log z OTL:
- Kod: Zaznacz wszystko
OTL logfile created on: 2009-07-14 17:39:50 - Run 1
OTL by OldTimer - Version 3.0.7.1 Folder = C:\Documents and Settings\aaa\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
254,92 Mb Total Physical Memory | 59,31 Mb Available Physical Memory | 23,27% Memory free
625,91 Mb Paging File | 278,71 Mb Available in Paging File | 44,53% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 6,83 Gb Total Space | 1,26 Gb Free Space | 18,43% Space Free | Partition Type: NTFS
Drive D: | 11,80 Gb Total Space | 3,34 Gb Free Space | 28,28% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: LAPTOP
Current User Name: aaa
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2008-04-14 22:51:18 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2009-02-05 22:01:25 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009-02-05 22:08:40 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2001-07-26 17:10:18 | 00,049,152 | ---- | M] (Hewlett-Packard) -- C:\Program Files\Hewlett-Packard\HP Display Settings\hpdisply.exe
PRC - [2002-10-07 18:40:56 | 00,126,976 | R--- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
PRC - [2002-10-07 18:40:00 | 00,561,152 | R--- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
PRC - [2001-08-27 18:08:08 | 00,073,728 | ---- | M] (Dritek System Inc.) -- C:\Program Files\HP One-Touch\ONETOUCH.EXE
PRC - [2009-02-05 22:08:45 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009-07-03 20:06:13 | 00,249,856 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Program Files\blueconnect\DataCardMonitor.exe
PRC - [2008-03-20 12:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe
PRC - [2001-09-21 16:15:50 | 00,094,208 | ---- | M] () -- C:\WINDOWS\System32\Ati2evxx.exe
PRC - [2001-07-26 17:09:54 | 00,159,744 | ---- | M] (Hewlett-Packard) -- C:\WINDOWS\System32\HPConfig.exe
PRC - [2008-04-14 22:51:22 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetsrv\inetinfo.exe
PRC - [2001-10-26 18:30:02 | 00,019,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpsvcs.exe
PRC - [2008-04-14 22:51:44 | 00,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\snmp.exe
PRC - [2005-01-28 13:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe
PRC - [2008-04-14 22:51:30 | 00,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mqsvc.exe
PRC - [2008-04-14 22:51:30 | 00,117,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mqtgsvc.exe
PRC - [2009-02-05 22:08:26 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009-02-05 22:06:04 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2001-10-26 18:29:48 | 00,008,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\cidaemon.exe
PRC - [2001-10-26 18:29:48 | 00,008,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\cidaemon.exe
PRC - [2007-07-30 14:42:06 | 07,209,069 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-07-14 17:37:21 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\aaa\Pulpit\OTL.exe
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2008-04-14 22:49:54 | 00,100,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\6to4svc.dll -- (6to4 [Auto | Running])
SRV - [2007-10-24 01:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2009-02-05 22:01:25 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv [Auto | Running])
SRV - [2001-09-21 16:15:50 | 00,094,208 | ---- | M] () -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running])
SRV - [2009-02-05 22:08:40 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus [Auto | Running])
SRV - [2009-02-05 22:08:26 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Running])
SRV - [2009-02-05 22:06:04 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Running])
SRV - [2007-10-24 01:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2008-04-14 22:50:46 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2001-07-26 17:09:54 | 00,159,744 | ---- | M] (Hewlett-Packard) -- C:\WINDOWS\System32\HPConfig.exe -- (HPConfig [Auto | Running])
