Rowaj93 utworzono 6 stycznia 2011 utworzono 6 stycznia 2011 Witam.Mam następujący problem.Zniknęła mi funkcja opcje folderów ,zniknął również edytor rejestru i panel sterowania.Menadżer urządzeń został zablokowany przez admina chcociaz ja go nie blokowałem a jestem admninem.Program operacyjny to windows xp.Skanowałem cały komp i usunąłem wszystkie wirusy ale nadal to samo.Na koncie gość wszystko działa tak samo jak i w trybie awaryjnym.Saknowałem tez komp programem OTL oto logi: [log]OTL logfile created on: 2011-01-06 19:39:22 - Run 2 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 75,00% Memory free 7,00 Gb Paging File | 7,00 Gb Available in Paging File | 89,00% Paging File free Paging file location(s): C:\pagefile.sys 4092 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 100,00 Gb Total Space | 30,65 Gb Free Space | 30,65% Space Free | Partition Type: NTFS Drive D: | 132,88 Gb Total Space | 23,35 Gb Free Space | 17,57% Space Free | Partition Type: NTFS Computer Name: KOMP | User Name: Ja | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-01-06 02:05:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\OTL.exe PRC - [2010-12-12 21:56:47 | 000,910,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010-10-07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2010-07-09 12:52:58 | 002,048,352 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe PRC - [2009-09-03 16:09:17 | 000,908,056 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe PRC - [2009-09-03 16:09:17 | 000,693,016 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgcsrvx.exe PRC - [2009-09-03 16:09:17 | 000,595,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe PRC - [2009-09-03 16:09:17 | 000,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe PRC - [2009-09-03 16:09:15 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe PRC - [2009-04-23 14:51:38 | 000,691,656 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe PRC - [2009-04-23 04:16:44 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin PRC - [2009-04-23 04:15:34 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe PRC - [2009-03-25 00:00:00 | 000,089,928 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\MySecretFolder\MSFMON.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-10-17 15:02:50 | 001,114,112 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files\RALINK\Common\RaUI.exe PRC - [2006-10-26 13:45:04 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WISPTIS.EXE [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-01-06 02:05:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\OTL.exe MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2009-03-25 00:00:00 | 000,094,024 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\MySecretFolder\MSFH32.DLL [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-09-03 16:09:17 | 000,908,056 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc) SRV - [2009-09-03 16:09:15 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd) SRV - [2009-09-03 15:35:03 | 000,307,968 | ---- | M] (TuneUp Software GmbH) [On_Demand | Stopped] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - [2008-12-08 16:15:26 | 000,068,136 | ---- | M] () [Auto | Stopped] -- C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe -- (GEST Service) SRV - [2008-02-27 12:15:14 | 000,028,416 | ---- | M] (TuneUp Software GmbH) [Auto | Running] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\System32\DRIVERS\amdtools.sys -- (amdtools) DRV - [2011-01-06 12:31:53 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2010-10-10 21:41:49 | 000,036,928 | ---- | M] (microOLAP Technologies LTD) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pssdk41.sys -- (PsSdk41) DRV - [2009-11-02 16:33:03 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2009-09-04 14:28:00 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2009-09-03 16:09:25 | 000,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX) DRV - [2009-09-03 16:09:21 | 000,335,240 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86) DRV - [2009-09-03 16:09:21 | 000,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86) DRV - [2009-08-16 23:57:00 | 007,729,568 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2009-03-25 00:00:00 | 000,043,856 | ---- | M] (WinAbility® Software Corporation) [Kernel | Auto | Running] -- C:\Program Files\MySecretFolder\MSF32.SYS -- (MSF32) DRV - [2009-01-13 12:10:08 | 005,015,040 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-12-26 12:56:04 | 000,017,792 | ---- | M] (Avnex) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vcsvad.sys -- (VCSVADHWSer) Avnex Virtual Audio Device (WDM) DRV - [2008-10-30 14:14:20 | 000,117,888 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2008-04-14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2008-04-13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2007-07-28 16:10:18 | 000,483,968 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=13170&l=dis IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKCU\..\URLSearchHook: {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/webhp?hl=pl" FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.8.0.99999 FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5.0.429 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.0.8.0552 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=GLSV5&o=10168&locale=en_US&apn_uid=A5211AFE-5E33-41BD-B705-9CCA437B3D44&apn_ptnrs=GL&apn_sauid=62DACB68-EF60-46C1-9FC7-4397EE0465C0&apn_dtid=YYYYYYYYPL&q=" FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009-12-22 08:08:10 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\Hotbar@Hotbar.com: C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-20 00:51:23 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-12-12 21:56:51 | 000,000,000 | ---D | M] [2009-09-03 15:32:59 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Extensions [2011-01-06 18:48:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions [2009-09-28 21:36:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2009-10-03 12:59:33 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009-09-04 14:34:18 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\DTToolbar@toolbarnet.com [2011-01-06 02:19:36 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com [2011-01-06 02:18:57 | 000,002,567 | ---- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\searchplugins\askcom.xml [2009-09-04 14:34:14 | 000,002,399 | ---- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\searchplugins\daemon-search.xml [2010-04-05 11:36:07 | 000,004,153 | ---- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\searchplugins\youtube.xml [2011-01-06 18:48:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-04-01 07:55:13 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2009-12-22 08:08:10 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG8\FIREFOX [2009-09-03 15:31:10 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-09-15 20:25:26 | 000,070,448 | ---- | M] (Pinball Corporation.) -- C:\Program Files\Mozilla Firefox\plugins\npclntax_HotbarSA.dll [2009-07-30 23:44:16 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-07-30 23:44:16 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-07-30 23:44:16 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-07-30 23:44:16 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-07-30 23:44:16 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-07-30 23:44:16 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-09-19 18:15:46 | 000,331,173 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 11344 more lines... O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [HKLM] C:\WINDOWS\system32\WinDIR\WinLogon.exe (Microsoft Corporation) O4 - HKLM..\Run: [MSF_Monitor] C:\Program Files\MySecretFolder\MSFMON.exe (WinAbility® Software Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O4 - HKCU..\Run: [HKCU] C:\WINDOWS\system32\WinDIR\WinLogon.exe (Microsoft Corporation) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.) O4 - Startup: C:\Documents and Settings\Ja\Menu Start\Programy\Autostart\OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\WinDIR\WinLogon.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRun = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\WinDIR\WinLogon.exe (Microsoft Corporation) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Funkcja Google Sidewiki - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll (Google Inc.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.3.1 217.17.34.10 217.17.34.68 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 () - http://upload.wikimedia.org/math/5/2/c/52ca65dfeea07ae8fc6d3da526163e8b.png O24 - Desktop Components:1 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-03 14:58:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{174dbda4-749d-11df-ae32-0030cd0d3e46}\Shell - "" = AutoRun O33 - MountPoints2\{174dbda4-749d-11df-ae32-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\WD SmartWare.exe -- File not found O33 - MountPoints2\{72b3f470-17e5-11df-abde-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f470-17e5-11df-abde-0030cd0d3e46}\Shell\explore\Command - "" = G:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f470-17e5-11df-abde-0030cd0d3e46}\Shell\open\Command - "" = G:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f471-17e5-11df-abde-0030cd0d3e46}\Shell\AutoRun\command - "" = H:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f471-17e5-11df-abde-0030cd0d3e46}\Shell\explore\Command - "" = H:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f471-17e5-11df-abde-0030cd0d3e46}\Shell\open\Command - "" = H:\22wcb21o.exe -- File not found O33 - MountPoints2\{b3c74a08-b808-11de-a958-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\vlvtdflx.exe -- File not found O33 - MountPoints2\{b3c74a08-b808-11de-a958-0030cd0d3e46}\Shell\open\Command - "" = G:\vlvtdflx.exe -- File not found O33 - MountPoints2\{dd8173d9-f600-11de-aade-0030cd0d3e46}\Shell - "" = AutoRun O33 - MountPoints2\{dd8173d9-f600-11de-aade-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found O33 - MountPoints2\{dd8173da-f600-11de-aade-0030cd0d3e46}\Shell\AutoRun\command - "" = H:\EXPLORER.EXE -- File not found O33 - MountPoints2\{dd8173da-f600-11de-aade-0030cd0d3e46}\Shell\explore\Command - "" = H:\EXPLORER.EXE -- File not found O33 - MountPoints2\{dd8173da-f600-11de-aade-0030cd0d3e46}\Shell\open\Command - "" = H:\EXPLORER.EXE -- File not found O33 - MountPoints2\{ea309802-9803-11df-af02-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\12gn6id2.exe -- File not found O33 - MountPoints2\{ea309802-9803-11df-af02-0030cd0d3e46}\Shell\open\Command - "" = G:\12gn6id2.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-01-06 02:12:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\GlarySoft [2011-01-06 02:09:05 | 000,000,000 | ---D | C] -- C:\Program Files\Ask.com [2011-01-06 02:08:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Glary Utilities [2011-01-06 02:08:49 | 000,000,000 | ---D | C] -- C:\Program Files\Glary Utilities [2011-01-05 01:02:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\jVwTft [2011-01-05 01:02:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\jVwTft [2010-12-27 13:34:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\Media Player Classic [2010-12-20 01:10:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2010-12-20 00:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl [2010-12-20 00:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas [2010-12-20 00:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits [2010-12-20 00:13:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic [2010-12-20 00:10:12 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$ [7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-01-06 19:39:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-01-06 19:01:00 | 000,000,228 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2011-01-06 19:00:00 | 000,000,480 | ---- | M] () -- C:\WINDOWS\tasks\1-Click Maintenance.job [2011-01-06 18:37:21 | 000,249,324 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2011-01-06 18:37:21 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job [2011-01-06 18:37:17 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-01-06 18:37:17 | 000,000,304 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job [2011-01-06 18:29:56 | 069,804,671 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2011-01-06 12:31:51 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-01-06 02:08:52 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Glary Utilities.lnk [2011-01-06 02:02:56 | 000,289,296 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-01-06 01:04:26 | 000,001,882 | -H-- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\Jalog.dat [2011-01-02 00:56:05 | 000,145,408 | ---- | M] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-01-01 17:52:16 | 000,029,337 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\zarowka_300.png [2011-01-01 03:01:07 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010-12-30 13:17:32 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-12-27 23:42:15 | 000,000,428 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\spider.sav [2010-12-21 00:57:50 | 000,502,858 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2010-12-21 00:57:50 | 000,443,588 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010-12-21 00:57:50 | 000,090,072 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2010-12-21 00:57:50 | 000,071,846 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010-12-20 19:27:31 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Windows Media Player.lnk [2010-12-20 01:14:32 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2010-12-20 01:10:53 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-12-20 00:12:59 | 000,251,152 | RHS- | M] () -- C:\ntldr [2010-12-16 21:02:45 | 000,207,686 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\Dok1.docx [2010-12-15 20:37:13 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\sprawdzian.bmp [2010-12-15 20:37:07 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\sprawdzian.bmp [2010-12-08 21:38:40 | 003,053,098 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:36:50 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:34:54 | 000,268,818 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp(1).pdf [2010-12-08 21:28:48 | 000,268,818 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp.pdf [2010-12-08 21:28:19 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\1.gncz.klucz.zroz.gleb.zp.pdf [7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-06 02:09:09 | 000,000,228 | ---- | C] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2011-01-06 02:08:54 | 000,000,304 | ---- | C] () -- C:\WINDOWS\tasks\GlaryInitialize.job [2011-01-06 02:08:52 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\Glary Utilities.lnk [2011-01-01 17:52:15 | 000,029,337 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\zarowka_300.png [2010-12-20 00:16:30 | 000,693,932 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm [2010-12-20 00:16:30 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav [2010-12-20 00:16:30 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav [2010-12-20 00:16:30 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav [2010-12-20 00:16:30 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav [2010-12-20 00:16:30 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav [2010-12-20 00:16:30 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav [2010-12-20 00:16:30 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav [2010-12-20 00:16:30 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav [2010-12-20 00:16:30 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav [2010-12-20 00:16:30 | 000,071,460 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm [2010-12-20 00:16:30 | 000,058,350 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmp.inf [2010-12-20 00:16:30 | 000,027,965 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm [2010-12-20 00:16:30 | 000,013,540 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf [2010-12-20 00:16:30 | 000,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta [2010-12-20 00:16:30 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css [2010-12-20 00:16:30 | 000,001,714 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf [2010-12-20 00:16:30 | 000,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js [2010-12-20 00:16:29 | 000,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv [2010-12-20 00:16:29 | 000,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv [2010-12-20 00:16:29 | 000,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv [2010-12-20 00:16:29 | 000,089,253 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm [2010-12-20 00:16:29 | 000,066,160 | ---- | C] () -- C:\WINDOWS\System32\dllcache\revert.wmz [2010-12-20 00:16:29 | 000,036,644 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf [2010-12-20 00:16:29 | 000,034,548 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf [2010-12-20 00:16:29 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif [2010-12-20 00:16:29 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip [2010-12-20 00:16:29 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif [2010-12-20 00:16:29 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif [2010-12-20 00:16:29 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif [2010-12-20 00:16:29 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif [2010-12-20 00:16:29 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif [2010-12-20 00:16:29 