Gmer:
- Kod: Zaznacz wszystko
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-06-05 15:55:57
Windows 5.1.2600 Dodatek Service Pack 2
Running: rh95ee1j.exe; Driver: C:\DOCUME~1\Mateusz\USTAWI~1\Temp\kwpdapod.sys
---- Kernel code sections - GMER 1.0.15 ----
.text C:\windows\system32\DRIVERS\ati2mtag.sys section is writeable [0xF7257000, 0x1C5D58, 0xE8000020]
pnidata C:\windows\system32\DRIVERS\secdrv.sys unknown last section [0xAA546F00, 0x24000, 0x48000000]
---- User code sections - GMER 1.0.15 ----
.text C:\windows\Explorer.EXE[1612] ntdll.dll!NtQueryDirectoryFile + 6 7C90DF64 4 Bytes [90, 61, FF, 00] {NOP ; POPA ; INC DWORD [EAX]}
OTL
- Kod: Zaznacz wszystko
OTL logfile created on: 2010-06-05 16:03:12 - Run 5
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Documents and Settings\Mateusz\Pulpit
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1 023,00 Mb Total Physical Memory | 565,00 Mb Available Physical Memory | 55,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 27,52 Gb Free Space | 70,46% Space Free | Partition Type: NTFS
Drive D: | 58,59 Gb Total Space | 40,92 Gb Free Space | 69,84% Space Free | Partition Type: NTFS
Drive E: | 48,83 Gb Total Space | 42,92 Gb Free Space | 87,91% Space Free | Partition Type: NTFS
Drive F: | 39,82 Gb Total Space | 27,90 Gb Free Space | 70,07% Space Free | Partition Type: NTFS
Drive G: | 4,35 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: OSTROWSK-84F016
Current User Name: Mateusz
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010-03-31 17:09:41 | 000,307,672 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-03-26 23:31:55 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mateusz\Pulpit\OTL.exe
PRC - [2007-11-14 12:54:24 | 002,131,392 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe
PRC - [2007-08-21 14:52:54 | 001,422,632 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
PRC - [2007-08-21 14:52:36 | 000,202,024 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
PRC - [2006-03-03 21:03:10 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
PRC - [2004-08-04 00:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004-01-26 12:38:38 | 000,866,816 | ---- | M] (THOMSON Telecom Belgium) -- C:\Program Files\Thomson\SpeedTouch USB\dragdiag.exe
PRC - [2003-10-16 20:07:12 | 000,626,688 | ---- | M] (France Télécom R&D) -- C:\Program Files\Neostrada TP\NeostradaTP.exe
PRC - [2003-10-16 20:07:12 | 000,053,248 | ---- | M] (France Télécom R&D) -- C:\Program Files\Neostrada TP\TaskBarIcon.exe
PRC - [2003-10-16 20:07:12 | 000,020,480 | ---- | M] (France Télécom R&D) -- C:\Program Files\Neostrada TP\Watch.exe
PRC - [2003-10-16 20:07:10 | 000,200,704 | ---- | M] (France Télécom R&D) -- C:\Program Files\Neostrada TP\ComComp.exe
PRC - [2003-10-16 20:07:10 | 000,024,576 | ---- | M] () -- C:\Program Files\Neostrada TP\CnxMon.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010-03-26 23:31:55 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mateusz\Pulpit\OTL.exe
MOD - [2006-12-21 14:30:44 | 000,102,400 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\ggwhook.dll
MOD - [2004-08-04 00:42:34 | 001,050,624 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - File not found [Auto | Stopped] -- -- (Nero BackItUp Scheduler 4.0)
SRV - File not found [Auto | Stopped] -- -- (ASKUpgrade)
SRV - [2006-03-03 21:03:10 | 000,069,632 | ---- | M] (HP) [Unknown | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2010-02-03 15:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009-03-02 13:41:49 | 000,029,184 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VClone.sys -- (VClone)
DRV - [2009-02-26 00:58:57 | 003,565,568 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2007-01-25 17:37:16 | 004,027,456 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2004-08-04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
DRV - [2003-12-08 12:53:48 | 000,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcan5wn.sys -- (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)
DRV - [2003-12-08 12:53:46 | 000,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13925&gct=&gc=1&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13925&gct=&gc=1&q=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl
IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Neostrada TP\SearchPageURL.dll ()
IE - HKCU\..\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.order.1: "Ask"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.ask.com/?o=13928&l=dis"
