proszę o sprawdzenie - zawiesza pc przy starcie

[Pawel_x18]

Problem polega na tym iż zaraz po ekranie powitalnym podczas ładowania aplikacji w trayu.. na ok 2-4 min całkowicie zawiesza się komp, dopiero odblokowuje się przy połaczeniu AutoConnect, myślę że to chyba autoconnect, bo wczesniej z internetem łączyło sie ok . 5 sek przy ładowaniu a teraz tyle minut, albo jakas aplikacja NIEPOTRZEBNA blokuje PC

Oto log z HJ :

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 08:47:05, on 2007-03-31
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\- Programy systemowe -\Disk Keeper 2007\DkService.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\- Programy systemowe -\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\- Programy systemowe -\DU Meter\DUMeter.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\WINDOWS\java\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AutoConnect\AutoConnect.exe
C:\Program Files\- Programy systemowe -\Internet Download Manager\IDMan.exe
C:\PROGRA~1\-PROGR~1\Speed-X\SpeedX.exe
E:\Programy\Gamma control\gammacontrol.exe
C:\Program Files\Razer\Copperhead\razertra.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\- Programy systemowe -\Internet Download Manager\IEMonitor.exe
C:\Program Files\- Programy systemowe -\SpyEraser\SpyEraser.exe
C:\Program Files\- Programy systemowe -\AQQ\AQQ.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\- Programy systemowe -\Teamspeak 2\TeamSpeakPL.exe
C:\Program Files\- Programy systemowe -\uTorrent 1.6\utorrent.exe
C:\Program Files\- Programy systemowe -\BT Engine\btengine.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\Programy\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tvn24.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\- Programy systemowe -\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\- Programy systemowe -\Adobe Reader 7.0.5\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\WINDOWS\java\bin\ssv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [GBB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 SPIRun.dll,RunDLLEntry
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\- Programy systemowe -\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\WINDOWS\java\bin\jusched.exe"
O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\- Programy systemowe -\Disk Keeper 2007\DkIcon.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe
O4 - HKCU\..\Run: [AQQ] C:\PROGRA~1\-PROGR~1\AQQ\AQQ.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\- Programy systemowe -\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [SpeedX] C:\PROGRA~1\-PROGR~1\Speed-X\SpeedX.exe
O4 - HKCU\..\Run: [Twoje TVN24] "C:\Program Files\- Programy systemowe -\Pasek TVN24\pasekTVN24.exe"
O4 - HKCU\..\Run: [Uniblue SpyEraser] "C:\Program Files\- Programy systemowe -\SpyEraser\SpyEraser.exe" -m
O4 - Startup: Gammacontrol.lnk = E:\Programy\Gamma control\gammacontrol.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\- Programy systemowe -\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\- Programy systemowe -\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\java\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\java\bin\ssv.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{619DAEE0-814E-4110-A442-1431BC206011}: NameServer = 194.204.152.34 217.98.63.164
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\- Programy systemowe -\Disk Keeper 2007\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\- Programy systemowe -\Alcohol 120\StarWind\StarWindService.exe


a to z SR :

Kod: Zaznacz wszystko

"Silent Runners.vbs", revision 49, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"AutoConnect" = "C:\Program Files\AutoConnect\AutoConnect.exe" ["http://autoconnect.prv.pl"]
"AQQ" = "C:\PROGRA~1\-PROGR~1\AQQ\AQQ.exe" ["AQQ Sp. z o.o."]
"IDMan" = "C:\Program Files\- Programy systemowe -\Internet Download Manager\IDMan.exe /onboot" ["Tonec Inc."]
"SpeedX" = "C:\PROGRA~1\-PROGR~1\Speed-X\SpeedX.exe" ["MyPortal.pl"]
"Twoje TVN24" = ""C:\Program Files\- Programy systemowe -\Pasek TVN24\pasekTVN24.exe"" ["DreamLab Onet Sp.z o.o."]
"Uniblue SpyEraser" = ""C:\Program Files\- Programy systemowe -\SpyEraser\SpyEraser.exe" -m" ["Uniblue Software"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"GBB36X Configure" = "C:\WINDOWS\system32\JMRaidTool.exe boot" ["Gigabyte Technology Corp."]
"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS]
"nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"]
"nod32kui" = ""C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE" ["Eset "]
"NvMediaCenter" = "RunDLL32.exe NvMCTray.dll,NvTaskbarInit" [MS]
"VolPanel" = ""C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r" ["Creative Technology Ltd"]
"P17Helper" = "Rundll32 SPIRun.dll,RunDLLEntry" [MS]
"DU Meter" = "C:\Program Files\- Programy systemowe -\DU Meter\DUMeter.exe" ["Hagel Technologies"]
"razer" = "C:\Program Files\Razer\Copperhead\razerhid.exe" [empty string]
"SunJavaUpdateSched" = ""C:\WINDOWS\java\bin\jusched.exe"" ["Sun Microsystems, Inc."]
"Copperhead" = "C:\Program Files\Razer\Copperhead\razerhid.exe" [empty string]
"NeroFilterCheck" = "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" ["Nero AG"]
"DiskeeperSystray" = ""C:\Program Files\- Programy systemowe -\Disk Keeper 2007\DkIcon.exe"" ["Diskeeper Corporation"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{0055C089-8582-441B-A0BF-17B458C2A3A8}\(Default) = "IDM Helper"
  -> {HKLM...CLSID} = "IDMIEHlprObj Class"
                   \InProcServer32\(Default) = "C:\Program Files\- Programy systemowe -\Internet Download Manager\IDMIECC.dll" ["Tonec Inc."]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "AcroIEHlprObj Class"
                   \InProcServer32\(Default) = "C:\Program Files\- Programy systemowe -\Adobe Reader 7.0.5\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "SSVHelper Class"
                   \InProcServer32\(Default) = "C:\WINDOWS\java\bin\ssv.dll" ["Sun Microsystems, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
  -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
                   \InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
  -> {HKLM...CLSID} = "HyperTerminal Icon Ext"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
  -> {HKLM...CLSID} = "DesktopContext Class"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
  -> {HKLM...CLSID} = "Desktop Explorer"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
  -> {HKLM...CLSID} = "nView Desktop Context Menu"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{B089FE88-FB52-11D3-BDF1-0050DA34150D}" = "NOD32 Context Menu Shell Extension"
  -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data]
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
  -> {HKLM...CLSID} = "NVIDIA CPL Extension"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{453D1B6D-BD6A-4FA1-B876-9E4DD848D434}" = "AQQ File Transfer Shell Extension"
  -> {HKLM...CLSID} = "AQQ File Transfer Shell Extension"
                   \InProcServer32\(Default) = "C:\PROGRA~1\-PROGR~1\AQQ\System\AQQSHE~1.DLL" [null data]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{32020A01-506E-484D-A2A8-BE3CF17601C3}" = "AlcoholShellEx"
  -> {HKLM...CLSID} = "AlcoholShellEx"
                   \InProcServer32\(Default) = "C:\PROGRA~1\-PROGR~1\ALCOHO~1\axshlex.dll" ["Alcohol Soft Development Team"]
"{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C}" = "Microsoft Office OneNote Namespace Extension for Windows Desktop Search"
  -> {HKLM...CLSID} = "Microsoft Office OneNote Namespace Extension for Windows Desktop Search"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\ONFILTER.DLL" [MS]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office12\msohevi.dll" [MS]
"{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}" = "Microsoft Office Metadata Handler"
  -> {HKLM...CLSID} = "Microsoft Office Metadata Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll" [MS]
"{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}" = "Microsoft Office Thumbnail Handler"
  -> {HKLM...CLSID} = "Microsoft Office Thumbnail Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\
"WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"
  -> {HKLM...CLSID} = "WPDShServiceObj Class"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [MS]