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif [2010-12-20 00:16:29 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif [2010-12-20 00:16:29 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif [2010-12-20 00:16:29 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif [2010-12-20 00:16:29 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif [2010-12-20 00:16:29 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js [2010-12-20 00:16:29 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif [2010-12-20 00:16:29 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif [2010-12-20 00:16:29 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif [2010-12-20 00:16:29 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif [2010-12-20 00:16:29 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif [2010-12-20 00:16:29 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif [2010-12-20 00:16:29 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif [2010-12-20 00:16:29 | 000,001,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf [2010-12-20 00:16:29 | 000,001,482 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst6.wpl [2010-12-20 00:16:29 | 000,001,479 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst5.wpl [2010-12-20 00:16:29 | 000,001,474 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst3.wpl [2010-12-20 00:16:29 | 000,001,471 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst12.wpl [2010-12-20 00:16:29 | 000,001,463 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst4.wpl [2010-12-20 00:16:29 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif [2010-12-20 00:16:29 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif [2010-12-20 00:16:29 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif [2010-12-20 00:16:29 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif [2010-12-20 00:16:29 | 000,001,262 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst1.wpl [2010-12-20 00:16:29 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm [2010-12-20 00:16:29 | 000,001,046 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst7.wpl [2010-12-20 00:16:29 | 000,001,046 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst2.wpl [2010-12-20 00:16:29 | 000,001,041 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst8.wpl [2010-12-20 00:16:29 | 000,000,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst11.wpl [2010-12-20 00:16:29 | 000,000,822 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst10.wpl [2010-12-20 00:16:29 | 000,000,808 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst13.wpl [2010-12-20 00:16:29 | 000,000,792 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst14.wpl [2010-12-20 00:16:29 | 000,000,786 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst9.wpl [2010-12-20 00:16:29 | 000,000,738 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst15.wpl [2010-12-20 00:16:29 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip [2010-12-20 00:16:28 | 000,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv [2010-12-20 00:16:28 | 000,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv [2010-12-20 00:16:28 | 000,184,137 | ---- | C] () -- C:\WINDOWS\System32\dllcache\compact.wmz [2010-12-20 00:16:28 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css [2010-12-20 00:16:28 | 000,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm [2010-12-20 00:16:28 | 000,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js [2010-12-20 00:16:28 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js [2010-12-20 00:16:28 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif [2010-12-20 00:16:28 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif [2010-12-20 00:16:28 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif [2010-12-20 00:16:28 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif [2010-12-20 00:16:28 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif [2010-12-20 00:16:28 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif [2010-12-20 00:13:11 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2010-12-20 00:13:11 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod [2010-12-20 00:13:10 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img [2010-12-16 21:02:45 | 000,207,686 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\Dok1.docx [2010-12-15 20:37:13 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\sprawdzian.bmp [2010-12-15 20:37:07 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\sprawdzian.bmp [2010-12-08 21:36:53 | 003,053,098 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:36:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:34:27 | 000,268,818 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp(1).pdf [2010-12-08 21:28:26 | 000,268,818 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp.pdf [2010-12-08 21:28:19 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\1.gncz.klucz.zroz.gleb.zp.pdf [2010-06-14 21:38:52 | 000,312,920 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2009-12-03 18:45:37 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-11-22 11:58:01 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-11-06 10:58:04 | 000,178,975 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat [2009-09-15 14:44:48 | 000,138,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2009-09-05 18:57:32 | 000,145,408 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-09-04 15:05:54 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-09-04 14:27:59 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-09-03 22:50:46 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009-09-03 15:31:34 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-09-03 15:31:23 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-09-03 15:31:19 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2005-05-27 08:09:21 | 000,001,882 | -H-- | C] () -- C:\Documents and Settings\Ja\Dane aplikacji\Jalog.dat [color=#E56717]========== LOP Check ==========[/color] [2010-04-08 18:00:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Codemasters [2009-09-04 14:34:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2010-08-30 12:17:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2009-12-09 07:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\HotbarSA [2010-11-25 01:01:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2011-01-05 01:02:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\jVwTft [2009-10-08 16:36:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Keronsoft [2010-10-05 15:51:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI [2010-12-29 18:17:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2009-09-03 15:34:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2009-12-31 13:30:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Avnex [2009-09-04 14:35:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\DAEMON Tools Lite [2010-11-05 23:26:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Gadu-Gadu 10 [2011-01-06 02:12:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\GlarySoft [2009-12-08 16:19:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Hotbar [2011-01-06 00:51:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\ipla [2011-01-05 01:02:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\jVwTft [2009-09-15 14:40:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Leadertech [2010-04-12 15:37:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Nowe Gadu-Gadu [2010-08-01 19:50:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\OpenCandy [2010-11-10 00:19:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\OpenFM [2009-09-14 20:30:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\OpenOffice.org [2010-11-25 01:01:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\RDRM [2010-01-28 20:14:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Sports Interactive [2009-09-03 15:35:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\TuneUp Software [2010-07-22 20:39:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\VDownloader [2010-01-26 20:11:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\XnView [2011-01-06 19:00:00 | 000,000,480 | ---- | M] () -- C:\WINDOWS\Tasks\1-Click Maintenance.job [2011-01-06 18:37:17 | 000,000,304 | ---- | M] () -- C:\WINDOWS\Tasks\GlaryInitialize.job [2011-01-06 19:01:00 | 000,000,228 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job [2011-01-06 18:37:21 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job [color=#E56717]========== Purity Check ==========[/color] < End of report > [/log] [log]OTL Extras logfile created on: 2011-01-06 02:06:15 - Run 1 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 79,00% Memory free 7,00 Gb Paging File | 7,00 Gb Available in Paging File | 93,00% Paging File free Paging file location(s): C:\pagefile.sys 4092 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 100,00 Gb Total Space | 30,35 Gb Free Space | 30,35% Space Free | Partition Type: NTFS Drive D: | 132,88 Gb Total Space | 23,35 Gb Free Space | 17,57% Space Free | Partition Type: NTFS Computer Name: KOMP | User Name: Ja | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Przeglądaj w XnView] -- "C:\Program Files\XnView\xnview.exe" "%1" (XnView, http://www.xnview.com) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "UACDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\AVG\AVG8\avgemc.exe" = C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\AVG\AVG8\avgnsx.exe" = C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\Nowe Gadu-Gadu\gg.exe" = C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu beta -- File not found "C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation) "C:\Documents and Settings\Ja\Pulpit\PES 2009\pes2009.exe" = C:\Documents and Settings\Ja\Pulpit\PES 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009 -- (Konami Digital Entertainment Co., Ltd.) "C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "C:\Program Files\Aspyr\Tony Hawks Pro Skater 4\Game\Skate4.exe" = C:\Program Files\Aspyr\Tony Hawks Pro Skater 4\Game\Skate4.exe:*:Enabled:Skate4 -- () "C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe" = C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010 -- File not found "D:\Program Files\2K Sports\NBA 2K10\nba2k10.exe" = D:\Program Files\2K Sports\NBA 2K10\nba2k10.exe:*:Enabled:2K Sports NBA 2K10 -- File not found "D:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe" = D:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010 -- (Konami Digital Entertainment Co., Ltd.) "C:\Documents and Settings\Ja\Pulpit\GRY\pes2010.exe" = C:\Documents and Settings\Ja\Pulpit\GRY\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010 -- (Konami Digital Entertainment Co., Ltd.) "D:\Program Files\KONAMI\Pro Evolution Soccer 2010\Ekstraklasa patch 2010.exe" = D:\Program Files\KONAMI\Pro Evolution Soccer 2010\Ekstraklasa patch 2010.exe:*:Enabled:Pro Evolution Soccer 2010 -- (Konami Digital Entertainment Co., Ltd.) "C:\Documents and Settings\Ja\Pulpit\GRY\Ekstraklasa patch 2010.exe" = C:\Documents and Settings\Ja\Pulpit\GRY\Ekstraklasa patch 2010.exe:*:Enabled:Pro Evolution Soccer 2010 -- File not found "C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\EKSTRAKLASA PATCH 2010 v.1.0\Pro Evolution Soccer 2010\Ekstraklasa patch 2010.exe" = C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\EKSTRAKLASA PATCH 2010 v.1.0\Pro Evolution Soccer 2010\Ekstraklasa patch 2010.exe:*:Enabled:Pro Evolution Soccer 2010 -- (Konami Digital Entertainment Co., Ltd.) "C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe" = C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Nero ShowTime -- (Nero AG) "C:\CS1.6 pod-Bot\hl.exe" = C:\CS1.6 pod-Bot\hl.exe:*:Disabled:Half-Life Launcher -- (Valve) "C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\Google\Google Earth\client\googleearth.exe" = C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth -- (Google) "D:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe" = D:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe:*:Enabled:Pro Evolution Soccer 2011 -- (Konami Digital Entertainment Co., Ltd.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable "{14592A8E-4DA6-4338-A9D5-E16449647EC3}" = Championship Manager 2010 (Patch - Wrzesień) "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java(TM) 6 Update 15 "{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010 "{2AFF2951-86B1-3C53-B34D-B440F11E7D0A}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PLK "{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}" = Microsoft Games for Windows - LIVE "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{42347B75-9660-2DA4-63FD-D35E344E1045}" = Nero 7 Ultra Edition "{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{5888428E-699C-4E71-BF71-94EE06B497DA}" = TuneUp Utilities 2008 "{5A0DDC27-88E5-3CAD-BC3D-28FFD05CA6B9}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PLK "{5CA7899B-FFEC-4254-A05B-448420831F37}" = Championship Manager 2010 "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{7ED169D4-5053-4166-93DF-53B12AE6C539}" = Energy Saver Advance B8.1208.1 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12 "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{E9EA2604-8AC9-47D2-8F4B-6BF60787A357}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{D45F91DE-F0FC-4D5F-9A0C-FDE5B251AAC6}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{95120000-00AF-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (Polish) "{9773450C-E2F3-46C3-9464-1D7EDE5EFB63}" = Pro Evolution Soccer 2011 "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9E35B051-C7EE-47CB-BA43-9A7FFD4E61DE}" = OpenOffice.org 3.1 "{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1" = VDownloader 2.9.435 "{A8DB611A-D80E-450D-85F6-3ACDD164BE31}" = Pro Evolution Soccer 2009 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1045-7B44-A91000000001}" = Adobe Reader 9.1 - Polish "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game "{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser "{E0F07676-2C60-4465-A727-20DE3BFCABAC}" = Tony Hawks Pro Skater 4 "{E8AEA11B-E60A-455E-B008-E4E763604612}" = Browser Configuration Utility "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{FAB1F336-1B7C-4057-A7BC-2922CD82A781}" = Ralink Wireless LAN "18 Wheels of Steel Pedal to the Metal" = 18 Wheels of Steel Pedal to the Metal "Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "ALLPlayer_is1" = ALLPlayer V4.X "ASIO4ALL" = ASIO4ALL "AV Voice Changer Software DIAMOND 6.0" = AV Voice Changer Software DIAMOND 6.0 "AVG8Uninstall" = AVG Free 8.5 "Cool Edit Pro 2.1" = Cool Edit Pro 2.1 "DAEMON Tools Toolbar" = DAEMON Tools Toolbar "ENTERPRISE" = Microsoft Office Enterprise 2007 "ffdshow_is1" = ffdshow [rev 3063] [2009-08-27] "FL Studio 9" = FL Studio 9 "Gadu-Gadu 10" = Gadu-Gadu 10 "Glary Utilities_is1" = Glary Utilities 2.30.0.1066 "Hardcore" = Hardcore "IL Download Manager" = IL Download Manager "ipla" = ipla 2.2.1 "JDownloader" = JDownloader "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "MoorHunt_is1" = MoorHunt 0.6.3.0 "Mozilla Firefox (3.5.16)" = Mozilla Firefox (3.5.16) "MySecretFolder" = MySecretFolder "NVIDIA Drivers" = NVIDIA Drivers "NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager "OpenAL" = OpenAL "Picasa 3" = Picasa 3 "PoiZone" = PoiZone "RealAlt_is1" = Real Alternative 1.9.0 "Sawer" = Sawer "Skoki Narciarskie 2005" = Skoki Narciarskie 2005 "SPOLSZCZENIE PRO EVOLUTION SOCCER 2010" = SPOLSZCZENIE PRO EVOLUTION SOCCER 2010 "TC PowerPack" = TC PowerPack "Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2 "Total Video Converter 3.61_is1" = Total Video Converter 3.61 100319 "Toxic Biohazard" = Toxic Biohazard "WIC" = Windows Imaging Component "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format Runtime "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = Archiwizator WinRAR "XnView_is1" = XnView 1.96.2 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 "Xvid_is1" = Xvid 1.2.2 final uninstall [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2010-12-04 19:27:18 | Computer Name = KOMP | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca notepad.exe, wersja 5.1.2600.2180, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2010-12-14 14:29:58 | Computer Name = KOMP | Source = EventSystem | ID = 4614 Description = System zdarzeń modelu COM+ wykrył niespójność w stanie wewnętrznym. Potwierdzenie "GetLastError() == 122L" zwróciło błąd w wierszu 162 z d:\comxp_sp2\com\com1x\src\events\shared\sectools.cpp. Skontaktuj się z Pomocą techniczną firmy Microsoft i zgłoś ten błą Error - 2010-12-31 07:46:43 | Computer Name = KOMP | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca ALLPlayer.exe, wersja 4.1.6.5, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-01-02 01:35:49 | Computer Name = KOMP | Source = SecurityCenter | ID = 1802 Description = Usługa Centrum zabezpieczeń systemu Windows nie może ustanowić kwerend zdarzeń z WMI, aby monitorować zaporę i program antywirusowy innej firmy. Error - 2011-01-04 20:08:35 | Computer Name = KOMP | Source = crypt32 | ID = 131083 Description = Nie można wyodrębnić głównej listy innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. Error - 2011-01-04 20:08:35 | Computer Name = KOMP | Source = crypt32 | ID = 131083 Description = Nie można wyodrębnić głównej listy innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. Error - 2011-01-04 20:08:35 | Computer Name = KOMP | Source = crypt32 | ID = 131083 Description = Nie można wyodrębnić głównej listy innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. Error - 2011-01-04 20:08:35 | Computer Name = KOMP | Source = crypt32 | ID = 131083 Description = Nie można wyodrębnić głównej listy innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. Error - 2011-01-05 20:03:05 | Computer Name = KOMP | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca SDUpdate.exe, wersja 1.6.0.12, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-01-05 20:03:08 | Computer Name = KOMP | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca SDUpdate.exe, wersja 1.6.0.12, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. [ System Events ] Error - 2011-01-02 01:35:49 | Computer Name = KOMP | Source = DCOM | ID = 10010 Description = Serwer {8BC3F05E-D86B-11D0-A075-00C04FB68820} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error - 2011-01-05 20:31:47 | Computer Name = KOMP | Source = sptd | ID = 262148 Description = Sterownik wykrył błąd wewnętrzny w swoich strukturach danych dla . Error - 2011-01-05 20:32:02 | Computer Name = KOMP | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi netman z argumentami „” w celu uruchomienia serwera: {BA126AE5-2166-11D1-B1D0-00805FC1270E} Error - 2011-01-05 20:32:08 | Computer Name = KOMP | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi EventSystem z argumentami „” w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 2011-01-05 20:32:39 | Computer Name = KOMP | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2011-01-05 20:32:39 | Computer Name = KOMP | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DNS zależy od usługi Sterownik protokołu TCP/IP, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2011-01-05 20:32:39 | Computer Name = KOMP | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi AFD, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2011-01-05 20:32:39 | Computer Name = KOMP | Source = Service Control Manager | ID = 7001 Description = Usługa Usługi IPSEC zależy od usługi Sterownik IPSEC, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2011-01-05 20:32:39 | Computer Name = KOMP | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: AFD AvgLdx86 AvgMfx86 AvgTdiX Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss sptd Tcpip Error - 2011-01-05 20:33:02 | Computer Name = KOMP | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi EventSystem z argumentami „” w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} < End of report > [/log] [color="#FF0000"]//Wstawiam w tagi, ale proszę się douczyć //Tom01[/color] Proszę o proszę o pomoc a za ewentualne naruszenia regulaminu przepraszam jestem tu nowy a to jeszcze dane z raportu extras
