Długo włączający sie pc + wirusy

[zimnodzis]

To znalazł mi AVG, nie moge tego usunąć jak sie tego pozbyć

Kod: Zaznacz wszystko

"C:\WINDOWS\system32\drivers\atmarpc.sys";"Koń trojański BackDoor.Generic12.AECT";"Obiekt znajduje się na białej liście (plik krytyczny/systemowy, którego nie należy usuwać)"
"C:\WINDOWS\system32\drivers\asyncmac.sys";"Koń trojański BackDoor.Generic12.AECT";"Obiekt znajduje się na białej liście (plik krytyczny/systemowy, którego nie należy usuwać)"
"C:\WINDOWS\system32\drivers\ip6fw.sys";"Koń trojański BackDoor.Generic12.AECT";"Obiekt znajduje się na białej liście (plik krytyczny/systemowy, którego nie należy usuwać)"
"C:\WINDOWS\system32\drivers\ipfltdrv.sys";"Koń trojański BackDoor.Generic12.AECT";"Obiekt znajduje się na białej liście (plik krytyczny/systemowy, którego nie należy usuwać)"
"C:\WINDOWS\system32\drivers\ipinip.sys";"Koń trojański BackDoor.Generic12.AECT";"Obiekt znajduje się na białej liście (plik krytyczny/systemowy, którego nie należy usuwać)"
"C:\WINDOWS\system32\drivers\irenum.sys";"Koń trojański BackDoor.Generic12.AECT";"Obiekt znajduje się na białej liście (plik krytyczny/systemowy, którego nie należy usuwać)"
"C:\WINDOWS\system32\drivers\Modem.sys";"Koń trojański BackDoor.Generic12.AECT";"Obiekt znajduje się na białej liście (plik krytyczny/systemowy, którego nie należy usuwać)"
"C:\WINDOWS\system32\drivers\TDPIPE.sys";"Koń trojański BackDoor.Generic12.AECT";"Obiekt znajduje się na białej liście (plik krytyczny/systemowy, którego nie należy usuwać)"
"C:\WINDOWS\system32\drivers\TDTCP.sys";"Koń trojański BackDoor.Generic12.AECT";"Obiekt znajduje się na białej liście (plik krytyczny/systemowy, którego nie należy usuwać)"

Oto log z OTL

Kod: Zaznacz wszystko

OTL logfile created on: 2010-03-24 18:07:34 - Run 4
OTL by OldTimer - Version 3.1.37.2     Folder = C:\Documents and Settings\xp\Pulpit\logi
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 77.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 92.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78.13 Gb Total Space | 16.03 Gb Free Space | 20.51% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 294.48 Gb Total Space | 5.47 Gb Free Space | 1.86% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SHIMSTACJA
Current User Name: xp
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2010-03-17 14:03:47 | 000,556,032 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xp\Pulpit\logi\OTL.exe
PRC - [2010-03-16 23:19:10 | 001,086,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2010-03-16 23:19:10 | 000,710,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe
PRC - [2010-03-16 23:19:10 | 000,617,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe
PRC - [2010-03-16 23:19:10 | 000,508,184 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe
PRC - [2010-03-16 23:19:09 | 002,059,544 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe
PRC - [2010-03-16 23:19:06 | 000,308,064 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe
PRC - [2009-10-29 12:27:54 | 001,074,568 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2008-03-20 11:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe
PRC - [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2010-03-17 14:03:47 | 000,556,032 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xp\Pulpit\logi\OTL.exe
MOD - [2006-12-21 13:30:44 | 000,102,400 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\ggwhook.dll
MOD - [2006-08-25 16:51:13 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found [Auto | Stopped] --  -- (StarWindService)
SRV - File not found [Disabled | Stopped] --  -- (NMIndexingService)
SRV - File not found [Disabled | Stopped] --  -- (Nero BackItUp Scheduler 4.0)
SRV - [2010-03-16 23:19:06 | 000,308,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009-10-29 12:27:54 | 001,074,568 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2009-07-13 22:18:12 | 000,071,096 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2010-03-17 18:06:10 | 000,000,000 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\Sfloppy.sys -- (Sfloppy)
DRV - [2010-03-16 23:19:30 | 000,242,696 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010-03-16 23:19:26 | 000,216,200 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010-03-16 23:19:25 | 000,029,512 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2010-03-01 15:24:22 | 000,791,552 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TDTCP.sys -- (TDTCP)
DRV - [2010-03-01 15:24:21 | 000,791,552 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TDPIPE.sys -- (TDPIPE)
DRV - [2010-03-01 15:23:48 | 000,791,552 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Modem.sys -- (Modem)
DRV - [2010-03-01 15:23:44 | 000,791,552 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\irenum.sys -- (IRENUM)
DRV - [2010-03-01 15:23:42 | 000,791,552 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ipinip.sys -- (IpInIp)
DRV - [2010-03-01 15:23:36 | 000,791,552 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ipfltdrv.sys -- (IpFilterDriver)
DRV - [2010-03-01 15:23:34 | 000,791,552 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ip6fw.sys -- (Ip6Fw)
DRV - [2010-03-01 15:23:04 | 000,791,552 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\atmarpc.sys -- (Atmarpc)
DRV - [2010-03-01 15:23:03 | 000,791,552 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\asyncmac.sys -- (AsyncMac)
DRV - [2010-01-12 05:03:33 | 010,276,768 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2009-09-23 09:41:58 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2007-10-28 14:14:39 | 000,223,128 | ---- | M] (Alcohol Soft Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\vaxscsi.sys -- (vaxscsi)
DRV - [2007-10-27 15:06:45 | 000,643,072 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2007-01-16 02:09:06 | 000,293,888 | R--- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService)
DRV - [2006-10-30 04:31:58 | 000,043,648 | R--- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\jraid.sys -- (JRAID)
DRV - [2006-07-27 02:49:10 | 000,083,712 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2006-03-17 10:18:58 | 000,392,960 | R--- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (SenFiltService)
DRV - [2006-02-07 12:52:58 | 000,006,912 | R--- | M] (JMicron ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\JGOGO.sys -- (JGOGO)
DRV - [2005-10-28 04:38:18 | 000,402,432 | R--- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\zd1211bu.sys -- (ZD1211BU(ZyDAS)) ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS)
DRV - [2005-05-27 14:13:12 | 000,128,295 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (Nokia USB Phone Parent)
DRV - [2005-05-27 14:13:12 | 000,011,001 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (Nokia USB Modem)
DRV - [2005-05-27 14:13:12 | 000,007,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (Nokia USB Generic)
DRV - [2004-10-27 14:21:36 | 000,138,240 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus)
DRV - [2004-08-12 01:00:00 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2002-12-28 12:15:52 | 000,006,212 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\ST3BUS28.vxd -- (st3bus28)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
FF - prefs.js..browser.startup.homepage: "netwars.pl"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.07076007

FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010-03-16 23:19:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-01-08 04:16:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-01-08 04:16:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2009-07-11 13:33:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Extensions
[2010-03-09 00:27:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions
[2009-09-18 13:47:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009-11-25 02:14:37 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2008-02-15 20:02:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\moveplayer@movenetworks(2).com
[2008-02-21 21:20:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\moveplayer@movenetworks.com
[2010-03-09 00:27:19 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2008-02-09 00:13:51 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2009-06-24 13:27:26 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-06-24 13:27:26 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-06-24 13:27:26 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-06-24 13:27:26 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-06-24 13:27:26 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-06-24 13:27:26 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

Hosts file not found
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {B7D3E479-CC68-42B5-A338-938ECE35F419} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found.
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [KernelFaultCheck]  File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKCU..\Run: [BitComet] C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &D&ownload &with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload all video with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload all with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 192.168.0.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: TaskMan - (C:\Documents and Settings\xp\csrss.exe) - C:\Documents and Settings\xp\csrss.exe File not found
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007-08-17 10:28:03 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008-08-06 22:31:36 | 000,360,448 | ---- | M] () - E:\autoplay.exe -- [ NTFS ]
O33 - MountPoints2\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\Shell\AutoRun\command - "" = G:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\Shell\explore\Command - "" = G:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\Shell\open\Command - "" = G:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\Shell\AutoRun\command - "" = H:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\Shell\explore\Command - "" = H:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\Shell\open\Command - "" = H:\00hoeav.com -- File not found
O33 - MountPoints2\{0db6f256-d577-11dc-bd66-001bfc773ba5}\Shell\AutoRun\command - "" = C:\WINDOWS\explorer.exe -- [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{0db6f256-d577-11dc-bd66-001bfc773ba5}\Shell\explore\Command - "" = C:\WINDOWS\explorer.exe -- [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{0db6f256-d577-11dc-bd66-001bfc773ba5}\Shell\open\Command - "" = C:\WINDOWS\explorer.exe -- [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{70021ba6-854b-11dc-95bd-00027264c6a7}\Shell - "" = AutoRun
O33 - MountPoints2\{70021ba6-854b-11dc-95bd-00027264c6a7}\Shell\AutoRun\command - "" = F:\Autorun.exe -- File not found
O33 - MountPoints2\{77bbd761-f980-11de-a8a9-001bfc773ba5}\Shell\AutoRun\command - "" = G:\cenzura!\\zeljko.exe -- File not found
O33 - MountPoints2\{77bbd761-f980-11de-a8a9-001bfc773ba5}\Shell\explore\command - "" = G:\cenzura!\\zeljko.exe -- File not found
O33 - MountPoints2\{77bbd761-f980-11de-a8a9-001bfc773ba5}\Shell\open\command - "" = G:\cenzura!\\zeljko.exe -- File not found
O33 - MountPoints2\{d0e042a7-4e68-11dd-a611-001bfc773ba5}\Shell\AutoRun\command - "" = G:\k8jc.exe -- File not found
O33 - MountPoints2\{d0e042a7-4e68-11dd-a611-001bfc773ba5}\Shell\open\Command - "" = G:\k8jc.exe -- File not found
O33 - MountPoints2\{e9695690-982c-11dc-95ea-001bfc773ba5}\Shell\AutoRun\command - "" = J:\d1vmq.exe -- File not found
O33 - MountPoints2\{e9695690-982c-11dc-95ea-001bfc773ba5}\Shell\open\Command - "" = J:\d1vmq.exe -- File not found
O33 - MountPoints2\{ef669712-978a-11dc-95e8-001bfc773ba5}\Shell - "" = AutoRun
O33 - MountPoints2\{ef669712-978a-11dc-95e8-001bfc773ba5}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\Autorun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010-03-24 18:06:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi
[2010-03-24 16:31:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\zdjecia_palka_26
[2010-03-24 15:08:43 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\xp\Recent
[2010-03-24 14:23:56 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010-03-20 14:55:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\Anglia OXFORD Camp 2003
[2010-03-17 14:04:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\logistyka szczepankiewicz
[2010-03-17 14:03:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\logi
[2010-03-16 23:21:15 | 384,166,595 | ---- | C] (CSS                                                         ) -- C:\Documents and Settings\xp\Moje dokumenty\CSS_Texture_Pack_May-4_REPACK_2.$$A
[2010-03-16 23:19:42 | 000,000,000 | -H-D | C] -- C:\$AVG
[2010-03-16 23:19:30 | 000,242,696 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010-03-16 23:19:30 | 000,012,464 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010-03-16 23:19:26 | 000,216,200 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010-03-16 23:19:25 | 000,029,512 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010-03-16 23:19:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg
[2010-03-16 23:19:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\avg9
[2010-03-16 23:17:09 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2010-03-16 23:17:09 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2010-03-16 23:17:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-03-16 23:17:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-03-16 22:47:50 | 000,000,000 | ---D | C] -- C:\Avenger
[2010-03-14 23:27:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\ehandel
[2010-03-13 22:31:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Dane aplikacji\Soldat
[2010-03-12 01:46:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\ciuchy daniel
[2010-03-10 01:21:33 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2010-03-10 01:20:42 | 000,061,440 | ---- | C] (Khronos Group) -- C:\WINDOWS\System32\OpenCL.dll
[2010-03-10 01:20:41 | 011,632,640 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcompiler.dll
[2010-03-10 01:20:41 | 004,104,192 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuda.dll
[2010-03-10 01:20:41 | 004,077,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvenc.dll
[2010-03-10 01:20:41 | 002,259,560 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvid.dll
[2010-03-10 01:13:02 | 000,000,000 | ---D | C] -- C:\Directx-10nov 2008
[2010-03-10 01:08:58 | 090,435,952 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\xp\Pulpit\directx_nov2008_redist.exe
[2010-03-10 00:58:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Moje dokumenty\BFBC2
[2010-03-09 17:00:23 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_5.dll
[2010-03-09 17:00:22 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_5.dll
[2010-03-09 17:00:21 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_42.dll
