Komputer włącza sie ok 10 minut i strasznie zamula

**Posty:** 72 · przez **17rafal** 29 Sty 2011, 22:45

Witam, od jakiegos czasu komputer chodzi tragicznie wolno, zeby np wcisnac start na pasku trzeba sporo czekac. Przy włączaniu sprawdzane sa dyski scandiskiem(nie wiem jak sie to pisze) i nie moge tego wyłaczyc, natomiast przy wylączaniu instaluja sie aktualizacjie windows, tylko ze caly czas pokazuje 1z1 i nigdy sie nie koncza.
Wrzucam logi z OTL, do gmer'a potrzebuje pomocy, bo pokazuje sie niebieski ekran po wcisnieciu szukaj, ale to pewnie dlatego ze dyski wirtualne mi sie nie wylaczyly mimo ze usunalem deamona i inny program do tego, ale zostal alkohol, a go nie moge usunac nie wiem czemu. Lista dodaj lub usun programy zapelnia mi sie juz z godzine i nie wiem czy sie wczyta. nie wiem jak to obejsc. Na razie wrzucam co mam.

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-01-29 20:54:05 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Rafal\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 86,00 Mb Available Physical Memory | 17,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 65,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,65 Gb Total Space | 0,59 Gb Free Space | 4,04% Space Free | Partition Type: NTFS Drive D: | 3,00 Gb Total Space | 2,99 Gb Free Space | 99,42% Space Free | Partition Type: NTFS Drive E: | 33,61 Gb Total Space | 3,15 Gb Free Space | 9,38% Space Free | Partition Type: NTFS Drive G: | 34,05 Gb Total Space | 18,16 Gb Free Space | 53,34% Space Free | Partition Type: NTFS Drive H: | 32,69 Gb Total Space | 8,23 Gb Free Space | 25,18% Space Free | Partition Type: NTFS Drive I: | 34,06 Gb Total Space | 1,05 Gb Free Space | 3,09% Space Free | Partition Type: NTFS Drive N: | 543,80 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Drive O: | 650,17 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: LECH | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software) .url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. https [open] -- "C:\Program Files\Opera\Opera.exe" (Opera Software) InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [CEWE-Podglad Zdjec] -- "E:\Program Files\Rossmann Fotoswiat\CEWE-Podglad Zdjec.exe" -d "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Rossmann Fotoswiat] -- "E:\Program Files\Rossmann Fotoswiat\Rossmann Fotoswiat.exe" "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "firewalldisablenotify" = 0 "firewalldisableoverride" = 1 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\domainprofile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\standardprofile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "18971:TCP" = 18971:TCP:*:Enabled:BitComet 18971 TCP "18971:UDP" = 18971:UDP:*:Enabled:BitComet 18971 UDP [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\PROGRA~1\Wapster\AQQ\AQQ.exe" = C:\PROGRA~1\Wapster\AQQ\AQQ.exe:*:Enabled:P2P AQQ -- (AQQ Sp. z o.o.) "C:\Program Files\Wapster\AQQ\AQQ.exe" = C:\Program Files\Wapster\AQQ\AQQ.exe:*:Enabled:P2P AQQ -- (AQQ Sp. z o.o.) "E:\Programy\Gadu-Gadu\gg.exe" = E:\Programy\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny "E:\WapSter AQQ\AQQ.exe" = E:\WapSter AQQ\AQQ.exe:*:Enabled:AQQ -- (Creative Team S.A.) "E:\Program Files\BitComet\BitComet.exe" = E:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client -- (www.BitComet.com) "E:\Programy\eMule\emule.exe" = E:\Programy\eMule\emule.exe:*:Enabled:eMule "C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe" = C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home -- (Nero AG) "E:\Programy\LimeWire\LimeWire.exe" = E:\Programy\LimeWire\LimeWire.exe:*:Enabled:LimeWire "E:\Program Files\Nowe Gadu-Gadu\gg.exe" = E:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu -- (GG Network S.A.) "I:\Gry\Sports Interactive\Football Manager 2010\fm.exe" = I:\Gry\Sports Interactive\Football Manager 2010\fm.exe:*:Enabled:Football Manager 2010 -- (Sports Interactive) "E:\Program Files\SopCast\adv\SopAdver.exe" = E:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com) "E:\Program Files\SopCast\SopCast.exe" = E:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com) "E:\Program Files\TVUPlayer\TVUPlayer.exe" = E:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks) "C:\Program Files\WarRock\WRLauncher.exe" = C:\Program Files\WarRock\WRLauncher.exe:*:Enabled:War Rock -- () "I:\Kamila\Wierszownik\DATA\BIN\mysqld-nt.exe" = I:\Kamila\Wierszownik\DATA\BIN\mysqld-nt.exe:*:Enabled:mysqld-nt -- () [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00D15456-F679-4AD4-8BD2-56450D4C3F72}" = WarRock "{066D65EA-ED53-44E4-A96A-F81B6E409D2E}" = PC Connectivity Solution "{074E292F-70CC-47AA-9351-ED8404602A6E}" = Mini-SE_1.5 "{083F79E4-6FE9-46FB-A6C6-4F8862742947}" = ATI HYDRAVISION "{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}" = Scan "{11F5D779-7BD9-465A-BBC4-10701386BCB9}" = FW LiveUpdate "{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in "{1CB92574-96F2-467B-B793-5CEB35C40C29}" = Image Resizer Powertoy for Windows XP "{1E460998-5C2C-4ACF-A9AA-3629BD9C06C2}" = Samsung PC Studio "{236BB7C4-4419-42FD-0415-2E257A25E34D}" = Adobe Photoshop CS2 "{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23 "{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (INSERTGT) "{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5 "{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6 "{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10 "{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11 "{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1 "{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2 "{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3 "{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5 "{325C0D0E-85D9-4841-A274-8D333C0F626E}" = OpenOffice.org 2.0.3 "{332CC6BF-E6C7-48EE-BA3D-435E576AD67F}" = PaperPort Image Printer "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{38E0C491-5230-4373-B62E-F1A6E94B1045}" = Nero 7 Demo "{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}" = DAEMON Tools "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840 "{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies "{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English) "{5783F2D7-4001-0415-0002-0060B0CE6BBA}" = AutoCAD 2006 - Polski "{610E8375-30D1-4093-827B-C2282FD25EDA}_is1" = BARRE 1.3.6.0 "{64CB2553-C109-4132-AA51-1F421B515FD1}" = Microsoft .NET Framework 1.1 Polish Language Pack "{655CB07D-C944-40BE-B93F-55957CAC7625}" = AiO_Scan "{65A732D0-7F4C-475E-86DA-C7D4E4C996F1}" = InsERT GT "{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = The Sims 2 "{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{786C5747-1437-443D-B06E-79A00FE45110}" = Adobe Stock Photos 1.0 "{7AC15160-A49B-4A89-B181-D4619C025FFF}" = Samsung Samples Installer "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{90260415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office XP Web Components "{903B0415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Project Professional 2003 "{993960EE-CA4D-443F-8F88-E24260DD5FD2}" = LG PC Suite "{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}" = Brother MFL-Pro Suite "{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC1E4C93-C1E7-11D6-9D10-00010240CE95}" = Java 2 Runtime Environment, SE v1.4.0_03 "{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3 "{B6C89654-A6A2-477C-873B-724EC1C56407}" = ScanSoft PaperPort 11 "{B74D4E10-6884-0000-0000-000000000101}" = Adobe Bridge 1.0 "{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem driver "{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio "{C6E3F362-AAF3-48CF-B8C4-B3EBC2F2E832}" = F1 Challenge 2007 Full version "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86 "{CED97F40-CAFC-4A59-94A7-B7726F863008}" = Sterowniki firmy InsERT "{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic "{E4511CEC-2E60-4076-95B6-0E193269EB86}" = MicroMachines V4 "{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0 "{E9F44C98-B8B6-480F-AF7B-E42A0A46F4E3}" = Microsoft SQL Server VSS Writer "{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6 "{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}" = Microsoft .NET Framework 2.0 Language Pack - FRA "{F5346614-B7C4-4E94-826A-E2363155233D}" = EasyCleaner "{F9000000-0001-0000-0000-074957833700}" = ABBYY FineReader 9.0 Professional Edition "{F9B3DD02-B0B3-42E9-8650-030DFF0D133D}" = Microsoft SQL Server Native Client "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "{FC906D5C-91F9-4DA4-A765-6DCBB669F317}" = Sony Ericsson PC Suite "{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}" = Disc2Phone "Adobe Acrobat 5.0" = Adobe Acrobat 5.0 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Photoshop 7.0 CE" = Adobe Photoshop 7.0 CE "Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0415-2E257A25E34D}" = Adobe Photoshop CS2 "Adobe Shockwave Player" = Adobe Shockwave Player 11 "All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI "AQQ" = WapSter AQQ "Autodesk DWF Viewer" = Autodesk DWF Viewer "BitComet" = BitComet 0.84 "Car Racing Deluxe_is1" = Car Racing Deluxe v.2.0 "CCleaner" = CCleaner "Centrum Aktualizacji_is1" = Centrum Aktualizacji (usunięcie) "Contra - Hard Corps_is1" = Contra - Hard Corps "Diamond Club Poker" = PokerRoomSchool "ECBarre" = ECBarre "Enable S3 for USB Device" = Enable S3 for USB Device "EsetOnlineScanner" = ESET Online Scanner "Eurobarre2.1.5" = Eurobarre "Fakturant_is1" = Fakturant (usunięcie) "faktury" = faktury "Faktury2" = Faktury2 "FBDBServer_1_5_is1" = Firebird 1.5.2.4731 "ffdshow" = ffdshow "Football Manager 2008" = Football Manager 2008 "Football Manager 2010" = Football Manager 2010 "GameDesire-Bingo" = GameDesire-Bingo "GameDesire-Pool & Snooker" = GameDesire-Pool & Snooker "HijackThis" = HijackThis 2.0.2 "InstallShield_{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6 "ipla" = ipla 2.2 "Java Web Start" = Java Web Start "Język polski i matematyka 2005" = Język polski i matematyka. Uniwersalny leksykon szkolny "Joyland Casino" = Joyland Casino "Kamerzysta" = Kamerzysta (deinstalacja) "Lexmark Supplies Monitor" = Lexmark Supplies Monitor "LHTTSENG" = L&H TTS3000 British English "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Mega Bomberman_is1" = Mega Bomberman "megauploadtoolbar" = Megaupload Toolbar "Micro Machines 2 - Turbo Tournament_is1" = Micro Machines 2 - Turbo Tournament "Micro Machines_is1" = Micro Machines "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0 "Microsoft .NET Framework 2.0 Language Pack - FRA" = Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA "Microsoft SQL Server 2005" = Microsoft SQL Server 2005 "Mistrz Wizażu 2_is1" = Mistrz Wizażu 2 "Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13) "Niemiecki w praktyce - ćwiczenia i testy 2_is1" = Niemiecki w praktyce - ćwiczenia i testy 2 "Nowe Gadu-Gadu" = Nowe Gadu-Gadu "NVIDIA Drivers" = NVIDIA Drivers "NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager "PC Tools AntiVirus_is1" = PC Tools AntiVirus3.6 "Picasa2" = Picasa 2 "Profesor Henry 2001_is1" = Profesor Henry 2001 "RealPlayer 6.0" = RealPlayer "Rossmann Fotoswiat" = Rossmann Fotoswiat "SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software "SecondLife" = SecondLife (remove only) "SmartBarre_is1" = SmartBarre version 1.2.0.2 AntiPop v1.2 "Sony Ericsson Themes Creator" = Sony Ericsson Themes Creator 3.19 "SopCast" = SopCast 3.0.3 "Szybka powtorka. Geografia" = Szybka powtórka. Geografia "TextMaker Viewer" = TextMaker Viewer "TVAnts 1.0" = TVAnts 1.0 "TVUPlayer" = TVUPlayer 2.3.3.2 "Windows Media Format Runtime" = Windows Media Format Runtime "Windows Media Player" = Windows Media Player 10 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = Archiwizator WinRAR "Żulionerzy NG_is1" = Żulionerzy NewGeneration [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "bf49a51268b6150a" = PackBarre "SiemensJava.pl - Emulacja Gier" = SiemensJava.pl - Emulacja Gier [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-01-24 15:05:07 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = Error - 2011-01-25 03:58:35 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = Error - 2011-01-26 15:05:52 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = Error - 2011-01-27 02:50:31 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = Error - 2011-01-28 08:34:10 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = Error - 2011-01-28 08:38:00 | Computer Name = LECH | Source = HotFixInstaller | ID = 5000 Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb958481, P2 1045, P3 1605, P4 msi, P5 f, P6 9.0.31211.0, P7 install, P8 x86, P9 xp, P10 0. Error - 2011-01-28 09:05:53 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = Error - 2011-01-28 09:07:25 | Computer Name = LECH | Source = HotFixInstaller | ID = 5000 Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb958481, P2 1045, P3 1605, P4 msi, P5 f, P6 9.0.31211.0, P7 install, P8 x86, P9 xp, P10 0. Error - 2011-01-28 18:10:23 | Computer Name = LECH | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd plugin-container.exe, wersja 1.9.2.3989, moduł powodujący błąd ntdll.dll, wersja 5.1.2600.5755, adres błędu 0x0000100b. Error - 2011-01-28 20:27:54 | Computer Name = LECH | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd PCTAVSvc.exe, wersja 3.6.1.7, moduł powodujący błąd engine.dll, wersja 4.4.2.0, adres błędu 0x0007ce96. [ System Events ] Error - 2011-01-29 15:05:30 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 Error - 2011-01-29 15:05:30 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 Error - 2011-01-29 15:07:39 | Computer Name = LECH | Source = System Error | ID = 1003 Description = Kod błędu 100000d1, parametr 1 000006ee, parametr 2 00000002, parametr 3 00000008, parametr 4 000006ee. Error - 2011-01-29 15:20:10 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie E:. Error - 2011-01-29 15:20:10 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie H:. Error - 2011-01-29 15:20:10 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie E:. Error - 2011-01-29 15:20:10 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie H:. Error - 2011-01-29 15:21:06 | Computer Name = LECH | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys) z powodu następującego błędu: %%1058 Error - 2011-01-29 15:21:06 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 Error - 2011-01-29 15:21:06 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 < End of report >

