x-kom hosting

spowolnienie systemu + charczenie głosników

Bartexx
utworzono
utworzono

Posiadam laptopa Toshibe A200 2gb ramu, Karta graficzna NVIDIA, procesor Intel Core 2 duo 1.86GHz system Windows XP. Używałem laptopa około 2 tygodnie . A więc , niedawno zauważyłem ,że komputer działa wolniej, myszka się ścina i głośniki charczą. Skanowałem komputer kasperskym nic nie wykrył. Defragmentowałem dyski - nie pomogło , (Dysk C>Właściwości>Narzędzia>Sprawdzanie dysków) - nie pomogło. Reinstalacja sterowników Realtek - nie pomogło. W końcu aktualizowałem wszystkie sterowniki , programem Easy Driver - nie widać różnicy. Chciałem dodać ,że gdy podłączam słuchawki to nadal słychać charczenie, a gdy uruchamiam Mandrive LiveCD to wszystko działa, nic nie charczy nic się nie ścina :D. Błagam o pomoc.

Logi:
[log]
OTL Extras logfile created on: 2010-08-24 17:48:32 - Run 1
OTL by OldTimer - Version 3.2.10.0 Folder = C:\Documents and Settings\Bartek\Moje dokumenty\Pobieranie
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 65,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 21,88 Gb Free Space | 56,02% Space Free | Partition Type: NTFS
Drive D: | 72,72 Gb Total Space | 70,82 Gb Free Space | 97,39% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: RUDI
Current User Name: Bartek
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_USERS\S-1-5-21-448539723-688789844-725345543-1005\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDSee Pro 3.Manage] -- "C:\Program Files\ACD Systems\ACDSee Pro\3.0\ACDSeeQVPro3.exe" "%1" (ACD Systems International Inc.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
"" =

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DoNotAllowExceptions" = 0
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- ()
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\WINDOWS.0\system32\ZoneLabs\vsmon.exe" = C:\WINDOWS.0\system32\ZoneLabs\vsmon.exe:*:Enabled:TrueVector Service -- File not found
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- File not found
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- File not found
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe -- File not found
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- File not found
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- File not found
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- File not found
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- File not found
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe -- File not found
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- ()
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.)
"C:\Program Files\RealVNC\VNC4\winvnc4.exe" = C:\Program Files\RealVNC\VNC4\winvnc4.exe:*:Disabled:VNC Server -- File not found
"C:\usr\SMTP Server\localsrv.exe" = C:\usr\SMTP Server\localsrv.exe:*:Enabled:localsrv -- ()
"C:\usr\apache\Apache.exe" = C:\usr\apache\Apache.exe:*:Enabled:Apache -- ()