SRV - [2008-04-14 22:51:22 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetsrv\inetinfo.exe -- (IISADMIN [Auto | Running])
SRV - [2008-04-14 22:50:34 | 00,035,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iprip.dll -- (Iprip [Auto | Running])
SRV - [2001-10-26 18:30:02 | 00,019,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpsvcs.exe -- (LPDSVC [On_Demand | Stopped])
SRV - [2008-04-14 22:51:22 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetsrv\inetinfo.exe -- (MSFtpsvc [Auto | Running])
SRV - [2008-04-14 22:51:30 | 00,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mqsvc.exe -- (MSMQ [Auto | Running])
SRV - [2008-04-14 22:51:30 | 00,117,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mqtgsvc.exe -- (MSMQTriggers [Auto | Running])
SRV - [2005-12-16 10:53:26 | 00,091,648 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\outpost.exe -- (OutpostFirewall [Disabled | Stopped])
SRV - [2008-04-14 22:50:46 | 00,105,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\p2pgasvc.dll -- (p2pgasvc [On_Demand | Stopped])
SRV - [2001-10-26 18:30:02 | 00,019,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpsvcs.exe -- (SimpTcp [Auto | Running])
SRV - [2008-04-14 22:51:22 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetsrv\inetinfo.exe -- (SMTPSVC [Auto | Running])
SRV - [2008-04-14 22:51:44 | 00,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\snmp.exe -- (SNMP [Auto | Running])
SRV - [2005-01-28 13:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe -- (UMWdf [Auto | Running])
SRV - [2008-04-14 22:51:22 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetsrv\inetinfo.exe -- (W3SVC [Auto | Running])
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2009-02-05 22:05:11 | 00,026,944 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4 [System | Running])
DRV - [2005-12-16 10:52:56 | 00,033,568 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\ADBLOCK.DLL -- (ADBLOCK.DLL [On_Demand | Stopped])
DRV - [2001-08-18 06:38:10 | 00,217,472 | R--- | M] (ESS Technology, Inc.) -- C:\WINDOWS\System32\drivers\es198x.sys -- (allegro [On_Demand | Running])
DRV - [2005-12-16 10:54:06 | 00,017,440 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\ARP.DLL -- (ARP.DLL [On_Demand | Stopped])
DRV - [2009-02-05 22:07:12 | 00,020,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\DRIVERS\aswFsBlk.sys -- (aswFsBlk [Auto | Running])
DRV - [2009-02-05 22:08:10 | 00,094,032 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2 [Auto | Running])
DRV - [2009-02-05 22:06:10 | 00,023,152 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr [On_Demand | Running])
DRV - [2009-02-05 22:07:23 | 00,114,768 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP [System | Running])
DRV - [2009-02-05 22:06:20 | 00,051,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi [System | Running])
DRV - [2001-10-03 00:15:58 | 00,348,512 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running])
DRV - [2005-12-16 10:53:04 | 00,004,864 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\CONTENT.DLL -- (CONTENT.DLL [On_Demand | Stopped])
DRV - [2005-12-16 10:52:44 | 00,014,176 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\DNSCACHE.DLL -- (DNSCACHE.DLL [On_Demand | Stopped])
DRV - [2001-04-12 01:43:42 | 00,119,056 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\DRIVERS\e100bnt5.sys -- (E100B [On_Demand | Running])
DRV - [2005-12-16 10:53:12 | 00,008,992 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\FTPFILT.DLL -- (FTPFILT.DLL [On_Demand | Stopped])
DRV - [2001-07-26 17:09:34 | 00,017,388 | ---- | M] (Hewlett-Packard) -- C:\WINDOWS\System32\DRIVERS\hpci.sys -- (HPCI [On_Demand | Running])
DRV - [2005-12-16 10:52:50 | 00,011,552 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\HTMLFILT.DLL -- (HTMLFILT.DLL [On_Demand | Stopped])
