Błąd svchost.exe i komputer długo się włacza

[maciow1]

Witam gdy włączam komputer to po minucie wyskakuję mi komunikat :Wystąpił problem z aplikacją svchost.exe i zostanie ona zamknięta. Przepraszamy za kłopoty. (mam 2 opcje wyślij raport albo nie wysyłaj ,(gdy dam nie wysyłaj to za chwile znów się pomażę to okno tak kilka razy aż przestaje się pokazywać ( wszystko działa )

Druga sprawa podczas włączania komputera , to pokazuję sie pulpit ale bez ikon i paska i nic nie można zrobić (dopiero po 1-3 minutach pokazują się ikony itp i widać żę wtedy dopiero system startuje )

Co z tym zrobić ? pomocy

Log HiJackThis:

Kod: Zaznacz wszystko

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\CPUCooL\CooLSrv.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\npkcmsvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\VDOTool\TBPanel.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\HybridTM_IR(A)\RC620_A.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\dwwin.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gazeta.pl/0,0.html?p=107
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 189.15.178.123:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~1\ALLPLA~1\Iplex\IPLEXT~1.DLL
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Dominik\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
O4 - HKLM\..\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe /A
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [{7647E26C-6B46-9B5C-6973-6670B2E0965E}] "C:\Documents and Settings\Dominik\Dane aplikacji\Nukaus\ygzau.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: BitTorrent.lnk = C:\Program Files\BitTorrent\BitTorrent.exe
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Pobierz za pomocą Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.53.0.cab
O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://update.nprotect.net/keycrypt/cabal/npkcx_inca.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Usługa Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CPUCooLServer Service (CPUCooLServer) - Unknown owner - C:\Program Files\CPUCooL\CooLSrv.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - E:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: npkcmsvc - INCA Internet Co., Ltd. - C:\WINDOWS\system32\npkcmsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe (file missing)

[Mikou@j]

Co z tym zrobić ? pomocy

Jeśli już wstawiasz logi, to przeczytać obowiazkowe-zasady-wstawiania-logow-wazne-vt117887.html i wstawić wymagane logi - 2 otl i gmer

[maciow1]

gmer:

