Błędy systemowe i wszystko robi się klasyczne

**Posty:** 2 · przez **kuba32** 15 Cze 2009, 13:25

Witam, gdy włącze system przez jakies 2 min wszystko jest ok ale potem styl windowsa zmienia sie na klasyczny, nie moge odtworzyc zadnego dzwieku i wystakuje błąd "System windows musi być uruchomiony ponieważ usługa Program Uruchamiający proces servera DCOM Została nieoczekiwanie przerwana" i jest odliczanie do zamknięcia systemu. Wiele rzeczy też mi nie działa np. jak wlacze program hamachi i chce pograć z kolega w jakas gre multiplayer to sie nie moze ze mna polaczyc. Na początku myślałem że to wirus ale Avast nic nie wykrył. Dam tu logi z hijack this Z gory thx

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:02:49, on 2009-06-15 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe D:\Avast4\aswUpdSv.exe D:\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe D:\PC Tools Firewall Plus\FWService.exe D:\Mozilla Firefox\firefox.exe D:\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.entretieneteds.vze.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - (no file) O2 - BHO: TweakMASTER PRO Component - {7DAAC7DE-9EF0-4FF0-BFA5-AFF3E899054C} - D:\TweakMASTER\TweakBHO.dll O2 - BHO: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - d:\Program Files\ivo\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - (no file) O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O3 - Toolbar: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - d:\Program Files\ivo\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [TweakMASTER] "D:\TweakMASTER\TMTray.exe" O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [BootSkin Startup Jobs] "D:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-21-823518204-1645522239-1801674531-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?') O4 - HKUS\S-1-5-21-823518204-1645522239-1801674531-1004\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?') O4 - HKUS\S-1-5-21-823518204-1645522239-1801674531-1004\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User '?') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Add to &LinkFox - res://D:\TWEAKM~1\TweakBHO.dll/IESCRIPT O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - D:\program files\Ghost Navigator2_8_1\Ghost (file missing) O9 - Extra 'Tools' menuitem: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - D:\program files\Ghost Navigator2_8_1\Ghost (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1225455631865 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - D:\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - D:\Avast4\ashWebSv.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - D:\PC Tools Firewall Plus\FWService.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Radmin Server V3 (RServer3) - Famatech International Corp. - C:\WINDOWS\system32\rserver30\RServer3.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe -- End of file - 7350 bytes

**Posty:** 18165 · przez **wojtas** 15 Cze 2009, 21:35

daj loga z OTL

**Posty:** 2 · przez **kuba32** 16 Cze 2009, 21:22

Kod: Zaznacz wszystko: OTL logfile created on: 2009-06-16 21:21:02 - Run 1 OTL by OldTimer - Version 2.1.1.0 Folder = D:\Pobrane Pliki\Firefox Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,25 Gb Available Physical Memory | 62,40% Memory free 3,85 Gb Paging File | 3,28 Gb Available in Paging File | 85,29% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 32,23 Gb Free Space | 66,01% Space Free | Partition Type: NTFS Drive D: | 97,65 Gb Total Space | 13,24 Gb Free Space | 13,55% Space Free | Partition Type: NTFS Drive E: | 151,60 Gb Total Space | 151,53 Gb Free Space | 99,95% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ADMIN-3F82E5F85 Current User Name: Admin Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Output = Standard File Age = 30 Days Company Name Whitelist: On [color=orange]========== Processes (SafeList) ==========[/color] PRC - [2008-07-19 17:25:06 | 00,016,056 | ---- | M] (ALWIL Software) -- D:\Avast4\aswUpdSv.exe PRC - [2008-07-19 17:38:28 | 00,147,640 | ---- | M] (ALWIL Software) -- D:\Avast4\ashServ.exe PRC - [2008-04-15 14:00:00 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2008-07-03 10:51:28 | 16,876,032 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE PRC - [2008-06-18 12:01:56 | 00,077,824 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2006-11-27 16:19:10 | 01,582,616 | ---- | M] (Hagel Technologies Ltd) -- C:\Program Files\DU Meter\DUMeter.exe PRC - [2009-03-09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2008-12-07 00:21:20 | 02,387,968 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe PRC - [2008-04-14 23:51:32 | 01,695,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2008-12-07 00:28:44 | 00,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe PRC - [2008-01-09 11:51:52 | 00,155,716 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe PRC - [2008-12-11 17:58:44 | 00,146,800 | ---- | M] (PC Tools) -- D:\PC Tools Firewall Plus\FWService.exe PRC - [2009-04-21 14:39:16 | 24,264,488 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe PRC - [2009-04-21 14:39:16 | 00,077,360 | R--- | M] (Skype Technologies) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe PRC - [2009-04-21 22:23:08 | 01,070,000 | ---- | M] () -- D:\program files\newlongju\M2 MultiversionHack by banjo1 v3.87.exe PRC - [2009-01-31 10:42:08 | 01,160,192 | ---- | M] () -- D:\program files\newlongju\metin2.bin PRC - [2009-06-12 22:37:38 | 00,307,704 | ---- | M] (Mozilla Corporation) -- D:\Mozilla Firefox\firefox.exe PRC - [2009-06-16 21:20:53 | 00,501,760 | ---- | M] (OldTimer Tools) -- D:\Pobrane Pliki\Firefox\OTL.exe [color=orange]========== Win32 Services (SafeList) ==========[/color] SRV - [2007-10-24 02:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2008-07-19 17:25:06 | 00,016,056 | ---- | M] (ALWIL Software) -- D:\Avast4\aswUpdSv.exe -- (aswUpdSv [Auto | Running]) SRV - [2008-07-19 17:38:28 | 00,147,640 | ---- | M] (ALWIL Software) -- D:\Avast4\ashServ.exe -- (avast! Antivirus [Auto | Running]) SRV - [2008-07-19 17:38:04 | 00,250,040 | ---- | M] (ALWIL Software) -- D:\Avast4\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Stopped]) SRV - [2008-07-23 17:25:45 | 00,348,344 | ---- | M] (ALWIL Software) -- D:\Avast4\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Stopped]) SRV - [2007-10-24 02:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-04-15 14:00:00 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Stopped]) SRV - [2004-10-22 03:24:18 | 00,073,728 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped]) SRV - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2008-12-07 00:28:44 | 00,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe -- (LightScribeService [Auto | Running]) SRV - [2007-06-27 19:04:00 | 00,279,848 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Stopped]) SRV - [2008-01-09 11:51:52 | 00,155,716 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc [Auto | Running]) SRV - [2008-12-11 17:58:44 | 00,146,800 | ---- | M] (PC Tools) -- D:\PC Tools Firewall Plus\FWService.exe -- (PCToolsFirewallPlus [Auto | Running]) SRV - [2007-05-14 04:54:36 | 00,272,024 | ---- | M] () -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe -- (RichVideo [Auto | Stopped]) SRV - [2008-04-24 08:44:26 | 01,238,344 | ---- | M] (Famatech International Corp.) -- C:\WINDOWS\system32\rserver30\RServer3.exe -- (RServer3 [On_Demand | Stopped]) SRV - [2009-05-27 17:52:52 | 00,126,976 | ---- | M] () -- C:\WINDOWS\system32\UAService7.exe -- (UserAccess7 [Auto | Stopped]) SRV - [2006-12-01 12:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [color=orange]========== Driver Services (SafeList) ==========[/color] DRV - [2008-07-19 17:32:15 | 00,026,944 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4 [System | Running]) DRV - [2006-07-02 00:32:26 | 00,043,520 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\system32\DRIVERS\AmdK8.sys -- (AmdK8 [System | Running]) DRV - [2008-07-19 17:37:42 | 00,020,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys -- (aswFsBlk [Auto | Running]) DRV - [2008-07-19 17:37:21 | 00,094,416 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2 [Auto | Running]) DRV - [2008-07-19 17:33:42 | 00,023,152 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr [On_Demand | Stopped]) DRV - [2008-07-19 17:35:18 | 00,078,416 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP [System | Running]) DRV - [2008-07-19 17:32:36 | 00,042,912 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi [System | Running]) DRV - [2009-02-27 11:44:09 | 00,278,984 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\atksgt.sys -- (atksgt [Auto | Running]) DRV - [2008-04-15 14:00:00 | 00,004,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\beep.sys -- (Beep [System | Stopped]) DRV - [2009-06-09 12:06:22 | 00,163,712 | ---- | M] () -- C:\WINDOWS\System32\drivers\vidstub.sys -- (BootScreen [Boot | Stopped]) DRV - [2008-10-31 14:02:41 | 00,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys -- (gdrv [On_Demand | Stopped]) DRV - [2009-02-28 18:12:36 | 00,025,280 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\system32\DRIVERS\hamachi.sys -- (hamachi [On_Demand | Running]) DRV - [2008-04-15 14:00:00 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running]) DRV - [2008-07-03 11:03:14 | 04,745,216 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running]) DRV - [2008-11-13 20:26:51 | 00,018,048 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\lirsgt.sys -- (lirsgt [Auto | Running]) DRV - [2006-11-01 06:01:56 | 00,003,328 | ---- | M] (Famatech International Corp.) -- C:\WINDOWS\system32\DRIVERS\rminiv3.sys -- (mirrorv3 [On_Demand | Running]) DRV - [2008-01-09 11:51:52 | 07,077,344 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running]) DRV - [2009-05-15 16:10:46 | 00,047,360 | ---- | M] (VSO Software) -- C:\WINDOWS\System32\Drivers\pcouffin.sys -- (pcouffin [On_Demand | Running]) DRV - [2008-12-11 13:32:18 | 00,073,840 | ---- | M] (PC Tools) -- C:\WINDOWS\system32\drivers\PCTAppEvent.sys -- (PCTAppEvent [Auto | Running]) DRV - [2008-12-11 09:38:22 | 00,159,600 | ---- | M] (PC Tools) -- C:\WINDOWS\system32\drivers\pctgntdi.sys -- (pctgntdi [System | Running]) DRV - [2008-12-11 18:01:04 | 00,095,640 | ---- | M] (PC Tools) -- C:\WINDOWS\system32\drivers\pctplfw.sys -- (pctplfw [On_Demand | Running]) DRV - [2009-06-08 23:25:05 | 00,033,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\pel3eff.sys -- (pel3eff [System | Stopped]) DRV - [2008-04-15 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2008-11-21 23:47:48 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-04-24 08:49:26 | 00,045,848 | ---- | M] (Famatech International Corp.) -- C:\WINDOWS\system32\rserver30\raddrvv3.sys -- (raddrvv3 [System | Running]) DRV - [2008-01-04 08:10:16 | 00,105,856 | R--- | M] (Realtek Semiconductor Corporation ) -- C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys -- (RTLE8023xp [On_Demand | Running]) DRV - [2008-04-15 14:00:00 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2008-09-22 13:29:18 | 00,097,408 | ---- | M] (PC Tools) -- C:\WINDOWS\system32\DRIVERS\pctfw.sys -- (SFilter [On_Demand | Running]) DRV - [2009-02-26 18:02:54 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) [color=orange]========== Standard Registry (SafeList) ==========[/color] [color=orange]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.entretieneteds.vze.com IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=orange]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/firefox?client=firefox-a&rls=org.mozilla:pl:official" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.0.2 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {3713a489-0634-4472-8456-dc7abd7eba00}:1.2.2 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.11 FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-03-04 16:11:05 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock\Extensions\\Plugins: D:\PROGRAM FILES\FLOCK\FLOCK\PLUGINS [2009-05-08 15:53:44 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Flock\Extensions\\Components: D:\PROGRAM FILES\FLOCK\FLOCK\COMPONENTS [2009-03-09 09:03:48 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\K-Meleon\Extensions\\Plugins: D:\PROGRAM FILES\K-MELEON\PLUGINS [2009-03-09 09:09:57 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\K-Meleon\Extensions\\Components: D:\PROGRAM FILES\K-MELEON\COMPONENTS [2009-03-09 09:10:03 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Components: D:\MOZILLA FIREFOX\COMPONENTS [2009-06-12 22:37:41 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Plugins: D:\MOZILLA FIREFOX\PLUGINS [2009-06-12 22:37:41 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\SeaMonkey 1.1.14\Extensions\\Components: D:\PROGRAM FILES\MOZILLA.ORG\SEAMONKEY\COMPONENTS [2009-03-09 09:01:24 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\SeaMonkey 1.1.14\Extensions\\Plugins: D:\PROGRAM FILES\MOZILLA.ORG\SEAMONKEY\PLUGINS [2009-03-09 09:00:18 | 00,000,000 | ---D | M] [2008-10-31 17:06:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Extensions [2008-10-31 17:06:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-06-14 21:14:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Firefox\Profiles\u1xbkd17.default\extensions [2009-02-04 20:46:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Firefox\Profiles\u1xbkd17.default\extensions\{3713a489-0634-4472-8456-dc7abd7eba00} [2009-04-16 14:30:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Firefox\Profiles\u1xbkd17.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009-05-08 15:53:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Firefox\Profiles\u1xbkd17.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2008-12-03 21:08:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Firefox\Profiles\u1xbkd17.default\extensions\video-dowloader@magic-imv.ro [2009-06-10 15:43:55 | 00,002,039 | ---- | M] () -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\FireFox\Profiles\u1xbkd17.default\searchplugins\torrentyorg.xml O1 HOSTS File: (686 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (no name) - {37B85A21-692B-4205-9CAD-2626E4993404} - Reg Error: Key error. File not found O2 - BHO: (TweakMASTER PRO Component) - {7DAAC7DE-9EF0-4FF0-BFA5-AFF3E899054C} - D:\TweakMASTER\TweakBHO.dll (Hagel Technologies Ltd) O2 - BHO: (Expressivo) - {85F685C3-20D9-4943-95E4-EB4224056C3F} - d:\Program Files\ivo\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll (IVO Software Sp. z o.o.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKLM\..\Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - Reg Error: Key error. File not found O3 - HKLM\..\Toolbar: (Expressivo) - {85F685C3-20D9-4943-95E4-EB4224056C3F} - d:\Program Files\ivo\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll (IVO Software Sp. z o.o.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - Reg Error: Key error. File not found O4 - HKLM..\Run: [AlcWzrd] ALCWZRD.EXE (RealTek Semicoductor Corp.) O4 - HKLM..\Run: [BootSkin Startup Jobs] "D:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs () O4 - HKLM..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe (Hagel Technologies Ltd) O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found O4 - HKLM..