DRV - [2005-12-16 10:52:46 | 00,013,248 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\HTTPFILT.DLL -- (HTTPFILT.DLL [On_Demand | Stopped])
DRV - [2008-07-24 12:02:36 | 00,101,376 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys -- (hwdatacard [On_Demand | Stopped])
DRV - [2005-12-16 10:53:08 | 00,007,200 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\IMAPFILT.DLL -- (IMAPFILT.DLL [On_Demand | Stopped])
DRV - [2001-08-09 12:31:16 | 00,013,258 | ---- | M] (Dritek System Inc.) -- C:\WINDOWS\System32\Drivers\KBFiltr.sys -- (KBFiltr [On_Demand | Running])
DRV - [2007-03-20 12:33:26 | 00,028,672 | ---- | M] (http://libusb-win32.sourceforge.net) -- C:\WINDOWS\System32\drivers\libusb0.sys -- (libusb0 [On_Demand | Stopped])
DRV - [2001-11-28 15:14:54 | 00,628,049 | R--- | M] (LT) -- C:\WINDOWS\System32\DRIVERS\ltmdmnt.sys -- (ltmodem5 [On_Demand | Running])
DRV - [2005-12-16 10:53:00 | 00,014,912 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\MAILFILT.DLL -- (MAILFILT.DLL [On_Demand | Stopped])
DRV - [2008-04-14 00:09:46 | 00,092,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mqac.sys -- (MQAC [On_Demand | Running])
DRV - [2005-12-16 10:53:06 | 00,006,752 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\NNTPFILT.DLL -- (NNTPFILT.DLL [On_Demand | Stopped])
DRV - [2005-12-16 10:52:58 | 00,009,984 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\POP3FILT.DLL -- (POP3FILT.DLL [On_Demand | Stopped])
DRV - [2005-12-16 10:53:14 | 00,016,928 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\PROTECT.DLL -- (PROTECT.DLL [On_Demand | Stopped])
DRV - [2001-08-17 22:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2008-05-08 16:02:52 | 00,203,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\RMCast.sys -- (RMCAST [On_Demand | Running])
DRV - [2007-11-13 12:25:55 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2005-12-16 10:54:10 | 00,009,664 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\SECRET.DLL -- (SECRET.DLL [On_Demand | Stopped])
DRV - [2001-10-26 17:05:44 | 00,006,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\serscan.sys -- (StillCam [On_Demand | Running])
DRV - [2002-10-07 19:37:16 | 00,264,528 | R--- | M] (Synaptics, Inc.) -- C:\WINDOWS\System32\DRIVERS\SynTP.sys -- (SynTP [On_Demand | Running])
DRV - [2008-06-20 13:08:27 | 00,225,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\tcpip6.sys -- (Tcpip6 [System | Running])
DRV - [2005-12-16 10:52:02 | 00,124,928 | ---- | M] (Agnitum Ltd.) -- C:\Program Files\Outpost Firewall\kernel\FILTNT.SYS -- (VFILT [System | Running])
DRV - File not found -- Service key not found. -- (AVPsys [Unknown | Stopped])
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "http://www.onet.pl"
FF - HKLM\software\mozilla\Mozilla Firefox 1.5.0.12\Extensions\\Components: C:\Program Files\Mozilla Firefox\components\ [2007-07-30 14:42:15 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 1.5.0.12\Extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins\ [2007-07-30 14:42:14 | 00,000,000 | ---D | M]
[2006-08-12 20:04:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\aaa\Dane aplikacji\mozilla\Firefox\Profiles\6ib2sk5l.default\extensions
[2006-08-12 20:03:08 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2007-07-30 14:42:14 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2007-07-30 14:42:02 | 00,061,038 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jar50.dll
[2007-07-30 14:42:02 | 00,049,256 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jsd3250.dll
[2007-07-30 14:42:03 | 00,166,000 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\xpinstal.dll
[2007-07-30 14:42:08 | 00,017,032 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2007-07-30 14:42:12 | 00,003,710 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.png
[2007-07-30 14:42:12 | 00,000,901 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.src
[2007-07-30 14:42:12 | 00,001,076 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google-pl.gif