.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB67203A0, 0x5CC259, 0xE8000020]
.text C:\WINDOWS\system32\drivers\oreans32.sys section is writeable [0xB82F8280, 0x7B04, 0xE8000020]
.text C:\WINDOWS\system32\DRIVERS\atksgt.sys section is writeable [0xB28A1300, 0x3B6D8, 0xE8000020]
.text C:\WINDOWS\system32\DRIVERS\lirsgt.sys section is writeable [0xB3A5E300, 0x1BEE, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\ESET\ESET Smart Security\ekrn.exe[276] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 4 Bytes [C2, 04, 00, 00]
.text C:\WINDOWS\Explorer.EXE[736] ntdll.dll!NtCreateThread 7C90D1AE 5 Bytes JMP 01ECAD1C
.text C:\WINDOWS\Explorer.EXE[736] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 01ECAF14
.text C:\WINDOWS\Explorer.EXE[736] kernel32.dll!GetFileAttributesExW 7C811195 5 Bytes JMP 01ECAFB6
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!ReleaseDC 7E36869D 5 Bytes JMP 01EC7E6B
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetDC 7E3686C7 5 Bytes JMP 01EC7DED
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!TranslateMessage 7E368BF6 5 Bytes JMP 01ECB803
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetWindowDC 7E369021 5 Bytes JMP 01EC7E2C
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetMessageW 7E3691C6 5 Bytes JMP 01ECFA6C
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!PeekMessageW 7E36929B 5 Bytes JMP 01ECFABC
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetCapture 7E3694DA 5 Bytes JMP 01ECF9CD
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!RegisterClassW 7E36A39A 5 Bytes JMP 01ED1801
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!RegisterClassExW 7E36AF7F 5 Bytes JMP 01ED189B
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!OpenInputDesktop 7E36ECA3 5 Bytes JMP 01ED148F
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!SwitchDesktop 7E36FE6E 5 Bytes JMP 01ED14DF
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!DefDlgProcW 7E373D3A 5 Bytes JMP 01ED1589
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetMessageA 7E37772B 5 Bytes JMP 01ECFA94
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!RegisterClassExA 7E377C39 5 Bytes JMP 01ED18ED
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!DefWindowProcW 7E378D20 5 Bytes JMP 01ED14FD
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!BeginPaint 7E378FE9 5 Bytes JMP 01EC7CE2
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!EndPaint 7E378FFD 5 Bytes JMP 01EC7D52
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetCursorPos 7E37974E 5 Bytes JMP 01ECF89F
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetMessagePos 7E37996C 5 Bytes JMP 01ECF86D
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!CallWindowProcW 7E37A01E 5 Bytes JMP 01ED1733
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!PeekMessageA 7E37A340 5 Bytes JMP 01ECFAE7
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetUpdateRect 7E37A8C9 5 Bytes JMP 01EC7EAB
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!CallWindowProcA 7E37A97D 5 Bytes JMP 01ED177C
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!DefWindowProcA 7E37C17E 5 Bytes JMP 01ED1543
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!SetCapture 7E37C35E 5 Bytes JMP 01ECF923
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!ReleaseCapture 7E37C37A 5 Bytes JMP 01ECF97D
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetDCEx 7E37C595 5 Bytes JMP 01EC7D92
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!RegisterClassA 7E37EA5E 5 Bytes JMP 01ED184E
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetUpdateRgn 7E37F5EC 5 Bytes JMP 01EC7F3E
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!DefFrameProcW 7E380833 5 Bytes JMP 01ED1615
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!DefMDIChildProcW 7E380A47 5 Bytes JMP 01ED16A7
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!GetClipboardData 7E380DBA 5 Bytes JMP 01ECB969
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!DefDlgProcA 7E38E577 5 Bytes JMP 01ED15CF
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!DefFrameProcA 7E39F965 5 Bytes JMP 01ED165E
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!DefMDIChildProcA 7E39F9B4 5 Bytes JMP 01ED16ED
.text C:\WINDOWS\Explorer.EXE[736] USER32.dll!SetCursorPos 7E3A61B3 5 Bytes JMP 01ECF8E6
.text C:\WINDOWS\Explorer.EXE[736] CRYPT32.dll!PFXImportCertStore 77ADFF87 5 Bytes JMP 01ED4210
.text C:\WINDOWS\Explorer.EXE[736] WININET.dll!InternetCloseHandle 771B4D94 5 Bytes JMP 01ED9DD4
.text C:\WINDOWS\Explorer.EXE[736] WININET.dll!HttpSendRequestA 771B60A9 5 Bytes JMP 01ED9C48
.text C:\WINDOWS\Explorer.EXE[736] WININET.dll!HttpQueryInfoA 771B79CA 5 Bytes JMP 01ED9ECC
.text C:\WINDOWS\Explorer.EXE[736] WININET.dll!InternetReadFile 771B82F2 5 Bytes JMP 01ED9E17
.text C:\WINDOWS\Explorer.EXE[736] WININET.dll!HttpSendRequestExW 771BE9E9 5 Bytes JMP 01ED9C9C
.text C:\WINDOWS\Explorer.EXE[736] WININET.dll!InternetQueryDataAvailable 771C8A4F 5 Bytes JMP 01ED9EA0
.text C:\WINDOWS\Explorer.EXE[736] WININET.dll!InternetReadFileExA 771E92D6 5 Bytes JMP 01ED9E56
.text C:\WINDOWS\Explorer.EXE[736] WININET.dll!HttpSendRequestW 772031AC 5 Bytes JMP 01ED9BF4
.text C:\WINDOWS\Explorer.EXE[736] WININET.dll!HttpSendRequestExA 772032B1 5 Bytes JMP 01ED9D38
.text C:\WINDOWS\Explorer.EXE[736] WS2_32.dll!closesocket 71A53E2B 5 Bytes JMP 01ED7C23
.text C:\WINDOWS\Explorer.EXE[736] WS2_32.dll!send 71A54C27 5 Bytes JMP 01ED7C5B
.text C:\WINDOWS\Explorer.EXE[736] WS2_32.dll!WSASend 71A568FA 5 Bytes JMP 01ED7C7C
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] ntdll.dll!NtCreateThread 7C90D1AE 5 Bytes JMP 0013AD1C
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 0013AF14
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] kernel32.dll!GetFileAttributesExW 7C811195 5 Bytes JMP 0013AFB6
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!ReleaseDC 7E36869D 5 Bytes JMP 00137E6B
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetDC 7E3686C7 5 Bytes JMP 00137DED
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!TranslateMessage 7E368BF6 5 Bytes JMP 0013B803
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetWindowDC 7E369021 5 Bytes JMP 00137E2C
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetMessageW 7E3691C6 5 Bytes JMP 0013FA6C
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!PeekMessageW 7E36929B 5 Bytes JMP 0013FABC
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetCapture 7E3694DA 5 Bytes JMP 0013F9CD
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!RegisterClassW 7E36A39A 5 Bytes JMP 00141801
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!RegisterClassExW 7E36AF7F 5 Bytes JMP 0014189B
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!OpenInputDesktop 7E36ECA3 5 Bytes JMP 0014148F
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!SwitchDesktop 7E36FE6E 5 Bytes JMP 001414DF
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!DefDlgProcW 7E373D3A 5 Bytes JMP 00141589
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetMessageA 7E37772B 5 Bytes JMP 0013FA94
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!RegisterClassExA 7E377C39 5 Bytes JMP 001418ED
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!DefWindowProcW 7E378D20 5 Bytes JMP 001414FD
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!BeginPaint 7E378FE9 5 Bytes JMP 00137CE2
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!EndPaint 7E378FFD 5 Bytes JMP 00137D52
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetCursorPos 7E37974E 5 Bytes JMP 0013F89F
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetMessagePos 7E37996C 5 Bytes JMP 0013F86D
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!CallWindowProcW 7E37A01E 5 Bytes JMP 00141733
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!PeekMessageA 7E37A340 5 Bytes JMP 0013FAE7
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetUpdateRect 7E37A8C9 5 Bytes JMP 00137EAB
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!CallWindowProcA 7E37A97D 5 Bytes JMP 0014177C
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!DefWindowProcA 7E37C17E 5 Bytes JMP 00141543
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!SetCapture 7E37C35E 5 Bytes JMP 0013F923
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!ReleaseCapture 7E37C37A 5 Bytes JMP 0013F97D
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetDCEx 7E37C595 5 Bytes JMP 00137D92
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!RegisterClassA 7E37EA5E 5 Bytes JMP 0014184E
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetUpdateRgn 7E37F5EC 5 Bytes JMP 00137F3E
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!DefFrameProcW 7E380833 5 Bytes JMP 00141615
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!DefMDIChildProcW 7E380A47 5 Bytes JMP 001416A7
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!GetClipboardData 7E380DBA 5 Bytes JMP 0013B969
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!DefDlgProcA 7E38E577 5 Bytes JMP 001415CF
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!DefFrameProcA 7E39F965 5 Bytes JMP 0014165E
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!DefMDIChildProcA 7E39F9B4 5 Bytes JMP 001416ED
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] USER32.dll!SetCursorPos 7E3A61B3 5 Bytes JMP 0013F8E6
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WS2_32.dll!closesocket 71A53E2B 5 Bytes JMP 00147C23
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WS2_32.dll!send 71A54C27 5 Bytes JMP 00147C5B
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WS2_32.dll!WSASend 71A568FA 5 Bytes JMP 00147C7C
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] CRYPT32.dll!PFXImportCertStore 77ADFF87 5 Bytes JMP 00144210
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WININET.dll!InternetCloseHandle 771B4D94 5 Bytes JMP 00149DD4
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WININET.dll!HttpSendRequestA 771B60A9 5 Bytes JMP 00149C48
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WININET.dll!HttpQueryInfoA 771B79CA 5 Bytes JMP 00149ECC
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WININET.dll!InternetReadFile 771B82F2 5 Bytes JMP 00149E17
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WININET.dll!HttpSendRequestExW 771BE9E9 5 Bytes JMP 00149C9C
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WININET.dll!InternetQueryDataAvailable 771C8A4F 5 Bytes JMP 00149EA0
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WININET.dll!InternetReadFileExA 771E92D6 5 Bytes JMP 00149E56
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WININET.dll!HttpSendRequestW 772031AC 5 Bytes JMP 00149BF4
.text C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\qw6ylwdh.exe[1300] WININET.dll!HttpSendRequestExA 772032B1 5 Bytes JMP 00149D38
.text C:\WINDOWS\system32\wuauclt.exe[2436] ntdll.dll!NtCreateThread 7C90D1AE 5 Bytes JMP 00E8AD1C
.text C:\WINDOWS\system32\wuauclt.exe[2436] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 00E8AF14
.text C:\WINDOWS\system32\wuauclt.exe[2436] kernel32.dll!GetFileAttributesExW 7C811195 5 Bytes JMP 00E8AFB6
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!ReleaseDC 7E36869D 5 Bytes JMP 00E87E6B
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetDC 7E3686C7 5 Bytes JMP 00E87DED
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!TranslateMessage 7E368BF6 5 Bytes JMP 00E8B803
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetWindowDC 7E369021 5 Bytes JMP 00E87E2C
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetMessageW 7E3691C6 5 Bytes JMP 00E8FA6C
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!PeekMessageW 7E36929B 5 Bytes JMP 00E8FABC
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetCapture 7E3694DA 5 Bytes JMP 00E8F9CD
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!RegisterClassW 7E36A39A 5 Bytes JMP 00E91801
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!RegisterClassExW 7E36AF7F 5 Bytes JMP 00E9189B
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!OpenInputDesktop 7E36ECA3 5 Bytes JMP 00E9148F
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!SwitchDesktop 7E36FE6E 5 Bytes JMP 00E914DF
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!DefDlgProcW 7E373D3A 5 Bytes JMP 00E91589