Kod: Zaznacz wszystko: OTL logfile created on: 2011-01-29 20:53:27 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Rafal\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 86,00 Mb Available Physical Memory | 17,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 65,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,65 Gb Total Space | 0,59 Gb Free Space | 4,04% Space Free | Partition Type: NTFS Drive D: | 3,00 Gb Total Space | 2,99 Gb Free Space | 99,42% Space Free | Partition Type: NTFS Drive E: | 33,61 Gb Total Space | 3,15 Gb Free Space | 9,38% Space Free | Partition Type: NTFS Drive G: | 34,05 Gb Total Space | 18,16 Gb Free Space | 53,34% Space Free | Partition Type: NTFS Drive H: | 32,69 Gb Total Space | 8,23 Gb Free Space | 25,18% Space Free | Partition Type: NTFS Drive I: | 34,06 Gb Total Space | 1,05 Gb Free Space | 3,09% Space Free | Partition Type: NTFS Drive N: | 543,80 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Drive O: | 650,17 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: LECH | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-01-29 20:52:07 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe PRC - [2010-12-10 09:52:32 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe PRC - [2010-12-10 09:52:28 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe PRC - [2007-10-02 16:17:52 | 000,750,928 | ---- | M] (PC Tools Research Pty Ltd) -- C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe PRC - [2007-09-26 09:39:10 | 001,082,664 | ---- | M] (PC Tools Research Pty Ltd) -- C:\Program Files\PC Tools AntiVirus\PCTAV.exe PRC - [2007-03-12 14:51:26 | 000,663,552 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe PRC - [2007-03-06 19:20:00 | 000,536,576 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe PRC - [2007-03-02 16:48:00 | 000,098,304 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe PRC - [2007-01-29 21:12:14 | 000,030,248 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe PRC - [2006-12-03 00:14:03 | 000,310,784 | ---- | M] (http://autoconnect.prv.pl) -- C:\Program Files\AutoConnect\AutoConnect.exe PRC - [2006-10-14 15:46:21 | 000,180,269 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe PRC - [2004-12-13 00:05:20 | 001,527,893 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe PRC - [2004-12-13 00:05:20 | 000,065,536 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe PRC - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe PRC - [2004-07-27 10:01:36 | 000,068,096 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-01-29 20:52:07 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (wmplayer) SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0) SRV - [2007-10-25 21:34:25 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2007-10-02 16:17:52 | 000,750,928 | ---- | M] (PC Tools Research Pty Ltd) [Auto | Running] -- C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe -- (PCTAVSvc) SRV - [2007-03-26 12:06:24 | 000,292,864 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2005-11-14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004-12-13 00:05:20 | 001,527,893 | ---- | M] (The Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance) SRV - [2004-12-13 00:05:20 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance) SRV - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-07-14 19:54:00 | 007,741,664 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2008-04-14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-04-14 00:10:52 | 000,149,376 | ---- | M] (M-Systems) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\tffsport.sys -- (tffsport) DRV - [2007-09-17 11:38:10 | 000,022,528 | ---- | M] (PC Tools Research Pty Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVHook.sys -- (AVHook) DRV - [2007-09-17 11:38:10 | 000,015,872 | ---- | M] (PC Tools Research Pty Ltd) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\AVFilter.sys -- (AVFilter) DRV - [2007-09-17 11:38:10 | 000,015,872 | ---- | M] (PC Tools Research Pty Ltd ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVRec.sys -- (AVRec) DRV - [2007-07-11 14:51:48 | 000,019,840 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2007-07-11 09:45:00 | 000,021,632 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2007-07-11 09:40:18 | 000,012,416 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2007-01-30 22:16:13 | 000,017,480 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2006-09-18 14:59:08 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se27unic.sys -- (se27unic) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM) DRV - [2006-09-18 14:59:02 | 000,086,560 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27obex.sys -- (SE27obex) DRV - [2006-09-18 14:59:00 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se27nd5.sys -- (se27nd5) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS) DRV - [2006-09-18 14:58:58 | 000,088,688 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mgmt.sys -- (SE27mgmt) Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM) DRV - [2006-09-18 14:58:54 | 000,097,184 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mdm.sys -- (SE27mdm) DRV - [2006-09-18 14:58:52 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mdfl.sys -- (SE27mdfl) DRV - [2006-09-18 14:58:48 | 000,061,600 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27bus.sys -- (SE27bus) Sony Ericsson Device 039 Driver driver (WDM) DRV - [2005-01-24 14:38:04 | 000,084,512 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm) DRV - [2005-01-24 14:38:04 | 000,006,064 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl) DRV - [2005-01-24 14:38:00 | 000,052,384 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) Samsung Mobile USB Device 1.0 driver (WDM) DRV - [2004-10-15 12:50:20 | 000,015,295 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrScnUsb.sys -- (BrScnUsb) DRV - [2004-08-22 15:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt) DRV - [2004-08-22 15:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\d347bus.sys -- (d347bus) DRV - [2004-08-02 14:09:18 | 000,635,281 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2004-06-03 03:40:46 | 000,079,360 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nvatabus.sys -- (nvatabus) DRV - [2004-03-02 09:26:58 | 000,050,007 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys) DRV - [2004-03-02 09:24:16 | 000,127,065 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw) DRV - [2004-02-24 04:08:52 | 000,400,384 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS) DRV - [2003-10-29 06:02:00 | 000,021,120 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nv_agp.sys -- (nv_agp) DRV - [2002-08-28 22:16:22 | 000,020,864 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LwAdiHid.sys -- (LwAdiHid) Urządzenia cyfrowe Logitech WingMan (autowykrywanie) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-842925246-616249376-839522115-1003\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - Reg Error: Value error. File not found IE - HKU\S-1-5-21-842925246-616249376-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Web Search..." FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.pajacyk.pl/" FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q=" FF - prefs.js..network.proxy.type: 2 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-12 11:18:48 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-01-20 00:26:47 | 000,000,000 | ---D | M] [2010-06-09 22:33:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Extensions [2011-01-29 20:29:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions [2009-09-27 00:36:05 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2010-11-29 21:07:15 | 000,000,000 | ---D | M] (vShare) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\vshare@toolbar [2008-12-19 21:49:06 | 000,000,414 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\kamila.xml [2010-11-29 21:07:28 | 000,001,583 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\web-search.xml [2008-08-05 16:41:39 | 000,001,994 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\wrzuta.xml [2011-01-28 23:30:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-20 00:26:54 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-01-20 00:25:20 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008-06-24 18:31:00 | 000,925,696 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPBOARDS.dll [2008-06-24 18:35:00 | 000,868,352 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPCARDS.dll [2011-01-20 00:25:14 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2008-09-30 14:03:24 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll [2008-06-24 18:34:00 | 000,679,936 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPMAKAOV2.dll [2008-06-24 18:28:00 | 000,598,016 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPPOKER.dll [2008-06-24 16:45:00 | 000,593,920 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPROULETTE.dll [2008-06-24 17:45:00 | 000,557,056 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPSLOTS70.dll [2010-11-14 19:37:59 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-11-14 19:37:59 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-11-14 19:38:00 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-11-14 19:38:00 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-11-14 19:38:00 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-11-14 19:38:01 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2011-01-29 18:47:38 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll (BitComet) O2 - BHO: (MEGAUPLOADTOOLBAR) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD ) O3 - HKLM\..\Toolbar: (MEGAUPLOADTOOLBAR) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD ) O3 - HKU\S-1-5-21-842925246-616249376-839522115-1003\..\Toolbar\ShellBrowser: (MEGAUPLOADTOOLBAR) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD ) O3 - HKU\S-1-5-21-842925246-616249376-839522115-1003\..\Toolbar\WebBrowser: (MEGAUPLOADTOOLBAR) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD ) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [PCTAVApp] C:\Program Files\PC Tools AntiVirus\PCTAV.exe (PC Tools Research Pty Ltd) O4 - HKLM..\Run: [PPort11reminder] C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKU\.DEFAULT..\Run: [ATICCC] File not found O4 - HKU\S-1-5-18..\Run: [ATICCC] File not found O4 - HKU\S-1-5-21-842925246-616249376-839522115-1003..\RunOnce: [Shockwave Updater] File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ATI CATALYST System Tray.lnk = File not found O4 - Startup: C:\Documents and Settings\Rafal\Menu Start\Programy\Autostart\Skrót do AutoConnect.lnk = C:\Program Files\AutoConnect\AutoConnect.exe (http://autoconnect.prv.pl) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O8 - Extra context menu item: Download all links using BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Download all videos using BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Download link using &BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: E&ksport do programu Microsoft Excel - E:\Programy\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Programy\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O12 - Plugin for: .mov - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll (Apple Computer, Inc.) O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (InterTrust Technologies Corporation, Inc.) O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} http://downloads.ewido.net/ewidoOnlineScan.cab (ewidoOnlineScan Control) O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.) O16 - DPF: {4B4513E2-4E57-43DF-9496-FCD37E9DFA64} http://download.gamedesire.com/g_bin/pl/navy_2_0_0_29.cab (GameDesire Sea Battle) O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} http://www.eset.eu/buxus/docs/OnlineScanner.cab (OnlineScanner Control) O16 - DPF: {631FF594-EC25-4CFF-B869-402DF294E1D6} http://slimak.onet.pl/_m/kamerzysta/OnetInstalator012s.ocx (Instalator oprogramowania Onet.pl) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {BFA1F11D-3121-AFE1-4112-894323212DAC} http://download.gamedesire.com/g_bin/pl/words_2_0_0_51.cab (GameDesire Word Games) O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab (Java Plug-in 1.4.0_03) O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Java Plug-in 1.5.0_05) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Java Plug-in 1.5.0_10) O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Java Plug-in 1.5.0_11) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D27CDB6E-0000-0000-0000-000000000000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} http://download.gamedesire.com/g_bin/pl/soccer_2_0_0_20.cab (GameDesire Soccer) O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C5} http://download.gamedesire.com/g_bin/pl/snooker_2_0_0_35.cab (GameDesire Snooker) O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\cryptnet32: DllName - cryptnet32.dll - C:\WINDOWS\System32\cryptnet32.dll () O24 - Desktop WallPaper: C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-01-27 22:46:59 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-01-29 20:51:46 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe [2011-01-29 19:08:05 | 000,880,624 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Rafal\Pulpit\SPTDinst-v162-x86(2).exe [2011-01-29 18:37:23 | 000,289,144 | ---- | C] (S!Ri) -- C:\WINDOWS\System32\VCCLSID.exe [2011-01-29 18:37:23 | 000,288,417 | ---- | C] (S!Ri) -- C:\WINDOWS\System32\SrchSTS.exe [2011-01-29 18:37:23 | 000,135,168 | ---- | C] (SteelWerX) -- C:\WINDOWS\System32\swreg.exe [2011-01-29 18:37:23 | 000,087,552 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\VACFix.exe [2011-01-29 18:37:23 | 000,082,944 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\IEDFix.exe [2011-01-29 18:37:23 | 000,082,944 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\IEDFix.C.exe [2011-01-29 18:37:23 | 000,082,432 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\404Fix.exe [2011-01-29 18:37:23 | 000,080,384 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\o4Patch.exe [2011-01-29 18:37:23 | 000,079,360 | ---- | C] (SteelWerX) -- C:\WINDOWS\System32\swxcacls.exe [2011-01-29 18:37:23 | 000,078,336 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\Agent.OMZ.Fix.exe [2011-01-29 18:37:23 | 000,053,248 | ---- | C] (http://www.beyondlogic.org) -- C:\WINDOWS\System32\Process.exe [2011-01-29 18:36:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\SmitfraudFix [2011-01-28 23:13:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\galeria_fotografii [2011-01-28 12:27:24 | 003,006,368 | ---- | C] (Piriform Ltd) -- C:\Documents and Settings\Rafal\Pulpit\ccsetup303.exe [2011-01-28 12:20:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan [2011-01-28 12:20:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Dane aplikacji\ArcaVirMicroScan [2011-01-28 12:20:08 | 000,258,640 | ---- | C] (ArcaBit) -- C:\Documents and Settings\Rafal\Pulpit\arcavirmicroscan.exe [2011-01-24 00:46:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\Rachunkowość [2011-01-20 00:27:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sun [2011-01-20 00:26:46 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2011-01-20 00:26:46 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2011-01-20 00:26:46 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2011-01-20 00:26:46 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2011-01-18 19:14:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\zachowania [2011-01-04 20:21:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\Kolokwium 2 [2007-08-13 14:18:46 | 000,769,536 | ---- | C] (Toshiba Samsung Storage Technology Coporation) -- C:\Documents and Settings\Rafal\Dane aplikacji\sfdnwin.dll [2006-09-27 17:22:18 | 000,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys [2006-09-27 17:22:18 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys [1999-01-19 05:46:00 | 000,050,176 | ---- | C] ( ) -- C:\WINDOWS\System32\UnZDll.dll [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [3 C:\Documents and Settings\Rafal\Pulpit\*.tmp files -> C:\Documents and Settings\Rafal\Pulpit\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-01-29 20:56:00 | 009,699,328 | -H-- | M] () -- C:\Documents and Settings\Rafal\NTUSER.DAT [2011-01-29 20:52:07 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe [2011-01-29 20:45:00 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-01-29 20:37:06 | 000,000,249 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\ax_files.xml [2011-01-29 20:21:55 | 000,243,809 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2011-01-29 20:21:24 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-01-29 20:20:46 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2011-01-29 20:20:45 | 000,000,012 | ---- | M] () -- C:\WINDOWS\System32\crt.dat [2011-01-29 20:19:51 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-01-29 19:56:01 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\btjkuykr.exe [2011-01-29 19:38:02 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Rafal\ntuser.ini [2011-01-29 19:08:05 | 000,880,624 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Rafal\Pulpit\SPTDinst-v162-x86(2).exe [2011-01-29 18:47:45 | 000,003,752 | ---- | M] () -- C:\WINDOWS\System32\tmp.reg [2011-01-29 18:30:46 | 001,885,088 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\SmitfraudFix_v2.423.exe [2011-01-29 15:24:26 | 000,000,555 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan.lnk [2011-01-29 00:12:02 | 000,114,688 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\inwentaryzacja 2010.xls [2011-01-28 22:59:20 | 006,383,451 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\galeria_fotografii.zip [2011-01-28 22:31:10 | 000,156,742 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Test z II etapu Progress Accounting Competition II.pdf [2011-01-28 12:27:47 | 003,006,368 | ---- | M] (Piriform Ltd) -- C:\Documents and Settings\Rafal\Pulpit\ccsetup303.exe [2011-01-28 12:20:13 | 000,258,640 | ---- | M] (ArcaBit) -- C:\Documents and Settings\Rafal\Pulpit\arcavirmicroscan.exe [2011-01-27 17:59:08 | 001,753,600 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Festung Hohensalzburg.doc [2011-01-27 17:59:01 | 000,290,816 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Salburgs Mirabell Garten.doc [2011-01-27 13:02:12 | 003,761,664 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\040_Salzburg_%96_miasto_Mozarta.ppt [2011-01-26 23:53:36 | 000,072,762 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\moja pani.JPG [2011-01-26 22:38:56 | 000,051,712 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 22-01-2011 (popr2).xls [2011-01-26 20:56:51 | 000,002,689 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Sony Ericsson PC Suite.lnk [2011-01-25 20:12:16 | 002,114,672 | -H-- | M] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\IconCache.db [2011-01-23 00:33:26 | 000,299,182 | ---- | M] () -- C:\WINDOWS\System32\shimg.dll [2011-01-22 19:09:05 | 000,213,791 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\2011-01-22-19-08-16-553120.cut.553120-1.pdf [2011-01-21 14:48:46 | 000,066,744 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Planowanie finansowe.docx [2011-01-20 21:55:05 | 000,314,880 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\dyczkosia.doc [2011-01-20 00:25:04 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2011-01-20 00:25:04 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2011-01-20 00:25:03 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2011-01-20 00:25:03 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2011-01-20 00:25:00 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2011-01-19 22:44:08 | 000,052,224 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 17-01-2011 (Popr cwicz).xls [2011-01-19 09:22:52 | 000,091,648 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\04.01.11. Zarządzanie należnościami.doc [2011-01-19 09:22:11 | 000,167,424 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Wzory_struktura,korelacja,regresja,indeksy,trend,sezonowość.doc [2011-01-19 04:19:46 | 000,504,832 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Pomorska, Lech Zachowania konsumenta, koszty i korzyści.doc [2011-01-19 01:30:42 | 000,089,088 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\cykl zycia klienta.doc [2011-01-18 22:11:43 | 000,030,038 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\WYK_ADY - JAN SOBIECH.odt [2011-01-18 00:33:57 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET [2011-01-17 18:58:19 | 000,574,615 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\20110117070827487.pdf [2011-01-17 11:00:44 | 000,380,503 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Scan10020(2).JPG [2011-01-17 11:00:33 | 000,452,084 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Scan10016(2).JPG [2011-01-14 23:11:41 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-01-14 22:36:31 | 000,000,151 | ---- | M] () -- C:\WINDOWS\PhotoSnapViewer.INI [2011-01-10 15:00:12 | 000,268,566 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\DSC02775.JPG [2011-01-10 00:44:21 | 000,161,280 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\1.1.doc [2011-01-07 19:45:57 | 000,860,160 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\System podatkowy.pps [2011-01-07 01:24:45 | 000,019,466 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\sukienka2.JPG [2011-01-07 00:26:21 | 000,017,597 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Odszukane odpowiedz na pytania.docx [2011-01-07 00:23:54 | 000,017,774 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#3.docx [2011-01-06 23:52:33 | 000,020,584 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#4.docx [2011-01-06 23:50:50 | 000,014,423 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Omw pojcie finansw.docx [2011-01-06 21:53:20 | 000,128,512 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\praca licencjat rafal.doc [2011-01-06 01:28:38 | 003,835,402 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\itm_1_2011.pdf [2011-01-05 12:18:24 | 000,020,438 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\sukienka.JPG [2011-01-04 20:19:45 | 000,024,576 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Kolokwium 2 - Gotowiec.doc [2011-01-04 17:35:57 | 000,020,992 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\rachunek- pytania od FiRu.doc [2011-01-01 22:36:36 | 000,442,880 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\wykład 11 - OFE.ppt [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [3 C:\Documents and Settings\Rafal\Pulpit\*.tmp files -> C:\Documents and Settings\Rafal\Pulpit\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-29 19:56:01 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\btjkuykr.exe [2011-01-29 18:41:25 | 000,003,752 | ---- | C] () -- C:\WINDOWS\System32\tmp.reg [2011-01-29 18:37:23 | 000,075,776 | ---- | C] () -- C:\WINDOWS\System32\WS2Fix.exe [2011-01-29 18:37:23 | 000,051,200 | ---- | C] () -- C:\WINDOWS\System32\dumphive.exe [2011-01-29 18:37:23 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\swsc.exe [2011-01-29 18:30:02 | 001,885,088 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\SmitfraudFix_v2.423.exe [2011-01-29 00:50:00 | 000,000,555 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan.lnk [2011-01-28 22:58:16 | 006,383,451 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\galeria_fotografii.zip [2011-01-28 22:31:04 | 000,156,742 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Test z II etapu Progress Accounting Competition II.pdf [2011-01-27 17:59:07 | 001,753,600 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Festung Hohensalzburg.doc [2011-01-27 13:01:47 | 003,761,664 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\040_Salzburg_%96_miasto_Mozarta.ppt [2011-01-27 00:39:52 | 000,290,816 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Salburgs Mirabell Garten.doc [2011-01-26 23:53:36 | 000,072,762 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\moja pani.JPG [2011-01-26 22:38:56 | 000,051,712 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 22-01-2011 (popr2).xls [2011-01-22 21:35:19 | 000,114,688 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\inwentaryzacja 2010.xls [2011-01-22 19:09:00 | 000,213,791 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\2011-01-22-19-08-16-553120.cut.553120-1.pdf [2011-01-21 14:48:41 | 000,066,744 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Planowanie finansowe.docx [2011-01-20 21:54:57 | 000,314,880 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\dyczkosia.doc [2011-01-19 22:44:08 | 000,052,224 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 17-01-2011 (Popr cwicz).xls [2011-01-19 09:22:52 | 000,091,648 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\04.01.11. Zarządzanie należnościami.doc [2011-01-19 09:22:08 | 000,167,424 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Wzory_struktura,korelacja,regresja,indeksy,trend,sezonowość.doc [2011-01-19 02:40:34 | 000,504,832 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Pomorska, Lech Zachowania konsumenta, koszty i korzyści.doc [2011-01-19 01:30:41 | 000,089,088 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\cykl zycia klienta.doc [2011-01-18 22:11:39 | 000,030,038 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\WYK_ADY - JAN SOBIECH.odt [2011-01-17 18:58:11 | 000,574,615 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\20110117070827487.pdf [2011-01-17 11:00:44 | 000,380,503 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Scan10020(2).JPG [2011-01-17 11:00:30 | 000,452,084 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Scan10016(2).JPG [2011-01-10 15:00:12 | 000,268,566 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\DSC02775.JPG [2011-01-10 00:44:21 | 000,161,280 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\1.1.doc [2011-01-07 19:45:53 | 000,860,160 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\System podatkowy.pps [2011-01-07 01:24:45 | 000,019,466 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\sukienka2.JPG [2011-01-07 00:26:21 | 000,017,597 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Odszukane odpowiedz na pytania.docx [2011-01-07 00:23:54 | 000,017,774 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#3.docx [2011-01-06 23:52:33 | 000,020,584 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#4.docx [2011-01-06 23:50:50 | 000,014,423 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Omw pojcie finansw.docx [2011-01-06 01:27:29 | 003,835,402 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\itm_1_2011.pdf [2011-01-05 12:18:24 | 000,020,438 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\sukienka.JPG [2011-01-04 20:19:41 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Kolokwium 2 - Gotowiec.doc [2011-01-04 17:35:57 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\rachunek- pytania od FiRu.doc [2011-01-01 22:36:32 | 000,442,880 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\wykład 11 - OFE.ppt [2010-11-05 17:12:02 | 000,299,182 | ---- | C] () -- C:\WINDOWS\System32\shimg.dll [2010-11-05 17:11:59 | 000,046,592 | ---- | C] () -- C:\WINDOWS\System32\cryptnet32.dll [2010-07-05 14:57:53 | 000,235,648 | ---- | C] () -- C:\WINDOWS\System32\mgaud.dll [2009-10-25 11:32:59 | 000,000,291 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2009-02-04 17:01:09 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll [2009-02-04 16:58:51 | 000,031,567 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2009-01-10 15:52:25 | 000,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2009-01-10 15:52:25 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2008-12-18 14:47:05 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\hpzinstall.log [2008-11-24 18:37:06 | 000,000,154 | ---- | C] () -- C:\WINDOWS\adidsl.ini [2008-11-24 18:37:06 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini [2008-11-24 18:36:54 | 000,000,342 | ---- | C] () -- C:\WINDOWS\adiras.ini [2008-11-24 18:36:53 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll [2008-11-24 18:36:52 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll [2008-11-22 12:01:34 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\adinst32.dll [2008-11-09 13:57:02 | 000,000,621 | ---- | C] () -- C:\WINDOWS\tlknw4.ini [2008-04-25 16:50:17 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2008-03-07 00:14:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI [2008-02-20 14:31:25 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2008-02-11 09:39:26 | 000,253,952 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLA.dll [2008-02-11 09:39:18 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLW.dll [2008-02-08 13:53:46 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerLang.dll [2008-02-01 10:11:04 | 000,002,045 | -H-- | C] () -- C:\WINDOWS\System32\whlb32f.dll [2007-12-06 19:54:30 | 000,159,992 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2007-10-29 17:30:28 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD-Start.INI [2007-08-11 19:32:14 | 000,000,131 | ---- | C] () -- C:\WINDOWS\kaillera.ini [2007-08-06 22:10:58 | 000,000,525 | ---- | C] () -- C:\WINDOWS\QIII.INI [2007-07-27 16:31:48 | 000,000,442 | ---- | C] () -- C:\Documents and Settings\Rafal\Dane aplikacji\SamsungLiveUpdateConfig.ini [2007-07-27 14:49:02 | 000,225,355 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiW.dll [2007-07-27 14:49:02 | 000,196,683 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiA.dll [2007-06-09 20:55:31 | 000,000,040 | ---- | C] () -- C:\WINDOWS\Nokia Snake.ini [2007-01-28 11:50:47 | 000,000,169 | ---- | C] () -- C:\WINDOWS\powerplayer.ini [2007-01-28 11:50:47 | 000,000,020 | ---- | C] () -- C:\WINDOWS\powerlist.ini [2007-01-28 11:50:46 | 000,000,605 | ---- | C] () -- C:\WINDOWS\psnetwork.ini [2007-01-27 17:58:34 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2007-01-13 20:41:44 | 000,000,546 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-01-09 15:43:55 | 000,000,008 | ---- | C] () -- C:\WINDOWS\spobuffx.sys [2007-01-03 17:45:40 | 000,210,032 | ---- | C] () -- C:\WINDOWS\System32\DBCLIENT.DLL [2007-01-03 17:45:21 | 000,181,760 | ---- | C] () -- C:\WINDOWS\System32\sklib.dll [2006-12-26 15:06:04 | 000,000,067 | ---- | C] () -- C:\WINDOWS\#1 Video Converter.INI [2006-12-10 20:54:47 | 000,000,057 | ---- | C] () -- C:\WINDOWS\System32\peer.ini [2006-11-26 21:24:35 | 000,000,249 | ---- | C] () -- C:\WINDOWS\naglos.INI [2006-11-07 19:06:46 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2006-10-29 12:28:54 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2006-10-29 12:28:53 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2006-10-29 12:28:52 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2006-10-14 23:58:58 | 002,114,672 | -H-- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\IconCache.db [2006-10-09 21:04:54 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2006-10-04 19:18:03 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006-10-04 18:58:34 | 000,164,864 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2006-10-01 16:03:56 | 000,000,146 | ---- | C] () -- C:\WINDOWS\app.ini [2006-09-29 15:12:05 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2006-09-27 16:01:36 | 000,094,636 | ---- | C] () -- C:\WINDOWS\dropcpyr.dll [2006-09-27 16:01:11 | 000,002,169 | ---- | C] () -- C:\WINDOWS\bestplayer.ini [2006-09-27 15:56:23 | 001,143,842 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2006-09-27 15:56:23 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2006-09-27 15:56:06 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\desktop.ini [2006-09-27 15:28:53 | 000,041,068 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll [2006-09-27 15:25:26 | 000,063,912 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2006-09-27 15:25:14 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2006-09-27 15:17:59 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2006-09-27 15:17:58 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2006-09-27 15:08:29 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\Rafal\Dane aplikacji\desktop.ini [2006-09-27 15:02:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2006-09-27 15:00:27 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2006-09-27 15:00:27 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2006-09-27 15:00:10 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2006-09-27 15:00:08 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2005-12-05 19:25:22 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\lnod32umc.dll [2005-12-05 12:37:10 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\lnod32upd.dll [2005-06-19 08:49:00 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2005-04-26 01:05:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\vbaZlib.dll [2005-02-24 17:56:45 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2004-08-22 16:04:56 | 000,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll [2002-09-20 17:04:42 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2002-09-20 17:04:28 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2002-09-20 17:03:48 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2002-09-20 17:03:38 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2002-08-28 20:23:06 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2002-08-28 20:22:36 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [2001-10-26 18:29:40 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\scriptpw.dll [2001-10-26 18:29:32 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2001-10-26 18:28:34 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2001-10-26 18:27:02 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2001-10-26 17:15:04 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2001-10-26 17:14:52 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2001-10-26 17:14:32 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2001-10-26 17:12:52 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2001-10-26 16:45:26 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2001-10-26 16:45:26 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2001-10-26 16:45:24 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2001-10-26 16:42:08 | 000,020,629 | ---- | C] () -- C:\WINDOWS\System32\mqperf.ini [2001-10-26 16:42:08 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2001-10-26 16:42:08 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2001-10-26 16:42:08 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2001-08-17 22:31:56 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2001-08-17 22:31:56 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2001-08-17 22:31:50 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2001-08-17 22:31:46 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2001-08-17 22:31:46 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2001-08-17 22:31:44 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2001-08-17 22:31:38 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2001-08-17 22:31:38 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2001-08-17 22:13:24 | 000,002,656 | ---- | C] () -- C:\WINDOWS\System32\netware.drv [2001-08-17 20:55:06 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2001-07-22 04:43:48 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2001-07-22 03:25:18 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2001-07-21 23:16:20 | 000,000,635 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 23:15:52 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2001-07-21 23:15:50 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [1999-05-21 19:10:00 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\ZipDll.dll [color=#E56717]========== LOP Check ==========[/color] [2009-01-17 15:36:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Football Manager 2009 Certificate [2008-04-03 16:04:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Autodesk [2007-03-20 21:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Default [2008-10-04 19:36:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Installations [2010-09-30 20:31:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ipla [2010-04-09 21:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\OpenFM [2008-10-04 19:38:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\PC Suite [2009-02-04 17:09:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ScanSoft [2009-11-12 15:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sports Interactive [2008-07-16 22:13:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Teleca [2011-01-29 20:25:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP [2010-10-20 20:33:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\tmp [2008-11-16 17:49:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Wru [2006-08-07 22:55:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.ZARZĄDZANIE NT.000\Dane aplikacji\Opera [2009-02-24 09:24:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.ZARZĄDZANIE NT.002\Dane aplikacji\MEGAUPLOADTOOLBAR [2011-01-29 16:00:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ArcaVirMicroScan [2008-04-03 15:29:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Autodesk [2008-01-11 22:50:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\AutoUpdate [2007-02-27 16:02:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\COWON [2010-06-15 14:48:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\EurekaLog [2007-05-11 15:24:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Gadu-Gadu [2009-05-29 20:32:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\GanymedeNet [2009-06-16 14:46:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\InsERT GT [2007-01-27 17:41:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\InterTrust [2010-10-01 07:47:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ipla [2011-01-29 14:32:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Kamerzysta [2008-10-17 18:41:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\LG Electronics [2009-01-08 16:45:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\LimeWire [2011-01-29 14:29:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\MegauploadToolbar [2008-10-04 20:14:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Nokia [2010-12-07 17:08:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Nowe Gadu-Gadu [2010-03-31 15:13:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\OpenFM [2006-09-27 15:34:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Opera [2008-10-04 19:38:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\PC Suite [2006-12-10 20:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\PPLive [2007-01-28 11:50:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ppStream [2008-07-07 14:49:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\SecondLife [2008-11-21 21:51:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Simple Sudoku [2009-11-12 15:47:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Sports Interactive [2007-11-28 21:49:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Teleca [2007-11-18 11:17:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\temp [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2009-10-19 22:43:28 | 000,042,496 | ---- | M] ()(C:\Documents and Settings\Rafal\Pulpit\kawa?y.doc) -- C:\Documents and Settings\Rafal\Pulpit\kawa�y.doc [2009-10-19 21:42:26 | 000,040,368 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\?wiczenia2.doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\�wiczenia2.doc [2009-10-19 21:42:26 | 000,040,368 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\?wiczenia2.doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\�wiczenia2.doc [2009-10-18 22:25:36 | 000,042,496 | ---- | C] ()(C:\Documents and Settings\Rafal\Pulpit\kawa?y.doc) -- C:\Documents and Settings\Rafal\Pulpit\kawa�y.doc [2007-08-06 21:45:34 | 000,288,595 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za?atwiane_przez_PUP.pdf) -- C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za�atwiane_przez_PUP.pdf [2007-08-06 21:45:34 | 000,288,595 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za?atwiane_przez_PUP.pdf) -- C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za�atwiane_przez_PUP.pdf [2007-05-19 19:03:36 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (2)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (2)..doc [2007-05-19 19:03:36 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (2)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (2)..doc [2007-05-19 18:59:22 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (1)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (1)..doc [2007-05-19 18:59:22 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (1)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (1)..doc [2007-05-19 18:58:08 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic..doc [2007-05-19 18:58:08 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic..doc [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 346 bytes -> C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:05EE1EEF @Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:7E95B6FD < End of report >

