x-kom hosting

Problem Z Dyskiem

DANIEL1990PL
utworzono
utworzono

Gdy chcę otworzyć dysk "D" wyskakuje mi takie coś:
[img]http://img255.imageshack.us/img255/4818/44271913.png[/img]
A jak wcisnę PPM to wyskakuje mi:
[img]http://img827.imageshack.us/img827/2301/90383167.png[/img]

Nie wiem co mogę z tym zrobić?

Z góry dziękuję za pomoc.
[color="#ff0000"]
//przenoszę do Bezpieczeństwa
//raaz[/color]

danielek316
komentarz
komentarz

Wygląda jak infekcja. Daj loga z OTL: http://www.forumpc.pl/index.php?showtopic=104338

DANIEL1990PL
komentarz
komentarz

[log]OTL logfile created on: 2010-09-21 15:30:45 - Run 1
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\JUDA\Pulpit
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

1 023,00 Mb Total Physical Memory | 410,00 Mb Available Physical Memory | 40,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 58,66 Gb Total Space | 49,63 Gb Free Space | 84,61% Space Free | Partition Type: NTFS
Drive D: | 174,23 Gb Total Space | 2,71 Gb Free Space | 1,56% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DANIEL
Current User Name: JUDA
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 60 Days
Output = Standard

