Błąd run-time error '70' permission denied

**Posty:** 370 · przez **bracik1977** 10 Paź 2009, 12:43

Mam problem. Po załączeniu komputera wyskakuje komunikat run-time error '70' Permission denied.

**Posty:** 18165 · przez **wojtas** 10 Paź 2009, 18:54

Daj loga z OTL

**Posty:** 370 · przez **bracik1977** 10 Paź 2009, 23:53

Kod: Zaznacz wszystko: OTL logfile created on: 2009-10-10 23:50:34 - Run 2 OTL by OldTimer - Version 3.0.19.0 Folder = C:\Documents and Settings\Andrzej\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,30 Mb Total Physical Memory | 430,55 Mb Available Physical Memory | 42,07% Memory free 2,40 Gb Paging File | 1,98 Gb Available in Paging File | 82,55% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 78,13 Gb Total Space | 5,37 Gb Free Space | 6,88% Space Free | Partition Type: NTFS Drive D: | 70,92 Gb Total Space | 21,04 Gb Free Space | 29,67% Space Free | Partition Type: NTFS Drive E: | 0,36 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ANDRZEJ-6658F4F Current User Name: Andrzej Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-10-10 23:50:20 | 00,520,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Andrzej\Pulpit\OTL(2).exe PRC - [2009-07-25 05:23:12 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2009-07-25 05:23:10 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2009-06-07 19:23:30 | 00,189,824 | ---- | M] (IncrediMail, Ltd.) -- C:\Program Files\IncrediMail\bin\IMApp.exe PRC - [2009-04-09 20:10:54 | 00,970,240 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Search Settings\SearchSettings.exe PRC - [2009-02-22 21:15:14 | 05,668,864 | ---- | M] (http://www.emule-project.net) -- D:\eMule\emule.exe PRC - [2009-01-22 09:12:48 | 00,116,024 | ---- | M] (Flock, Inc.) -- C:\Program Files\Flock\flock.exe PRC - [2007-10-23 15:19:06 | 01,410,344 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe PRC - [2007-10-23 15:19:06 | 00,382,248 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe PRC - [2007-10-23 15:18:46 | 00,202,024 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe PRC - [2007-09-20 09:51:46 | 00,853,288 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe PRC - [2006-12-19 10:30:26 | 00,081,920 | ---- | M] (Prolific Technology Inc.) -- C:\WINDOWS\System32\IoctlSvc.exe PRC - [2006-10-11 12:45:12 | 00,075,304 | ---- | M] (ScanSoft, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe PRC - [2005-08-02 10:35:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe PRC - [2004-10-14 09:11:10 | 01,388,544 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe PRC - [2004-08-04 00:44:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wscntfy.exe PRC - [2004-08-04 00:44:22 | 00,093,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe PRC - [2004-08-04 00:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2002-09-20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe PRC - [1999-10-30 16:03:44 | 00,352,768 | ---- | M] (Young Digital Poland) -- C:\Program Files\YDP\YdpDict\Watch.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-07-25 05:23:10 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2009-06-02 10:10:08 | 00,637,952 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer [On_Demand | Stopped]) SRV - [2008-11-20 21:18:52 | 00,136,120 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped]) SRV - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped]) SRV - [2008-07-29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2008-07-29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2008-07-25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-07-25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2007-10-23 15:19:06 | 00,382,248 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Running]) SRV - [2007-09-20 09:51:46 | 00,853,288 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe -- (Nero BackItUp Scheduler 3 [Auto | Running]) SRV - [2007-03-27 17:43:08 | 00,446,464 | ---- | M] (SOFTWIN S.R.L.) -- C:\Program Files\Softwin\BitDefender10\vsserv.exe -- (VSSERV [Auto | Stopped]) SRV - [2007-03-21 12:31:00 | 00,237,568 | ---- | M] (SOFTWIN S.R.L.) -- C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe -- (LIVESRV [Auto | Stopped]) SRV - [2006-12-19 10:30:26 | 00,081,920 | ---- | M] (Prolific Technology Inc.) -- C:\WINDOWS\System32\IoctlSvc.exe -- (PLFlash DeviceIoControl Service [Auto | Running]) SRV - [2005-08-02 10:35:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running]) SRV - [2004-08-04 00:44:08 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2002-09-20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default) [Auto | Running]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-07-22 20:58:26 | 00,010,368 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\System32\drivers\pfc.sys -- (pfc [On_Demand | Running]) DRV - [2009-06-21 18:46:12 | 00,223,128 | ---- | M] () -- C:\WINDOWS\System32\Drivers\vaxscsi.sys -- (vaxscsi [On_Demand | Running]) DRV - [2009-06-21 18:44:18 | 00,642,560 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2009-03-19 14:48:18 | 00,136,704 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu [On_Demand | Stopped]) DRV - [2009-03-19 14:48:12 | 00,008,320 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc [On_Demand | Stopped]) DRV - [2009-02-09 08:37:56 | 00,007,808 | ---- | M] (Nokia) -- C:\WINDOWS\System32\DRIVERS\usbser_lowerfltj.sys -- (UsbserFilt [On_Demand | Stopped]) DRV - [2009-02-09 08:37:48 | 00,007,808 | ---- | M] (Nokia) -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys -- (upperdev [On_Demand | Stopped]) DRV - [2009-02-09 08:37:46 | 00,022,016 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys -- (nmwcdc [On_Demand | Stopped]) DRV - [2009-02-09 08:37:46 | 00,017,664 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys -- (nmwcd [On_Demand | Stopped]) DRV - [2008-11-20 21:19:06 | 00,043,872 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-08-26 10:26:12 | 00,018,816 | ---- | M] (Nokia) -- C:\WINDOWS\System32\DRIVERS\pccsmcfd.sys -- (pccsmcfd [On_Demand | Stopped]) DRV - [2007-05-16 06:00:00 | 00,042,368 | R--- | M] (Silicon Integrated Systems Corp.) -- C:\WINDOWS\System32\DRIVERS\SiSGbeXP.sys -- (SiSGbeXP [On_Demand | Running]) DRV - [2006-01-13 15:00:52 | 00,015,872 | ---- | M] (Flint Incorporation) -- C:\WINDOWS\System32\drivers\vd_filedisk.sys -- (VD_FileDisk [System | Running]) DRV - [2005-08-02 10:35:00 | 03,198,560 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running]) DRV - [2005-03-28 09:19:38 | 00,220,992 | ---- | M] (Analog Devices, Inc.) -- C:\WINDOWS\System32\drivers\smwdm.sys -- (smwdm [On_Demand | Running]) DRV - [2005-03-04 13:53:00 | 00,127,872 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\drivers\aeaudio.sys -- (aeaudio [On_Demand | Running]) DRV - [2005-03-01 06:01:40 | 00,392,704 | ---- | M] (Sensaura) -- C:\WINDOWS\System32\drivers\senfilt.sys -- (senfilt [On_Demand | Running]) DRV - [2004-09-14 06:55:44 | 00,088,960 | ---- | M] (Analog Devices, Inc.) -- C:\WINDOWS\System32\drivers\MidiSyn.sys -- (MidiSyn [On_Demand | Stopped]) DRV - [2004-08-23 13:20:06 | 00,158,720 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\a347bus.sys -- (a347bus [Boot | Running]) DRV - [2004-08-03 23:08:44 | 00,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbser.sys -- (usbser [On_Demand | Stopped]) DRV - [2004-07-17 11:36:38 | 00,027,440 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2004-05-02 10:47:08 | 00,023,040 | R--- | M] () -- C:\WINDOWS\System32\drivers\GVCplDrv.sys -- (GVCplDrv [On_Demand | Stopped]) DRV - [2004-04-30 09:33:00 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\System32\Drivers\a347scsi.sys -- (a347scsi [Boot | Running]) DRV - [2001-08-17 23:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.ask.com/web?q={searchTerms}&o=14482&l=dis IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/ IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\..