**Posty:** 18165 · przez **wojtas** 30 Sty 2011, 00:16

no nic to pojedziemy bez Gmera:

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
IE - HKU\S-1-5-21-842925246-616249376-839522115-1003\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - Reg Error: Value error. File not found
FF - prefs.js..browser.search.defaultenginename: "Web Search..."
FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q="
O2 - BHO: (MEGAUPLOADTOOLBAR) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD )
O3 - HKLM\..\Toolbar: (MEGAUPLOADTOOLBAR) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD )
O3 - HKU\S-1-5-21-842925246-616249376-839522115-1003\..\Toolbar\ShellBrowser: (MEGAUPLOADTOOLBAR) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD )
O3 - HKU\S-1-5-21-842925246-616249376-839522115-1003\..\Toolbar\WebBrowser: (MEGAUPLOADTOOLBAR) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD )
O4 - HKU\.DEFAULT..\Run: [ATICCC] File not found
O4 - HKU\S-1-5-18..\Run: [ATICCC] File not found
O4 - HKU\S-1-5-21-842925246-616249376-839522115-1003..\RunOnce: [Shockwave Updater] File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ATI CATALYST System Tray.lnk = File not found
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (Reg Error: Key error.)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O20 - Winlogon\Notify\cryptnet32: DllName - cryptnet32.dll - C:\WINDOWS\System32\cryptnet32.dll ()
@Alternate Data Stream - 346 bytes -> C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:05EE1EEF
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:7E95B6FD

:Files
C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\vshare@toolbar
C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\web-search.xml
C:\Program Files\MegauploadToolbar
C:\WINDOWS\System32\tmp.reg
C:\WINDOWS\System32\shimg.dll
C:\WINDOWS\System32\WS2Fix.exe
C:\WINDOWS\System32\dumphive.exe
C:\WINDOWS\System32\swsc.exe
C:\Documents and Settings\Rafal\Pulpit\SmitfraudFix_v2.423.exe
C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Wru
C:\Documents and Settings\Rafal\Dane aplikacji\MegauploadToolbar
C:\WINDOWS\System32\VCCLSID.exe
C:\WINDOWS\System32\SrchSTS.exe
C:\WINDOWS\System32\swreg.exe
C:\WINDOWS\System32\VACFix.exe
C:\WINDOWS\System32\IEDFix.exe
C:\WINDOWS\System32\IEDFix.C.exe
C:\WINDOWS\System32\404Fix.exe
C:\WINDOWS\System32\o4Patch.exe
C:\WINDOWS\System32\swxcacls.exe
C:\WINDOWS\System32\Agent.OMZ.Fix.exe

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).

**Posty:** 72 · przez **17rafal** 30 Sty 2011, 02:13

Jak na razie żadnych zmian, wrzucam to co chciales

po restarcie kompa

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-842925246-616249376-839522115-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\{08C06D61-F1F3-4799-86F8-BE1A89362C85} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08C06D61-F1F3-4799-86F8-BE1A89362C85}\ deleted successfully. Prefs.js: "Web Search..." removed from browser.search.defaultenginename Prefs.js: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q=" removed from keyword.URL Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\ deleted successfully. C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\ not found. File C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll not found. Registry value HKEY_USERS\S-1-5-21-842925246-616249376-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\ not found. File C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll not found. Registry value HKEY_USERS\S-1-5-21-842925246-616249376-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\ not found. File C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll not found. Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\\ATICCC deleted successfully. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\ATICCC not found. Registry value HKEY_USERS\S-1-5-21-842925246-616249376-839522115-1003\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Shockwave Updater deleted successfully. C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ATI CATALYST System Tray.lnk moved successfully. Starting removal of ActiveX control {31435657-9980-0010-8000-00AA00389B71} C:\WINDOWS\Downloaded Program Files\wvc1dmo.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{31435657-9980-0010-8000-00AA00389B71}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{31435657-9980-0010-8000-00AA00389B71}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found. Starting removal of ActiveX control {68282C51-9459-467B-95BF-3C0E89627E55} C:\WINDOWS\Downloaded Program Files\SkanerOnline.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{68282C51-9459-467B-95BF-3C0E89627E55}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{68282C51-9459-467B-95BF-3C0E89627E55}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{68282C51-9459-467B-95BF-3C0E89627E55}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{68282C51-9459-467B-95BF-3C0E89627E55}\ not found. File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found. Starting removal of ActiveX control DirectAnimation Java Classes Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF . Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found. File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found. Starting removal of ActiveX control Microsoft XML Parser for Java Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF . Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet32\ deleted successfully. C:\WINDOWS\system32\cryptnet32.dll moved successfully. ADS C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:05EE1EEF deleted successfully. ADS C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:7E95B6FD deleted successfully. ========== FILES ========== C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\vshare@toolbar\modules folder moved successfully. C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\vshare@toolbar\locale\en-US folder moved successfully. C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\vshare@toolbar\locale folder moved successfully. C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\vshare@toolbar\components folder moved successfully. C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\vshare@toolbar\chrome folder moved successfully. C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\vshare@toolbar folder moved successfully. C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\web-search.xml moved successfully. C:\Program Files\MegauploadToolbar folder moved successfully. C:\WINDOWS\System32\tmp.reg moved successfully. C:\WINDOWS\System32\shimg.dll moved successfully. C:\WINDOWS\System32\WS2Fix.exe moved successfully. C:\WINDOWS\System32\dumphive.exe moved successfully. C:\WINDOWS\System32\swsc.exe moved successfully. C:\Documents and Settings\Rafal\Pulpit\SmitfraudFix_v2.423.exe moved successfully. C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Wru\Cache folder moved successfully. C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Wru folder moved successfully. C:\Documents and Settings\Rafal\Dane aplikacji\MegauploadToolbar\NewCfg folder moved successfully. C:\Documents and Settings\Rafal\Dane aplikacji\MegauploadToolbar\downfile folder moved successfully. C:\Documents and Settings\Rafal\Dane aplikacji\MegauploadToolbar folder moved successfully. C:\WINDOWS\System32\VCCLSID.exe moved successfully. C:\WINDOWS\System32\SrchSTS.exe moved successfully. C:\WINDOWS\System32\swreg.exe moved successfully. C:\WINDOWS\System32\VACFix.exe moved successfully. C:\WINDOWS\System32\IEDFix.exe moved successfully. C:\WINDOWS\System32\IEDFix.C.exe moved successfully. C:\WINDOWS\System32\404Fix.exe moved successfully. C:\WINDOWS\System32\o4Patch.exe moved successfully. C:\WINDOWS\System32\swxcacls.exe moved successfully. C:\WINDOWS\System32\Agent.OMZ.Fix.exe moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: All Users User: All Users.WINDOWS User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: Default User.WINDOWS ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: hg ->Temp folder emptied: 131072 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: LocalService.ZARZĄDZANIE NT ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: LocalService.ZARZĄDZANIE NT.000 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 300 bytes User: LocalService.ZARZĄDZANIE NT.001 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: LocalService.ZARZĄDZANIE NT.002 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: NetworkService.ZARZĄDZANIE NT ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: NetworkService.ZARZĄDZANIE NT.000 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: NetworkService.ZARZĄDZANIE NT.001 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: NetworkService.ZARZĄDZANIE NT.002 ->Temp folder emptied: 1114112 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Rafal ->Temp folder emptied: 15799127 bytes ->Temporary Internet Files folder emptied: 50427 bytes ->Java cache emptied: 5670012 bytes ->FireFox cache emptied: 80731852 bytes ->Flash cache emptied: 3445780 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 1119674 bytes %systemroot%\System32 .tmp files removed: 6818816 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 17745266 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 127,00 mb [EMPTYFLASH] User: Administrator User: All Users User: All Users.WINDOWS User: Default User User: Default User.WINDOWS User: hg User: LocalService User: LocalService.ZARZĄDZANIE NT User: LocalService.ZARZĄDZANIE NT.000 ->Flash cache emptied: 0 bytes User: LocalService.ZARZĄDZANIE NT.001 User: LocalService.ZARZĄDZANIE NT.002 User: NetworkService User: NetworkService.ZARZĄDZANIE NT User: NetworkService.ZARZĄDZANIE NT.000 User: NetworkService.ZARZĄDZANIE NT.001 User: NetworkService.ZARZĄDZANIE NT.002 User: Rafal ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.20.6 log created on 01302011_000044 Files\Folders moved on Reboot... File move failed. C:\Documents and Settings\hg\Ustawienia lokalne\Temp\hsperfdata_Rafał\3648 scheduled to be moved on reboot. File move failed. C:\Documents and Settings\hg\Ustawienia lokalne\Temp\hsperfdata_Rafał\3996 scheduled to be moved on reboot. File\Folder C:\Documents and Settings\NetworkService.ZARZĄDZANIE NT.002\Ustawienia lokalne\Temp\Perflib_Perfdata_590.dat not found! Registry entries deleted on Reboot...