FF - prefs.js..extensions.enabledItems: {E9A1DEE0-C623-4439-8932-001E7D17607D}:2.1.0.5
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=navclient&hl=pl&q="
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-06-05 13:24:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-04-16 15:42:24 | 000,000,000 | ---D | M]
[2009-04-03 15:17:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Extensions
[2010-06-04 14:28:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\dzgluoj0.default\extensions
[2010-04-05 22:03:31 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\dzgluoj0.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2009-05-29 21:21:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\dzgluoj0.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2009-05-29 21:25:46 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\dzgluoj0.default\searchplugins\ask.xml
[2009-08-06 14:24:36 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009-05-19 09:24:10 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll
[2010-02-19 19:26:51 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-02-19 19:26:51 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-02-19 19:26:51 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-02-19 19:26:51 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-02-19 19:26:51 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-02-19 19:26:51 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
O1 HOSTS File: ([2009-06-20 20:32:57 | 000,000,686 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll File not found
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll File not found
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium)
O4 - HKLM..\Run: [WooCnxMon] C:\Program Files\Neostrada TP\CnxMon.exe ()
O4 - HKLM..\Run: [WOOTASKBARICON] C:\Program Files\Neostrada TP\TaskBarIcon.exe (France Télécom R&D)
O4 - HKLM..\Run: [WOOWATCH] C:\Program Files\Neostrada TP\Watch.exe (France Télécom R&D)
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKCU..\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe (Franmo Software)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\Mateusz\Menu Start\Programy\Autostart\monxga32.exe ()
O4 - Startup: C:\Documents and Settings\Mateusz\Menu Start\Programy\Autostart\neostrada tp.lnk = File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data]
O9 - Extra Button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe (Microgaming)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\windows\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Mateusz\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mateusz\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2010-06-05 12:42:58 | 000,880,624 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Mateusz\Pulpit\SPTDinst-v162-x86.exe
[2010-06-03 16:08:01 | 000,000,000 | -H-D | C] -- C:\Program Files\Process Lasso
[2010-06-02 19:25:31 | 000,000,000 | ---D | C] -- C:\Microgaming
[2010-06-02 16:43:24 | 000,000,000 | ---D | C] -- C:\windows\Applian FLV Player
[2010-05-09 15:20:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mateusz\Moje dokumenty\18 WoS Extreme Trucker
[2010-05-07 18:34:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-05-07 18:34:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mateusz\Ustawienia lokalne\Dane aplikacji\cache
[2009-07-20 18:01:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google
[2009-07-20 17:56:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google
[2009-03-23 20:59:14 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2009-03-23 20:59:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-03-23 20:58:59 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2009-03-23 20:58:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010-06-05 16:03:09 | 000,984,842 | ---- | M] () -- C:\windows\System32\PerfStringBackup.INI
[2010-06-05 16:03:09 | 000,448,004 | ---- | M] () -- C:\windows\System32\perfh015.dat
[2010-06-05 16:03:09 | 000,392,296 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2010-06-05 16:03:09 | 000,074,230 | ---- | M] () -- C:\windows\System32\perfc015.dat
[2010-06-05 16:03:09 | 000,058,596 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2010-06-05 15:59:18 | 000,000,972 | ---- | M] () -- C:\windows\tasks\Google Software Updater.job
[2010-06-05 15:59:06 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA.DAT
[2010-06-05 15:59:04 | 000,002,048 | --S- | M] () -- C:\windows\bootstat.dat
[2010-06-05 15:55:19 | 004,194,304 | -H-- | M] () -- C:\Documents and Settings\Mateusz\NTUSER.DAT