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetMessageA 7E37772B 5 Bytes JMP 00E8FA94
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!RegisterClassExA 7E377C39 5 Bytes JMP 00E918ED
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!DefWindowProcW 7E378D20 5 Bytes JMP 00E914FD
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!BeginPaint 7E378FE9 5 Bytes JMP 00E87CE2
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!EndPaint 7E378FFD 5 Bytes JMP 00E87D52
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetCursorPos 7E37974E 5 Bytes JMP 00E8F89F
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetMessagePos 7E37996C 5 Bytes JMP 00E8F86D
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!CallWindowProcW 7E37A01E 5 Bytes JMP 00E91733
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!PeekMessageA 7E37A340 5 Bytes JMP 00E8FAE7
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetUpdateRect 7E37A8C9 5 Bytes JMP 00E87EAB
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!CallWindowProcA 7E37A97D 5 Bytes JMP 00E9177C
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!DefWindowProcA 7E37C17E 5 Bytes JMP 00E91543
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!SetCapture 7E37C35E 5 Bytes JMP 00E8F923
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!ReleaseCapture 7E37C37A 5 Bytes JMP 00E8F97D
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetDCEx 7E37C595 5 Bytes JMP 00E87D92
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!RegisterClassA 7E37EA5E 5 Bytes JMP 00E9184E
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetUpdateRgn 7E37F5EC 5 Bytes JMP 00E87F3E
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!DefFrameProcW 7E380833 5 Bytes JMP 00E91615
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!DefMDIChildProcW 7E380A47 5 Bytes JMP 00E916A7
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!GetClipboardData 7E380DBA 5 Bytes JMP 00E8B969
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!DefDlgProcA 7E38E577 5 Bytes JMP 00E915CF
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!DefFrameProcA 7E39F965 5 Bytes JMP 00E9165E
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!DefMDIChildProcA 7E39F9B4 5 Bytes JMP 00E916ED
.text C:\WINDOWS\system32\wuauclt.exe[2436] USER32.dll!SetCursorPos 7E3A61B3 5 Bytes JMP 00E8F8E6
.text C:\WINDOWS\system32\wuauclt.exe[2436] CRYPT32.dll!PFXImportCertStore 77ADFF87 5 Bytes JMP 00E94210
.text C:\WINDOWS\system32\wuauclt.exe[2436] WS2_32.dll!closesocket 71A53E2B 5 Bytes JMP 00E97C23
.text C:\WINDOWS\system32\wuauclt.exe[2436] WS2_32.dll!send 71A54C27 5 Bytes JMP 00E97C5B
.text C:\WINDOWS\system32\wuauclt.exe[2436] WS2_32.dll!WSASend 71A568FA 5 Bytes JMP 00E97C7C
.text C:\WINDOWS\system32\wuauclt.exe[2436] WININET.dll!InternetCloseHandle 771B4D94 5 Bytes JMP 00E99DD4
.text C:\WINDOWS\system32\wuauclt.exe[2436] WININET.dll!HttpSendRequestA 771B60A9 5 Bytes JMP 00E99C48
.text C:\WINDOWS\system32\wuauclt.exe[2436] WININET.dll!HttpQueryInfoA 771B79CA 5 Bytes JMP 00E99ECC
.text C:\WINDOWS\system32\wuauclt.exe[2436] WININET.dll!InternetReadFile 771B82F2 5 Bytes JMP 00E99E17
.text C:\WINDOWS\system32\wuauclt.exe[2436] WININET.dll!HttpSendRequestExW 771BE9E9 5 Bytes JMP 00E99C9C
.text C:\WINDOWS\system32\wuauclt.exe[2436] WININET.dll!InternetQueryDataAvailable 771C8A4F 5 Bytes JMP 00E99EA0
.text C:\WINDOWS\system32\wuauclt.exe[2436] WININET.dll!InternetReadFileExA 771E92D6 5 Bytes JMP 00E99E56
.text C:\WINDOWS\system32\wuauclt.exe[2436] WININET.dll!HttpSendRequestW 772031AC 5 Bytes JMP 00E99BF4
.text C:\WINDOWS\system32\wuauclt.exe[2436] WININET.dll!HttpSendRequestExA 772032B1 5 Bytes JMP 00E99D38
.text C:\Program Files\VDOTool\TBPanel.exe[3684] ntdll.dll!NtCreateThread 7C90D1AE 5 Bytes JMP 010FAD1C
.text C:\Program Files\VDOTool\TBPanel.exe[3684] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 010FAF14
.text C:\Program Files\VDOTool\TBPanel.exe[3684] kernel32.dll!GetFileAttributesExW 7C811195 5 Bytes JMP 010FAFB6
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!ReleaseDC 7E36869D 5 Bytes JMP 010F7E6B
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetDC 7E3686C7 5 Bytes JMP 010F7DED
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!TranslateMessage 7E368BF6 5 Bytes JMP 010FB803
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetWindowDC 7E369021 5 Bytes JMP 010F7E2C
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetMessageW 7E3691C6 5 Bytes JMP 010FFA6C
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!PeekMessageW 7E36929B 5 Bytes JMP 010FFABC
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetCapture 7E3694DA 5 Bytes JMP 010FF9CD
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!RegisterClassW 7E36A39A 5 Bytes JMP 01101801
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!RegisterClassExW 7E36AF7F 5 Bytes JMP 0110189B
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!OpenInputDesktop 7E36ECA3 5 Bytes JMP 0110148F
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!SwitchDesktop 7E36FE6E 5 Bytes JMP 011014DF
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!DefDlgProcW 7E373D3A 5 Bytes JMP 01101589
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetMessageA 7E37772B 5 Bytes JMP 010FFA94
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!RegisterClassExA 7E377C39 5 Bytes JMP 011018ED
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!DefWindowProcW 7E378D20 5 Bytes JMP 011014FD
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!BeginPaint 7E378FE9 5 Bytes JMP 010F7CE2
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!EndPaint 7E378FFD 5 Bytes JMP 010F7D52
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetCursorPos 7E37974E 5 Bytes JMP 010FF89F
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetMessagePos 7E37996C 5 Bytes JMP 010FF86D
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!CallWindowProcW 7E37A01E 5 Bytes JMP 01101733
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!PeekMessageA 7E37A340 5 Bytes JMP 010FFAE7
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetUpdateRect 7E37A8C9 5 Bytes JMP 010F7EAB
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!CallWindowProcA 7E37A97D 5 Bytes JMP 0110177C
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!DefWindowProcA 7E37C17E 5 Bytes JMP 01101543
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!SetCapture 7E37C35E 5 Bytes JMP 010FF923
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!ReleaseCapture 7E37C37A 5 Bytes JMP 010FF97D
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetDCEx 7E37C595 5 Bytes JMP 010F7D92
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!RegisterClassA 7E37EA5E 5 Bytes JMP 0110184E
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetUpdateRgn 7E37F5EC 5 Bytes JMP 010F7F3E
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!DefFrameProcW 7E380833 5 Bytes JMP 01101615
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!DefMDIChildProcW 7E380A47 5 Bytes JMP 011016A7
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!GetClipboardData 7E380DBA 5 Bytes JMP 010FB969
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!DefDlgProcA 7E38E577 5 Bytes JMP 011015CF
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!DefFrameProcA 7E39F965 5 Bytes JMP 0110165E
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!DefMDIChildProcA 7E39F9B4 5 Bytes JMP 011016ED
.text C:\Program Files\VDOTool\TBPanel.exe[3684] USER32.dll!SetCursorPos 7E3A61B3 5 Bytes JMP 010FF8E6
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WS2_32.dll!closesocket 71A53E2B 5 Bytes JMP 01107C23
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WS2_32.dll!send 71A54C27 5 Bytes JMP 01107C5B
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WS2_32.dll!WSASend 71A568FA 5 Bytes JMP 01107C7C
.text C:\Program Files\VDOTool\TBPanel.exe[3684] CRYPT32.dll!PFXImportCertStore 77ADFF87 5 Bytes JMP 01104210
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WININET.dll!InternetCloseHandle 771B4D94 5 Bytes JMP 01109DD4
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WININET.dll!HttpSendRequestA 771B60A9 5 Bytes JMP 01109C48
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WININET.dll!HttpQueryInfoA 771B79CA 5 Bytes JMP 01109ECC
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WININET.dll!InternetReadFile 771B82F2 5 Bytes JMP 01109E17
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WININET.dll!HttpSendRequestExW 771BE9E9 5 Bytes JMP 01109C9C
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WININET.dll!InternetQueryDataAvailable 771C8A4F 5 Bytes JMP 01109EA0
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WININET.dll!InternetReadFileExA 771E92D6 5 Bytes JMP 01109E56
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WININET.dll!HttpSendRequestW 772031AC 5 Bytes JMP 01109BF4
.text C:\Program Files\VDOTool\TBPanel.exe[3684] WININET.dll!HttpSendRequestExA 772032B1 5 Bytes JMP 01109D38
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] ntdll.dll!NtCreateThread 7C90D1AE 5 Bytes JMP 01B1AD1C
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 01B1AF14
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] kernel32.dll!GetFileAttributesExW 7C811195 5 Bytes JMP 01B1AFB6
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!ReleaseDC 7E36869D 5 Bytes JMP 01B17E6B
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetDC 7E3686C7 5 Bytes JMP 01B17DED
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!TranslateMessage 7E368BF6 5 Bytes JMP 01B1B803
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetWindowDC 7E369021 5 Bytes JMP 01B17E2C
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetMessageW 7E3691C6 5 Bytes JMP 01B1FA6C
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!PeekMessageW 7E36929B 5 Bytes JMP 01B1FABC
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetCapture 7E3694DA 5 Bytes JMP 01B1F9CD
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!RegisterClassW 7E36A39A 5 Bytes JMP 01B21801
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!RegisterClassExW 7E36AF7F 5 Bytes JMP 01B2189B
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!OpenInputDesktop 7E36ECA3 5 Bytes JMP 01B2148F
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!SwitchDesktop 7E36FE6E 5 Bytes JMP 01B214DF
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!DefDlgProcW 7E373D3A 5 Bytes JMP 01B21589
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetMessageA 7E37772B 5 Bytes JMP 01B1FA94
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!RegisterClassExA 7E377C39 5 Bytes JMP 01B218ED
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!DefWindowProcW 7E378D20 5 Bytes JMP 01B214FD
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!BeginPaint 7E378FE9 5 Bytes JMP 01B17CE2
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!EndPaint 7E378FFD 5 Bytes JMP 01B17D52
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetCursorPos 7E37974E 5 Bytes JMP 01B1F89F
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetMessagePos 7E37996C 5 Bytes JMP 01B1F86D
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!CallWindowProcW 7E37A01E 5 Bytes JMP 01B21733
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!PeekMessageA 7E37A340 5 Bytes JMP 01B1FAE7
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetUpdateRect 7E37A8C9 5 Bytes JMP 01B17EAB
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!CallWindowProcA 7E37A97D 5 Bytes JMP 01B2177C
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!DefWindowProcA 7E37C17E 5 Bytes JMP 01B21543
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!SetCapture 7E37C35E 5 Bytes JMP 01B1F923
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!ReleaseCapture 7E37C37A 5 Bytes JMP 01B1F97D
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetDCEx 7E37C595 5 Bytes JMP 01B17D92
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!RegisterClassA 7E37EA5E 5 Bytes JMP 01B2184E
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetUpdateRgn 7E37F5EC 5 Bytes JMP 01B17F3E
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!DefFrameProcW 7E380833 5 Bytes JMP 01B21615
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!DefMDIChildProcW 7E380A47 5 Bytes JMP 01B216A7
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!GetClipboardData 7E380DBA 5 Bytes JMP 01B1B969