\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll (Spigot, Inc.) IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\S-1-5-21-1409082233-1935655697-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-07-08 17:33:43 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-06-15 20:53:11 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock 2.0.3\extensions\\Components: C:\Program Files\Flock\components [2009-06-26 07:00:39 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock 2.0.3\extensions\\Plugins: C:\Program Files\Flock\plugins [2009-06-23 15:42:14 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock 2.5\extensions\\Components: C:\Program Files\Flock\components [2009-06-26 07:00:39 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock 2.5\extensions\\Plugins: C:\Program Files\Flock\plugins [2009-06-23 15:42:14 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (PCCBHO.CPCCBHO) - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll (Capital Intellect Inc) O2 - BHO: (EWPBrowseObject Class) - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll () O2 - BHO: (Google Plus) - {C8CD2017-F1E5-4F1A-B58A-EE0B1AF0D0D8} - C:\Program Files\GooglePlusVideos\16.GooglePlusVideos.dll () O2 - BHO: (CescrtHlpr Object) - {D286E828-E6B9-484d-A058-D7323666DE33} - C:\Program Files\RecFree.com\RecFreeToolbar\1.0.23.0\escort.dll File not found O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (SearchSettings Class) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll (Spigot, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O2 - BHO: (Ask Toolbar BHO) - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL File not found O3 - HKLM\..\Toolbar: (RecFree Toolbar) - {0508F8F1-08E3-43EE-AAA8-09AD09803084} - C:\Program Files\RecFree.com\RecFreeToolbar\1.0.23.0\escorTlbr.dll File not found O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O3 - HKLM\..\Toolbar: (Ask Toolbar) - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL File not found O3 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL File not found O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe File not found O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [BDMCon] C:\Program Files\Softwin\BitDefender10\bdmcon.exe (SOFTWIN S.R.L.) O4 - HKLM..\Run: [Help Creative Meow City] C:\Documents and Settings\All Users\Dane aplikacji\aim rect help creative\stop license.exe (Answer ntuthes) O4 - HKLM..\Run: [MP10_EnsureFileVer] C:\WINDOWS\inf\unregmp2.exe (Microsoft Corporation) O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [Nokia FastStart] C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe File not found O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [OpwareSE4] C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe (ScanSoft, Inc.) O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.) O4 - HKLM..\Run: [ScanSoft OmniPage SE 4.0-reminder] C:\Program Files\ScanSoft\OmniPageSE4.0\Ereg\Ereg.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [Windows] C:\Program Files\Services.exe () O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe () O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [axismess] C:\Documents and Settings\Andrzej\Dane aplikacji\Soft Keep Vga\Five Roam.exe () O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG) O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [eMuleAutoStart] D:\eMule\emule.exe (http://www.emule-project.net) O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.) O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Aktywacja Testera.lnk = C:\Program Files\YDP\YdpDict\Watch.exe (Young Digital Poland) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Easy-WebPrint – Dodaj do listy drukowania - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Easy-WebPrint – Drukuj - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Easy-WebPrint – Drukuj z dużą szybkością - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Easy-WebPrint – Podgląd - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O9 - Extra 'Tools' menuitem : PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe (Capital Intellect, Inc) O9 - Extra Button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe (Capital Intellect, Inc) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-15 20:32:07 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found O35 - comfile [open] -- "%1" %* File not found O35 - exefile [open] -- "%1" %* File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] [2009-10-10 18:06:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\aim rect help creative [2009-10-06 05:52:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2009-10-07 06:20:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\FarmFrenzyPizzaParty [2009-10-07 21:41:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Norton [2009-10-07 21:41:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\NortonInstaller [2009-09-21 20:56:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2009-10-07 21:41:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Symantec [2009-10-10 14:24:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Winferno [2009-10-06 05:52:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Babylon [2009-10-06 21:45:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Canon [2009-10-07 06:19:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\LuckyTender [2009-09-21 21:01:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\skypePM [2009-10-10 18:06:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Soft Keep Vga [2009-10-10 14:06:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Titanium Gears [2009-10-10 13:48:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Tropico 3 [2009-09-27 00:02:20 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\XnView [2009-10-09 16:19:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\PT-Boats [2009-10-08 06:56:01 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Softwin [2009-10-07 21:45:05 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared [2009-10-10 14:24:59 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Winferno [2009-10-09 06:35:19 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2009-10-09 06:35:43 | 00,000,000 | ---D | C] -- C:\Program Files\AGEIA Technologies [2009-10-09 06:30:50 | 00,000,000 | ---D | C] -- C:\Program Files\Akella Games [2009-10-07 06:20:01 | 00,000,000 | ---D | C] -- C:\Program Files\Farm Frenzy 3 [2009-10-10 14:04:47 | 00,000,000 | ---D | C] -- C:\Program Files\Free Offers from Freeze.com [2009-10-10 13:42:34 | 00,000,000 | ---D | C] -- C:\Program Files\Kalypso [2009-10-10 14:10:40 | 00,000,000 | ---D | C] -- C:\Program Files\LuckyTender [2009-10-10 09:43:20 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Games(2) [2009-10-07 21:38:34 | 00,000,000 | ---D | C] -- C:\Program Files\Panda Security [2009-10-10 14:06:26 | 00,000,000 | ---D | C] -- C:\Program Files\Playalot Games [2009-10-10 18:06:35 | 00,000,000 | ---D | C] -- C:\Program Files\Soft Keep Vga [2009-10-08 06:56:37 | 00,000,000 | ---D | C] -- C:\Program Files\Softwin [2009-10-10 18:06:19 | 00,000,000 | ---D | C] -- C:\Program Files\TorrentSpeeder [2009-09-21 21:09:13 | 00,000,000 | ---D | C] -- C:\Program Files\WapSter [2009-10-10 14:04:40 | 00,000,000 | ---D | C] -- C:\Program Files\Winferno [2009-10-09 06:38:01 | 00,000,000 | ---D | C] -- C:\Program Files\Xvid [2009-10-10 