Tomek01 komentarz 6 stycznia 2011 komentarz 6 stycznia 2011 Brakuje jeszcze loga RSIT. Zastosuj [b][color=#0000CD][url=http://download.bleepingcomputer.com//sUBs/Flash_Disinfector.exe]Flash Disinfector[/url][/color][/b], najlepiej z podpiętym pendrive'm czy innymi pamięciami USB. W OTL, w oknie Custom scan/fixes wklej: [code]:Processes Explorer.exe :OTL IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=13170&l=dis IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKCU\..\URLSearchHook: {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.) FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.8.0.99999 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.0.8.0552 FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=GLSV5&o=10168&locale=en_US&apn_uid=A5211AFE-5E33-41BD-B705-9CCA437B3D44&apn_ptnrs=GL&apn_sauid=62DACB68-EF60-46C1-9FC7-4397EE0465C0&apn_dtid=YYYYYYYYPL&q=" FF - HKLM\software\mozilla\Firefox\extensions\\Hotbar@Hotbar.com: C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions [2009-09-04 14:34:18 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\DTToolbar@toolbarnet.com [2011-01-06 02:19:36 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com [2011-01-06 02:18:57 | 000,002,567 | ---- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\searchplugins\askcom.xml [2009-09-04 14:34:14 | 000,002,399 | ---- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\searchplugins\daemon-search.xml [2009-09-15 20:25:26 | 000,070,448 | ---- | M] (Pinball Corporation.) -- C:\Program Files\Mozilla Firefox\plugins\npclntax_HotbarSA.dll O1 - Hosts: 11344 more lines... O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()O4 - HKLM..\Run: [HKLM] C:\WINDOWS\system32\WinDIR\WinLogon.exe (Microsoft Corporation) O4 - HKCU..\Run: [HKCU] C:\WINDOWS\system32\WinDIR\WinLogon.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\WinDIR\WinLogon.exe (Microsoft Corporation) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\WinDIR\WinLogon.exe (Microsoft Corporation) O33 - MountPoints2\{72b3f470-17e5-11df-abde-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f470-17e5-11df-abde-0030cd0d3e46}\Shell\explore\Command - "" = G:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f470-17e5-11df-abde-0030cd0d3e46}\Shell\open\Command - "" = G:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f471-17e5-11df-abde-0030cd0d3e46}\Shell\AutoRun\command - "" = H:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f471-17e5-11df-abde-0030cd0d3e46}\Shell\explore\Command - "" = H:\22wcb21o.exe -- File not found O33 - MountPoints2\{72b3f471-17e5-11df-abde-0030cd0d3e46}\Shell\open\Command - "" = H:\22wcb21o.exe -- File not found O33 - MountPoints2\{b3c74a08-b808-11de-a958-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\vlvtdflx.exe -- File not found O33 - MountPoints2\{b3c74a08-b808-11de-a958-0030cd0d3e46}\Shell\open\Command - "" = G:\vlvtdflx.exe -- File not found O33 - MountPoints2\{dd8173d9-f600-11de-aade-0030cd0d3e46}\Shell - "" = AutoRun O33 - MountPoints2\{dd8173d9-f600-11de-aade-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found O33 - MountPoints2\{dd8173da-f600-11de-aade-0030cd0d3e46}\Shell\AutoRun\command - "" = H:\EXPLORER.EXE -- File not found O33 - MountPoints2\{dd8173da-f600-11de-aade-0030cd0d3e46}\Shell\explore\Command - "" = H:\EXPLORER.EXE -- File not found O33 - MountPoints2\{dd8173da-f600-11de-aade-0030cd0d3e46}\Shell\open\Command - "" = H:\EXPLORER.EXE -- File not found O33 - MountPoints2\{ea309802-9803-11df-af02-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\12gn6id2.exe -- File not found O33 - MountPoints2\{ea309802-9803-11df-af02-0030cd0d3e46}\Shell\open\Command - "" = G:\12gn6id2.exe -- File not found :Files C:\Program Files\Ask.com C:\Documents and Settings\Ja\Dane aplikacji\jVwTft C:\Documents and Settings\All Users\Dane aplikacji\jVwTft C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job C:\WINDOWS\tasks\1-Click Maintenance.job C:\WINDOWS\tasks\GlaryInitialize.job C:\Documents and Settings\Ja\Dane aplikacji\Jalog.dat C:\Documents and Settings\Ja\Dane aplikacji\Hotbar C:\22wcb21o.exe C:\vlvtdflx.exe C:\12gn6id2.exe D:\22wcb21o.exe D:\vlvtdflx.exe D:\12gn6id2.exe :Commands [emptytemp] [start explorer] [Reboot][/code] Klikasz run fix, komputer uruchamia się ponownie. Wrzuć log z usuwania oraz nowe logi: OTL i RSIT Wykonaj pełny skan [url=http://www.instalki.pl/programy/download_c/14/155.html][color=#0000CD][b]DrWebCureIt[/b][/color][/url] oraz [url=http://www.instalki.pl/programy/download_c/13/96.html][color=#0000CD][b]Malwarebytes Anti-Malware[/b][/color][/url] i raporty pokaż na forum.
Rowaj93 komentarz 6 stycznia 2011 Autor komentarz 6 stycznia 2011 Oto raport z usuwania: [log]All processes killed ========== PROCESSES ========== Process Explorer.exe killed successfully! ========== OTL ========== HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ deleted successfully. C:\Program Files\Ask.com\GenericAskToolbar.dll moved successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0063BF63-BFFF-4B8F-9D26-4267DF7F17DD}\ deleted successfully. C:\WINDOWS\system32\dvmurl.dll moved successfully. Prefs.js: "Ask.com" removed from browser.search.defaultengine Prefs.js: "Ask.com" removed from browser.search.defaultenginename Prefs.js: "Ask.com" removed from browser.search.order.1 Prefs.js: toolbar@ask.com:3.8.0.99999 removed from extensions.enabledItems Prefs.js: DTToolbar@toolbarnet.com:1.0.8.0552 removed from extensions.enabledItems Prefs.js: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=GLSV5&o=10168&locale=en_US&apn_uid=A5211AFE-5E33-41BD-B705-9CCA437B3D44&apn_ptnrs=GL&apn_sauid=62DACB68-EF60-46C1-9FC7-4397EE0465C0&apn_dtid=YYYYYYYYPL& removed from keyword.URL Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\Hotbar@Hotbar.com deleted successfully. File C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions not found. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\DTToolbar@toolbarnet.com\components\Resources folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\DTToolbar@toolbarnet.com\components folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\DTToolbar@toolbarnet.com\chrome folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\DTToolbar@toolbarnet.com folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\searchplugins folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\logs folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\defaults\preferences folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\defaults folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\datastore folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-06-Jan-2011-01-18-45-GMT folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\chrome\temp folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\chrome\skin folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\chrome\content folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com\chrome folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\toolbar@ask.com folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\searchplugins\askcom.xml moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\searchplugins\daemon-search.xml moved successfully. C:\Program Files\Mozilla Firefox\plugins\npclntax_HotbarSA.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully. File C:\Program Files\Ask.com\GenericAskToolbar.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully. C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. File C:\Program Files\Ask.com\GenericAskToolbar.dll not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. File HKLM..\Run: [HKLM] C:\WINDOWS\system32\WinDIR\WinLogon.exe not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\HKCU deleted successfully. C:\WINDOWS\system32\WinDIR\WinLogon.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\Policies deleted successfully. File C:\WINDOWS\system32\WinDIR\WinLogon.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\Policies deleted successfully. File C:\WINDOWS\system32\WinDIR\WinLogon.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{72b3f470-17e5-11df-abde-0030cd0d3e46}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72b3f470-17e5-11df-abde-0030cd0d3e46}\ not found. File G:\22wcb21o.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{72b3f470-17e5-11df-abde-0030cd0d3e46}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72b3f470-17e5-11df-abde-0030cd0d3e46}\ not found. File G:\22wcb21o.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{72b3f470-17e5-11df-abde-0030cd0d3e46}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72b3f470-17e5-11df-abde-0030cd0d3e46}\ not found. File G:\22wcb21o.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{72b3f471-17e5-11df-abde-0030cd0d3e46}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72b3f471-17e5-11df-abde-0030cd0d3e46}\ not found. File H:\22wcb21o.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{72b3f471-17e5-11df-abde-0030cd0d3e46}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72b3f471-17e5-11df-abde-0030cd0d3e46}\ not found. File H:\22wcb21o.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{72b3f471-17e5-11df-abde-0030cd0d3e46}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72b3f471-17e5-11df-abde-0030cd0d3e46}\ not found. File H:\22wcb21o.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b3c74a08-b808-11de-a958-0030cd0d3e46}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b3c74a08-b808-11de-a958-0030cd0d3e46}\ not found. File G:\vlvtdflx.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b3c74a08-b808-11de-a958-0030cd0d3e46}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b3c74a08-b808-11de-a958-0030cd0d3e46}\ not found. File G:\vlvtdflx.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dd8173d9-f600-11de-aade-0030cd0d3e46}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dd8173d9-f600-11de-aade-0030cd0d3e46}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dd8173d9-f600-11de-aade-0030cd0d3e46}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dd8173d9-f600-11de-aade-0030cd0d3e46}\ not found. File G:\LaunchU3.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dd8173da-f600-11de-aade-0030cd0d3e46}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dd8173da-f600-11de-aade-0030cd0d3e46}\ not found. File H:\EXPLORER.EXE not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dd8173da-f600-11de-aade-0030cd0d3e46}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dd8173da-f600-11de-aade-0030cd0d3e46}\ not found. File H:\EXPLORER.EXE not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dd8173da-f600-11de-aade-0030cd0d3e46}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dd8173da-f600-11de-aade-0030cd0d3e46}\ not found. File H:\EXPLORER.EXE not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea309802-9803-11df-af02-0030cd0d3e46}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ea309802-9803-11df-af02-0030cd0d3e46}\ not found. File G:\12gn6id2.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea309802-9803-11df-af02-0030cd0d3e46}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ea309802-9803-11df-af02-0030cd0d3e46}\ not found. File G:\12gn6id2.exe not found. ========== FILES ========== C:\Program Files\Ask.com folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\jVwTft\evimMzx\1.4.11.2188 folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\jVwTft\evimMzx folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\jVwTft folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\jVwTft\evimMzx\1.4.11.2188 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\jVwTft\evimMzx folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\jVwTft folder moved successfully. C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job moved successfully. C:\WINDOWS\tasks\1-Click Maintenance.job moved successfully. C:\WINDOWS\tasks\GlaryInitialize.job moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Jalog.dat moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\Weather\Weather_XML folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\Weather\WeatherDPA\Weather_XML folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\Weather\WeatherDPA folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\Weather folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\Hotbar\static\DownLoad folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\Hotbar\static\1 folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\Hotbar\static folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\Hotbar\dynamic\ustat folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\Hotbar\dynamic\TooltipXML folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\Hotbar\dynamic folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\Hotbar folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\HostOL\dynamic folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\HostOL folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\HostOI\dynamic folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5\HostOI folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\v3.5 folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar\IESkins folder moved successfully. C:\Documents and Settings\Ja\Dane aplikacji\Hotbar folder moved successfully. File\Folder C:\22wcb21o.exe not found. File\Folder C:\vlvtdflx.exe not found. File\Folder C:\12gn6id2.exe not found. File\Folder D:\22wcb21o.exe not found. File\Folder D:\vlvtdflx.exe not found. File\Folder D:\12gn6id2.exe not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 2549436 bytes ->Temporary Internet Files folder emptied: 1739421 bytes ->FireFox cache emptied: 64405804 bytes ->Flash cache emptied: 11487 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Gość ->Temp folder emptied: 92331389 bytes ->Temporary Internet Files folder emptied: 21529207 bytes ->Java cache emptied: 619424 bytes ->FireFox cache emptied: 117141691 bytes ->Flash cache emptied: 31346 bytes User: HASŁO ->Temp folder emptied: 642003 bytes ->Temporary Internet Files folder emptied: 3628854 bytes ->Flash cache emptied: 593 bytes User: Ja ->Temp folder emptied: 2540894 bytes ->Temporary Internet Files folder emptied: 133932413 bytes ->Java cache emptied: 73529111 bytes ->FireFox cache emptied: 95312149 bytes ->Flash cache emptied: 101518 bytes User: kopa12 ->Temp folder emptied: 641721 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 4941060 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 447501 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2134153 bytes %systemroot%\System32 .tmp files removed: 4859956 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 49152 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 594,00 mb OTL by OldTimer - Version 3.2.20.1 log created on 01062011_234308 Files\Folders moved on Reboot... Registry entries deleted on Reboot... [/log] A to logi z OTL RSIT :http://www.wklejto.pl/85994 i http://www.wklejto.pl/85995 http://www.wklejto.pl/85996
Tomek01 komentarz 6 stycznia 2011 komentarz 6 stycznia 2011 Logi wciąż w nieodpowiedniej formie. Nie doczytałeś Poza tym dałeś mniej istotnego loga z OTL: extras a ja potrzebuję tego drugiego OTL.txt Wstaw jeszcze raz nowe logi OTL i RSIT ( w tagi). Z usuwania już nie musisz.