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!DefDlgProcA 7E38E577 5 Bytes JMP 01B215CF
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!DefFrameProcA 7E39F965 5 Bytes JMP 01B2165E
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!DefMDIChildProcA 7E39F9B4 5 Bytes JMP 01B216ED
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] USER32.dll!SetCursorPos 7E3A61B3 5 Bytes JMP 01B1F8E6
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WS2_32.dll!closesocket 71A53E2B 5 Bytes JMP 01B27C23
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WS2_32.dll!send 71A54C27 5 Bytes JMP 01B27C5B
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WS2_32.dll!WSASend 71A568FA 5 Bytes JMP 01B27C7C
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] CRYPT32.dll!PFXImportCertStore 77ADFF87 5 Bytes JMP 01B24210
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WININET.dll!InternetCloseHandle 771B4D94 5 Bytes JMP 01B29DD4
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WININET.dll!HttpSendRequestA 771B60A9 5 Bytes JMP 01B29C48
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WININET.dll!HttpQueryInfoA 771B79CA 5 Bytes JMP 01B29ECC
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WININET.dll!InternetReadFile 771B82F2 5 Bytes JMP 01B29E17
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WININET.dll!HttpSendRequestExW 771BE9E9 5 Bytes JMP 01B29C9C
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WININET.dll!InternetQueryDataAvailable 771C8A4F 5 Bytes JMP 01B29EA0
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WININET.dll!InternetReadFileExA 771E92D6 5 Bytes JMP 01B29E56
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WININET.dll!HttpSendRequestW 772031AC 5 Bytes JMP 01B29BF4
.text C:\Program Files\ESET\ESET Smart Security\egui.exe[3760] WININET.dll!HttpSendRequestExA 772032B1 5 Bytes JMP 01B29D38
.text C:\WINDOWS\system32\rundll32.exe[3776] ntdll.dll!NtCreateThread 7C90D1AE 5 Bytes JMP 01DEAD1C
.text C:\WINDOWS\system32\rundll32.exe[3776] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 01DEAF14
.text C:\WINDOWS\system32\rundll32.exe[3776] kernel32.dll!GetFileAttributesExW 7C811195 5 Bytes JMP 01DEAFB6
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!ReleaseDC 7E36869D 5 Bytes JMP 01DE7E6B
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetDC 7E3686C7 5 Bytes JMP 01DE7DED
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!TranslateMessage 7E368BF6 5 Bytes JMP 01DEB803
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetWindowDC 7E369021 5 Bytes JMP 01DE7E2C
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetMessageW 7E3691C6 5 Bytes JMP 01DEFA6C
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!PeekMessageW 7E36929B 5 Bytes JMP 01DEFABC
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetCapture 7E3694DA 5 Bytes JMP 01DEF9CD
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!RegisterClassW 7E36A39A 5 Bytes JMP 01DF1801
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!RegisterClassExW 7E36AF7F 5 Bytes JMP 01DF189B
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!OpenInputDesktop 7E36ECA3 5 Bytes JMP 01DF148F
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!SwitchDesktop 7E36FE6E 5 Bytes JMP 01DF14DF
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!DefDlgProcW 7E373D3A 5 Bytes JMP 01DF1589
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetMessageA 7E37772B 5 Bytes JMP 01DEFA94
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!RegisterClassExA 7E377C39 5 Bytes JMP 01DF18ED
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!DefWindowProcW 7E378D20 5 Bytes JMP 01DF14FD
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!BeginPaint 7E378FE9 5 Bytes JMP 01DE7CE2
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!EndPaint 7E378FFD 5 Bytes JMP 01DE7D52
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetCursorPos 7E37974E 5 Bytes JMP 01DEF89F
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetMessagePos 7E37996C 5 Bytes JMP 01DEF86D
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!CallWindowProcW 7E37A01E 5 Bytes JMP 01DF1733
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!PeekMessageA 7E37A340 5 Bytes JMP 01DEFAE7
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetUpdateRect 7E37A8C9 5 Bytes JMP 01DE7EAB
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!CallWindowProcA 7E37A97D 5 Bytes JMP 01DF177C
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!DefWindowProcA 7E37C17E 5 Bytes JMP 01DF1543
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!SetCapture 7E37C35E 5 Bytes JMP 01DEF923
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!ReleaseCapture 7E37C37A 5 Bytes JMP 01DEF97D
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetDCEx 7E37C595 5 Bytes JMP 01DE7D92
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!RegisterClassA 7E37EA5E 5 Bytes JMP 01DF184E
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetUpdateRgn 7E37F5EC 5 Bytes JMP 01DE7F3E
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!DefFrameProcW 7E380833 5 Bytes JMP 01DF1615
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!DefMDIChildProcW 7E380A47 5 Bytes JMP 01DF16A7
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!GetClipboardData 7E380DBA 5 Bytes JMP 01DEB969
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!DefDlgProcA 7E38E577 5 Bytes JMP 01DF15CF
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!DefFrameProcA 7E39F965 5 Bytes JMP 01DF165E
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!DefMDIChildProcA 7E39F9B4 5 Bytes JMP 01DF16ED
.text C:\WINDOWS\system32\rundll32.exe[3776] USER32.dll!SetCursorPos 7E3A61B3 5 Bytes JMP 01DEF8E6
.text C:\WINDOWS\system32\rundll32.exe[3776] WS2_32.dll!closesocket 71A53E2B 5 Bytes JMP 01DF7C23
.text C:\WINDOWS\system32\rundll32.exe[3776] WS2_32.dll!send 71A54C27 5 Bytes JMP 01DF7C5B
.text C:\WINDOWS\system32\rundll32.exe[3776] WS2_32.dll!WSASend 71A568FA 5 Bytes JMP 01DF7C7C
.text C:\WINDOWS\system32\rundll32.exe[3776] CRYPT32.dll!PFXImportCertStore 77ADFF87 5 Bytes JMP 01DF4210
.text C:\WINDOWS\system32\rundll32.exe[3776] WININET.dll!InternetCloseHandle 771B4D94 5 Bytes JMP 01DF9DD4
.text C:\WINDOWS\system32\rundll32.exe[3776] WININET.dll!HttpSendRequestA 771B60A9 5 Bytes JMP 01DF9C48
.text C:\WINDOWS\system32\rundll32.exe[3776] WININET.dll!HttpQueryInfoA 771B79CA 5 Bytes JMP 01DF9ECC
.text C:\WINDOWS\system32\rundll32.exe[3776] WININET.dll!InternetReadFile 771B82F2 5 Bytes JMP 01DF9E17
.text C:\WINDOWS\system32\rundll32.exe[3776] WININET.dll!HttpSendRequestExW 771BE9E9 5 Bytes JMP 01DF9C9C
.text C:\WINDOWS\system32\rundll32.exe[3776] WININET.dll!InternetQueryDataAvailable 771C8A4F 5 Bytes JMP 01DF9EA0
.text C:\WINDOWS\system32\rundll32.exe[3776] WININET.dll!InternetReadFileExA 771E92D6 5 Bytes JMP 01DF9E56
.text C:\WINDOWS\system32\rundll32.exe[3776] WININET.dll!HttpSendRequestW 772031AC 5 Bytes JMP 01DF9BF4
.text C:\WINDOWS\system32\rundll32.exe[3776] WININET.dll!HttpSendRequestExA 772032B1 5 Bytes JMP 01DF9D38
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] ntdll.dll!NtCreateThread 7C90D1AE 5 Bytes JMP 00C0AD1C
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 00C0AF14
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] kernel32.dll!GetFileAttributesExW 7C811195 5 Bytes JMP 00C0AFB6
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!ReleaseDC 7E36869D 5 Bytes JMP 00C07E6B
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetDC 7E3686C7 5 Bytes JMP 00C07DED
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!TranslateMessage 7E368BF6 5 Bytes JMP 00C0B803
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetWindowDC 7E369021 5 Bytes JMP 00C07E2C
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetMessageW 7E3691C6 5 Bytes JMP 00C0FA6C
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!PeekMessageW 7E36929B 5 Bytes JMP 00C0FABC
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetCapture 7E3694DA 5 Bytes JMP 00C0F9CD
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!RegisterClassW 7E36A39A 5 Bytes JMP 00C11801
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!RegisterClassExW 7E36AF7F 5 Bytes JMP 00C1189B
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!OpenInputDesktop 7E36ECA3 5 Bytes JMP 00C1148F
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!SwitchDesktop 7E36FE6E 5 Bytes JMP 00C114DF
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!DefDlgProcW 7E373D3A 5 Bytes JMP 00C11589
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetMessageA 7E37772B 5 Bytes JMP 00C0FA94
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!RegisterClassExA 7E377C39 5 Bytes JMP 00C118ED
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!DefWindowProcW 7E378D20 5 Bytes JMP 00C114FD
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!BeginPaint 7E378FE9 5 Bytes JMP 00C07CE2
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!EndPaint 7E378FFD 5 Bytes JMP 00C07D52
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetCursorPos 7E37974E 5 Bytes JMP 00C0F89F
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetMessagePos 7E37996C 5 Bytes JMP 00C0F86D
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!CallWindowProcW 7E37A01E 5 Bytes JMP 00C11733
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!PeekMessageA 7E37A340 5 Bytes JMP 00C0FAE7
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetUpdateRect 7E37A8C9 5 Bytes JMP 00C07EAB
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!CallWindowProcA 7E37A97D 5 Bytes JMP 00C1177C
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!DefWindowProcA 7E37C17E 5 Bytes JMP 00C11543
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!SetCapture 7E37C35E 5 Bytes JMP 00C0F923
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!ReleaseCapture 7E37C37A 5 Bytes JMP 00C0F97D
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetDCEx 7E37C595 5 Bytes JMP 00C07D92
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!RegisterClassA 7E37EA5E 5 Bytes JMP 00C1184E
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetUpdateRgn 7E37F5EC 5 Bytes JMP 00C07F3E
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!DefFrameProcW 7E380833 5 Bytes JMP 00C11615
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!DefMDIChildProcW 7E380A47 5 Bytes JMP 00C116A7
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!GetClipboardData 7E380DBA 5 Bytes JMP 00C0B969
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!DefDlgProcA 7E38E577 5 Bytes JMP 00C115CF
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!DefFrameProcA 7E39F965 5 Bytes JMP 00C1165E
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!DefMDIChildProcA 7E39F9B4 5 Bytes JMP 00C116ED
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] USER32.dll!SetCursorPos 7E3A61B3 5 Bytes JMP 00C0F8E6
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WS2_32.dll!closesocket 71A53E2B 5 Bytes JMP 00C17C23
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WS2_32.dll!send 71A54C27 5 Bytes JMP 00C17C5B
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WS2_32.dll!WSASend 71A568FA 5 Bytes JMP 00C17C7C
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] CRYPT32.dll!PFXImportCertStore 77ADFF87 5 Bytes JMP 00C14210
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WININET.dll!InternetCloseHandle 771B4D94 5 Bytes JMP 00C19DD4
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WININET.dll!HttpSendRequestA 771B60A9 5 Bytes JMP 00C19C48
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WININET.dll!HttpQueryInfoA 771B79CA 5 Bytes JMP 00C19ECC
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WININET.dll!InternetReadFile 771B82F2 5 Bytes JMP 00C19E17
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WININET.dll!HttpSendRequestExW 771BE9E9 5 Bytes JMP 00C19C9C
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WININET.dll!InternetQueryDataAvailable 771C8A4F 5 Bytes JMP 00C19EA0
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WININET.dll!InternetReadFileExA 771E92D6 5 Bytes JMP 00C19E56
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WININET.dll!HttpSendRequestW 772031AC 5 Bytes JMP 00C19BF4
.text C:\Program Files\BitTorrent\BitTorrent.exe[3808] WININET.dll!HttpSendRequestExA 772032B1 5 Bytes JMP 00C19D38