[2007-07-30 14:42:12 | 00,000,786 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google-pl.src
[2007-07-30 14:42:12 | 00,000,480 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.png
[2007-07-30 14:42:12 | 00,001,117 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.src
[2007-07-30 14:42:12 | 00,000,597 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pbi-pl.png
[2007-07-30 14:42:12 | 00,001,096 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pbi-pl.src
[2007-07-30 14:42:12 | 00,000,316 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.png
[2007-07-30 14:42:12 | 00,000,792 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.src
[2007-07-30 14:42:12 | 00,000,459 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.png
[2007-07-30 14:42:12 | 00,001,093 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.src
[2007-07-30 14:42:12 | 00,000,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.png
[2007-07-30 14:42:12 | 00,000,974 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.src
O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [HP Display Settings] File not found
O4 - HKLM..\Run: [PPort11reminder] C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [QT4HPOT] C:\Program Files\HP One-Touch\ONETOUCH.EXE (Dritek System Inc.)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKCU..\Run: [cdoosoft] C:\WINDOWS\System32\olhrwef.exe ()
O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Szybkie dostosowywanie programu Outpost Firewall Pro - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\Program Files\Outpost Firewall\Plugins\BrowserBar\ie_bar.dll (Agnitum Ltd.)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: Microsoft XML Parser for Java Reg Error: Value error. (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\OUTPOS~1\wl_hook.dll) - C:\Program Files\Outpost Firewall\wl_hook.dll (Agnitum Ltd.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-08-08 21:16:03 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-07-14 17:40:21 | 00,000,059 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-07-14 17:40:21 | 00,000,059 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{566bc5c7-271d-11db-bc1b-806d6172696f}\Shell\AutoRun\command - "" = C:\uo10sn.cmd -- [2009-06-28 12:43:00 | 00,106,748 | RHS- | M] ()
O33 - MountPoints2\{566bc5c7-271d-11db-bc1b-806d6172696f}\Shell\open\Command - "" = C:\uo10sn.cmd -- [2009-06-28 12:43:00 | 00,106,748 | RHS- | M] ()
O33 - MountPoints2\{566bc5c8-271d-11db-bc1b-806d6172696f}\Shell\AutoRun\command - "" = D:\uo10sn.cmd -- [2009-06-28 12:43:00 | 00,106,748 | RHS- | M] ()
O33 - MountPoints2\{566bc5c8-271d-11db-bc1b-806d6172696f}\Shell\open\Command - "" = D:\uo10sn.cmd -- [2009-06-28 12:43:00 | 00,106,748 | RHS- | M] ()
O33 - MountPoints2\{6e8aa941-69a4-11de-8712-00c09f1e01cc}\Shell - "" = AutoRun
O33 - MountPoints2\{6e8aa941-69a4-11de-8712-00c09f1e01cc}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- File not found
O33 - MountPoints2\{6e8aa948-69a4-11de-8712-00c09f1e01cc}\Shell\AutoRun\command - "" = H:\uo10sn.cmd -- File not found
O33 - MountPoints2\{6e8aa948-69a4-11de-8712-00c09f1e01cc}\Shell\open\Command - "" = H:\uo10sn.cmd -- File not found
O33 - MountPoints2\{7dbf9970-6a53-11de-8718-00c09f1e01cc}\Shell - "" = AutoRun
O33 - MountPoints2\{7dbf9970-6a53-11de-8718-00c09f1e01cc}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- File not found
O33 - MountPoints2\{7dbf9971-6a53-11de-8718-00c09f1e01cc}\Shell - "" = AutoRun
O33 - MountPoints2\{7dbf9971-6a53-11de-8718-00c09f1e01cc}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- File not found
O33 - MountPoints2\{f0399330-67fb-11de-870c-00c09f1e01cc}\Shell - "" = AutoRun
O33 - MountPoints2\{f0399330-67fb-11de-870c-00c09f1e01cc}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- File not found
O33 - MountPoints2\{f0399333-67fb-11de-870c-00c09f1e01cc}\Shell - "" = AutoRun