[2010-03-09 17:00:20 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcsx_42.dll
[2010-03-09 17:00:20 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx11_42.dll
[2010-03-09 17:00:19 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_42.dll
[2010-03-09 17:00:18 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll
[2010-03-09 17:00:17 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll
[2010-03-09 17:00:17 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll
[2010-03-09 17:00:16 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll
[2010-03-09 17:00:15 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll
[2010-03-09 17:00:15 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll
[2010-03-09 17:00:15 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll
[2010-03-09 17:00:14 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll
[2010-03-09 17:00:13 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_40.dll
[2010-03-09 17:00:13 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_40.dll
[2010-03-09 17:00:12 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll
[2010-03-09 17:00:11 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_3.dll
[2010-03-09 17:00:11 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_2.dll
[2010-03-09 17:00:10 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_3.dll
[2010-03-09 17:00:10 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_5.dll
[2010-03-04 00:57:45 | 000,000,000 | ---D | C] -- C:\Temp
[2010-02-24 18:59:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\Gramy Fair
[2010-02-22 21:04:42 | 000,000,000 | ---D | C] -- C:\Program Files\StarCraft II Beta
[2010-02-22 21:04:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Local Settings
[2010-02-22 20:18:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Moje dokumenty\StarCraft II Beta
[2010-02-22 20:18:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment
[2010-02-22 20:18:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\Blizzard Entertainment
[2010-02-22 20:18:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Blizzard Entertainment
[2010-02-22 20:17:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Blizzard
[2010-02-16 12:37:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
[2007-10-23 12:30:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\HP
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010-03-24 18:06:28 | 000,000,270 | -H-- | M] () -- C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2010-03-24 18:06:28 | 000,000,234 | -H-- | M] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010-03-24 18:06:28 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-03-24 18:06:27 | 000,268,856 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010-03-24 18:06:21 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-03-24 16:29:18 | 104,505,817 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\zdjecia_palka_26.rar
[2010-03-24 15:31:57 | 008,798,208 | ---- | M] () -- C:\Documents and Settings\xp\ntuser.dat
[2010-03-24 15:09:35 | 000,001,018 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_150930.reg
[2010-03-24 14:49:39 | 000,001,592 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144935.reg
[2010-03-24 14:49:25 | 000,000,518 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144920.reg
[2010-03-24 14:49:07 | 000,015,368 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144857.reg
[2010-03-24 14:46:10 | 000,137,256 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-03-24 14:44:42 | 000,262,094 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144423.reg
[2010-03-24 14:23:58 | 000,001,548 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\CCleaner.lnk
[2010-03-24 12:52:07 | 000,183,808 | ---- | M] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-03-24 12:51:29 | 000,023,655 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Office_2003_Professional_Word_Excel_Powerpoint_Access_Frontpage_Outlook_Infopath_Visio_Project_iso[www.btmon.com].torrent
[2010-03-24 12:44:16 | 000,008,911 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Word_2003_Free_download___key.5447137.TPB.torrent
[2010-03-24 08:59:57 | 057,594,402 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010-03-23 00:11:06 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-03-21 01:01:12 | 002,638,274 | -H-- | M] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-03-20 14:54:51 | 258,780,441 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Anglia OXFORD Camp 2003.rar
[2010-03-19 13:01:37 | 000,026,159 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Word_2003_PL.3648073.TPB.torrent
[2010-03-17 22:44:26 | 000,505,340 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\20100317336.jpg
[2010-03-17 18:06:10 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\Sfloppy.sys
[2010-03-16 23:21:36 | 384,166,595 | ---- | M] (CSS                                                         ) -- C:\Documents and Settings\xp\Moje dokumenty\CSS_Texture_Pack_May-4_REPACK_2.$$A
[2010-03-16 23:19:30 | 000,242,696 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010-03-16 23:19:30 | 000,012,464 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010-03-16 23:19:26 | 000,216,200 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010-03-16 23:19:25 | 000,029,512 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010-03-16 23:19:24 | 000,113,461 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2010-03-16 22:35:39 | 000,000,768 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-03-16 22:35:39 | 000,000,268 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-03-16 22:35:39 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2010-03-15 01:38:03 | 000,014,098 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\The_Polish_Ambassador.4082074.TPB.torrent
[2010-03-13 22:33:41 | 000,000,000 | R--- | M] () -- C:\logwmemory.bin
[2010-03-13 22:32:12 | 000,000,544 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Soldat.lnk
[2010-03-10 18:06:11 | 000,000,684 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Skrót do BFBC2Game.lnk
[2010-03-10 01:12:20 | 003,932,214 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\anty analising BF 2.bmp
[2010-03-10 01:10:11 | 090,435,952 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\xp\Pulpit\directx_nov2008_redist.exe
[2010-03-08 00:40:58 | 000,000,761 | ---- | M] () -- C:\WINDOWS\QIII.INI
[2010-03-04 19:18:59 | 000,029,696 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Trening Siłownia.doc
[2010-03-02 18:48:19 | 000,014,417 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\10.02.27-76ers VS Lakers by JasonFeng.torrent
[2010-03-01 15:24:22 | 000,791,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\TDTCP.sys
[2010-03-01 15:24:21 | 000,791,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\TDPIPE.sys
[2010-03-01 15:23:48 | 000,791,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\Modem.sys
[2010-03-01 15:23:44 | 000,791,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\irenum.sys
[2010-03-01 15:23:42 | 000,791,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipinip.sys
[2010-03-01 15:23:36 | 000,791,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipfltdrv.sys
[2010-03-01 15:23:34 | 000,791,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\ip6fw.sys
[2010-03-01 15:23:04 | 000,791,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\atmarpc.sys
[2010-03-01 15:23:03 | 000,791,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\asyncmac.sys