OTL.Txt

Kod: Zaznacz wszystko: OTL logfile created on: 2011-01-30 00:30:05 - Run 2 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Rafal\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 118,00 Mb Available Physical Memory | 23,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 69,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,65 Gb Total Space | 0,63 Gb Free Space | 4,27% Space Free | Partition Type: NTFS Drive D: | 3,00 Gb Total Space | 2,99 Gb Free Space | 99,42% Space Free | Partition Type: NTFS Drive E: | 33,61 Gb Total Space | 3,15 Gb Free Space | 9,38% Space Free | Partition Type: NTFS Drive G: | 34,05 Gb Total Space | 18,16 Gb Free Space | 53,34% Space Free | Partition Type: NTFS Drive H: | 32,69 Gb Total Space | 8,23 Gb Free Space | 25,18% Space Free | Partition Type: NTFS Drive I: | 34,06 Gb Total Space | 1,05 Gb Free Space | 3,09% Space Free | Partition Type: NTFS Drive L: | 191,46 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive M: | 2,32 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive N: | 543,80 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Drive O: | 650,17 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: LECH | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-01-29 20:52:07 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe PRC - [2010-12-10 09:52:32 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe PRC - [2010-12-10 09:52:28 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe PRC - [2008-10-15 01:04:34 | 000,039,792 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe PRC - [2007-10-02 16:17:52 | 000,750,928 | ---- | M] (PC Tools Research Pty Ltd) -- C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe PRC - [2007-09-26 09:39:10 | 001,082,664 | ---- | M] (PC Tools Research Pty Ltd) -- C:\Program Files\PC Tools AntiVirus\PCTAV.exe PRC - [2007-03-12 14:51:26 | 000,663,552 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe PRC - [2007-03-06 19:20:00 | 000,536,576 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe PRC - [2007-03-02 16:48:00 | 000,098,304 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe PRC - [2007-01-29 21:12:14 | 000,030,248 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe PRC - [2006-12-03 00:14:03 | 000,310,784 | ---- | M] (http://autoconnect.prv.pl) -- C:\Program Files\AutoConnect\AutoConnect.exe PRC - [2006-10-14 15:46:21 | 000,180,269 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe PRC - [2004-12-13 00:05:20 | 001,527,893 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe PRC - [2004-12-13 00:05:20 | 000,065,536 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe PRC - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe PRC - [2004-07-27 10:01:36 | 000,068,096 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-01-29 20:52:07 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (wmplayer) SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0) SRV - [2007-10-25 21:34:25 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2007-10-02 16:17:52 | 000,750,928 | ---- | M] (PC Tools Research Pty Ltd) [Auto | Running] -- C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe -- (PCTAVSvc) SRV - [2007-03-26 12:06:24 | 000,292,864 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2005-11-14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004-12-13 00:05:20 | 001,527,893 | ---- | M] (The Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance) SRV - [2004-12-13 00:05:20 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance) SRV - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-07-14 19:54:00 | 007,741,664 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2008-04-14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-04-14 00:10:52 | 000,149,376 | ---- | M] (M-Systems) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\tffsport.sys -- (tffsport) DRV - [2007-09-17 11:38:10 | 000,022,528 | ---- | M] (PC Tools Research Pty Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVHook.sys -- (AVHook) DRV - [2007-09-17 11:38:10 | 000,015,872 | ---- | M] (PC Tools Research Pty Ltd) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\AVFilter.sys -- (AVFilter) DRV - [2007-09-17 11:38:10 | 000,015,872 | ---- | M] (PC Tools Research Pty Ltd ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVRec.sys -- (AVRec) DRV - [2007-07-11 14:51:48 | 000,019,840 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2007-07-11 09:45:00 | 000,021,632 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2007-07-11 09:40:18 | 000,012,416 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2007-01-30 22:16:13 | 000,017,480 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2006-09-18 14:59:08 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se27unic.sys -- (se27unic) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM) DRV - [2006-09-18 14:59:02 | 000,086,560 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27obex.sys -- (SE27obex) DRV - [2006-09-18 14:59:00 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se27nd5.sys -- (se27nd5) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS) DRV - [2006-09-18 14:58:58 | 000,088,688 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mgmt.sys -- (SE27mgmt) Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM) DRV - [2006-09-18 14:58:54 | 000,097,184 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mdm.sys -- (SE27mdm) DRV - [2006-09-18 14:58:52 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mdfl.sys -- (SE27mdfl) DRV - [2006-09-18 14:58:48 | 000,061,600 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27bus.sys -- (SE27bus) Sony Ericsson Device 039 Driver driver (WDM) DRV - [2005-01-24 14:38:04 | 000,084,512 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm) DRV - [2005-01-24 14:38:04 | 000,006,064 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl) DRV - [2005-01-24 14:38:00 | 000,052,384 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) Samsung Mobile USB Device 1.0 driver (WDM) DRV - [2004-10-15 12:50:20 | 000,015,295 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrScnUsb.sys -- (BrScnUsb) DRV - [2004-08-22 15:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt) DRV - [2004-08-22 15:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\d347bus.sys -- (d347bus) DRV - [2004-08-02 14:09:18 | 000,635,281 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2004-06-03 03:40:46 | 000,079,360 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nvatabus.sys -- (nvatabus) DRV - [2004-03-02 09:26:58 | 000,050,007 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys) DRV - [2004-03-02 09:24:16 | 000,127,065 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw) DRV - [2004-02-24 04:08:52 | 000,400,384 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS) DRV - [2003-10-29 06:02:00 | 000,021,120 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nv_agp.sys -- (nv_agp) DRV - [2002-08-28 22:16:22 | 000,020,864 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LwAdiHid.sys -- (LwAdiHid) Urządzenia cyfrowe Logitech WingMan (autowykrywanie) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-842925246-616249376-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.pajacyk.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..network.proxy.type: 2 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-12 11:18:48 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-01-20 00:26:47 | 000,000,000 | ---D | M] [2010-06-09 22:33:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Extensions [2011-01-30 00:28:17 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions [2009-09-27 00:36:05 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2008-12-19 21:49:06 | 000,000,414 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\kamila.xml [2008-08-05 16:41:39 | 000,001,994 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\wrzuta.xml [2011-01-29 23:32:47 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-20 00:26:54 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-01-20 00:25:20 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008-06-24 18:31:00 | 000,925,696 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPBOARDS.dll [2008-06-24 18:35:00 | 000,868,352 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPCARDS.dll [2011-01-20 00:25:14 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2008-09-30 14:03:24 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll [2008-06-24 18:34:00 | 000,679,936 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPMAKAOV2.dll [2008-06-24 18:28:00 | 000,598,016 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPPOKER.dll [2008-06-24 16:45:00 | 000,593,920 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPROULETTE.dll [2008-06-24 17:45:00 | 000,557,056 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPSLOTS70.dll [2010-11-14 19:37:59 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-11-14 19:37:59 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-11-14 19:38:00 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-11-14 19:38:00 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-11-14 19:38:00 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-11-14 19:38:01 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2011-01-29 18:47:38 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll (BitComet) O3 - HKU\S-1-5-21-842925246-616249376-839522115-1003\..\Toolbar\WebBrowser: (no name) - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - No CLSID value found. O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [PCTAVApp] C:\Program Files\PC Tools AntiVirus\PCTAV.exe (PC Tools Research Pty Ltd) O4 - HKLM..\Run: [PPort11reminder] C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - Startup: C:\Documents and Settings\Rafal\Menu Start\Programy\Autostart\Skrót do AutoConnect.lnk = C:\Program Files\AutoConnect\AutoConnect.exe (http://autoconnect.prv.pl) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O8 - Extra context menu item: Download all links using BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Download all videos using BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Download link using &BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: E&ksport do programu Microsoft Excel - E:\Programy\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Programy\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O12 - Plugin for: .mov - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll (Apple Computer, Inc.) O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (InterTrust Technologies Corporation, Inc.) O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} http://downloads.ewido.net/ewidoOnlineScan.cab (ewidoOnlineScan Control) O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.) O16 - DPF: {4B4513E2-4E57-43DF-9496-FCD37E9DFA64} http://download.gamedesire.com/g_bin/pl/navy_2_0_0_29.cab (GameDesire Sea Battle) O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} http://www.eset.eu/buxus/docs/OnlineScanner.cab (OnlineScanner Control) O16 - DPF: {631FF594-EC25-4CFF-B869-402DF294E1D6} http://slimak.onet.pl/_m/kamerzysta/OnetInstalator012s.ocx (Instalator oprogramowania Onet.pl) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {BFA1F11D-3121-AFE1-4112-894323212DAC} http://download.gamedesire.com/g_bin/pl/words_2_0_0_51.cab (GameDesire Word Games) O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab (Java Plug-in 1.4.0_03) O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Java Plug-in 1.5.0_05) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Java Plug-in 1.5.0_10) O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Java Plug-in 1.5.0_11) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D27CDB6E-0000-0000-0000-000000000000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} http://download.gamedesire.com/g_bin/pl/soccer_2_0_0_20.cab (GameDesire Soccer) O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C5} http://download.gamedesire.com/g_bin/pl/snooker_2_0_0_35.cab (GameDesire Snooker) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\cryptnet32: DllName - cryptnet32.dll - File not found O24 - Desktop WallPaper: C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-01-27 22:46:59 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-07-30 09:30:42 | 000,000,154 | R--- | M] () - M:\autorun.cfg -- [ UDF ] O32 - AutoRun File - [2008-11-27 13:02:24 | 000,214,280 | R--- | M] (Sports Interactive) - M:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2006-09-11 14:26:42 | 000,000,027 | R--- | M] () - M:\autorun.inf -- [ UDF ] O32 - AutoRun File - [2007-09-26 17:38:34 | 000,039,680 | R--- | M] (Sports Interactive) - N:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2007-09-05 21:47:46 | 000,000,027 | R--- | M] () - N:\autorun.inf -- [ UDF ] O32 - AutoRun File - [2004-08-18 09:55:50 | 000,000,000 | R--D | M] - O:\AutoRun -- [ CDFS ] O32 - AutoRun File - [2004-08-18 09:37:22 | 000,663,552 | R--- | M] (Electronic Arts Inc.) - O:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2004-08-18 09:33:44 | 000,598,016 | R--- | M] (Electronic Arts Inc.) - O:\AutoRunGUI.dll -- [ CDFS ] O32 - AutoRun File - [2004-08-18 09:54:43 | 000,000,083 | R--- | M] () - O:\autorun.inf -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-01-30 00:00:44 | 000,000,000 | ---D | C] -- C:\_OTL [2011-01-29 20:51:46 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe [2011-01-29 19:08:05 | 000,880,624 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Rafal\Pulpit\SPTDinst-v162-x86(2).exe [2011-01-29 18:37:23 | 000,053,248 | ---- | C] (http://www.beyondlogic.org) -- C:\WINDOWS\System32\Process.exe [2011-01-29 18:36:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\SmitfraudFix [2011-01-28 23:13:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\galeria_fotografii [2011-01-28 12:27:24 | 003,006,368 | ---- | C] (Piriform Ltd) -- C:\Documents and Settings\Rafal\Pulpit\ccsetup303.exe [2011-01-28 12:20:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan [2011-01-28 12:20:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Dane aplikacji\ArcaVirMicroScan [2011-01-28 12:20:08 | 000,258,640 | ---- | C] (ArcaBit) -- C:\Documents and Settings\Rafal\Pulpit\arcavirmicroscan.exe [2011-01-24 00:46:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\Rachunkowość [2011-01-20 00:27:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sun [2011-01-20 00:26:46 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2011-01-20 00:26:46 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2011-01-20 00:26:46 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2011-01-20 00:26:46 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2011-01-18 19:14:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\zachowania [2011-01-04 20:21:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\Kolokwium 2 [2007-08-13 14:18:46 | 000,769,536 | ---- | C] (Toshiba Samsung Storage Technology Coporation) -- C:\Documents and Settings\Rafal\Dane aplikacji\sfdnwin.dll [2006-09-27 17:22:18 | 000,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys [2006-09-27 17:22:18 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys [1999-01-19 05:46:00 | 000,050,176 | ---- | C] ( ) -- C:\WINDOWS\System32\UnZDll.dll [3 C:\Documents and Settings\Rafal\Pulpit\*.tmp files -> C:\Documents and Settings\Rafal\Pulpit\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-01-30 00:45:06 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-01-30 00:45:05 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-01-30 00:29:11 | 009,699,328 | -H-- | M] () -- C:\Documents and Settings\Rafal\NTUSER.DAT [2011-01-30 00:26:04 | 000,243,809 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2011-01-30 00:07:55 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2011-01-30 00:06:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-01-30 00:03:28 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Rafal\ntuser.ini [2011-01-29 22:38:49 | 000,000,012 | ---- | M] () -- C:\WINDOWS\System32\crt.dat [2011-01-29 20:52:07 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe [2011-01-29 20:37:06 | 000,000,249 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\ax_files.xml [2011-01-29 19:56:01 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\btjkuykr.exe [2011-01-29 19:08:05 | 000,880,624 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Rafal\Pulpit\SPTDinst-v162-x86(2).exe [2011-01-29 15:24:26 | 000,000,555 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan.lnk [2011-01-29 00:12:02 | 000,114,688 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\inwentaryzacja 2010.xls [2011-01-28 22:59:20 | 006,383,451 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\galeria_fotografii.zip [2011-01-28 22:31:10 | 000,156,742 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Test z II etapu Progress Accounting Competition II.pdf [2011-01-28 12:27:47 | 003,006,368 | ---- | M] (Piriform Ltd) -- C:\Documents and Settings\Rafal\Pulpit\ccsetup303.exe [2011-01-28 12:20:13 | 000,258,640 | ---- | M] (ArcaBit) -- C:\Documents and Settings\Rafal\Pulpit\arcavirmicroscan.exe [2011-01-27 17:59:08 | 001,753,600 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Festung Hohensalzburg.doc [2011-01-27 17:59:01 | 000,290,816 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Salburgs Mirabell Garten.doc [2011-01-27 13:02:12 | 003,761,664 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\040_Salzburg_%96_miasto_Mozarta.ppt [2011-01-26 23:53:36 | 000,072,762 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\moja pani.JPG [2011-01-26 22:38:56 | 000,051,712 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 22-01-2011 (popr2).xls [2011-01-26 20:56:51 | 000,002,689 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Sony Ericsson PC Suite.lnk [2011-01-25 20:12:16 | 002,114,672 | -H-- | M] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\IconCache.db [2011-01-22 19:09:05 | 000,213,791 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\2011-01-22-19-08-16-553120.cut.553120-1.pdf [2011-01-21 14:48:46 | 000,066,744 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Planowanie finansowe.docx [2011-01-20 21:55:05 | 000,314,880 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\dyczkosia.doc [2011-01-20 00:25:04 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2011-01-20 00:25:04 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2011-01-20 00:25:03 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2011-01-20 00:25:03 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2011-01-20 00:25:00 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2011-01-19 22:44:08 | 000,052,224 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 17-01-2011 (Popr cwicz).xls [2011-01-19 09:22:52 | 000,091,648 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\04.01.11. Zarządzanie należnościami.doc [2011-01-19 09:22:11 | 000,167,424 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Wzory_struktura,korelacja,regresja,indeksy,trend,sezonowość.doc [2011-01-19 04:19:46 | 000,504,832 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Pomorska, Lech Zachowania konsumenta, koszty i korzyści.doc [2011-01-19 01:30:42 | 000,089,088 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\cykl zycia klienta.doc [2011-01-18 22:11:43 | 000,030,038 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\WYK_ADY - JAN SOBIECH.odt [2011-01-18 00:33:57 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET [2011-01-17 18:58:19 | 000,574,615 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\20110117070827487.pdf [2011-01-17 11:00:44 | 000,380,503 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Scan10020(2).JPG [2011-01-17 11:00:33 | 000,452,084 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Scan10016(2).JPG [2011-01-14 23:11:41 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-01-14 22:36:31 | 000,000,151 | ---- | M] () -- C:\WINDOWS\PhotoSnapViewer.INI [2011-01-10 15:00:12 | 000,268,566 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\DSC02775.JPG [2011-01-10 00:44:21 | 000,161,280 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\1.1.doc [2011-01-07 19:45:57 | 000,860,160 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\System podatkowy.pps [2011-01-07 01:24:45 | 000,019,466 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\sukienka2.JPG [2011-01-07 00:26:21 | 000,017,597 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Odszukane odpowiedz na pytania.docx [2011-01-07 00:23:54 | 000,017,774 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#3.docx [2011-01-06 23:52:33 | 000,020,584 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#4.docx [2011-01-06 23:50:50 | 000,014,423 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Omw pojcie finansw.docx [2011-01-06 21:53:20 | 000,128,512 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\praca licencjat rafal.doc [2011-01-06 01:28:38 | 003,835,402 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\itm_1_2011.pdf [2011-01-05 12:18:24 | 000,020,438 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\sukienka.JPG [2011-01-04 20:19:45 | 000,024,576 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Kolokwium 2 - Gotowiec.doc [2011-01-04 17:35:57 | 000,020,992 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\rachunek- pytania od FiRu.doc [2011-01-01 22:36:36 | 000,442,880 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\wykład 11 - OFE.ppt [3 C:\Documents and Settings\Rafal\Pulpit\*.tmp files -> C:\Documents and Settings\Rafal\Pulpit\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-29 19:56:01 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\btjkuykr.exe [2011-01-29 00:50:00 | 000,000,555 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan.lnk [2011-01-28 22:58:16 | 006,383,451 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\galeria_fotografii.zip [2011-01-28 22:31:04 | 000,156,742 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Test z II etapu Progress Accounting Competition II.pdf [2011-01-27 17:59:07 | 001,753,600 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Festung Hohensalzburg.doc [2011-01-27 13:01:47 | 003,761,664 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\040_Salzburg_%96_miasto_Mozarta.ppt [2011-01-27 00:39:52 | 000,290,816 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Salburgs Mirabell Garten.doc [2011-01-26 23:53:36 | 000,072,762 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\moja pani.JPG [2011-01-26 22:38:56 | 000,051,712 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 22-01-2011 (popr2).xls [2011-01-22 21:35:19 | 000,114,688 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\inwentaryzacja 2010.xls [2011-01-22 19:09:00 | 000,213,791 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\2011-01-22-19-08-16-553120.cut.553120-1.pdf [2011-01-21 14:48:41 | 000,066,744 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Planowanie finansowe.docx [2011-01-20 21:54:57 | 000,314,880 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\dyczkosia.doc [2011-01-19 22:44:08 | 000,052,224 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 17-01-2011 (Popr cwicz).xls [2011-01-19 09:22:52 | 000,091,648 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\04.01.11. Zarządzanie należnościami.doc [2011-01-19 09:22:08 | 000,167,424 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Wzory_struktura,korelacja,regresja,indeksy,trend,sezonowość.doc [2011-01-19 02:40:34 | 000,504,832 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Pomorska, Lech Zachowania konsumenta, koszty i korzyści.doc [2011-01-19 01:30:41 | 000,089,088 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\cykl zycia klienta.doc [2011-01-18 22:11:39 | 000,030,038 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\WYK_ADY - JAN SOBIECH.odt [2011-01-17 18:58:11 | 000,574,615 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\20110117070827487.pdf [2011-01-17 11:00:44 | 000,380,503 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Scan10020(2).JPG [2011-01-17 11:00:30 | 000,452,084 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Scan10016(2).JPG [2011-01-10 15:00:12 | 000,268,566 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\DSC02775.JPG [2011-01-10 00:44:21 | 000,161,280 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\1.1.doc [2011-01-07 19:45:53 | 000,860,160 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\System podatkowy.pps [2011-01-07 01:24:45 | 000,019,466 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\sukienka2.JPG [2011-01-07 00:26:21 | 000,017,597 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Odszukane odpowiedz na pytania.docx [2011-01-07 00:23:54 | 000,017,774 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#3.docx [2011-01-06 23:52:33 | 000,020,584 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#4.docx [2011-01-06 23:50:50 | 000,014,423 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Omw pojcie finansw.docx [2011-01-06 01:27:29 | 003,835,402 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\itm_1_2011.pdf [2011-01-05 12:18:24 | 000,020,438 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\sukienka.JPG [2011-01-04 20:19:41 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Kolokwium 2 - Gotowiec.doc [2011-01-04 17:35:57 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\rachunek- pytania od FiRu.doc [2011-01-01 22:36:32 | 000,442,880 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\wykład 11 - OFE.ppt [2010-07-05 14:57:53 | 000,235,648 | ---- | C] () -- C:\WINDOWS\System32\mgaud.dll [2009-10-25 11:32:59 | 000,000,291 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2009-02-04 17:01:09 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll [2009-02-04 16:58:51 | 000,031,567 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2009-01-10 15:52:25 | 000,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2009-01-10 15:52:25 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2008-12-18 14:47:05 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\hpzinstall.log [2008-11-24 18:37:06 | 000,000,154 | ---- | C] () -- C:\WINDOWS\adidsl.ini [2008-11-24 18:37:06 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini [2008-11-24 18:36:54 | 000,000,342 | ---- | C] () -- C:\WINDOWS\adiras.ini [2008-11-24 18:36:53 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll [2008-11-24 18:36:52 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll [2008-11-22 12:01:34 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\adinst32.dll [2008-11-09 13:57:02 | 000,000,621 | ---- | C] () -- C:\WINDOWS\tlknw4.ini [2008-04-25 16:50:17 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2008-03-07 00:14:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI [2008-02-20 14:31:25 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2008-02-11 09:39:26 | 000,253,952 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLA.dll [2008-02-11 09:39:18 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLW.dll [2008-02-08 13:53:46 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerLang.dll [2008-02-01 10:11:04 | 000,002,045 | -H-- | C] () -- C:\WINDOWS\System32\whlb32f.dll [2007-12-06 19:54:30 | 000,159,992 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2007-10-29 17:30:28 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD-Start.INI [2007-08-11 19:32:14 | 000,000,131 | ---- | C] () -- C:\WINDOWS\kaillera.ini [2007-08-06 22:10:58 | 000,000,525 | ---- | C] () -- C:\WINDOWS\QIII.INI [2007-07-27 16:31:48 | 000,000,442 | ---- | C] () -- C:\Documents and Settings\Rafal\Dane aplikacji\SamsungLiveUpdateConfig.ini [2007-07-27 14:49:02 | 000,225,355 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiW.dll [2007-07-27 14:49:02 | 000,196,683 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiA.dll [2007-06-09 20:55:31 | 000,000,040 | ---- | C] () -- C:\WINDOWS\Nokia Snake.ini [2007-01-28 11:50:47 | 000,000,169 | ---- | C] () -- C:\WINDOWS\powerplayer.ini [2007-01-28 11:50:47 | 000,000,020 | ---- | C] () -- C:\WINDOWS\powerlist.ini [2007-01-28 11:50:46 | 000,000,605 | ---- | C] () -- C:\WINDOWS\psnetwork.ini [2007-01-27 17:58:34 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2007-01-13 20:41:44 | 000,000,546 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-01-09 15:43:55 | 000,000,008 | ---- | C] () -- C:\WINDOWS\spobuffx.sys [2007-01-03 17:45:40 | 000,210,032 | ---- | C] () -- C:\WINDOWS\System32\DBCLIENT.DLL [2007-01-03 17:45:21 | 000,181,760 | ---- | C] () -- C:\WINDOWS\System32\sklib.dll [2006-12-26 15:06:04 | 000,000,067 | ---- | C] () -- C:\WINDOWS\#1 Video Converter.INI [2006-12-10 20:54:47 | 000,000,057 | ---- | C] () -- C:\WINDOWS\System32\peer.ini [2006-11-26 21:24:35 | 000,000,249 | ---- | C] () -- C:\WINDOWS\naglos.INI [2006-11-07 19:06:46 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2006-10-29 12:28:54 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2006-10-29 12:28:53 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2006-10-29 12:28:52 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2006-10-14 23:58:58 | 002,114,672 | -H-- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\IconCache.db [2006-10-09 21:04:54 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2006-10-04 19:18:03 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006-10-04 18:58:34 | 000,164,864 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2006-10-01 16:03:56 | 000,000,146 | ---- | C] () -- C:\WINDOWS\app.ini [2006-09-29 15:12:05 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2006-09-27 16:01:36 | 000,094,636 | ---- | C] () -- C:\WINDOWS\dropcpyr.dll [2006-09-27 16:01:11 | 000,002,169 | ---- | C] () -- C:\WINDOWS\bestplayer.ini [2006-09-27 15:56:23 | 001,143,842 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2006-09-27 15:56:23 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2006-09-27 15:56:06 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\desktop.ini [2006-09-27 15:28:53 | 000,041,068 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll [2006-09-27 15:25:26 | 000,063,912 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2006-09-27 15:25:14 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2006-09-27 15:17:59 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2006-09-27 15:17:58 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2006-09-27 15:08:29 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\Rafal\Dane aplikacji\desktop.ini [2006-09-27 15:02:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2006-09-27 15:00:27 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2006-09-27 15:00:27 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2006-09-27 15:00:10 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2006-09-27 15:00:08 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2005-12-05 19:25:22 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\lnod32umc.dll [2005-12-05 12:37:10 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\lnod32upd.dll [2005-06-19 08:49:00 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2005-04-26 01:05:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\vbaZlib.dll [2005-02-24 17:56:45 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2004-08-22 16:04:56 | 000,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll [2002-09-20 17:04:42 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2002-09-20 17:04:28 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2002-09-20 17:03:48 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2002-09-20 17:03:38 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2002-08-28 20:23:06 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2002-08-28 20:22:36 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [2001-10-26 18:29:40 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\scriptpw.dll [2001-10-26 18:29:32 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2001-10-26 18:28:34 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2001-10-26 18:27:02 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2001-10-26 17:15:04 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2001-10-26 17:14:52 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2001-10-26 17:14:32 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2001-10-26 17:12:52 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2001-10-26 16:45:26 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2001-10-26 16:45:26 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2001-10-26 16:45:24 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2001-10-26 16:42:08 | 000,020,629 | ---- | C] () -- C:\WINDOWS\System32\mqperf.ini [2001-10-26 16:42:08 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2001-10-26 16:42:08 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2001-10-26 16:42:08 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2001-08-17 22:31:56 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2001-08-17 22:31:56 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2001-08-17 22:31:50 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2001-08-17 22:31:46 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2001-08-17 22:31:46 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2001-08-17 22:31:44 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2001-08-17 22:31:38 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2001-08-17 22:31:38 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2001-08-17 22:13:24 | 000,002,656 | ---- | C] () -- C:\WINDOWS\System32\netware.drv [2001-08-17 20:55:06 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2001-07-22 04:43:48 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2001-07-22 03:25:18 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2001-07-21 23:16:20 | 000,000,635 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 23:15:52 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2001-07-21 23:15:50 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [1999-05-21 19:10:00 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\ZipDll.dll [color=#E56717]========== LOP Check ==========[/color] [2009-01-17 15:36:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Football Manager 2009 Certificate [2008-04-03 16:04:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Autodesk [2007-03-20 21:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Default [2008-10-04 19:36:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Installations [2010-09-30 20:31:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ipla [2010-04-09 21:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\OpenFM [2008-10-04 19:38:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\PC Suite [2009-02-04 17:09:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ScanSoft [2009-11-12 15:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sports Interactive [2008-07-16 22:13:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Teleca [2011-01-30 00:28:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP [2010-10-20 20:33:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\tmp [2006-08-07 22:55:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.ZARZĄDZANIE NT.000\Dane aplikacji\Opera [2009-02-24 09:24:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.ZARZĄDZANIE NT.002\Dane aplikacji\MEGAUPLOADTOOLBAR [2011-01-29 16:00:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ArcaVirMicroScan [2008-04-03 15:29:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Autodesk [2008-01-11 22:50:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\AutoUpdate [2007-02-27 16:02:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\COWON [2010-06-15 14:48:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\EurekaLog [2007-05-11 15:24:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Gadu-Gadu [2009-05-29 20:32:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\GanymedeNet [2009-06-16 14:46:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\InsERT GT [2007-01-27 17:41:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\InterTrust [2010-10-01 07:47:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ipla [2011-01-29 14:32:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Kamerzysta [2008-10-17 18:41:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\LG Electronics [2009-01-08 16:45:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\LimeWire [2008-10-04 20:14:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Nokia [2010-12-07 17:08:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Nowe Gadu-Gadu [2010-03-31 15:13:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\OpenFM [2006-09-27 15:34:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Opera [2008-10-04 19:38:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\PC Suite [2006-12-10 20:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\PPLive [2007-01-28 11:50:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ppStream [2008-07-07 14:49:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\SecondLife [2008-11-21 21:51:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Simple Sudoku [2009-11-12 15:47:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Sports Interactive [2007-11-28 21:49:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Teleca [2007-11-18 11:17:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\temp [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2009-10-19 22:43:28 | 000,042,496 | ---- | M] ()(C:\Documents and Settings\Rafal\Pulpit\kawa?y.doc) -- C:\Documents and Settings\Rafal\Pulpit\kawa�y.doc [2009-10-19 21:42:26 | 000,040,368 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\?wiczenia2.doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\�wiczenia2.doc [2009-10-19 21:42:26 | 000,040,368 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\?wiczenia2.doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\�wiczenia2.doc [2009-10-18 22:25:36 | 000,042,496 | ---- | C] ()(C:\Documents and Settings\Rafal\Pulpit\kawa?y.doc) -- C:\Documents and Settings\Rafal\Pulpit\kawa�y.doc [2007-08-06 21:45:34 | 000,288,595 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za?atwiane_przez_PUP.pdf) -- C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za�atwiane_przez_PUP.pdf [2007-08-06 21:45:34 | 000,288,595 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za?atwiane_przez_PUP.pdf) -- C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za�atwiane_przez_PUP.pdf [2007-05-19 19:03:36 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (2)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (2)..doc [2007-05-19 19:03:36 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (2)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (2)..doc [2007-05-19 18:59:22 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (1)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (1)..doc [2007-05-19 18:59:22 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (1)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (1)..doc [2007-05-19 18:58:08 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic..doc [2007-05-19 18:58:08 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic..doc [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:7E95B6FD < End of report >

**Posty:** 18165 · przez **wojtas** 30 Sty 2011, 13:45

Drive C: | 14,65 Gb Total Space | 0,63 Gb Free Space | 4,27% Space Free | Partition Type: NTFS

trochę mało masz miejsca,

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
O3 - HKU\S-1-5-21-842925246-616249376-839522115-1003\..\Toolbar\WebBrowser: (no name) - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - No CLSID value found.
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.
O16 - DPF: {D27CDB6E-0000-0000-0000-000000000000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.)
O20 - Winlogon\Notify\cryptnet32: DllName - cryptnet32.dll - File not found
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:7E95B6FD

:Files
C:\WINDOWS\System32\crt.dat
C:\WINDOWS\System32\Process.exe
C:\Documents and Settings\Rafal\Pulpit\SmitfraudFix

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

*Uruchom OTL z opcji sprzątanie.
* wykonaj optymalizację Windowsa (zwróć uwagę na auto start)
* zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie i pokaż na forum raport)
* Skasuj stan przywracania systemu

Zaktualizuj zabezpieczenia:
>>> Adobe Reader (bez Free McAfee® Security Scan Plus)
>>> Internet Explorer 8

**Posty:** 72 · przez **17rafal** 31 Sty 2011, 18:23

witam, wczoraj zrobilem to co mialem zrobic, ale gdy sie skonczylo skanowania Malwarebytes Anti-Malware to probiac restart wylaczlylem kompa i teraz nie moge go wlaczyc, wyskakuje niebieski ekran i komp sie restartuje, tryb awaryjny nie idzie, przywracanie ustawien ostatnio dzialajacych tez nie. Jezeli jestes w stanie i z tym mi ponoc to napisze co wyskakuje na niebieskim ekranie, ogolnie pierwsze zdanie, ze pojawil sie problem i system zostal zamkniety aby zapobiec uszkodzeniu komputera;/

**Posty:** 18165 · przez **wojtas** 31 Sty 2011, 20:32

powiedz co jest napisane, masz plytke od Windowsa ?

**Posty:** 72 · przez **17rafal** 31 Sty 2011, 23:50

mam plytke i chyba pozniej wezme z niej opcje napraw bo chyba cos takiego tam jest to sobie poradze, ale moze da sie szybciej. to jest zdjecie tego co sie pojawia

http://www.fotosik.pl/pokaz_obrazek/0078d034cdc0fd31.html

Pokombinowalem i sie wlaczyl, wrzucam to co chciales

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-842925246-616249376-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}\ not found. Starting removal of ActiveX control {33564D57-0000-0010-8000-00AA00389B71} C:\WINDOWS\Downloaded Program Files\WMV9VCM.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{33564D57-0000-0010-8000-00AA00389B71}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found. Starting removal of ActiveX control {D27CDB6E-0000-0000-0000-000000000000} C:\WINDOWS\Downloaded Program Files\swflash.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-0000-0000-0000-000000000000}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-0000-0000-0000-000000000000}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-0000-0000-0000-000000000000}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-0000-0000-0000-000000000000}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet32\ deleted successfully. ADS C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:7E95B6FD deleted successfully. ========== FILES ========== C:\WINDOWS\System32\crt.dat moved successfully. C:\WINDOWS\System32\Process.exe moved successfully. C:\Documents and Settings\Rafal\Pulpit\SmitfraudFix folder moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: All Users.WINDOWS User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User.WINDOWS ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: hg ->Temp folder emptied: 131072 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService.ZARZĄDZANIE NT ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService.ZARZĄDZANIE NT.000 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: LocalService.ZARZĄDZANIE NT.001 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService.ZARZĄDZANIE NT.002 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: NetworkService.ZARZĄDZANIE NT ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: NetworkService.ZARZĄDZANIE NT.000 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: NetworkService.ZARZĄDZANIE NT.001 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: NetworkService.ZARZĄDZANIE NT.002 ->Temp folder emptied: 49152 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Rafal ->Temp folder emptied: 8082 bytes ->Temporary Internet Files folder emptied: 33171 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 57996608 bytes ->Flash cache emptied: 979 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 32768 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 56,00 mb [EMPTYFLASH] User: Administrator User: All Users User: All Users.WINDOWS User: Default User User: Default User.WINDOWS User: hg User: LocalService User: LocalService.ZARZĄDZANIE NT User: LocalService.ZARZĄDZANIE NT.000 ->Flash cache emptied: 0 bytes User: LocalService.ZARZĄDZANIE NT.001 User: LocalService.ZARZĄDZANIE NT.002 User: NetworkService User: NetworkService.ZARZĄDZANIE NT User: NetworkService.ZARZĄDZANIE NT.000 User: NetworkService.ZARZĄDZANIE NT.001 User: NetworkService.ZARZĄDZANIE NT.002 User: Rafal ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.20.6 log created on 01302011_145617 Files\Folders moved on Reboot... File move failed. C:\Documents and Settings\hg\Ustawienia lokalne\Temp\hsperfdata_Rafał\3648 scheduled to be moved on reboot. File move failed. C:\Documents and Settings\hg\Ustawienia lokalne\Temp\hsperfdata_Rafał\3996 scheduled to be moved on reboot. File\Folder C:\Documents and Settings\NetworkService.ZARZĄDZANIE NT.002\Ustawienia lokalne\Temp\Perflib_Perfdata_570.dat not found! Registry entries deleted on Reboot...