[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}" = VC 9.0 Runtime
"{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{0F9196C6-58B4-445B-B56E-B1200FECC151}" = Microsoft Bootvis
"{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{1B280FAF-AE10-4E31-A41A-DB3917D651DC}" = ACDSee Pro 3
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{2AFF2951-86B1-3C53-B34D-B440F11E7D0A}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PLK
"{2C38F661-26B7-445D-B87D-B53FE2D3BD42}" = TOSHIBA PC Diagnostic Tool
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
"{57B2281D-A34A-4a48-8C68-169B8873659D}" = c4100_Help
"{59FDFDFB-52FE-45B1-8A2A-A00079B07FF0}" = TOSHIBA Power Saver Driver
"{5A0DDC27-88E5-3CAD-BC3D-28FFD05CA6B9}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PLK
"{5BCA8D15-BCB6-421E-9654-238B43456A4F}" = TOSHIBA Controls Driver
"{61CF2C86-8E46-4210-A115-E4D6C65AF369}" = HP Photosmart B109a-m All-In-One Driver Software 13.0 Rel .6
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{656FDFA4-C7C6-40D9-99F7-F6F331412AEF}" = WarrantyExtension
"{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI
"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6E0352EE-6F0D-4FBC-B1B8-4FF032C78BE0}" = PC Connectivity Solution
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme
"{7900D3A6-A9E8-4954-ACCB-AB15867978BF}" = TOSHIBA Hotkey Utility
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI
"{80FE5490-E9DD-4AE9-8537-3EB5EFB606FC}" = PS_AIO_06_B109a-m_SW_Min
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}" = 32 Bit HP CIO Components Installer
"{922E8525-AC7E-4294-ACAA-43712D4423C0}" = Adobe Flash Player 10 ActiveX
"{93495FEA-C232-45A4-8E9B-596ABD62B4A7}" = BabasChess
"{93CF9FA6-2A5E-4F8E-923E-F7D8741CB312}" = BabasChess
"{981FAFFC-35E9-42E0-9C58-9AADE646F92A}" = Diskeeper 2010 Pro Premier
"{9D8B0949-7C47-476F-9F06-F900D3B078EA}" = Kaspersky Internet Security 2010
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A6690C0E-B96E-4F0F-A8EB-D5B332454AC6}" = TOSHIBA Controls
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-A93000000001}" = Adobe Reader 9.3.2 - Polish
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{AF20390E-5ADD-4CB0-BF9D-EDF6E7891AD9}" = B109a-m
"{B54B8CD3-E12B-4C29-AF5A-2101E2FF5F53}" = TIPCI
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}" = HP Photosmart, Officejet and Deskjet 7.0.A
"{BDD83DC9-BEE9-4654-A5DA-CC46C250088D}" = TOSHIBA ConfigFree
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}" = hpPrintProjects
"{C871525F-7116-4d26-BA6D-215F59B6F88B}" = C4100
"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA
"{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CCleaner" = CCleaner
"DriverEasy_is1" = DriverEasy 2.6.0
"ENTERPRISE" = Microsoft Office Enterprise 2007
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Print Projects" = HP Print Projects 1.0
"HP Smart Web Printing" = HP Smart Web Printing 4.5
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"InstallShield_{2C38F661-26B7-445D-B87D-B53FE2D3BD42}" = TOSHIBA PC Diagnostic Tool
"InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}" = Sprzęt instalacyjny TOSHIBA
"InstallShield_{7900D3A6-A9E8-4954-ACCB-AB15867978BF}" = Program TOSHIBA Hotkey Utility
"InstallShield_{B54B8CD3-E12B-4C29-AF5A-2101E2FF5F53}" = Texas Instruments PCIxx21/x515/xx12 drivers.
"InstallWIX_{9D8B0949-7C47-476F-9F06-F900D3B078EA}" = Kaspersky Internet Security 2010
"kED_is1" = kED 2.1.4.0
"LTMOH" = LSI V92 MOH Application
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.11)" = Mozilla Firefox (3.5.11)
"Mozilla Thunderbird (3.1.1)" = Mozilla Thunderbird (3.1.1)
"NVIDIA Drivers" = NVIDIA Drivers
"PHP i MySQL - Wstęp do języka PHP" = PHP i MySQL - Wstęp do języka PHP
"Power Saver" = TOSHIBA Power Saver
"Shop for HP Supplies" = Shop for HP Supplies
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"WinRAR archiver" = Archiwizator WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2010-08-22 11:47:21 | Computer Name = RUDI | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd wininet.dll, wersja 6.0.2900.2180, adres błędu 0x00003674.

Error - 2010-08-22 11:47:48 | Computer Name = RUDI | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd drwtsn32.exe, wersja 5.1.2600.0, moduł powodujący
błąd dbghelp.dll, wersja 5.1.2600.2180, adres błędu 0x0001295d.

Error - 2010-08-24 08:01:15 | Computer Name = RUDI | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca setup.exe, wersja 16.0.0.328, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

[ System Events ]
Error - 2010-08-23 17:27:46 | Computer Name = RUDI | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1058” podczas próby uruchomienia usługi
wuauserv z argumentami „” w celu uruchomienia serwera: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

Error - 2010-08-23 17:28:55 | Computer Name = RUDI | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1058” podczas próby uruchomienia usługi
wuauserv z argumentami „” w celu uruchomienia serwera: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

Error - 2010-08-23 19:18:34 | Computer Name = RUDI | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1058” podczas próby uruchomienia usługi
wuauserv z argumentami „” w celu uruchomienia serwera: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

Error - 2010-08-24 06:55:17 | Computer Name = RUDI | Source = Service Control Manager | ID = 7011
Description = Limit czasu (30000 milisekund) podczas oczekiwania na odpowiedź transakcji
z usługi NVSvc.

Error - 2010-08-24 06:55:47 | Computer Name = RUDI | Source = Service Control Manager | ID = 7011
Description = Limit czasu (30000 milisekund) podczas oczekiwania na odpowiedź transakcji
z usługi ImapiService.

Error - 2010-08-24 06:55:56 | Computer Name = RUDI | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Usługa COM nagrywania dysków CD IMAPI z
powodu następującego błędu: %%1053

Error - 2010-08-24 10:27:54 | Computer Name = RUDI | Source = Service Control Manager | ID = 7011
Description = Limit czasu (30000 milisekund) podczas oczekiwania na odpowiedź transakcji
z usługi NVSvc.

Error - 2010-08-24 10:41:08 | Computer Name = RUDI | Source = Service Control Manager | ID = 7011
Description = Limit czasu (30000 milisekund) podczas oczekiwania na odpowiedź transakcji
z usługi NVSvc.