23:50:20 | 00,520,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Andrzej\Pulpit\OTL(2).exe [2009-10-10 23:40:31 | 00,520,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Andrzej\Pulpit\OTL.exe [2009-10-10 14:44:11 | 00,000,000 | -HSD | C] -- C:\Config.Msi [2009-10-10 14:32:38 | 01,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll [2009-10-10 14:32:38 | 00,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll [2009-10-10 14:32:37 | 04,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll [2009-10-10 14:32:37 | 00,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll [2009-10-10 14:32:37 | 00,069,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll [2009-10-10 14:32:36 | 02,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_40.dll [2009-10-10 14:32:36 | 00,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_40.dll [2009-10-10 14:32:36 | 00,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll [2009-10-10 14:32:36 | 00,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll [2009-10-10 14:32:35 | 04,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll [2009-10-10 14:32:35 | 00,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_3.dll [2009-10-10 14:32:35 | 00,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_2.dll [2009-10-10 14:32:34 | 00,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_2.dll [2009-10-10 14:32:34 | 00,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_3.dll [2009-10-10 14:32:34 | 00,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_1.dll [2009-10-10 14:32:34 | 00,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_5.dll [2009-10-10 14:32:33 | 01,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_39.dll [2009-10-10 14:32:33 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_39.dll [2009-10-10 14:32:33 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_2.dll [2009-10-10 14:32:32 | 03,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_39.dll [2009-10-10 14:24:58 | 00,212,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Richtx32.ocx [2009-10-10 14:24:18 | 00,835,584 | ---- | C] (Capital Intellect Inc) -- C:\WINDOWS\System32\WINCTL4.OCX [2009-10-10 14:24:18 | 00,495,616 | ---- | C] (Capital Intellect Inc) -- C:\WINDOWS\System32\WINUTIL5.DLL [2009-10-10 14:24:18 | 00,393,216 | ---- | C] (Capital Intellect Inc) -- C:\WINDOWS\System32\WINLCTL5.DLL [2009-10-10 13:39:21 | 00,000,000 | ---D | C] -- C:\ERDNT [2009-10-10 13:39:20 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2009-10-10 13:39:14 | 00,000,000 | ---D | C] -- C:\!FixIEDef [2009-10-09 06:35:43 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\AGEIA [2009-10-08 14:29:14 | 00,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2009-10-06 21:14:46 | 04,341,760 | ---- | C] (Gabest) -- C:\Documents and Settings\Andrzej\Pulpit\mplayerc[www.instalki.pl].exe [2009-10-06 05:53:13 | 00,109,253 | ---- | C] (Microsoft Corporation) -- C:\Program Files\MSWINSCK.OCX [2009-10-05 05:48:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Pulpit\Filmy [2009-09-24 18:32:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Pulpit\Nowy folder (3) [2009-09-24 05:58:37 | 17,564,760 | ---- | C] (Doctor Web, Ltd.) -- C:\Documents and Settings\Andrzej\Pulpit\launch.exe [2009-06-21 22:59:39 | 00,158,720 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347bus.sys [2009-06-21 22:59:39 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347scsi.sys [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] [2009-10-10 23:50:20 | 00,520,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Andrzej\Pulpit\OTL(2).exe [2009-10-10 23:40:32 | 00,520,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Andrzej\Pulpit\OTL.exe [2009-10-10 23:00:00 | 00,000,268 | -H-- | M] () -- C:\WINDOWS\tasks\A91367AE9134E502.job [2009-10-10 18:04:24 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-10-10 14:47:48 | 00,000,416 | ---- | M] () -- C:\WINDOWS\tasks\PCConfidential.job [2009-10-10 14:47:42 | 00,109,253 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSWINSCK.OCX [2009-10-10 14:47:41 | 00,029,204 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2009-10-10 14:47:38 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-10-10 14:47:36 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-10-10 14:30:01 | 00,000,789 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Tropico 3.lnk [2009-10-10 14:12:04 | 00,101,440 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-10-10 11:54:30 | 01,580,658 | -H-- | M] () -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-10-09 06:34:38 | 00,000,741 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\PT-Boats.lnk [2009-10-08 16:47:37 | 00,081,984 | ---- | M] () -- C:\WINDOWS\System32\bdod.bin [2009-10-07 21:31:21 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-10-07 06:41:11 | 00,000,552 | ---- | M] () -- C:\WINDOWS\YdpDict.ini [2009-10-07 06:20:19 | 00,000,777 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Farm Frenzy 3 - Pizza Party en Espańol.lnk [2009-10-06 21:16:11 | 00,073,729 | ---- | M] () -- C:\Program Files\Services.exe [2009-10-06 21:14:59 | 04,341,760 | ---- | M] (Gabest) -- C:\Documents and Settings\Andrzej\Pulpit\mplayerc[www.instalki.pl].exe [2009-10-06 20:25:02 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2009-10-04 22:41:42 | 35,076,3998 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Transformers - Zemsta Upadłych 2009 (Lektor PL).rmvb [2009-10-02 16:35:15 | 60,851,2054 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Adrenalina 2 _ Pod napięciem-Crank High Voltage (2009) [R5] [Xvid] Lektor PL_toAVI.avi [2009-10-02 11:21:31 | 73,000,1408 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Wyścig Śmierci - Death Race 2008 Lektor PL.avi [2009-09-29 19:21:02 | 73,376,3584 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Transporter.3.2008.PL.DVDRip.XviD-KiCZ.(OSiOLEK.com).avi [2009-09-29 06:39:27 | 73,427,7632 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\12 Rund 12 Runds (2009) BRRip - lektor PL.avi [2009-09-27 00:01:48 | 00,000,572 | ---- | M] () -- C:\WINDOWS\win.ini [2009-09-24 05:59:21 | 17,564,760 | ---- | M] (Doctor Web, Ltd.) -- C:\Documents and Settings\Andrzej\Pulpit\launch.exe [2009-09-22 05:21:36 | 00,000,640 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\ALLPlayer V4.1.lnk [2009-09-21 21:09:18 | 00,000,710 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AQQ.lnk [2009-09-21 21:01:10 | 00,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat [2009-09-21 20:37:40 | 00,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk [color=#E56717]========== Files - No Company Name ==========[/color] [2009-10-10 18:07:04 | 00,000,268 | -H-- | C] () -- C:\WINDOWS\tasks\A91367AE9134E502.job [2009-10-10 14:30:01 | 00,000,789 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Tropico 3.lnk [2009-10-10 14:04:44 | 00,000,416 | ---- | C] () -- C:\WINDOWS\tasks\PCConfidential.job [2009-10-09 06:34:38 | 00,000,741 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\PT-Boats.lnk [2009-10-08 07:02:07 | 00,081,984 | ---- | C] () -- C:\WINDOWS\System32\bdod.bin [2009-10-07 06:20:19 | 00,000,777 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Farm Frenzy 3 - Pizza Party en Espańol.lnk [2009-10-06 05:53:13 | 00,073,729 | ---- | C] () -- C:\Program Files\Services.exe [2009-10-05 05:54:34 | 73,427,7632 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\12 Rund 12 Runds (2009) BRRip - lektor PL.avi [2009-10-05 05:54:09 | 60,851,2054 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Adrenalina 2 _ Pod napięciem-Crank High Voltage (2009) [R5] [Xvid] Lektor PL_toAVI.avi [2009-10-05 05:53:53 | 35,076,3998 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Transformers - Zemsta Upadłych 2009 (Lektor PL).rmvb [2009-10-05 05:52:21 | 73,376,3584 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Transporter.3.2008.PL.DVDRip.XviD-KiCZ.