\Run: [RTHDCPL] RTHDCPL.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SoundMan] SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.) O4 - HKLM..\Run: [TweakMASTER] "D:\TweakMASTER\TMTray.exe" (Hagel Technologies Ltd) O4 - HKCU..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (Hewlett-Packard Company) O4 - HKCU..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0 O8 - Extra context menu item: Add to &LinkFox - res://D:\TWEAKM~1\TweakBHO.dll/IESCRIPT (Hagel Technologies Ltd) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - D:\program files\Ghost Navigator2_8_1\Ghost.exe (NetScop.Net) O9 - Extra 'Tools' menuitem : Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - D:\program files\Ghost Navigator2_8_1\Ghost.exe (NetScop.Net) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [NWLink IPX/SPX/NetBIOS Compatible Transport Protocol] - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1225455631865 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-10-31 20:55:53 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-01-13 15:06:32 | 00,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2009-01-17 17:35:06 | 00,000,000 | ---D | M] - D:\Auto Photo Editor -- [ NTFS ] O32 - AutoRun File - [2009-03-01 08:17:57 | 00,000,000 | ---D | M] - D:\Automap -- [ NTFS ] O32 - AutoRun File - [2009-01-13 15:06:32 | 00,000,000 | RHSD | M] - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2009-01-13 15:06:32 | 00,000,000 | RHSD | M] - E:\autorun.inf -- [ NTFS ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - * [2009-06-16 21:17:38 | 00,000,000 | ---D | M] [color=orange]========== Files/Folders - Created Within 30 Days ==========[/color] [1 C:\*.tmp files] [2 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] [2009-06-16 15:34:11 | 00,321,416 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\programtv[www.ALEJAJA.pl].zip [2009-06-16 14:50:13 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2009-06-16 14:50:13 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2009-06-16 14:50:13 | 00,155,136 | ---- | C] () -- C:\WINDOWS\PEV.exe [2009-06-16 14:50:13 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2009-06-16 14:50:13 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2009-06-16 14:50:13 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2009-06-16 14:50:13 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2009-06-16 14:50:13 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2009-06-16 14:49:46 | 00,396,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF9157.exe [2009-06-16 14:49:46 | 00,000,000 | --SD | C] -- C:\ComboFix [2009-06-16 14:49:05 | 00,396,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF9023.exe [2009-06-15 15:59:11 | 00,296,768 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\dlakazana.JPG [2009-06-15 00:25:58 | 00,224,038 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\dlaczarnejsuki.JPG [2009-06-14 21:54:12 | 00,000,548 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Cheat Engine.lnk [2009-06-14 21:54:11 | 01,970,176 | ---- | C] () -- C:\WINDOWS\System32\d3dx9.dll [2009-06-14 21:54:11 | 00,679,936 | ---- | C] (Generated by JEDI) -- C:\WINDOWS\System32\D3DX81ab.dll [2009-06-14 16:07:31 | 00,296,039 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\zalllllllllllllllllll.JPG [2009-06-14 00:45:17 | 00,657,642 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\damage_bullet.amxx [2009-06-14 00:44:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Moje dokumenty\addons [2009-06-14 00:21:56 | 03,669,911 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\addons.rar [2009-06-13 23:53:25 | 02,153,696 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\nemesis.mdl [2009-06-13 23:12:29 | 01,919,460 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\survivor.mdl [2009-06-13 22:51:46 | 00,022,073 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\saper.JPG [2009-06-13 11:50:40 | 00,396,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF12363.exe [2009-06-13 11:50:17 | 00,396,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF12285.exe [2009-06-12 22:35:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\WinRAR [2009-06-12 22:13:14 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2009-06-12 22:04:05 | 00,000,000 | ---D | C] -- C:\SDFix [2009-06-12 21:42:35 | 00,396,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF10034.exe [2009-06-12 21:42:34 | 00,000,000 | ---D | C] -- C:\Qoobox [2009-06-12 21:23:11 | 00,094,104 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\wpis rejestru z 12 czerwca 2009 roku tam sa lego star wars i jakies amx.reg [2009-06-12 21:21:35 | 00,000,000 | -HSD | C] -- C:\RECYCLER [2009-06-12 20:33:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Ustawienia lokalne\temp [2009-06-12 11:39:42 | 00,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2009-06-10 16:53:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Moje dokumenty\Pamela Call Recordings [2009-06-10 08:31:20 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\96684206.ini [2009-06-09 15:37:33 | 00,000,573 