Rowaj93 komentarz 6 stycznia 2011 Autor komentarz 6 stycznia 2011 sorry ale ja nie bardzo wiem jak się tagi robi
Tomek01 komentarz 6 stycznia 2011 komentarz 6 stycznia 2011 W tej informacji znajdziesz wskazówki ja się robi tagi. http://www.forumpc.pl/index.php?showtopic=104338 Tak gigantyczny hosts z pewnością nie przyspiesza działania Twojego systemu: O1 - Hosts: 11344 more lines... Wejdź w Start/Uruchom, wklejasz : [b]Notepad C:\windows\System32\drivers\etc\Hosts[/b] - enter. Usuwasz wszystko poza prawidłowym wpisem 127.0.0.1 localhost. Zapisujesz zmiany. Pamiętaj aby nie skojarzyć go na stałe z Notatnikiem !
Rowaj93 komentarz 6 stycznia 2011 Autor komentarz 6 stycznia 2011 [log]OTL logfile created on: 2011-01-06 23:57:35 - Run 3 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 76,00% Memory free 7,00 Gb Paging File | 7,00 Gb Available in Paging File | 91,00% Paging File free Paging file location(s): C:\pagefile.sys 4092 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 100,00 Gb Total Space | 31,12 Gb Free Space | 31,12% Space Free | Partition Type: NTFS Drive D: | 132,88 Gb Total Space | 23,35 Gb Free Space | 17,57% Space Free | Partition Type: NTFS Computer Name: KOMP | User Name: Ja | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-01-06 02:05:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\OTL.exe PRC - [2010-12-12 21:56:47 | 000,910,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010-07-09 12:52:58 | 002,048,352 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe PRC - [2009-11-24 10:32:22 | 000,234,792 | ---- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe PRC - [2009-09-03 16:09:17 | 000,908,056 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe PRC - [2009-09-03 16:09:17 | 000,693,016 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgcsrvx.exe PRC - [2009-09-03 16:09:17 | 000,595,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe PRC - [2009-09-03 16:09:17 | 000,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe PRC - [2009-09-03 16:09:15 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe PRC - [2009-04-23 14:51:38 | 000,691,656 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe PRC - [2009-04-23 04:16:44 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin PRC - [2009-04-23 04:15:34 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe PRC - [2009-03-25 00:00:00 | 000,089,928 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\MySecretFolder\MSFMON.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-10-17 15:02:50 | 001,114,112 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files\RALINK\Common\RaUI.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-01-06 02:05:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\OTL.exe MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2009-03-25 00:00:00 | 000,094,024 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\MySecretFolder\MSFH32.DLL [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-09-03 16:09:17 | 000,908,056 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc) SRV - [2009-09-03 16:09:15 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd) SRV - [2009-09-03 15:35:03 | 000,307,968 | ---- | M] (TuneUp Software GmbH) [On_Demand | Stopped] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - [2008-12-08 16:15:26 | 000,068,136 | ---- | M] () [Auto | Stopped] -- C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe -- (GEST Service) SRV - [2008-02-27 12:15:14 | 000,028,416 | ---- | M] (TuneUp Software GmbH) [Auto | Running] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\System32\DRIVERS\amdtools.sys -- (amdtools) DRV - [2011-01-06 23:45:47 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2010-10-10 21:41:49 | 000,036,928 | ---- | M] (microOLAP Technologies LTD) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pssdk41.sys -- (PsSdk41) DRV - [2009-11-02 16:33:03 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2009-09-04 14:28:00 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2009-09-03 16:09:25 | 000,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX) DRV - [2009-09-03 16:09:21 | 000,335,240 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86) DRV - [2009-09-03 16:09:21 | 000,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86) DRV - [2009-08-16 23:57:00 | 007,729,568 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2009-03-25 00:00:00 | 000,043,856 | ---- | M] (WinAbility® Software Corporation) [Kernel | Auto | Running] -- C:\Program Files\MySecretFolder\MSF32.SYS -- (MSF32) DRV - [2009-01-13 12:10:08 | 005,015,040 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-12-26 12:56:04 | 000,017,792 | ---- | M] (Avnex) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vcsvad.sys -- (VCSVADHWSer) Avnex Virtual Audio Device (WDM) DRV - [2008-10-30 14:14:20 | 000,117,888 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2008-04-14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2008-04-13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2007-07-28 16:10:18 | 000,483,968 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "" FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/webhp?hl=pl" FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5.0.429 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009-12-22 08:08:10 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-20 00:51:23 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-12-12 21:56:51 | 000,000,000 | ---D | M] [2009-09-03 15:32:59 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Extensions [2011-01-06 23:46:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions [2009-09-28 21:36:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2009-10-03 12:59:33 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-05 11:36:07 | 000,004,153 | ---- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\searchplugins\youtube.xml [2011-01-06 18:48:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-04-01 07:55:13 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2009-12-22 08:08:10 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG8\FIREFOX [2009-09-03 15:31:10 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-07-30 23:44:16 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-07-30 23:44:16 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-07-30 23:44:16 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-07-30 23:44:16 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-07-30 23:44:16 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-07-30 23:44:16 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-09-19 18:15:46 | 000,331,173 | RH-- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 11344 more lines... O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [HKLM] C:\WINDOWS\System32\WinDIR\WinLogon.exe File not found O4 - HKLM..\Run: [MSF_Monitor] C:\Program Files\MySecretFolder\MSFMON.exe (WinAbility® Software Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.) O4 - Startup: C:\Documents and Settings\Ja\Menu Start\Programy\Autostart\OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 36 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF [binary data] O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Funkcja Google Sidewiki - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll (Google Inc.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.3.1 217.17.34.10 217.17.34.68 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 () - http://upload.wikimedia.org/math/5/2/c/52ca65dfeea07ae8fc6d3da526163e8b.png O24 - Desktop Components:1 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-03 14:58:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-01-06 23:25:30 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2011-01-06 23:25:30 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{174dbda4-749d-11df-ae32-0030cd0d3e46}\Shell - "" = AutoRun O33 - MountPoints2\{174dbda4-749d-11df-ae32-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\WD SmartWare.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-01-06 23:56:45 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro [2011-01-06 23:56:45 | 000,000,000 | ---D | C] -- C:\rsit [2011-01-06 23:43:08 | 000,000,000 | ---D | C] -- C:\_OTL [2011-01-06 23:25:30 | 000,000,000 | RHSD | C] -- C:\autorun.inf [2011-01-06 02:12:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\GlarySoft [2011-01-06 02:08:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Glary Utilities [2011-01-06 02:08:49 | 000,000,000 | ---D | C] -- C:\Program Files\Glary Utilities [2010-12-27 13:34:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\Media Player Classic [2010-12-20 15:08:57 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll [2010-12-20 15:08:57 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll [2010-12-20 15:07:37 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll [2010-12-20 15:01:57 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndproxy.sys [2010-12-20 14:37:56 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll [2010-12-20 14:37:35 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab.exe [2010-12-20 01:10:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2010-12-20 00:16:32 | 001,372,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll [2010-12-20 00:16:32 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6r.dll [2010-12-20 00:16:29 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msaud32.acm [2010-12-20 00:16:29 | 000,086,016 | ---- | C] (Sipro Lab Telecom Inc.) -- C:\WINDOWS\System32\dllcache\sl_anet.acm [2010-12-20 00:16:28 | 000,290,816 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\WINDOWS\System32\dllcache\l3codeca.acm [2010-12-20 00:16:25 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpcdll.dll [2010-12-20 00:16:23 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys [2010-12-20 00:16:23 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smtpapi.dll [2010-12-20 00:16:23 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwnh.dll [2010-12-20 00:16:23 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsdupd.exe [2010-12-20 00:16:22 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll [2010-12-20 00:16:21 | 001,888,992 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3duag.dll [2010-12-20 00:16:21 | 000,870,784 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3d1ag.dll [2010-12-20 00:16:21 | 000,516,768 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ativvaxx.dll [2010-12-20 00:16:21 | 000,377,984 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvaa.dll [2010-12-20 00:16:21 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll [2010-12-20 00:16:21 | 000,229,376 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2cqag.dll [2010-12-20 00:16:21 | 000,201,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvag.dll [2010-12-20 00:16:21 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpqec.dll [2010-12-20 00:16:21 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll [2010-12-20 00:16:21 | 000,032,768 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativtmxx.dll [2010-12-20 00:16:21 | 000,023,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativmvxx.ax [2010-12-20 00:16:21 | 000,009,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativdaxx.ax [2010-12-20 00:16:21 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll [2010-12-20 00:16:20 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll [2010-12-20 00:16:20 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll [2010-12-20 00:16:20 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll [2010-12-20 00:16:20 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfg.dll [2010-12-20 00:16:20 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll [2010-12-20 00:16:20 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll [2010-12-20 00:16:20 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapqec.dll [2010-12-20 00:16:20 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll [2010-12-20 00:16:20 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappprxy.dll [2010-12-20 00:16:20 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll [2010-12-20 00:16:20 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapolqec.dll [2010-12-20 00:16:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3api.dll [2010-12-20 00:16:20 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3dlg.dll [2010-12-20 00:16:19 | 000,032,285 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\hsfcisp2.dll [2010-12-20 00:16:19 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdiultn.dll [2010-12-20 00:16:19 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbhc.dll [2010-12-20 00:16:18 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcex.dll [2010-12-20 00:16:18 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft.managementconsole.dll [2010-12-20 00:16:18 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcfxcommon.dll [2010-12-20 00:16:18 | 000,086,016 | ---- | C] (Conexant) -- C:\WINDOWS\System32\mdmxsdk.dll [2010-12-20 00:16:18 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll [2010-12-20 00:16:18 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe [2010-12-20 00:16:18 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpash.dll [2010-12-20 00:16:18 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnepr.dll [2010-12-20 00:16:17 | 001,737,856 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\mtxparhd.dll [2010-12-20 00:16:17 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napmontr.dll [2010-12-20 00:16:17 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe [2010-12-20 00:16:17 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll [2010-12-20 00:16:17 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onex.dll [2010-12-20 00:16:17 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshavmsg.dll [2010-12-20 00:16:17 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll [2010-12-20 00:16:16 | 000,397,056 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\s3gnb.dll [2010-12-20 00:16:16 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll [2010-12-20 00:16:16 | 000,286,792 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slextspk.dll [2010-12-20 00:16:16 | 000,188,508 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slgen.dll [2010-12-20 00:16:16 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagent.dll [2010-12-20 00:16:16 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qutil.dll [2010-12-20 00:16:16 | 000,073,832 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slcoinst.dll [2010-12-20 00:16:16 | 000,073,796 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slserv.exe [2010-12-20 00:16:16 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcliprov.dll [2010-12-20 00:16:16 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasqec.dll [2010-12-20 00:16:16 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slrundll.exe [2010-12-20 00:16:16 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe [2010-12-20 00:16:15 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll [2010-12-20 00:16:15 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax [2010-12-20 00:16:15 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verclsid.exe [2010-12-20 00:16:14 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll [2010-12-20 00:16:14 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\slrundll.exe [2010-12-20 00:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl [2010-12-20 00:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas [2010-12-20 00:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits [2010-12-20 00:14:29 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dlimport.exe [2010-12-20 00:13:12 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys [2010-12-20 00:13:12 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys [2010-12-20 00:13:12 | 000,043,008 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\System32\drivers\amdagp.sys [2010-12-20 00:13:12 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys [2010-12-20 00:13:12 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys [2010-12-20 00:13:12 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys [2010-12-20 00:13:12 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys [2010-12-20 00:13:12 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys [2010-12-20 00:13:12 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys [2010-12-20 00:13:12 | 000,004,255 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv01nt5.dll [2010-12-20 00:13:12 | 000,003,967 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv02nt5.dll [2010-12-20 00:13:12 | 000,003,775 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv11nt5.dll [2010-12-20 00:13:12 | 000,003,711 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv09nt5.dll [2010-12-20 00:13:12 | 000,003,647 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv07nt5.dll [2010-12-20 00:13:12 | 000,003,615 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv05nt5.dll [2010-12-20 00:13:12 | 000,003,135 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv08nt5.dll [2010-12-20 00:13:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic [2010-12-20 00:13:11 | 000,701,440 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys [2010-12-20 00:13:11 | 000,327,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys [2010-12-20 00:13:11 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys [2010-12-20 00:13:11 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys [2010-12-20 00:13:11 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys [2010-12-20 00:13:11 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys [2010-12-20 00:13:11 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys [2010-12-20 00:13:11 | 000,036,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys [2010-12-20 00:13:11 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys [2010-12-20 00:13:11 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys [2010-12-20 00:13:11 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys [2010-12-20 00:13:11 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys [2010-12-20 00:13:11 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv04nt5.dll [2010-12-20 00:13:11 | 000,021,183 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv01nt5.dll [2010-12-20 00:13:11 | 000,017,279 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv10nt5.dll [2010-12-20 00:13:11 | 000,015,423 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\ch7xxnt5.dll [2010-12-20 00:13:11 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2010-12-20 00:13:11 | 000,014,143 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv06nt5.dll [2010-12-20 00:13:11 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys [2010-12-20 00:13:11 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2010-12-20 00:13:11 | 000,011,359 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv02nt5.dll [2010-12-20 00:13:10 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys [2010-12-20 00:13:10 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys [2010-12-20 00:13:10 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys [2010-12-20 00:13:10 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys [2010-12-20 00:13:10 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys [2010-12-20 00:13:10 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys [2010-12-20 00:13:10 | 000,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys [2010-12-20 00:13:10 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys [2010-12-20 00:13:10 | 000,040,960 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\drivers\sisagp.sys [2010-12-20 00:13:10 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys [2010-12-20 00:13:10 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys [2010-12-20 00:13:10 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys [2010-12-20 00:13:10 | 000,012,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys [2010-12-20 00:13:10 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys [2010-12-20 00:13:10 | 000,003,901 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\siint5.dll [2010-12-20 00:13:09 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys [2010-12-20 00:13:09 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys [2010-12-20 00:13:09 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys [2010-12-20 00:13:09 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys [2010-12-20 00:13:09 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys [2010-12-20 00:13:09 | 000,011,325 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\vchnt5.dll [2010-12-20 00:13:09 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys [2010-12-20 00:10:12 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$ [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-01-06 23:46:04 | 000,249,324 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2011-01-06 23:45:56 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-01-06 23:45:55 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job [2011-01-06 23:45:47 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys [2011-01-06 23:45:45 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-01-06 23:39:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-01-06 18:29:56 | 069,804,671 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2011-01-06 02:08:52 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Glary Utilities.lnk [2011-01-06 02:02:56 | 000,289,296 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-01-02 00:56:05 | 000,145,408 | ---- | M] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-01-01 17:52:16 | 000,029,337 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\zarowka_300.png [2011-01-01 03:01:07 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010-12-30 13:17:32 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-12-27 23:42:15 | 000,000,428 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\spider.sav [2010-12-21 00:57:50 | 000,502,858 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2010-12-21 00:57:50 | 000,443,588 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010-12-21 00:57:50 | 000,090,072 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2010-12-21 00:57:50 | 000,071,846 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010-12-20 19:27:31 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Windows Media Player.lnk [2010-12-20 01:14:32 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2010-12-20 01:10:53 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-12-20 00:12:59 | 000,251,152 | RHS- | M] () -- C:\ntldr [2010-12-16 21:02:45 | 000,207,686 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\Dok1.docx [2010-12-15 20:37:13 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\sprawdzian.bmp [2010-12-15 20:37:07 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\sprawdzian.bmp [2010-12-08 21:38:40 | 003,053,098 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:36:50 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:34:54 | 000,268,818 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp(1).pdf [2010-12-08 21:28:48 | 000,268,818 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp.pdf [2010-12-08 21:28:19 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\1.gncz.klucz.zroz.gleb.zp.pdf [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-06 02:08:52 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\Glary Utilities.lnk [2011-01-01 17:52:15 | 000,029,337 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\zarowka_300.png [2010-12-20 00:16:30 | 000,693,932 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm [2010-12-20 00:16:30 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav [2010-12-20 00:16:30 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav [2010-12-20 00:16:30 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav [2010-12-20 00:16:30 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav [2010-12-20 00:16:30 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav [2010-12-20 00:16:30 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav [2010-12-20 00:16:30 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav [2010-12-20 00:16:30 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav [2010-12-20 00:16:30 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav [2010-12-20 00:16:30 | 000,071,460 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm [2010-12-20 00:16:30 | 000,058,350 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmp.inf [2010-12-20 00:16:30 | 000,027,965 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm [2010-12-20 00:16:30 | 000,013,540 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf [2010-12-20 00:16:30 | 000,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta [2010-12-20 00:16:30 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css [2010-12-20 00:16:30 | 000,001,714 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf [2010-12-20 00:16:30 | 000,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js [2010-12-20 00:16:29 | 000,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv [2010-12-20 00:16:29 | 000,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv [2010-12-20 00:16:29 | 000,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv [2010-12-20 00:16:29 | 000,089,253 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm [2010-12-20 00:16:29 | 000,066,160 | ---- | C] () -- C:\WINDOWS\System32\dllcache\revert.wmz [2010-12-20 00:16:29 | 000,036,644 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf [2010-12-20 00:16:29 | 000,034,548 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf [2010-12-20 00:16:29 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif [2010-12-20 00:16:29 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip [2010-12-20 00:16:29 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif [2010-12-20 00:16:29 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif [2010-12-20 00:16:29 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif [2010-12-20 00:16:29 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif [2010-12-20 00:16:29 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif [2010-12-20 00:16:29 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif [2010-12-20 00:16:29 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif [2010-12-20 00:16:29 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif [2010-12-20 00:16:29 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif [2010-12-20 00:16:29 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif [2010-12-20 00:16:29 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js [2010-12-20 00:16:29 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif [2010-12-20 00:16:29 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif [2010-12-20 00:16:29 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif [2010-12-20 00:16:29 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif [2010-12-20 00:16:29 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif [2010-12-20 00:16:29 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif [2010-12-20 00:16:29 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif [2010-12-20 00:16:29 | 000,001,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf [2010-12-20 00:16:29 | 000,001,482 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst6.wpl [2010-12-20 00:16:29 | 000,001,479 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst5.wpl [2010-12-20 00:16:29 | 000,001,474 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst3.wpl [2010-12-20 00:16:29 | 000,001,471 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst12.wpl [2010-12-20 00:16:29 | 000,001,463 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst4.wpl [2010-12-20 00:16:29 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif [2010-12-20 00:16:29 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif [2010-12-20 00:16:29 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif [2010-12-20 00:16:29 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif [2010-12-20 00:16:29 | 000,001,262 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst1.wpl [2010-12-20 00:16:29 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm [2010-12-20 00:16:29 | 000,001,046 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst7.wpl [2010-12-20 00:16:29 | 000,001,046 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst2.wpl [2010-12-20 00:16:29 | 000,001,041 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst8.wpl [2010-12-20 00:16:29 | 000,000,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst11.wpl [2010-12-20 00:16:29 | 000,000,822 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst10.wpl [2010-12-20 00:16:29 | 000,000,808 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst13.wpl [2010-12-20 00:16:29 | 000,000,792 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst14.wpl [2010-12-20 00:16:29 | 000,000,786 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst9.wpl [2010-12-20 00:16:29 | 000,000,738 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst15.wpl [2010-12-20 00:16:29 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip [2010-12-20 00:16:28 | 000,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv [2010-12-20 00:16:28 | 000,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv [2010-12-20 00:16:28 | 000,184,137 | ---- | C] () -- C:\WINDOWS\System32\dllcache\compact.wmz [2010-12-20 00:16:28 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css [2010-12-20 00:16:28 | 000,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm [2010-12-20 00:16:28 | 000,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js [2010-12-20 00:16:28 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js [2010-12-20 00:16:28 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif [2010-12-20 00:16:28 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif [2010-12-20 00:16:28 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif [2010-12-20 00:16:28 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif [2010-12-20 00:16:28 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif [2010-12-20 00:16:28 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif [2010-12-20 00:13:11 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2010-12-20 00:13:11 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod [2010-12-20 00:13:10 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img [2010-12-16 21:02:45 | 000,207,686 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\Dok1.docx [2010-12-15 20:37:13 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\sprawdzian.bmp [2010-12-15 20:37:07 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\sprawdzian.bmp [2010-12-08 21:36:53 | 003,053,098 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:36:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:34:27 | 000,268,818 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp(1).pdf [2010-12-08 21:28:26 | 000,268,818 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp.pdf [2010-12-08 21:28:19 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\1.gncz.klucz.zroz.gleb.zp.pdf [2010-06-14 21:38:52 | 000,312,920 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2009-12-03 18:45:37 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-11-22 11:58:01 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-11-06 10:58:04 | 000,178,975 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat [2009-09-15 14:44:48 | 000,138,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2009-09-05 18:57:32 | 000,145,408 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-09-04 15:05:54 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-09-04 14:27:59 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-09-03 22:50:46 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009-09-03 15:31:34 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-09-03 15:31:23 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-09-03 15:31:19 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll < End of report > [/log]proszę i dzieki za link[log] Logfile of random's system information tool 1.08 (written by random/random) Run by Ja at 2011-01-07 00:44:32 Microsoft Windows XP Professional Dodatek Service Pack 3 System drive C: has 32 GB (31%) free of 102 GB Total RAM: 3582 MB (76% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 00:44:44, on 2011-01-07 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\PROGRA~1\MYSECR~1\MSFMON.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\RALINK\Common\RaUI.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\notepad.exe C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\RSIT.exe C:\Program Files\trend micro\Ja.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [MSF_Monitor] C:\PROGRA~1\MYSECR~1\MSFMON.exe /Start O4 - HKLM\..\Run: [HKLM] C:\WINDOWS\system32\WinDIR\WinLogon.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\RunOnce: [WiseStubReboot] MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I "C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MSI" TRANSFORMS="C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MST" WISE_SETUP_EXE_PATH="c:\nvidia\displaydriver\190.62\international\PhysX_9.09.0814_SystemSoftware.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing) O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe O23 - Service: Usługa Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe O24 - Desktop Component 0: (no name) - http://upload.wikimedia.org/math/5/2/c/52ca65dfeea07ae8fc6d3da526163e8b.png -- End of file - 8628 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job C:\WINDOWS\tasks\WGASetup.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-12-12 1111320] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}] Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-10-24 297648] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-10-24 843832] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-09-03 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-09-03 73728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-10-24 297648] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-01-13 18084864] "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-09-03 149280] "nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2009-08-12 1657376] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-08-17 13877248] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-08-17 86016] "AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2010-07-09 2048352] "GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072] "NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648] "MSF_Monitor"=C:\PROGRA~1\MYSECR~1\MSFMON.exe [2009-03-25 89928] "HKLM"=C:\WINDOWS\system32\WinDIR\WinLogon.exe [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-03-09 26100520] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-09-14 39408] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "WiseStubReboot"=MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MSI TRANSFORMS=C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MST WISE_SETUP_EXE_PATH=c:\nvidia\displaydriver\190.62\international\PhysX_9.09.0814_SystemSoftware.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe [2009-06-04 869888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe C:\Documents and Settings\Ja\Menu Start\Programy\Autostart OpenOffice.org 3.