(OSiOLEK.com).avi [2009-10-05 05:50:41 | 73,000,1408 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Wyścig Śmierci - Death Race 2008 Lektor PL.avi [2009-10-05 05:48:51 | 73,386,3936 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Zdobycz (2007) (Przygodowy)Lektor Pl.avi [2009-10-05 05:47:44 | 73,410,5600 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Zimny Pot (Lektor Pl).avi [2009-09-22 05:21:36 | 00,000,640 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\ALLPlayer V4.1.lnk [2009-09-21 21:09:18 | 00,000,710 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AQQ.lnk [2009-09-21 21:01:10 | 00,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2009-07-27 20:14:55 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2009-07-19 14:24:02 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-07-15 21:28:42 | 00,021,052 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll [2009-07-15 21:28:42 | 00,015,144 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll [2009-07-15 21:28:42 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll [2009-07-15 21:28:42 | 00,000,552 | ---- | C] () -- C:\WINDOWS\YdpDict.ini [2009-07-09 16:18:16 | 00,000,150 | ---- | C] () -- C:\Documents and Settings\Andrzej\Dane aplikacji\default.rss [2009-07-05 21:14:27 | 00,000,416 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI [2009-07-05 08:38:01 | 00,000,029 | ---- | C] () -- C:\WINDOWS\Irremote.ini [2009-07-02 18:25:13 | 00,484,352 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2009-06-30 22:43:36 | 00,000,074 | ---- | C] () -- C:\Documents and Settings\Andrzej\Dane aplikacji\default.pls [2009-06-21 18:46:12 | 00,223,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\vaxscsi.sys [2009-06-21 18:44:18 | 00,642,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-06-21 18:44:18 | 00,096,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd5085.sys [2009-06-16 20:02:52 | 00,081,408 | ---- | C] () -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-06-15 22:19:00 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini [2009-06-15 22:02:31 | 01,580,658 | -H-- | C] () -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-06-15 20:52:04 | 00,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-06-15 20:52:03 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-06-15 20:52:02 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-06-15 20:52:02 | 00,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-06-15 20:52:01 | 00,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-06-15 20:52:01 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-06-15 20:46:29 | 00,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-06-15 20:41:29 | 00,013,792 | ---- | C] () -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-06-15 20:36:24 | 00,023,040 | R--- | C] () -- C:\WINDOWS\System32\drivers\GVCplDrv.sys [2009-06-15 20:35:46 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\Andrzej\Dane aplikacji\desktop.ini [2008-10-07 09:13:30 | 00,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll [2008-10-07 09:13:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2005-08-02 10:35:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2005-08-02 10:35:00 | 01,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2005-08-02 10:35:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2005-08-02 10:35:00 | 00,540,672 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2005-08-02 10:35:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2005-08-02 10:35:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2004-08-04 00:44:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2004-07-17 11:36:38 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [2002-03-21 15:39:02 | 00,073,728 | ---- | C] () -- C:\WINDOWS\System32\UNACEV2.DLL [2001-07-22 00:16:20 | 00,000,572 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-22 00:15:52 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini [color=#E56717]========== LOP Check ==========[/color] [2009-10-10 18:06:57 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji [2009-07-23 05:15:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ACD Systems [2009-10-10 18:06:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\aim rect help creative [2009-10-06 05:52:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2009-06-30 21:51:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2009-10-07 06:22:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FarmFrenzyPizzaParty [2009-06-15 21:17:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IM [2009-06-15 21:16:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IncrediMail [2009-07-04 13:48:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2009-07-04 20:43:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaMusic [2009-10-08 06:57:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Norton [2009-10-07 21:41:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NortonInstaller [2009-07-04 22:59:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2009-07-05 21:14:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft [2009-10-10 14:24:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Winferno [2009-10-10 18:06:34 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji [2009-07-20 22:14:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\ACD Systems [2009-10-06 05:52:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Babylon [2009-10-07 21:40:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Canon [2009-06-15 21:19:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Flock [2009-07-15 22:18:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\HEXelon [2009-07-13 05:53:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Leadertech [2009-10-07 06:19:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\LuckyTender [2009-07-04 22:56:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Nokia [2009-07-04 13:53:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\PC Suite [2009-06-19 04:00:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\recfree.com [2009-07-05 21:14:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\ScanSoft [2009-07-05 21:11:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Search Settings [2009-06-20 06:29:21 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\SecuROM [2009-10-10 18:07:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Soft Keep Vga [2009-10-10 14:06:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Titanium Gears [2009-10-10 18:01:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Tropico 3 [2009-07-08 20:15:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\uTorrent [2009-09-27 00:02:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Andrzej\Dane aplikacji\XnView [2009-06-15 22:19:00 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji [2009-06-15 20:35:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji [2009-06-15 20:34:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji [2009-10-10 23:00:00 | 00,000,268 | -H-- | M] () -- C:\WINDOWS\Tasks\A91367AE9134E502.job [2009-10-06 20:25:02 | 00,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [2001-07-22 00:17:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-10-10 14:47:48 | 00,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\PCConfidential.job [2009-10-10 14:47:38 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 18165 · przez **wojtas** 11 Paź 2009, 19:55

