8f0e-00241d8ec394 Error - 2010-02-04 07:47:40 | Computer Name = Komputer-1 | Source = Application Hang | ID = 1002 Description = Program daemon.exe w wersji 4.30.1.0 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 10e8 Godzina rozpoczęcia: 01caa58fab098e47 Godzina zakończenia: 4 Ścieżka aplikacji: C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe Identyfikator raportu: Error - 2010-02-04 07:50:08 | Computer Name = Komputer-1 | Source = Application Hang | ID = 1002 Description = Program DTLite4355-0068.exe w wersji 4.35.5.68 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 124c Godzina rozpoczęcia: 01caa5901b76cdd3 Godzina zakończenia: 3 Ścieżka aplikacji: C:\Users\Komputer\Desktop\DTLite4355-0068.exe Identyfikator raportu: 6f7aba9c-1183-11df-8f0e-00241d8ec394 Error - 2010-02-04 08:10:37 | Computer Name = Komputer-1 | Source = SDWinSec.exe | ID = 0 Description = Error - 2010-02-04 08:10:44 | Computer Name = Komputer-1 | Source = SDWinSec.exe | ID = 0 Description = [ System Events ] Error - 2010-02-03 12:20:59 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi TBPanel z powodu następującego błędu: %%2 Error - 2010-02-03 12:21:02 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą lxdxCATSCustConnectService. Error - 2010-02-03 12:21:02 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi lxdxCATSCustConnectService z powodu następującego błędu: %%1053 Error - 2010-02-03 17:06:25 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7016 Description = Usługa NVIDIA Display Driver Service zaraportowała nieprawidłowy stan bieżący 32. Error - 2010-02-04 05:14:40 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi TBPanel z powodu następującego błędu: %%2 Error - 2010-02-04 05:14:43 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą lxdxCATSCustConnectService. Error - 2010-02-04 05:14:43 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi lxdxCATSCustConnectService z powodu następującego błędu: %%1053 Error - 2010-02-04 08:29:25 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi TBPanel z powodu następującego błędu: %%2 Error - 2010-02-04 08:29:28 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą lxdxCATSCustConnectService. Error - 2010-02-04 08:29:28 | Computer Name = Komputer-1 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi lxdxCATSCustConnectService z powodu następującego błędu: %%1053 < End of report > [/log] Podczas odinstalowywania Deamona ten proces się włączał. Usunąłem ręcznie deamona i wszystko gra, jak narazie...
woj15tek komentarz 4 lutego 2010 Autor komentarz 4 lutego 2010 Nowe logi OTL: [log] OTL logfile created on: 2010-02-04 19:03:10 - Run 2 OTL by OldTimer - Version 3.1.27.1 Folder = C:\Users\Komputer\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 68,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 97,65 Gb Total Space | 51,54 Gb Free Space | 52,78% Space Free | Partition Type: NTFS Drive D: | 368,10 Gb Total Space | 178,23 Gb Free Space | 48,42% Space Free | Partition Type: NTFS Drive E: | 5,54 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KOMPUTER-1 Current User Name: Komputer Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-02-04 14:09:06 | 000,548,864 | ---- | M] (OldTimer Tools) -- C:\Users\Komputer\Desktop\OTL.exe PRC - [2010-02-03 20:31:31 | 000,289,584 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe PRC - [2010-01-28 14:38:29 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2010-01-06 14:40:53 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2009-12-18 19:22:10 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe PRC - [2009-10-28 13:44:08 | 011,539,048 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Nowe Gadu-Gadu\gg.exe PRC - [2009-10-28 12:43:06 | 000,077,824 | ---- | M] () -- C:\Program Files (x86)\Nowe Gadu-Gadu\spellchecker_gg.exe PRC - [2009-10-26 14:54:56 | 000,107,176 | ---- | M] (Lexmark International Inc.) -- C:\Program Files (x86)\Lexmark 3600-4600 Series\ezprint.exe PRC - [2009-10-26 14:54:52 | 000,672,424 | ---- | M] () -- C:\Program Files (x86)\Lexmark 3600-4600 Series\lxdxmon.exe PRC - [2009-10-11 04:17:36 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Java\jre6\bin\jusched.exe PRC - [2009-09-27 16:48:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2009-09-23 13:38:18 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2009-05-12 15:43:36 | 002,181,672 | ---- | M] (Gainward Co.) -- C:\Program Files (x86)\EXPERTool\TBPANEL.exe PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2009-02-06 15:14:34 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe PRC - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe PRC - [2006-02-28 12:42:38 | 000,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-02-04 14:09:06 | 000,548,864 | ---- | M] (OldTimer Tools) -- C:\Users\Komputer\Desktop\OTL.exe MOD - [2009-07-14 02:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 02:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll MOD - [2009-03-26 16:35:39 | 000,034,224 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\idmmkb.