Kod: Zaznacz wszystko: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Wersja bazy: 5640 Windows 5.1.2600 Dodatek Service Pack 3 Internet Explorer 6.0.2900.5512 2011-01-31 02:42:10 mbam-log-2011-01-31 (02-42-02).txt Typ skanowania: Pełne skanowanie (C:\|D:\|E:\|F:\|G:\|H:\|I:\|) Przeskanowano obiektów: 527328 Upłynęło: 8 godzin(y), 21 minut(y), 35 sekund(y) Zainfekowanych procesów w pamięci: 0 Zainfekowanych modułów w pamięci: 0 Zainfekowanych kluczy rejestru: 0 Zainfekowanych wartości rejestru: 0 Zainfekowane informacje rejestru systemowego: 0 Zainfekowanych folderów: 0 Zainfekowanych plików: 1 Zainfekowanych procesów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych modułów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych kluczy rejestru: (Nie znaleziono zagrożeń) Zainfekowanych wartości rejestru: (Nie znaleziono zagrożeń) Zainfekowane informacje rejestru systemowego: (Nie znaleziono zagrożeń) Zainfekowanych folderów: (Nie znaleziono zagrożeń) Zainfekowanych plików: c:\system volume information\_restore{d3d4ebb9-f64b-4b9b-861f-b9f12f3dd564}\RP610\A0336194.dll (Trojan.Lukiscel) -> No action taken.

**Posty:** 18165 · przez **wojtas** 01 Lut 2011, 18:27

nic więcej nie widać , jak sytuacja z kompem

**Posty:** 72 · przez **17rafal** 01 Lut 2011, 20:23

szczerze to chodzi tak samo jak wczesniej, moze wrzuce logi z OTL tak jak na samym poczatku, czy cos sie zmienilo, bo te raporty byly robione zanim wczoraj wysiadl. musze tez cos pousuwac, zeby zrobic jeszcze wiecej miejsca, chociaz nie wiem czy mi to przyspieszy kompa i wylaczyc skandiski przy odpalaniu.

**Posty:** 18165 · przez **wojtas** 02 Lut 2011, 01:02

ok to czekam

**Posty:** 72 · przez **17rafal** 02 Lut 2011, 17:20

A log z gmera pokazuje to samo, czy jest szansza ze on znajdzie cos innego?

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-02-02 15:38:50 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Rafal\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 163,00 Mb Available Physical Memory | 32,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 63,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,65 Gb Total Space | 0,46 Gb Free Space | 3,16% Space Free | Partition Type: NTFS Drive D: | 3,00 Gb Total Space | 2,99 Gb Free Space | 99,41% Space Free | Partition Type: NTFS Drive E: | 33,61 Gb Total Space | 2,97 Gb Free Space | 8,84% Space Free | Partition Type: NTFS Drive G: | 34,05 Gb Total Space | 18,02 Gb Free Space | 52,93% Space Free | Partition Type: NTFS Drive H: | 32,69 Gb Total Space | 7,89 Gb Free Space | 24,14% Space Free | Partition Type: NTFS Drive I: | 34,06 Gb Total Space | 1,05 Gb Free Space | 3,08% Space Free | Partition Type: NTFS Drive L: | 191,46 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive M: | 2,32 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive N: | 543,80 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Drive O: | 650,17 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: LECH | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software) .url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. https [open] -- "C:\Program Files\Opera\Opera.exe" (Opera Software) InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [CEWE-Podglad Zdjec] -- "E:\Program Files\Rossmann Fotoswiat\CEWE-Podglad Zdjec.exe" -d "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Rossmann Fotoswiat] -- "E:\Program Files\Rossmann Fotoswiat\Rossmann Fotoswiat.exe" "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "firewalldisablenotify" = 0 "firewalldisableoverride" = 1 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\domainprofile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\standardprofile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "18971:TCP" = 18971:TCP:*:Enabled:BitComet 18971 TCP "18971:UDP" = 18971:UDP:*:Enabled:BitComet 18971 UDP [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\PROGRA~1\Wapster\AQQ\AQQ.exe" = C:\PROGRA~1\Wapster\AQQ\AQQ.exe:*:Enabled:P2P AQQ -- (AQQ Sp. z o.o.) "C:\Program Files\Wapster\AQQ\AQQ.exe" = C:\Program Files\Wapster\AQQ\AQQ.exe:*:Enabled:P2P AQQ -- (AQQ Sp. z o.o.) "E:\Programy\Gadu-Gadu\gg.exe" = E:\Programy\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny "E:\WapSter AQQ\AQQ.exe" = E:\WapSter AQQ\AQQ.exe:*:Enabled:AQQ -- (Creative Team S.A.) "E:\Program Files\BitComet\BitComet.exe" = E:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client -- (www.BitComet.com) "E:\Programy\eMule\emule.exe" = E:\Programy\eMule\emule.exe:*:Enabled:eMule "C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe" = C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home -- (Nero AG) "E:\Programy\LimeWire\LimeWire.exe" = E:\Programy\LimeWire\LimeWire.exe:*:Enabled:LimeWire "E:\Program Files\Nowe Gadu-Gadu\gg.exe" = E:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu -- (GG Network S.A.) "I:\Gry\Sports Interactive\Football Manager 2010\fm.exe" = I:\Gry\Sports Interactive\Football Manager 2010\fm.exe:*:Enabled:Football Manager 2010 -- (Sports Interactive) "E:\Program Files\SopCast\adv\SopAdver.exe" = E:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com) "E:\Program Files\SopCast\SopCast.exe" = E:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com) "E:\Program Files\TVUPlayer\TVUPlayer.exe" = E:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks) "C:\Program Files\WarRock\WRLauncher.exe" = C:\Program Files\WarRock\WRLauncher.exe:*:Enabled:War Rock -- () "I:\Kamila\Wierszownik\DATA\BIN\mysqld-nt.exe" = I:\Kamila\Wierszownik\DATA\BIN\mysqld-nt.exe:*:Enabled:mysqld-nt -- () [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00D15456-F679-4AD4-8BD2-56450D4C3F72}" = WarRock "{066D65EA-ED53-44E4-A96A-F81B6E409D2E}" = PC Connectivity Solution "{074E292F-70CC-47AA-9351-ED8404602A6E}" = Mini-SE_1.5 "{083F79E4-6FE9-46FB-A6C6-4F8862742947}" = ATI HYDRAVISION "{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}" = Scan "{11F5D779-7BD9-465A-BBC4-10701386BCB9}" = FW LiveUpdate "{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in "{1CB92574-96F2-467B-B793-5CEB35C40C29}" = Image Resizer Powertoy for Windows XP "{1E460998-5C2C-4ACF-A9AA-3629BD9C06C2}" = Samsung PC Studio "{236BB7C4-4419-42FD-0415-2E257A25E34D}" = Adobe Photoshop CS2 "{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23 "{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (INSERTGT) "{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5 "{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6 "{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10 "{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11 "{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1 "{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2 "{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3 "{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5 "{325C0D0E-85D9-4841-A274-8D333C0F626E}" = OpenOffice.org 2.0.3 "{332CC6BF-E6C7-48EE-BA3D-435E576AD67F}" = PaperPort Image Printer "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{38E0C491-5230-4373-B62E-F1A6E94B1045}" = Nero 7 Demo "{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}" = DAEMON Tools "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840 "{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies "{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English) "{5783F2D7-4001-0415-0002-0060B0CE6BBA}" = AutoCAD 2006 - Polski "{610E8375-30D1-4093-827B-C2282FD25EDA}_is1" = BARRE 1.3.6.0 "{64CB2553-C109-4132-AA51-1F421B515FD1}" = Microsoft .NET Framework 1.1 Polish Language Pack "{655CB07D-C944-40BE-B93F-55957CAC7625}" = AiO_Scan "{65A732D0-7F4C-475E-86DA-C7D4E4C996F1}" = InsERT GT "{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = The Sims 2 "{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{786C5747-1437-443D-B06E-79A00FE45110}" = Adobe Stock Photos 1.0 "{7AC15160-A49B-4A89-B181-D4619C025FFF}" = Samsung Samples Installer "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{90260415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office XP Web Components "{903B0415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Project Professional 2003 "{993960EE-CA4D-443F-8F88-E24260DD5FD2}" = LG PC Suite "{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}" = Brother MFL-Pro Suite "{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC1E4C93-C1E7-11D6-9D10-00010240CE95}" = Java 2 Runtime Environment, SE v1.4.0_03 "{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3 "{B6C89654-A6A2-477C-873B-724EC1C56407}" = ScanSoft PaperPort 11 "{B74D4E10-6884-0000-0000-000000000101}" = Adobe Bridge 1.0 "{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem driver "{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio "{C6E3F362-AAF3-48CF-B8C4-B3EBC2F2E832}" = F1 Challenge 2007 Full version "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86 "{CED97F40-CAFC-4A59-94A7-B7726F863008}" = Sterowniki firmy InsERT "{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic "{E4511CEC-2E60-4076-95B6-0E193269EB86}" = MicroMachines V4 "{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0 "{E9F44C98-B8B6-480F-AF7B-E42A0A46F4E3}" = Microsoft SQL Server VSS Writer "{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6 "{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}" = Microsoft .NET Framework 2.0 Language Pack - FRA "{F5346614-B7C4-4E94-826A-E2363155233D}" = EasyCleaner "{F9000000-0001-0000-0000-074957833700}" = ABBYY FineReader 9.0 Professional Edition "{F9B3DD02-B0B3-42E9-8650-030DFF0D133D}" = Microsoft SQL Server Native Client "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "{FC906D5C-91F9-4DA4-A765-6DCBB669F317}" = Sony Ericsson PC Suite "{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}" = Disc2Phone "Adobe Acrobat 5.0" = Adobe Acrobat 5.0 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Photoshop 7.0 CE" = Adobe Photoshop 7.0 CE "Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0415-2E257A25E34D}" = Adobe Photoshop CS2 "Adobe Shockwave Player" = Adobe Shockwave Player 11 "All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI "AQQ" = WapSter AQQ "Autodesk DWF Viewer" = Autodesk DWF Viewer "BitComet" = BitComet 0.84 "Car Racing Deluxe_is1" = Car Racing Deluxe v.2.0 "CCleaner" = CCleaner "Centrum Aktualizacji_is1" = Centrum Aktualizacji (usunięcie) "Contra - Hard Corps_is1" = Contra - Hard Corps "Diamond Club Poker" = PokerRoomSchool "ECBarre" = ECBarre "Enable S3 for USB Device" = Enable S3 for USB Device "EsetOnlineScanner" = ESET Online Scanner "Eurobarre2.1.5" = Eurobarre "Fakturant_is1" = Fakturant (usunięcie) "faktury" = faktury "Faktury2" = Faktury2 "FBDBServer_1_5_is1" = Firebird 1.5.2.4731 "ffdshow" = ffdshow "Football Manager 2008" = Football Manager 2008 "Football Manager 2010" = Football Manager 2010 "GameDesire-Bingo" = GameDesire-Bingo "GameDesire-Pool & Snooker" = GameDesire-Pool & Snooker "HijackThis" = HijackThis 2.0.2 "InstallShield_{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6 "ipla" = ipla 2.2 "Java Web Start" = Java Web Start "Język polski i matematyka 2005" = Język polski i matematyka. Uniwersalny leksykon szkolny "Joyland Casino" = Joyland Casino "Kamerzysta" = Kamerzysta (deinstalacja) "Lexmark Supplies Monitor" = Lexmark Supplies Monitor "LHTTSENG" = L&H TTS3000 British English "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Mega Bomberman_is1" = Mega Bomberman "megauploadtoolbar" = Megaupload Toolbar "Micro Machines 2 - Turbo Tournament_is1" = Micro Machines 2 - Turbo Tournament "Micro Machines_is1" = Micro Machines "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0 "Microsoft .NET Framework 2.0 Language Pack - FRA" = Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA "Microsoft SQL Server 2005" = Microsoft SQL Server 2005 "Mistrz Wizażu 2_is1" = Mistrz Wizażu 2 "Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13) "Niemiecki w praktyce - ćwiczenia i testy 2_is1" = Niemiecki w praktyce - ćwiczenia i testy 2 "Nowe Gadu-Gadu" = Nowe Gadu-Gadu "NVIDIA Drivers" = NVIDIA Drivers "NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager "PC Tools AntiVirus_is1" = PC Tools AntiVirus3.6 "Picasa2" = Picasa 2 "Profesor Henry 2001_is1" = Profesor Henry 2001 "RealPlayer 6.0" = RealPlayer "Rossmann Fotoswiat" = Rossmann Fotoswiat "SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software "SecondLife" = SecondLife (remove only) "SmartBarre_is1" = SmartBarre version 1.2.0.2 AntiPop v1.2 "Sony Ericsson Themes Creator" = Sony Ericsson Themes Creator 3.19 "SopCast" = SopCast 3.0.3 "Szybka powtorka. Geografia" = Szybka powtórka. Geografia "TextMaker Viewer" = TextMaker Viewer "TVAnts 1.0" = TVAnts 1.0 "TVUPlayer" = TVUPlayer 2.3.3.2 "Windows Media Format Runtime" = Windows Media Format Runtime "Windows Media Player" = Windows Media Player 10 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = Archiwizator WinRAR "Żulionerzy NG_is1" = Żulionerzy NewGeneration [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "bf49a51268b6150a" = PackBarre "SiemensJava.pl - Emulacja Gier" = SiemensJava.pl - Emulacja Gier [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-01-28 09:07:25 | Computer Name = LECH | Source = HotFixInstaller | ID = 5000 Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb958481, P2 1045, P3 1605, P4 msi, P5 f, P6 9.0.31211.0, P7 install, P8 x86, P9 xp, P10 0. Error - 2011-01-28 18:10:23 | Computer Name = LECH | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd plugin-container.exe, wersja 1.9.2.3989, moduł powodujący błąd ntdll.dll, wersja 5.1.2600.5755, adres błędu 0x0000100b. Error - 2011-01-28 20:27:54 | Computer Name = LECH | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd PCTAVSvc.exe, wersja 3.6.1.7, moduł powodujący błąd engine.dll, wersja 4.4.2.0, adres błędu 0x0007ce96. Error - 2011-01-29 18:56:41 | Computer Name = LECH | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd cewe-podglad zdjec.exe, wersja 0.0.0.0, moduł powodujący błąd qtcore4.dll, wersja 4.6.2.0, adres błędu 0x000d6ac3. Error - 2011-01-30 10:58:07 | Computer Name = LECH | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mmc.exe, wersja 5.2.3790.4136, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-01-30 10:59:04 | Computer Name = LECH | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mmc.exe, wersja 5.2.3790.4136, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-01-30 11:05:11 | Computer Name = LECH | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mmc.exe, wersja 5.2.3790.4136, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-01-30 12:54:57 | Computer Name = LECH | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd PCTAVSvc.exe, wersja 3.6.1.7, moduł powodujący błąd engine.dll, wersja 4.4.2.0, adres błędu 0x0007ce96. Error - 2011-01-30 15:03:04 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = Error - 2011-02-01 07:17:36 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = [ System Events ] Error - 2011-02-01 16:13:04 | Computer Name = LECH | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys) z powodu następującego błędu: %%1058 Error - 2011-02-01 16:13:04 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 Error - 2011-02-01 16:13:04 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 Error - 2011-02-02 09:35:21 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie E:. Error - 2011-02-02 09:35:21 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie H:. Error - 2011-02-02 09:35:21 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie E:. Error - 2011-02-02 09:35:21 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie H:. Error - 2011-02-02 09:36:30 | Computer Name = LECH | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys) z powodu następującego błędu: %%1058 Error - 2011-02-02 09:36:30 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 Error - 2011-02-02 09:36:30 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 < End of report >