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O2 - BHO: (SearchSettings Class) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll (Spigot, Inc.)
O2 - BHO: (Ask Toolbar BHO) - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL File not found
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL File not found
O3 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL File not found
O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKLM..\Run: [Windows] C:\Program Files\Services.exe ()
O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [axismess] C:\Documents and Settings\Andrzej\Dane aplikacji\Soft Keep Vga\Five Roam.exe ()

:Files
C:\Program Files\Search Settings
C:\Documents and Settings\Andrzej\Dane aplikacji\Soft Keep Vga
C:\Documents and Settings\All Users\Dane aplikacji\aim rect help creative

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia kompa

**Posty:** 370 · przez **bracik1977** 12 Paź 2009, 06:32

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== Process explorer.exe killed successfully! Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found. File C:\Program Files\Search Settings\kb128\SearchSettings.dll not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{FE063DB9-4EC0-403e-8DD8-394C54984B2C} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE063DB9-4EC0-403e-8DD8-394C54984B2C}\ not found. Registry value HKEY_USERS\S-1-5-21-1409082233-1935655697-682003330-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FE063DB9-4EC0-403E-8DD8-394C54984B2C} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE063DB9-4EC0-403E-8DD8-394C54984B2C}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSettings not found. File C:\Program Files\Search Settings\SearchSettings.exe not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Windows not found. File C:\Program Files\Services.exe not found. Registry value HKEY_USERS\S-1-5-21-1409082233-1935655697-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run\\axismess not found. File C:\Documents and Settings\Andrzej\Dane aplikacji\Soft Keep Vga\Five Roam.exe not found. ========== FILES ========== File\Folder C:\Program Files\Search Settings not found. File\Folder C:\Documents and Settings\Andrzej\Dane aplikacji\Soft Keep Vga not found. File\Folder C:\Documents and Settings\All Users\Dane aplikacji\aim rect help creative not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Andrzej File delete failed. C:\Documents and Settings\Andrzej\Ustawienia lokalne\Temp\etilqs_GY7Nfmcek35hSM8AS5CE scheduled to be deleted on reboot. ->Temp folder emptied: 13474 bytes File delete failed. C:\Documents and Settings\Andrzej\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. ->Temporary Internet Files folder emptied: 175008 bytes ->Java cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes File delete failed. C:\Documents and Settings\LocalService\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5e4.dat scheduled to be deleted on reboot. Windows Temp folder emptied: 32768 bytes RecycleBin emptied: 521216 bytes Total Files Cleaned = 0,74 mb OTL by OldTimer - Version 3.0.20.0 log created on 10122009_062928 Files\Folders moved on Reboot... File\Folder C:\Documents and Settings\Andrzej\Ustawienia lokalne\Temp\etilqs_GY7Nfmcek35hSM8AS5CE not found! File\Folder C:\WINDOWS\temp\Perflib_Perfdata_5e4.dat not found! Registry entries deleted on Reboot...