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-10-16 18:00:54 | 000,029,184 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxdxserv.exe -- (lxdxCATSCustConnectService) SRV:[b]64bit:[/b] - [2009-10-16 14:10:44 | 001,039,872 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysNative\lxdxcoms.exe -- (lxdx_device) SRV:[b]64bit:[/b] - [2009-07-14 02:41:59 | 000,229,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:56 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2009-07-14 02:41:56 | 000,163,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpo.dll -- (Power) SRV:[b]64bit:[/b] - [2009-07-14 02:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes) SRV:[b]64bit:[/b] - [2009-07-14 02:41:54 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify) SRV:[b]64bit:[/b] - [2009-07-14 02:41:54 | 000,029,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,067,072 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper) SRV:[b]64bit:[/b] - [2009-07-14 02:41:53 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:41:18 | 000,231,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener) SRV:[b]64bit:[/b] - [2009-07-14 02:40:54 | 001,127,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FntCache.dll -- (FontCache) SRV:[b]64bit:[/b] - [2009-07-14 02:40:28 | 000,314,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp) SRV:[b]64bit:[/b] - [2009-07-14 02:40:28 | 000,291,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc) SRV:[b]64bit:[/b] - [2009-07-14 02:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2009-07-14 02:40:13 | 000,083,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bthserv.dll -- (bthserv) SRV:[b]64bit:[/b] - [2009-07-14 02:40:10 | 000,100,864 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC) SRV:[b]64bit:[/b] - [2009-07-14 02:40:05 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:39:51 | 001,503,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine) SRV:[b]64bit:[/b] - [2009-07-14 02:39:28 | 003,524,608 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc) SRV:[b]64bit:[/b] - [2009-07-14 02:39:11 | 000,689,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FXSSVC.exe -- (Fax) SRV - [2010-01-28 14:38:29 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2010-01-06 16:56:15 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009-10-31 10:23:26 | 000,320,760 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2009-10-16 14:10:34 | 000,589,824 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysWow64\lxdxcoms.exe -- (lxdx_device) SRV - [2009-09-27 16:48:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009-09-23 13:38:18 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-07-14 04:20:14 | 000,000,000 | ---D | M] [On_Demand | Stopped] -- C:\Windows\Vss -- (VSS) SRV - [2009-07-14 04:20:14 | 000,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC) SRV - [2009-07-14 02:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider) SRV - [2009-07-14 02:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp) SRV - [2009-07-13 21:30:11 | 000,061,056 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds) SRV - [2009-06-10 21:39:58 | 000,089,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64) SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-02-06 15:14:34 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe -- (GEST Service) SRV - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Auto | Running] -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0) SRV - [2006-10-27 00:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2006-02-28 12:42:38 | 000,229,376 | ---- | M] (Apple Computer, Inc.) [Auto | Running] -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe -- (Bonjour Service) SRV - [2005-04-04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2009-12-08 16:27:14 | 000,074,880 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:[b]64bit:[/b] - [2009-11-07 10:17:15 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin) DRV:[b]64bit:[/b] - [2009-11-02 18:27:34 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2009-11-02 16:50:09 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2009-11-02 16:50:08 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2009-09-23 10:42:58 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,153,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,014,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy) DRV:[b]64bit:[/b] - [2009-07-14 02:47:49 | 000,055,376 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fsdepends.sys -- (FsDepends) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:56 | 000,022,096 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wimmount.sys -- (WIMMount) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,217,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,036,432 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vdrvroot.sys -- (vdrvroot) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:45:46 | 000,214,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost) DRV:[b]64bit:[/b] - [2009-07-14 02:45:45 | 000,050,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pcw.sys -- (pcw) DRV:[b]64bit:[/b] - [2009-07-14 02:43:14 | 000,460,504 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cng.sys -- (CNG) DRV:[b]64bit:[/b] - [2009-07-14 02:43:13 | 000,223,448 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol) DRV:[b]64bit:[/b] - [2009-07-14 01:17:46 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpbus.sys -- (rdpbus) DRV:[b]64bit:[/b] - [2009-07-14 01:16:35 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\RDPREFMP.sys -- (RDPREFMP) DRV:[b]64bit:[/b] - [2009-07-14 01:10:24 | 000,060,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agilevpn.sys -- (RasAgileVpn) WAN Miniport (IKEv2) DRV:[b]64bit:[/b] - [2009-07-14 01:09:26 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\wfplwf.sys -- (WfpLwf) DRV:[b]64bit:[/b] - [2009-07-14 01:08:13 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndiscap.sys -- (NdisCap) DRV:[b]64bit:[/b] - [2009-07-14 01:07:21 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vwifibus.sys -- (vwifibus) DRV:[b]64bit:[/b] - [2009-07-14 01:07:13 | 000,227,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci) DRV:[b]64bit:[/b] - [2009-07-14 01:07:00 | 000,350,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService) DRV:[b]64bit:[/b] - [2009-07-14 01:06:52 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\umpass.sys -- (UmPass) DRV:[b]64bit:[/b] - [2009-07-14 01:06:28 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winusb.sys -- (WinUsb) DRV:[b]64bit:[/b] - [2009-07-14 01:06:24 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidkmdf.sys -- (mshidkmdf) DRV:[b]64bit:[/b] - [2009-07-14 01:05:37 | 000,112,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf) DRV:[b]64bit:[/b] - [2009-07-14 01:02:08 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MTConfig.sys -- (MTConfig) DRV:[b]64bit:[/b] - [2009-07-14 01:00:34 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus) DRV:[b]64bit:[/b] - [2009-07-14 01:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\beep.sys -- (Beep) DRV:[b]64bit:[/b] - [2009-07-14 00:52:39 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appid.sys -- (AppID) DRV:[b]64bit:[/b] - [2009-07-14 00:50:17 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter) DRV:[b]64bit:[/b] - [2009-07-14 00:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2009-07-14 00:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2009-07-14 00:37:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\discache.sys -- (discache) DRV:[b]64bit:[/b] - [2009-07-14 00:31:06 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidbatt.sys -- (HidBatt) DRV:[b]64bit:[/b] - [2009-07-14 00:31:03 | 000,017,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CmBatt.sys -- (CmBatt) DRV:[b]64bit:[/b] - [2009-07-14 00:27:17 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi) DRV:[b]64bit:[/b] - [2009-07-14 00:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2009-07-14 00:19:25 | 000,060,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdppm.sys -- (AmdPPM) DRV:[b]64bit:[/b] - [2009-06-10 21:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-02-17 18:11:25 | 000,031,400 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO) DRV - [2010-02-04 14:50:40 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2009-11-01 15:19:51 | 000,000,000 | ---D | M] [Kernel | System | Running] -- C:\Windows\CSC -- (CSC) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2009-07-14 02:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\winusb.dll -- (WinUsb) DRV - [2009-07-14 02:16:02 | 000,014,336 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysWOW64\netbios.dll -- (NetBIOS) DRV - [2009-06-10 22:28:14 | 000,001,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv) DRV - [2009-06-10 22:15:18 | 000,003,066 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip) DRV - [2009-02-17 14:33:14 | 000,089,256 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysWOW64\ElbyCDIO.dll -- (ElbyCDIO) DRV - [2007-11-07 11:42:28 | 000,104,912 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive) DRV - [2007-03-16 10:11:20 | 000,015,648 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\TBPanelx64.sys -- (Cardex) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1708250 IE - HKCU\..