[2010-02-24 18:03:48 | 000,031,803 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\21022010546.jpg
[2010-02-22 20:22:18 | 000,000,669 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\StarCraft II Beta.lnk
[2010-02-22 19:01:18 | 000,135,044 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Starcraft_2_Beta_Client_US_Build_13891.5371903.TPB.torrent
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-03-24 16:15:40 | 104,505,817 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\zdjecia_palka_26.rar
[2010-03-24 15:09:32 | 000,001,018 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_150930.reg
[2010-03-24 14:49:37 | 000,001,592 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144935.reg
[2010-03-24 14:49:22 | 000,000,518 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144920.reg
[2010-03-24 14:48:59 | 000,015,368 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144857.reg
[2010-03-24 14:44:26 | 000,262,094 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144423.reg
[2010-03-24 14:23:58 | 000,001,548 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\CCleaner.lnk
[2010-03-24 12:51:29 | 000,023,655 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Office_2003_Professional_Word_Excel_Powerpoint_Access_Frontpage_Outlook_Infopath_Visio_Project_iso[www.btmon.com].torrent
[2010-03-24 12:44:16 | 000,008,911 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Word_2003_Free_download___key.5447137.TPB.torrent
[2010-03-20 14:45:29 | 258,780,441 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Anglia OXFORD Camp 2003.rar
[2010-03-19 13:01:37 | 000,026,159 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Word_2003_PL.3648073.TPB.torrent
[2010-03-17 23:45:55 | 000,505,340 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\20100317336.jpg
[2010-03-16 23:19:24 | 000,113,461 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2010-03-16 23:19:18 | 057,594,402 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010-03-15 01:38:03 | 000,014,098 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\The_Polish_Ambassador.4082074.TPB.torrent
[2010-03-13 22:33:41 | 000,000,000 | R--- | C] () -- C:\logwmemory.bin
[2010-03-13 22:32:12 | 000,000,544 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Soldat.lnk
[2010-03-10 18:06:13 | 000,000,684 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Skrót do BFBC2Game.lnk
[2010-03-10 01:20:42 | 000,009,047 | ---- | C] () -- C:\WINDOWS\System32\nvinfo.pb
[2010-03-10 01:20:39 | 002,283,526 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010-03-10 01:12:20 | 003,932,214 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\anty analising BF 2.bmp
[2010-03-02 18:48:19 | 000,014,417 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\10.02.27-76ers VS Lakers by JasonFeng.torrent
[2010-03-01 16:46:04 | 000,029,696 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Trening Siłownia.doc
[2010-03-01 15:22:56 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\wiaservg.log
[2010-02-26 15:39:03 | 000,031,803 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\21022010546.jpg
[2010-02-22 20:18:23 | 000,000,669 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\StarCraft II Beta.lnk
[2010-02-22 19:01:18 | 000,135,044 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Starcraft_2_Beta_Client_US_Build_13891.5371903.TPB.torrent
[2010-01-11 02:50:01 | 000,000,761 | ---- | C] () -- C:\WINDOWS\QIII.INI
[2009-12-22 17:13:44 | 000,002,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2009-05-20 13:18:32 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009-05-07 15:30:45 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-05-07 15:30:45 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-05-07 15:30:44 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009-05-07 15:30:44 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-05-07 15:30:44 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-02-09 23:37:39 | 000,000,028 | ---- | C] () -- C:\WINDOWS\wordpad.ini
[2009-01-04 21:39:15 | 000,000,190 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\default.rss
[2009-01-04 18:12:56 | 000,000,029 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2008-10-09 23:29:11 | 000,000,109 | ---- | C] () -- C:\WINDOWS\disney.ini
[2008-01-26 17:02:24 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2008-01-19 23:47:01 | 000,001,173 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2007-11-27 19:12:32 | 000,138,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2007-11-26 21:56:28 | 000,151,415 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2007-11-10 21:42:30 | 000,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib
[2007-11-04 21:51:17 | 000,000,045 | ---- | C] () -- C:\WINDOWS\msgtn.ini
[2007-10-27 15:06:45 | 000,643,072 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2007-10-27 15:06:45 | 000,096,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd0445.sys
[2007-10-23 12:26:42 | 000,010,082 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
[2007-08-29 21:43:32 | 000,000,195 | ---- | C] () -- C:\WINDOWS\MPLAYER.INI
[2007-08-20 10:42:38 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2007-08-18 09:45:43 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007-08-17 18:38:42 | 000,000,713 | ---- | C] () -- C:\WINDOWS\Thps3.INI
[2007-08-17 12:25:10 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007-08-17 12:20:13 | 000,791,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\irenum.sys
[2007-08-17 10:49:34 | 000,183,808 | ---- | C] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007-08-17 10:48:13 | 000,015,010 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2007-08-17 10:39:31 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2007-08-17 10:39:28 | 000,014,682 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2007-08-17 10:39:22 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007-08-17 10:24:49 | 000,791,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\TDTCP.sys
[2007-08-17 10:24:49 | 000,791,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\TDPIPE.sys
[2007-04-12 16:44:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007-04-12 16:44:00 | 001,478,656 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007-04-12 16:44:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007-04-12 16:44:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007-04-12 16:44:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-03-02 13:00:00 | 000,791,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipinip.sys
[2006-03-02 13:00:00 | 000,791,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipfltdrv.sys
[2006-03-02 13:00:00 | 000,791,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\ip6fw.sys
[2006-03-02 13:00:00 | 000,791,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmarpc.sys
[2006-03-02 13:00:00 | 000,791,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\asyncmac.sys
[2006-03-02 13:00:00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\Sfloppy.sys
[2004-08-04 01:34:18 | 000,791,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\Modem.sys
[2002-12-10 00:00:00 | 001,708,032 | ---- | C] () -- C:\WINDOWS\System32\MSO97V.DLL
[2002-12-10 00:00:00 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\DOCOBJ.DLL
[2002-12-10 00:00:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\MSORFS.DLL
[2002-12-10 00:00:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\HLINKPRX.DLL
[2002-10-15 23:54:04 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:AE7261F6
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:D1B5B4F1
< End of report >