Error - 2010-08-24 10:46:13 | Computer Name = RUDI | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1058” podczas próby uruchomienia usługi
wuauserv z argumentami „” w celu uruchomienia serwera: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

Error - 2010-08-24 10:54:25 | Computer Name = RUDI | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1058” podczas próby uruchomienia usługi
wuauserv z argumentami „” w celu uruchomienia serwera: {E60687F7-01A1-40AA-86AC-DB1CBF673334}


< End of report >
[/log]

[log]
OTL logfile created on: 2010-08-24 17:48:32 - Run 1
OTL by OldTimer - Version 3.2.10.0 Folder = C:\Documents and Settings\Bartek\Moje dokumenty\Pobieranie
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 65,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 21,88 Gb Free Space | 56,02% Space Free | Partition Type: NTFS
Drive D: | 72,72 Gb Total Space | 70,82 Gb Free Space | 97,39% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: RUDI
Current User Name: Bartek
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2010-08-24 17:29:16 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bartek\Moje dokumenty\Pobieranie\OTL_3.2.10(dobreprogramy.pl).exe
PRC - [2010-07-23 12:02:21 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-03-25 18:42:36 | 000,388,096 | ---- | M] (Trend Micro Inc.) -- D:\programy\Inne\Trend Micro\HiJackThis\HiJackThis.exe
PRC - [2009-12-24 09:55:22 | 001,732,960 | ---- | M] (Diskeeper Corporation) -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
PRC - [2007-11-20 12:21:44 | 000,009,216 | R--- | M] (Agere Systems) -- C:\WINDOWS.0\system32\agrsmsvc.exe
PRC - [2007-07-25 19:19:54 | 000,200,704 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynToshiba.exe
PRC - [2007-02-25 22:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2004-08-04 00:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS.0\explorer.exe
PRC - [2003-09-14 22:08:14 | 002,928,700 | ---- | M] () -- c:\usr\mysql\bin\mysqld.exe


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2010-08-24 17:29:16 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bartek\Moje dokumenty\Pobieranie\OTL_3.2.10(dobreprogramy.pl).exe
MOD - [2004-08-04 00:42:34 | 001,050,624 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS.0\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
MOD - [2004-08-03 23:01:18 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS.0\system32\msscript.ocx


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found [Disabled | Stopped] -- C:\WINDOWS.0\System32\hidserv.dll -- (HidServ)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate) Usługa Google Update (gupdate)
SRV - [2010-08-18 18:16:57 | 000,311,680 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe -- (AVP)
SRV - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess)
SRV - [2009-12-24 09:55:22 | 001,732,960 | ---- | M] (Diskeeper Corporation) [Auto | Running] -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper)
SRV - [2009-10-27 10:26:36 | 000,657,408 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008-11-04 04:30:41 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs)
SRV - [2007-11-20 12:21:44 | 000,009,216 | R--- | M] (Agere Systems) [Auto | Running] -- C:\WINDOWS.0\system32\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2007-02-25 22:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2003-09-14 22:08:14 | 002,928,700 | ---- | M] () [Auto | Running] -- c:\usr/MYSQL/bin/mysqld.exe -- (MySql)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2010-08-24 13:05:39 | 001,161,760 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2010-07-20 17:31:12 | 000,296,976 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS.0\system32\drivers\klif.sys -- (KLIF)
DRV - [2010-06-08 17:16:26 | 006,056,040 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009-12-10 15:48:40 | 000,045,616 | ---- | M] (Diskeeper Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\DKRtWrt.sys -- (DKRtWrt)
DRV - [2009-11-18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009-11-12 14:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS.0\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009-10-26 15:47:30 | 004,221,952 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\NETw5x32.sys -- (NETw5x32) Intel(R)
DRV - [2009-06-30 09:37:16 | 000,028,552 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\WINDOWS.0\system32\drivers\pavboot.sys -- (pavboot)
DRV - [2009-06-19 16:44:14 | 000,290,816 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\tifm21.sys -- (tifm21)
DRV - [2009-06-15 14:01:00 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS.0\system32\drivers\kl1.sys -- (kl1)
DRV - [2009-05-16 20:59:44 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2009-05-13 17:46:52 | 000,031,760 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\klim5.sys -- (klim5)
DRV - [2008-12-15 20:41:32 | 000,033,808 | ---- | M] (Kaspersky Lab) [File_System | Boot | Running] -- C:\WINDOWS.0\system32\drivers\klbg.sys -- (klbg)
DRV - [2008-11-04 04:30:41 | 000,012,032 | ---- | M] (TOSHIBA Corporation.) [Kernel | Auto | Running] -- C:\WINDOWS.0\system32\drivers\Netdevio.sys -- (Netdevio)
DRV - [2008-10-14 02:03:46 | 000,004,608 | ---- | M] (RealVNC Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\vncmirror.sys -- (vncmirror)
DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-05-23 04:07:16 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2008-05-13 17:16:06 | 000,064,000 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\WINDOWS.0\system32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2008-04-23 18:15:26 | 000,131,712 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2008-03-25 14:54:02 | 000,041,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\tosporte.sys -- (tosporte)
DRV - [2008-03-19 12:38:24 | 000,074,112 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2008-01-22 21:57:48 | 000,054,144 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2007-11-29 10:45:44 | 000,036,608 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2007-11-20 12:25:26 | 000,209,312 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2007-11-20 12:21:52 | 000,090,880 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2006-10-23 17:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2006-06-22 17:27:12 | 000,011,264 | ---- | M] (TOSHIBA ) [Kernel | System | Running] -- C:\WINDOWS.0\system32\drivers\TPwSav.sys -- (TPwSav)
DRV - [2006-02-16 19:34:00 | 003,642,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2005-01-07 18:07:18 | 000,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\Hdaudbus.sys -- (HDAudBus)
DRV - [2005-01-07 06:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\tosrfnds.sys -- (tosrfnds)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-448539723-688789844-725345543-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm
IE - HKU\S-1-5-21-448539723-688789844-725345543-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.10
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.463
FF - prefs.js..extensions.enabledItems: {aff87fa2-a58e-4edd-b852-0a20203c1e17}:0.7

FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-08-09 18:41:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-08-08 21:08:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-08-10 09:27:35 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.1\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-08-03 17:31:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.1\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2010-07-20 17:32:09 | 000,000,000 | ---D | M]

[2010-08-10 21:49:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Extensions
[2010-08-10 21:49:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010-08-24 17:24:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\wbck3iy9.default\extensions
[2010-08-10 18:14:34 | 000,000,000 | ---D | M] (gTranslate) -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\wbck3iy9.default\extensions\{aff87fa2-a58e-4edd-b852-0a20203c1e17}
[2010-08-18 22:17:48 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\wbck3iy9.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010-08-11 15:20:41 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\wbck3iy9.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010-08-23 16:11:53 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-07-20 17:32:53 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
[2006-02-23 17:36:00 | 000,638,976 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\NPSignPlugin.dll
[2008-05-15 12:55:00 | 000,819,200 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\NPSignPluginPEKAO.dll
[2010-07-23 12:02:28 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-07-23 12:02:28 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-07-23 12:02:28 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-07-23 12:02:28 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-07-23 12:02:28 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-07-23 12:02:28 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2002-09-28 23:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS.0\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [CFSServ.exe] File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS.0\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS.0\System32\nwiz.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-448539723-688789844-725345543-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: Pokaż lub ukryj HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O16 - DPF: {32505657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/0/A/9/0A9F8B32-9F8C-4D74-A130-E4CAB36EB01F/wmvadvd.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\kloehk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS.0\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS.0\system32\klogon.dll - C:\WINDOWS.0\system32\klogon.dll (Kaspersky Lab)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-02-21 17:06:58 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010-08-24 14:23:44 | 000,028,552 | ---- | C] (Panda Security, S.L.) -- C:\WINDOWS.0\System32\drivers\pavboot.sys
[2010-08-24 14:21:13 | 000,000,000 | ---D | C] -- C:\Program Files\Panda Security
[2010-08-24 13:38:45 | 000,000,000 | ---D | C] -- C:\WINDOWS.0\tiinst
[2010-08-24 13:37:01 | 000,000,000 | ---D | C] -- C:\Dell
[2010-08-24 13:25:52 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Bartek\Recent
[2010-08-24 13:07:20 | 000,000,000 | ---D | C] -- C:\Program Files\ltmoh
[2010-08-24 13:07:19 | 000,058,888 | ---- | C] (LSI Corporation) -- C:\WINDOWS.0\System32\agrsmdel.exe
[2010-08-24 13:07:09 | 000,000,000 | ---D | C] -- C:\Program Files\LSI SoftModem
[2010-08-24 13:05:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\WinBatch
[2010-08-24 01:08:12 | 000,359,016 | ---- | C] (Realtek Semiconductor Crop.) -- C:\WINDOWS.0\vncutil.exe
[2010-08-24 01:07:56 | 000,129,640 | ---- | C] (Realtek Semiconductor) -- C:\WINDOWS.0\RtkAudioService.exe
[2010-08-24 01:07:56 | 000,052,840 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS.0\System32\RtkCoInstXP.dll
[2010-08-24 01:07:43 | 001,395,800 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS.0\System32\drivers\Monfilt.sys
[2010-08-24 01:07:39 | 001,691,480 | ---- | C] (Creative) -- C:\WINDOWS.0\System32\drivers\Ambfilt.sys
[2010-08-24 00:29:19 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\WINDOWS.0\System32\CSVer.dll
[2010-08-24 00:28:39 | 000,000,000 | ---D | C] -- C:\Intel
[2010-08-23 23:38:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Easeware
[2010-08-23 23:04:50 | 000,064,104 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS.0\ALCMTR.EXE
[2010-08-23 17:27:51 | 000,000,000 | ---D | C] -- C:\WINDOWS.0\System32\Lang
[2010-08-23 16:09:37 | 000,000,000 | -H-D | C] -- C:\WINDOWS.0\System32\GroupPolicy
[2010-08-19 16:09:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Pulpit\Nowy folder
[2010-08-16 14:11:42 | 000,000,000 | ---D | C] -- C:\usr
[2010-08-16 13:21:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Notepad++
[2010-08-15 23:12:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\ACD Systems
[2010-08-15 23:12:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\ACD Systems
[2010-08-15 21:00:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Moje dokumenty\Bluetooth
[2010-08-15 20:59:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\Toshiba
[2010-08-15 15:06:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Toshiba
[2010-08-14 17:52:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Moje dokumenty\Kurs
[2010-08-11 23:01:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\Adobe
[2010-08-11 11:41:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Canneverbe Limited
[2010-08-10 22:07:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\WinRAR
[2010-08-10 21:49:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\Thunderbird
[2010-08-10 21:49:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Thunderbird
[2010-08-10 11:48:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Moje dokumenty\Pobieranie
[2010-08-09 20:05:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\HPAppData
[2010-08-09 19:22:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\HPSSUPPLY
[2010-08-09 18:50:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\WEBREG