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2010-09-21 15:24:52 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JUDA\Pulpit\OTL.exe
PRC - [2010-09-15 01:08:56 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-09-15 01:08:56 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
PRC - [2010-04-16 22:12:16 | 003,872,080 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
PRC - [2010-04-16 18:36:42 | 000,026,480 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Contacts\wlcomm.exe
PRC - [2009-05-01 00:30:18 | 000,168,004 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2009-02-09 12:10:45 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\services.exe
PRC - [2008-03-29 19:37:13 | 000,079,224 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2008-03-29 19:37:02 | 000,144,760 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2008-03-29 19:36:22 | 000,247,160 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2008-03-29 19:30:47 | 000,345,464 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2008-03-29 19:11:18 | 000,017,272 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2007-04-17 13:12:28 | 002,113,536 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe
PRC - [2006-09-06 05:44:20 | 016,262,656 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE
PRC - [2004-08-04 01:44:30 | 000,504,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winlogon.exe
PRC - [2004-08-04 01:44:28 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spoolsv.exe
PRC - [2004-08-04 01:44:28 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\smss.exe
PRC - [2004-08-04 01:44:28 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\rundll32.exe
PRC - [2004-08-04 01:44:28 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [RPCSS]
PRC - [2004-08-04 01:44:28 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [NETWORKSERVICE]
PRC - [2004-08-04 01:44:28 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [NETSVCS]
PRC - [2004-08-04 01:44:28 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [LOCALSERVICE]
PRC - [2004-08-04 01:44:28 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [LOCALSERVICE]
PRC - [2004-08-04 01:44:28 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [IMGSVC]
PRC - [2004-08-04 01:44:28 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [DCOMLAUNCH]
PRC - [2004-08-04 01:44:22 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\lsass.exe
PRC - [2004-08-04 01:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004-08-04 01:44:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ctfmon.exe
PRC - [2004-08-04 01:44:20 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\csrss.exe
PRC - [2004-08-04 01:44:18 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\alg.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2010-09-21 15:24:52 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JUDA\Pulpit\OTL.exe
MOD - [2010-04-16 17:37:04 | 000,474,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shlwapi.dll
MOD - [2009-06-25 10:48:08 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\secur32.dll
MOD - [2009-04-15 17:18:19 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\rpcrt4.dll
MOD - [2009-03-21 16:21:24 | 001,014,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\kernel32.dll
MOD - [2009-02-09 12:22:08 | 000,686,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\advapi32.dll
MOD - [2009-02-09 12:22:06 | 000,722,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ntdll.dll
MOD - [2008-10-23 15:01:37 | 000,283,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\gdi32.dll
MOD - [2008-07-03 15:16:27 | 008,483,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shell32.dll
MOD - [2008-03-29 19:33:27 | 000,139,264 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll
MOD - [2006-12-21 14:30:44 | 000,102,400 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\ggwhook.dll
MOD - [2004-08-04 01:44:32 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winspool.drv
MOD - [2004-08-04 01:44:14 | 000,578,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\user32.dll
MOD - [2004-08-04 01:44:14 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\uxtheme.dll
MOD - [2004-08-04 01:44:14 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\version.dll
MOD - [2004-08-04 01:44:12 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\srclient.dll
MOD - [2004-08-04 01:44:10 | 000,996,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\setupapi.dll
MOD - [2004-08-04 01:44:10 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\psapi.dll
MOD - [2004-08-04 01:44:08 | 001,281,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ole32.dll
MOD - [2004-08-04 01:44:08 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\oleaut32.dll
MOD - [2004-08-04 01:44:08 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\olepro32.dll
MOD - [2004-08-04 01:44:06 | 000,343,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcrt.dll
MOD - [2004-08-04 01:44:04 | 000,294,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MSCTF.dll
MOD - [2004-08-04 01:43:58 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\framedyn.dll
MOD - [2004-08-04 01:43:56 | 000,822,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\comres.dll
MOD - [2004-08-04 01:43:56 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\comdlg32.dll
MOD - [2004-08-04 01:43:54 | 000,501,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\clbcatq.dll
MOD - [2004-08-04 01:42:34 | 001,050,624 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
MOD - [2004-08-04 00:01:18 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - [2010-04-28 07:44:02 | 000,704,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2008-03-29 19:37:02 | 000,144,760 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2008-03-29 19:36:22 | 000,247,160 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2008-03-29 19:30:47 | 000,345,464 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2008-03-29 19:11:18 | 000,017,272 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- I:\NTGLM7X.sys -- (SetupNTGLM7X)
DRV - File not found [Kernel | On_Demand | Stopped] -- I:\NTACCESS.sys -- (NTACCESS)
DRV - File not found [Kernel | On_Demand | Stopped] -- I:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
DRV - [2010-04-28 07:44:02 | 000,054,760 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009-04-30 22:02:00 | 008,055,584 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2008-03-29 19:35:49 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2008-03-29 19:35:21 | 000,094,544 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2008-03-29 19:31:34 | 000,075,856 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2008-03-29 19:29:08 | 000,023,152 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2008-03-29 19:27:33 | 000,042,912 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2008-03-29 19:26:52 | 000,026,944 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2006-09-06 10:04:12 | 004,377,600 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006-05-16 13:25:02 | 000,018,944 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006-05-16 13:25:00 | 000,052,736 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006-04-24 11:52:28 | 000,100,736 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata)
DRV - [2005-03-09 08:53:00 | 000,036,352 | R--- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2005-01-07 17:07:18 | 000,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus)
DRV - [2001-08-17 23:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1659004503-1383384898-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-09-19 22:20:03 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-09-21 14:42:31 | 000,000,000 | ---D | M]

[2010-09-19 22:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JUDA\Dane aplikacji\Mozilla\Extensions
[2010-09-19 22:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JUDA\Dane aplikacji\Mozilla\Firefox\Profiles\cmyxhqkr.default\extensions
[2010-09-19 22:19:55 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-09-14 23:29:36 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-09-14 23:29:36 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-09-14 23:29:36 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-09-14 23:29:36 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-09-14 23:29:36 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-09-14 23:29:36 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2001-10-26 17:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKU\S-1-5-21-1659004503-1383384898-839522115-1003..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1659004503-1383384898-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 88.156.63.9 82.139.8.7
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-09-19 22:02:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010-09-19 21:09:33 | 000,000,158 | -HS- | M] () - D:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{dc24f11a-c434-11df-9c54-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{dc24f11a-c434-11df-9c54-806d6172696f}\Shell\AutoRun\command - "" = I:\Setup.exe -- File not found
O33 - MountPoints2\{dc24f120-c434-11df-9c54-806d6172696f}\Shell\AutoRun\command - "" = D:\ -- File not found
O33 - MountPoints2\{dc24f120-c434-11df-9c54-806d6172696f}\Shell\explore\Command - "" = hdbifxd.exe
O33 - MountPoints2\{dc24f120-c434-11df-9c54-806d6172696f}\Shell\open\Command - "" = hdbifxd.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\Setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found


SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {1a3e09be-1e45-494b-9174-d7385b45bbf5} - Reg Error: Value error.
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2010-09-21 15:24:54 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\JUDA\Pulpit\OTL.exe
[2010-09-21 14:42:30 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2010-09-21 14:42:25 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2010-09-21 14:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio
[2010-09-21 14:42:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2010-09-21 14:39:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2010-09-21 14:39:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Ustawienia lokalne\Dane aplikacji\Microsoft Help
[2010-09-21 14:39:15 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010-09-21 14:39:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
[2010-09-21 14:38:56 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2010-09-21 14:14:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Tracing
[2010-09-21 14:14:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2010-09-21 14:13:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2010-09-21 14:13:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\microsoft
[2010-09-21 14:13:36 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive
[2010-09-21 14:13:27 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live
[2010-09-21 14:12:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2010-09-21 13:19:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2010-09-20 19:30:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Pulpit\Nowy folder
[2010-09-20 19:03:55 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2010-09-20 17:39:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Pulpit\Gwiezdne wojny
[2010-09-20 15:01:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2010-09-20 15:00:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Dane aplikacji\Gadu-Gadu
[2010-09-20 14:35:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Dane aplikacji\Macromedia
[2010-09-20 14:35:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Dane aplikacji\Adobe
[2010-09-20 14:27:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot_bak
[2010-09-19 23:53:20 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2010-09-19 23:53:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2010-09-19 23:53:16 | 000,000,000 | R--D | C] -- C:\Program Files
[2010-09-19 23:53:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2010-09-19 23:53:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2010-09-19 23:53:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2010-09-19 23:52:52 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start
[2010-09-19 23:52:52 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty
[2010-09-19 23:52:52 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Szablony
[2010-09-19 23:52:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Ulubione
[2010-09-19 23:52:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Pulpit
[2010-09-19 23:52:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2010-09-19 23:52:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2010-09-19 23:52:36 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
[2010-09-19 23:52:36 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji
[2010-09-19 23:52:14 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010-09-19 23:52:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2010-09-19 23:46:28 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2010-09-19 23:46:28 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2010-09-19 23:46:28 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
[2010-09-19 23:46:28 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1045
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2010-09-19 23:46:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2010-09-19 22:45:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2010-09-19 22:45:51 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2010-09-19 22:43:37 | 000,000,000 | R--D | C] -- C:\Documents and Settings\JUDA\Pulpit\GRY
[2010-09-19 22:42:09 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010-09-19 22:41:05 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010-09-19 22:23:13 | 000,095,608 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\AvastSS.scr
[2010-09-19 22:23:13 | 000,094,544 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010-09-19 22:23:13 | 000,093,264 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010-09-19 22:23:13 | 000,075,856 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010-09-19 22:23:13 | 000,042,912 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010-09-19 22:23:13 | 000,026,944 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010-09-19 22:23:13 | 000,023,152 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010-09-19 22:23:13 | 000,020,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010-09-19 22:23:07 | 001,146,232 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010-09-19 22:23:02 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010-09-19 22:22:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Gadu-Gadu
[2010-09-19 22:22:10 | 000,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu
[2010-09-19 22:20:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Moje dokumenty\Pobieranie
[2010-09-19 22:20:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Ustawienia lokalne\Dane aplikacji\Mozilla
[2010-09-19 22:20:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Dane aplikacji\Mozilla
[2010-09-19 22:19:55 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010-09-19 22:19:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2010-09-19 22:18:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang
[2010-09-19 22:16:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM
[2010-09-19 22:15:37 | 002,808,832 | R--- | C] (RealTek Semicoductor Corp.) -- C:\WINDOWS\ALCWZRD.EXE