Kod: Zaznacz wszystko: OTL logfile created on: 2011-02-02 15:38:17 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Rafal\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 163,00 Mb Available Physical Memory | 32,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 63,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,65 Gb Total Space | 0,46 Gb Free Space | 3,16% Space Free | Partition Type: NTFS Drive D: | 3,00 Gb Total Space | 2,99 Gb Free Space | 99,41% Space Free | Partition Type: NTFS Drive E: | 33,61 Gb Total Space | 2,97 Gb Free Space | 8,84% Space Free | Partition Type: NTFS Drive G: | 34,05 Gb Total Space | 18,02 Gb Free Space | 52,93% Space Free | Partition Type: NTFS Drive H: | 32,69 Gb Total Space | 7,89 Gb Free Space | 24,14% Space Free | Partition Type: NTFS Drive I: | 34,06 Gb Total Space | 1,05 Gb Free Space | 3,08% Space Free | Partition Type: NTFS Drive L: | 191,46 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive M: | 2,32 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive N: | 543,80 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Drive O: | 650,17 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: LECH | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-02-02 15:37:15 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe PRC - [2007-10-02 16:17:52 | 000,750,928 | ---- | M] (PC Tools Research Pty Ltd) -- C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe PRC - [2007-09-26 09:39:10 | 001,082,664 | ---- | M] (PC Tools Research Pty Ltd) -- C:\Program Files\PC Tools AntiVirus\PCTAV.exe PRC - [2007-04-05 14:29:02 | 000,684,118 | ---- | M] ( ) -- C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe PRC - [2007-03-12 14:51:26 | 000,663,552 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe PRC - [2007-03-06 19:20:00 | 000,536,576 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe PRC - [2007-03-02 16:48:00 | 000,098,304 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe PRC - [2007-01-29 21:12:14 | 000,030,248 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe PRC - [2006-12-03 00:14:03 | 000,310,784 | ---- | M] (http://autoconnect.prv.pl) -- C:\Program Files\AutoConnect\AutoConnect.exe PRC - [2006-10-14 15:46:21 | 000,180,269 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe PRC - [2004-12-13 00:05:20 | 001,527,893 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe PRC - [2004-12-13 00:05:20 | 000,065,536 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe PRC - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe PRC - [2004-08-22 16:05:02 | 000,081,920 | ---- | M] (DAEMON'S HOME) -- C:\Program Files\D-Tools\daemon.exe PRC - [2004-07-27 10:01:36 | 000,068,096 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-02-02 15:37:15 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (wmplayer) SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0) SRV - [2007-10-25 21:34:25 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2007-10-02 16:17:52 | 000,750,928 | ---- | M] (PC Tools Research Pty Ltd) [Auto | Running] -- C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe -- (PCTAVSvc) SRV - [2007-03-26 12:06:24 | 000,292,864 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2005-11-14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004-12-13 00:05:20 | 001,527,893 | ---- | M] (The Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance) SRV - [2004-12-13 00:05:20 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance) SRV - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-07-14 19:54:00 | 007,741,664 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2008-04-14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-04-14 00:10:52 | 000,149,376 | ---- | M] (M-Systems) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\tffsport.sys -- (tffsport) DRV - [2007-09-17 11:38:10 | 000,022,528 | ---- | M] (PC Tools Research Pty Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVHook.sys -- (AVHook) DRV - [2007-09-17 11:38:10 | 000,015,872 | ---- | M] (PC Tools Research Pty Ltd) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\AVFilter.sys -- (AVFilter) DRV - [2007-09-17 11:38:10 | 000,015,872 | ---- | M] (PC Tools Research Pty Ltd ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVRec.sys -- (AVRec) DRV - [2007-07-11 14:51:48 | 000,019,840 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2007-07-11 09:45:00 | 000,021,632 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2007-07-11 09:40:18 | 000,012,416 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2007-01-30 22:16:13 | 000,017,480 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2006-09-18 14:59:08 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se27unic.sys -- (se27unic) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM) DRV - [2006-09-18 14:59:02 | 000,086,560 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27obex.sys -- (SE27obex) DRV - [2006-09-18 14:59:00 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se27nd5.sys -- (se27nd5) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS) DRV - [2006-09-18 14:58:58 | 000,088,688 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mgmt.sys -- (SE27mgmt) Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM) DRV - [2006-09-18 14:58:54 | 000,097,184 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mdm.sys -- (SE27mdm) DRV - [2006-09-18 14:58:52 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mdfl.sys -- (SE27mdfl) DRV - [2006-09-18 14:58:48 | 000,061,600 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27bus.sys -- (SE27bus) Sony Ericsson Device 039 Driver driver (WDM) DRV - [2005-01-24 14:38:04 | 000,084,512 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm) DRV - [2005-01-24 14:38:04 | 000,006,064 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl) DRV - [2005-01-24 14:38:00 | 000,052,384 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) Samsung Mobile USB Device 1.0 driver (WDM) DRV - [2004-10-15 12:50:20 | 000,015,295 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrScnUsb.sys -- (BrScnUsb) DRV - [2004-08-22 15:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt) DRV - [2004-08-22 15:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\d347bus.sys -- (d347bus) DRV - [2004-08-02 14:09:18 | 000,635,281 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2004-06-03 03:40:46 | 000,079,360 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nvatabus.sys -- (nvatabus) DRV - [2004-03-02 09:26:58 | 000,050,007 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys) DRV - [2004-03-02 09:24:16 | 000,127,065 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw) DRV - [2004-02-24 04:08:52 | 000,400,384 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS) DRV - [2003-10-29 06:02:00 | 000,021,120 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nv_agp.sys -- (nv_agp) DRV - [2002-08-28 22:16:22 | 000,020,864 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LwAdiHid.sys -- (LwAdiHid) Urządzenia cyfrowe Logitech WingMan (autowykrywanie) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-842925246-616249376-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.pajacyk.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..network.proxy.type: 2 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-12 11:18:48 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-01-20 00:26:47 | 000,000,000 | ---D | M] [2010-06-09 22:33:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Extensions [2011-02-02 14:51:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions [2009-09-27 00:36:05 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2008-12-19 21:49:06 | 000,000,414 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\kamila.xml [2008-08-05 16:41:39 | 000,001,994 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\wrzuta.xml [2011-02-02 14:51:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-20 00:26:54 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-01-20 00:25:20 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008-06-24 18:31:00 | 000,925,696 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPBOARDS.dll [2008-06-24 18:35:00 | 000,868,352 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPCARDS.dll [2011-01-20 00:25:14 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2008-09-30 14:03:24 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll [2008-06-24 18:34:00 | 000,679,936 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPMAKAOV2.dll [2008-06-24 18:28:00 | 000,598,016 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPPOKER.dll [2008-06-24 16:45:00 | 000,593,920 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPROULETTE.dll [2008-06-24 17:45:00 | 000,557,056 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPSLOTS70.dll [2010-11-14 19:37:59 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-11-14 19:37:59 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-11-14 19:38:00 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-11-14 19:38:00 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-11-14 19:38:00 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-11-14 19:38:01 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2011-01-29 18:47:38 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll (BitComet) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [ATICCC] File not found O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [DAEMON Tools-1033] C:\Program Files\D-Tools\daemon.exe (DAEMON'S HOME) O4 - HKLM..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [Name of App] C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe ( ) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [PCTAVApp] C:\Program Files\PC Tools AntiVirus\PCTAV.exe (PC Tools Research Pty Ltd) O4 - HKLM..\Run: [PPort11reminder] C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe () O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKU\S-1-5-21-842925246-616249376-839522115-1003..\Run: [BrowserChoice] C:\WINDOWS\System32\browserchoice.exe (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\Rafal\Menu Start\Programy\Autostart\Skrót do AutoConnect.lnk = C:\Program Files\AutoConnect\AutoConnect.exe (http://autoconnect.prv.pl) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O8 - Extra context menu item: Download all links using BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Download all videos using BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Download link using &BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: E&ksport do programu Microsoft Excel - E:\Programy\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Programy\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O12 - Plugin for: .mov - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll (Apple Computer, Inc.) O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (InterTrust Technologies Corporation, Inc.) O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} http://downloads.ewido.net/ewidoOnlineScan.cab (ewidoOnlineScan Control) O16 - DPF: {4B4513E2-4E57-43DF-9496-FCD37E9DFA64} http://download.gamedesire.com/g_bin/pl/navy_2_0_0_29.cab (GameDesire Sea Battle) O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} http://www.eset.eu/buxus/docs/OnlineScanner.cab (OnlineScanner Control) O16 - DPF: {631FF594-EC25-4CFF-B869-402DF294E1D6} http://slimak.onet.pl/_m/kamerzysta/OnetInstalator012s.ocx (Instalator oprogramowania Onet.pl) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {BFA1F11D-3121-AFE1-4112-894323212DAC} http://download.gamedesire.com/g_bin/pl/words_2_0_0_51.cab (GameDesire Word Games) O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab (Java Plug-in 1.4.0_03) O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Java Plug-in 1.5.0_05) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Java Plug-in 1.5.0_10) O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Java Plug-in 1.5.0_11) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} http://download.gamedesire.com/g_bin/pl/soccer_2_0_0_20.cab (GameDesire Soccer) O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C5} http://download.gamedesire.com/g_bin/pl/snooker_2_0_0_35.cab (GameDesire Snooker) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-01-27 22:46:59 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-07-30 09:30:42 | 000,000,154 | R--- | M] () - M:\autorun.cfg -- [ UDF ] O32 - AutoRun File - [2008-11-27 13:02:24 | 000,214,280 | R--- | M] (Sports Interactive) - M:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2006-09-11 14:26:42 | 000,000,027 | R--- | M] () - M:\autorun.inf -- [ UDF ] O32 - AutoRun File - [2007-09-26 17:38:34 | 000,039,680 | R--- | M] (Sports Interactive) - N:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2007-09-05 21:47:46 | 000,000,027 | R--- | M] () - N:\autorun.inf -- [ UDF ] O32 - AutoRun File - [2004-08-18 09:55:50 | 000,000,000 | R--D | M] - O:\AutoRun -- [ CDFS ] O32 - AutoRun File - [2004-08-18 09:37:22 | 000,663,552 | R--- | M] (Electronic Arts Inc.) - O:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2004-08-18 09:33:44 | 000,598,016 | R--- | M] (Electronic Arts Inc.) - O:\AutoRunGUI.dll -- [ CDFS ] O32 - AutoRun File - [2004-08-18 09:54:43 | 000,000,083 | R--- | M] () - O:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{1fdb5ffc-5ac2-11db-b007-4d6564696130}\Shell - "" = AutoRun O33 - MountPoints2\{1fdb5ffc-5ac2-11db-b007-4d6564696130}\Shell\AutoRun\command - "" = M:\autorun.exe -- [2008-11-27 13:02:24 | 000,214,280 | R--- | M] (Sports Interactive) O33 - MountPoints2\{2076a340-619c-11db-b028-4d6564696130}\Shell - "" = AutoRun O33 - MountPoints2\{2076a340-619c-11db-b028-4d6564696130}\Shell\AutoRun\command - "" = N:\autorun.exe -- [2007-09-26 17:38:34 | 000,039,680 | R--- | M] (Sports Interactive) O33 - MountPoints2\{646c7565-4a7d-11dc-b1b8-4d6564696130}\Shell - "" = AutoRun O33 - MountPoints2\{646c7565-4a7d-11dc-b1b8-4d6564696130}\Shell\AutoRun\command - "" = O:\setup.exe -- [2004-08-18 09:33:45 | 000,110,592 | R--- | M] (Electronic Arts Inc.) O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-02-02 15:37:09 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe [2011-01-30 19:17:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\Zadania Etap III [2011-01-30 16:54:24 | 007,734,240 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Rafal\Pulpit\mbam_1.50.1.1100_[www.programosy.pl].exe [2011-01-29 19:08:05 | 000,880,624 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Rafal\Pulpit\SPTDinst-v162-x86(2).exe [2011-01-28 23:13:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\galeria_fotografii [2011-01-28 12:27:24 | 003,006,368 | ---- | C] (Piriform Ltd) -- C:\Documents and Settings\Rafal\Pulpit\ccsetup303.exe [2011-01-28 12:20:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan [2011-01-28 12:20:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Dane aplikacji\ArcaVirMicroScan [2011-01-28 12:20:08 | 000,258,640 | ---- | C] (ArcaBit) -- C:\Documents and Settings\Rafal\Pulpit\arcavirmicroscan.exe [2011-01-24 00:46:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\Rachunkowość [2011-01-20 00:27:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sun [2011-01-20 00:26:46 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2011-01-20 00:26:46 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2011-01-20 00:26:46 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2011-01-20 00:26:46 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2007-08-13 14:18:46 | 000,769,536 | ---- | C] (Toshiba Samsung Storage Technology Coporation) -- C:\Documents and Settings\Rafal\Dane aplikacji\sfdnwin.dll [2006-09-27 17:22:18 | 000,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys [2006-09-27 17:22:18 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys [1999-01-19 05:46:00 | 000,050,176 | ---- | C] ( ) -- C:\WINDOWS\System32\UnZDll.dll [3 C:\Documents and Settings\Rafal\Pulpit\*.tmp files -> C:\Documents and Settings\Rafal\Pulpit\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-02-02 15:45:02 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-02-02 15:37:15 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe [2011-02-02 14:42:21 | 000,000,442 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\SamsungLiveUpdateConfig.ini [2011-02-02 14:37:43 | 000,243,809 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2011-02-02 14:36:54 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-02-02 14:36:08 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2011-02-02 14:35:07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-02-02 03:27:33 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Rafal\ntuser.ini [2011-02-02 03:27:32 | 009,699,328 | -H-- | M] () -- C:\Documents and Settings\Rafal\NTUSER.DAT [2011-02-02 00:39:46 | 366,852,943 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Gossip.Girl.S04E08.HDTV.XviD-FEVER.rar [2011-02-02 00:16:22 | 000,003,181 | ---- | M] () -- C:\WINDOWS\bestplayer.bbt [2011-02-02 00:16:22 | 000,002,246 | ---- | M] () -- C:\WINDOWS\bestplayer.ini [2011-02-02 00:16:22 | 000,000,095 | ---- | M] () -- C:\WINDOWS\bestplayer.bpp [2011-02-02 00:15:33 | 000,164,864 | ---- | M] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-02-01 23:40:12 | 001,501,911 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Gossip.Girl.S04E07.War.at.the.Roses.HDTV.XviD-FQM.[VTV](2).avi.part [2011-02-01 23:31:11 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-02-01 15:04:04 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET [2011-02-01 13:23:28 | 000,109,568 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\egzamin_zarz-dzania_i_fir___8_zest._dwuzadaniowych.doc [2011-02-01 12:07:18 | 000,000,635 | ---- | M] () -- C:\WINDOWS\win.ini [2011-02-01 12:07:18 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2011-02-01 12:07:18 | 000,000,194 | RHS- | M] () -- C:\boot.ini [2011-02-01 02:37:45 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-01-30 20:22:49 | 000,063,912 | ---- | M] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2011-01-30 19:16:18 | 000,480,026 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\zadania-3etap.rar [2011-01-30 16:55:32 | 007,734,240 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Rafal\Pulpit\mbam_1.50.1.1100_[www.programosy.pl].exe [2011-01-30 15:21:15 | 000,243,920 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-01-29 20:37:06 | 000,000,249 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\ax_files.xml [2011-01-29 19:56:01 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\btjkuykr.exe [2011-01-29 19:08:05 | 000,880,624 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Rafal\Pulpit\SPTDinst-v162-x86(2).exe [2011-01-29 15:24:26 | 000,000,555 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan.lnk [2011-01-29 00:12:02 | 000,114,688 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\inwentaryzacja 2010.xls [2011-01-28 22:31:10 | 000,156,742 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Test z II etapu Progress Accounting Competition II.pdf [2011-01-28 12:27:47 | 003,006,368 | ---- | M] (Piriform Ltd) -- C:\Documents and Settings\Rafal\Pulpit\ccsetup303.exe [2011-01-28 12:20:13 | 000,258,640 | ---- | M] (ArcaBit) -- C:\Documents and Settings\Rafal\Pulpit\arcavirmicroscan.exe [2011-01-26 23:53:36 | 000,072,762 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\moja pani.JPG [2011-01-26 22:38:56 | 000,051,712 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 22-01-2011 (popr2).xls [2011-01-26 20:56:51 | 000,002,689 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Sony Ericsson PC Suite.lnk [2011-01-25 20:12:16 | 002,114,672 | -H-- | M] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\IconCache.db [2011-01-22 19:09:05 | 000,213,791 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\2011-01-22-19-08-16-553120.cut.553120-1.pdf [2011-01-20 00:25:04 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2011-01-20 00:25:04 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2011-01-20 00:25:03 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2011-01-20 00:25:03 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2011-01-20 00:25:00 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2011-01-19 22:44:08 | 000,052,224 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 17-01-2011 (Popr cwicz).xls [2011-01-19 09:22:11 | 000,167,424 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Wzory_struktura,korelacja,regresja,indeksy,trend,sezonowość.doc [2011-01-19 04:19:46 | 000,504,832 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Pomorska, Lech Zachowania konsumenta, koszty i korzyści.doc [2011-01-17 18:58:19 | 000,574,615 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\20110117070827487.pdf [2011-01-14 22:36:31 | 000,000,151 | ---- | M] () -- C:\WINDOWS\PhotoSnapViewer.INI [2011-01-10 15:00:12 | 000,268,566 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\DSC02775.JPG [2011-01-10 00:44:21 | 000,161,280 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\1.1.doc [2011-01-07 00:26:21 | 000,017,597 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Odszukane odpowiedz na pytania.docx [2011-01-07 00:23:54 | 000,017,774 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#3.docx [2011-01-06 23:52:33 | 000,020,584 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#4.docx [2011-01-06 23:50:50 | 000,014,423 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Omw pojcie finansw.docx [2011-01-06 21:53:20 | 000,128,512 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\praca licencjat rafal.doc [2011-01-06 01:28:38 | 003,835,402 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\itm_1_2011.pdf [2011-01-04 17:35:57 | 000,020,992 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\rachunek- pytania od FiRu.doc [3 C:\Documents and Settings\Rafal\Pulpit\*.tmp files -> C:\Documents and Settings\Rafal\Pulpit\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-01 23:50:47 | 366,852,943 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Gossip.Girl.S04E08.HDTV.XviD-FEVER.rar [2011-02-01 23:39:53 | 001,501,911 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Gossip.Girl.S04E07.War.at.the.Roses.HDTV.XviD-FQM.[VTV](2).avi.part [2011-02-01 13:00:26 | 000,109,568 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\egzamin_zarz-dzania_i_fir___8_zest._dwuzadaniowych.doc [2011-01-30 19:16:16 | 000,480,026 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\zadania-3etap.rar [2011-01-29 19:56:01 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\btjkuykr.exe [2011-01-29 00:50:00 | 000,000,555 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan.lnk [2011-01-28 22:31:04 | 000,156,742 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Test z II etapu Progress Accounting Competition II.pdf [2011-01-26 23:53:36 | 000,072,762 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\moja pani.JPG [2011-01-26 22:38:56 | 000,051,712 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 22-01-2011 (popr2).xls [2011-01-22 21:35:19 | 000,114,688 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\inwentaryzacja 2010.xls [2011-01-22 19:09:00 | 000,213,791 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\2011-01-22-19-08-16-553120.cut.553120-1.pdf [2011-01-19 22:44:08 | 000,052,224 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 17-01-2011 (Popr cwicz).xls [2011-01-19 09:22:08 | 000,167,424 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Wzory_struktura,korelacja,regresja,indeksy,trend,sezonowość.doc [2011-01-19 02:40:34 | 000,504,832 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Pomorska, Lech Zachowania konsumenta, koszty i korzyści.doc [2011-01-17 18:58:11 | 000,574,615 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\20110117070827487.pdf [2011-01-10 15:00:12 | 000,268,566 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\DSC02775.JPG [2011-01-10 00:44:21 | 000,161,280 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\1.1.doc [2011-01-07 00:26:21 | 000,017,597 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Odszukane odpowiedz na pytania.docx [2011-01-07 00:23:54 | 000,017,774 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#3.docx [2011-01-06 23:52:33 | 000,020,584 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#4.docx [2011-01-06 23:50:50 | 000,014,423 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Omw pojcie finansw.docx [2011-01-06 01:27:29 | 003,835,402 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\itm_1_2011.pdf [2011-01-04 17:35:57 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\rachunek- pytania od FiRu.doc [2010-07-05 14:57:53 | 000,235,648 | ---- | C] () -- C:\WINDOWS\System32\mgaud.dll [2009-10-25 11:32:59 | 000,000,291 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2009-02-04 17:01:09 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll [2009-02-04 16:58:51 | 000,031,567 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2009-01-10 15:52:25 | 000,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2009-01-10 15:52:25 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2008-12-18 14:47:05 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\hpzinstall.log [2008-11-24 18:37:06 | 000,000,154 | ---- | C] () -- C:\WINDOWS\adidsl.ini [2008-11-24 18:37:06 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini [2008-11-24 18:36:54 | 000,000,342 | ---- | C] () -- C:\WINDOWS\adiras.ini [2008-11-24 18:36:53 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll [2008-11-24 18:36:52 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll [2008-11-22 12:01:34 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\adinst32.dll [2008-11-09 13:57:02 | 000,000,621 | ---- | C] () -- C:\WINDOWS\tlknw4.ini [2008-04-25 16:50:17 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2008-03-07 00:14:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI [2008-02-20 14:31:25 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2008-02-11 09:39:26 | 000,253,952 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLA.dll [2008-02-11 09:39:18 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLW.dll [2008-02-08 13:53:46 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerLang.dll [2008-02-01 10:11:04 | 000,002,045 | -H-- | C] () -- C:\WINDOWS\System32\whlb32f.dll [2007-12-06 19:54:30 | 000,159,992 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2007-10-29 17:30:28 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD-Start.INI [2007-08-11 19:32:14 | 000,000,131 | ---- | C] () -- C:\WINDOWS\kaillera.ini [2007-08-06 22:10:58 | 000,000,525 | ---- | C] () -- C:\WINDOWS\QIII.INI [2007-07-27 16:31:48 | 000,000,442 | ---- | C] () -- C:\Documents and Settings\Rafal\Dane aplikacji\SamsungLiveUpdateConfig.ini [2007-07-27 14:49:02 | 000,225,355 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiW.dll [2007-07-27 14:49:02 | 000,196,683 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiA.dll [2007-06-09 20:55:31 | 000,000,040 | ---- | C] () -- C:\WINDOWS\Nokia Snake.ini [2007-01-28 11:50:47 | 000,000,169 | ---- | C] () -- C:\WINDOWS\powerplayer.ini [2007-01-28 11:50:47 | 000,000,020 | ---- | C] () -- C:\WINDOWS\powerlist.ini [2007-01-28 11:50:46 | 000,000,605 | ---- | C] () -- C:\WINDOWS\psnetwork.ini [2007-01-27 17:58:34 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2007-01-13 20:41:44 | 000,000,546 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-01-09 15:43:55 | 000,000,008 | ---- | C] () -- C:\WINDOWS\spobuffx.sys [2007-01-03 17:45:40 | 000,210,032 | ---- | C] () -- C:\WINDOWS\System32\DBCLIENT.DLL [2007-01-03 17:45:21 | 000,181,760 | ---- | C] () -- C:\WINDOWS\System32\sklib.dll [2006-12-26 15:06:04 | 000,000,067 | ---- | C] () -- C:\WINDOWS\#1 Video Converter.INI [2006-12-10 20:54:47 | 000,000,057 | ---- | C] () -- C:\WINDOWS\System32\peer.ini [2006-11-26 21:24:35 | 000,000,249 | ---- | C] () -- C:\WINDOWS\naglos.INI [2006-11-07 19:06:46 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2006-10-29 12:28:54 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2006-10-29 12:28:53 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2006-10-29 12:28:52 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2006-10-14 23:58:58 | 002,114,672 | -H-- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\IconCache.db [2006-10-09 21:04:54 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2006-10-04 19:18:03 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006-10-04 18:58:34 | 000,164,864 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2006-10-01 16:03:56 | 000,000,146 | ---- | C] () -- C:\WINDOWS\app.ini [2006-09-29 15:12:05 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2006-09-27 16:01:36 | 000,094,636 | ---- | C] () -- C:\WINDOWS\dropcpyr.dll [2006-09-27 16:01:11 | 000,002,246 | ---- | C] () -- C:\WINDOWS\bestplayer.ini [2006-09-27 15:56:23 | 001,143,842 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2006-09-27 15:56:23 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2006-09-27 15:56:06 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\desktop.ini [2006-09-27 15:28:53 | 000,041,068 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll [2006-09-27 15:25:26 | 000,063,912 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2006-09-27 15:25:14 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2006-09-27 15:17:59 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2006-09-27 15:17:58 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2006-09-27 15:08:29 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\Rafal\Dane aplikacji\desktop.ini [2006-09-27 15:02:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2006-09-27 15:00:27 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2006-09-27 15:00:27 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2006-09-27 15:00:10 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2006-09-27 15:00:08 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2005-12-05 19:25:22 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\lnod32umc.dll [2005-12-05 12:37:10 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\lnod32upd.dll [2005-06-19 08:49:00 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2005-04-26 01:05:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\vbaZlib.dll [2005-02-24 17:56:45 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2004-08-22 16:04:56 | 000,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll [2002-09-20 17:04:42 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2002-09-20 17:04:28 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2002-09-20 17:03:48 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2002-09-20 17:03:38 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2002-08-28 20:23:06 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2002-08-28 20:22:36 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [2001-10-26 18:29:40 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\scriptpw.dll [2001-10-26 18:29:32 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2001-10-26 18:28:34 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2001-10-26 18:27:02 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2001-10-26 17:15:04 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2001-10-26 17:14:52 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2001-10-26 17:14:32 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2001-10-26 17:12:52 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2001-10-26 16:45:26 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2001-10-26 16:45:26 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2001-10-26 16:45:24 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2001-10-26 16:42:08 | 000,020,629 | ---- | C] () -- C:\WINDOWS\System32\mqperf.ini [2001-10-26 16:42:08 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2001-10-26 16:42:08 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2001-10-26 16:42:08 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2001-08-17 22:31:56 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2001-08-17 22:31:56 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2001-08-17 22:31:50 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2001-08-17 22:31:46 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2001-08-17 22:31:46 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2001-08-17 22:31:44 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2001-08-17 22:31:38 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2001-08-17 22:31:38 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2001-08-17 22:13:24 | 000,002,656 | ---- | C] () -- C:\WINDOWS\System32\netware.drv [2001-08-17 20:55:06 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2001-07-22 04:43:48 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2001-07-22 03:25:18 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2001-07-21 23:16:20 | 000,000,635 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 23:15:52 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2001-07-21 23:15:50 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [1999-05-21 19:10:00 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\ZipDll.dll [color=#E56717]========== LOP Check ==========[/color] [2009-01-17 15:36:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Football Manager 2009 Certificate [2008-04-03 16:04:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Autodesk [2007-03-20 21:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Default [2008-10-04 19:36:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Installations [2010-09-30 20:31:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ipla [2010-04-09 21:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\OpenFM [2008-10-04 19:38:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\PC Suite [2009-02-04 17:09:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ScanSoft [2009-11-12 15:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sports Interactive [2008-07-16 22:13:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Teleca [2011-02-02 14:40:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP [2010-10-20 20:33:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\tmp [2006-08-07 22:55:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.ZARZĄDZANIE NT.000\Dane aplikacji\Opera [2009-02-24 09:24:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.ZARZĄDZANIE NT.002\Dane aplikacji\MEGAUPLOADTOOLBAR [2011-01-29 16:00:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ArcaVirMicroScan [2008-04-03 15:29:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Autodesk [2008-01-11 22:50:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\AutoUpdate [2007-02-27 16:02:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\COWON [2010-06-15 14:48:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\EurekaLog [2007-05-11 15:24:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Gadu-Gadu [2009-05-29 20:32:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\GanymedeNet [2009-06-16 14:46:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\InsERT GT [2007-01-27 17:41:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\InterTrust [2010-10-01 07:47:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ipla [2011-02-02 02:21:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Kamerzysta [2008-10-17 18:41:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\LG Electronics [2009-01-08 16:45:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\LimeWire [2008-10-04 20:14:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Nokia [2010-12-07 17:08:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Nowe Gadu-Gadu [2010-03-31 15:13:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\OpenFM [2006-09-27 15:34:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Opera [2008-10-04 19:38:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\PC Suite [2006-12-10 20:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\PPLive [2007-01-28 11:50:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ppStream [2008-07-07 14:49:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\SecondLife [2008-11-21 21:51:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Simple Sudoku [2009-11-12 15:47:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Sports Interactive [2007-11-28 21:49:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Teleca [2007-11-18 11:17:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\temp [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2009-10-19 22:43:28 | 000,042,496 | ---- | M] ()(C:\Documents and Settings\Rafal\Pulpit\kawa?y.doc) -- C:\Documents and Settings\Rafal\Pulpit\kawa�y.doc [2009-10-19 21:42:26 | 000,040,368 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\?wiczenia2.doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\�wiczenia2.doc [2009-10-19 21:42:26 | 000,040,368 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\?wiczenia2.doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\�wiczenia2.doc [2009-10-18 22:25:36 | 000,042,496 | ---- | C] ()(C:\Documents and Settings\Rafal\Pulpit\kawa?y.doc) -- C:\Documents and Settings\Rafal\Pulpit\kawa�y.doc [2007-08-06 21:45:34 | 000,288,595 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za?atwiane_przez_PUP.pdf) -- C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za�atwiane_przez_PUP.pdf [2007-08-06 21:45:34 | 000,288,595 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za?atwiane_przez_PUP.pdf) -- C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za�atwiane_przez_PUP.pdf [2007-05-19 19:03:36 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (2)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (2)..doc [2007-05-19 19:03:36 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (2)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (2)..doc [2007-05-19 18:59:22 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (1)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (1)..doc [2007-05-19 18:59:22 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (1)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (1)..doc [2007-05-19 18:58:08 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic..doc [2007-05-19 18:58:08 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic..doc [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:7E95B6FD < End of report >

**Posty:** 18165 · przez **wojtas** 02 Lut 2011, 21:29

dalej mało miejsca na C, zapchany autostart.. jeśli tego nie wykonasz to dalej będzie długo się włączał

**Posty:** 72 · przez **17rafal** 02 Lut 2011, 22:01

ok, na C teraz 1,1 Gb wolnego, z autostartu cos powywalalem, ale boje sie wiecej, zeby nie wylaczyc czegos potrzebnego. Ale mam tak ze pasek startu sie zawiesil, jak np. wcisne start to rozwija sie on dopiero po jakiejs minucie, nigdy tak nie mialem;/

**Posty:** 18165 · przez **wojtas** 03 Lut 2011, 11:43

odinstaluj antywirusa narazie i wszystkie ochronne programy

O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ATICCC] File not found
O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DAEMON Tools-1033] C:\Program Files\D-Tools\daemon.exe (DAEMON'S HOME)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [Name of App] C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe ( )
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)

te możesz spokojnie wyłączyć,

Klikasz prawym przyciskiem myszy na Mój komputer => Właściwości => Sprzęt => Menadżer urządzeń => Kontrolery IDE ATA/ATAPI => Podstawowy kanał IDE => Ustawienia zaawansowane i sprawdź czy dysk pracuje w trybie PIO czy DMA. Sprawdz tez w pomocniczym kanale IDE. Jeśli w którymś kanale jest tryb PIO to klikasz na niego PPM i Odinstaluj. Po restarcie sprawdz czy jest lepiej

po tym 3 nowe logi

**Posty:** 72 · przez **17rafal** 03 Lut 2011, 18:11

u mnie nie ma tej czesci "Podstawowy kanał IDE => Ustawienia zaawansowane " tam jest nvidia nforce3, tam we wlasciwosciach bylo master driver i jest ULTRA DMA 5 a nizej slave driver i bylo PIO mode to zmienilem na ULTRA DMA 4. ale nie wiem czy o to chodzilo:)

**Posty:** 18165 · przez **wojtas** 03 Lut 2011, 18:14

o to czyli tu jest w porządku

**Posty:** 72 · przez **17rafal** 03 Lut 2011, 18:16

czyli dobrze ze zmienilem? dac logi z OTL? gmer dalej mi nie dziala chce tam w menadzerze urzadzen wylaczyc wirtualne napedy, da to cos zeby gmer odpalil?