Nie moge zamiscic loga z gmer chwile po wlaczeniu zawiesza mi sie caly pc.
Proszę o pomoc any ideas?

[wojtas]

Log z Gmera nie chce sie wygenerować ponieważ jest aktywny plik + program

DRV - [2009-10-17 21:26:43 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- D:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)

poczytaj programy emulujące napędy

Dodaj log z Gmera i 2 Log z OTL extras.txt

[zimnodzis]

Zrobiłem z tym, dalej to samo, komp sie zwiesza. Wczesniej juz z rejestru usunalem wszystko od alkohola itp.

Nowy log z OTL

http://wklej.org/id/303400/

btw jak extrasa zrobic?

[wojtas]

te pliki na pewno są podmienione..

C:\WINDOWS\System32\drivers\TDTCP.sys
C:\WINDOWS\System32\drivers\TDPIPE.sys
C:\WINDOWS\System32\drivers\Modem.sys
C:\WINDOWS\System32\drivers\irenum.sys
C:\WINDOWS\System32\drivers\ipinip.sys
C:\WINDOWS\System32\drivers\ipfltdrv.sys
C:\WINDOWS\System32\drivers\ip6fw.sys
C:\WINDOWS\System32\drivers\atmarpc.sys
C:\WINDOWS\System32\drivers\asyncmac.sys

pobierz świeże pliki zgodne z Twoją wersją systemu :
http://www.sendspace.com/file/q8egof
i wypakuj na C:

potem:

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
SRV - File not found [Auto | Stopped] -- -- (StarWindService)
SRV - File not found [Disabled | Stopped] -- -- (NMIndexingService)
SRV - File not found [Disabled | Stopped] -- -- (Nero BackItUp Scheduler 4.0)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {B7D3E479-CC68-42B5-A338-938ECE35F419} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found.
O20 - HKLM Winlogon: TaskMan - (C:\Documents and Settings\xp\csrss.exe) - C:\Documents and Settings\xp\csrss.exe File not found
O32 - AutoRun File - [2008-08-06 22:31:36 | 000,360,448 | ---- | M] () - E:\autoplay.exe -- [ NTFS ]
O33 - MountPoints2\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\Shell\AutoRun\command - "" = G:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\Shell\explore\Command - "" = G:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\Shell\open\Command - "" = G:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\Shell\AutoRun\command - "" = H:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\Shell\explore\Command - "" = H:\00hoeav.com -- File not found
O33 - MountPoints2\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\Shell\open\Command - "" = H:\00hoeav.com -- File not found
O33 - MountPoints2\{0db6f256-d577-11dc-bd66-001bfc773ba5}\Shell\AutoRun\command - "" = C:\WINDOWS\explorer.exe -- [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{0db6f256-d577-11dc-bd66-001bfc773ba5}\Shell\explore\Command - "" = C:\WINDOWS\explorer.exe -- [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{0db6f256-d577-11dc-bd66-001bfc773ba5}\Shell\open\Command - "" = C:\WINDOWS\explorer.exe -- [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{70021ba6-854b-11dc-95bd-00027264c6a7}\Shell - "" = AutoRun
O33 - MountPoints2\{70021ba6-854b-11dc-95bd-00027264c6a7}\Shell\AutoRun\command - "" = F:\Autorun.exe -- File not found
O33 - MountPoints2\{77bbd761-f980-11de-a8a9-001bfc773ba5}\Shell\AutoRun\command - "" = G:\cenzura!\\zeljko.exe -- File not found
O33 - MountPoints2\{77bbd761-f980-11de-a8a9-001bfc773ba5}\Shell\explore\command - "" = G:\cenzura!\\zeljko.exe -- File not found
O33 - MountPoints2\{77bbd761-f980-11de-a8a9-001bfc773ba5}\Shell\open\command - "" = G:\cenzura!\\zeljko.exe -- File not found
O33 - MountPoints2\{d0e042a7-4e68-11dd-a611-001bfc773ba5}\Shell\AutoRun\command - "" = G:\k8jc.exe -- File not found
O33 - MountPoints2\{d0e042a7-4e68-11dd-a611-001bfc773ba5}\Shell\open\Command - "" = G:\k8jc.exe -- File not found
O33 - MountPoints2\{e9695690-982c-11dc-95ea-001bfc773ba5}\Shell\AutoRun\command - "" = J:\d1vmq.exe -- File not found
O33 - MountPoints2\{e9695690-982c-11dc-95ea-001bfc773ba5}\Shell\open\Command - "" = J:\d1vmq.exe -- File not found
O33 - MountPoints2\{ef669712-978a-11dc-95e8-001bfc773ba5}\Shell - "" = AutoRun
O33 - MountPoints2\{ef669712-978a-11dc-95e8-001bfc773ba5}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found

:Files
C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
C:\WINDOWS\System32\drivers\TDTCP.sys|C:\TDTCP.sys /replace
C:\WINDOWS\System32\drivers\TDPIPE.sys|C:\TDPIPE.sys /replace
C:\WINDOWS\System32\drivers\Modem.sys|C:\Modem.sys /replace
C:\WINDOWS\System32\drivers\irenum.sys|C:\irenum.sys /replace
C:\WINDOWS\System32\drivers\ipinip.sys|C:\ipinip.sys /replace
C:\WINDOWS\System32\drivers\ipfltdrv.sys|C:\ipfltdrv.sys /replace
C:\WINDOWS\System32\drivers\ip6fw.sys|C:\ip6fw.sys /replace
C:\WINDOWS\System32\drivers\atmarpc.sys|C:\atmarpc.sys /replace
C:\WINDOWS\System32\drivers\asyncmac.sys|C:\asyncmac.sys /replace

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"TaskMan"=-

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdź reset kompa .Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia komputera

[zimnodzis]

ok dzieki.