Dodano 12.10.2009 05:35:21:
To jest raport z OTL

Kod: Zaznacz wszystko: OTL logfile created on: 2009-10-12 06:33:46 - Run 3 OTL by OldTimer - Version 3.0.20.0 Folder = C:\Documents and Settings\Andrzej\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,30 Mb Total Physical Memory | 623,93 Mb Available Physical Memory | 60,97% Memory free 2,40 Gb Paging File | 2,11 Gb Available in Paging File | 87,78% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 78,13 Gb Total Space | 10,18 Gb Free Space | 13,03% Space Free | Partition Type: NTFS Drive D: | 70,92 Gb Total Space | 24,20 Gb Free Space | 34,12% Space Free | Partition Type: NTFS Drive E: | 0,36 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ANDRZEJ-6658F4F Current User Name: Andrzej Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-10-12 06:29:19 | 00,521,216 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Andrzej\Pulpit\OTL.exe PRC - [2009-07-25 05:23:12 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2009-07-25 05:23:10 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2009-06-07 19:23:30 | 00,189,824 | ---- | M] (IncrediMail, Ltd.) -- C:\Program Files\IncrediMail\bin\IMApp.exe PRC - [2009-02-27 17:10:28 | 00,035,696 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe PRC - [2009-02-22 21:15:14 | 05,668,864 | ---- | M] (http://www.emule-project.net) -- D:\eMule\emule.exe PRC - [2009-01-22 09:12:48 | 00,116,024 | ---- | M] (Flock, Inc.) -- C:\Program Files\Flock\flock.exe PRC - [2007-10-23 15:19:06 | 01,410,344 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe PRC - [2007-10-23 15:19:06 | 00,382,248 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe PRC - [2007-10-23 15:18:46 | 00,202,024 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe PRC - [2007-09-20 09:51:46 | 00,853,288 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe PRC - [2006-12-19 10:30:26 | 00,081,920 | ---- | M] (Prolific Technology Inc.) -- C:\WINDOWS\System32\IoctlSvc.exe PRC - [2006-10-11 12:45:12 | 00,075,304 | ---- | M] (ScanSoft, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe PRC - [2006-03-04 17:40:30 | 00,882,176 | ---- | M] () -- C:\Program Files\Kalendarz XP\Kalendarz.exe PRC - [2005-08-02 10:35:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe PRC - [2004-10-14 09:11:10 | 01,388,544 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe PRC - [2004-09-23 12:41:54 | 00,860,160 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\Smax4.exe PRC - [2004-08-04 00:44:30 | 00,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\wmiprvse.exe PRC - [2004-08-04 00:44:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wscntfy.exe PRC - [2004-08-04 00:44:26 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe PRC - [2004-08-04 00:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2002-09-20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe PRC - [1999-10-30 16:03:44 | 00,352,768 | ---- | M] (Young Digital Poland) -- C:\Program Files\YDP\YdpDict\Watch.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-07-25 05:23:10 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2009-06-02 10:10:08 | 00,637,952 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer [On_Demand | Stopped]) SRV - [2008-11-20 21:18:52 | 00,136,120 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped]) SRV - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped]) SRV - [2008-07-29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2008-07-29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2008-07-25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-07-25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2007-10-23 15:19:06 | 00,382,248 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Running]) SRV - [2007-09-20 09:51:46 | 00,853,288 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe -- (Nero BackItUp Scheduler 3 [Auto | Running]) SRV - [2007-03-27 17:43:08 | 00,446,464 | ---- | M] (SOFTWIN S.R.L.) -- C:\Program Files\Softwin\BitDefender10\vsserv.exe -- (VSSERV [Auto | Stopped]) SRV - [2007-03-21 12:31:00 | 00,237,568 | ---- | M] (SOFTWIN S.R.L.) -- C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe -- (LIVESRV [Auto | Stopped]) SRV - [2006-12-19 10:30:26 | 00,081,920 | ---- | M] (Prolific Technology Inc.) -- C:\WINDOWS\System32\IoctlSvc.exe -- (PLFlash DeviceIoControl Service [Auto | Running]) SRV - [2005-08-02 10:35:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running]) SRV - [2004-08-04 00:44:08 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2002-09-20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default) [Auto | Running]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-07-22 20:58:26 | 00,010,368 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\System32\drivers\pfc.sys -- (pfc [On_Demand | Running]) DRV - [2009-06-21 18:46:12 | 00,223,128 | ---- | M] () -- C:\WINDOWS\System32\Drivers\vaxscsi.sys -- (vaxscsi [On_Demand | Running]) DRV - [2009-06-21 18:44:18 | 00,642,560 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2009-03-19 14:48:18 | 00,136,704 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu [On_Demand | Stopped]) DRV - [2009-03-19 14:48:12 | 00,008,320 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc [On_Demand | Stopped]) DRV - [2009-02-09 08:37:56 | 00,007,808 | ---- | M] (Nokia) -- C:\WINDOWS\System32\DRIVERS\usbser_lowerfltj.sys -- (UsbserFilt [On_Demand | Stopped]) DRV - [2009-02-09 08:37:48 | 00,007,808 | ---- | M] (Nokia) -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys -- (upperdev [On_Demand | Stopped]) DRV - [2009-02-09 08:37:46 | 00,022,016 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys -- (nmwcdc [On_Demand | Stopped]) DRV - [2009-02-09 08:37:46 | 00,017,664 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys -- (nmwcd [On_Demand | Stopped]) DRV - [2008-11-20 21:19:06 | 00,043,872 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-08-26 10:26:12 | 00,018,816 | ---- | M] (Nokia) -- C:\WINDOWS\System32\DRIVERS\pccsmcfd.sys -- (pccsmcfd [On_Demand | Stopped]) DRV - [2007-05-16 06:00:00 | 00,042,368 | R--- | M] (Silicon Integrated Systems Corp.) -- C:\WINDOWS\System32\DRIVERS\SiSGbeXP.sys -- (SiSGbeXP [On_Demand | Running]) DRV - [2006-01-13 15:00:52 | 00,015,872 | ---- | M] (Flint Incorporation) -- C:\WINDOWS\System32\drivers\vd_filedisk.sys -- (VD_FileDisk [System | Running]) DRV - [2005-08-02 10:35:00 | 03,198,560 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running]) DRV - [2005-03-28 09:19:38 | 00,220,992 | ---- | M] (Analog Devices, Inc.) -- C:\WINDOWS\System32\drivers\smwdm.sys -- (smwdm [On_Demand | Running]) DRV - [2005-03-04 13:53:00 | 00,127,872 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\drivers\aeaudio.sys -- (aeaudio [On_Demand | Running]) DRV - [2005-03-01 06:01:40 | 00,392,704 | ---- | M] (Sensaura) -- C:\WINDOWS\System32\drivers\senfilt.sys -- (senfilt [On_Demand | Running]) DRV - [2004-09-14 06:55:44 | 00,088,960 | ---- | M] (Analog Devices, Inc.) -- C:\WINDOWS\System32\drivers\MidiSyn.sys -- (MidiSyn [On_Demand | Stopped]) DRV - [2004-08-23 13:20:06 | 00,158,720 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\a347bus.sys -- (a347bus [Boot | Running]) DRV - [2004-08-03 23:08:44 | 00,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbser.sys -- (usbser [On_Demand | Stopped]) DRV - [2004-07-17 11:36:38 | 00,027,440 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2004-05-02 10:47:08 | 00,023,040 | R--- | M] () -- C:\WINDOWS\System32\drivers\GVCplDrv.sys -- (GVCplDrv [On_Demand | Stopped]) DRV - [2004-04-30 09:33:00 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\System32\Drivers\a347scsi.sys -- (a347scsi [Boot | Running]) DRV - [2001-08-17 23:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.ask.com/web?q={searchTerms}&o=14482&l=dis IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/ IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\..