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\newlongju.lnk [2009-06-09 13:05:58 | 00,000,000 | ---D | C] -- C:\Program Files\Matrix_ks [2009-06-08 23:25:05 | 00,033,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\pel3eff.sys [2009-06-08 21:01:12 | 01,261,174 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\dsadsadasasdas.bmp [2009-06-08 20:42:29 | 00,049,448 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\6.JPG [2009-06-08 20:16:57 | 00,000,593 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Double Digger.lnk [2009-06-08 20:16:33 | 00,000,000 | ---D | C] -- C:\Program Files\ReflexiveArcade [2009-06-07 13:41:44 | 00,010,503 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\mapka.h3m [2009-06-04 22:26:28 | 00,006,852 | ---- | C] () -- C:\WINDOWS\System32\drivers\Vcs.sys [2009-06-04 22:12:06 | 00,000,781 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Voice Changer 7.0 Diamond.lnk [2009-06-04 22:09:34 | 17,311,657 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\vcs_diamond.exe [2009-06-04 22:08:14 | 00,000,700 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\DriverScanner.lnk [2009-06-04 22:08:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\DriverScanner [2009-06-04 22:08:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Uniblue [2009-06-04 22:06:50 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{66E2F539-12B6-4870-A500-7689CDE75C5E} [2009-06-04 21:29:01 | 03,168,568 | ---- | C] (Uniblue Systems Ltd. ) -- C:\Documents and Settings\Admin\Moje dokumenty\driverscanner.exe [2009-06-04 20:31:34 | 00,000,000 | ---D | C] -- C:\vcs5BGEffects [2009-06-04 20:31:33 | 00,000,000 | ---D | C] -- C:\vcs5core [2009-06-04 20:31:33 | 00,000,000 | ---D | C] -- C:\AV_LOGS [2009-06-02 19:07:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\teamspeak2 [2009-06-02 19:07:43 | 00,034,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lhacm.acm [2009-06-02 19:07:41 | 00,000,545 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Teamspeak 2 RC2.lnk [2009-06-01 18:15:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Audacity [2009-06-01 18:15:00 | 00,000,585 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Audacity 1.3 Beta (Unicode).lnk [2009-05-31 19:53:43 | 00,000,873 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom program LEGO Star Wars II.lnk [2009-05-31 14:18:41 | 00,000,355 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\hack_config.ini [2009-05-31 07:44:49 | 00,000,655 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\LEGO Star Wars.lnk [2009-05-31 04:25:39 | 00,000,000 | ---D | C] -- C:\WINDOWS\wb [2009-05-31 02:22:31 | 00,001,596 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\blablabla.lnk [2009-05-31 02:21:44 | 00,000,751 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Heroes of Might and Magic III - Złota Edycja.lnk [2009-05-30 23:25:52 | 00,015,206 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\Heroes_of_Might_ _Magic_III _Zlota_Edycja_[PL][Torrenty.org].torrent [2009-05-30 22:00:26 | 01,523,464 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\clip0007.avi [2009-05-30 21:56:41 | 00,000,746 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Expressivo.lnk [2009-05-30 21:56:22 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Admin\Moje dokumenty\Expressivo Podcasts [2009-05-30 21:56:22 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Admin\Moje dokumenty\Expressivo Documents [2009-05-30 21:56:22 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Expressivo [2009-05-30 21:42:38 | 00,033,009 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\2008-09-05_13 11 34.jpg [2009-05-30 21:21:45 | 00,214,852 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\bessz tytułu.JPG [2009-05-30 21:00:42 | 00,000,544 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\note.exe [2009-05-30 20:54:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Kopia hacki [2009-05-30 20:48:26 | 00,345,088 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Admin\Moje dokumenty\mspaint.exe [2009-05-30 20:08:09 | 00,214,844 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\bez tytułu.JPG [2009-05-30 19:36:45 | 00,004,575 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\twojastara.html [2009-05-30 18:33:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Radmin [2009-05-30 18:22:51 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\rserver30 [2009-05-30 17:12:36 | 00,000,536 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\MP3 Finder.lnk [2009-05-30 16:50:10 | 00,163,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\vidstub.sys [2009-05-30 16:50:10 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Stardock [2009-05-30 16:34:04 | 01,213,952 | ---- | C] (Karol Winnicki) -- C:\Documents and Settings\Admin\Pulpit\BESTplayer.exe [2009-05-30 16:33:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\BESTplayer [2009-05-29 10:58:59 | 03,980,288 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\LegoStarwars.exe [2009-05-29 10:58:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\lsw_1 [2009-05-29 