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter] C:\WINDOWS\system32\avgrsstx.dll [2009-09-03 11952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableLUA"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=36 "NoControlPanel"=1 "NoDriveAutoRun"=0xFFFFFFFF [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe" "C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe" "C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe" "C:\Program Files\Nowe Gadu-Gadu\gg.exe"="C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu beta" "C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox" "C:\Documents and Settings\Ja\Pulpit\PES 2009\pes2009.exe"="C:\Documents and Settings\Ja\Pulpit\PES 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009" "C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Program Files\Aspyr\Tony Hawks Pro Skater 4\Game\Skate4.exe"="C:\Program Files\Aspyr\Tony Hawks Pro Skater 4\Game\Skate4.exe:*:Enabled:Skate4" "C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010" "C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager" "D:\Program Files\2K Sports\NBA 2K10\nba2k10.exe"="D:\Program Files\2K Sports\NBA 2K10\nba2k10.exe:*:Enabled:2K Sports NBA 2K10" "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove" "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote" "D:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe"="D:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010" "C:\Documents and Settings\Ja\Pulpit\GRY\pes2010.exe"="C:\Documents and Settings\Ja\Pulpit\GRY\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010" "D:\Program Files\KONAMI\Pro Evolution Soccer 2010\Ekstraklasa patch 2010.exe"="D:\Program Files\KONAMI\Pro Evolution Soccer 2010\Ekstraklasa patch 2010.exe:*:Enabled:Pro Evolution Soccer 2010" "C:\Documents and Settings\Ja\Pulpit\GRY\Ekstraklasa patch 2010.exe"="C:\Documents and Settings\Ja\Pulpit\GRY\Ekstraklasa patch 2010.exe:*:Enabled:Pro Evolution Soccer 2010" "C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\EKSTRAKLASA PATCH 2010 v.1.0\Pro Evolution Soccer 2010\Ekstraklasa patch 2010.exe"="C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\EKSTRAKLASA PATCH 2010 v.1.0\Pro Evolution Soccer 2010\Ekstraklasa patch 2010.exe:*:Enabled:Pro Evolution Soccer 2010" "C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Nero ShowTime" "C:\CS1.6 pod-Bot\hl.exe"="C:\CS1.6 pod-Bot\hl.exe:*:Disabled:Half-Life Launcher" "C:\Program Files\Gadu-Gadu 10\gg.exe"="C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10" "C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth" "D:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe"="D:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe:*:Enabled:Pro Evolution Soccer 2011" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" ======File associations====== .reg - open - "regedit.exe" "%1" ======List of files/folders created in the last 1 months====== 2011-01-07 00:07:07 ----D---- C:\Documents and Settings\Ja\Dane aplikacji\Malwarebytes 2011-01-07 00:07:02 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2011-01-07 00:07:01 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes 2011-01-07 00:06:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2011-01-07 00:06:59 ----A---- C:\WINDOWS\system32\drivers\mbam.sys 2011-01-06 23:56:45 ----D---- C:\rsit 2011-01-06 23:56:45 ----D---- C:\Program Files\trend micro 2011-01-06 23:43:08 ----D---- C:\_OTL 2011-01-06 23:25:30 ----RASHD---- C:\autorun.inf 2011-01-06 02:12:28 ----D---- C:\Documents and Settings\Ja\Dane aplikacji\GlarySoft 2011-01-06 02:08:49 ----D---- C:\Program Files\Glary Utilities 2011-01-01 03:00:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2360131$ 2010-12-27 13:34:49 ----D---- C:\Documents and Settings\Ja\Dane aplikacji\Media Player Classic 2010-12-21 00:59:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$ 2010-12-21 00:59:53 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$ 2010-12-21 00:59:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$ 2010-12-21 00:59:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$ 2010-12-21 00:59:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$ 2010-12-21 00:59:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$ 2010-12-21 00:59:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$ 2010-12-21 00:59:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$ 2010-12-21 00:59:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$ 2010-12-21 00:59:17 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$ 2010-12-21 00:59:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$ 2010-12-21 00:59:08 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$ 2010-12-21 00:59:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$ 2010-12-21 00:59:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$ 2010-12-21 00:58:56 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$ 2010-12-21 00:58:51 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$ 2010-12-21 00:58:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$ 2010-12-21 00:58:39 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$ 2010-12-21 00:58:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$ 2010-12-21 00:58:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$ 2010-12-21 00:58:06 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$ 2010-12-21 00:58:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$ 2010-12-21 00:54:12 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$ 2010-12-21 00:54:08 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$ 2010-12-21 00:54:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$ 2010-12-21 00:53:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$ 2010-12-21 00:53:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$ 2010-12-21 00:53:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2416400$ 2010-12-21 00:53:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$ 2010-12-21 00:53:27 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$ 2010-12-21 00:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$ 2010-12-21 00:52:46 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$ 2010-12-21 00:52:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$ 2010-12-21 00:52:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$ 2010-12-20 01:10:26 ----D---- C:\WINDOWS\Prefetch 2010-12-20 01:06:33 ----HDC---- C:\WINDOWS\$NtUninstallKB982381$ 2010-12-20 01:05:57 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$ 2010-12-20 01:05:22 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$ 2010-12-20 01:04:40 ----HDC---- C:\WINDOWS\$NtUninstallKB980182$ 2010-12-20 01:04:00 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$ 2010-12-20 01:03:23 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$ 2010-12-20 01:02:47 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$ 2010-12-20 01:02:11 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$ 2010-12-20 01:01:36 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$ 2010-12-20 01:01:02 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$ 2010-12-20 01:00:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$ 2010-12-20 00:59:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$ 2010-12-20 00:59:13 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$ 2010-12-20 00:58:39 ----HDC---- C:\WINDOWS\$NtUninstallKB978207$ 2010-12-20 00:58:04 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$ 2010-12-20 00:57:29 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$ 2010-12-20 00:56:50 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$ 2010-12-20 00:56:13 ----HDC---- C:\WINDOWS\$NtUninstallKB976749$ 2010-12-20 00:55:36 ----HDC---- C:\WINDOWS\$NtUninstallKB976325$ 2010-12-20 00:54:57 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$ 2010-12-20 00:54:23 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$ 2010-12-20 00:53:48 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$ 2010-12-20 00:53:13 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$ 2010-12-20 00:52:39 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$ 2010-12-20 00:52:05 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$ 2010-12-20 00:51:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974455$ 2010-12-20 00:50:44 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$ 2010-12-20 00:50:06 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$ 2010-12-20 00:49:33 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$ 2010-12-20 00:48:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$ 2010-12-20 00:48:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$ 2010-12-20 00:47:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$ 2010-12-20 00:47:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$ 2010-12-20 00:46:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$ 2010-12-20 00:45:58 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$ 2010-12-20 00:45:20 ----HDC---- C:\WINDOWS\$NtUninstallKB982381_1$ 2010-12-20 00:44:41 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$ 2010-12-20 00:44:05 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$ 2010-12-20 00:43:29 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$ 2010-12-20 00:42:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$ 2010-12-20 00:42:22 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$ 2010-12-20 00:41:47 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$ 2010-12-20 00:41:11 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$ 2010-12-20 00:40:34 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$ 2010-12-20 00:39:59 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$ 2010-12-20 00:39:19 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$ 2010-12-20 00:38:42 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$ 2010-12-20 00:38:06 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$ 2010-12-20 00:37:30 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$ 2010-12-20 00:36:34 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$ 2010-12-20 00:35:48 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$ 2010-12-20 00:35:15 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$ 2010-12-20 00:34:37 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$ 2010-12-20 00:34:07 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$ 2010-12-20 00:33:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$ 2010-12-20 00:33:02 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$ 2010-12-20 00:32:28 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$ 2010-12-20 00:31:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$ 2010-12-20 00:31:23 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$ 2010-12-20 00:30:52 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$ 2010-12-20 00:30:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$ 2010-12-20 00:29:48 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$ 2010-12-20 00:29:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$ 2010-12-20 00:28:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$ 2010-12-20 00:28:04 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$ 2010-12-20 00:27:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$ 2010-12-20 00:26:58 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$ 2010-12-20 00:26:26 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_1$ 2010-12-20 00:25:49 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$ 2010-12-20 00:25:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$ 2010-12-20 00:24:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$ 2010-12-20 00:24:13 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$ 2010-12-20 00:23:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$ 2010-12-20 00:22:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$ 2010-12-20 00:22:25 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$ 2010-12-20 00:21:52 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$ 2010-12-20 00:21:15 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$ 2010-12-20 00:20:43 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$ 2010-12-20 00:20:10 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$ 2010-12-20 00:19:37 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$ 2010-12-20 00:18:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$ 2010-12-20 00:16:23 ----N---- C:\WINDOWS\system32\smtpapi.dll 2010-12-20 00:16:23 ----N---- C:\WINDOWS\system32\rwnh.dll 2010-12-20 00:16:23 ----N---- C:\WINDOWS\system32\drivers\irbus.sys 2010-12-20 00:16:23 ----N---- C:\WINDOWS\system32\comsdupd.exe 2010-12-20 00:16:22 ----N---- C:\WINDOWS\system32\aaclient.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\dimsroam.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\dimsntfy.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\dhcpqec.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\credssp.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\bitsprx4.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\azroles.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\ativvaxx.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\ativtmxx.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\ati3duag.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\ati3d1ag.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\ati2dvag.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\ati2dvaa.dll 2010-12-20 00:16:21 ----N---- C:\WINDOWS\system32\ati2cqag.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\eapsvc.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\eapqec.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\eappprxy.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\eapphost.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\eappgnui.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\eappcfg.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\eapp3hst.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\eapolqec.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\dot3ui.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\dot3svc.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\dot3msm.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\dot3dlg.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\dot3cfg.dll 2010-12-20 00:16:20 ----N---- C:\WINDOWS\system32\dot3api.dll 2010-12-20 00:16:19 ----N---- C:\WINDOWS\system32\kbdiultn.dll 2010-12-20 00:16:19 ----N---- C:\WINDOWS\system32\kbdbhc.dll 2010-12-20 00:16:19 ----N---- C:\WINDOWS\system32\hsfcisp2.dll 2010-12-20 00:16:18 ----N---- C:\WINDOWS\system32\mmcperf.exe 2010-12-20 00:16:18 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll 2010-12-20 00:16:18 ----N---- C:\WINDOWS\system32\mmcex.dll 2010-12-20 00:16:18 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll 2010-12-20 00:16:18 ----N---- C:\WINDOWS\system32\mdmxsdk.dll 2010-12-20 00:16:18 ----N---- C:\WINDOWS\system32\l2gpstore.dll 2010-12-20 00:16:18 ----N---- C:\WINDOWS\system32\kmsvc.dll 2010-12-20 00:16:18 ----N---- C:\WINDOWS\system32\kbdpash.dll 2010-12-20 00:16:18 ----N---- C:\WINDOWS\system32\kbdnepr.dll 2010-12-20 00:16:17 ----N---- C:\WINDOWS\system32\onex.dll 2010-12-20 00:16:17 ----N---- C:\WINDOWS\system32\napstat.exe 2010-12-20 00:16:17 ----N---- C:\WINDOWS\system32\napmontr.dll 2010-12-20 00:16:17 ----N---- C:\WINDOWS\system32\napipsec.dll 2010-12-20 00:16:17 ----N---- C:\WINDOWS\system32\mtxparhd.dll 2010-12-20 00:16:17 ----N---- C:\WINDOWS\system32\msshavmsg.dll 2010-12-20 00:16:17 ----N---- C:\WINDOWS\system32\mssha.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\slserv.exe 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\slrundll.exe 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\slgen.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\slextspk.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\slcoinst.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\setupn.exe 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\s3gnb.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\rhttpaa.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\rasqec.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\qutil.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\qcliprov.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\qagentrt.dll 2010-12-20 00:16:16 ----N---- C:\WINDOWS\system32\qagent.dll 2010-12-20 00:16:15 ----N---- C:\WINDOWS\system32\verclsid.exe 2010-12-20 00:16:15 ----N---- C:\WINDOWS\system32\tspkg.dll 2010-12-20 00:16:15 ----N---- C:\WINDOWS\system32\tsgqec.dll 2010-12-20 00:16:14 ----N---- C:\WINDOWS\system32\xmllite.dll 2010-12-20 00:16:14 ----N---- C:\WINDOWS\system32\wlanapi.dll 2010-12-20 00:16:14 ----N---- C:\WINDOWS\slrundll.exe 2010-12-20 00:16:13 ----D---- C:\WINDOWS\system32\pl 2010-12-20 00:16:13 ----D---- C:\WINDOWS\system32\bits 2010-12-20 00:16:13 ----D---- C:\WINDOWS\l2schemas 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\agp440.sys 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll 2010-12-20 00:13:12 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll 2010-12-20 00:13:12 ----D---- C:\WINDOWS\network diagnostic 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\hidir.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys 2010-12-20 00:13:11 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\smbali.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\siint5.dll 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\recagent.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys 2010-12-20 00:13:10 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll 2010-12-20 00:13:09 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys 2010-12-20 00:10:12 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$ ======List of files/folders modified in the last 1 months====== 2011-01-07 00:34:44 ----D---- C:\WINDOWS\system32\drivers\etc 2011-01-07 00:17:39 ----D---- C:\Program Files\Mozilla Firefox 2011-01-07 00:17:14 ----D---- C:\WINDOWS\system32\CatRoot2 2011-01-07 00:17:12 ----D---- C:\WINDOWS\system32\drivers 2011-01-07 00:16:44 ----D---- C:\Documents and Settings\Ja\Dane aplikacji\Skype 2011-01-07 00:16:24 ----D---- C:\WINDOWS\Temp 2011-01-07 00:15:57 ----SHD---- C:\WINDOWS\CSC 2011-01-07 00:06:59 ----RD---- C:\Program Files 2011-01-07 00:06:36 ----D---- C:\Documents and Settings\Ja\Dane aplikacji\skypePM 2011-01-06 23:44:39 ----A---- C:\WINDOWS\SchedLgU.Txt 2011-01-06 23:44:30 ----SHD---- C:\RECYCLER 2011-01-06 23:44:30 ----D---- C:\WINDOWS\system32 2011-01-06 23:44:30 ----D---- C:\WINDOWS 2011-01-06 23:43:19 ----SD---- C:\WINDOWS\Tasks 2011-01-06 23:43:18 ----RSHD---- C:\WINDOWS\system32\WinDIR 2011-01-06 18:38:20 ----HD---- C:\$AVG8.VAULT$ 2011-01-06 18:30:07 ----D---- C:\WINDOWS\system32\drivers\Avg 2011-01-06 02:35:26 ----A---- C:\WINDOWS\ntbtlog.txt 2011-01-06 02:09:10 ----SHD---- C:\WINDOWS\Installer 2011-01-06 00:51:34 ----D---- C:\Documents and Settings\Ja\Dane aplikacji\ipla 2011-01-05 19:43:22 ----RSHDC---- C:\WINDOWS\system32\dllcache 2011-01-05 19:43:22 ----HD---- C:\WINDOWS\inf 2011-01-05 19:43:21 ----D---- C:\WINDOWS\system32\CatRoot 2011-01-01 22:07:56 ----D---- C:\Temp 2011-01-01 22:05:58 ----A---- C:\WINDOWS\win.ini 2011-01-01 22:05:58 ----A---- C:\WINDOWS\system.ini 2011-01-01 03:01:07 ----A---- C:\WINDOWS\imsins.BAK 2010-12-31 22:33:13 ----HD---- C:\WINDOWS\$hf_mig$ 2010-12-30 13:17:32 ----A---- C:\WINDOWS\NeroDigital.ini 2010-12-29 18:17:09 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM 2010-12-28 22:48:41 ----D---- C:\Documents and Settings\Ja\Dane aplikacji\teamspeak2 2010-12-21 09:04:22 ----RSD---- C:\WINDOWS\assembly 2010-12-21 09:00:06 ----D---- C:\WINDOWS\Microsoft.NET 2010-12-21 00:59:40 ----D---- C:\WINDOWS\WinSxS 2010-12-21 00:57:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2010-12-21 00:53:29 ----D---- C:\Program Files\Movie Maker 2010-12-21 00:52:43 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$ 2010-12-21 00:52:39 ----D---- C:\Program Files\Outlook Express 2010-12-20 01:14:46 ----A---- C:\WINDOWS\OEWABLog.txt 2010-12-20 01:10:47 ----A---- C:\WINDOWS\setuplog.txt 2010-12-20 01:10:08 ----D---- C:\WINDOWS\system32\Setup 2010-12-20 01:10:08 ----D---- C:\WINDOWS\AppPatch 2010-12-20 01:10:08 ----D---- C:\Program Files\Windows Media Player 2010-12-20 01:10:07 ----D---- C:\WINDOWS\system32\wbem 2010-12-20 01:10:06 ----RSD---- C:\WINDOWS\Fonts 2010-12-20 01:08:59 ----D---- C:\WINDOWS\security 2010-12-20 00:20:54 ----D---- C:\Program Files\Messenger 2010-12-20 00:16:31 ----D---- C:\WINDOWS\Help 2010-12-20 00:16:23 ----D---- C:\WINDOWS\system32\inetsrv 2010-12-20 00:16:23 ----D---- C:\WINDOWS\ehome 2010-12-20 00:16:22 ----D---- C:\WINDOWS\ime 2010-12-20 00:16:14 ----D---- C:\WINDOWS\system32\usmt 2010-12-20 00:16:14 ----D---- C:\WINDOWS\system32\pl-PL 2010-12-20 00:16:13 ----D---- C:\WINDOWS\PeerNet 2010-12-20 00:16:13 ----D---- C:\Program Files\Internet Explorer 2010-12-20 00:14:41 ----D---- C:\WINDOWS\ServicePackFiles 2010-12-20 00:14:36 ----D---- C:\WINDOWS\system32\Restore 2010-12-20 00:14:36 ----D---- C:\WINDOWS\system32\npp 2010-12-20 00:14:35 ----D---- C:\WINDOWS\srchasst 2010-12-20 00:14:35 ----D---- C:\WINDOWS\msagent 2010-12-20 00:14:34 ----D---- C:\Program Files\NetMeeting 2010-12-20 00:14:33 ----D---- C:\WINDOWS\system32\Com 2010-12-20 00:14:32 ----D---- C:\Program Files\Windows NT 2010-12-20 00:14:29 ----D---- C:\Program Files\Common Files\System 2010-12-20 00:14:17 ----D---- C:\WINDOWS\system32\oobe 2010-12-20 00:14:16 ----D---- C:\WINDOWS\system 2010-12-20 00:11:52 ----D---- C:\WINDOWS\system32\ReinstallBackups 2010-12-18 06:35:31 ----D---- C:\Program Files\Microsoft Silverlight 2010-12-16 00:46:42 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help 2010-12-16 00:43:17 ----A---- C:\WINDOWS\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944] R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-09-04 721904] R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-09-03 335240] R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-09-03 27784] R1 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-09-03 108552] R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448] R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-11-28 21419] R2 MSF32;MSF32; \??