\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - Reg Error: Key error. File not found IE - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\S-1-5-21-1409082233-1935655697-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-07-08 17:33:43 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-06-15 20:53:11 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock 2.0.3\extensions\\Components: C:\Program Files\Flock\components [2009-06-26 07:00:39 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock 2.0.3\extensions\\Plugins: C:\Program Files\Flock\plugins [2009-06-23 15:42:14 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock 2.5\extensions\\Components: C:\Program Files\Flock\components [2009-06-26 07:00:39 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock 2.5\extensions\\Plugins: C:\Program Files\Flock\plugins [2009-06-23 15:42:14 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (PCCBHO.CPCCBHO) - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll (Capital Intellect Inc) O2 - BHO: (EWPBrowseObject Class) - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll () O2 - BHO: (Super-Search - search like an expert) - {B88F0A3B-663C-4342-A7CE-2D6F81032897} - C:\Program Files\EasySearch\BHO\1.SuperSearch.dll () O2 - BHO: (Google Plus) - {C8CD2017-F1E5-4F1A-B58A-EE0B1AF0D0D8} - C:\Program Files\GooglePlusVideos\16.GooglePlusVideos.dll () O2 - BHO: (CescrtHlpr Object) - {D286E828-E6B9-484d-A058-D7323666DE33} - C:\Program Files\RecFree.com\RecFreeToolbar\1.3.11.0\escort.dll (RecFree) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (RecFree Toolbar) - {0508F8F1-08E3-43EE-AAA8-09AD09803084} - C:\Program Files\RecFree.com\RecFreeToolbar\1.3.11.0\escorTlbr.dll (RecFree) O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe File not found O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [BDMCon] C:\Program Files\Softwin\BitDefender10\bdmcon.exe (SOFTWIN S.R.L.) O4 - HKLM..\Run: [Help Creative Meow City] C:\Documents and Settings\All Users\Dane aplikacji\aim rect help creative\stop license.exe File not found O4 - HKLM..\Run: [MP10_EnsureFileVer] C:\WINDOWS\inf\unregmp2.exe (Microsoft Corporation) O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [Nokia FastStart] C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe File not found O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [OpwareSE4] C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe (ScanSoft, Inc.) O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.) O4 - HKLM..\Run: [ScanSoft OmniPage SE 4.0-reminder] C:\Program Files\ScanSoft\OmniPageSE4.0\Ereg\Ereg.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SiteVacuum] C:\Program Files\EasySearch\SiteVacuumClient.exe () O4 - HKLM..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe () O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG) O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [eMuleAutoStart] D:\eMule\emule.exe (http://www.emule-project.net) O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.) O4 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Aktywacja Testera.lnk = C:\Program Files\YDP\YdpDict\Watch.exe (Young Digital Poland) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1409082233-1935655697-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Search the web - File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Easy-WebPrint – Dodaj do listy drukowania - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Easy-WebPrint – Drukuj - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Easy-WebPrint – Drukuj z dużą szybkością - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Easy-WebPrint – Podgląd - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O9 - Extra 'Tools' menuitem : PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe (Capital Intellect, Inc) O9 - Extra Button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe (Capital Intellect, Inc) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-15 20:32:07 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found O35 - comfile [open] -- "%1" %* File not found O35 - exefile [open] -- "%1" %* File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-10-06 05:52:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2009-10-07 06:20:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\FarmFrenzyPizzaParty [2009-10-07 21:41:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Norton [2009-10-07 21:41:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\NortonInstaller [2009-09-21 20:56:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2009-10-07 21:41:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Symantec [2009-10-10 14:24:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Winferno [2009-10-06 05:52:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Babylon [2009-10-06 21:45:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Canon [2009-10-07 06:19:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\LuckyTender [2009-09-21 21:01:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\skypePM [2009-10-10 14:06:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Titanium Gears [2009-10-10 13:48:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\Tropico 3 [2009-09-27 00:02:20 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Dane aplikacji\XnView [2009-10-09 16:19:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\PT-Boats [2009-10-08 06:56:01 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Softwin [2009-10-07 21:45:05 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared [2009-10-10 14:24:59 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Winferno [2009-10-09 06:35:19 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2009-10-09 06:35:43 | 00,000,000 | ---D | C] -- C:\Program Files\AGEIA Technologies [2009-10-09 06:30:50 | 00,000,000 | ---D | C] -- C:\Program Files\Akella Games [2009-10-07 06:20:01 | 00,000,000 | ---D | C] -- C:\Program Files\Farm Frenzy 3 [2009-10-10 14:04:47 | 00,000,000 | ---D | C] -- C:\Program Files\Free Offers from Freeze.com [2009-10-10 13:42:34 | 00,000,000 | ---D | C] -- C:\Program Files\Kalypso [2009-10-10 14:10:40 | 00,000,000 | ---D | C] -- C:\Program Files\LuckyTender [2009-10-10 09:43:20 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Games(2) [2009-10-07 21:38:34 | 00,000,000 | ---D | C] -- C:\Program Files\Panda Security [2009-10-10 14:06:26 | 00,000,000 | ---D | C] -- C:\Program Files\Playalot Games [2009-10-11 18:56:57 | 00,000,000 | ---D | C] -- C:\Program Files\RecFree.com [2009-10-10 18:06:35 | 00,000,000 | ---D | C] -- C:\Program Files\Soft Keep Vga [2009-10-08 06:56:37 | 00,000,000 | ---D | C] -- C:\Program Files\Softwin [2009-10-10 18:06:19 | 00,000,000 | ---D | C] -- C:\Program Files\TorrentSpeeder [2009-09-21 21:09:13 | 00,000,000 | ---D | C] -- C:\Program Files\WapSter [2009-10-10 14:04:40 | 00,000,000 | ---D | C] -- C:\Program Files\Winferno [2009-10-09 06:38:01 | 00,000,000 | ---D | C] -- C:\Program Files\Xvid [2009-10-12 06:29:18 | 00,521,216 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Andrzej\Pulpit\OTL.exe [2009-10-12 06:21:41 | 00,000,000 | ---D | C] -- C:\_OTL [2009-10-10 14:44:11 | 00,000,000 | -HSD | C] -- C:\Config.Msi [2009-10-10 14:32:38 | 01,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll [2009-10-10 14:32:38 | 00,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll [2009-10-10 14:32:37 | 04,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll [2009-10-10 14:32:37 | 00,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll [2009-10-10 14:32:37 | 00,069,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll [2009-10-10 14:32:36 | 02,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_40.dll [2009-10-10 14:32:36 | 00,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_40.dll [2009-10-10 14:32:36 | 00,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll [2009-10-10 14:32:36 | 00,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll [2009-10-10 14:32:35 | 04,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll [2009-10-10 14:32:35 | 00,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_3.dll [2009-10-10 14:32:35 | 00,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_2.dll [2009-10-10 14:32:34 | 00,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_2.dll [2009-10-10 14:32:34 | 00,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_3.dll [2009-10-10 14:32:34 | 00,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_1.dll [2009-10-10 14:32:34 | 00,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_5.dll [2009-10-10 14:32:33 | 01,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_39.dll [2009-10-10 14:32:33 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_39.dll [2009-10-10 14:32:33 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_2.dll [2009-10-10 14:32:32 | 03,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_39.dll [2009-10-10 14:24:58 | 00,212,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Richtx32.ocx [2009-10-10 14:24:18 | 00,835,584 | ---- | C] (Capital Intellect Inc) -- C:\WINDOWS\System32\WINCTL4.OCX [2009-10-10 14:24:18 | 00,495,616 | ---- | C] (Capital Intellect Inc) -- C:\WINDOWS\System32\WINUTIL5.DLL [2009-10-10 14:24:18 | 00,393,216 | ---- | C] (Capital Intellect Inc) -- C:\WINDOWS\System32\WINLCTL5.DLL [2009-10-10 13:39:21 | 00,000,000 | ---D | C] -- C:\ERDNT [2009-10-10 13:39:20 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2009-10-10 13:39:14 | 00,000,000 | ---D | C] -- C:\!FixIEDef [2009-10-09 06:35:43 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\AGEIA [2009-10-08 14:29:14 | 00,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2009-10-06 21:14:46 | 04,341,760 | ---- | C] (Gabest) -- C:\Documents and Settings\Andrzej\Pulpit\mplayerc[www.instalki.pl].exe [2009-10-06 05:53:13 | 00,109,253 | ---- | C] (Microsoft