HKLM\Software\Classes\PROTOCOLS\Filter\
<<!>> text/xml\CLSID = "{807563E5-5146-11D5-A672-00B0D022E945}"
  -> {HKLM...CLSID} = "Microsoft Office InfoPath XML Mime Filter"
                   \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL" [MS]

HKLM\Software\Classes\Folder\shellex\ColumnHandlers\
{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info"
  -> {HKLM...CLSID} = "PDF Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\- Programy systemowe -\Adobe Reader 7.0.5\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
AQQFileTransfer\(Default) = "{453D1B6D-BD6A-4FA1-B876-9E4DD848D434}"
  -> {HKLM...CLSID} = "AQQ File Transfer Shell Extension"
                   \InProcServer32\(Default) = "C:\PROGRA~1\-PROGR~1\AQQ\System\AQQSHE~1.DLL" [null data]
NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"
  -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
FineReader8\(Default) = "{F7091C74-EBB1-49D7-94C7-FE4886CCC18D}"
  -> {HKLM...CLSID} = "FineReader8ExplorerContextMenuHandler"
                   \InProcServer32\(Default) = "C:\Program Files\- Programy systemowe -\FineReader 8.0 Professional Edition\FECMenu.dll" ["ABBYY Software"]
NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"
  -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]


Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Devices: Allow undock without having to log on}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "E:\Moje dokumenty\Moje obrazy\Image Categories\Windows Vista\UltimateStrands_1920x1440r.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "E:\Moje dokumenty\Moje obrazy\Image Categories\Windows Vista\UltimateStrands_1920x1440r.bmp"


Startup items in "Paweł Jaworski" & "All Users" startup folders:
----------------------------------------------------------------

C:\Documents and Settings\Paweł Jaworski\Menu Start\Programy\Autostart
"Gammacontrol" -> shortcut to: "E:\Programy\Gamma control\gammacontrol.exe" ["www.counter-strike.de - MUff[99]"]


Enabled Scheduled Tasks:
------------------------

"Uniblue SpyEraser" -> launches: "C:\Program Files\- Programy systemowe -\SpyEraser\SpyEraser.exe -s" ["Uniblue Software"]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
C:\WINDOWS\system32\imon.dll ["Eset "], 01 - 05, 25
%SystemRoot%\system32\mswsock.dll [MS], 06 - 08, 11 - 24
%SystemRoot%\system32\rsvpsp.dll [MS], 09 - 10


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{327C2873-E90D-4C37-AA9D-10AC9BABA46C}" = "Easy-WebPrint"
  -> {HKLM...CLSID} = "Easy-WebPrint"
                   \InProcServer32\(Default) = "C:\Program Files\Canon\Easy-WebPrint\Toolband.dll" [empty string]

Explorer Bars

HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\

HKLM\Software\Classes\CLSID\{03C1C47F-0538-4645-8372-D3109B9FC636}\(Default) = "Easy-WebPrint"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\Program Files\Canon\Easy-WebPrint\Toolband.dll" [empty string]

HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\(Default) = "&Poszukaj"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL" [MS]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}"
  -> {HKCU...CLSID} = "Java Plug-in 1.5.0_11"
                   \InProcServer32\(Default) = "C:\WINDOWS\java\bin\ssv.dll" ["Sun Microsystems, Inc."]
  -> {HKLM...CLSID} = "Java Plug-in 1.5.0_11"
                   \InProcServer32\(Default) = "C:\WINDOWS\java\bin\npjpi150_11.dll" ["Sun Microsystems, Inc."]

{2670000A-7350-4F3C-8081-5663EE0C6C49}\
"ButtonText" = "Wyślij do programu OneNote"
"MenuText" = "Wyślij &do programu OneNote"
"CLSIDExtension" = "{48E73304-E1D6-4330-914C-F5F514E3486C}"
  -> {HKLM...CLSID} = "Send to OneNote from Internet Explorer button"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll" [MS]

{92780B25-18CC-41C8-B9BE-3C9C571A8263}\
"ButtonText" = "Research"

{E2E2DD38-D088-4134-82B7-F2BA38496583}\
"MenuText" = "@xpsp3res.dll,-20001"
"Exec" = "%windir%\Network Diagnostic\xpnetdiag.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Diskeeper, Diskeeper, ""C:\Program Files\- Programy systemowe -\Disk Keeper 2007\DkService.exe"" ["Diskeeper Corporation"]
Karta wydajności WMI, WmiApSrv, "C:\WINDOWS\system32\wbem\wmiapsrv.exe" [MS]
NOD32 Kernel Service, NOD32krn, ""C:\Program Files\Eset\nod32krn.exe"" ["Eset "]
NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"]
StarWind iSCSI Service, StarWindService, "C:\Program Files\- Programy systemowe -\Alcohol 120\StarWind\StarWindService.exe" ["Rocket Division Software"]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
Canon BJ Language Monitor i455\Driver = "CNMLM5i.DLL" ["CANON INC."]
Send To Microsoft OneNote Monitor\Driver = "msonpmon.dll" [MS]


----------
<<!>>: Suspicious data at a malware launch point.

+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
  DLL launch points, use the -supp parameter or answer "No" at the
  first message box and "Yes" at the second message box.
---------- (total run time: 30 seconds, including 4 seconds for message boxes)


[wojtas]

start>urchom> wpisz msconfig> zakladka uruchamianie> wylacz progsy ktore nie chcesz zeby startowaly z systemem bo to zamula kompa"

loga z comboscana wrzuc:

http://forum.programosy.pl/dodatkowe-narzedzia-do-usuwania-i-ochrony-vt42021.html

[Pawel_x18]

Log z CS:

[code]
ComboScan v20070306.20 run by Paweł Jaworski on 2007-03-31 at 16:25:16
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enable...success.


-- Last 1 Restore Point(s) --
1: 2007-03-31 14:25:19 UTC - RP1 - Punkt kontrolny systemu


Performed disk cleanup.