O33 - MountPoints2\{f0399333-67fb-11de-870c-00c09f1e01cc}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- File not found
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2009-07-14 17:37:26 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\aaa\Pulpit\OTL.exe
[2009-07-14 17:26:57 | 00,046,880 | ---- | C] () -- C:\Documents and Settings\aaa\Pulpit\bez tytułu.JPG
[2009-07-12 21:02:30 | 00,106,748 | RHS- | C] () -- C:\uo10sn.cmd
[2009-07-12 21:02:01 | 00,106,748 | RHS- | C] () -- C:\WINDOWS\System32\olhrwef.exe
[2009-07-12 21:02:01 | 00,105,984 | RHS- | C] () -- C:\WINDOWS\System32\nmdfgds0.dll
[2009-07-12 14:05:41 | 00,139,776 | ---- | C] () -- C:\Documents and Settings\aaa\Pulpit\CV.doc
[2009-07-09 17:02:16 | 00,257,024 | ---- | C] () -- C:\Documents and Settings\aaa\Pulpit\norwegia i oslo.doc
[2009-07-09 16:53:14 | 00,031,232 | ---- | C] () -- C:\Documents and Settings\aaa\Pulpit\bazylika mniejsza w kemzaroku.doc
[2009-07-05 23:38:49 | 00,000,059 | RHS- | C] () -- C:\autorun.inf
[2009-07-05 23:07:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\aaa\Dane aplikacji\U3
[2009-07-05 22:51:29 | 00,007,168 | ---- | C] () -- C:\WINDOWS\aaa.pcb
[2009-07-03 20:08:50 | 00,032,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbccgp.sys
[2009-07-03 20:08:50 | 00,032,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbccgp.sys
[2009-07-03 20:07:26 | 00,000,718 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\blueconnect.lnk
[2009-07-03 20:06:54 | 00,621,056 | ---- | C] (DiBcom SA) -- C:\WINDOWS\System32\drivers\mod7700.sys
[2009-07-03 20:06:54 | 00,113,664 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbnet.sys
[2009-07-03 20:06:54 | 00,101,376 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys
[2009-07-03 20:06:54 | 00,024,448 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewdcsc.sys
[2009-07-03 20:05:17 | 00,000,000 | ---D | C] -- C:\Program Files\blueconnect
[2009-07-01 20:05:57 | 00,163,840 | ---- | C] () -- C:\Documents and Settings\aaa\Pulpit\atrakcje turystyczne Polski.doc
[2009-06-30 16:53:40 | 00,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpext.dll
[2009-04-20 15:41:26 | 00,077,824 | R--- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll
[2009-04-20 15:40:26 | 00,000,272 | ---- | C] () -- C:\WINDOWS\_delis32.ini
[2009-03-25 22:06:36 | 00,000,021 | ---- | C] () -- C:\WINDOWS\pit2007.ini
[2009-03-25 22:06:35 | 00,000,079 | ---- | C] () -- C:\WINDOWS\pit2008.ini
[2008-06-19 21:58:59 | 00,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2008-06-19 21:58:58 | 00,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2008-06-19 21:54:21 | 00,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2008-06-19 21:49:37 | 00,031,567 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2006-08-12 21:04:05 | 00,000,239 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2006-08-11 00:20:39 | 00,000,022 | ---- | C] () -- C:\WINDOWS\exchng.ini
[2006-08-11 00:20:36 | 00,000,288 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006-08-09 12:06:49 | 00,000,000 | ---- | C] () -- C:\WINDOWS\frontpg.ini
[2006-08-09 12:04:33 | 00,023,152 | ---- | C] () -- C:\WINDOWS\System32\smtpctrs.ini
[2006-08-09 12:04:33 | 00,001,092 | ---- | C] () -- C:\WINDOWS\System32\ntfsdrct.ini
[2006-08-09 12:04:09 | 00,012,012 | ---- | C] () -- C:\WINDOWS\System32\ftpctrs.ini
[2006-08-09 12:04:06 | 00,058,750 | ---- | C] () -- C:\WINDOWS\System32\w3ctrs.ini
[2006-08-09 12:04:05 | 00,014,972 | ---- | C] () -- C:\WINDOWS\System32\axperf.ini
[2006-08-09 12:04:02 | 00,018,031 | ---- | C] () -- C:\WINDOWS\System32\infoctrs.ini
[2006-08-09 12:03:58 | 00,003,619 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2001-10-02 23:23:44 | 00,032,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinxsxx.sys
[2001-10-02 23:23:32 | 00,020,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinttxx.sys
[2001-10-02 23:23:26 | 00,011,760 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinpdxx.sys