**Posty:** 18165 · przez **wojtas** 03 Lut 2011, 18:17

nie to nic nie da

dobrze że zrobiłeś.. daj nowe logi

**Posty:** 72 · przez **17rafal** 03 Lut 2011, 18:33

Kod: Zaznacz wszystko: OTL logfile created on: 2011-02-03 17:22:06 - Run 2 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Rafal\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 112,00 Mb Available Physical Memory | 22,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 71,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,65 Gb Total Space | 1,40 Gb Free Space | 9,58% Space Free | Partition Type: NTFS Drive D: | 3,00 Gb Total Space | 2,99 Gb Free Space | 99,41% Space Free | Partition Type: NTFS Drive E: | 33,61 Gb Total Space | 2,97 Gb Free Space | 8,84% Space Free | Partition Type: NTFS Drive G: | 34,05 Gb Total Space | 18,02 Gb Free Space | 52,93% Space Free | Partition Type: NTFS Drive H: | 32,69 Gb Total Space | 5,84 Gb Free Space | 17,86% Space Free | Partition Type: NTFS Drive I: | 34,06 Gb Total Space | 1,05 Gb Free Space | 3,08% Space Free | Partition Type: NTFS Drive M: | 2,32 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive N: | 543,80 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Drive O: | 650,17 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: LECH | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-02-02 15:37:15 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe PRC - [2007-01-29 21:12:14 | 000,030,248 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe PRC - [2006-12-03 00:14:03 | 000,310,784 | ---- | M] (http://autoconnect.prv.pl) -- C:\Program Files\AutoConnect\AutoConnect.exe PRC - [2004-12-13 00:05:20 | 001,527,893 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe PRC - [2004-12-13 00:05:20 | 000,065,536 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe PRC - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe PRC - [2004-07-27 10:01:36 | 000,068,096 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-02-02 15:37:15 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (wmplayer) SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0) SRV - [2007-10-25 21:34:25 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2007-03-26 12:06:24 | 000,292,864 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2005-11-14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004-12-13 00:05:20 | 001,527,893 | ---- | M] (The Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance) SRV - [2004-12-13 00:05:20 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance) SRV - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-07-14 19:54:00 | 007,741,664 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2008-04-14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-04-14 00:10:52 | 000,149,376 | ---- | M] (M-Systems) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\tffsport.sys -- (tffsport) DRV - [2007-07-11 14:51:48 | 000,019,840 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2007-07-11 09:45:00 | 000,021,632 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2007-07-11 09:40:18 | 000,012,416 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2007-01-30 22:16:13 | 000,017,480 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2006-09-18 14:59:08 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se27unic.sys -- (se27unic) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM) DRV - [2006-09-18 14:59:02 | 000,086,560 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27obex.sys -- (SE27obex) DRV - [2006-09-18 14:59:00 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se27nd5.sys -- (se27nd5) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS) DRV - [2006-09-18 14:58:58 | 000,088,688 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mgmt.sys -- (SE27mgmt) Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM) DRV - [2006-09-18 14:58:54 | 000,097,184 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mdm.sys -- (SE27mdm) DRV - [2006-09-18 14:58:52 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27mdfl.sys -- (SE27mdfl) DRV - [2006-09-18 14:58:48 | 000,061,600 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27bus.sys -- (SE27bus) Sony Ericsson Device 039 Driver driver (WDM) DRV - [2005-01-24 14:38:04 | 000,084,512 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm) DRV - [2005-01-24 14:38:04 | 000,006,064 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl) DRV - [2005-01-24 14:38:00 | 000,052,384 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) Samsung Mobile USB Device 1.0 driver (WDM) DRV - [2004-10-15 12:50:20 | 000,015,295 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrScnUsb.sys -- (BrScnUsb) DRV - [2004-08-22 15:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt) DRV - [2004-08-22 15:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\d347bus.sys -- (d347bus) DRV - [2004-08-02 14:09:18 | 000,635,281 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2004-06-03 03:40:46 | 000,079,360 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nvatabus.sys -- (nvatabus) DRV - [2004-03-02 09:26:58 | 000,050,007 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys) DRV - [2004-03-02 09:24:16 | 000,127,065 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw) DRV - [2004-02-24 04:08:52 | 000,400,384 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS) DRV - [2003-10-29 06:02:00 | 000,021,120 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nv_agp.sys -- (nv_agp) DRV - [2002-08-28 22:16:22 | 000,020,864 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LwAdiHid.sys -- (LwAdiHid) Urządzenia cyfrowe Logitech WingMan (autowykrywanie) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-842925246-616249376-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.pajacyk.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..network.proxy.type: 2 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-12 11:18:48 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-01-20 00:26:47 | 000,000,000 | ---D | M] [2010-06-09 22:33:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Extensions [2011-02-03 15:01:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions [2009-09-27 00:36:05 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2008-12-19 21:49:06 | 000,000,414 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\kamila.xml [2008-08-05 16:41:39 | 000,001,994 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\Mozilla\Firefox\Profiles\2anx56k0.default\searchplugins\wrzuta.xml [2011-02-03 15:01:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-20 00:26:54 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-01-20 00:25:20 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008-06-24 18:31:00 | 000,925,696 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPBOARDS.dll [2008-06-24 18:35:00 | 000,868,352 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPCARDS.dll [2011-01-20 00:25:14 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2008-09-30 14:03:24 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll [2008-06-24 18:34:00 | 000,679,936 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPMAKAOV2.dll [2008-06-24 18:28:00 | 000,598,016 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPPOKER.dll [2008-06-24 16:45:00 | 000,593,920 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPROULETTE.dll [2008-06-24 17:45:00 | 000,557,056 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPSLOTS70.dll [2010-11-14 19:37:59 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-11-14 19:37:59 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-11-14 19:38:00 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-11-14 19:38:00 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-11-14 19:38:00 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-11-14 19:38:01 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2011-01-29 18:47:38 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll (BitComet) O4 - HKLM..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [PPort11reminder] C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - Startup: C:\Documents and Settings\Rafal\Menu Start\Programy\Autostart\Skrót do AutoConnect.lnk = C:\Program Files\AutoConnect\AutoConnect.exe (http://autoconnect.prv.pl) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O8 - Extra context menu item: Download all links using BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Download all videos using BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Download link using &BitComet - E:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: E&ksport do programu Microsoft Excel - E:\Programy\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Programy\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O12 - Plugin for: .mov - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll (Apple Computer, Inc.) O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (InterTrust Technologies Corporation, Inc.) O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} http://downloads.ewido.net/ewidoOnlineScan.cab (ewidoOnlineScan Control) O16 - DPF: {4B4513E2-4E57-43DF-9496-FCD37E9DFA64} http://download.gamedesire.com/g_bin/pl/navy_2_0_0_29.cab (GameDesire Sea Battle) O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} http://www.eset.eu/buxus/docs/OnlineScanner.cab (OnlineScanner Control) O16 - DPF: {631FF594-EC25-4CFF-B869-402DF294E1D6} http://slimak.onet.pl/_m/kamerzysta/OnetInstalator012s.ocx (Instalator oprogramowania Onet.pl) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {BFA1F11D-3121-AFE1-4112-894323212DAC} http://download.gamedesire.com/g_bin/pl/words_2_0_0_51.cab (GameDesire Word Games) O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab (Java Plug-in 1.4.0_03) O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Java Plug-in 1.5.0_05) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Java Plug-in 1.5.0_10) O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Java Plug-in 1.5.0_11) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} http://download.gamedesire.com/g_bin/pl/soccer_2_0_0_20.cab (GameDesire Soccer) O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C5} http://download.gamedesire.com/g_bin/pl/snooker_2_0_0_35.cab (GameDesire Snooker) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-01-27 22:46:59 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-07-30 09:30:42 | 000,000,154 | R--- | M] () - M:\autorun.cfg -- [ UDF ] O32 - AutoRun File - [2008-11-27 13:02:24 | 000,214,280 | R--- | M] (Sports Interactive) - M:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2006-09-11 14:26:42 | 000,000,027 | R--- | M] () - M:\autorun.inf -- [ UDF ] O32 - AutoRun File - [2007-09-26 17:38:34 | 000,039,680 | R--- | M] (Sports Interactive) - N:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2007-09-05 21:47:46 | 000,000,027 | R--- | M] () - N:\autorun.inf -- [ UDF ] O32 - AutoRun File - [2004-08-18 09:55:50 | 000,000,000 | R--D | M] - O:\AutoRun -- [ CDFS ] O32 - AutoRun File - [2004-08-18 09:37:22 | 000,663,552 | R--- | M] (Electronic Arts Inc.) - O:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2004-08-18 09:33:44 | 000,598,016 | R--- | M] (Electronic Arts Inc.) - O:\AutoRunGUI.dll -- [ CDFS ] O32 - AutoRun File - [2004-08-18 09:54:43 | 000,000,083 | R--- | M] () - O:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{1fdb5ffc-5ac2-11db-b007-4d6564696130}\Shell - "" = AutoRun O33 - MountPoints2\{1fdb5ffc-5ac2-11db-b007-4d6564696130}\Shell\AutoRun\command - "" = M:\autorun.exe -- [2008-11-27 13:02:24 | 000,214,280 | R--- | M] (Sports Interactive) O33 - MountPoints2\{2076a340-619c-11db-b028-4d6564696130}\Shell - "" = AutoRun O33 - MountPoints2\{2076a340-619c-11db-b028-4d6564696130}\Shell\AutoRun\command - "" = N:\autorun.exe -- [2007-09-26 17:38:34 | 000,039,680 | R--- | M] (Sports Interactive) O33 - MountPoints2\{646c7565-4a7d-11dc-b1b8-4d6564696130}\Shell - "" = AutoRun O33 - MountPoints2\{646c7565-4a7d-11dc-b1b8-4d6564696130}\Shell\AutoRun\command - "" = O:\setup.exe -- [2004-08-18 09:33:45 | 000,110,592 | R--- | M] (Electronic Arts Inc.) O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-02-02 15:37:09 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe [2011-01-30 19:17:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\Zadania Etap III [2011-01-30 16:54:24 | 007,734,240 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Rafal\Pulpit\mbam_1.50.1.1100_[www.programosy.pl].exe [2011-01-28 23:13:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\galeria_fotografii [2011-01-28 12:20:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan [2011-01-28 12:20:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Dane aplikacji\ArcaVirMicroScan [2011-01-28 12:20:08 | 000,258,640 | ---- | C] (ArcaBit) -- C:\Documents and Settings\Rafal\Pulpit\arcavirmicroscan.exe [2011-01-24 00:46:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rafal\Pulpit\Rachunkowość [2011-01-20 00:27:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sun [2011-01-20 00:26:46 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2011-01-20 00:26:46 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2011-01-20 00:26:46 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2011-01-20 00:26:46 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2007-08-13 14:18:46 | 000,769,536 | ---- | C] (Toshiba Samsung Storage Technology Coporation) -- C:\Documents and Settings\Rafal\Dane aplikacji\sfdnwin.dll [2006-09-27 17:22:18 | 000,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys [2006-09-27 17:22:18 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys [1999-01-19 05:46:00 | 000,050,176 | ---- | C] ( ) -- C:\WINDOWS\System32\UnZDll.dll [3 C:\Documents and Settings\Rafal\Pulpit\*.tmp files -> C:\Documents and Settings\Rafal\Pulpit\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-02-03 17:00:22 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-02-03 16:59:43 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2011-02-03 16:58:50 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-02-03 16:43:41 | 009,699,328 | -H-- | M] () -- C:\Documents and Settings\Rafal\NTUSER.DAT [2011-02-03 16:43:41 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Rafal\ntuser.ini [2011-02-03 16:28:38 | 000,000,635 | ---- | M] () -- C:\WINDOWS\win.ini [2011-02-03 16:28:38 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2011-02-03 16:28:38 | 000,000,194 | RHS- | M] () -- C:\boot.ini [2011-02-03 15:45:00 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-02-03 15:17:37 | 000,037,376 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Rafał Lech AT.doc [2011-02-02 21:33:07 | 000,003,181 | ---- | M] () -- C:\WINDOWS\bestplayer.bbt [2011-02-02 21:33:07 | 000,002,298 | ---- | M] () -- C:\WINDOWS\bestplayer.ini [2011-02-02 21:33:06 | 000,000,051 | ---- | M] () -- C:\WINDOWS\bestplayer.bpp [2011-02-02 21:32:01 | 000,165,888 | ---- | M] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-02-02 16:21:12 | 002,376,625 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Angielski.zip [2011-02-02 15:37:15 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rafal\Pulpit\OTL.exe [2011-02-02 14:42:21 | 000,000,442 | ---- | M] () -- C:\Documents and Settings\Rafal\Dane aplikacji\SamsungLiveUpdateConfig.ini [2011-02-02 14:37:43 | 000,243,809 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2011-02-01 23:31:11 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-02-01 15:04:04 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET [2011-02-01 13:23:28 | 000,109,568 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\egzamin_zarz-dzania_i_fir___8_zest._dwuzadaniowych.doc [2011-02-01 02:37:45 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-01-30 20:22:49 | 000,063,912 | ---- | M] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2011-01-30 19:16:18 | 000,480,026 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\zadania-3etap.rar [2011-01-30 16:55:32 | 007,734,240 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Rafal\Pulpit\mbam_1.50.1.1100_[www.programosy.pl].exe [2011-01-30 15:21:15 | 000,243,920 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-01-29 20:37:06 | 000,000,249 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\ax_files.xml [2011-01-29 19:56:01 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\btjkuykr.exe [2011-01-29 15:24:26 | 000,000,555 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan.lnk [2011-01-29 00:12:02 | 000,114,688 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\inwentaryzacja 2010.xls [2011-01-28 22:31:10 | 000,156,742 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Test z II etapu Progress Accounting Competition II.pdf [2011-01-28 12:20:13 | 000,258,640 | ---- | M] (ArcaBit) -- C:\Documents and Settings\Rafal\Pulpit\arcavirmicroscan.exe [2011-01-26 23:53:36 | 000,072,762 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\moja pani.JPG [2011-01-26 22:38:56 | 000,051,712 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 22-01-2011 (popr2).xls [2011-01-26 20:56:51 | 000,002,689 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Sony Ericsson PC Suite.lnk [2011-01-25 20:12:16 | 002,114,672 | -H-- | M] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\IconCache.db [2011-01-22 19:09:05 | 000,213,791 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\2011-01-22-19-08-16-553120.cut.553120-1.pdf [2011-01-20 00:25:04 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2011-01-20 00:25:04 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2011-01-20 00:25:03 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2011-01-20 00:25:03 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2011-01-20 00:25:00 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2011-01-19 22:44:08 | 000,052,224 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 17-01-2011 (Popr cwicz).xls [2011-01-19 09:22:11 | 000,167,424 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Wzory_struktura,korelacja,regresja,indeksy,trend,sezonowość.doc [2011-01-19 04:19:46 | 000,504,832 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\Pomorska, Lech Zachowania konsumenta, koszty i korzyści.doc [2011-01-17 18:58:19 | 000,574,615 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\20110117070827487.pdf [2011-01-14 22:36:31 | 000,000,151 | ---- | M] () -- C:\WINDOWS\PhotoSnapViewer.INI [2011-01-12 21:44:59 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-01-10 15:00:12 | 000,268,566 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\DSC02775.JPG [2011-01-10 00:44:21 | 000,161,280 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\1.1.doc [2011-01-07 00:26:21 | 000,017,597 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Odszukane odpowiedz na pytania.docx [2011-01-07 00:23:54 | 000,017,774 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#3.docx [2011-01-06 23:52:33 | 000,020,584 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#4.docx [2011-01-06 23:50:50 | 000,014,423 | ---- | M] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Omw pojcie finansw.docx [2011-01-06 21:53:20 | 000,128,512 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\praca licencjat rafal.doc [2011-01-06 01:28:38 | 003,835,402 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\itm_1_2011.pdf [2011-01-04 17:35:57 | 000,020,992 | ---- | M] () -- C:\Documents and Settings\Rafal\Pulpit\rachunek- pytania od FiRu.doc [3 C:\Documents and Settings\Rafal\Pulpit\*.tmp files -> C:\Documents and Settings\Rafal\Pulpit\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-03 01:00:05 | 000,037,376 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Rafał Lech AT.doc [2011-02-02 16:20:50 | 002,376,625 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Angielski.zip [2011-02-01 13:00:26 | 000,109,568 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\egzamin_zarz-dzania_i_fir___8_zest._dwuzadaniowych.doc [2011-01-30 19:16:16 | 000,480,026 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\zadania-3etap.rar [2011-01-29 19:56:01 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\btjkuykr.exe [2011-01-29 00:50:00 | 000,000,555 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\ArcaVirMicroScan.lnk [2011-01-28 22:31:04 | 000,156,742 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Test z II etapu Progress Accounting Competition II.pdf [2011-01-26 23:53:36 | 000,072,762 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\moja pani.JPG [2011-01-26 22:38:56 | 000,051,712 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 22-01-2011 (popr2).xls [2011-01-22 21:35:19 | 000,114,688 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\inwentaryzacja 2010.xls [2011-01-22 19:09:00 | 000,213,791 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\2011-01-22-19-08-16-553120.cut.553120-1.pdf [2011-01-19 22:44:08 | 000,052,224 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\MF Dz 17-01-2011 (Popr cwicz).xls [2011-01-19 09:22:08 | 000,167,424 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Wzory_struktura,korelacja,regresja,indeksy,trend,sezonowość.doc [2011-01-19 02:40:34 | 000,504,832 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\Pomorska, Lech Zachowania konsumenta, koszty i korzyści.doc [2011-01-17 18:58:11 | 000,574,615 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\20110117070827487.pdf [2011-01-10 15:00:12 | 000,268,566 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\DSC02775.JPG [2011-01-10 00:44:21 | 000,161,280 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\1.1.doc [2011-01-07 00:26:21 | 000,017,597 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Odszukane odpowiedz na pytania.docx [2011-01-07 00:23:54 | 000,017,774 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#3.docx [2011-01-06 23:52:33 | 000,020,584 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\#4.docx [2011-01-06 23:50:50 | 000,014,423 | ---- | C] () -- C:\Documents and Settings\Rafal\Moje dokumenty\Omw pojcie finansw.docx [2011-01-06 01:27:29 | 003,835,402 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\itm_1_2011.pdf [2011-01-04 17:35:57 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\Rafal\Pulpit\rachunek- pytania od FiRu.doc [2010-07-05 14:57:53 | 000,235,648 | ---- | C] () -- C:\WINDOWS\System32\mgaud.dll [2009-10-25 11:32:59 | 000,000,291 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2009-02-04 17:01:09 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll [2009-02-04 16:58:51 | 000,031,567 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2009-01-10 15:52:25 | 000,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2009-01-10 15:52:25 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2008-12-18 14:47:05 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\hpzinstall.log [2008-11-24 18:37:06 | 000,000,154 | ---- | C] () -- C:\WINDOWS\adidsl.ini [2008-11-24 18:37:06 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini [2008-11-24 18:36:54 | 000,000,342 | ---- | C] () -- C:\WINDOWS\adiras.ini [2008-11-24 18:36:53 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll [2008-11-24 18:36:52 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll [2008-11-22 12:01:34 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\adinst32.dll [2008-11-09 13:57:02 | 000,000,621 | ---- | C] () -- C:\WINDOWS\tlknw4.ini [2008-04-25 16:50:17 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2008-03-07 00:14:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI [2008-02-20 14:31:25 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2008-02-11 09:39:26 | 000,253,952 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLA.dll [2008-02-11 09:39:18 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLW.dll [2008-02-08 13:53:46 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerLang.dll [2008-02-01 10:11:04 | 000,002,045 | -H-- | C] () -- C:\WINDOWS\System32\whlb32f.dll [2007-12-06 19:54:30 | 000,159,992 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2007-10-29 17:30:28 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD-Start.INI [2007-08-11 19:32:14 | 000,000,131 | ---- | C] () -- C:\WINDOWS\kaillera.ini [2007-08-06 22:10:58 | 000,000,525 | ---- | C] () -- C:\WINDOWS\QIII.INI [2007-07-27 16:31:48 | 000,000,442 | ---- | C] () -- C:\Documents and Settings\Rafal\Dane aplikacji\SamsungLiveUpdateConfig.ini [2007-07-27 14:49:02 | 000,225,355 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiW.dll [2007-07-27 14:49:02 | 000,196,683 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiA.dll [2007-06-09 20:55:31 | 000,000,040 | ---- | C] () -- C:\WINDOWS\Nokia Snake.ini [2007-01-28 11:50:47 | 000,000,169 | ---- | C] () -- C:\WINDOWS\powerplayer.ini [2007-01-28 11:50:47 | 000,000,020 | ---- | C] () -- C:\WINDOWS\powerlist.ini [2007-01-28 11:50:46 | 000,000,605 | ---- | C] () -- C:\WINDOWS\psnetwork.ini [2007-01-27 17:58:34 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2007-01-13 20:41:44 | 000,000,546 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-01-09 15:43:55 | 000,000,008 | ---- | C] () -- C:\WINDOWS\spobuffx.sys [2007-01-03 17:45:40 | 000,210,032 | ---- | C] () -- C:\WINDOWS\System32\DBCLIENT.DLL [2007-01-03 17:45:21 | 000,181,760 | ---- | C] () -- C:\WINDOWS\System32\sklib.dll [2006-12-26 15:06:04 | 000,000,067 | ---- | C] () -- C:\WINDOWS\#1 Video Converter.INI [2006-12-10 20:54:47 | 000,000,057 | ---- | C] () -- C:\WINDOWS\System32\peer.ini [2006-11-26 21:24:35 | 000,000,249 | ---- | C] () -- C:\WINDOWS\naglos.INI [2006-11-07 19:06:46 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2006-10-29 12:28:54 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2006-10-29 12:28:53 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2006-10-29 12:28:52 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2006-10-14 23:58:58 | 002,114,672 | -H-- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\IconCache.db [2006-10-09 21:04:54 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2006-10-04 19:18:03 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006-10-04 18:58:34 | 000,165,888 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2006-10-01 16:03:56 | 000,000,146 | ---- | C] () -- C:\WINDOWS\app.ini [2006-09-29 15:12:05 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2006-09-27 16:01:36 | 000,094,636 | ---- | C] () -- C:\WINDOWS\dropcpyr.dll [2006-09-27 16:01:11 | 000,002,298 | ---- | C] () -- C:\WINDOWS\bestplayer.ini [2006-09-27 15:56:23 | 001,143,842 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2006-09-27 15:56:23 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2006-09-27 15:56:06 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\desktop.ini [2006-09-27 15:28:53 | 000,041,068 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll [2006-09-27 15:25:26 | 000,063,912 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2006-09-27 15:25:14 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\Rafal\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2006-09-27 15:17:59 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2006-09-27 15:17:58 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2006-09-27 15:08:29 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\Rafal\Dane aplikacji\desktop.ini [2006-09-27 15:02:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2006-09-27 15:00:27 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2006-09-27 15:00:27 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2006-09-27 15:00:10 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2006-09-27 15:00:08 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2005-12-05 19:25:22 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\lnod32umc.dll [2005-12-05 12:37:10 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\lnod32upd.dll [2005-06-19 08:49:00 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2005-04-26 01:05:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\vbaZlib.dll [2005-02-24 17:56:45 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2004-08-22 16:04:56 | 000,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll [2002-09-20 17:04:42 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2002-09-20 17:04:28 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2002-09-20 17:03:48 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2002-09-20 17:03:38 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2002-08-28 20:23:06 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2002-08-28 20:22:36 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [2001-10-26 18:29:40 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\scriptpw.dll [2001-10-26 18:29:32 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2001-10-26 18:28:34 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2001-10-26 18:27:02 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2001-10-26 17:15:04 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2001-10-26 17:14:52 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2001-10-26 17:14:32 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2001-10-26 17:12:52 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2001-10-26 16:45:26 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2001-10-26 16:45:26 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2001-10-26 16:45:24 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2001-10-26 16:42:08 | 000,020,629 | ---- | C] () -- C:\WINDOWS\System32\mqperf.ini [2001-10-26 16:42:08 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2001-10-26 16:42:08 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2001-10-26 16:42:08 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2001-08-17 22:31:56 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2001-08-17 22:31:56 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2001-08-17 22:31:50 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2001-08-17 22:31:46 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2001-08-17 22:31:46 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2001-08-17 22:31:44 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2001-08-17 22:31:38 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2001-08-17 22:31:38 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2001-08-17 22:13:24 | 000,002,656 | ---- | C] () -- C:\WINDOWS\System32\netware.drv [2001-08-17 20:55:06 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2001-07-22 04:43:48 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2001-07-22 03:25:18 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2001-07-21 23:16:20 | 000,000,635 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 23:15:52 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2001-07-21 23:15:50 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [1999-05-21 19:10:00 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\ZipDll.dll [color=#E56717]========== LOP Check ==========[/color] [2009-01-17 15:36:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Football Manager 2009 Certificate [2008-04-03 16:04:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Autodesk [2007-03-20 21:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Default [2008-10-04 19:36:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Installations [2010-09-30 20:31:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ipla [2010-04-09 21:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\OpenFM [2008-10-04 19:38:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\PC Suite [2009-02-04 17:09:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ScanSoft [2009-11-12 15:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sports Interactive [2008-07-16 22:13:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Teleca [2011-02-03 13:09:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP [2010-10-20 20:33:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\tmp [2006-08-07 22:55:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.ZARZĄDZANIE NT.000\Dane aplikacji\Opera [2009-02-24 09:24:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.ZARZĄDZANIE NT.002\Dane aplikacji\MEGAUPLOADTOOLBAR [2011-01-29 16:00:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ArcaVirMicroScan [2008-04-03 15:29:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Autodesk [2008-01-11 22:50:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\AutoUpdate [2007-02-27 16:02:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\COWON [2010-06-15 14:48:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\EurekaLog [2007-05-11 15:24:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Gadu-Gadu [2009-05-29 20:32:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\GanymedeNet [2009-06-16 14:46:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\InsERT GT [2007-01-27 17:41:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\InterTrust [2010-10-01 07:47:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ipla [2011-02-02 02:21:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Kamerzysta [2008-10-17 18:41:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\LG Electronics [2009-01-08 16:45:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\LimeWire [2008-10-04 20:14:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Nokia [2010-12-07 17:08:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Nowe Gadu-Gadu [2010-03-31 15:13:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\OpenFM [2006-09-27 15:34:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Opera [2008-10-04 19:38:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\PC Suite [2006-12-10 20:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\PPLive [2007-01-28 11:50:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\ppStream [2008-07-07 14:49:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\SecondLife [2008-11-21 21:51:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Simple Sudoku [2009-11-12 15:47:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Sports Interactive [2007-11-28 21:49:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\Teleca [2007-11-18 11:17:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rafal\Dane aplikacji\temp [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2009-10-19 22:43:28 | 000,042,496 | ---- | M] ()(C:\Documents and Settings\Rafal\Pulpit\kawa?y.doc) -- C:\Documents and Settings\Rafal\Pulpit\kawa�y.doc [2009-10-19 21:42:26 | 000,040,368 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\?wiczenia2.doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\�wiczenia2.doc [2009-10-19 21:42:26 | 000,040,368 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\?wiczenia2.doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\�wiczenia2.doc [2009-10-18 22:25:36 | 000,042,496 | ---- | C] ()(C:\Documents and Settings\Rafal\Pulpit\kawa?y.doc) -- C:\Documents and Settings\Rafal\Pulpit\kawa�y.doc [2007-08-06 21:45:34 | 000,288,595 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za?atwiane_przez_PUP.pdf) -- C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za�atwiane_przez_PUP.pdf [2007-08-06 21:45:34 | 000,288,595 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za?atwiane_przez_PUP.pdf) -- C:\Documents and Settings\Rafal\Moje dokumenty\Sprawy_za�atwiane_przez_PUP.pdf [2007-05-19 19:03:36 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (2)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (2)..doc [2007-05-19 19:03:36 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (2)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (2)..doc [2007-05-19 18:59:22 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (1)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (1)..doc [2007-05-19 18:59:22 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic (1)..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic (1)..doc [2007-05-19 18:58:08 | 000,021,504 | ---- | M] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic..doc [2007-05-19 18:58:08 | 000,021,504 | ---- | C] ()(C:\Documents and Settings\Rafal\Moje dokumenty\o?wiadczenie do pracy lic..doc) -- C:\Documents and Settings\Rafal\Moje dokumenty\o�wiadczenie do pracy lic..doc [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP:7E95B6FD < End of report >