-- HijackThis (run as Paweł Jaworski.exe) --------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 16:25:26, on 2007-03-31
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\- Programy systemowe -\Disk Keeper 2007\DkService.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\- Programy systemowe -\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\- Programy systemowe -\DU Meter\DUMeter.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\WINDOWS\java\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AutoConnect\AutoConnect.exe
C:\PROGRA~1\-PROGR~1\AQQ\AQQ.exe
C:\Program Files\- Programy systemowe -\Internet Download Manager\IDMan.exe
C:\PROGRA~1\-PROGR~1\Speed-X\SpeedX.exe
C:\Program Files\- Programy systemowe -\SpyEraser\SpyEraser.exe
E:\Programy\Gamma control\gammacontrol.exe
C:\Program Files\Razer\Copperhead\razertra.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
E:\Moje dokumenty\Odebrane pliki\comboscan.exe
E:\Programy\HIJACK~1\Paweł Jaworski.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tvn24.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\- Programy systemowe -\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\- Programy systemowe -\Adobe Reader 7.0.5\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\WINDOWS\java\bin\ssv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [GBB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 SPIRun.dll,RunDLLEntry
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\- Programy systemowe -\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\WINDOWS\java\bin\jusched.exe"
O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe
O4 - HKCU\..\Run: [AQQ] C:\PROGRA~1\-PROGR~1\AQQ\AQQ.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\- Programy systemowe -\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [SpeedX] C:\PROGRA~1\-PROGR~1\Speed-X\SpeedX.exe
O4 - HKCU\..\Run: [Uniblue SpyEraser] "C:\Program Files\- Programy systemowe -\SpyEraser\SpyEraser.exe" -m
O4 - Startup: Gammacontrol.lnk = E:\Programy\Gamma control\gammacontrol.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\- Programy systemowe -\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\- Programy systemowe -\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\java\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\java\bin\ssv.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{619DAEE0-814E-4110-A442-1431BC206011}: NameServer = 194.204.152.34 217.98.63.164
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\- Programy systemowe -\Disk Keeper 2007\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\- Programy systemowe -\Alcohol 120\StarWind\StarWindService.exe


-- HijackThis Fixed Entries (E:\Programy\HIJACK~1\backups\) --------------------

backup-20070324-120652-817 O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\- Programy systemowe -\Spyware Doctor\swdsvc.exe
backup-20070324-120652-940 O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\- Programy systemowe -\Spyware Doctor\svcntaux.exe
backup-20070324-120704-301 O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\- Programy systemowe -\Spyware Doctor\svcntaux.exe
backup-20070324-120704-874 O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\- Programy systemowe -\Spyware Doctor\swdsvc.exe
backup-20070324-120717-311 O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\- Programy systemowe -\Spyware Doctor\swdsvc.exe
backup-20070324-120717-505 O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\- Programy systemowe -\Spyware Doctor\svcntaux.exe

-- File Associations -----------------------------------------------------------

.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
.reg - regfile - regedit.exe "%1"
.scr - scrfile - "%1" /S
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

2S ADILOADER (General Purpose USB Driver (adildr.sys)) - C:\WINDOWS\system32\drivers\adildr.sys
3R adiusbaw (USB ADSL WAN Adapter) - C:\WINDOWS\system32\drivers\adiusbaw.sys
2R AMON - C:\WINDOWS\system32\drivers\amon.sys
2R atksgt - C:\WINDOWS\system32\drivers\atksgt.sys
3R Cap7134 (AVerMedia, AVerTV WDM Video Capture (Silicon)) - C:\WINDOWS\system32\drivers\Cap7134.sys
3S CCDECODE (Dekoder napisów) - C:\WINDOWS\system32\drivers\CCDECODE.sys
3R ctsfm2k (Creative SoundFont Management Device Driver) - C:\WINDOWS\system32\drivers\ctsfm2k.sys
3R CTUSFSYN (Creative SoundFont Synthesizer) - C:\WINDOWS\system32\drivers\ctusfsyn.sys
3S GVCplDrv - C:\WINDOWS\system32\drivers\GVCplDrv.sys
3S hamachi (Hamachi Network Interface) - C:\WINDOWS\system32\drivers\hamachi.sys
2R hidusb (HID Class Driver) - C:\WINDOWS\system32\drivers\hidusb.sys
1R intelppm (Sterownik procesora Intel) - C:\WINDOWS\system32\drivers\intelppm.sys
0R JGOGO (JMicron Hot-Plug Driver) - C:\WINDOWS\system32\drivers\JGOGO.sys
0R JRAID - C:\WINDOWS\system32\drivers\jraid.sys
1R kbdhid (Sterownik klawiatury HID) - C:\WINDOWS\system32\drivers\kbdhid.sys
2R lirsgt - C:\WINDOWS\system32\drivers\lirsgt.sys
3R mouhid (Sterownik myszy HID) - C:\WINDOWS\system32\drivers\mouhid.sys
3S MSTEE (Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming) - C:\WINDOWS\system32\drivers\MSTEE.sys
3S NABTSFEC (Koder-dekoder NABTS/FEC VBI) - C:\WINDOWS\system32\drivers\NABTSFEC.sys
3S NdisIP (Połączenie TV/wideo firmy Microsoft) - C:\WINDOWS\system32\drivers\NdisIP.sys
1R nod32drv - C:\WINDOWS\system32\drivers\nod32drv.sys
3R nv - C:\WINDOWS\system32\drivers\nv4_mini.sys
3R ossrv (Creative OS Services Driver) - C:\WINDOWS\system32\drivers\ctoss2k.sys
3R P17xfi (Sound Blaster X-Fi Xtreme Audio) - C:\WINDOWS\system32\drivers\P17xfi.sys
3R p17xfilt - C:\WINDOWS\system32\drivers\p17xfilt.sys
3R PhTVTune (Cap7134 TVTuner) - C:\WINDOWS\system32\drivers\PhTVTune.sys
0R PxHelp20 - C:\WINDOWS\system32\drivers\PxHelp20.sys
3S Razerlow (Razer Copperhead Driver) - C:\WINDOWS\system32\drivers\Razerlow.sys
0R sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - C:\WINDOWS\system32\drivers\sfdrv01.sys
0R sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfhlp02.sys
0R sfvfs02 (StarForce Protection VFS Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfvfs02.sys
3S SLIP (BDA Slip De-Framer) - C:\WINDOWS\system32\drivers\SLIP.sys
0R sptd - C:\WINDOWS\system32\drivers\sptd.sys
3S streamip (BDA IPSink) - C:\WINDOWS\system32\drivers\StreamIP.sys
2S SVKP - C:\WINDOWS\system32\SVKP.sys (not found)
3R usbccgp (Rodzajowy sterownik nadrzędny USB Microsoft) - C:\WINDOWS\system32\drivers\usbccgp.sys
3R usbehci (Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft) - C:\WINDOWS\system32\drivers\usbehci.sys
3R UsbFltr (%SvcDisplayName%) - C:\WINDOWS\system32\drivers\copperhd.sys
3S usbprint (Klasa PRINTER USB Microsoft) - C:\WINDOWS\system32\drivers\usbprint.sys
3R usbscan (Sterownik skanera USB) - C:\WINDOWS\system32\drivers\usbscan.sys
3S USBSTOR (Sterownik magazynu masowego USB) - C:\WINDOWS\system32\drivers\USBSTOR.SYS
3R vaxscsi - C:\WINDOWS\system32\drivers\vaxscsi.sys
2R Vcs (Vcs support) - C:\WINDOWS\system32\drivers\Vcs.sys
1R WS2IFSL (Środowisko wspomagające dostawcę usług innych niż IFS - Windows Socket 2.0) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
3S WSTCODEC (Kodery-dekodery teletekstu w standardzie światowym) - C:\WINDOWS\system32\drivers\WSTCODEC.SYS
3S WudfPf (Windows Driver Foundation - User-mode Driver Framework Platform Driver) - C:\WINDOWS\system32\drivers\WudfPf.sys
3S WudfRd (Windows Driver Foundation - User-mode Driver Framework Reflector) - C:\WINDOWS\system32\drivers\WudfRd.sys
3R yukonwxp (NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller) - C:\WINDOWS\system32\drivers\yk51x86.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