[2010-06-05 12:44:36 | 000,293,376 | ---- | M] () -- C:\Documents and Settings\Mateusz\Pulpit\j919u4zc.exe
[2010-06-05 12:43:02 | 000,880,624 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Mateusz\Pulpit\SPTDinst-v162-x86.exe
[2010-06-05 11:38:32 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Mateusz\ntuser.ini
[2010-06-05 00:06:21 | 001,577,052 | -H-- | M] () -- C:\Documents and Settings\Mateusz\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-06-02 19:25:59 | 000,000,797 | ---- | M] () -- C:\Documents and Settings\Mateusz\Pulpit\Unibet Poker.lnk
[2010-06-02 16:44:07 | 003,851,264 | ---- | M] () -- C:\Program Files\FLV PlayerATBSetup.exe
[2010-06-02 16:26:06 | 000,000,024 | ---- | M] () -- C:\windows\winamp.ini
[2010-06-01 21:18:16 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Tutaj wyszło chyba niedoinformowanie Milenium.doc
[2010-05-28 12:09:08 | 000,000,762 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gadu-Gadu 10.lnk
[2010-05-25 18:19:30 | 000,038,400 | ---- | M] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\KULTURA.doc
[2010-05-25 11:56:47 | 000,208,384 | ---- | M] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Lopez 1.doc
[2010-05-24 23:28:00 | 000,024,064 | ---- | M] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Odpowiedź na pytanie czy człowiek z natury jest zły i egoistyczny nie jest prosta.doc
[2010-05-23 13:41:52 | 000,000,069 | ---- | M] () -- C:\windows\NeroDigital.ini
[2010-05-22 10:23:38 | 000,002,206 | ---- | M] () -- C:\windows\System32\wpa.dbl
[2010-05-22 00:41:20 | 000,058,368 | ---- | M] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Witam.doc
[2010-05-21 00:51:46 | 000,015,872 | ---- | M] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Zeszyt1.xls
[2010-05-18 12:08:15 | 000,023,040 | ---- | M] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\ksiazki 1.doc
[2010-05-15 11:03:15 | 000,017,928 | ---- | M] () -- C:\Documents and Settings\Mateusz\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2010-05-14 19:25:21 | 000,115,768 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[2010-05-14 19:10:26 | 000,033,280 | ---- | M] () -- C:\Documents and Settings\Mateusz\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-05-13 08:10:19 | 000,023,552 | ---- | M] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\14.doc
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010-06-05 12:44:35 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\Mateusz\Pulpit\j919u4zc.exe
[2010-06-02 19:25:59 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\Mateusz\Pulpit\Unibet Poker.lnk
[2010-06-02 16:43:27 | 003,851,264 | ---- | C] () -- C:\Program Files\FLV PlayerATBSetup.exe
[2010-06-01 21:18:15 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Tutaj wyszło chyba niedoinformowanie Milenium.doc
[2010-05-25 18:19:30 | 000,038,400 | ---- | C] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\KULTURA.doc
[2010-05-24 23:27:59 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Odpowiedź na pytanie czy człowiek z natury jest zły i egoistyczny nie jest prosta.doc
[2010-05-23 01:23:31 | 000,208,384 | ---- | C] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Lopez 1.doc
[2010-05-22 00:41:20 | 000,058,368 | ---- | C] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Witam.doc
[2010-05-21 00:51:46 | 000,015,872 | ---- | C] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\Zeszyt1.xls
[2010-05-18 12:08:15 | 000,023,040 | ---- | C] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\ksiazki 1.doc
[2010-05-13 08:10:18 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\Mateusz\Moje dokumenty\14.doc
[2010-04-21 10:39:40 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\NetworkService\Dane aplikacji\kcmdte.dat
[2010-04-19 15:20:58 | 000,859,648 | ---- | C] () -- C:\windows\System32\drivers\mqfuye.sys
[2010-04-19 15:20:06 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\LocalService\Dane aplikacji\kcmdte.dat
[2010-04-19 15:19:39 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\Mateusz\Dane aplikacji\avdrn.dat
[2010-03-27 16:30:09 | 000,000,024 | ---- | C] () -- C:\windows\winamp.ini
[2009-09-02 20:32:59 | 000,000,069 | ---- | C] () -- C:\windows\NeroDigital.ini
[2009-07-10 12:42:41 | 000,000,539 | ---- | C] () -- C:\windows\kaillera.ini
[2009-04-04 21:09:21 | 000,021,840 | ---- | C] () -- C:\windows\System32\SIntfNT.dll
[2009-04-04 21:09:21 | 000,017,212 | ---- | C] () -- C:\windows\System32\SIntf32.dll
[2009-04-04 21:09:21 | 000,012,067 | ---- | C] () -- C:\windows\System32\SIntf16.dll