[2010-08-09 18:42:34 | 000,966,656 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS.0\System32\hpost_p02e.dll
[2010-08-09 18:42:34 | 000,712,704 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS.0\System32\hposwia_p02e.dll
[2010-08-09 18:42:34 | 000,372,736 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS.0\System32\hppldcoi.dll
[2010-08-09 18:42:34 | 000,315,392 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS.0\System32\hposc_p02a.dll
[2010-08-09 18:42:34 | 000,309,760 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS.0\System32\difxapi.dll
[2010-08-09 18:40:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\HP Product Assistant
[2010-08-09 17:33:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\HP
[2010-08-09 17:14:23 | 000,123,904 | ---- | C] (Hewlett-Packard Company) -- C:\WINDOWS.0\System32\hpf3l70w.dll
[2010-08-08 21:09:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Macromedia
[2010-08-08 21:09:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Adobe
[2010-08-08 21:08:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\Mozilla
[2010-08-08 21:08:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla
[2010-08-08 21:04:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Identities
[2010-08-08 21:04:50 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Bartek\Moje dokumenty\Moja muzyka
[2010-08-08 21:04:49 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Bartek\Moje dokumenty\Moje obrazy
[2010-08-08 21:04:44 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Bartek\Dane aplikacji\Microsoft
[2010-08-08 21:04:44 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Bartek\Cookies
[2010-08-08 21:04:44 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Bartek\SendTo
[2010-08-08 21:04:44 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Bartek\Dane aplikacji
[2010-08-08 21:04:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Bartek\Ulubione
[2010-08-08 21:04:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Bartek\Moje dokumenty
[2010-08-08 21:04:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Bartek\Menu Start
[2010-08-08 21:04:44 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Bartek\Szablony
[2010-08-08 21:04:44 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Bartek\PrintHood
[2010-08-08 21:04:44 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Bartek\NetHood
[2010-08-08 21:04:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Pulpit
[2010-08-08 21:04:43 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Bartek\Ustawienia lokalne
[2010-08-08 21:04:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-08-07 17:16:14 | 000,000,000 | ---D | C] -- C:\WINDOWS.0\pss
[2010-08-07 13:00:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\HP
[2010-08-07 12:57:16 | 000,000,000 | ---D | C] -- C:\Program Files\HP
[2010-08-03 17:31:42 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
[2006-12-12 12:13:20 | 000,032,768 | ---- | C] (COMPAL ELECTRONIC INC.) -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\EBLib.dll
[2006-07-28 17:25:26 | 000,019,456 | ---- | C] (COMPAL ELECTRONIC INC.) -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\LPCFilter.sys
[4 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]
[3 C:\WINDOWS.0\*.tmp files -> C:\WINDOWS.0\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010-08-24 17:43:06 | 000,002,365 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\HiJackThis.lnk
[2010-08-24 17:38:09 | 002,359,296 | -H-- | M] () -- C:\Documents and Settings\Bartek\NTUSER.DAT
[2010-08-24 17:20:57 | 000,000,000 | -HS- | M] () -- C:\DkHyperbootSync
[2010-08-24 17:11:50 | 000,045,378 | ---- | M] () -- C:\WINDOWS.0\System32\nvapps.xml
[2010-08-24 17:10:25 | 000,001,032 | ---- | M] () -- C:\WINDOWS.0\tasks\GoogleUpdateTaskMachineCore.job
[2010-08-24 17:08:15 | 000,000,006 | -H-- | M] () -- C:\WINDOWS.0\tasks\SA.DAT
[2010-08-24 17:08:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS.0\bootstat.dat
[2010-08-24 16:53:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS.0\tasks\GoogleUpdateTaskMachineUA.job
[2010-08-24 16:41:13 | 000,000,214 | -HS- | M] () -- C:\boot.ini
[2010-08-24 16:41:12 | 000,000,597 | ---- | M] () -- C:\WINDOWS.0\win.ini
[2010-08-24 16:41:12 | 000,000,227 | ---- | M] () -- C:\WINDOWS.0\system.ini
[2010-08-24 16:35:55 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Bartek\ntuser.ini
[2010-08-24 13:05:39 | 001,161,760 | ---- | M] (LSI Corporation) -- C:\WINDOWS.0\System32\drivers\AGRSM.sys
[2010-08-24 12:57:55 | 000,490,866 | ---- | M] () -- C:\WINDOWS.0\System32\perfh015.dat
[2010-08-24 12:57:55 | 000,432,690 | ---- | M] () -- C:\WINDOWS.0\System32\perfh009.dat
[2010-08-24 12:57:55 | 000,084,078 | ---- | M] () -- C:\WINDOWS.0\System32\perfc015.dat
[2010-08-24 12:57:55 | 000,067,646 | ---- | M] () -- C:\WINDOWS.0\System32\perfc009.dat
[2010-08-24 12:57:51 | 001,087,764 | ---- | M] () -- C:\WINDOWS.0\System32\PerfStringBackup.INI
[2010-08-23 23:37:58 | 000,000,352 | ---- | M] () -- C:\WINDOWS.0\tasks\DriverEasy Scheduled Scan.job
[2010-08-23 19:01:11 | 000,035,916 | ---- | M] () -- C:\Documents and Settings\Bartek\Moje dokumenty\cc_20100823_190107.reg
[2010-08-23 17:28:04 | 000,940,794 | ---- | M] () -- C:\WINDOWS.0\System32\LoopyMusic.wav
[2010-08-23 17:28:04 | 000,146,650 | ---- | M] () -- C:\WINDOWS.0\System32\BuzzingBee.wav
[2010-08-23 16:11:42 | 000,000,448 | RHS- | M] () -- C:\Documents and Settings\All Users.WINDOWS.0\ntuser.pol
[2010-08-20 16:58:50 | 000,224,478 | ---- | M] () -- C:\Documents and Settings\Bartek\Moje dokumenty\cc_20100820_165823KopiaRejestru.reg
[2010-08-17 17:10:36 | 000,000,668 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\Skrót do BabasChess.lnk
[2010-08-16 14:41:31 | 000,000,529 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\kED (2).lnk
[2010-08-16 14:12:37 | 000,000,506 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\Krasnal Start 2.7.lnk
[2010-08-16 14:12:22 | 000,002,251 | ---- | M] () -- C:\my_cnf.bak
[2010-08-16 14:12:22 | 000,000,457 | ---- | M] () -- C:\WINDOWS.0\my.ini
[2010-08-16 14:12:13 | 000,024,633 | ---- | M] () -- C:\WINDOWS.0\php.ini