[2010-09-19 22:15:37 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010-09-19 22:15:36 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2010-09-19 22:14:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\NV31963200.TMP
[2010-09-19 22:13:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2010-09-19 22:13:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2010-09-19 22:12:14 | 000,860,160 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm
[2010-09-19 22:12:14 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll
[2010-09-19 22:12:14 | 000,118,784 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm
[2010-09-19 22:12:13 | 000,683,520 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx.dll
[2010-09-19 22:12:13 | 000,081,920 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dpl100.dll
[2010-09-19 22:12:11 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2010-09-19 22:11:53 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2010-09-19 22:11:52 | 000,000,000 | ---D | C] -- C:\Program Files\Real Alternative
[2010-09-19 22:11:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Ustawienia lokalne\Dane aplikacji\Real
[2010-09-19 22:11:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Dane aplikacji\Real
[2010-09-19 22:11:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real
[2010-09-19 22:09:42 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2010-09-19 22:08:40 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2010-09-19 22:07:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Dane aplikacji\Identities
[2010-09-19 22:07:15 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2010-09-19 22:07:13 | 000,000,000 | R--D | C] -- C:\Documents and Settings\JUDA\Moje dokumenty\Moje obrazy
[2010-09-19 22:07:13 | 000,000,000 | R--D | C] -- C:\Documents and Settings\JUDA\Moje dokumenty\Moja muzyka
[2010-09-19 22:07:11 | 000,000,000 | --SD | C] -- C:\Documents and Settings\JUDA\Dane aplikacji\Microsoft
[2010-09-19 22:07:11 | 000,000,000 | --SD | C] -- C:\Documents and Settings\JUDA\Cookies
[2010-09-19 22:07:11 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\JUDA\SendTo
[2010-09-19 22:07:11 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\JUDA\Recent
[2010-09-19 22:07:11 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\JUDA\Dane aplikacji
[2010-09-19 22:07:11 | 000,000,000 | R--D | C] -- C:\Documents and Settings\JUDA\Ulubione
[2010-09-19 22:07:11 | 000,000,000 | R--D | C] -- C:\Documents and Settings\JUDA\Moje dokumenty
[2010-09-19 22:07:11 | 000,000,000 | R--D | C] -- C:\Documents and Settings\JUDA\Menu Start
[2010-09-19 22:07:11 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\JUDA\Ustawienia lokalne
[2010-09-19 22:07:11 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\JUDA\Szablony
[2010-09-19 22:07:11 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\JUDA\PrintHood
[2010-09-19 22:07:11 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\JUDA\NetHood
[2010-09-19 22:07:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Pulpit
[2010-09-19 22:07:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JUDA\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-09-19 22:05:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2010-09-19 22:05:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010-09-19 22:05:48 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2010-09-19 22:05:47 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2010-09-19 22:05:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-09-19 22:05:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-09-19 22:05:31 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2010-09-19 22:04:16 | 000,080,384 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2010-09-19 22:04:16 | 000,080,384 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2010-09-19 22:04:16 | 000,026,624 | ---- | C] (RICOH Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll
[2010-09-19 22:03:18 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2010-09-19 22:02:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010-09-19 22:02:56 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2010-09-19 22:02:56 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2010-09-19 22:01:59 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2010-09-19 22:01:51 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2010-09-19 22:01:51 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2010-09-19 22:01:42 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2010-09-19 22:01:39 | 000,000,000 | ---D | C] -- C:\Program Files\Usługi online
[2010-09-19 22:01:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2010-09-19 22:00:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2010-09-19 22:00:54 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2010-09-19 22:00:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2010-09-19 22:00:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2010-09-19 22:00:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2010-09-19 22:00:42 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2010-09-19 22:00:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2010-09-19 22:00:31 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2010-09-19 22:00:28 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2010-09-19 22:00:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2010-09-19 22:00:21 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2010-09-19 22:00:20 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje obrazy
[2010-09-19 21:59:54 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2010-09-19 21:59:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2010-09-19 21:59:43 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moja muzyka
[2010-09-19 21:59:43 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2010-09-19 21:59:39 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger
[2010-09-19 21:59:35 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2010-09-19 21:59:10 | 000,283,136 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe
[2010-09-19 21:59:09 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2010-09-19 21:59:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2010-09-19 21:59:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2010-09-19 21:58:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2010-09-21 15:24:52 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JUDA\Pulpit\OTL.exe
[2010-09-21 15:00:51 | 000,238,286 | ---- | M] () -- C:\Documents and Settings\JUDA\Pulpit\2.bmp
[2010-09-21 14:54:09 | 000,560,790 | ---- | M] () -- C:\Documents and Settings\JUDA\Pulpit\1.bmp
[2010-09-21 14:50:59 | 001,048,576 | -H-- | M] () -- C:\Documents and Settings\JUDA\NTUSER.DAT
[2010-09-21 14:40:24 | 000,000,552 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-09-21 14:14:17 | 000,012,912 | ---- | M] () -- C:\Documents and Settings\JUDA\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2010-09-21 13:18:15 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-09-21 13:18:14 | 000,229,488 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010-09-21 13:18:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-09-20 22:16:57 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\JUDA\ntuser.ini
[2010-09-20 22:16:52 | 003,753,000 | -H-- | M] () -- C:\Documents and Settings\JUDA\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-09-20 19:30:21 | 000,004,608 | ---- | M] () -- C:\Documents and Settings\JUDA\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-09-20 17:15:09 | 000,763,990 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-09-20 17:15:09 | 000,355,486 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-09-20 17:15:09 | 000,311,604 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-09-20 17:15:09 | 000,049,492 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-09-20 17:15:09 | 000,039,992 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-09-20 17:10:41 | 000,093,480 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-09-20 15:05:57 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010-09-19 23:53:15 | 000,000,231 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-09-19 22:43:24 | 000,000,381 | ---- | M] () -- C:\Documents and Settings\JUDA\Pulpit\WSZYSTKO.lnk
[2010-09-19 22:23:13 | 000,002,645 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010-09-19 22:20:04 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2010-09-19 22:18:52 | 000,940,794 | ---- | M] () -- C:\WINDOWS\System32\LoopyMusic.wav
[2010-09-19 22:18:52 | 000,146,650 | ---- | M] () -- C:\WINDOWS\System32\BuzzingBee.wav
[2010-09-19 22:07:10 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-09-19 22:05:34 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2010-09-19 22:04:42 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010-09-19 22:02:43 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010-09-19 22:02:43 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010-09-19 22:02:43 | 000,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2010-09-19 22:02:43 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010-09-19 22:02:43 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010-09-19 22:02:40 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010-09-19 22:02:40 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010-09-19 22:02:40 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010-09-19 22:02:32 | 000,004,293 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2010-09-19 22:01:51 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010-09-19 22:01:51 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010-09-19 22:00:02 | 000,021,856 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010-09-19 21:59:53 | 000,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2010-09-19 21:59:53 | 000,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini
[2010-09-19 21:58:17 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-09-21 15:00:51 | 000,238,286 | ---- | C] () -- C:\Documents and Settings\JUDA\Pulpit\2.bmp
[2010-09-21 14:54:09 | 000,560,790 | ---- | C] () -- C:\Documents and Settings\JUDA\Pulpit\1.bmp
[2010-09-20 14:50:25 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\JUDA\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-09-19 23:53:22 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010-09-19 23:53:17 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2010-09-19 23:53:17 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010-09-19 23:53:17 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2010-09-19 23:53:16 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010-09-19 23:53:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls
[2010-09-19 23:53:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2010-09-19 23:53:13 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls
[2010-09-19 23:53:13 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2010-09-19 23:53:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls
[2010-09-19 23:53:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2010-09-19 23:53:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls
[2010-09-19 23:53:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2010-09-19 23:53:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls
[2010-09-19 23:53:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2010-09-19 23:53:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls
[2010-09-19 23:53:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2010-09-19 23:53:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls
[2010-09-19 23:53:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2010-09-19 23:53:08 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls
[2010-09-19 23:53:08 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2010-09-19 23:53:08 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls
[2010-09-19 23:53:08 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2010-09-19 23:53:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls
[2010-09-19 23:53:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2010-09-19 23:53:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls
[2010-09-19 23:53:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2010-09-19 23:53:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls
[2010-09-19 23:53:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2010-09-19 23:53:07 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls
[2010-09-19 23:53:07 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2010-09-19 23:53:07 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls
[2010-09-19 23:53:07 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2010-09-19 23:53:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls
[2010-09-19 23:53:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2010-09-19 23:53:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls
[2010-09-19 23:53:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2010-09-19 23:53:03 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls
[2010-09-19 23:53:03 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2010-09-19 23:53:03 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls
[2010-09-19 23:53:03 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2010-09-19 23:53:03 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls
[2010-09-19 23:53:03 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2010-09-19 23:53:00 | 000,001,734 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010-09-19 23:52:52 | 000,141,702 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat
[2010-09-19 23:52:52 | 000,102,826 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat
[2010-09-19 23:52:52 | 000,037,509 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2010-09-19 23:52:52 | 000,031,965 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2010-09-19 23:52:52 | 000,013,497 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010-09-19 23:52:52 | 000,009,581 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2010-09-19 23:52:52 | 000,008,599 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010-09-19 23:52:52 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010-09-19 23:52:52 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010-09-19 23:52:52 | 000,007,245 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2010-09-19 23:52:51 | 001,896,400 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2010-09-19 23:52:51 | 001,014,483 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT
[2010-09-19 23:52:51 | 000,808,524 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010-09-19 23:52:51 | 000,620,500 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2010-09-19 23:52:51 | 000,399,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010-09-19 23:52:51 | 000,030,983 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2010-09-19 23:52:51 | 000,014,043 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2010-09-19 23:52:13 | 000,093,480 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-09-19 23:51:17 | 000,000,211 | -HS- | C] () -- C:\boot.ini
[2010-09-19 23:51:14 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2010-09-19 22:43:24 | 000,000,381 | ---- | C] () -- C:\Documents and Settings\JUDA\Pulpit\WSZYSTKO.lnk
[2010-09-19 22:23:07 | 000,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx
[2010-09-19 22:20:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010-09-19 22:18:52 | 000,940,794 | ---- | C] () -- C:\WINDOWS\System32\LoopyMusic.wav
[2010-09-19 22:18:52 | 000,146,650 | ---- | C] () -- C:\WINDOWS\System32\BuzzingBee.wav
[2010-09-19 22:17:03 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010-09-19 22:14:38 | 000,001,570 | ---- | C] () -- C:\WINDOWS\System32\nvide.nvu
[2010-09-19 22:14:10 | 000,003,903 | ---- | C] () -- C:\WINDOWS\System32\nvnrm.nvu
[2010-09-19 22:14:08 | 000,001,864 | R--- | C] () -- C:\WINDOWS\System32\nvsmb.nvu
[2010-09-19 22:12:15 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-09-19 22:12:15 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010-09-19 22:12:14 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-09-19 22:12:14 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml
[2010-09-19 22:12:13 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010-09-19 22:12:13 | 000,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010-09-19 22:12:12 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-09-19 22:12:12 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2010-09-19 22:09:17 | 000,019,207 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu
[2010-09-19 22:07:12 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\JUDA\ntuser.dat.LOG
[2010-09-19 22:07:12 | 000,000,188 | -HS- | C] () -- C:\Documents and Settings\JUDA\ntuser.ini
[2010-09-19 22:07:11 | 001,048,576 | -H-- | C] () -- C:\Documents and Settings\JUDA\NTUSER.DAT
[2010-09-19 22:05:34 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2010-09-19 22:04:42 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-09-19 22:04:37 | 000,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls
[2010-09-19 22:04:12 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls
[2010-09-19 22:04:12 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls
[2010-09-19 22:04:11 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010-09-19 22:03:57 | 000,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls
[2010-09-19 22:03:56 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010-09-19 22:03:51 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2010-09-19 22:03:50 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010-09-19 22:03:48 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2010-09-19 22:03:37 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010-09-19 22:03:31 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2010-09-19 22:03:28 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll
[2010-09-19 22:03:20 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2010-09-19 22:03:17 | 000,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls
[2010-09-19 22:03:17 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls
[2010-09-19 22:03:17 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls
[2010-09-19 22:03:17 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2010-09-19 22:03:17 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2010-09-19 22:03:17 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls
[2010-09-19 22:03:17 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2010-09-19 22:03:17 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls
[2010-09-19 22:03:17 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2010-09-19 22:03:17 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2010-09-19 22:03:17 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls
[2010-09-19 22:03:17 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls
[2010-09-19 22:03:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls
[2010-09-19 22:03:15 | 000,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls
[2010-09-19 22:03:15 | 000,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls
[2010-09-19 22:03:15 | 000,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls
[2010-09-19 22:03:15 | 000,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls
[2010-09-19 22:03:15 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls
[2010-09-19 22:03:15 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls
[2010-09-19 22:03:15 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls
[2010-09-19 22:03:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls
[2010-09-19 22:03:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls
[2010-09-19 22:03:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls
[2010-09-19 22:03:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls
[2010-09-19 22:03:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls
[2010-09-19 22:03:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls
[2010-09-19 22:03:14 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2010-09-19 22:03:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2010-09-19 22:03:13 | 000,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls
[2010-09-19 22:03:13 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls
[2010-09-19 22:03:13 | 000,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls
[2010-09-19 22:03:13 | 000,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls
[2010-09-19 22:03:13 | 000,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls
[2010-09-19 22:03:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2010-09-19 22:02:43 | 000,002,645 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2010-09-19 22:02:43 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010-09-19 22:02:43 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2010-09-19 22:02:43 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2010-09-19 22:02:43 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2010-09-19 22:02:40 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010-09-19 22:02:40 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010-09-19 22:02:39 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2010-09-19 22:01:51 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010-09-19 22:01:51 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010-09-19 22:01:46 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010-09-19 22:01:32 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2010-09-19 22:01:05 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2010-09-19 22:01:05 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2010-09-19 22:00:59 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2010-09-19 22:00:47 | 000,004,639 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.exe
[2010-09-19 22:00:36 | 000,379,904 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll
[2010-09-19 22:00:02 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010-09-19 21:59:21 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Bąbelki.bmp
[2010-09-19 21:59:21 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Pod mikroskopem.bmp
[2010-09-19 21:59:21 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Stiuk z Santa Fe.bmp
[2010-09-19 21:59:21 | 000,026,680 | ---- | C] () -- C:\WINDOWS\Wachlarze.bmp
[2010-09-19 21:59:21 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Nefryt.bmp
[2010-09-19 21:59:21 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rododendron.bmp
[2010-09-19 21:59:21 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Na rybkach.bmp
[2010-09-19 21:59:21 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Kawa.bmp
[2010-09-19 21:59:21 | 000,016,730 | ---- | C] () -- C:\WINDOWS\Puch.bmp
[2010-09-19 21:59:21 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Indiański pled.bmp
[2010-09-19 21:59:20 | 000,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2010-09-19 21:59:20 | 000,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2010-09-19 21:59:20 | 000,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2010-09-19 21:59:20 | 000,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2010-09-19 21:59:20 | 000,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2010-09-19 21:59:20 | 000,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2010-09-19 21:59:20 | 000,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2010-09-19 21:59:20 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Niebieska koronka 16.bmp
[2010-09-19 21:59:19 | 000,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2010-09-19 21:59:18 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2010-09-19 21:59:18 | 000,001,225 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2010-09-19 21:59:17 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2010-09-19 21:59:11 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2009-05-01 00:31:06 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2009-05-01 00:31:06 | 001,507,328 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2009-05-01 00:31:06 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2009-05-01 00:31:06 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2004-07-17 12:36:38 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys