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-02-03 17:22:59 - Run 2 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Rafal\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 112,00 Mb Available Physical Memory | 22,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 71,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,65 Gb Total Space | 1,40 Gb Free Space | 9,58% Space Free | Partition Type: NTFS Drive D: | 3,00 Gb Total Space | 2,99 Gb Free Space | 99,41% Space Free | Partition Type: NTFS Drive E: | 33,61 Gb Total Space | 2,97 Gb Free Space | 8,84% Space Free | Partition Type: NTFS Drive G: | 34,05 Gb Total Space | 18,02 Gb Free Space | 52,93% Space Free | Partition Type: NTFS Drive H: | 32,69 Gb Total Space | 5,84 Gb Free Space | 17,86% Space Free | Partition Type: NTFS Drive I: | 34,06 Gb Total Space | 1,05 Gb Free Space | 3,08% Space Free | Partition Type: NTFS Drive M: | 2,32 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive N: | 543,80 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Drive O: | 650,17 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: LECH | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software) .url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. https [open] -- "C:\Program Files\Opera\Opera.exe" (Opera Software) InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [CEWE-Podglad Zdjec] -- "E:\Program Files\Rossmann Fotoswiat\CEWE-Podglad Zdjec.exe" -d "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Rossmann Fotoswiat] -- "E:\Program Files\Rossmann Fotoswiat\Rossmann Fotoswiat.exe" "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "firewalldisablenotify" = 0 "firewalldisableoverride" = 1 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "UpdatesDisableNotify" = 0 "AntiVirusDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\domainprofile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\standardprofile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "18971:TCP" = 18971:TCP:*:Enabled:BitComet 18971 TCP "18971:UDP" = 18971:UDP:*:Enabled:BitComet 18971 UDP [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\PROGRA~1\Wapster\AQQ\AQQ.exe" = C:\PROGRA~1\Wapster\AQQ\AQQ.exe:*:Enabled:P2P AQQ -- (AQQ Sp. z o.o.) "C:\Program Files\Wapster\AQQ\AQQ.exe" = C:\Program Files\Wapster\AQQ\AQQ.exe:*:Enabled:P2P AQQ -- (AQQ Sp. z o.o.) "E:\Programy\Gadu-Gadu\gg.exe" = E:\Programy\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny "E:\WapSter AQQ\AQQ.exe" = E:\WapSter AQQ\AQQ.exe:*:Enabled:AQQ -- (Creative Team S.A.) "E:\Program Files\BitComet\BitComet.exe" = E:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client -- (www.BitComet.com) "E:\Programy\eMule\emule.exe" = E:\Programy\eMule\emule.exe:*:Enabled:eMule "C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe" = C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home -- (Nero AG) "E:\Programy\LimeWire\LimeWire.exe" = E:\Programy\LimeWire\LimeWire.exe:*:Enabled:LimeWire "E:\Program Files\Nowe Gadu-Gadu\gg.exe" = E:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu -- (GG Network S.A.) "I:\Gry\Sports Interactive\Football Manager 2010\fm.exe" = I:\Gry\Sports Interactive\Football Manager 2010\fm.exe:*:Enabled:Football Manager 2010 -- (Sports Interactive) "E:\Program Files\SopCast\adv\SopAdver.exe" = E:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com) "E:\Program Files\SopCast\SopCast.exe" = E:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com) "E:\Program Files\TVUPlayer\TVUPlayer.exe" = E:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks) "C:\Program Files\WarRock\WRLauncher.exe" = C:\Program Files\WarRock\WRLauncher.exe:*:Enabled:War Rock -- () "I:\Kamila\Wierszownik\DATA\BIN\mysqld-nt.exe" = I:\Kamila\Wierszownik\DATA\BIN\mysqld-nt.exe:*:Enabled:mysqld-nt -- () [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00D15456-F679-4AD4-8BD2-56450D4C3F72}" = WarRock "{066D65EA-ED53-44E4-A96A-F81B6E409D2E}" = PC Connectivity Solution "{074E292F-70CC-47AA-9351-ED8404602A6E}" = Mini-SE_1.5 "{083F79E4-6FE9-46FB-A6C6-4F8862742947}" = ATI HYDRAVISION "{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}" = Scan "{11F5D779-7BD9-465A-BBC4-10701386BCB9}" = FW LiveUpdate "{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in "{1CB92574-96F2-467B-B793-5CEB35C40C29}" = Image Resizer Powertoy for Windows XP "{1E460998-5C2C-4ACF-A9AA-3629BD9C06C2}" = Samsung PC Studio "{236BB7C4-4419-42FD-0415-2E257A25E34D}" = Adobe Photoshop CS2 "{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23 "{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (INSERTGT) "{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5 "{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6 "{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10 "{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11 "{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1 "{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2 "{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3 "{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5 "{325C0D0E-85D9-4841-A274-8D333C0F626E}" = OpenOffice.org 2.0.3 "{332CC6BF-E6C7-48EE-BA3D-435E576AD67F}" = PaperPort Image Printer "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{38E0C491-5230-4373-B62E-F1A6E94B1045}" = Nero 7 Demo "{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}" = DAEMON Tools "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840 "{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies "{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English) "{5783F2D7-4001-0415-0002-0060B0CE6BBA}" = AutoCAD 2006 - Polski "{610E8375-30D1-4093-827B-C2282FD25EDA}_is1" = BARRE 1.3.6.0 "{64CB2553-C109-4132-AA51-1F421B515FD1}" = Microsoft .NET Framework 1.1 Polish Language Pack "{655CB07D-C944-40BE-B93F-55957CAC7625}" = AiO_Scan "{65A732D0-7F4C-475E-86DA-C7D4E4C996F1}" = InsERT GT "{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = The Sims 2 "{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{786C5747-1437-443D-B06E-79A00FE45110}" = Adobe Stock Photos 1.0 "{7AC15160-A49B-4A89-B181-D4619C025FFF}" = Samsung Samples Installer "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{90260415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office XP Web Components "{903B0415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Project Professional 2003 "{993960EE-CA4D-443F-8F88-E24260DD5FD2}" = LG PC Suite "{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}" = Brother MFL-Pro Suite "{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC1E4C93-C1E7-11D6-9D10-00010240CE95}" = Java 2 Runtime Environment, SE v1.4.0_03 "{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3 "{B6C89654-A6A2-477C-873B-724EC1C56407}" = ScanSoft PaperPort 11 "{B74D4E10-6884-0000-0000-000000000101}" = Adobe Bridge 1.0 "{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem driver "{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio "{C6E3F362-AAF3-48CF-B8C4-B3EBC2F2E832}" = F1 Challenge 2007 Full version "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86 "{CED97F40-CAFC-4A59-94A7-B7726F863008}" = Sterowniki firmy InsERT "{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic "{E4511CEC-2E60-4076-95B6-0E193269EB86}" = MicroMachines V4 "{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0 "{E9F44C98-B8B6-480F-AF7B-E42A0A46F4E3}" = Microsoft SQL Server VSS Writer "{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6 "{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}" = Microsoft .NET Framework 2.0 Language Pack - FRA "{F5346614-B7C4-4E94-826A-E2363155233D}" = EasyCleaner "{F9000000-0001-0000-0000-074957833700}" = ABBYY FineReader 9.0 Professional Edition "{F9B3DD02-B0B3-42E9-8650-030DFF0D133D}" = Microsoft SQL Server Native Client "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "{FC906D5C-91F9-4DA4-A765-6DCBB669F317}" = Sony Ericsson PC Suite "{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}" = Disc2Phone "Adobe Acrobat 5.0" = Adobe Acrobat 5.0 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Photoshop 7.0 CE" = Adobe Photoshop 7.0 CE "Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0415-2E257A25E34D}" = Adobe Photoshop CS2 "Adobe Shockwave Player" = Adobe Shockwave Player 11 "All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI "AQQ" = WapSter AQQ "Autodesk DWF Viewer" = Autodesk DWF Viewer "BitComet" = BitComet 0.84 "Car Racing Deluxe_is1" = Car Racing Deluxe v.2.0 "CCleaner" = CCleaner "Centrum Aktualizacji_is1" = Centrum Aktualizacji (usunięcie) "Contra - Hard Corps_is1" = Contra - Hard Corps "Diamond Club Poker" = PokerRoomSchool "ECBarre" = ECBarre "Enable S3 for USB Device" = Enable S3 for USB Device "EsetOnlineScanner" = ESET Online Scanner "Eurobarre2.1.5" = Eurobarre "Fakturant_is1" = Fakturant (usunięcie) "faktury" = faktury "Faktury2" = Faktury2 "FBDBServer_1_5_is1" = Firebird 1.5.2.4731 "ffdshow" = ffdshow "Football Manager 2008" = Football Manager 2008 "Football Manager 2010" = Football Manager 2010 "GameDesire-Bingo" = GameDesire-Bingo "GameDesire-Pool & Snooker" = GameDesire-Pool & Snooker "HijackThis" = HijackThis 2.0.2 "InstallShield_{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6 "ipla" = ipla 2.2 "Java Web Start" = Java Web Start "Język polski i matematyka 2005" = Język polski i matematyka. Uniwersalny leksykon szkolny "Joyland Casino" = Joyland Casino "Kamerzysta" = Kamerzysta (deinstalacja) "Lexmark Supplies Monitor" = Lexmark Supplies Monitor "LHTTSENG" = L&H TTS3000 British English "Mega Bomberman_is1" = Mega Bomberman "megauploadtoolbar" = Megaupload Toolbar "Micro Machines 2 - Turbo Tournament_is1" = Micro Machines 2 - Turbo Tournament "Micro Machines_is1" = Micro Machines "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0 "Microsoft .NET Framework 2.0 Language Pack - FRA" = Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA "Microsoft SQL Server 2005" = Microsoft SQL Server 2005 "Mistrz Wizażu 2_is1" = Mistrz Wizażu 2 "Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13) "Niemiecki w praktyce - ćwiczenia i testy 2_is1" = Niemiecki w praktyce - ćwiczenia i testy 2 "Nowe Gadu-Gadu" = Nowe Gadu-Gadu "NVIDIA Drivers" = NVIDIA Drivers "NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager "Picasa2" = Picasa 2 "Profesor Henry 2001_is1" = Profesor Henry 2001 "RealPlayer 6.0" = RealPlayer "Rossmann Fotoswiat" = Rossmann Fotoswiat "SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software "SecondLife" = SecondLife (remove only) "SmartBarre_is1" = SmartBarre version 1.2.0.2 AntiPop v1.2 "Sony Ericsson Themes Creator" = Sony Ericsson Themes Creator 3.19 "SopCast" = SopCast 3.0.3 "Szybka powtorka. Geografia" = Szybka powtórka. Geografia "TextMaker Viewer" = TextMaker Viewer "TVAnts 1.0" = TVAnts 1.0 "TVUPlayer" = TVUPlayer 2.3.3.2 "Windows Media Format Runtime" = Windows Media Format Runtime "Windows Media Player" = Windows Media Player 10 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = Archiwizator WinRAR "Żulionerzy NG_is1" = Żulionerzy NewGeneration [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-842925246-616249376-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "bf49a51268b6150a" = PackBarre "SiemensJava.pl - Emulacja Gier" = SiemensJava.pl - Emulacja Gier [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-01-29 18:56:41 | Computer Name = LECH | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd cewe-podglad zdjec.exe, wersja 0.0.0.0, moduł powodujący błąd qtcore4.dll, wersja 4.6.2.0, adres błędu 0x000d6ac3. Error - 2011-01-30 10:58:07 | Computer Name = LECH | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mmc.exe, wersja 5.2.3790.4136, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-01-30 10:59:04 | Computer Name = LECH | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mmc.exe, wersja 5.2.3790.4136, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-01-30 11:05:11 | Computer Name = LECH | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mmc.exe, wersja 5.2.3790.4136, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-01-30 12:54:57 | Computer Name = LECH | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd PCTAVSvc.exe, wersja 3.6.1.7, moduł powodujący błąd engine.dll, wersja 4.4.2.0, adres błędu 0x0007ce96. Error - 2011-01-30 15:03:04 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = Error - 2011-02-01 07:17:36 | Computer Name = LECH | Source = VS Setup Watson Report | ID = 1000 Description = Error - 2011-02-03 12:13:53 | Computer Name = LECH | Source = Microsoft Management Console | ID = 1000 Description = Error - 2011-02-03 12:20:46 | Computer Name = LECH | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca OTL.exe, wersja 3.2.20.6, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-02-03 12:21:07 | Computer Name = LECH | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca OTL.exe, wersja 3.2.20.6, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. [ System Events ] Error - 2011-02-03 11:33:01 | Computer Name = LECH | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys) z powodu następującego błędu: %%1058 Error - 2011-02-03 11:33:01 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 Error - 2011-02-03 11:33:01 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 Error - 2011-02-03 11:47:08 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie E:. Error - 2011-02-03 11:47:08 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie H:. Error - 2011-02-03 11:47:08 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie E:. Error - 2011-02-03 11:47:08 | Computer Name = LECH | Source = Ntfs | ID = 262199 Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku. Uruchom narzędzie chkdsk na woluminie H:. Error - 2011-02-03 11:47:59 | Computer Name = LECH | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys) z powodu następującego błędu: %%1058 Error - 2011-02-03 11:47:59 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 Error - 2011-02-03 11:47:59 | Computer Name = LECH | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%1058 < End of report >

**Posty:** 18165 · przez **wojtas** 03 Lut 2011, 19:24

odinstaluj Megaupload Toolbar i nic już nie ma , system czysty

jednak:

Error - 2011-02-03 11:47:08 | Computer Name = LECH | Source = Ntfs | ID = 262199
Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku.
Uruchom
narzędzie chkdsk na woluminie E:.

Error - 2011-02-03 11:47:08 | Computer Name = LECH | Source = Ntfs | ID = 262199
Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku.
Uruchom
narzędzie chkdsk na woluminie H:.

Error - 2011-02-03 11:47:08 | Computer Name = LECH | Source = Ntfs | ID = 262199
Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku.
Uruchom
narzędzie chkdsk na woluminie E:.

Error - 2011-02-03 11:47:08 | Computer Name = LECH | Source = Ntfs | ID = 262199
Description = Struktura systemu plików na dysku jest uszkodzona i nie do użytku.
Uruchom
narzędzie chkdsk na woluminie H:.

przepuść każdą partycję chkdsk

Kto jest na forum