[2010-08-16 00:17:12 | 005,368,516 | -H-- | M] () -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-08-15 22:54:05 | 000,017,920 | ---- | M] () -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-08-14 17:54:26 | 000,002,016 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\PHP i MySQL - Wstęp do języka PHP.lnk
[2010-08-10 23:57:17 | 000,000,065 | ---- | M] () -- C:\WINDOWS.0\System32\-1
[2010-08-10 15:22:22 | 000,000,551 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\CCleaner.lnk
[2010-08-09 20:00:47 | 000,269,392 | ---- | M] () -- C:\WINDOWS.0\System32\FNTCACHE.DAT
[2010-08-09 18:50:13 | 000,170,037 | ---- | M] () -- C:\WINDOWS.0\hpoins38.dat
[2010-08-09 18:44:40 | 000,069,128 | ---- | M] () -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2010-08-08 21:08:28 | 000,000,346 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\Moje dokumenty.lnk
[2010-08-08 21:08:24 | 000,000,104 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\Mój komputer.lnk
[2010-08-08 21:08:17 | 000,000,104 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\Internet.lnk
[2010-08-07 09:58:08 | 000,002,206 | ---- | M] () -- C:\WINDOWS.0\System32\wpa.dbl
[2010-07-29 17:40:14 | 000,113,933 | ---- | M] () -- C:\WINDOWS.0\System32\drivers\klin.dat
[2010-07-29 17:40:14 | 000,097,549 | ---- | M] () -- C:\WINDOWS.0\System32\drivers\klick.dat
[2010-07-27 07:40:06 | 000,140,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS.0\System32\sfc_os.dll.vzr
[4 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]
[3 C:\WINDOWS.0\*.tmp files -> C:\WINDOWS.0\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-08-24 17:27:18 | 000,002,365 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\HiJackThis.lnk
[2010-08-24 17:09:43 | 000,000,000 | -HS- | C] () -- C:\DkHyperbootSync
[2010-08-23 23:37:58 | 000,000,352 | ---- | C] () -- C:\WINDOWS.0\tasks\DriverEasy Scheduled Scan.job
[2010-08-23 19:01:10 | 000,035,916 | ---- | C] () -- C:\Documents and Settings\Bartek\Moje dokumenty\cc_20100823_190107.reg
[2010-08-23 17:28:04 | 000,146,650 | ---- | C] () -- C:\WINDOWS.0\System32\BuzzingBee.wav
[2010-08-23 17:28:03 | 000,940,794 | ---- | C] () -- C:\WINDOWS.0\System32\LoopyMusic.wav
[2010-08-23 16:11:42 | 000,000,448 | RHS- | C] () -- C:\Documents and Settings\All Users.WINDOWS.0\ntuser.pol
[2010-08-20 16:58:39 | 000,224,478 | ---- | C] () -- C:\Documents and Settings\Bartek\Moje dokumenty\cc_20100820_165823KopiaRejestru.reg
[2010-08-17 17:10:39 | 000,000,668 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\Skrót do BabasChess.lnk
[2010-08-16 14:41:31 | 000,000,529 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\kED (2).lnk
[2010-08-16 14:12:37 | 000,000,506 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\Krasnal Start 2.7.lnk
[2010-08-15 22:52:43 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-08-14 17:54:26 | 000,002,016 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\PHP i MySQL - Wstęp do języka PHP.lnk
[2010-08-10 23:57:16 | 000,000,065 | ---- | C] () -- C:\WINDOWS.0\System32\-1
[2010-08-10 11:57:38 | 000,000,551 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\CCleaner.lnk
[2010-08-09 18:30:19 | 000,170,037 | ---- | C] () -- C:\WINDOWS.0\hpoins38.dat
[2010-08-09 18:30:19 | 000,000,622 | ---- | C] () -- C:\WINDOWS.0\hpomdl38.dat
[2010-08-08 21:08:28 | 000,000,346 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\Moje dokumenty.lnk
[2010-08-08 21:08:24 | 000,000,104 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\Mój komputer.lnk
[2010-08-08 21:08:16 | 000,000,104 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\Internet.lnk
[2010-08-08 21:04:46 | 000,000,188 | -HS- | C] () -- C:\Documents and Settings\Bartek\ntuser.ini
[2010-08-08 21:04:45 | 000,020,480 | -H-- | C] () -- C:\Documents and Settings\Bartek\ntuser.dat.LOG
[2010-08-08 21:04:43 | 002,359,296 | -H-- | C] () -- C:\Documents and Settings\Bartek\NTUSER.DAT
[2010-08-07 23:26:13 | 000,000,622 | ---- | C] () -- C:\WINDOWS.0\hpomdl38.dat.temp
[2010-03-18 20:06:26 | 000,045,056 | ---- | C] () -- C:\WINDOWS.0\System32\TDispVol.dll
[2010-03-18 07:21:30 | 000,000,332 | ---- | C] () -- C:\WINDOWS.0\System32\CNCMFP22.INI
[2010-03-18 01:39:35 | 000,007,168 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\StarOpen.sys
[2010-03-17 02:50:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS.0\NDSTray.INI
[2010-03-17 01:18:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS.0\System32\EBLib.dll
[2010-03-17 00:24:45 | 000,014,455 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\hpzinstall.log
[2010-03-16 23:59:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS.0\tosOBEX.INI
[2007-12-21 17:46:32 | 000,118,784 | ---- | C] () -- C:\WINDOWS.0\System32\TosBtAcc.dll
[2007-07-02 10:16:20 | 000,028,672 | ---- | C] () -- C:\WINDOWS.0\System32\TPeculiarity.dll
[2006-02-16 19:34:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS.0\System32\nvwdmcpl.dll
[2006-02-16 19:34:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS.0\System32\nview.dll
[2006-02-16 19:34:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS.0\System32\nvwimg.dll
[2006-02-16 19:34:00 | 000,573,440 | ---- | C] () -- C:\WINDOWS.0\System32\nvhwvid.dll
[2006-02-16 19:34:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS.0\System32\nvshell.dll
[2006-02-16 19:34:00 | 000,094,208 | ---- | C] () -- C:\WINDOWS.0\System32\nvapi.dll
[2006-01-05 19:49:34 | 000,036,864 | ---- | C] () -- C:\WINDOWS.0\System32\HWS_Ctrl.dll
[2006-01-05 18:36:22 | 000,024,576 | ---- | C] () -- C:\WINDOWS.0\System32\EKECioCtl.dll
[2006-01-04 11:59:52 | 000,028,672 | ---- | C] () -- C:\WINDOWS.0\System32\TCtrlIO.dll
[2005-07-22 22:30:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS.0\System32\TosCommAPI.dll
[2004-09-24 01:31:08 | 000,233,472 | ---- | C] () -- C:\WINDOWS.0\System32\libmySQL.dll
[2004-08-04 00:44:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS.0\System32\ieencode.dll
[2004-07-29 19:08:30 | 000,024,633 | ---- | C] () -- C:\WINDOWS.0\php.ini
[2004-07-17 11:36:38 | 000,027,440 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\secdrv.sys
[2002-06-25 09:28:18 | 000,000,457 | ---- | C] () -- C:\WINDOWS.0\my.ini
[2001-07-07 04:00:02 | 000,003,234 | ---- | C] () -- C:\WINDOWS.0\System32\HPTCPMON.INI