Corporation) -- C:\Program Files\MSWINSCK.OCX [2009-10-05 05:48:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Pulpit\Filmy [2009-09-24 18:32:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Andrzej\Pulpit\Nowy folder (3) [2009-09-24 05:58:37 | 17,564,760 | ---- | C] (Doctor Web, Ltd.) -- C:\Documents and Settings\Andrzej\Pulpit\launch.exe [2009-06-21 22:59:39 | 00,158,720 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347bus.sys [2009-06-21 22:59:39 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347scsi.sys [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-10-12 06:30:51 | 00,029,204 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2009-10-12 06:30:21 | 00,000,416 | ---- | M] () -- C:\WINDOWS\tasks\PCConfidential.job [2009-10-12 06:30:17 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-10-12 06:30:15 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-10-12 06:29:19 | 00,521,216 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Andrzej\Pulpit\OTL.exe [2009-10-12 06:24:20 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-10-12 06:00:00 | 00,000,268 | -H-- | M] () -- C:\WINDOWS\tasks\A91367AE9134E502.job [2009-10-10 14:47:42 | 00,109,253 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSWINSCK.OCX [2009-10-10 14:30:01 | 00,000,789 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Tropico 3.lnk [2009-10-10 14:12:04 | 00,101,440 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-10-10 11:54:30 | 01,580,658 | -H-- | M] () -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-10-09 06:34:38 | 00,000,741 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\PT-Boats.lnk [2009-10-08 16:47:37 | 00,081,984 | ---- | M] () -- C:\WINDOWS\System32\bdod.bin [2009-10-07 21:31:21 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-10-07 06:41:11 | 00,000,552 | ---- | M] () -- C:\WINDOWS\YdpDict.ini [2009-10-07 06:20:19 | 00,000,777 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Farm Frenzy 3 - Pizza Party en Espańol.lnk [2009-10-06 21:14:59 | 04,341,760 | ---- | M] (Gabest) -- C:\Documents and Settings\Andrzej\Pulpit\mplayerc[www.instalki.pl].exe [2009-10-06 20:25:02 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2009-10-04 22:41:42 | 35,076,3998 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Transformers - Zemsta Upadłych 2009 (Lektor PL).rmvb [2009-10-02 16:35:15 | 60,851,2054 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Adrenalina 2 _ Pod napięciem-Crank High Voltage (2009) [R5] [Xvid] Lektor PL_toAVI.avi [2009-10-02 11:21:31 | 73,000,1408 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Wyścig Śmierci - Death Race 2008 Lektor PL.avi [2009-09-29 19:21:02 | 73,376,3584 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\Transporter.3.2008.PL.DVDRip.XviD-KiCZ.(OSiOLEK.com).avi [2009-09-29 06:39:27 | 73,427,7632 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\12 Rund 12 Runds (2009) BRRip - lektor PL.avi [2009-09-27 00:01:48 | 00,000,572 | ---- | M] () -- C:\WINDOWS\win.ini [2009-09-24 05:59:21 | 17,564,760 | ---- | M] (Doctor Web, Ltd.) -- C:\Documents and Settings\Andrzej\Pulpit\launch.exe [2009-09-22 05:21:36 | 00,000,640 | ---- | M] () -- C:\Documents and Settings\Andrzej\Pulpit\ALLPlayer V4.1.lnk [2009-09-21 21:09:18 | 00,000,710 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AQQ.lnk [2009-09-21 21:01:10 | 00,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat [2009-09-21 20:37:40 | 00,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk [color=#E56717]========== Files - No Company Name ==========[/color] [2009-10-10 18:07:04 | 00,000,268 | -H-- | C] () -- C:\WINDOWS\tasks\A91367AE9134E502.job [2009-10-10 14:30:01 | 00,000,789 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Tropico 3.lnk [2009-10-10 14:04:44 | 00,000,416 | ---- | C] () -- C:\WINDOWS\tasks\PCConfidential.job [2009-10-09 06:34:38 | 00,000,741 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\PT-Boats.lnk [2009-10-08 07:02:07 | 00,081,984 | ---- | C] () -- C:\WINDOWS\System32\bdod.bin [2009-10-07 06:20:19 | 00,000,777 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Farm Frenzy 3 - Pizza Party en Espańol.lnk [2009-10-05 05:54:34 | 73,427,7632 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\12 Rund 12 Runds (2009) BRRip - lektor PL.avi [2009-10-05 05:54:09 | 60,851,2054 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Adrenalina 2 _ Pod napięciem-Crank High Voltage (2009) [R5] [Xvid] Lektor PL_toAVI.avi [2009-10-05 05:53:53 | 35,076,3998 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Transformers - Zemsta Upadłych 2009 (Lektor PL).rmvb [2009-10-05 05:52:21 | 73,376,3584 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Transporter.3.2008.PL.DVDRip.XviD-KiCZ.(OSiOLEK.com).avi [2009-10-05 05:50:41 | 73,000,1408 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Wyścig Śmierci - Death Race 2008 Lektor PL.avi [2009-10-05 05:48:51 | 73,386,3936 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Zdobycz (2007) (Przygodowy)Lektor Pl.avi [2009-10-05 05:47:44 | 73,410,5600 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\Zimny Pot (Lektor Pl).avi [2009-09-22 05:21:36 | 00,000,640 | ---- | C] () -- C:\Documents and Settings\Andrzej\Pulpit\ALLPlayer V4.1.lnk [2009-09-21 21:09:18 | 00,000,710 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AQQ.lnk [2009-09-21 21:01:10 | 00,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2009-07-27 20:14:55 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2009-07-19 14:24:02 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-07-15 21:28:42 | 00,021,052 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll [2009-07-15 21:28:42 | 00,015,144 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll [2009-07-15 21:28:42 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll [2009-07-15 21:28:42 | 00,000,552 | ---- | C] () -- C:\WINDOWS\YdpDict.ini [2009-07-09 16:18:16 | 00,000,150 | ---- | C] () -- C:\Documents and Settings\Andrzej\Dane aplikacji\default.rss [2009-07-05 21:14:27 | 00,000,416 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI [2009-07-05 08:38:01 | 00,000,029 | ---- | C] () -- C:\WINDOWS\Irremote.ini [2009-07-02 18:25:13 | 00,484,352 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2009-06-30 22:43:36 | 00,000,074 | ---- | C] () -- C:\Documents and Settings\Andrzej\Dane aplikacji\default.pls [2009-06-21 18:46:12 | 00,223,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\vaxscsi.sys [2009-06-21 18:44:18 | 00,642,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-06-21 18:44:18 | 00,096,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd5085.sys [2009-06-16 20:02:52 | 00,081,408 | ---- | C] () -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-06-15 22:19:00 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini [2009-06-15 22:02:31 | 01,580,658 | -H-- | C] () -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-06-15 20:52:04 | 00,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-06-15 20:52:03 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-06-15 20:52:02 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-06-15 20:52:02 | 00,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-06-15 20:52:01 | 00,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-06-15 20:52:01 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-06-15 20:46:29 | 00,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-06-15 20:41:29 | 00,013,792 | ---- | C] () -- C:\Documents and Settings\Andrzej\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-06-15 20:36:24 | 00,023,040 | R--- | C] () -- C:\WINDOWS\System32\drivers\GVCplDrv.sys [2009-06-15 20:35:46 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\Andrzej\Dane aplikacji\desktop.ini [2008-10-07 09:13:30 | 00,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll [2008-10-07 09:13:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2005-08-02 10:35:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2005-08-02 10:35:00 | 01,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2005-08-02 10:35:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2005-08-02 10:35:00 | 00,540,672 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2005-08-02 10:35:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2005-08-02 10:35:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2004-08-04 00:44:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2004-07-17 11:36:38 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [2002-03-21 15:39:02 | 00,073,728 | ---- | C] () -- C:\WINDOWS\System32\UNACEV2.DLL [2001-07-22 00:16:20 | 00,000,572 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-22 00:15:52 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini < End of report >

**Posty:** 18165 · przez **wojtas** 29 Paź 2009, 09:33

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (usuń co znajdzie )