2R Diskeeper - "C:\Program Files\- Programy systemowe -\Disk Keeper 2007\DkService.exe"
3S IDriverT (InstallDriver Table Manager) - "C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"
3S NBService - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
4S NMIndexingService - "C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"
2R NOD32krn (NOD32 Kernel Service) - "C:\Program Files\Eset\nod32krn.exe"
2R NVSvc (NVIDIA Display Driver Service) - C:\WINDOWS\system32\nvsvc32.exe
3S odserv (Microsoft Office Diagnostics Service) - "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE"
3S ose (Office Source Engine) - "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
2R StarWindService (StarWind iSCSI Service) - C:\Program Files\- Programy systemowe -\Alcohol 120\StarWind\StarWindService.exe


-- Scheduled Tasks -------------------------------------------------------------

2007-03-30 22:03:13 416 --a------ C:\WINDOWS\Tasks\Uniblue SpyEraser.job<UNIBLU~1.JOB>


-- Files created between 2007-02-28 and 2007-03-31 -----------------------------

2007-03-31 08:59:08 0 d-------- C:\Program Files\VS Online<VSONLI~1>
2007-03-30 14:50:04 0 d-------- C:\Program Files\AutoConnect<AUTOCO~1>
2007-03-27 15:31:19 0 d-------- C:\Program Files\BitGrabber<BITGRA~1>
2007-03-27 03:39:14 20480 --a------ C:\WINDOWS\system32\ac3config.exe<AC3CON~1.EXE>
2007-03-25 20:11:38 0 d-------- C:\Program Files\Common Files\ACD Systems<ACDSYS~1>
2007-03-25 20:11:08 0 d-------- C:\WINDOWS\Downloaded Installations<DOWNLO~2>
2007-03-25 13:24:56 0 d-------- C:\Program Files\Diskeeper Corporation<DISKEE~1>
2007-03-24 21:34:58 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-03-24 21:28:13 389180 --a------ C:\WINDOWS\system32\UCS32P.DLL
2007-03-24 21:28:13 339968 --a------ C:\WINDOWS\system32\N067UFW.DLL
2007-03-24 21:28:13 36864 --a------ C:\WINDOWS\system32\CNQU70.DLL
2007-03-24 21:28:13 0 d--h----- C:\CanoScan
2007-03-24 13:19:22 0 d--hs---- C:\WINDOWS\ftpcache
2007-03-24 12:55:41 0 d-------- C:\WINDOWS\pss
2007-03-24 12:34:10 0 d-------- C:\Documents and Settings\All Users\Application Data\PC Tools<PCTOOL~1>
2007-03-24 12:33:55 0 d-------- C:\Program Files\Common Files\PC Tools<PCTOOL~1>
2007-03-24 12:33:28 626688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-03-22 18:35:19 80980 --a------ C:\WINDOWS\Uninstall Jade Empire.exe<UNINST~1.EXE>
2007-03-20 19:30:29 0 d--h----- C:\Program Files\MSXML 4.0<MSXML4~1.0>
2007-03-20 18:30:51 0 d--h----- C:\Program Files\Windows Media Connect 2<WINDOW~4>
2007-03-18 21:12:34 17480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys
2007-03-18 18:02:55 0 d--h----- C:\Program Files\Nero
2007-03-18 18:02:55 0 d-------- C:\Program Files\Common Files\Ahead
2007-03-17 13:00:58 0 d-------- C:\Program Files\Common Files\Adobe
2007-03-17 12:39:10 32592 --a------ C:\WINDOWS\system32\msonpmon.dll
2007-03-17 12:38:46 0 d--h----- C:\Program Files\Microsoft Works<MICROS~4>
2007-03-17 12:38:40 0 d--h----- C:\Program Files\MSBuild
2007-03-17 12:36:08 0 d-------- C:\WINDOWS\SHELLNEW
2007-03-17 12:35:10 0 dr-h----- C:\MSOCache
2007-03-15 20:22:21 271360 --a------ C:\WINDOWS\system32\drivers\atksgt.sys
2007-03-15 20:22:20 18048 --a------ C:\WINDOWS\system32\drivers\lirsgt.sys
2007-03-15 20:22:03 0 d------c- C:\WINDOWS\system32\DRVSTORE
2007-03-15 20:21:56 0 d-------- C:\WINDOWS\system32\AGEIA
2007-03-15 20:21:55 0 d--h----- C:\Program Files\AGEIA Technologies<AGEIAT~1>
2007-03-15 20:21:50 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard<WISEIN~1>
2007-03-15 07:53:46 0 d--h----- C:\Program Files\Canon
2007-03-15 07:52:46 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-03-15 07:51:57 6656 --a------ C:\WINDOWS\system32\CNMVS5i.DLL
2007-03-15 07:51:57 105984 --a------ C:\WINDOWS\system32\CNMLM5i.DLL
2007-03-15 07:51:53 73728 -ra------ C:\WINDOWS\system32\CNMCP5i.exe
2007-03-15 07:51:43 0 d--h----- C:\BJPrinter<BJPRIN~1>
2007-03-15 07:51:25 0 d-------- C:\WINDOWS\StartHtmico<STARTH~1>
2007-03-15 07:51:25 0 d-------- C:\WINDOWS\I455
2007-03-13 21:56:32 108144 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL>
2007-03-12 21:22:24 223128 --a------ C:\WINDOWS\system32\drivers\vaxscsi.sys
2007-03-12 21:20:35 639224 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-03-10 22:12:04 5504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2007-03-10 22:11:58 10880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys
2007-03-10 22:11:54 15360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys
2007-03-10 22:11:51 11136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2007-03-10 22:11:47 19328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2007-03-10 22:11:42 85376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys
2007-03-10 22:11:41 0 d-------- C:\Program Files\Common Files\TV
2007-03-10 22:11:38 17024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys
2007-03-10 22:11:09 54784 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2007-03-10 22:11:05 110592 --a------ C:\WINDOWS\system32\Prop7134.dll
2007-03-10 22:11:05 54304 --a------ C:\WINDOWS\system32\drivers\PhTVTune.sys
2007-03-10 22:11:05 346304 --a------ C:\WINDOWS\system32\drivers\Cap7134.sys
2007-03-10 22:11:05 110592 --a------ C:\WINDOWS\system32\34com.dll
2007-03-10 22:11:05 135168 --a------ C:\WINDOWS\system32\34api.dll
2007-03-10 16:38:35 0 d-------- C:\WINDOWS\CS II<CSII~1>
2007-03-10 16:38:35 0 d-------- C:\Program Files\Common Files\SRS
2007-03-10 11:43:45 6852 --a------ C:\WINDOWS\system32\drivers\Vcs.sys
2007-03-09 18:12:40 0 d-------- C:\WINDOWS\system32\appmgmt
2007-03-09 16:00:01 11596 --a------ C:\WINDOWS\system32\drivers\copperhd.sys
2007-03-09 04:00:17 0 d-------- C:\WINDOWS\ie7updates<IE7UPD~1>
2007-03-08 18:14:56 221184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-03-07 19:16:08 0 d-------- C:\WINDOWS\Sun
2007-03-07 19:12:13 162900 -----n--- C:\WINDOWS\system32\drivers\USBICP.sys
2007-03-07 19:12:13 19020 --a------ C:\WINDOWS\system32\drivers\Razerlow.sys
2007-03-07 19:12:10 0 d--h----- C:\Program Files\Razer
2007-03-07 19:10:48 0 d-------- C:\Program Files\Common Files\Java
2007-03-07 19:01:00 0 d-------- C:\WINDOWS\WBEM
2007-03-07 19:01:00 0 d-------- C:\WINDOWS\system32\pl-pl
2007-03-07 19:00:07 0 d--h---c- C:\WINDOWS\ie7
2007-03-07 18:59:02 121856 -----n--- C:\WINDOWS\system32\xmllite.dll
2007-03-07 18:58:44 262144 --a------ C:\Documents and Settings\All Users\ntuser.dat
2007-03-07 18:58:39 0 d-------- C:\WINDOWS\network diagnostic<NETWOR~1>
2007-03-07 18:16:36 255848 --a------ C:\WINDOWS\system32\xactengine2_6.dll<XA3066~1.DLL>
2007-03-07 18:16:35 68888 --a------ C:\WINDOWS\system32\xinput1_3.dll<XINPUT~4.DLL>
2007-03-07 18:16:35 251672 --a------ C:\WINDOWS\system32\xactengine2_5.dll<XA3C56~1.DLL>
2007-03-07 18:16:35 237848 --a------ C:\WINDOWS\system32\xactengine2_4.dll<XA3856~1.DLL>
2007-03-07 18:16:35 15128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll<X3DAUD~2.DLL>
2007-03-07 18:16:35 3426072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2007-03-07 18:16:35 2414360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2007-03-07 18:16:34 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL>
2007-03-07 18:16:34 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL>
2007-03-07 18:16:33 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-03-07 18:14:30 0 d-------- C:\WINDOWS\Aplikacje<APLIKA~1>
2007-03-07 18:07:35 0 d-------- C:\WINDOWS\system32\LogFiles
2007-03-07 18:07:02 0 d-------- C:\WINDOWS\system32\drivers\umdf
2007-03-07 17:48:34 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-03-07 17:48:34 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-03-07 17:48:34 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-03-07 17:48:33 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe
2007-03-07 17:48:33 129784 -----n--- C:\WINDOWS\system32\pxafs.dll
2007-03-07 17:48:01 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2>
2007-03-07 17:44:40 0 d--h----- C:\Program Files\Winamp
2007-03-07 17:32:07 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1>
2007-03-07 17:32:06 23856 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-03-07 17:32:04 0 d--h----- C:\WINDOWS\$hf_mig$