\URLSearchHook: {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\Windows\SysWOW64\dvmurl.dll (DeviceVM Inc.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: "Free Lunch Design Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1708250&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.selectedEngine: "DAEMON Search" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: firegestures@xuldev.org:1.5.6 FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:6.8.2 FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.5.1 FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1708250&q=" FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-02-01 21:01:47 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-02-01 21:01:47 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6b1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 3.6 Beta 1\components [2010-02-01 21:01:47 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6b1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 3.6 Beta 1\plugins [2010-02-01 21:01:47 | 000,000,000 | ---D | M] [2009-11-01 15:31:05 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\mozilla\Extensions [2010-02-04 19:02:07 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\mozilla\Firefox\Profiles\fqd9ddag.default\extensions [2010-01-28 17:35:03 | 000,000,000 | ---D | M] (Free Lunch Design Toolbar) -- C:\Users\Komputer\AppData\Roaming\mozilla\Firefox\Profiles\fqd9ddag.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} [2010-01-27 16:31:03 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\mozilla\Firefox\Profiles\fqd9ddag.default\extensions\firegestures@xuldev.org [2010-01-27 16:53:35 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\mozilla\Firefox\Profiles\fqd9ddag.default\extensions\personas@christopher.beard [2009-05-31 18:45:28 | 000,000,896 | ---- | M] () -- C:\Users\Komputer\AppData\Roaming\Mozilla\FireFox\Profiles\fqd9ddag.default\searchplugins\conduit.xml [2010-02-04 12:46:04 | 000,000,523 | ---- | M] () -- C:\Users\Komputer\AppData\Roaming\Mozilla\FireFox\Profiles\fqd9ddag.default\searchplugins\daemon-search.xml [2010-02-04 19:02:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2009-10-16 19:45:02 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2009-10-16 19:45:02 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2009-10-16 19:45:02 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2009-10-16 19:45:02 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2009-10-16 19:45:02 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-10-16 19:45:02 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Tonec Inc.) O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [EzPrint] C:\Program Files (x86)\Lexmark 3600-4600 Series\ezprint.exe (Lexmark International Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [lxdxmon.exe] C:\Program Files (x86)\Lexmark 3600-4600 Series\lxdxmon.exe () O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe File not found O4 - HKCU..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [GAINWARD] C:\Program Files (x86)\EXPERTool\TBPanel.exe (Gainward Co.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8:[b]64bit:[/b] - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8:[b]64bit:[/b] - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8:[b]64bit:[/b] - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm () O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm () O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.100.252 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-10 20:06:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2006-02-04 10:33:12 | 000,000,000 | R--D | M] - E:\AutoRun -- [ UDF ] O32 - AutoRun File - [2006-02-04 10:33:04 | 000,724,992 | R--- | M] (Electronic Arts Inc.) - E:\AutoRun.exe -- [ UDF ] O32 - AutoRun File - [2006-01-31 03:56:47 | 000,942,080 | R--- | M] (Electronic Arts Inc.) - E:\AutoRunGUI.dll -- [ UDF ] O32 - AutoRun File - [2006-02-04 11:03:19 | 000,000,161 | R--- | M] () - E:\autorun.inf -- [ UDF ] O33 - MountPoints2\{2cc1c7cc-c7d5-11de-9d15-00241d8ec394}\Shell - "" = AutoRun O33 - MountPoints2\{2cc1c7cc-c7d5-11de-9d15-00241d8ec394}\Shell\AutoRun\command - "" = F:\Autorun.exe -- File not found O33 - MountPoints2\{2cc1c7ce-c7d5-11de-9d15-00241d8ec394}\Shell - "" = AutoRun O33 - MountPoints2\{2cc1c7ce-c7d5-11de-9d15-00241d8ec394}\Shell\AutoRun\command - "" = M:\Autorun.exe -- File not found O33 - MountPoints2\{828ff601-c6f1-11de-a8a5-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{828ff601-c6f1-11de-a8a5-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2006-02-04 10:33:04 | 000,724,992 | R--- | M] (Electronic Arts Inc.) O34 - HKLM BootExecute: (autocheck autochk *) - File not found [b]64bit:[/b] O35 - comfile [open] -- "%1" %* File not found [b]64bit:[/b] O35 - exefile [open] -- "%1" %* File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* NetSvcs:[b]64bit:[/b] Ias - C:\Windows\SysNative\ias [2009-07-14 04:20:14 | 000,000,000 | ---D | M] NetSvcs:[b]64bit:[/b] Irmon - C:\Windows\SysNative\irmon.