[color=#E56717]========== LOP Check ==========[/color]

[2010-09-20 15:00:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JUDA\Dane aplikacji\Gadu-Gadu

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2010-09-19 22:02:43 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010-09-19 21:58:17 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2001-07-22 00:13:54 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2010-09-19 22:02:43 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010-09-19 22:02:43 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010-09-19 22:02:43 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2004-08-03 23:38:34 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2004-08-03 23:59:54 | 000,250,624 | RHS- | M] () -- C:\ntldr
[2010-09-21 13:18:07 | 1610,612,736 | -HS- | M] () -- C:\pagefile.sys


[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2004-08-04 01:54:52 | 018,789,127 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:agp440.sys
[2008-04-13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\agp440.sys

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2004-08-04 01:54:52 | 018,789,127 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008-04-13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\atapi.sys
[2004-08-03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004-08-03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\i386\atapi.sys

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2001-08-17 23:47:36 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\dllcache\beep.sys
[2001-08-17 23:47:36 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\drivers\beep.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2004-08-04 01:54:52 | 018,789,127 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008-04-13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\cdrom.sys
[2004-08-03 23:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\system32\drivers\cdrom.sys

[color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color]
[2004-08-04 01:43:58 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=05684DE2DA55A04C8AAAB5911AFE7643 -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2004-08-04 01:43:58 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=05684DE2DA55A04C8AAAB5911AFE7643 -- C:\WINDOWS\system32\eventlog.dll
[2008-04-14 19:20:31 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=35FCCFD093582FA9098762E6F84EE119 -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\eventlog.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2008-04-13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\ndis.sys
[2004-08-04 00:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\system32\dllcache\ndis.sys
[2004-08-04 00:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\system32\drivers\ndis.sys

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2004-08-04 01:44:30 | 000,504,832 | ---- | M] (Microsoft Corporation) MD5=0344407089B08548D4FEBA62BB0F32D0 -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2004-08-04 01:44:30 | 000,504,832 | ---- | M] (Microsoft Corporation) MD5=0344407089B08548D4FEBA62BB0F32D0 -- C:\WINDOWS\system32\winlogon.exe
[2008-04-14 19:21:48 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=51FD2E13D723857B9CA239AE77150F48 -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\winlogon.exe
< End of report >
[/log]

adsko
komentarz
komentarz

Ściągnij dr web i nim przeskanuj system.

Tomek01
komentarz
komentarz

Taka rada nic nie warta. DrWeb nie usuwa infekcji z pendrive'a.

Co do otwierania się okna 'otwórz za pomocą' - zastosuj [b][color=#0000CD][url=http://download.bleepingcomputer.com//sUBs/Flash_Disinfector.exe]Flash Disinfector[/url][/color][/b], najlepiej z podpiętym pendrive'm czy innymi pamięciami USB.

W OTL, w oknie Custom scan/fixes wklej:
[code]:Processes
Explorer.exe

:OTL
O33 - MountPoints2\{dc24f120-c434-11df-9c54-806d6172696f}\Shell\explore\Command - "" = hdbifxd.exe
O33 - MountPoints2\{dc24f120-c434-11df-9c54-806d6172696f}\Shell\open\Command - "" = hdbifxd.exe

:Commands
[emptytemp]
[start explorer]
[Reboot][/code]

Klikasz run fix, komputer uruchamia się ponownie.


Wrzuć log z usuwania oraz log RSIT.

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.