2007-03-07 17:23:11 0 d-------- C:\WINDOWS\XP Codec Pack<XPCODE~1>
2007-03-07 17:20:31 120832 -ra------ C:\WINDOWS\system32\sfms32.dll
2007-03-07 17:20:31 21504 -ra------ C:\WINDOWS\system32\sfman32.dll
2007-03-07 17:20:31 162176 -ra------ C:\WINDOWS\system32\drivers\ctusfsyn.sys
2007-03-07 17:20:31 73728 -ra------ C:\WINDOWS\MIDIDEF.EXE
2007-03-07 17:20:30 142336 -ra------ C:\WINDOWS\system32\drivers\ctsfm2k.sys
2007-03-07 17:20:30 114688 -ra------ C:\WINDOWS\system32\drivers\ctoss2k.sys
2007-03-07 17:20:28 409600 --a------ C:\WINDOWS\system32\wrap_oal.dll
2007-03-07 17:20:28 86016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2007-03-07 17:20:10 10752 -ra------ C:\WINDOWS\system32\SPIRun.dll
2007-03-07 17:20:10 137728 -ra------ C:\WINDOWS\system32\P17res.dll
2007-03-07 17:20:10 53248 -ra------ C:\WINDOWS\system32\P17CPI.dll
2007-03-07 17:20:10 137728 -ra------ C:\WINDOWS\system32\OemSpi.dll
2007-03-07 17:20:10 139264 -ra------ C:\WINDOWS\system32\EAX.DLL
2007-03-07 17:20:10 197632 -ra------ C:\WINDOWS\SF32.exe
2007-03-07 17:20:10 986 --a------ C:\WINDOWS\SB0792.reg
2007-03-07 17:20:10 990 --a------ C:\WINDOWS\SB0790.reg
2007-03-07 17:20:10 53248 -ra------ C:\WINDOWS\resdef.exe
2007-03-07 17:20:10 663675 -ra------ C:\WINDOWS\OALInst.exe
2007-03-07 17:20:09 8704 -ra------ C:\WINDOWS\system32\drivers\Pfmodnt.sys
2007-03-07 17:20:09 1173504 --a------ C:\WINDOWS\system32\drivers\P17xfi.sys
2007-03-07 17:20:09 11264 -ra------ C:\WINDOWS\InRes.DLL
2007-03-07 17:13:45 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-03-07 17:13:05 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-03-07 17:12:40 53504 --a------ C:\WINDOWS\system32\drivers\i8042prt.sys
2007-03-07 17:11:58 77312 --a------ C:\WINDOWS\system32\usbui.dll
2007-03-07 17:11:08 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1>
2007-03-07 17:11:07 0 d-------- C:\Program Files\Common Files\ODBC
2007-03-07 17:11:04 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2007-03-07 17:11:03 0 dr------- C:\Program Files<PROGRA~1>
2007-03-07 17:11:00 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-03-07 17:11:00 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-03-07 17:11:00 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-03-07 17:10:58 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-03-07 17:10:58 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-03-07 17:10:56 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-03-07 17:10:56 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-03-07 17:10:56 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-03-07 17:10:56 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-03-07 17:10:56 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-03-07 17:10:56 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-03-07 17:10:56 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-03-07 17:10:55 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-03-07 17:10:55 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-03-07 17:10:55 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-03-07 17:10:55 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-03-07 17:10:54 6144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-03-07 17:10:51 6656 --a------ C:\WINDOWS\system32\kbdycl.dll
2007-03-07 17:10:51 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2007-03-07 17:10:51 6656 --a------ C:\WINDOWS\system32\kbdsl.dll
2007-03-07 17:10:51 5632 --a------ C:\WINDOWS\system32\kbdro.dll
2007-03-07 17:10:51 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll
2007-03-07 17:10:51 6656 --a------ C:\WINDOWS\system32\kbdhu.dll
2007-03-07 17:10:51 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll
2007-03-07 17:10:51 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll
2007-03-07 17:10:51 7168 --a------ C:\WINDOWS\system32\kbdcz.dll
2007-03-07 17:10:51 6656 --a------ C:\WINDOWS\system32\kbdcr.dll
2007-03-07 17:10:51 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL
2007-03-07 17:10:50 24661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-03-07 17:10:50 13312 --a------ C:\WINDOWS\system32\irclass.dll
2007-03-07 17:10:50 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-03-07 17:10:50 85532 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-03-07 17:10:50 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-03-07 17:10:49 9168 --a------ C:\WINDOWS\system\VER.DLL
2007-03-07 17:10:49 19200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-03-07 17:10:49 5120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-03-07 17:10:49 24064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-03-07 17:10:49 83456 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-03-07 17:10:49 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-03-07 17:10:48 15360 --a------ C:\WINDOWS\TASKMAN.EXE
2007-03-07 17:10:48 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-03-07 17:10:48 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-03-07 17:10:48 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-03-07 17:10:48 70096 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-03-07 17:10:47 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-03-07 17:10:47 8704 --a------ C:\WINDOWS\system32\batt.dll
2007-03-07 17:10:46 75776 --a------ C:\WINDOWS\system32\storprop.dll
2007-03-07 17:10:46 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2007-03-07 17:10:46 70144 --a------ C:\WINDOWS\NOTEPAD.EXE
2007-03-07 17:10:39 0 d-------- C:\Documents and Settings\All Users\Ulubione
2007-03-07 17:10:39 0 d--h----- C:\Documents and Settings\All Users\Szablony
2007-03-07 17:10:39 0 d-------- C:\Documents and Settings\All Users\Pulpit
2007-03-07 17:10:39 0 dr------- C:\Documents and Settings\All Users\Menu Start<MENUST~1>
2007-03-07 17:10:39 0 dr------- C:\Documents and Settings\All Users\Dokumenty<DOKUME~1>
2007-03-07 17:10:27 0 d-------- C:\WINDOWS\system32\CatRoot2
2007-03-07 17:10:27 0 d-------- C:\WINDOWS\system32\CatRoot
2007-03-07 17:10:21 0 dr-h----- C:\Documents and Settings\All Users\Dane aplikacji<DANEAP~1>
2007-03-07 17:09:55 0 d-------- C:\Documents and Settings<DOCUME~1>
2007-03-07 17:09:54 0 d--hs---- C:\System Volume Information<SYSTEM~1>
2007-03-07 17:03:42 0 d-------- C:\WINDOWS
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\WinSxS
2007-03-07 17:03:42 0 dr------- C:\WINDOWS\Web
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\twain_32
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\wins
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\wbem
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\usmt
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\spool
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\ShellExt
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\Setup
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\ras
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\oobe
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\npp
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\mui
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\inetsrv
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\IME
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\icsxml
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\ias
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\export
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\drivers
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\drivers\etc
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\drivers\disdn
2007-03-07 17:03:42 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\dhcp
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\config
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\3com_dmi
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\3076
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\2052
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\1054
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\1045
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\1042
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\1041
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\1037