RAport

Kod: Zaznacz wszystko

All processes killed
========== OTL ==========
Service StarWindService stopped successfully!
Service StarWindService deleted successfully!
Service NMIndexingService stopped successfully!
Service NMIndexingService deleted successfully!
Service Nero BackItUp Scheduler 4.0 stopped successfully!
Service Nero BackItUp Scheduler 4.0 deleted successfully!
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{B7D3E479-CC68-42B5-A338-938ECE35F419} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7D3E479-CC68-42B5-A338-938ECE35F419}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\TaskMan:C:\Documents and Settings\xp\csrss.exe deleted successfully.
E:\autoplay.exe moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\ not found.
File G:\00hoeav.com not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\ not found.
File G:\00hoeav.com not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0205a9b8-4e00-11dd-a60f-001bfc773ba5}\ not found.
File G:\00hoeav.com not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\ not found.
File H:\00hoeav.com not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\ not found.
File H:\00hoeav.com not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0205a9b9-4e00-11dd-a60f-001bfc773ba5}\ not found.
File H:\00hoeav.com not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0db6f256-d577-11dc-bd66-001bfc773ba5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0db6f256-d577-11dc-bd66-001bfc773ba5}\ not found.
Item C:\WINDOWS\explorer.exe is whitelisted and cannot be moved.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0db6f256-d577-11dc-bd66-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0db6f256-d577-11dc-bd66-001bfc773ba5}\ not found.
Item C:\WINDOWS\explorer.exe is whitelisted and cannot be moved.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0db6f256-d577-11dc-bd66-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0db6f256-d577-11dc-bd66-001bfc773ba5}\ not found.
Item C:\WINDOWS\explorer.exe is whitelisted and cannot be moved.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{70021ba6-854b-11dc-95bd-00027264c6a7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70021ba6-854b-11dc-95bd-00027264c6a7}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{70021ba6-854b-11dc-95bd-00027264c6a7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70021ba6-854b-11dc-95bd-00027264c6a7}\ not found.
File F:\Autorun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{77bbd761-f980-11de-a8a9-001bfc773ba5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{77bbd761-f980-11de-a8a9-001bfc773ba5}\ not found.
File G:\cenzura!\\zeljko.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{77bbd761-f980-11de-a8a9-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{77bbd761-f980-11de-a8a9-001bfc773ba5}\ not found.
File G:\cenzura!\\zeljko.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{77bbd761-f980-11de-a8a9-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{77bbd761-f980-11de-a8a9-001bfc773ba5}\ not found.
File G:\cenzura!\\zeljko.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d0e042a7-4e68-11dd-a611-001bfc773ba5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d0e042a7-4e68-11dd-a611-001bfc773ba5}\ not found.
File G:\k8jc.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d0e042a7-4e68-11dd-a611-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d0e042a7-4e68-11dd-a611-001bfc773ba5}\ not found.
File G:\k8jc.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e9695690-982c-11dc-95ea-001bfc773ba5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e9695690-982c-11dc-95ea-001bfc773ba5}\ not found.
File J:\d1vmq.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e9695690-982c-11dc-95ea-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e9695690-982c-11dc-95ea-001bfc773ba5}\ not found.
File J:\d1vmq.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ef669712-978a-11dc-95e8-001bfc773ba5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef669712-978a-11dc-95e8-001bfc773ba5}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ef669712-978a-11dc-95e8-001bfc773ba5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef669712-978a-11dc-95e8-001bfc773ba5}\ not found.
File G:\LaunchU3.exe not found.
========== FILES ==========
C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job moved successfully.
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\META-INF folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\lib folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\preferences folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\custombuttons folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\contenthandling folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\components folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\skin folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\zh-TW folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\zh-CN folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\uk folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\tr-TR folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\sv-SE folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\sl folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\sk-SK folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\ru-RU folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\ro folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\pt-PT folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\pt-BR folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\pl-PL folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\nl-NL folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\nb-NO folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\lt folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\ko-KR folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\ja-JP folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\it-IT folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\hu-HU folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\he-IL folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\fr-FR folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\fi-FI folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\es-ES folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\en-US folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\en-GB folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\el folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\de-DE folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\da-DK folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\cs-CZ folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\ca folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\bg folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale\ar folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\locale folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\content folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome folder moved successfully.
C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\META-INF folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\preferences folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\tb-amulet-of-protection\content folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome\tb-amulet-of-protection folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\amulet-jslib\google3 folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\amulet-jslib\firefox folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\amulet-jslib folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} folder moved successfully.
File C:\WINDOWS\System32\drivers\TDTCP.sys successfully replaced with C:\TDTCP.sys
File C:\WINDOWS\System32\drivers\TDPIPE.sys successfully replaced with C:\TDPIPE.sys
File C:\WINDOWS\System32\drivers\Modem.sys successfully replaced with C:\Modem.sys
File C:\WINDOWS\System32\drivers\irenum.sys successfully replaced with C:\irenum.sys
File C:\WINDOWS\System32\drivers\ipinip.sys successfully replaced with C:\ipinip.sys
File C:\WINDOWS\System32\drivers\ipfltdrv.sys successfully replaced with C:\ipfltdrv.sys
File C:\WINDOWS\System32\drivers\ip6fw.sys successfully replaced with C:\ip6fw.sys
File C:\WINDOWS\System32\drivers\atmarpc.sys successfully replaced with C:\atmarpc.sys
File C:\WINDOWS\System32\drivers\asyncmac.sys successfully replaced with C:\asyncmac.sys
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\TaskMan deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Gość
->Temp folder emptied: 643 bytes
->Temporary Internet Files folder emptied: 32768 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 186120 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: xp
->Temp folder emptied: 26099925 bytes
->Temporary Internet Files folder emptied: 772735 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 31600138 bytes
->Flash cache emptied: 995069 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 16660224 bytes
%systemroot%\System32 .tmp files removed: 2952740 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 131072 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 76.00 mb


OTL by OldTimer - Version 3.1.37.3 log created on 03242010_222416

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...