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA96C4] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA96C4] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA96C4] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [6BFA963D] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6BFA96C4] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA96C4] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [6BFA963D] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA96C4] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [6BFA963D] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\psapi.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\psapi.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!LoadLibraryW] [6BFA95BC] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!LoadLibraryExA] [6BFA963D] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!LoadLibraryA] [6BFA953B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)
IAT C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[1900] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA974B] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL Inc.)

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET)
AttachedDevice \Driver\Tcpip \Device\Ip epfwtdi.sys (Eset Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdi.sys (Eset Personal Firewall TDI filter/ESET)

Device \Driver\prodrv06 \Device\ProDrv06 E1D428F0
Device \Driver\atapi \Device\Ide\IdePort0 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\atapi \Device\Ide\IdePort1 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\prohlp02 \Device\ProHlp02 E196E100

AttachedDevice \Driver\Tcpip \Device\Udp epfwtdi.sys (Eset Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\RawIp epfwtdi.sys (Eset Personal Firewall TDI filter/ESET)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x30 0xAC 0x2A 0x20 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 1
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x4E 0xF8 0xB5 0x08 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xEB 0xE5 0x69 0x75 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x2E 0x97 0x88 0x64 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x8A 0xEE 0xF1 0xEF ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42@khjeh 0x9A 0x85 0xE3 0xCC ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x30 0xAC 0x2A 0x20 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x4E 0xF8 0xB5 0x08 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xEB 0xE5 0x69 0x75 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xD2 0xA9 0xC3 0x34 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x8A 0xEE 0xF1 0xEF ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42@khjeh 0x9A 0x85 0xE3 0xCC ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x30 0xAC 0x2A 0x20 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 1
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x4E 0xF8 0xB5 0x08 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xEB 0xE5 0x69 0x75 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xD2 0xA9 0xC3 0x34 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x8A 0xEE 0xF1 0xEF ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42@khjeh 0x9A 0x85 0xE3 0xCC ...
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@cd042efbbd7f7af1647644e76e06692b 0xC8 0x28 0x51 0xAF ...
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@bca643cdc5c2726b20d2ecedcc62c59b 0x71 0x3B 0x04 0x66 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@2c81e34222e8052573023a60d06dd016 0xFF 0x7C 0x85 0xE0 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@2582ae41fb52324423be06337561aa48 0x6B 0x65 0x49 0x6A ...
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@caaeda5fd7a9ed7697d9686d4b818472 0xCD 0x44 0xCD 0xB9 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@a4a1bcf2cc2b8bc3716b74b2b4522f5d 0xDF 0x20 0x58 0x62 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@4d370831d2c43cd13623e232fed27b7b 0x97 0x20 0x4E 0x9A ...
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@1d68fe701cdea33e477eb204b76f993d 0x83 0x6C 0x56 0x8B ...
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@1fac81b91d8e3c5aa4b0a51804d844a3 0xF6 0x0F 0x4E 0x58 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@f5f62a6129303efb32fbe080bb27835b 0xB1 0xCD 0x45 0x5A ...
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@fd4e2e1a3940b94dceb5a6a021f2e3c6 0xE3 0x0E 0x66 0xD5 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@8a8aec57dd6508a385616fbc86791ec2 0xFA 0xEA 0x66 0x7F ...

---- EOF - GMER 1.0.15 ----

Otl:

SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 146,48 Gb Total Space | 19,48 Gb Free Space | 13,30% Space Free | Partition Type: NTFS
Drive D: | 117,19 Gb Total Space | 22,33 Gb Free Space | 19,06% Space Free | Partition Type: NTFS
Drive E: | 108,93 Gb Total Space | 22,20 Gb Free Space | 20,38% Space Free | Partition Type: NTFS
Drive F: | 3,20 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: DOMINIK-D75A2EF | User Name: Dominik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011-09-14 13:54:12 | 000,140,952 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.69\GoogleCrashHandler.exe
PRC - [2011-09-13 18:08:12 | 003,077,528 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
PRC - [2011-09-12 23:25:02 | 000,581,632 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Dominik\Moje dokumenty\Pobieranie\OTL.exe
PRC - [2011-09-07 13:36:42 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011-08-23 09:55:32 | 006,364,426 | ---- | M] () -- E:\Kopia metek priv\metin2mod_2011sf.exe
PRC - [2011-08-15 16:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2011-08-02 09:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2010-03-10 18:43:00 | 000,191,008 | ---- | M] (INCA Internet Co., Ltd.) -- C:\WINDOWS\system32\npkcmsvc.exe
PRC - [2009-10-07 09:16:50 | 000,472,280 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2009-10-07 09:15:42 | 001,461,080 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2009-09-28 09:42:50 | 000,109,056 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-11-01 14:25:20 | 002,165,272 | ---- | M] (Palit Microsystems, Inc.) -- C:\Program Files\VDOTool\TBPANEL.exe
PRC - [2006-10-23 14:50:35 | 000,046,640 | R--- | M] (AOL LLC) -- C:\Program Files\Common Files\aol\acs\AOLacsd.exe


========== Modules (No Company Name) ==========

MOD - [2011-09-13 18:08:12 | 003,077,528 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
MOD - [2011-09-07 13:36:40 | 001,846,232 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011-08-23 09:55:32 | 006,364,426 | ---- | M] () -- E:\Kopia metek priv\metin2mod_2011sf.exe
MOD - [2011-08-15 18:56:30 | 000,083,456 | ---- | M] () -- E:\Kopia metek priv\miles\mssa3d.m3d
MOD - [2011-08-15 18:56:30 | 000,070,656 | ---- | M] () -- E:\Kopia metek priv\miles\mssds3d.m3d
MOD - [2011-08-03 03:16:31 | 003,542,616 | ---- | M] () -- c:\Program Files\Common Files\Akamai\netsession_win_2da1ebd.dll
MOD - [2011-04-11 13:22:56 | 001,806,336 | ---- | M] () -- E:\Kopia metek priv\SpeedTreeRT.dll
MOD - [2011-04-11 13:22:56 | 000,349,696 | ---- | M] () -- E:\Kopia metek priv\MSS32.DLL
MOD - [2011-04-11 13:15:58 | 000,354,816 | ---- | M] () -- E:\Kopia metek priv\miles\mssrsx.m3d
MOD - [2011-04-11 13:15:58 | 000,197,120 | ---- | M] () -- E:\Kopia metek priv\miles\mssvoice.asi
MOD - [2011-04-11 13:15:58 | 000,125,952 | ---- | M] () -- E:\Kopia metek priv\miles\mssmp3.asi
MOD - [2011-04-11 13:15:58 | 000,103,424 | ---- | M] () -- E:\Kopia metek priv\miles\msseax.m3d
MOD - [2011-04-11 13:15:58 | 000,093,696 | ---- | M] () -- E:\Kopia metek priv\miles\mssdsp.flt
MOD - [2011-04-11 13:15:58 | 000,080,896 | ---- | M] () -- E:\Kopia metek priv\miles\mssdx7.m3d
MOD - [2011-04-11 13:15:58 | 000,067,072 | ---- | M] () -- E:\Kopia metek priv\miles\msssoft.m3d
MOD - [2010-08-26 01:12:26 | 000,555,624 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\nView\nvShell.dll
MOD - [2010-08-26 01:12:24 | 002,459,240 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\nView\nView.dll
MOD - [2010-07-14 10:00:00 | 003,834,880 | ---- | M] () -- C:\Program Files\K-Lite Codec Pack\ffdshow\ffdshow.ax
MOD - [2009-02-27 20:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL
MOD - [2009-02-11 01:12:22 | 000,675,840 | ---- | M] () -- C:\WINDOWS\system32\ac3filter.ax
MOD - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [1998-10-31 05:55:56 | 000,005,120 | ---- | M] () -- C:\Program Files\VDOTool\TBMANAGE.DLL


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (StyleXPService)
SRV - [2011-08-15 16:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2011-08-03 03:16:31 | 003,542,616 | ---- | M] () [Auto | Running] -- c:\Program Files\Common Files\Akamai\netsession_win_2da1ebd.dll -- (Akamai)
SRV - [2011-06-08 13:02:00 | 000,633,856 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010-03-10 18:43:00 | 000,191,008 | ---- | M] (INCA Internet Co., Ltd.) [Auto | Running] -- C:\WINDOWS\system32\npkcmsvc.exe -- (npkcmsvc)
SRV - [2010-03-03 00:23:00 | 003,760,184 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2009-10-07 09:21:14 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009-10-07 09:16:50 | 000,472,280 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2009-09-28 09:42:50 | 000,109,056 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2009-07-26 06:43:14 | 000,025,832 | ---- | M] (BioWare) [On_Demand | Stopped] -- E:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe -- (DAUpdaterSvc)
SRV - [2006-10-23 14:50:35 | 000,046,640 | R--- | M] (AOL LLC) [Auto | Running] -- C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe -- (AOL ACS)