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] Wmi - C:\Windows\SysNative\wmi.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] Themes - C:\Windows\SysNative\themeservice.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] BDESVC - C:\Windows\SysNative\bdesvc.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) NetSvcs: Ias - C:\Windows\SysWOW64\ias.dll (Microsoft Corporation) NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-02-04 15:34:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Google [2010-02-04 14:08:21 | 000,548,864 | ---- | C] (OldTimer Tools) -- C:\Users\Komputer\Desktop\OTL.exe [2010-02-04 13:28:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spycheck Fast AntiSpyware [2010-02-04 12:45:58 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\DAEMON Tools [2010-02-03 13:19:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2010-02-01 21:03:23 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Apple Computer [2010-02-01 21:01:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010-02-01 21:01:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010-02-01 21:00:58 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Apple [2010-02-01 21:00:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010-01-30 14:47:11 | 000,000,000 | ---D | C] -- C:\Windows\65F1CF6331E0450B96F34A88BE7361A6.TMP [2010-01-29 20:37:54 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\IDM [2010-01-29 20:37:54 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\DMCache [2010-01-28 21:13:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nowe Gadu-Gadu [2010-01-28 20:56:25 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Gadu-Gadu 10 [2010-01-28 20:54:07 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\ipla [2010-01-28 20:54:07 | 000,000,000 | ---D | C] -- C:\ProgramData\ipla [2010-01-28 20:53:59 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gdiplus.dll [2010-01-28 16:18:57 | 000,000,000 | ---D | C] -- C:\My Recordings [2010-01-28 16:18:44 | 001,355,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvbvm50.dll [2010-01-28 16:18:44 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr70.dll [2010-01-28 16:18:44 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comdlg32.ocx [2010-01-28 16:18:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FREE Hi-Q Recorder [2010-01-28 14:42:25 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\PunkBuster [2010-01-28 14:30:38 | 000,000,000 | -HSD | C] -- C:\Windows\ftpcache [2010-01-27 12:46:12 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2010-01-27 12:46:12 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2010-01-27 12:46:11 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2010-01-22 14:08:12 | 001,192,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wininet.dll [2010-01-22 14:08:12 | 000,977,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wininet.dll [2010-01-22 14:08:12 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iedkcs32.dll [2010-01-22 14:08:12 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iedkcs32.dll [2010-01-22 14:08:11 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedsbs.dll [2010-01-22 14:08:11 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedsbs.dll [2010-01-21 18:32:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Solidshield [2010-01-20 13:42:55 | 000,210,352 | ---- | C] (Tonec Inc.) -- C:\Windows\SysWow64\idmmbc.dll [2010-01-16 10:15:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2010-01-16 10:15:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy [2010-01-13 20:30:06 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Divinity 2 [2010-01-13 20:24:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Divinity 2 [2010-01-13 17:42:19 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Steganos [2010-01-13 17:24:24 | 000,000,000 | ---D | C] -- C:\ProgramData\TrueCrypt [2010-01-13 17:24:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TrueCrypt [2010-01-13 14:28:01 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2010-01-13 14:28:00 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2010-01-13 14:28:00 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2010-01-13 14:28:00 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2010-01-12 21:01:11 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\ABBYY [2010-01-12 20:57:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ABBYY [2010-01-12 20:55:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ABBYY FineReader 9.0 [2010-01-12 20:55:41 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\ABBYY [2010-01-12 20:55:41 | 