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\1033
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\1031
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\1028
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system32\1025
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\system
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\security
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\Resources<RESOUR~1>
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\repair
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1>
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\PeerNet
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\pchealth
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\mui
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\msapps
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\msagent
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\Media
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\java
2007-03-07 17:03:42 0 d--h----- C:\WINDOWS\inf
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\ime
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\Help
2007-03-07 17:03:42 0 dr--s---- C:\WINDOWS\Fonts
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\ehome
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1>
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\Debug
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\Cursors
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1>
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\Config
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\AppPatch
2007-03-07 17:03:42 0 d-------- C:\WINDOWS\addins
2007-03-07 16:56:26 41984 -----n--- C:\WINDOWS\Ctregrun.exe
2007-03-07 16:55:43 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-03-07 16:55:38 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-03-07 16:55:35 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-03-07 16:55:32 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-03-07 16:55:29 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-03-07 16:55:27 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-03-07 16:55:25 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-03-07 16:55:22 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-03-07 16:55:19 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-03-07 16:55:17 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-03-07 16:55:14 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-03-07 16:55:08 133632 -ra------ C:\WINDOWS\system32\CtDvInst.dll
2007-03-07 16:55:07 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-03-07 16:55:07 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-03-07 16:55:07 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-03-07 16:55:01 65536 -ra------ C:\WINDOWS\system32\A3d.dll
2007-03-07 16:53:27 0 d--h----- C:\Program Files\Creative
2007-03-07 16:48:50 0 d-------- C:\WINDOWS\NV30523056.TMP<NV3052~1.TMP>
2007-03-07 16:47:41 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1>
2007-03-07 16:45:55 0 d-------- C:\Program Files\- Programy systemowe -<-PROGR~1>
2007-03-07 16:44:28 298104 --a------ C:\WINDOWS\system32\imon.dll
2007-03-07 16:44:28 15424 --a------ C:\WINDOWS\system32\drivers\nod32drv.sys
2007-03-07 16:44:28 512096 --a------ C:\WINDOWS\system32\drivers\amon.sys
2007-03-07 16:40:24 127456 --a------ C:\WINDOWS\system32\IPDETECT.EXE
2007-03-07 16:40:24 116992 --a------ C:\WINDOWS\system32\drivers\e4usbaw.sys
2007-03-07 16:40:24 126489 --a------ C:\WINDOWS\system32\drivers\adiusbaw.sys
2007-03-07 16:40:24 155648 --a------ C:\WINDOWS\system32\adadix32.dll
2007-03-07 16:40:24 143360 --a------ C:\WINDOWS\adiras.exe
2007-03-07 16:40:23 135168 --a------ C:\WINDOWS\system32\unaddrv.exe
2007-03-07 16:40:23 64000 --a------ C:\WINDOWS\system32\drivers\e4ldr.sys
2007-03-07 16:40:23 50007 --a------ C:\WINDOWS\system32\drivers\adildr.sys
2007-03-07 16:40:23 126976 --a------ C:\WINDOWS\system32\coclassfast.dll<COCLAS~1.DLL>
2007-03-07 16:40:23 4981 --a------ C:\WINDOWS\system32\ADADIX2K.DLL
2007-03-07 16:40:23 46892 --a------ C:\WINDOWS\system32\ADADIX16.DLL
2007-03-07 16:40:23 24576 --a------ C:\WINDOWS\enddisk32.exe<ENDDIS~1.EXE>
2007-03-07 16:40:22 176128 --a------ C:\WINDOWS\autoclk.exe
2007-03-07 16:40:20 0 d--h----- C:\Program Files\SAGEM
2007-03-07 16:36:51 208896 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-03-07 16:36:51 0 d-------- C:\WINDOWS\nview
2007-03-07 16:36:34 208896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-03-07 16:36:05 23040 -ra------ C:\WINDOWS\system32\drivers\GVCplDrv.sys
2007-03-07 16:34:11 385024 -r------- C:\WINDOWS\system32\JMRaidTool.exe<JMRAID~1.EXE>
2007-03-07 16:34:11 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-03-07 16:34:10 0 d-------- C:\WINDOWS\JM
2007-03-07 16:34:09 43264 -ra------ C:\WINDOWS\system32\drivers\jraid.sys
2007-03-07 16:34:09 6912 -ra------ C:\WINDOWS\system32\drivers\JGOGO.sys
2007-03-07 16:33:56 244608 --a------ C:\WINDOWS\system32\drivers\yk51x86.sys
2007-03-07 16:33:55 0 d--h----- C:\Program Files\GIGABYTE
2007-03-07 16:33:52 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2007-03-07 16:33:45 306688 --a------ C:\WINDOWS\IsUninst.exe
2007-03-07 16:25:24 0 d-------- C:\WINDOWS\system32\ReinstallBackups<REINST~1>
2007-03-07 16:25:23 0 d--h----- C:\Program Files\Intel
2007-03-07 16:22:58 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-03-07 16:22:57 0 d-------- C:\WINDOWS\Prefetch
2007-03-07 16:19:51 0 d-------- C:\WINDOWS\system32\xircom
2007-03-07 16:19:51 0 d--h----- C:\Program Files\microsoft frontpage<MICROS~1>
2007-03-07 16:19:38 0 -rahs---- C:\MSDOS.SYS
2007-03-07 16:19:38 0 -rahs---- C:\IO.SYS
2007-03-07 16:19:38 0 --a------ C:\CONFIG.SYS
2007-03-07 16:19:38 0 --a------ C:\AUTOEXEC.BAT
2007-03-07 16:19:26 112128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-03-07 16:18:52 0 d--hs---- C:\Documents and Settings\All Users\DRM
2007-03-07 16:18:44 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1>
2007-03-07 16:18:44 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1>
2007-03-07 16:18:34 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3>
2007-03-07 16:18:31 0 d--h----- C:\Program Files\Usługi online<USUGIO~1>
2007-03-07 16:18:16 0 d-------- C:\WINDOWS\system32\DirectX
2007-03-07 16:17:55 11264 --a------ C:\WINDOWS\system32\atrace.dll
2007-03-07 16:17:45 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-03-07 16:17:43 67584 --a------ C:\WINDOWS\system32\acctres.dll
2007-03-07 16:17:40 0 d---s---- C:\WINDOWS\Tasks
2007-03-07 16:17:40 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-03-07 16:17:39 0 d-------- C:\Program Files\Common Files\MSSoap
2007-03-07 16:17:35 0 d-------- C:\WINDOWS\srchasst
2007-03-07 16:17:34 0 d-------- C:\WINDOWS\system32\Macromed
2007-03-07 16:17:31 173536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-03-07 16:17:31 128280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-03-07 16:17:31 6656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-03-07 16:17:31 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-03-07 16:17:30 41240 --a------ C:\WINDOWS\system32\wups.dll
2007-03-07 16:17:30 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-03-07 16:17:30 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-03-07 16:17:30 125208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-03-07 16:17:30 466200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-03-07 16:17:30 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-03-07 16:17:30 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2007-03-07 16:17:30 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2007-03-07 16:17:29 382464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-03-07 16:17:25 0 d--h----- C:\Program Files\Movie Maker<MOVIEM~1>
2007-03-07 16:17:21 45568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-03-07 16:17:21 29696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-03-07 16:17:21 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-03-07 16:17:21 43520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-03-07 16:17:17 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-03-07 16:17:17 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-03-07 16:17:17 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2007-03-07 16:17:16 171008 --a------ C:\WINDOWS\system32\srsvc.dll