========== Driver Services (SafeList) ==========

DRV - [2011-09-17 19:20:31 | 000,140,496 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2011-09-13 17:36:26 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011-05-18 10:12:38 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2011-05-18 10:12:36 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2011-05-18 10:12:32 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2011-05-18 10:12:28 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010-01-27 04:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
DRV - [2009-11-12 23:42:16 | 000,032,768 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\taphss.sys -- (taphss)
DRV - [2009-10-30 16:57:52 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2009-10-30 16:57:51 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009-10-07 09:18:34 | 000,055,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2009-10-07 09:18:34 | 000,032,072 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009-10-07 09:18:30 | 000,073,760 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw)
DRV - [2009-10-07 09:12:22 | 000,054,184 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\easdrv.sys -- (easdrv)
DRV - [2009-10-07 09:11:10 | 000,040,824 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009-09-23 10:41:58 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009-08-22 20:25:00 | 000,009,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys -- (RivaTuner32)
DRV - [2009-05-25 14:35:00 | 000,116,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1029unic.sys -- (s1029unic) Sony Ericsson Device 1029 USB Ethernet Emulation (WDM)
DRV - [2009-05-25 14:34:56 | 000,122,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1029mdm.sys -- (s1029mdm)
DRV - [2009-05-25 14:34:56 | 000,090,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1029bus.sys -- (s1029bus) Sony Ericsson Device 1029 driver (WDM)
DRV - [2009-05-25 14:34:56 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1029mdfl.sys -- (s1029mdfl)
DRV - [2009-05-25 14:34:54 | 000,115,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1029mgmt.sys -- (s1029mgmt) Sony Ericsson Device 1029 USB WMC Device Management Drivers (WDM)
DRV - [2009-05-25 14:34:54 | 000,111,912 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1029obex.sys -- (s1029obex)
DRV - [2009-05-25 14:34:54 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1029nd5.sys -- (s1029nd5) Sony Ericsson Device 1029 USB Ethernet Emulation (NDIS)
DRV - [2009-04-15 14:53:20 | 000,043,424 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\npkcusb.sys -- (npkcusb)
DRV - [2009-03-04 16:32:14 | 000,033,824 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\oreans32.sys -- (oreans32)
DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-01-09 12:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2007-10-16 10:35:58 | 010,376,576 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3)
DRV - [2007-05-30 19:15:08 | 000,013,184 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter)
DRV - [2007-05-23 05:21:12 | 000,016,272 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btnetdrv.sys -- (BT)
DRV - [2007-05-23 05:20:58 | 000,036,496 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2007-05-11 04:10:50 | 000,034,704 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2007-03-16 11:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel)
DRV - [2007-03-16 11:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex)
DRV - [2007-03-05 07:00:04 | 000,027,792 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - [2007-03-05 06:56:18 | 000,035,600 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2007-03-05 06:55:12 | 000,020,880 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2007-03-05 06:53:18 | 000,044,304 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2007-03-05 06:52:18 | 000,034,448 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2006-12-14 10:44:06 | 000,085,120 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006-11-15 08:34:00 | 004,225,920 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006-11-10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2006-10-01 20:37:02 | 000,026,624 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tap0801.sys -- (tap0801)
DRV - [2006-05-31 13:18:30 | 000,029,184 | ---- | M] (http://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\libusb0.sys -- (libusb0)
DRV - [2006-04-04 09:15:28 | 000,189,568 | ---- | M] (Trident Multimedia Technologies Co.,Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TridVid.sys -- (TridVid) USB Hybrid TV Receiver (TM6000)
DRV - [2005-04-26 09:01:38 | 000,003,584 | ---- | M] (Trident Microsystem Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Triddev.sys -- (TridDev) USB Hybrid TV Device (TM6000)
DRV - [2004-11-25 18:36:06 | 000,077,248 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004-11-25 18:32:01 | 000,054,368 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2004-07-09 05:26:38 | 000,015,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)
DRV - [2003-12-01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003-09-06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2003-07-16 15:27:40 | 000,043,264 | R--- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2003-01-10 23:13:04 | 000,033,588 | R--- | M] (America Online, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wanatw4.sys -- (wanatw) WAN Miniport (ATW)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gazeta.pl/0,0.html?p=107
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - Reg Error: No CLSID value found. File not found

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - Reg Error: No CLSID value found. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 189.15.178.123:3128

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: "PHPNukeEN Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2086743&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.startup.homepage: "www.google.pl"
FF - prefs.js..extensions.enabledItems: {dd02a4eb-4afd-4d60-99d8-e67f964ca813}:2.5.6.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2086743&q="


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@gamersfirst.com/LiveLauncher: C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.1851.5542\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\@virtools.com/3DviaPlayer: C:\Program Files\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes)
FF - HKLM\Software\MozillaPlugins\@Webzen.com/NPGameWebStarter: C:\Program Files\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll (WEBZEN)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2011-07-16 20:14:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: D:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-09-07 13:36:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-08-07 19:42:39 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Dominik\Dane aplikacji\IDM\idmmzcc3