[2009-03-25 18:58:28 | 000,000,039 | ---- | C] () -- C:\windows\Irremote.ini
[2009-03-24 13:35:42 | 000,033,280 | ---- | C] () -- C:\Documents and Settings\Mateusz\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-03-24 00:20:22 | 000,594,450 | ---- | C] () -- C:\windows\System32\x264vfw.dll
[2009-03-24 00:20:22 | 000,217,088 | ---- | C] () -- C:\windows\System32\xvidvfw.dll
[2009-03-24 00:20:20 | 000,005,120 | ---- | C] () -- C:\windows\System32\ff_vfw.dll
[2009-03-24 00:20:20 | 000,000,547 | ---- | C] () -- C:\windows\System32\ff_vfw.dll.manifest
[2009-03-24 00:18:34 | 000,152,064 | ---- | C] () -- C:\windows\System32\unrar.dll
[2009-03-24 00:18:34 | 000,019,968 | ---- | C] () -- C:\windows\System32\cpuinf32.dll
[2009-03-24 00:18:32 | 000,856,064 | ---- | C] () -- C:\windows\System32\xvidcore.dll
[2009-03-23 22:21:36 | 000,000,427 | ---- | C] () -- C:\windows\ODBC.INI
[2009-03-23 22:12:22 | 000,000,169 | ---- | C] () -- C:\windows\RtlRack.ini
[2009-03-23 22:08:51 | 000,000,164 | ---- | C] () -- C:\windows\avrack.ini
[2009-03-23 22:08:42 | 000,147,456 | ---- | C] () -- C:\windows\System32\RtlCPAPI.dll
[2009-03-23 21:10:21 | 000,077,824 | R--- | C] () -- C:\windows\System32\HPZIDS01.dll
[2009-03-23 21:03:42 | 000,005,606 | ---- | C] () -- C:\windows\System32\stci.dll
[2007-11-30 00:30:28 | 003,596,288 | ---- | C] () -- C:\windows\System32\qt-dx331.dll
[2007-11-30 00:28:24 | 000,000,416 | ---- | C] () -- C:\windows\System32\dtu100.dll.manifest
[2007-11-30 00:28:24 | 000,000,416 | ---- | C] () -- C:\windows\System32\dpl100.dll.manifest
[2007-11-28 23:52:32 | 000,012,288 | ---- | C] () -- C:\windows\System32\DivXWMPExtType.dll
[2004-08-04 00:44:00 | 000,081,920 | ---- | C] () -- C:\windows\System32\ieencode.dll
[2001-07-07 04:00:02 | 000,003,234 | ---- | C] () -- C:\windows\System32\HPTCPMON.INI
[1999-01-22 18:46:58 | 000,065,536 | ---- | C] () -- C:\windows\System32\MSRTEDIT.DLL
[color=#E56717]========== LOP Check ==========[/color]
[2010-05-28 12:08:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-01-28 18:15:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2009-12-20 12:26:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-03-23 22:03:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\Gadu-Gadu
[2010-05-07 18:34:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\Gadu-Gadu 10
[2010-02-06 02:01:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\GanymedeNet
[2010-05-11 00:00:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\Image Zone Express
[2010-03-27 12:25:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\ipla
[2010-06-04 19:18:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\Microgaming
[2009-12-20 12:25:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\OpenFM
[2009-03-23 21:23:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\Opera
[2010-04-17 17:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1
[2010-05-23 19:00:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mateusz\Dane aplikacji\uTorrent
[color=#E56717]========== Purity Check ==========[/color]
< End of report >
OTL Extras
- Kod: Zaznacz wszystko
OTL Extras logfile created on: 2010-06-05 16:03:12 - Run 5
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Documents and Settings\Mateusz\Pulpit
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1 023,00 Mb Total Physical Memory | 565,00 Mb Available Physical Memory | 55,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 27,52 Gb Free Space | 70,46% Space Free | Partition Type: NTFS
Drive D: | 58,59 Gb Total Space | 40,92 Gb Free Space | 69,84% Space Free | Partition Type: NTFS
Drive E: | 48,83 Gb Total Space | 42,92 Gb Free Space | 87,91% Space Free | Partition Type: NTFS
Drive F: | 39,82 Gb Total Space | 27,90 Gb Free Space | 70,07% Space Free | Partition Type: NTFS
Drive G: | 4,35 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: OSTROWSK-84F016
Current User Name: Mateusz
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- Reg Error: Key error. File not found
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\Opera.exe" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Odkurz tutaj] -- C:\Program Files\Odkurzacz\odkurzacz.exe %1 (Franmo Software)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamps\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamps\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
[color=#E56717]========== Authorized Applications List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Development Company, L.P.)