10:58:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\lsw_0 [2009-05-27 17:52:52 | 00,126,976 | ---- | C] () -- C:\WINDOWS\System32\UAService7.exe [2009-05-27 15:14:57 | 00,021,473 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\doggie.JPG [2009-05-26 22:45:51 | 00,033,009 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\kalkulatory.jpg [2009-05-26 19:22:40 | 00,013,096 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\pldecal.wad [2009-05-18 08:10:05 | 00,000,610 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Notepad++.lnk [2009-05-18 08:10:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Notepad++ [2009-05-16 19:19:37 | 00,000,161 | ---- | C] () -- C:\WINDOWS\l33td.ini [2009-04-07 13:34:20 | 00,000,101 | ---- | C] () -- C:\WINDOWS\VSWizard.ini [2009-03-24 18:34:46 | 00,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll [2009-03-24 18:34:45 | 00,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll [2009-03-24 18:34:45 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll [2009-03-18 16:41:04 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2009-03-05 08:11:17 | 00,033,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\oreans32.sys [2009-02-26 17:24:05 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-01-14 19:21:38 | 00,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2009-01-01 18:22:11 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2008-11-21 23:47:52 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-11-21 23:45:16 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest [2008-11-21 23:45:16 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest [2008-11-21 23:44:16 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll [2008-11-13 20:26:52 | 00,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2008-11-13 20:26:51 | 00,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2008-10-31 14:46:50 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008-10-31 14:46:50 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2008-10-31 14:46:49 | 02,041,363 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll [2008-10-31 14:46:49 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-10-31 14:46:49 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008-10-31 14:46:48 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-10-31 14:46:48 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-05-26 23:22:36 | 00,016,222 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini [2008-05-26 23:22:34 | 00,021,728 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini [2008-05-26 23:22:32 | 00,016,164 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini [2008-04-15 14:00:00 | 00,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\beep.sys [2008-04-15 14:00:00 | 00,000,589 | ---- | C] () -- C:\WINDOWS\win.ini [2008-04-15 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2008-01-09 11:51:52 | 01,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2008-01-09 11:51:52 | 01,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2008-01-09 11:51:52 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2008-01-09 11:51:52 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2008-01-09 11:51:52 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2008-01-09 11:51:52 | 00,007,237 | ---- | C] () -- C:\WINDOWS\cadx2.ini [2006-05-03 00:38:24 | 00,000,748 | ---- | C] () -- C:\WINDOWS\SetBrowser.ini [2004-01-02 01:28:29 | 00,000,096 | ---- | C] () -- C:\WINDOWS\forevermopt.INI [2004-01-02 01:28:13 | 00,000,323 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2004-01-02 00:05:12 | 00,092,400 | ---- | C] () -- C:\WINDOWS\ktkm7.dll [2004-01-02 00:05:12 | 00,058,192 | ---- | C] () -- C:\WINDOWS\ktkm6.dll [2004-01-02 00:05:12 | 00,055,186 | ---- | C] () -- C:\WINDOWS\ktkm5.dll [2004-01-02 00:05:12 | 00,030,166 | ---- | C] () -- C:\WINDOWS\ktkm9.dll [2004-01-02 00:05:12 | 00,023,364 | ---- | C] () -- C:\WINDOWS\ktkm8.dll [2004-01-02 00:05:12 | 00,022,926 | ---- | C] () -- C:\WINDOWS\ktkm4.dll [2004-01-02 00:05:11 | 00,268,621 | ---- | C] () -- C:\WINDOWS\ktkm33.dll [2004-01-02 00:05:11 | 00,098,442 | ---- | C] () -- C:\WINDOWS\ktkm35.dll [2004-01-02 00:05:11 | 00,082,542 | ---- | C] () -- C:\WINDOWS\ktkm37.dll [2004-01-02 00:05:11 | 00,020,926 | ---- | C] () -- C:\WINDOWS\ktkm36.dll [2004-01-02 00:05:11 | 00,010,240 | ---- | C] () -- C:\WINDOWS\ktkm34.dll [2004-01-02 00:05:10 | 00,326,441 | ---- | C] () -- C:\WINDOWS\ktkm32.dll [2004-01-02 00:05:10 | 00,197,408 | ---- | C] () -- C:\WINDOWS\ktkm29.dll [2004-01-02 00:05:10 | 00,128,042 | ---- | C] () -- C:\WINDOWS\ktkm30.dll [2004-01-02 00:05:10 | 00,116,841 | ---- | C] () -- C:\WINDOWS\ktkm26.dll [2004-01-02 00:05:10 | 00,100,786 | ---- | C] () -- C:\WINDOWS\ktkm28.dll [2004-01-02 00:05:10 | 00,081,427 | ---- | C] () -- C:\WINDOWS\ktkm31.dll [2004-01-02 00:05:10 | 00,065,092 | ---- | C] () -- C:\WINDOWS\ktkm27.dll [2004-01-02 00:05:10 | 00,022,657 | ---- | C] () -- C:\WINDOWS\ktkm3.dll [2004-01-02 00:05:09 | 00,538,410 | ---- | C] () -- C:\WINDOWS\ktkm20.dll [2004-01-02 00:05:09 | 00,524,537 | ---- | C] () -- C:\WINDOWS\ktkm18.dll [2004-01-02 00:05:09 | 00,370,880 | ---- | C] () -- C:\WINDOWS\ktkm22.dll [2004-01-02 00:05:09 | 00,126,720 | ---- | C] () -- C:\WINDOWS\ktkm23.dll [2004-01-02 00:05:09 | 00,070,888 | ---- | C] () -- C:\WINDOWS\ktkm19.dll [2004-01-02 00:05:09 | 00,066,908 | ---- | C] () -- C:\WINDOWS\ktkm17.dll [2004-01-02 00:05:09 | 00,064,070 | ---- | C] () -- C:\WINDOWS\ktkm21.dll [2004-01-02 00:05:09 | 00,056,992 | ---- | C] () -- C:\WINDOWS\ktkm24.dll [2004-01-02 00:05:09 | 00,049,094 | ---- | C] () -- C:\WINDOWS\ktkm25.dll [2004-01-02 00:05:09 | 00,020,974 | ---- | C] () -- C:\WINDOWS\ktkm2.dll [2004-01-02 00:05:08 | 00,803,601 | ---- | C] () -- C:\WINDOWS\ktkm16.dll [2004-01-02 00:05:08 | 00,524,164 | ---- | C] () -- C:\WINDOWS\ktkm12.dll [2004-01-02 00:05:08 | 00,307,617 | ---- | C] () -- C:\WINDOWS\ktkm15.dll [2004-01-02 00:05:08 | 00,209,936 | ---- | C] () -- C:\WINDOWS\ktkm14.dll [2004-01-02 00:05:08 | 00,099,867 | ---- | C] () -- C:\WINDOWS\ktkm13.dll [2004-01-02 00:05:08 | 00,096,166 | ---- | C] () -- C:\WINDOWS\ktkm1.dll [2004-01-02 00:05:08 | 00,062,631 | ---- | C] () -- C:\WINDOWS\ktkm11.dll [2004-01-02 00:05:08 | 00,058,015 | ---- | C] () -- C:\WINDOWS\ktkm10.dll [color=orange]========== Files - Modified Within 30 Days ==========[/color] [1 C:\*.tmp files] [2 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] [2009-06-16 21:14:39 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-06-16 21:08:53 | 00,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2009-06-16 21:08:25 | 00,160,503 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2009-06-16 21:08:17 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\desktop.ini [2009-06-16 21:08:14 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-06-16 15:34:11 | 00,321,416 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\programtv[www.ALEJAJA.pl].zip [2009-06-16 14:49:42 | 00,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\CF9157.exe [2009-06-16 14:49:00 | 00,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\CF9023.exe [2009-06-15 21:57:15 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-06-15 15:59:17 | 00,318,464 | -HS- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\Thumbs.db [2009-06-15 15:59:12 | 00,296,768 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\dlakazana.JPG [2009-06-15 00:26:22 | 00,224,038 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\dlaczarnejsuki.JPG [2009-06-14 21:54:12 | 00,000,548 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Cheat Engine.lnk [2009-06-14 16:07:55 | 00,296,039 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\zalllllllllllllllllll.JPG [2009-06-14 14:30:18 | 00,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-06-14 00:45:33 | 00,657,642 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\damage_bullet.amxx [2009-06-14 00:28:49 | 03,669,911 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\addons.rar [2009-06-13 23:53:45 | 02,153,696 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\nemesis.mdl [2009-06-13 23:13:15 | 01,919,460 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\survivor.mdl [2009-06-13 22:51:47 | 00,022,073 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\saper.JPG [2009-06-13 11:50:36 | 00,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\CF12363.exe [2009-06-13 11:50:12 | 00,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\CF12285.exe [2009-06-12 22:16:31 | 00,000,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS [2009-06-12 22:14:47 | 00,534,002 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2009-06-12 22:14:47 | 00,435,816 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009-06-12 22:14:47 | 00,113,398 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2009-06-12 22:14:46 | 00,081,140 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009-06-12 22:14:46 | 00,003,922 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-06-12 21:42:30 | 00,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\CF10034.exe [2009-06-12 21:23:39 | 00,094,104 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\wpis rejestru z 12 czerwca 2009 roku tam sa lego star wars i jakies amx.reg [2009-06-12 20:32:21 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2009-06-12 15:59:44 | 00,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-823518204-1645522239-1801674531-1004.job [2009-06-12 11:39:42 | 00,000,118 | ---- | M] () -- C:\WINDOWS\System32\MRT.INI [2009-06-11 16:52:02 | 00,002,302 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Google Chrome.lnk [2009-06-10 08:32:55 | 00,000,355 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\hack_config.ini [2009-06-10 08:31:20 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\96684206.ini [2009-06-09 15:37:33 | 00,000,573 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\newlongju.lnk [2009-06-09 12:06:22 | 00,163,712 | ---- | M] () -- C:\WINDOWS\System32\drivers\vidstub.sys [2009-06-08 23:25:05 | 00,033,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\pel3eff.sys [2009-06-08 21:01:35 | 01,261,174 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\dsadsadasasdas.bmp [2009-06-08 20:42:30 | 00,049,448 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\6.JPG [2009-06-08 20:16:57 | 00,000,593 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Double Digger.lnk [2009-06-08 19:11:38 | 00,000,482 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Metin2 PL.lnk [2009-06-08 08:10:10 | 00,155,136 | ---- | M] () -- C:\WINDOWS\PEV.exe [2009-06-07 13:41:46 | 00,010,503 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\mapka.h3m [2009-06-04 22:12:07 | 00,000,781 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Voice Changer 7.0 Diamond.lnk [2009-06-04 22:09:34 | 17,311,657 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\vcs_diamond.exe [2009-06-04 22:08:14 | 00,000,700 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\DriverScanner.lnk [2009-06-04 21:29:02 | 03,168,568 | ---- | M] (Uniblue Systems Ltd. ) -- C:\Documents and Settings\Admin\Moje dokumenty\driverscanner.exe [2009-06-02 19:07:43 | 00,034,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\lhacm.acm [2009-06-02 19:07:41 | 00,000,545 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Teamspeak 2 RC2.lnk [2009-06-01 18:51:12 | 23,635,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe [2009-06-01 18:15:00 | 00,000,585 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Audacity 1.3 Beta (Unicode).lnk [2009-05-31 23:35:05 | 00,033,009 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\kalkulatory.jpg [2009-05-31 23:27:29 | 00,021,473 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\doggie.JPG [2009-05-31 23:25:45 | 00,033,009 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\2008-09-05_13 11 34.jpg [2009-05-31 19:54:39 | 00,000,873 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom program LEGO Star Wars II.lnk [2009-05-31 07:44:49 | 00,000,655 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\LEGO Star Wars.lnk [2009-05-31 02:29:06 | 00,000,751 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Heroes of Might and Magic III - Złota Edycja.lnk [2009-05-31 02:22:31 | 00,001,596 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\blablabla.lnk [2009-05-30 23:25:52 | 00,015,206 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\Heroes_of_Might_ _Magic_III _Zlota_Edycja_[PL][Torrenty.org].torrent [2009-05-30 22:08:25 | 00,000,587 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Counter Strike 1.6 Non Steam.lnk [2009-05-30 22:00:39 | 01,523,464 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\clip0007.avi [2009-05-30 21:56:41 | 00,000,746 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Expressivo.lnk [2009-05-30 21:22:08 | 00,214,852 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\bessz tytułu.JPG [2009-05-30 21:20:35 | 00,345,088 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Admin\Moje dokumenty\mspaint.exe [2009-05-30 21:18:23 | 00,000,589 | ---- | M] () -- C:\WINDOWS\win.ini [2009-05-30 21:03:33 | 00,000,544 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\note.exe [2009-05-30 20:10:09 | 00,214,844 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\bez tytułu.JPG [2009-05-30 19:36:45 | 00,004,575 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\twojastara.html [2009-05-30 17:12:36 | 00,000,536 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\MP3 Finder.lnk [2009-05-30 16:33:41 | 01,213,952 | ---- | M] (Karol Winnicki) -- C:\Documents and Settings\Admin\Pulpit\BESTplayer.exe [2009-05-30 16:16:03 | 00,000,323 | ---- | M] () -- C:\WINDOWS\mafosav.INI [2009-05-30 16:14:44 | 00,000,096 | ---- | M] () -- C:\WINDOWS\forevermopt.INI [2009-05-27 17:52:52 | 00,126,976 | ---- | M] () -- C:\WINDOWS\System32\UAService7.exe [2009-05-26 19:23:20 | 00,013,096 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\pldecal.wad [2009-05-18 08:10:05 | 00,000,610 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Notepad++.lnk [color=orange]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 160 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C31F31E6 @Alternate Data Stream - 143 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:8178B8D6 @Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2 @Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:661DFA1C < End of report >

**Posty:** 18165 · przez **wojtas** 17 Cze 2009, 00:21

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (no name) - {37B85A21-692B-4205-9CAD-2626E4993404} - Reg Error: Key error. File not found
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - Reg Error: Key error. File not found
O32 - AutoRun File - [2009-01-13 15:06:32 | 00,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-01-13 15:06:32 | 00,000,000 | RHSD | M] - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-01-13 15:06:32 | 00,000,000 | RHSD | M] - E:\autorun.inf -- [ NTFS ]

:Files
C:\Program Files\AskBarDis

:Reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. Wykonaj skan Dr. Web CureIt
5. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym (skasuj co znajdzie)

Malwarebytes Anti-Malware

Jeśli masz Adobe Reader to zaaktualizuj go do najnowszej wersji