[2011-03-29 14:12:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Dominik\Dane aplikacji\Mozilla\Extensions
[2009-12-26 16:32:32 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Dominik\Dane aplikacji\Mozilla\Extensions\MediaCoder-MCEX
[2011-09-16 22:36:11 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Dominik\Dane aplikacji\Mozilla\Firefox\Profiles\p718kumt.default\extensions
[2011-08-19 11:38:05 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Dominik\Dane aplikacji\Mozilla\Firefox\Profiles\p718kumt.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010-01-20 13:14:14 | 000,000,921 | ---- | M] () -- C:\Documents and Settings\Dominik\Dane aplikacji\Mozilla\Firefox\Profiles\p718kumt.default\searchplugins\conduit.xml
[2011-08-07 19:42:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-03-18 21:17:19 | 000,000,000 | ---D | M] (PHPNukeEN Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\{dd02a4eb-4afd-4d60-99d8-e67f964ca813}
() (No name found) -- C:\DOCUMENTS AND SETTINGS\DOMINIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\P718KUMT.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\DOMINIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\P718KUMT.DEFAULT\EXTENSIONS\IPLEXTOALL@ALLPLAYER.ORG.XPI
[2009-10-24 17:07:00 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2009-09-07 22:15:25 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011-09-07 13:36:43 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011-02-10 16:45:50 | 000,180,896 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npVividasPlayer.dll
[2010-01-01 10:00:00 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2010-01-01 10:00:00 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2010-01-01 10:00:00 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2010-01-01 10:00:00 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2010-01-01 10:00:00 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-01-01 10:00:00 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2010-04-01 23:05:30 | 000,001,404 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 mynortonaccount.conxion.com
O1 - Hosts: 127.0.0.1 lcsitemain.conxion.com
O1 - Hosts: 127.0.0.1 lc1alt.symantec.com
O1 - Hosts: 127.0.0.1 lcsitemain.symantec.com
O1 - Hosts: 127.0.0.1 subsync.symantec.com
O1 - Hosts: 127.0.0.1 webact.symantec.com
O1 - Hosts: 127.0.0.1 www-secure.symantec.com
O1 - Hosts: 127.0.0.1 http://www.mynortonaccount.com
O1 - Hosts: 127.0.0.1 static3.cdn.ubi.com
O1 - Hosts: 127.0.0.1 ubisoft-orbit.s3.amazonaws.com
O1 - Hosts: 127.0.0.1 onlineconfigservice.ubi.com
O1 - Hosts: 127.0.0.1 orbitservice.ubi.com
O1 - Hosts: 127.0.0.1 ubisoft-orbit-savegames.s3.amazonaws.com
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - No CLSID value found.
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Dominik\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
O3: - HKCU\..\Toolbar\WebBrowser - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3: - HKCU\..\Toolbar\WebBrowser - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3: - HKCU\..\Toolbar\WebBrowser - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No CLSID value found.
O3: - HKCU\..\Toolbar\WebBrowser - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C3CD744D-2FAE-4640-8297-16B5DA423104} - No CLSID value found.
O3: - HKCU\..\Toolbar\WebBrowser - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3: - HKCU\..\Toolbar\WebBrowser - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe (Palit Microsystems, Inc.)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKCU..\Run: [{7647E26C-6B46-9B5C-6973-6670B2E0965E}] C:\Documents and Settings\Dominik\Dane aplikacji\Nukaus\ygzau.exe (Iffy Art Slew Arid Foray Guy)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - Startup: C:\Documents and Settings\Dominik\Menu Start\Programy\Autostart\BitTorrent.lnk = C:\Program Files\BitTorrent\BitTorrent.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Pobierz za pomocą Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm File not found
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} http://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab (System Requirements Lab Class)
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} http://www.acclaim.com/cabs/acclaim_v4.cab (GameLauncher Control)
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.53.0.cab (Battlefield Heroes Updater)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} http://update.nprotect.net/keycrypt/cabal/npkcx_inca.cab (NPKCX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.100.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5A4349B1-8288-46FB-934E-D1A1EDB0DA68}: DhcpNameServer = 192.168.100.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-04-25 12:51:52 | 000,046,809 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
O33 - MountPoints2\{60bc75c4-2715-11e0-8772-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{60bc75c4-2715-11e0-8772-00038a000015}\Shell\AutoRun\command - "" = F:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011-09-14 14:02:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\riotsGamesLogs
[2011-09-14 13:51:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Dane aplikacji\LolClient
[2011-09-13 23:54:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Riot Games
[2011-09-13 19:02:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Pulpit\LeagueOfLegends
[2011-09-13 17:36:26 | 000,232,512 | ---- | C] (DT Soft Ltd) -- C:\WINDOWS\System32\drivers\dtsoftbus01.sys
[2011-09-07 21:01:41 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2011-09-05 13:44:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Dane aplikacji\Nukaus
[2011-09-05 13:44:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Dane aplikacji\Lolu
[2011-09-05 13:43:53 | 000,067,072 | ---- | C] (Chick) -- C:\Documents and Settings\Dominik\arlxrhoj.exe
[2011-09-05 13:43:52 | 000,067,072 | ---- | C] (Chick) -- C:\WINDOWS\System32\arlxrhoj.exe
[2011-09-04 21:05:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Dane aplikacji\.minecraft
[2011-09-01 18:40:17 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Dominik\Dane aplikacji\SecuROM
[2011-09-01 18:25:20 | 000,000,000 | ---D | C] -- C:\Program Files\Electronic Arts
[2011-09-01 17:28:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Pulpit\Bad comopanu
[2011-09-01 11:47:20 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Dominik\Recent
[2011-08-31 23:23:15 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2011-08-31 18:31:02 | 000,000,000 | ---D | C] -- C:\paczka - dodatki_metin2_by_g-metin2.pl
[2011-08-31 18:29:33 | 000,000,000 | ---D | C] -- C:\dodatki_metin2_by_g-metin2.pl
[2011-08-30 21:49:15 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2011-08-30 21:49:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi
[2011-08-28 12:18:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Menu Start\Programy\TeamSpeak 3 Client
[2011-08-28 12:17:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\TeamSpeak 3 Client
[2011-08-26 20:30:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Menu Start\Programy\iMetin
[2011-08-26 20:30:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\iMetin
[2011-08-26 17:27:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Z8games
[2011-08-24 22:48:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Metin2
[2011-08-24 17:56:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Lavalys
[2011-08-21 02:02:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Dane aplikacji\TS3Client
[2011-08-21 02:02:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\TeamSpeak 3 Client
[2011-08-21 02:02:38 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2011-08-20 19:04:33 | 000,000,000 | ---D | C] -- C:\Program Files\Activision
[2011-08-19 23:34:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dominik\Menu Start\Programy\HiJackThis
[2011-08-19 23:34:46 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2011-08-19 00:42:10 | 000,000,000 | ---D | C] -- C:\Program Files\Tasker
[2011-08-19 00:42:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Tasker
[2011-07-26 12:40:59 | 000,566,784 | ---- | C] ( ) -- C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\jushed.exe
[2011-07-26 12:40:59 | 000,347,136 | ---- | C] (NirSoft) -- C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\nircmd.exe
[2011-07-26 12:40:58 | 007,987,953 | ---- | C] (CCCP Project ) -- C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\Codecs.exe
[2011-03-13 20:56:22 | 003,056,008 | ---- | C] (Ask) -- C:\Program Files\Common Files\AskToolbarInstaller.exe
[2009-07-18 17:48:36 | 000,155,648 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd3.dll
[2009-07-18 17:48:36 | 000,057,344 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll
[2009-07-18 17:48:36 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll
[2009-07-18 17:48:36 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\csnpstd3.dll
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011-09-17 19:31:41 | 000,000,558 | ---- | M] () -- C:\WINDOWS\DFC.INI
[2011-09-17 19:31:00 | 000,000,290 | -H-- | M] () -- C:\WINDOWS\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
[2011-09-17 19:31:00 | 000,000,256 | ---- | M] () -- C:\WINDOWS\tasks\rcxsrv.job
[2011-09-17 19:20:31 | 000,140,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2011-09-17 19:20:21 | 000,280,736 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2011-09-17 19:16:20 | 000,000,306 | -HS- | M] () -- C:\WINDOWS\tasks\PFOE.job
[2011-09-17 19:16:13 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-09-17 19:16:11 | 2147,012,608 | -HS- | M] () -- C:\hiberfil.sys
[2011-09-17 19:06:00 | 000,000,290 | -H-- | M] () -- C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2011-09-17 19:04:58 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011-09-17 18:59:00 | 000,001,140 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1177238915-1801674531-1003UA.job
[2011-09-17 15:34:40 | 000,280,736 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.ex0
[2011-09-17 13:59:00 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1177238915-1801674531-1003Core.job
[2011-09-14 00:02:04 | 000,000,807 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Graj w League of Legends.lnk
[2011-09-13 19:16:43 | 000,000,704 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty Modern Warfare 2 SP.lnk
[2011-09-13 19:16:43 | 000,000,704 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty Modern Warfare 2 MP.lnk
[2011-09-13 17:38:22 | 000,593,188 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-09-13 17:38:22 | 000,526,230 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-09-13 17:38:22 | 000,123,972 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-09-13 17:38:22 | 000,098,326 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-09-13 17:36:26 | 000,232,512 | ---- | M] (DT Soft Ltd) -- C:\WINDOWS\System32\drivers\dtsoftbus01.sys
[2011-09-13 17:36:18 | 000,001,613 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk
[2011-09-12 22:39:01 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\Dominik\Pulpit\HiJackThis.lnk
[2011-09-12 22:36:11 | 000,182,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndis.sys
[2011-09-12 22:35:51 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2011-09-12 20:12:33 | 000,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-09-09 11:12:03 | 000,602,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\crypt32.dll
[2011-09-08 12:37:48 | 000,000,573 | ---- | M] () -- C:\Documents and Settings\Dominik\Pulpit\Skrót do iMetin.exe.lnk
[2011-09-05 19:33:19 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-09-05 13:43:59 | 000,067,072 | ---- | M] (Chick) -- C:\WINDOWS\System32\arlxrhoj.exe
[2011-09-05 13:43:59 | 000,067,072 | ---- | M] (Chick) -- C:\Documents and Settings\Dominik\arlxrhoj.exe
[2011-09-01 18:39:04 | 000,138,056 | ---- | M] () -- C:\Documents and Settings\Dominik\Dane aplikacji\PnkBstrK.sys
[2011-09-01 18:38:32 | 002,434,856 | ---- | M] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2011-09-01 18:37:42 | 000,001,923 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Battlefield Bad Company 2.lnk
[2011-09-01 11:49:10 | 000,025,382 | ---- | M] () -- C:\Documents and Settings\Dominik\Moje dokumenty\cc_20110901_114903.reg
[2011-08-30 21:49:15 | 000,000,685 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\LogMeIn Hamachi.lnk
[2011-08-28 12:18:03 | 000,001,240 | ---- | M] () -- C:\Documents and Settings\Dominik\Pulpit\TeamSpeak 3 Client.lnk
[2011-08-26 17:39:01 | 000,000,556 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Metin2.lnk
[2011-08-24 17:56:15 | 000,000,767 | ---- | M] () -- C:\Documents and Settings\Dominik\Pulpit\EVEREST Home Edition.lnk
[2011-08-24 17:46:50 | 000,187,408 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-08-24 11:32:47 | 000,118,794 | ---- | M] () -- C:\Documents and Settings\Dominik\Moje dokumenty\cc_20110824_113239.reg