[color=#E56717]========== LOP Check ==========[/color]

[2010-03-17 02:09:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\ACD Systems
[2010-03-18 01:39:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\Canneverbe Limited
[2010-03-17 01:33:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\Diskeeper Corporation
[2010-03-17 01:38:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\Installations
[2010-03-17 00:56:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\Ulead Systems
[2010-03-17 02:23:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\Vista64
[2010-03-17 02:46:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\XP
[2010-08-15 23:12:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\ACD Systems
[2010-08-11 11:41:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Canneverbe Limited
[2010-08-23 23:38:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Easeware
[2010-08-16 14:41:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Notepad++
[2010-08-10 21:49:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Thunderbird
[2010-08-21 19:42:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Toshiba
[2010-08-24 13:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\WinBatch
[2010-08-08 20:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Gość.RUDI\Dane aplikacji\ACD Systems
[2010-03-17 02:11:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudolf.RUDI\Dane aplikacji\ACD Systems
[2010-03-18 01:39:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudolf.RUDI\Dane aplikacji\Canneverbe Limited
[2010-07-20 17:27:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudolf.RUDI\Dane aplikacji\CheckPoint
[2010-08-03 17:31:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudolf.RUDI\Dane aplikacji\Thunderbird
[2010-08-07 11:38:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudolf.RUDI\Dane aplikacji\toshiba
[2010-08-23 23:37:58 | 000,000,352 | ---- | M] () -- C:\WINDOWS.0\Tasks\DriverEasy Scheduled Scan.job