OTL

Kod: Zaznacz wszystko

OTL logfile created on: 2010-03-24 22:26:39 - Run 1
OTL by OldTimer - Version 3.1.37.3     Folder = C:\Documents and Settings\xp\Pulpit\logi
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 75.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78.13 Gb Total Space | 16.07 Gb Free Space | 20.57% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 294.48 Gb Total Space | 5.47 Gb Free Space | 1.86% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SHIMSTACJA
Current User Name: xp
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2010-03-24 22:23:08 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xp\Pulpit\logi\OTL.exe
PRC - [2010-03-16 23:19:10 | 001,086,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2010-03-16 23:19:10 | 000,710,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe
PRC - [2010-03-16 23:19:10 | 000,617,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe
PRC - [2010-03-16 23:19:10 | 000,508,184 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe
PRC - [2010-03-16 23:19:09 | 002,059,544 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe
PRC - [2010-03-16 23:19:06 | 000,308,064 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe
PRC - [2009-10-29 12:27:54 | 001,074,568 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2008-03-20 11:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe
PRC - [2007-10-08 09:54:10 | 006,338,872 | ---- | M] (www.BitComet.com) -- C:\Program Files\BitComet\BitComet.exe
PRC - [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2010-03-24 22:23:08 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xp\Pulpit\logi\OTL.exe
MOD - [2006-08-25 16:51:13 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2010-03-16 23:19:06 | 000,308,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009-10-29 12:27:54 | 001,074,568 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2009-07-13 22:18:12 | 000,071,096 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2010-03-17 18:06:10 | 000,000,000 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\Sfloppy.sys -- (Sfloppy)
DRV - [2010-03-16 23:19:30 | 000,242,696 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010-03-16 23:19:26 | 000,216,200 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010-03-16 23:19:25 | 000,029,512 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2010-01-12 05:03:33 | 010,276,768 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2009-09-23 09:41:58 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2007-10-28 14:14:39 | 000,223,128 | ---- | M] (Alcohol Soft Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\vaxscsi.sys -- (vaxscsi)
DRV - [2007-01-16 02:09:06 | 000,293,888 | R--- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService)
DRV - [2006-10-30 04:31:58 | 000,043,648 | R--- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\jraid.sys -- (JRAID)
DRV - [2006-07-27 02:49:10 | 000,083,712 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2006-03-17 10:18:58 | 000,392,960 | R--- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (SenFiltService)
DRV - [2006-02-07 12:52:58 | 000,006,912 | R--- | M] (JMicron ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\JGOGO.sys -- (JGOGO)
DRV - [2005-10-28 04:38:18 | 000,402,432 | R--- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\zd1211bu.sys -- (ZD1211BU(ZyDAS)) ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS)
DRV - [2005-05-27 14:13:12 | 000,128,295 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (Nokia USB Phone Parent)
DRV - [2005-05-27 14:13:12 | 000,011,001 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (Nokia USB Modem)
DRV - [2005-05-27 14:13:12 | 000,007,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (Nokia USB Generic)
DRV - [2004-10-27 14:21:36 | 000,138,240 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus)
DRV - [2004-08-12 01:00:00 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2002-12-28 12:15:52 | 000,006,212 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\ST3BUS28.vxd -- (st3bus28)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
FF - prefs.js..browser.startup.homepage: "netwars.pl"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.07076007

FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010-03-16 23:19:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-01-08 04:16:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-01-08 04:16:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2009-07-11 13:33:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Extensions
[2010-03-24 22:24:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions
[2009-09-18 13:47:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2008-02-15 20:02:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\moveplayer@movenetworks(2).com
[2008-02-21 21:20:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\axk2epu7.default\extensions\moveplayer@movenetworks.com
[2010-03-24 22:24:21 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009-06-24 13:27:26 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-06-24 13:27:26 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-06-24 13:27:26 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-06-24 13:27:26 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-06-24 13:27:26 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-06-24 13:27:26 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

Hosts file not found
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [KernelFaultCheck]  File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKCU..\Run: [BitComet] C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &D&ownload &with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload all video with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload all with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 192.168.0.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007-08-17 10:28:03 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010-03-24 22:26:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi
[2010-03-24 22:24:16 | 000,000,000 | ---D | C] -- C:\_OTL
[2010-03-24 22:20:46 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\atmarpc.sys
[2010-03-24 22:20:46 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\ipfltdrv.sys
[2010-03-24 22:20:46 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\modem.sys
[2010-03-24 22:20:46 | 000,029,056 | ---- | C] (Microsoft Corporation) -- C:\ip6fw.sys
[2010-03-24 22:20:46 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\tdtcp.sys
[2010-03-24 22:20:46 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\ipinip.sys
[2010-03-24 22:20:46 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\asyncmac.sys
[2010-03-24 22:20:46 | 000,012,040 | ---- | C] (Microsoft Corporation) -- C:\tdpipe.sys
[2010-03-24 22:20:46 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\irenum.sys
[2010-03-24 16:31:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\zdjecia_palka_26
[2010-03-24 15:08:43 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\xp\Recent
[2010-03-24 14:23:56 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010-03-20 14:55:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\Anglia OXFORD Camp 2003
[2010-03-17 14:04:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\logistyka szczepankiewicz
[2010-03-17 14:03:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\logi
[2010-03-16 23:21:15 | 384,166,595 | ---- | C] (CSS                                                         ) -- C:\Documents and Settings\xp\Moje dokumenty\CSS_Texture_Pack_May-4_REPACK_2.$$A
[2010-03-16 23:19:42 | 000,000,000 | -H-D | C] -- C:\$AVG
[2010-03-16 23:19:30 | 000,242,696 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010-03-16 23:19:30 | 000,012,464 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010-03-16 23:19:26 | 000,216,200 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010-03-16 23:19:25 | 000,029,512 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010-03-16 23:19:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg
[2010-03-16 23:19:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\avg9
[2010-03-16 23:17:09 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2010-03-16 23:17:09 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2010-03-16 23:17:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-03-16 23:17:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-03-14 23:27:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\ehandel
[2010-03-13 22:31:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Dane aplikacji\Soldat
[2010-03-12 01:46:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\ciuchy daniel
[2010-03-10 01:21:33 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2010-03-10 01:20:42 | 000,061,440 | ---- | C] (Khronos Group) -- C:\WINDOWS\System32\OpenCL.dll
[2010-03-10 01:20:41 | 011,632,640 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcompiler.dll
[2010-03-10 01:20:41 | 004,104,192 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuda.dll
[2010-03-10 01:20:41 | 004,077,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvenc.dll
[2010-03-10 01:20:41 | 002,259,560 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvid.dll
[2010-03-10 01:13:02 | 000,000,000 | ---D | C] -- C:\Directx-10nov 2008
[2010-03-10 01:08:58 | 090,435,952 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\xp\Pulpit\directx_nov2008_redist.exe
[2010-03-10 00:58:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Moje dokumenty\BFBC2
[2010-03-09 17:00:23 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_5.dll
[2010-03-09 17:00:22 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_5.dll
[2010-03-09 17:00:21 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_42.dll
[2010-03-09 17:00:20 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcsx_42.dll
[2010-03-09 17:00:20 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx11_42.dll
[2010-03-09 17:00:19 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_42.dll
[2010-03-09 17:00:18 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll
[2010-03-09 17:00:17 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll
[2010-03-09 17:00:17 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll
[2010-03-09 17:00:16 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll
[2010-03-09 17:00:15 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll
[2010-03-09 17:00:15 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll
[2010-03-09 17:00:15 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll
[2010-03-09 17:00:14 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll
[2010-03-09 17:00:13 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_40.dll
[2010-03-09 17:00:13 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_40.dll
[2010-03-09 17:00:12 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll
[2010-03-09 17:00:11 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_3.dll
[2010-03-09 17:00:11 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_2.dll
[2010-03-09 17:00:10 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_3.dll
[2010-03-09 17:00:10 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_5.dll
[2010-03-04 00:57:45 | 000,000,000 | ---D | C] -- C:\Temp
[2010-02-24 18:59:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\Gramy Fair
[2010-02-16 12:37:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
[2007-10-23 12:30:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\HP