[2011-08-23 22:42:13 | 000,154,112 | ---- | M] () -- C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-08-23 11:36:33 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\Dominik\Pulpit\ALLPlayer V4.7.lnk
[2011-08-20 19:15:20 | 000,001,691 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty(R) 4 - Modern Warfare(TM) Wielu graczy.lnk
[2011-08-20 19:15:20 | 000,001,691 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty(R) 4 - Modern Warfare(TM) Jeden gracz.lnk
[2011-08-20 19:14:29 | 000,000,319 | ---- | M] () -- C:\WINDOWS\game.ini
[2011-08-19 00:43:26 | 000,000,720 | ---- | M] () -- C:\Documents and Settings\Dominik\Moje dokumenty\Task1.tsk
[2011-08-18 20:37:35 | 000,000,002 | ---- | M] () -- C:\Documents and Settings\All Users\timerxfile
[2011-08-18 20:37:35 | 000,000,002 | ---- | M] () -- C:\Documents and Settings\All Users\datesavefile
[2011-08-18 20:37:35 | 000,000,001 | ---- | M] () -- C:\Documents and Settings\All Users\varsavefile
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011-09-14 00:02:04 | 000,000,807 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Graj w League of Legends.lnk
[2011-09-13 19:16:43 | 000,000,704 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty Modern Warfare 2 SP.lnk
[2011-09-13 19:16:43 | 000,000,704 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty Modern Warfare 2 MP.lnk
[2011-09-13 17:36:17 | 000,001,613 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk
[2011-09-11 15:40:04 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2011-09-08 12:37:48 | 000,000,573 | ---- | C] () -- C:\Documents and Settings\Dominik\Pulpit\Skrót do iMetin.exe.lnk
[2011-09-01 18:38:32 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2011-09-01 18:37:42 | 000,001,923 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Battlefield Bad Company 2.lnk
[2011-09-01 11:49:05 | 000,025,382 | ---- | C] () -- C:\Documents and Settings\Dominik\Moje dokumenty\cc_20110901_114903.reg
[2011-09-01 00:18:49 | 000,153,454 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-329068152-1177238915-1801674531-1003-0.dat
[2011-09-01 00:18:48 | 000,153,454 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2011-08-30 21:49:15 | 000,000,685 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\LogMeIn Hamachi.lnk
[2011-08-28 12:18:03 | 000,001,240 | ---- | C] () -- C:\Documents and Settings\Dominik\Pulpit\TeamSpeak 3 Client.lnk
[2011-08-24 22:49:01 | 000,000,556 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Metin2.lnk
[2011-08-24 17:56:15 | 000,000,767 | ---- | C] () -- C:\Documents and Settings\Dominik\Pulpit\EVEREST Home Edition.lnk
[2011-08-24 11:32:41 | 000,118,794 | ---- | C] () -- C:\Documents and Settings\Dominik\Moje dokumenty\cc_20110824_113239.reg
[2011-08-23 11:36:33 | 000,000,694 | ---- | C] () -- C:\Documents and Settings\Dominik\Pulpit\ALLPlayer V4.7.lnk
[2011-08-20 19:15:20 | 000,001,691 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty(R) 4 - Modern Warfare(TM) Wielu graczy.lnk
[2011-08-20 19:15:20 | 000,001,691 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty(R) 4 - Modern Warfare(TM) Jeden gracz.lnk
[2011-08-19 23:34:47 | 000,002,447 | ---- | C] () -- C:\Documents and Settings\Dominik\Pulpit\HiJackThis.lnk
[2011-08-19 00:43:26 | 000,000,720 | ---- | C] () -- C:\Documents and Settings\Dominik\Moje dokumenty\Task1.tsk
[2011-07-26 12:40:59 | 000,004,768 | ---- | C] () -- C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\operaprefs.ini
[2011-06-25 11:36:17 | 000,000,558 | ---- | C] () -- C:\WINDOWS\DFC.INI
[2011-06-24 22:40:33 | 000,198,144 | RHS- | C] () -- C:\WINDOWS\System32\BASSMODY.dll
[2011-06-23 11:12:21 | 000,045,202 | ---- | C] () -- C:\Documents and Settings\Dominik\Dane aplikacji\room_v3.dat
[2011-04-24 16:24:32 | 000,280,736 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2011-04-12 17:42:34 | 000,009,728 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2011-04-08 13:28:58 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2011-03-14 00:03:54 | 000,694,528 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2011-03-13 20:56:23 | 000,444,283 | ---- | C] () -- C:\Program Files\Common Files\WinPcapNmap.exe
[2011-03-12 21:09:15 | 000,000,007 | ---- | C] () -- C:\WINDOWS\sbacknt.bin
[2011-03-11 20:02:52 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2011-01-31 18:58:28 | 000,000,319 | ---- | C] () -- C:\WINDOWS\game.ini
[2011-01-09 21:55:18 | 000,240,592 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011-01-09 21:55:15 | 000,240,592 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011-01-09 21:55:15 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011-01-09 21:54:56 | 002,293,194 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2011-01-03 19:15:06 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini
[2010-08-24 20:12:38 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-08-24 20:12:37 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010-08-24 20:12:28 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010-08-24 20:12:28 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-08-24 20:12:28 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010-08-24 20:12:19 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-08-16 21:37:24 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\AVERM.dll
[2010-08-16 21:37:24 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\AVEQT.dll
[2010-04-02 17:17:34 | 000,179,091 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2010-03-14 18:40:43 | 000,027,980 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010-03-07 20:42:45 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
[2010-01-27 04:09:02 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2010-01-16 01:05:55 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\ImageSearchDLL.dll
[2010-01-16 00:29:45 | 000,688,128 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2010-01-16 00:29:45 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2010-01-14 17:29:10 | 000,000,152 | ---- | C] () -- C:\WINDOWS\l33td.ini
[2009-12-30 17:04:02 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Lit.INI
[2009-12-26 18:28:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\WB.ini
[2009-12-19 20:24:42 | 002,395,944 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_heroes.exe
[2009-11-20 15:06:20 | 000,000,032 | ---- | C] () -- C:\WINDOWS\wowCP.ini
[2009-11-15 17:08:44 | 000,000,029 | ---- | C] () -- C:\WINDOWS\atid.ini
[2009-11-05 19:06:08 | 000,000,012 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2009-10-23 19:07:56 | 000,075,776 | ---- | C] () -- C:\WINDOWS\cadkasdeinst01e.exe
[2009-10-08 19:50:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\cd.dat
[2009-09-30 16:29:57 | 000,000,085 | -HS- | C] () -- C:\Documents and Settings\Dominik\Dane aplikacji\.zreglib
[2009-09-22 17:07:28 | 000,482,816 | ---- | C] () -- C:\WINDOWS\system32PFHC.exe
[2009-09-18 16:05:23 | 000,122,880 | ---- | C] () -- C:\WINDOWS\UnGins.exe
[2009-09-18 15:19:14 | 000,000,962 | ---- | C] () -- C:\WINDOWS\QIII.INI
[2009-08-31 17:24:58 | 000,000,002 | ---- | C] () -- C:\WINDOWS\pvpeformr.sys
[2009-08-19 20:39:25 | 000,000,074 | -H-- | C] () -- C:\WINDOWS\uce.dat
[2009-08-10 15:09:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\zSpy.INI
[2009-08-07 20:43:23 | 000,000,002 | ---- | C] () -- C:\WINDOWS\pvpeformr.dll
[2009-08-01 13:23:12 | 000,008,192 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2009-07-21 20:36:42 | 000,000,356 | ---- | C] () -- C:\WINDOWS\antexp.ini
[2009-07-18 17:48:40 | 000,270,336 | ---- | C] () -- C:\WINDOWS\tsnpstd3.exe
[2009-07-18 17:48:40 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snpstd3.ini
[2009-06-20 16:28:09 | 000,835,584 | ---- | C] () -- C:\WINDOWS\vsnpstd3.exe
[2009-06-06 13:54:00 | 000,000,192 | ---- | C] () -- C:\Documents and Settings\Dominik\Dane aplikacji\ftpset.dat
[2009-06-06 12:07:41 | 000,028,672 | ---- | C] () -- C:\WINDOWS\rcx2.dll
[2009-06-06 11:37:01 | 000,000,347 | ---- | C] () -- C:\WINDOWS\cpp.ini
[2009-05-27 15:03:43 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2009-05-26 16:35:56 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SETUP32.INI
[2009-05-20 20:11:39 | 000,402,944 | ---- | C] () -- C:\WINDOWS\system32AKV.exe
[2009-05-20 20:11:38 | 000,482,816 | ---- | C] () -- C:\WINDOWS\system32WHJO.exe
[2009-05-09 16:45:19 | 000,000,051 | ---- | C] () -- C:\WINDOWS\HUGHES.INI
[2009-04-21 17:02:48 | 000,281,760 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2009-04-21 17:02:48 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2009-03-21 17:54:09 | 000,000,375 | ---- | C] () -- C:\WINDOWS\wTRTv5.ini
[2009-03-04 16:32:14 | 000,033,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\oreans32.sys
[2008-12-17 18:43:46 | 000,589,824 | ---- | C] () -- C:\WINDOWS\System32\INICRYPTOSDK.dll
[2008-12-14 14:19:41 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2008-12-14 14:19:41 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2008-11-22 21:37:45 | 000,000,013 | -H-- | C] () -- C:\WINDOWS\c3hb.dat
[2008-11-14 18:56:11 | 000,140,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2008-11-14 18:56:11 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Dominik\Dane aplikacji\PnkBstrK.sys
[2008-11-14 18:55:38 | 000,682,280 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2008-11-14 18:55:38 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2008-11-12 21:32:17 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll
[2008-11-06 18:41:58 | 000,154,112 | ---- | C] () -- C:\Documents and Settings\Dominik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-11-06 15:56:47 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008-11-06 14:29:52 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008-11-06 14:06:00 | 000,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2008-11-06 14:06:00 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2008-11-06 14:04:48 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2008-11-06 13:52:34 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf07a.dat
[2008-11-06 13:36:34 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008-11-06 01:05:18 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2008-11-06 00:56:01 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008-11-06 00:52:10 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008-11-05 16:48:26 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008-11-05 16:47:59 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2008-11-05 16:47:57 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2008-11-05 16:47:32 | 000,187,408 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008-11-05 16:41:03 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat
[2008-07-20 13:07:52 | 004,107,582 | ---- | C] () -- C:\Program Files\back.bmp
[2008-04-15 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008-04-15 14:00:00 | 000,593,188 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2008-04-15 14:00:00 | 000,526,230 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008-04-15 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2008-04-15 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008-04-15 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008-04-15 14:00:00 | 000,123,972 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2008-04-15 14:00:00 | 000,098,326 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008-04-15 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008-04-15 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2008-04-15 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008-04-15 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008-04-15 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008-04-15 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2005-11-06 01:34:50 | 000,145,408 | ---- | C] () -- C:\WINDOWS\System32\Lame.exe
[2005-03-30 06:13:22 | 000,647,168 | ---- | C] () -- C:\WINDOWS\System32\pqdvdb.dll
[2004-09-30 14:19:56 | 000,000,836 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2002-10-03 14:42:27 | 000,000,034 | ---- | C] () -- C:\WINDOWS\Q3version.ini
[2002-01-04 11:58:52 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2002-01-04 11:57:56 | 000,004,514 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

========== Alternate Data Streams ==========

@Alternate Data Stream - 526 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:671329E4
@Alternate Data Stream - 130 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:B755D674
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:A9662AE0

< End of report >

Teraz Internet strasznie wolno chodzi , pomocy

Dodano Dzisiaj, 21:39:
Gmer: http://www.wklej.org/id/596068/

OTL:http://www.wklej.org/id/596072/
Teraz internet strasznie wolno mi chodzi pomocy (nie mam wirusa robilem skan nod32