[2001-10-02 23:23:20 | 00,011,280 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinmdxx.sys
[2001-10-02 23:23:06 | 00,032,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinraxx.sys
[2001-10-02 23:22:44 | 00,060,464 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinbtxx.sys
[2001-10-02 23:21:44 | 00,065,104 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinrvxx.sys
[2001-10-02 23:20:54 | 00,032,336 | ---- | C] () -- C:\WINDOWS\System32\drivers\atintuxx.sys
[2001-07-21 23:16:20 | 00,000,859 | ---- | C] () -- C:\WINDOWS\win.ini
[2001-07-21 23:15:52 | 00,000,435 | ---- | C] () -- C:\WINDOWS\system.ini
[1997-03-19 00:00:00 | 00,022,016 | ---- | C] () -- C:\WINDOWS\System32\ODBCSTF.DLL
[1997-03-19 00:00:00 | 00,022,016 | ---- | C] () -- C:\WINDOWS\System32\DOCOBJ.DLL
[1997-03-19 00:00:00 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\VAPL232.DLL
[1997-03-19 00:00:00 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\HLINKPRX.DLL
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[1 C:\WINDOWS\System32\*.tmp files]
[1 C:\WINDOWS\*.tmp files]
[2009-07-14 17:45:50 | 00,000,059 | RHS- | M] () -- C:\autorun.inf
[2009-07-14 17:37:21 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\aaa\Pulpit\OTL.exe
[2009-07-14 17:26:58 | 00,046,880 | ---- | M] () -- C:\Documents and Settings\aaa\Pulpit\bez tytułu.JPG
[2009-07-14 17:26:02 | 00,105,984 | RHS- | M] () -- C:\WINDOWS\System32\nmdfgds0.dll
[2009-07-14 17:21:42 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-07-14 17:21:00 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-07-14 17:20:58 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-07-12 21:03:30 | 02,105,014 | -H-- | M] () -- C:\Documents and Settings\aaa\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-07-12 14:06:37 | 00,139,776 | ---- | M] () -- C:\Documents and Settings\aaa\Pulpit\CV.doc
[2009-07-09 17:02:16 | 00,257,024 | ---- | M] () -- C:\Documents and Settings\aaa\Pulpit\norwegia i oslo.doc
[2009-07-09 16:53:15 | 00,031,232 | ---- | M] () -- C:\Documents and Settings\aaa\Pulpit\bazylika mniejsza w kemzaroku.doc
[2009-07-05 22:51:29 | 00,007,168 | ---- | M] () -- C:\WINDOWS\aaa.pcb
[2009-07-03 20:07:26 | 00,000,718 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\blueconnect.lnk
[2009-07-01 20:05:50 | 00,163,840 | ---- | M] () -- C:\Documents and Settings\aaa\Pulpit\atrakcje turystyczne Polski.doc
[2009-06-30 17:58:38 | 00,108,600 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-06-30 17:14:33 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2009-06-28 12:43:00 | 00,106,748 | RHS- | M] () -- C:\WINDOWS\System32\olhrwef.exe
[2009-06-28 12:43:00 | 00,106,748 | RHS- | M] () -- C:\uo10sn.cmd
< End of report >
hijacthis:
- Kod: Zaznacz wszystko
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:18:21, on 2009-07-14
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Hewlett-Packard\HP Display Settings\hpdisply.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\HPONE-~1\OneTouch.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\blueconnect\DataCardMonitor.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\HPConfig.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\aaa\Pulpit\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [HP Display Settings] C:\Program Files\Hewlett-Packard\HP Display Settings\hpdisply.exe /s
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QT4HPOT] C:\PROGRA~1\HPONE-~1\OneTouch.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
O4 - HKLM\..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Szybkie dostosowywanie programu Outpost Firewall Pro - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\Program Files\Outpost Firewall\Plugins\BrowserBar\ie_bar.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\PROGRA~1\OUTPOS~1\wl_hook.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: HP Configuration Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
--
End of file - 4591 bytes