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000415-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0A2A5039-B37F-489D-B1DC-A5258DF9E697}" = FIFA 08
"{16913489-B5E3-403E-AFD3-2B19BBE464D4}" = Opera 9.24
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress
"{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}" = Need for Speed™ Carbon
"{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java(TM) 6 Update 12
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{363790D2-DA98-41DD-9C9F-69FA36B169DE}" = PanoStandAlone
"{4324BC93-C82F-ED16-BA86-5E34B9E05303}" = ccc-core-static
"{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm
"{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant
"{4ED118EE-785C-CC18-5D2E-D5CA4BAA03F0}" = Catalyst Control Center Graphics Full New
"{539475B7-44B7-8B0A-134C-F01B9C8B7569}" = ccc-core-preinstall
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5AC7AE54-55DF-1126-076C-623F008D40B6}" = Catalyst Control Center Graphics Full Existing
"{6351D217-3EE3-1967-29BE-6A77635FE485}" = Skins
"{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI
"{6909F917-5499-482e-9AA1-FAD06A99F231}" = Toolbox
"{6994491D-D491-48F1-AE1F-E179C1FFFC2F}" = HP Photosmart Essential
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AB9CD3A-F91F-233B-923B-6C59BA63524D}" = Catalyst Control Center HydraVision Full
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI
"{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{85A91C22-C369-FCFB-5F1F-D59EB21AD0E1}" = CCC Help English
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A4CE7FD-9657-4B06-9943-E1819F3D5D67}" = DocProc
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}" = Unload
"{90260415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office XP Web Components
"{996512CF-F35B-48DE-9291-557FA5316967}" = ScannerCopy
"{9FC8D8F8-AF3A-4488-98AF-51C6DEC732F2}" = c3100_Help
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A6D0140F-E62F-9D1E-2408-9CFF91FF6FC8}" = ccc-utility
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1045-7B44-A91000000001}" = Adobe Reader 9.1 - Polish
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}" = HP Software Update
"{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}" = HP Photosmart, Officejet and Deskjet 7.0.A
"{C44A7422-E380-44BE-79FE-1C032D8A03A7}" = Catalyst Control Center Core Implementation
"{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter
"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
"{D050D7362D214723AD585B541FFB6C11}" = DivX Content Uploader
"{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding
"{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = SpeedTouch USB Software
"{DBC20735-34E6-4E97-A9E5-2066B66B243D}" = TrayApp
"{E1B80DEE-A795-4258-8445-074C06AE3AB8}" = MarketResearch
"{E5D24929-91A4-B0A1-DE00-AFC453921EF7}" = Catalyst Control Center Graphics Light
"{E6C09BFB-BA75-15C7-5B18-A2CE31C4F42B}" = Catalyst Control Center Graphics Previews Common
"{EB8C9964-09AC-48bf-8B98-027609C78251}" = C3100
"{F157460F-720E-482f-8625-AD7843891E5F}" = InstantShareDevicesMFC
"{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan
"{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA
"{FAB3A0EF-C845-4AFF-BE3C-98EB480F1045}" = Nero 8
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations
"{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA
"{FFFF6D5C-E2F1-4B40-BC89-8923312E89EB}}_is1" = ACE Mega CoDecS Pack
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"eMusic Promotion" = 50 FREE MP3s +1 Free Audiobook!
"Gadu-Gadu" = Gadu-Gadu 7.7
"Gadu-Gadu 10" = Gadu-Gadu 10
"Google Updater" = Aktualizator Google
"HP Imaging Device Functions" = HP Imaging Device Functions 7.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0
"HPExtendedCapabilities" = HP Customer cenzura! Program 7.0
"HPOCR" = OCR Software by I.R.I.S 7.0
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 1.58
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"mIRC" = mIRC
"Mozilla Firefox (3.0.19)" = Mozilla Firefox (3.0.19)
"NAPIPROJEKT_is1" = NAPIPROJEKT 1.0.6.2
"NeostradaTP.exe" = Neostrada TP
"Odkurzacz 11.3_is1" = Odkurzacz 11.3
"Unibet Poker" = Unibet Poker
"Winamp" = Winamp (Remove Only)
"Windows Media Format Runtime" = Windows Media Format Runtime
"WinRAR archiver" = Archiwizator WinRAR
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"BankBrowser" = BankBrowser
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2010-05-10 06:48:54 | Computer Name = OSTROWSK-84F016 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd firefox.exe, wersja 1.9.0.3725, moduł powodujący
błąd js3250.dll, wersja 4.0.0.0, adres błędu 0x00024acb.