2007-03-07 16:17:16 240128 --a------ C:\WINDOWS\system32\srrstr.dll
2007-03-07 16:17:16 67584 --a------ C:\WINDOWS\system32\srclient.dll
2007-03-07 16:17:16 0 d-------- C:\WINDOWS\system32\Restore
2007-03-07 16:17:16 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-03-07 16:17:15 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-03-07 16:17:15 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-03-07 16:17:15 34560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-03-07 16:17:15 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-03-07 16:17:15 81920 --a------ C:\WINDOWS\system32\ils.dll
2007-03-07 16:17:14 69632 --a------ C:\WINDOWS\system32\msconf.dll
2007-03-07 16:17:12 105984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-03-07 16:17:12 252928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-03-07 16:17:11 49664 --a------ C:\WINDOWS\system32\inetres.dll
2007-03-07 16:17:10 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-03-07 16:17:08 192000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-03-07 16:17:08 12288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-03-07 16:17:08 278528 --a------ C:\WINDOWS\system32\mstask.dll
2007-03-07 16:17:07 86016 --a------ C:\WINDOWS\system32\isign32.dll
2007-03-07 16:17:07 278528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-03-07 16:17:07 65536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-03-07 16:17:07 73728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-03-07 16:16:37 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2007-03-07 16:16:25 0 d-------- C:\WINDOWS\Registration<REGIST~1>
2007-03-07 16:16:14 0 d--h----- C:\Program Files\Messenger<MESSEN~1>
2007-03-07 16:16:10 5632 --a------ C:\WINDOWS\system32\write.exe
2007-03-07 16:16:10 0 d--h----- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2007-03-07 16:16:01 139264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-03-07 16:16:01 44544 --a------ C:\WINDOWS\system32\hticons.dll
2007-03-07 16:16:01 73216 --a------ C:\WINDOWS\system32\avwav.dll
2007-03-07 16:16:01 16384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-03-07 16:16:00 35328 --a------ C:\WINDOWS\system32\winchat.exe
2007-03-07 16:16:00 231424 --a------ C:\WINDOWS\system32\avtapi.dll
2007-03-07 16:15:53 57344 --a------ C:\WINDOWS\system32\sol.exe
2007-03-07 16:15:53 605696 --a------ C:\WINDOWS\system32\getuname.dll
2007-03-07 16:15:53 80896 --a------ C:\WINDOWS\system32\charmap.exe
2007-03-07 16:15:53 115200 --a------ C:\WINDOWS\system32\calc.exe
2007-03-07 16:15:52 119808 --a------ C:\WINDOWS\system32\winmine.exe
2007-03-07 16:15:52 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-03-07 16:15:52 16384 --a------ C:\WINDOWS\system32\tskill.exe
2007-03-07 16:15:52 9728 --a------ C:\WINDOWS\system32\reset.exe
2007-03-07 16:15:52 128000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-03-07 16:15:52 55808 --a------ C:\WINDOWS\system32\freecell.exe
2007-03-07 16:15:51 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-03-07 16:15:51 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-03-07 16:15:51 15360 --a------ C:\WINDOWS\system32\tscon.exe
2007-03-07 16:15:51 15360 --a------ C:\WINDOWS\system32\shadow.exe
2007-03-07 16:15:51 16384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-03-07 16:15:51 33792 --a------ C:\WINDOWS\system32\regini.exe
2007-03-07 16:15:51 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-03-07 16:15:51 22528 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-03-07 16:15:51 17408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-03-07 16:15:51 22528 --a------ C:\WINDOWS\system32\msg.exe
2007-03-07 16:15:51 15872 --a------ C:\WINDOWS\system32\logoff.exe
2007-03-07 16:15:51 15872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-03-07 16:15:50 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-03-07 16:15:49 54272 --a------ C:\WINDOWS\system32\stclient.dll
2007-03-07 16:15:49 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-03-07 16:15:49 4096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-03-07 16:15:49 20480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-03-07 16:15:49 147456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-03-07 16:15:49 97792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-03-07 16:15:49 25600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-03-07 16:15:43 187904 --a------ C:\WINDOWS\system32\accwiz.exe
2007-03-07 16:15:42 132608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-03-07 16:15:42 345088 --a------ C:\WINDOWS\system32\mspaint.exe
2007-03-07 16:15:42 124928 --a------ C:\WINDOWS\system32\mplay32.exe
2007-03-07 16:15:42 351744 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-03-07 16:15:42 0 d--h----- C:\Program Files\Windows NT<WINDOW~1>
2007-03-07 16:15:41 539136 --a------ C:\WINDOWS\system32\spider.exe
2007-03-07 16:15:41 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-03-07 16:15:41 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-03-07 16:15:41 103424 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-03-07 16:15:40 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-03-07 16:15:40 60928 --a------ C:\WINDOWS\system32\remotepg.dll
2007-03-07 16:15:40 67072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-03-07 16:15:40 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-03-07 16:15:40 655360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-03-07 16:15:40 408576 --a------ C:\WINDOWS\system32\mstsc.exe
2007-03-07 16:15:40 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-03-07 16:15:39 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-03-07 16:15:39 296448 --a------ C:\WINDOWS\system32\termsrv.dll
2007-03-07 16:15:39 141824 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-03-07 16:15:39 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-03-07 16:15:39 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-03-07 16:15:39 62464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-03-07 16:15:39 147968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-03-07 16:15:39 20992 --a------ C:\WINDOWS\system32\qprocess.exe
2007-03-07 16:15:39 11264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-03-07 16:15:38 91136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-03-07 16:15:38 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-03-07 16:15:38 956416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-03-07 16:15:38 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-03-07 16:15:38 0 d-------- C:\WINDOWS\system32\MsDtc
2007-03-07 16:15:38 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-03-07 16:15:37 11776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-03-07 16:15:37 58880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-03-07 16:15:37 6144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-03-07 16:15:36 0 d-------- C:\WINDOWS\system32\Com
2007-03-07 16:15:36 60416 --a------ C:\WINDOWS\system32\colbact.dll
2007-03-07 16:15:36 110080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-03-07 16:15:36 625152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-03-07 16:15:36 85504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-03-07 16:15:36 225792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-03-07 16:15:35 540160 --a------ C:\WINDOWS\system32\comuid.dll
2007-03-07 16:15:35 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-03-07 16:15:35 498688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-03-07 16:15:28 56320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-03-07 16:15:28 17920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-03-07 16:15:28 58880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-03-07 16:15:28 187904 --a------ C:\WINDOWS\system32\cmprops.dll
2007-03-07 16:15:23 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-03-07 16:15:23 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys


-- Find3M Report ---------------------------------------------------------------

2007-03-31 16:22:07 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\DMCache
2007-03-31 15:24:04 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\uTorrent
2007-03-31 08:24:11 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\teamspeak2<TEAMSP~1>
2007-03-30 22:02:47 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Uniblue
2007-03-30 00:22:58 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Skype
2007-03-29 20:20:03 0 d---s---- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Microsoft<MICROS~1>
2007-03-27 16:59:27 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Canon
2007-03-26 23:20:27 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Hamachi
2007-03-25 20:13:33 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\ACD Systems<ACDSYS~1>
2007-03-25 20:04:42 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\ABBYY
2007-03-25 09:50:12 355838 --a------ C:\WINDOWS\system32\perfh015.dat
2007-03-25 09:50:12 49664 --a------ C:\WINDOWS\system32\perfc015.dat
2007-03-21 00:18:12 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Ascaron Entertainment<ASCARO~1>
2007-03-20 18:05:40 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Real
2007-03-18 18:40:27 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\My Games<MYGAME~1>
2007-03-18 18:05:04 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Ahead
2007-03-18 14:04:22 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\eSkiMoS R2<ESKIMO~1>
2007-03-17 13:02:04 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Adobe
2007-03-13 21:56:32 0 dr-h----- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\SecuROM
2007-03-08 23:30:51 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\WinRAR
2007-03-08 23:16:01 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Lavasoft
2007-03-08 00:38:45 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\IDM
2007-03-08 00:37:16 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Macromedia<MACROM~1>
2007-03-07 19:16:08 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Sun
2007-03-07 17:10:39 62 --ahs---- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\desktop.ini
2007-03-07 16:23:51 0 d-------- C:\Documents and Settings\Paweł Jaworski\Dane aplikacji\Identities<IDENTI~1>
2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe
2007-01-12 10:27:42 232960 --a------ C:\WINDOWS\system32\webcheck.dll
2007-01-12 10:27:42 51712 -----n--- C:\WINDOWS\system32\msfeedsbs.dll<MSFEED~1.DLL>
2007-01-12 10:27:42 458752 -----n--- C:\WINDOWS\system32\msfeeds.dll
2007-01-12 10:27:42 6054400 --a------ C:\WINDOWS\system32\ieframe.dll
2007-01-08 20:04:54 105984 --a------ C:\WINDOWS\system32\url.dll
2007-01-08 20:04:08 102400 --a------ C:\WINDOWS\system32\occache.dll
2007-01-08 20:02:04 266752 --a------ C:\WINDOWS\system32\iertutil.dll
2007-01-08 20:02:04 44544 --a------ C:\WINDOWS\system32\iernonce.dll
2007-01-08 20:02:02 384000 --a------ C:\WINDOWS\system32\iedkcs32.dll
2007-01-08 20:02:02 383488 -----n--- C:\WINDOWS\system32\ieapfltr.dll
2007-01-08 20:02:02 161792 --a------ C:\WINDOWS\system32\ieakui.dll
2007-01-08 20:02:02 230400 --a------ C:\WINDOWS\system32\ieaksie.dll
2007-01-08 20:02:02 153088 --a------ C:\WINDOWS\system32\ieakeng.dll
2007-01-08 20:01:14 17408 --a------ C:\WINDOWS\system32\corpol.dll
2007-01-08 20:00:48 124928 --a------ C:\WINDOWS\system32\advpack.dll
2007-01-08 19:08:14 56832 --a------ C:\WINDOWS\system32\ie4uinit.exe
2007-01-08 19:08:10 13824 --a------ C:\WINDOWS\system32\ieudinit.exe


-- Registry Dump ---------------------------------------------------------------


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"AutoConnect"="C:\\Program Files\\AutoConnect\\AutoConnect.exe"
"AQQ"="C:\\PROGRA~1\\-PROGR~1\\AQQ\\AQQ.exe"
"IDMan"="C:\\Program Files\\- Programy systemowe -\\Internet Download Manager\\IDMan.exe /onboot"
"SpeedX"="C:\\PROGRA~1\\-PROGR~1\\Speed-X\\SpeedX.exe"
"Uniblue SpyEraser"="\"C:\\Program Files\\- Programy systemowe -\\SpyEraser\\SpyEraser.exe\" -m"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"GBB36X Configure"="C:\\WINDOWS\\system32\\JMRaidTool.exe boot"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"nod32kui"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE"
"NvMediaCenter"="RunDLL32.exe NvMCTray.dll,NvTaskbarInit"
"VolPanel"="\"C:\\Program Files\\Creative\\Sound Blaster X-Fi\\Volume Panel\\VolPanlu.exe\" /r"
"P17Helper"="Rundll32 SPIRun.dll,RunDLLEntry"
"DU Meter"="C:\\Program Files\\- Programy systemowe -\\DU Meter\\DUMeter.exe"
"razer"="C:\\Program Files\\Razer\\Copperhead\\razerhid.exe"
"SunJavaUpdateSched"="\"C:\\WINDOWS\\java\\bin\\jusched.exe\""
"Copperhead"="C:\\Program Files\\Razer\\Copperhead\\razerhid.exe"
"NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiskeeperSystray]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="DkIcon"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\- Programy systemowe -\\Disk Keeper 2007\\DkIcon.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SDTrayApp"
"hkey"="HKLM"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Twoje TVN24]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="pasekTVN24"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\- Programy systemowe -\\Pasek TVN24\\pasekTVN24.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VS Online]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="VSOnline"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\VS Online\\VSOnline.exe\" /tray"
"inimapping"="0"


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

[HKEY_USERS\

[wojtas]

start>uruchom>services.msc >zatrzymaj i wylacz usluge SVKP:

C:\WINDOWS\system32\SVKP.sys

skasuj jesli bedzie plik

wykonywales to"

start>urchom> wpisz msconfig> zakladka uruchamianie> wylacz progsy ktore nie chcesz zeby startowaly z systemem

odpal SmitfraudFix z opcji 2

http://siri.urz.free.fr/Fix/SmitfraudFix.php
opis >>

http://forum.programosy.pl/trudne-przypadki-i-metody-usuwania-vt41947.html