\C:\Program Files\MySecretFolder\MSF32.SYS [] R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys [] R3 HDAudBus;Sterownik magistrali Microsoft UAA dla High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-01-13 5015040] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-08-16 7729568] R3 RT61;Ralink RT61 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2007-07-28 483968] R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608] R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\WINDOWS\system32\DRIVERS\vcsvad.sys [2008-12-26 17792] S1 amdtools;AMD Special Tools Driver; C:\WINDOWS\system32\DRIVERS\amdtools.sys [] S3 agnra4pa;agnra4pa; C:\WINDOWS\system32\drivers\agnra4pa.sys [] S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-11-02 25280] S3 HidUsb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368] S3 PsSdk41;PsSdk41; \??\C:\WINDOWS\system32\Drivers\pssdk41.sys [] S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888] S3 usbaudio;Sterownik audio USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032] S3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128] S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2004-08-11 18944] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2009-09-03 908056] R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-09-03 297752] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-09-03 153376] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-08-17 168004] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912] R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] S2 GEST Service;GEST Service for program management.; C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe [2008-12-08 68136] S2 gupdate;Usługa Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-29 135664] S3 aspnet_state;Usuga stanu ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-09-14 182768] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-09-03 307968] S4 NetTcpPortSharing;Usługa udostępniania portów Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF----------------- [/log]
Tomek01 komentarz 7 stycznia 2011 komentarz 7 stycznia 2011 Do notatnika systemowego wklej taki tekst: [code]Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "SuperHidden"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "Hidden"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "ShowSuperHidden"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] "CheckedValue"=dword:00000001 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] @="" [/code] Plik zapisz jako/zmień rozszerzenie na wszystkie pliki/zapisz jako fix.reg/dwuklikiem dodajesz do rejestru. Log OTL pokaż po wykonaniu akcji z Hosts'em.
Rowaj93 komentarz 7 stycznia 2011 Autor komentarz 7 stycznia 2011 [log] OTL logfile created on: 2011-01-07 11:38:19 - Run 5 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 73,00% Memory free 7,00 Gb Paging File | 7,00 Gb Available in Paging File | 90,00% Paging File free Paging file location(s): C:\pagefile.sys 4092 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 100,00 Gb Total Space | 30,91 Gb Free Space | 30,91% Space Free | Partition Type: NTFS Drive D: | 132,88 Gb Total Space | 23,35 Gb Free Space | 17,57% Space Free | Partition Type: NTFS Computer Name: KOMP | User Name: Ja | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-01-06 02:05:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\OTL.exe PRC - [2010-12-12 21:56:47 | 000,910,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010-10-07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2010-07-09 12:52:58 | 002,048,352 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe PRC - [2009-11-24 10:32:22 | 000,234,792 | ---- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe PRC - [2009-09-03 16:09:17 | 000,908,056 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe PRC - [2009-09-03 16:09:17 | 000,693,016 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgcsrvx.exe PRC - [2009-09-03 16:09:17 | 000,595,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe PRC - [2009-09-03 16:09:17 | 000,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe PRC - [2009-09-03 16:09:15 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe PRC - [2009-04-23 14:51:38 | 000,691,656 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe PRC - [2009-04-23 04:16:44 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin PRC - [2009-04-23 04:15:34 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe PRC - [2009-03-25 00:00:00 | 000,089,928 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\MySecretFolder\MSFMON.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-10-17 15:02:50 | 001,114,112 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files\RALINK\Common\RaUI.exe PRC - [2006-10-26 13:45:04 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WISPTIS.EXE [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-01-06 02:05:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Moje dokumenty\Pobieranie\OTL.exe MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2009-03-25 00:00:00 | 000,094,024 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\MySecretFolder\MSFH32.DLL [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-09-03 16:09:17 | 000,908,056 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc) SRV - [2009-09-03 16:09:15 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd) SRV - [2009-09-03 15:35:03 | 000,307,968 | ---- | M] (TuneUp Software GmbH) [On_Demand | Stopped] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - [2008-12-08 16:15:26 | 000,068,136 | ---- | M] () [Auto | Stopped] -- C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe -- (GEST Service) SRV - [2008-02-27 12:15:14 | 000,028,416 | ---- | M] (TuneUp Software GmbH) [Auto | Running] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\System32\DRIVERS\amdtools.sys -- (amdtools) DRV - [2011-01-07 11:12:42 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2010-10-10 21:41:49 | 000,036,928 | ---- | M] (microOLAP Technologies LTD) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pssdk41.sys -- (PsSdk41) DRV - [2009-11-02 16:33:03 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2009-09-04 14:28:00 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2009-09-03 16:09:25 | 000,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX) DRV - [2009-09-03 16:09:21 | 000,335,240 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86) DRV - [2009-09-03 16:09:21 | 000,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86) DRV - [2009-08-16 23:57:00 | 007,729,568 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2009-03-25 00:00:00 | 000,043,856 | ---- | M] (WinAbility® Software Corporation) [Kernel | Auto | Running] -- C:\Program Files\MySecretFolder\MSF32.SYS -- (MSF32) DRV - [2009-01-13 12:10:08 | 005,015,040 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-12-26 12:56:04 | 000,017,792 | ---- | M] (Avnex) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vcsvad.sys -- (VCSVADHWSer) Avnex Virtual Audio Device (WDM) DRV - [2008-10-30 14:14:20 | 000,117,888 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2008-04-14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2008-04-13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2007-07-28 16:10:18 | 000,483,968 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "" FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/webhp?hl=pl" FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5.0.429 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009-12-22 08:08:10 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-20 00:51:23 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-12-12 21:56:51 | 000,000,000 | ---D | M] [2009-09-03 15:32:59 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Extensions [2011-01-06 23:46:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions [2009-09-28 21:36:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2009-10-03 12:59:33 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-05 11:36:07 | 000,004,153 | ---- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\gzwywhh6.default\searchplugins\youtube.xml [2011-01-06 18:48:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-04-01 07:55:13 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2009-12-22 08:08:10 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG8\FIREFOX [2009-09-03 15:31:10 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-07-30 23:44:16 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-07-30 23:44:16 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-07-30 23:44:16 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-07-30 23:44:16 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-07-30 23:44:16 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-07-30 23:44:16 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-09-19 18:15:46 | 000,331,173 | RH-- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 11344 more lines... O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [HKLM] C:\WINDOWS\System32\WinDIR\WinLogon.exe File not found O4 - HKLM..\Run: [MSF_Monitor] C:\Program Files\MySecretFolder\MSFMON.exe (WinAbility® Software Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.) O4 - Startup: C:\Documents and Settings\Ja\Menu Start\Programy\Autostart\OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 36 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF [binary data] O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Funkcja Google Sidewiki - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll (Google Inc.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.3.1 217.17.34.10 217.17.34.68 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 () - http://upload.wikimedia.org/math/5/2/c/52ca65dfeea07ae8fc6d3da526163e8b.png O24 - Desktop Components:1 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-03 14:58:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-01-06 23:25:30 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2011-01-06 23:25:30 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{174dbda4-749d-11df-ae32-0030cd0d3e46}\Shell - "" = AutoRun O33 - MountPoints2\{174dbda4-749d-11df-ae32-0030cd0d3e46}\Shell\AutoRun\command - "" = G:\WD SmartWare.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-01-07 00:09:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\DoctorWeb [2011-01-07 00:07:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\Malwarebytes [2011-01-07 00:07:02 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2011-01-07 00:07:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware [2011-01-07 00:07:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2011-01-07 00:06:59 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2011-01-07 00:06:59 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011-01-06 23:56:45 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro [2011-01-06 23:56:45 | 000,000,000 | ---D | C] -- C:\rsit [2011-01-06 23:43:08 | 000,000,000 | ---D | C] -- C:\_OTL [2011-01-06 23:25:30 | 000,000,000 | RHSD | C] -- C:\autorun.inf [2011-01-06 02:12:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\GlarySoft [2011-01-06 02:08:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Glary Utilities [2011-01-06 02:08:49 | 000,000,000 | ---D | C] -- C:\Program Files\Glary Utilities [2010-12-27 13:34:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\Media Player Classic [2010-12-20 15:08:57 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll [2010-12-20 15:08:57 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll [2010-12-20 15:07:37 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll [2010-12-20 15:01:57 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndproxy.sys [2010-12-20 14:37:56 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll [2010-12-20 14:37:35 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab.exe [2010-12-20 01:10:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2010-12-20 00:16:32 | 001,372,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll [2010-12-20 00:16:32 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6r.dll [2010-12-20 00:16:29 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msaud32.acm [2010-12-20 00:16:29 | 000,086,016 | ---- | C] (Sipro Lab Telecom Inc.) -- C:\WINDOWS\System32\dllcache\sl_anet.acm [2010-12-20 00:16:28 | 000,290,816 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\WINDOWS\System32\dllcache\l3codeca.acm [2010-12-20 00:16:25 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpcdll.dll [2010-12-20 00:16:23 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys [2010-12-20 00:16:23 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smtpapi.dll [2010-12-20 00:16:23 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwnh.dll [2010-12-20 00:16:23 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsdupd.exe [2010-12-20 00:16:22 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll [2010-12-20 00:16:21 | 001,888,992 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3duag.dll [2010-12-20 00:16:21 | 000,870,784 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3d1ag.dll [2010-12-20 00:16:21 | 000,516,768 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ativvaxx.dll [2010-12-20 00:16:21 | 000,377,984 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvaa.dll [2010-12-20 00:16:21 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll [2010-12-20 00:16:21 | 000,229,376 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2cqag.dll [2010-12-20 00:16:21 | 000,201,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvag.dll [2010-12-20 00:16:21 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpqec.dll [2010-12-20 00:16:21 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll [2010-12-20 00:16:21 | 000,032,768 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativtmxx.dll [2010-12-20 00:16:21 | 000,023,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativmvxx.ax [2010-12-20 00:16:21 | 000,009,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativdaxx.ax [2010-12-20 00:16:21 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll [2010-12-20 00:16:20 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll [2010-12-20 00:16:20 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll [2010-12-20 00:16:20 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll [2010-12-20 00:16:20 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfg.dll [2010-12-20 00:16:20 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll [2010-12-20 00:16:20 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll [2010-12-20 00:16:20 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapqec.dll [2010-12-20 00:16:20 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll [2010-12-20 00:16:20 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappprxy.dll [2010-12-20 00:16:20 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll [2010-12-20 00:16:20 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapolqec.dll [2010-12-20 00:16:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3api.dll [2010-12-20 00:16:20 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3dlg.dll [2010-12-20 00:16:19 | 000,032,285 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\hsfcisp2.dll [2010-12-20 00:16:19 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdiultn.dll [2010-12-20 00:16:19 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbhc.dll [2010-12-20 00:16:18 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcex.dll [2010-12-20 00:16:18 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft.managementconsole.dll [2010-12-20 00:16:18 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcfxcommon.dll [2010-12-20 00:16:18 | 000,086,016 | ---- | C] (Conexant) -- C:\WINDOWS\System32\mdmxsdk.dll [2010-12-20 00:16:18 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll [2010-12-20 00:16:18 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe [2010-12-20 00:16:18 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpash.dll [2010-12-20 00:16:18 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnepr.dll [2010-12-20 00:16:17 | 001,737,856 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\mtxparhd.dll [2010-12-20 00:16:17 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napmontr.dll [2010-12-20 00:16:17 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe [2010-12-20 00:16:17 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll [2010-12-20 00:16:17 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onex.dll [2010-12-20 00:16:17 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshavmsg.dll [2010-12-20 00:16:17 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll [2010-12-20 00:16:16 | 000,397,056 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\s3gnb.dll [2010-12-20 00:16:16 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll [2010-12-20 00:16:16 | 000,286,792 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slextspk.dll [2010-12-20 00:16:16 | 000,188,508 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slgen.dll [2010-12-20 00:16:16 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagent.dll [2010-12-20 00:16:16 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qutil.dll [2010-12-20 00:16:16 | 000,073,832 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slcoinst.dll [2010-12-20 00:16:16 | 000,073,796 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slserv.exe [2010-12-20 00:16:16 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcliprov.dll [2010-12-20 00:16:16 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasqec.dll [2010-12-20 00:16:16 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slrundll.exe [2010-12-20 00:16:16 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe [2010-12-20 00:16:15 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll [2010-12-20 00:16:15 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax [2010-12-20 00:16:15 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verclsid.exe [2010-12-20 00:16:14 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll [2010-12-20 00:16:14 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\slrundll.exe [2010-12-20 00:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl [2010-12-20 00:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas [2010-12-20 00:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits [2010-12-20 00:14:29 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dlimport.exe [2010-12-20 00:13:12 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys [2010-12-20 00:13:12 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys [2010-12-20 00:13:12 | 000,043,008 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\System32\drivers\amdagp.sys [2010-12-20 00:13:12 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys [2010-12-20 00:13:12 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys [2010-12-20 00:13:12 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys [2010-12-20 00:13:12 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys [2010-12-20 00:13:12 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys [2010-12-20 00:13:12 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys [2010-12-20 00:13:12 | 000,004,255 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv01nt5.dll [2010-12-20 00:13:12 | 000,003,967 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv02nt5.dll [2010-12-20 00:13:12 | 000,003,775 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv11nt5.dll [2010-12-20 00:13:12 | 000,003,711 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv09nt5.dll [2010-12-20 00:13:12 | 000,003,647 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv07nt5.dll [2010-12-20 00:13:12 | 000,003,615 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv05nt5.dll [2010-12-20 00:13:12 | 000,003,135 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv08nt5.dll [2010-12-20 00:13:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic [2010-12-20 00:13:11 | 000,701,440 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys [2010-12-20 00:13:11 | 000,327,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys [2010-12-20 00:13:11 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys [2010-12-20 00:13:11 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys [2010-12-20 00:13:11 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys [2010-12-20 00:13:11 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys [2010-12-20 00:13:11 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys [2010-12-20 00:13:11 | 000,036,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys [2010-12-20 00:13:11 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys [2010-12-20 00:13:11 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys [2010-12-20 00:13:11 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys [2010-12-20 00:13:11 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys [2010-12-20 00:13:11 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv04nt5.dll [2010-12-20 00:13:11 | 000,021,183 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv01nt5.dll [2010-12-20 00:13:11 | 000,017,279 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv10nt5.dll [2010-12-20 00:13:11 | 000,015,423 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\ch7xxnt5.dll [2010-12-20 00:13:11 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2010-12-20 00:13:11 | 000,014,143 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv06nt5.dll [2010-12-20 00:13:11 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys [2010-12-20 00:13:11 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2010-12-20 00:13:11 | 000,011,359 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv02nt5.dll [2010-12-20 00:13:10 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys [2010-12-20 00:13:10 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys [2010-12-20 00:13:10 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys [2010-12-20 00:13:10 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys [2010-12-20 00:13:10 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys [2010-12-20 00:13:10 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys [2010-12-20 00:13:10 | 000,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys [2010-12-20 00:13:10 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys [2010-12-20 00:13:10 | 000,040,960 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\drivers\sisagp.sys [2010-12-20 00:13:10 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys [2010-12-20 00:13:10 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys [2010-12-20 00:13:10 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys [2010-12-20 00:13:10 | 000,012,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys [2010-12-20 00:13:10 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys [2010-12-20 00:13:10 | 000,003,901 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\siint5.dll [2010-12-20 00:13:09 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys [2010-12-20 00:13:09 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys [2010-12-20 00:13:09 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys [2010-12-20 00:13:09 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys [2010-12-20 00:13:09 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys [2010-12-20 00:13:09 | 000,011,325 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\vchnt5.dll [2010-12-20 00:13:09 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys [2010-12-20 00:10:12 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$ [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-01-07 11:39:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-01-07 11:26:38 | 000,000,768 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\fix.reg [2011-01-07 11:15:49 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job [2011-01-07 11:12:59 | 000,249,324 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2011-01-07 11:12:50 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-01-07 11:12:42 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys [2011-01-07 11:12:40 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-01-07 09:01:54 | 069,838,243 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2011-01-07 00:07:02 | 000,000,790 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-01-06 02:08:52 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Glary Utilities.lnk [2011-01-06 02:02:56 | 000,289,296 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-01-02 00:56:05 | 000,145,408 | ---- | M] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-01-01 17:52:16 | 000,029,337 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\zarowka_300.png [2011-01-01 03:01:07 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010-12-30 13:17:32 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-12-27 23:42:15 | 000,000,428 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\spider.sav [2010-12-21 00:57:50 | 000,502,858 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2010-12-21 00:57:50 | 000,443,588 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010-12-21 00:57:50 | 000,090,072 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2010-12-21 00:57:50 | 000,071,846 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010-12-20 19:27:31 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Windows Media Player.lnk [2010-12-20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010-12-20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010-12-20 01:14:32 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2010-12-20 01:10:53 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-12-20 00:12:59 | 000,251,152 | RHS- | M] () -- C:\ntldr [2010-12-16 21:02:45 | 000,207,686 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\Dok1.docx [2010-12-15 20:37:13 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\sprawdzian.bmp [2010-12-15 20:37:07 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\sprawdzian.bmp [2010-12-08 21:38:40 | 003,053,098 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:36:50 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:34:54 | 000,268,818 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp(1).pdf [2010-12-08 21:28:48 | 000,268,818 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp.pdf [2010-12-08 21:28:19 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ja\1.gncz.klucz.zroz.gleb.zp.pdf [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-07 11:26:38 | 000,000,768 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\fix.reg [2011-01-07 00:07:02 | 000,000,790 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-01-06 02:08:52 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\Glary Utilities.lnk [2011-01-01 17:52:15 | 000,029,337 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\zarowka_300.png [2010-12-20 00:16:30 | 000,693,932 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm [2010-12-20 00:16:30 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav [2010-12-20 00:16:30 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav [2010-12-20 00:16:30 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav [2010-12-20 00:16:30 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav [2010-12-20 00:16:30 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav [2010-12-20 00:16:30 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav [2010-12-20 00:16:30 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav [2010-12-20 00:16:30 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav [2010-12-20 00:16:30 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav [2010-12-20 00:16:30 | 000,071,460 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm [2010-12-20 00:16:30 | 000,058,350 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmp.inf [2010-12-20 00:16:30 | 000,027,965 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm [2010-12-20 00:16:30 | 000,013,540 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf [2010-12-20 00:16:30 | 000,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta [2010-12-20 00:16:30 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css [2010-12-20 00:16:30 | 000,001,714 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf [2010-12-20 00:16:30 | 000,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js [2010-12-20 00:16:29 | 000,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv [2010-12-20 00:16:29 | 000,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv [2010-12-20 00:16:29 | 000,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv [2010-12-20 00:16:29 | 000,089,253 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm [2010-12-20 00:16:29 | 000,066,160 | ---- | C] () -- C:\WINDOWS\System32\dllcache\revert.wmz [2010-12-20 00:16:29 | 000,036,644 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf [2010-12-20 00:16:29 | 000,034,548 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf [2010-12-20 00:16:29 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif [2010-12-20 00:16:29 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip [2010-12-20 00:16:29 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif [2010-12-20 00:16:29 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif [2010-12-20 00:16:29 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif [2010-12-20 00:16:29 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif [2010-12-20 00:16:29 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif [2010-12-20 00:16:29 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif [2010-12-20 00:16:29 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif [2010-12-20 00:16:29 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif [2010-12-20 00:16:29 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif [2010-12-20 00:16:29 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif [2010-12-20 00:16:29 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js [2010-12-20 00:16:29 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif [2010-12-20 00:16:29 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif [2010-12-20 00:16:29 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif [2010-12-20 00:16:29 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif [2010-12-20 00:16:29 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif [2010-12-20 00:16:29 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif [2010-12-20 00:16:29 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif [2010-12-20 00:16:29 | 000,001,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf [2010-12-20 00:16:29 | 000,001,482 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst6.wpl [2010-12-20 00:16:29 | 000,001,479 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst5.wpl [2010-12-20 00:16:29 | 000,001,474 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst3.wpl [2010-12-20 00:16:29 | 000,001,471 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst12.wpl [2010-12-20 00:16:29 | 000,001,463 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst4.wpl [2010-12-20 00:16:29 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif [2010-12-20 00:16:29 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif [2010-12-20 00:16:29 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif [2010-12-20 00:16:29 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif [2010-12-20 00:16:29 | 000,001,262 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst1.wpl [2010-12-20 00:16:29 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm [2010-12-20 00:16:29 | 000,001,046 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst7.wpl [2010-12-20 00:16:29 | 000,001,046 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst2.wpl [2010-12-20 00:16:29 | 000,001,041 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst8.wpl [2010-12-20 00:16:29 | 000,000,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst11.wpl [2010-12-20 00:16:29 | 000,000,822 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst10.wpl [2010-12-20 00:16:29 | 000,000,808 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst13.wpl [2010-12-20 00:16:29 | 000,000,792 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst14.wpl [2010-12-20 00:16:29 | 000,000,786 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst9.wpl [2010-12-20 00:16:29 | 000,000,738 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst15.wpl [2010-12-20 00:16:29 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip [2010-12-20 00:16:28 | 000,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv [2010-12-20 00:16:28 | 000,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv [2010-12-20 00:16:28 | 000,184,137 | ---- | C] () -- C:\WINDOWS\System32\dllcache\compact.wmz [2010-12-20 00:16:28 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css [2010-12-20 00:16:28 | 000,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm [2010-12-20 00:16:28 | 000,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js [2010-12-20 00:16:28 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js [2010-12-20 00:16:28 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif [2010-12-20 00:16:28 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif [2010-12-20 00:16:28 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif [2010-12-20 00:16:28 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif [2010-12-20 00:16:28 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif [2010-12-20 00:16:28 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif [2010-12-20 00:13:11 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2010-12-20 00:13:11 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod [2010-12-20 00:13:10 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img [2010-12-16 21:02:45 | 000,207,686 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\Dok1.docx [2010-12-15 20:37:13 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\sprawdzian.bmp [2010-12-15 20:37:07 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\sprawdzian.bmp [2010-12-08 21:36:53 | 003,053,098 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:36:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\01.gncz.spr.zroz.gleb.zp.pdf [2010-12-08 21:34:27 | 000,268,818 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp(1).pdf [2010-12-08 21:28:26 | 000,268,818 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\1.gncz.klucz.zroz.gleb.zp.pdf [2010-12-08 21:28:19 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ja\1.gncz.klucz.zroz.gleb.zp.pdf [2010-06-14 21:38:52 | 000,312,920 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2009-12-03 18:45:37 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-11-22 11:58:01 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-11-06 10:58:04 | 000,178,975 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat [2009-09-15 14:44:48 | 000,138,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2009-09-05 18:57:32 | 000,145,408 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-09-04 15:05:54 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-09-04 14:27:59 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-09-03 22:50:46 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009-09-03 15:31:34 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-09-03 15:31:23 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-09-03 15:31:19 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll < End of report > [/log]
Tomek01 komentarz 7 stycznia 2011 komentarz 7 stycznia 2011 Wszystko już ok, poza tym hosts'em. Skorzystaj z tej wskazówki: http://forumarchiwum.gry-online.pl/S043archiwum.asp?ID=9237834
Rowaj93 komentarz 7 stycznia 2011 Autor komentarz 7 stycznia 2011 Dalej nie widzę panelu sterowania a poza tym wszystko w porzo
Tomek01 komentarz 7 stycznia 2011 komentarz 7 stycznia 2011 Spróbuj zrobić naprawę z płyty. Powinno pomóc.
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.