Error - 2010-05-14 13:17:22 | Computer Name = OSTROWSK-84F016 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd nfsc.exe, wersja 0.0.0.0, moduł powodujący
błąd nfsc.exe, wersja 0.0.0.0, adres błędu 0x0029d0b1.
Error - 2010-05-23 09:49:11 | Computer Name = OSTROWSK-84F016 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd opera.exe, wersja 9.24.8816.0, moduł powodujący
błąd opera.dll, wersja 9.24.8816.0, adres błędu 0x002c2a1f.
Error - 2010-05-28 16:01:48 | Computer Name = OSTROWSK-84F016 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd ntdll.dll, wersja 5.1.2600.2180, adres błędu 0x00018fea.
Error - 2010-05-28 16:16:15 | Computer Name = OSTROWSK-84F016 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 6.0.2900.2180, moduł
powodujący błąd msvcrt.dll, wersja 7.0.2600.2180, adres błędu 0x00037fd4.
Error - 2010-05-28 16:32:49 | Computer Name = OSTROWSK-84F016 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd mshtml.dll, wersja 6.0.2900.2180, adres błędu 0x00112e6e.
Error - 2010-06-03 10:24:03 | Computer Name = OSTROWSK-84F016 | Source = EventSystem | ID = 4609
Description = Podczas wewnętrznego przetwarzania system zdarzeń modelu COM+ wykrył
zły kod powrotu. HRESULT to 800706BA z w wierszu 44 z d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp.
Skontaktuj się z Pomocą techniczną firmy Microsoft i zgłoś ten błą
Error - 2010-06-03 10:24:03 | Computer Name = OSTROWSK-84F016 | Source = VSS | ID = 8193
Description = Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas
wywoływania procedury CoCreateInstance. hr = 0x80040206.
Error - 2010-06-05 09:58:04 | Computer Name = OSTROWSK-84F016 | Source = EventSystem | ID = 4609
Description = Podczas wewnętrznego przetwarzania system zdarzeń modelu COM+ wykrył
zły kod powrotu. HRESULT to 800706BA z w wierszu 44 z d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp.
Skontaktuj się z Pomocą techniczną firmy Microsoft i zgłoś ten błą
Error - 2010-06-05 09:58:05 | Computer Name = OSTROWSK-84F016 | Source = VSS | ID = 8193
Description = Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas
wywoływania procedury CoCreateInstance. hr = 0x80040206.
[ System Events ]
Error - 2010-06-05 05:37:25 | Computer Name = OSTROWSK-84F016 | Source = Service Control Manager | ID = 7034
Description = Usługa Usługi terminalowe niespodziewanie zakończyła pracę. Wystąpiło
to razy: 1.
Error - 2010-06-05 05:39:51 | Computer Name = OSTROWSK-84F016 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi ASKUpgrade z powodu następującego błędu:
%%2
Error - 2010-06-05 05:39:51 | Computer Name = OSTROWSK-84F016 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Nero BackItUp Scheduler 4.0 z powodu następującego
błędu: %%2
Error - 2010-06-05 07:18:02 | Computer Name = OSTROWSK-84F016 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi ASKUpgrade z powodu następującego błędu:
%%2
Error - 2010-06-05 07:18:02 | Computer Name = OSTROWSK-84F016 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Nero BackItUp Scheduler 4.0 z powodu następującego
błędu: %%2
Error - 2010-06-05 07:18:12 | Computer Name = OSTROWSK-84F016 | Source = System Error | ID = 1003
Description = Kod błędu 10000050, parametr 1 a9998b30, parametr 2 00000001, parametr
3 a959bfa6, parametr 4 00000000.
Error - 2010-06-05 07:59:38 | Computer Name = OSTROWSK-84F016 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi ASKUpgrade z powodu następującego błędu:
%%2
Error - 2010-06-05 07:59:38 | Computer Name = OSTROWSK-84F016 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Nero BackItUp Scheduler 4.0 z powodu następującego
błędu: %%2
Error - 2010-06-05 09:59:09 | Computer Name = OSTROWSK-84F016 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi ASKUpgrade z powodu następującego błędu:
%%2
Error - 2010-06-05 09:59:09 | Computer Name = OSTROWSK-84F016 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Nero BackItUp Scheduler 4.0 z powodu następującego
błędu: %%2
< End of report >