[color=#E56717]========== Purity Check ==========[/color]


< End of report >
[/log]

[log]
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:43:19, on 2010-08-24
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\system32\spoolsv.exe
C:\WINDOWS.0\system32\agrsmsvc.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS.0\system32\svchost.exe
c:\usr\MYSQL\bin\mysqld.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\nvsvc32.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS.0\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS.0\RTHDCPL.EXE
C:\WINDOWS.0\system32\ctfmon.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
D:\programy\Inne\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=488
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS.0\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.0\system32\ctfmon.exe
O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Pokaż lub ukryj HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.0\system32\browseui.dll
O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.0\system32\browseui.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS.0\system32\agrsmsvc.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: MySql - Unknown owner - c:\usr/MYSQL/bin/mysqld.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS.0\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 5682 bytes
[/log]

PS: Nie wiem jaka jest przyczyna tego problemu, więc nie wiem czy w dobrym miejscu zakładam temat. Od razu Przepraszam .
PS2: Napisałem identycznego posta na innym forum ale nikt na razie nie odpisał
[color="#ff0000"]
//przenoszę do Bezpieczeństwa
//dan[/color]

Tomek01
komentarz
komentarz

Na szczęście wirusy nie powodują charczenia, tak daleko jeszcze nie doszło. :)

Po drugie logi wstawiamy w tagi, tym razem zmieniam.

Po trzecie logi są czyste więc z pewnością nie jest to wina infekcji.
Odsyłam Cię do kolegów z działu sprzętowego.

Bartexx
komentarz
komentarz (edytowane)

Hej, dzięki za jakąkolwiek odpowiedź. Mam stworzyć osobny wątek w dziale "Awarie komputerów" ?

[color="#ff0000"]//nie, ja przeniosę Twój temat do Windowsa XP
//skoro działa pod Mandrivą to nie wina sprzętu
//dan[/color]

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.