000,000,000 | ---D | C] -- C:\ProgramData\ABBYY [2010-01-12 20:51:36 | 000,000,000 | ---D | C] -- C:\temp [2010-01-12 20:06:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Ezprint [2010-01-12 20:06:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lexmark Toolbar [2010-01-12 20:06:32 | 000,110,592 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxwupd.dll [2010-01-12 20:06:32 | 000,011,264 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxwupd.exe [2010-01-12 20:06:32 | 000,000,000 | ---D | C] -- C:\Program Files\Lexmark 3600-4600 Series [2010-01-12 20:06:31 | 001,105,920 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxserv.dll [2010-01-12 20:06:31 | 000,983,121 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lxdxgf.dll [2010-01-12 20:06:31 | 000,851,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcomc.dll [2010-01-12 20:06:31 | 000,843,776 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxusb1.dll [2010-01-12 20:06:31 | 000,663,552 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxhbn3.dll [2010-01-12 20:06:31 | 000,647,168 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxpmui.dll [2010-01-12 20:06:31 | 000,589,824 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcoms.exe [2010-01-12 20:06:31 | 000,569,344 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxlmpm.dll [2010-01-12 20:06:31 | 000,544,768 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxutil.dll [2010-01-12 20:06:31 | 000,376,832 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcomm.dll [2010-01-12 20:06:31 | 000,364,544 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxinpa.dll [2010-01-12 20:06:31 | 000,360,448 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcfg.exe [2010-01-12 20:06:31 | 000,339,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxiesc.dll [2010-01-12 20:06:31 | 000,315,392 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxih.exe [2010-01-12 20:06:31 | 000,200,704 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxinsb.dll [2010-01-12 20:06:31 | 000,176,128 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxins.dll [2010-01-12 20:06:31 | 000,151,552 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxjswr.dll [2010-01-12 20:06:31 | 000,126,976 | ---- | C] (Lexmark International Inc.) -- C:\Windows\SysWow64\lxdxlnks.dll [2010-01-12 20:06:31 | 000,110,592 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxinsr.dll [2010-01-12 20:06:31 | 000,090,112 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxcub.dll [2010-01-12 20:06:31 | 000,077,824 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxcu.dll [2010-01-12 20:06:31 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxprox.dll [2010-01-12 20:06:31 | 000,036,864 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxcur.dll [2010-01-12 20:06:30 | 000,675,328 | ---- | C] ( ) -- C:\Windows\SysNative\LXDXhcp.dll [2010-01-12 20:06:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lexmark 3600-4600 Series [2010-01-12 19:55:02 | 000,000,000 | ---D | C] -- C:\drivers [2010-01-06 19:30:34 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\Adobe Scripts [2010-01-06 19:29:37 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\Version Cue [2010-01-06 19:29:37 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\AdobeStockPhotos [2010-01-06 17:03:28 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet [2010-01-06 16:59:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2010-01-06 16:57:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool [2010-01-06 16:56:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared [2010-01-06 15:08:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager [2009-11-07 10:17:15 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Komputer\AppData\Roaming\pcouffin.sys [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-02-04 19:04:48 | 005,505,024 | -HS- | M] () -- C:\Users\Komputer\NTUSER.DAT [2010-02-04 18:52:51 | 000,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-02-04 18:52:51 | 000,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-02-04 14:57:32 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-02-04 14:57:32 | 000,687,590 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-02-04 14:57:32 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-02-04 14:57:32 | 000,131,176 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-02-04 14:57:32 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-02-04 14:50:40 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys [2010-02-04 14:50:37 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-02-04 14:50:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-02-04 14:50:27 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys [2010-02-04 14:49:37 | 002,018,400 | -H-- | M] () -- C:\Users\Komputer\AppData\Local\IconCache.db [2010-02-04 14:09:06 | 000,548,864 | ---- | M] (OldTimer Tools) -- C:\Users\Komputer\Desktop\OTL.exe [2010-02-04 13:59:45 | 000,000,000 | ---- | M] () -- C:\Users\Komputer\del [2010-02-04 13:11:31 | 000,001,262 | ---- | M] () -- C:\Users\Komputer\Desktop\Spybot - Search & Destroy.lnk [2010-02-04 11:41:55 | 000,146,812 | ---- | M] () -- C:\Users\Komputer\Desktop\Mass_Effect_2_ 2010 _[2DVD]_[ENG]_[Razor1911]_[ iso][Torrenty.org].torrent [2010-02-03 19:39:09 | 000,082,802 | ---- | M] () -- C:\Users\Komputer\Desktop\Mass_Effect_2-Razor1911.5297589.TPB.torrent [2010-02-03 11:02:45 | 000,000,116 | ---- | M] () -- C:\Windows\NeroDigital.ini [2010-02-03 10:55:42 | 000,029,184 | ---- | M] () -- C:\Users\Komputer\Desktop\Spis Filmów.xls [2010-02-01 21:04:58 | 000,008,192 | ---- | M] () -- C:\Users\Komputer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-02-01 20:54:42 | 000,000,137 | ---- | M] () -- C:\Users\Komputer\AppData\Roaming\default.rss [2010-02-01 10:29:48 | 000,000,331 | ---- | M] () -- C:\Windows\game.ini [2010-01-31 14:59:32 | 000,001,889 | ---- | M] () -- C:\Users\Komputer\Desktop\CCleaner.lnk [2010-01-28 21:13:07 | 000,001,017 | ---- | M] () -- C:\Users\Public\Desktop\Nowe Gadu-Gadu.lnk [2010-01-28 21:13:00 | 000,002,432 | ---- | M] () -- C:\Users\Komputer\AppData\Local\TempMa1868.html [2010-01-28 21:13:00 | 000,002,089 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Tempof1868.html [2010-01-28 20:53:59 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\gdiplus.dll [2010-01-28 16:59:58 | 006,121,044 | ---- | M] () -- C:\Users\Komputer\Desktop\mgla-soundtrack.mp3 [2010-01-28 16:18:44 | 000,000,990 | ---- | M] () -- C:\Users\Komputer\Desktop\FREE Hi-Q Recorder.lnk [2010-01-28 16:09:03 | 000,292,650 | ---- | M] () -- C:\Users\Komputer\Desktop\Nie tykać.pptx [2010-01-28 16:02:40 | 000,072,225 | ---- | M] () -- C:\Users\Komputer\Desktop\poczatek.jpg [2010-01-28 15:38:16 | 000,147,556 | ---- | M] () -- C:\Users\Komputer\Desktop\KL_Treblinka_-_memorial.jpg [2010-01-28 14:46:29 | 000,111,928 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010-01-28 14:38:29 | 000,682,280 | ---- | M] () -- C:\Windows\SysWow64\pbsvc.exe [2010-01-28 14:38:29 | 000,066,872 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010-01-26 18:37:29 | 000,004,096 | -H-- | M] () -- C:\Users\Komputer\AppData\Local\keyfile3.drm [2010-01-26 13:07:00 | 000,000,085 | -HS- | M] () -- C:\ProgramData\.zreglib [2010-01-18 15:11:33 | 000,000,000 | -H-- | M] () -- C:\Users\Komputer\Documents\Default.rdp [2010-01-16 10:35:51 | 000,000,077 | ---- | M] () -- C:\Windows\wininit.ini [2010-01-13 20:24:37 | 000,001,007 | ---- | M] () -- C:\Users\Komputer\Desktop\Divinity II - Ego Draconis.lnk [2010-01-13 17:09:42 | 000,000,639 | ---- | M] () -- C:\Users\Komputer\Desktop\Wojtek.lnk [2010-01-12 20:12:03 | 000,020,469 | ---- | M] () -- C:\Windows\SysNative\LexFiles.ulf [2010-01-11 08:44:17 | 000,445,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iedkcs32.dll [2010-01-11 08:12:38 | 000,381,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iedkcs32.dll [2010-01-09 14:41:18 | 000,014,242 | ---- | M] () -- C:\Users\Komputer\Documents\cc_20100109_144111.reg [2010-01-07 15:36:50 | 002,344,904 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-01-06 17:03:38 | 000,108,840 | ---- | M] () -- C:\Users\Komputer\AppData\Local\GDIPFONTCACHEV1.DAT [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-02-04 13:59:45 | 000,000,000 | ---- | C] () -- C:\Users\Komputer\del [2010-02-04 13:11:31 | 000,001,262 | ---- | C] () -- C:\Users\Komputer\Desktop\Spybot - Search & Destroy.lnk [2010-02-04 11:41:54 | 000,146,812 | ---- | C] () -- C:\Users\Komputer\Desktop\Mass_Effect_2_ 2010 _[2DVD]_[ENG]_[Razor1911]_[ iso][Torrenty.org].torrent [2010-02-03 19:39:08 | 000,082,802 | ---- | C] () -- C:\Users\Komputer\Desktop\Mass_Effect_2-Razor1911.5297589.TPB.torrent [2010-02-01 10:29:48 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini [2010-01-28 21:13:07 | 000,001,017 | ---- | C] () -- C:\Users\Public\Desktop\Nowe Gadu-Gadu.lnk [2010-01-28 21:02:14 | 000,002,432 | ---- | C] () -- C:\Users\Komputer\AppData\Local\TempMa1868.html [2010-01-28 21:02:14 | 000,002,089 | ---- | C] () -- C:\Users\Komputer\AppData\Local\Tempof1868.html [2010-01-28 16:54:54 | 006,121,044 | ---- | C] () -- C:\Users\Komputer\Desktop\mgla-soundtrack.mp3 [2010-01-28 16:18:44 | 000,000,990 | ---- | C] () -- C:\Users\Komputer\Desktop\FREE Hi-Q Recorder.lnk [2010-01-28 16:02:39 | 000,072,225 | ---- | C] () -- C:\Users\Komputer\Desktop\poczatek.jpg [2010-01-28 15:38:15 | 000,147,556 | ---- | C] () -- C:\Users\Komputer\Desktop\KL_Treblinka_-_memorial.jpg [2010-01-28 14:38:30 | 000,111,928 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010-01-28 14:38:29 | 000,682,280 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe [2010-01-28 14:38:29 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010-01-26 18:37:29 | 000,004,096 | -H-- | C] () -- C:\Users\Komputer\AppData\Local\keyfile3.drm [2010-01-26 18:21:04 | 000,292,650 | ---- | C] () -- C:\Users\Komputer\Desktop\Nie tykać.pptx [2010-01-18 15:11:33 | 000,000,000 | -H-- | C] () -- C:\Users\Komputer\Documents\Default.rdp [2010-01-17 12:28:27 | 000,029,184 | ---- | C] () -- C:\Users\Komputer\Desktop\Spis Filmów.xls [2010-01-16 10:35:51 | 000,000,077 | ---- | C] () -- C:\Windows\wininit.ini [2010-01-13 20:24:37 | 000,001,007 | ---- | C] () -- C:\Users\Komputer\Desktop\Divinity II - Ego Draconis.lnk [2010-01-13 17:09:42 | 000,000,639 | ---- | C] () -- C:\Users\Komputer\Desktop\Wojtek.lnk [2010-01-12 20:06:42 | 000,000,252 | ---- | C] () -- C:\ProgramData\FastPics.log [2010-01-12 20:06:31 | 000,348,160 | ---- | C] () -- C:\Windows\SysWow64\LXDXinst.dll [2010-01-12 20:06:31 | 000,335,872 | ---- | C] () -- C:\Windows\SysWow64\lxdxcomx.dll [2010-01-12 20:06:31 | 000,001,875 | ---- | C] () -- C:\Windows\SysWow64\lxdx.loc [2010-01-12 20:06:30 | 000,530,432 | ---- | C] () -- C:\Windows\SysNative\LXDXinst.dll [2010-01-09 14:41:15 | 000,014,242 | ---- | C] () -- C:\Users\Komputer\Documents\cc_20100109_144111.reg [2009-12-31 15:28:35 | 000,000,116 | ---- | C] () -- C:\Windows\NeroDigital.ini [2009-12-26 22:04:22 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2009-12-24 22:57:14 | 000,000,137 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\default.rss [2009-12-24 22:57:13 | 000,000,000 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\downloads.m3u [2009-12-18 19:23:04 | 000,000,025 | ---- | C] () -- C:\Windows\cdplayer.ini [2009-12-12 10:09:55 | 000,782,336 | ---- | C] () -- C:\Windows\SysWow64\lxdxdrs.dll [2009-12-12 10:09:55 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\lxdxcaps.dll [2009-12-12 10:09:55 | 000,069,632 | ---- | C] () -- C:\Windows\SysWow64\lxdxcnv4.dll [2009-12-10 20:12:59 | 000,008,192 | ---- | C] () -- C:\Users\Komputer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-11-07 10:30:44 | 000,000,085 | -HS- | C] () -- C:\ProgramData\.zreglib [2009-11-07 10:18:43 | 000,000,014 | ---- | C] () -- C:\Windows\SysWow64\systeminfo3.dll [2009-11-07 10:17:34 | 000,000,033 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\pcouffin.log [2009-11-07 10:17:15 | 000,099,384 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\inst.exe [2009-11-07 10:17:15 | 000,007,859 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\pcouffin.cat [2009-11-07 10:17:15 | 000,001,167 | ---- | C] () -- C:\Users\Komputer\AppData\Roaming\pcouffin.inf [2009-11-01 15:58:33 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2009-11-01 15:58:32 | 000,205,824 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2009-11-01 15:58:31 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest [2009-11-01 15:40:22 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2009-08-07 19:51:34 | 000,178,430 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-07-03 04:11:18 | 000,007,274 | ---- | C] () -- C:\Windows\cadx2.ini [2008-10-07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll [2008-10-07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2002-10-15 23:54:04 | 000,153,088 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2009-09-10 20:06:28 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2009-10-08 14:37:30 | 000,000,281 | -H-- | M] () -- C:\Boot.BAK [2009-11-01 15:24:05 | 000,000,295 | RHS- | M] () -- C:\boot.ini [2009-11-01 15:17:58 | 000,000,425 | RHS- | M] () -- C:\Boot.ini.saved [2009-06-09 22:45:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin [2009-07-14 02:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr [2009-11-01 15:18:00 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2004-08-03 19:30:14 | 000,262,400 | ---- | M] () -- C:\cmldr [2009-09-10 20:06:28 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2009-11-01 15:48:06 | 000,000,010 | ---- | M] () -- C:\csb.log [2010-02-04 14:50:27 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys [2009-11-01 15:47:44 | 000,000,087 | ---- | M] () -- C:\Install.log [2009-09-10 20:06:28 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2009-09-10 20:06:28 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2009-06-09 22:45:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM [2009-06-09 22:45:00 | 000,251,152 | RHS- | M] () -- C:\ntldr [2010-02-04 14:50:31 | 4293,386,240 | -HS- | M] () -- C:\pagefile.sys [2009-11-01 15:46:01 | 000,001,705 | ---- | M] () -- C:\RHDSetup.log [2010-02-04 19:05:48 | 000,141,516 | ---- | M] () -- C:\service.log [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 48 bytes -> C:\Windows:FFB628B9A47D9609 < End of report > [/log]
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.