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010-03-24 22:25:52 | 000,268,856 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010-03-24 22:25:46 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-03-24 22:25:44 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-03-24 22:24:56 | 008,798,208 | ---- | M] () -- C:\Documents and Settings\xp\ntuser.dat
[2010-03-24 21:14:26 | 000,137,256 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-03-24 21:04:22 | 000,031,232 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\logistyka streszczenie.doc
[2010-03-24 20:48:24 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-03-24 20:47:06 | 002,108,226 | -H-- | M] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-03-24 18:51:59 | 057,623,175 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010-03-24 16:29:18 | 104,505,817 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\zdjecia_palka_26.rar
[2010-03-24 15:09:35 | 000,001,018 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_150930.reg
[2010-03-24 14:49:39 | 000,001,592 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144935.reg
[2010-03-24 14:49:25 | 000,000,518 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144920.reg
[2010-03-24 14:49:07 | 000,015,368 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144857.reg
[2010-03-24 14:44:42 | 000,262,094 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144423.reg
[2010-03-24 14:23:58 | 000,001,548 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\CCleaner.lnk
[2010-03-24 12:52:07 | 000,183,808 | ---- | M] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-03-24 12:51:29 | 000,023,655 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Office_2003_Professional_Word_Excel_Powerpoint_Access_Frontpage_Outlook_Infopath_Visio_Project_iso[www.btmon.com].torrent
[2010-03-24 12:44:16 | 000,008,911 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Word_2003_Free_download___key.5447137.TPB.torrent
[2010-03-20 14:54:51 | 258,780,441 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Anglia OXFORD Camp 2003.rar
[2010-03-19 13:01:37 | 000,026,159 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Word_2003_PL.3648073.TPB.torrent
[2010-03-17 22:44:26 | 000,505,340 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\20100317336.jpg
[2010-03-17 18:06:10 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\Sfloppy.sys
[2010-03-16 23:21:36 | 384,166,595 | ---- | M] (CSS                                                         ) -- C:\Documents and Settings\xp\Moje dokumenty\CSS_Texture_Pack_May-4_REPACK_2.$$A
[2010-03-16 23:19:30 | 000,242,696 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010-03-16 23:19:30 | 000,012,464 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010-03-16 23:19:26 | 000,216,200 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010-03-16 23:19:25 | 000,029,512 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010-03-16 23:19:24 | 000,113,461 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2010-03-16 22:35:39 | 000,000,768 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-03-16 22:35:39 | 000,000,268 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-03-16 22:35:39 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2010-03-15 01:38:03 | 000,014,098 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\The_Polish_Ambassador.4082074.TPB.torrent
[2010-03-13 22:33:41 | 000,000,000 | R--- | M] () -- C:\logwmemory.bin
[2010-03-13 22:32:12 | 000,000,544 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Soldat.lnk
[2010-03-10 18:06:11 | 000,000,684 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Skrót do BFBC2Game.lnk
[2010-03-10 01:12:20 | 003,932,214 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\anty analising BF 2.bmp
[2010-03-10 01:10:11 | 090,435,952 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\xp\Pulpit\directx_nov2008_redist.exe
[2010-03-08 00:40:58 | 000,000,761 | ---- | M] () -- C:\WINDOWS\QIII.INI
[2010-03-04 19:18:59 | 000,029,696 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Trening Siłownia.doc
[2010-03-02 18:48:19 | 000,014,417 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\10.02.27-76ers VS Lakers by JasonFeng.torrent
[2010-02-24 18:03:48 | 000,031,803 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\21022010546.jpg

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-03-24 21:04:22 | 000,031,232 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\logistyka streszczenie.doc
[2010-03-24 16:15:40 | 104,505,817 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\zdjecia_palka_26.rar
[2010-03-24 15:09:32 | 000,001,018 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_150930.reg
[2010-03-24 14:49:37 | 000,001,592 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144935.reg
[2010-03-24 14:49:22 | 000,000,518 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144920.reg
[2010-03-24 14:48:59 | 000,015,368 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144857.reg
[2010-03-24 14:44:26 | 000,262,094 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\cc_20100324_144423.reg
[2010-03-24 14:23:58 | 000,001,548 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\CCleaner.lnk
[2010-03-24 12:51:29 | 000,023,655 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Office_2003_Professional_Word_Excel_Powerpoint_Access_Frontpage_Outlook_Infopath_Visio_Project_iso[www.btmon.com].torrent
[2010-03-24 12:44:16 | 000,008,911 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Word_2003_Free_download___key.5447137.TPB.torrent
[2010-03-20 14:45:29 | 258,780,441 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Anglia OXFORD Camp 2003.rar
[2010-03-19 13:01:37 | 000,026,159 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Microsoft_Word_2003_PL.3648073.TPB.torrent
[2010-03-17 23:45:55 | 000,505,340 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\20100317336.jpg
[2010-03-16 23:19:24 | 000,113,461 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2010-03-16 23:19:18 | 057,623,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010-03-15 01:38:03 | 000,014,098 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\The_Polish_Ambassador.4082074.TPB.torrent
[2010-03-13 22:33:41 | 000,000,000 | R--- | C] () -- C:\logwmemory.bin
[2010-03-13 22:32:12 | 000,000,544 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Soldat.lnk
[2010-03-10 18:06:13 | 000,000,684 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Skrót do BFBC2Game.lnk
[2010-03-10 01:20:42 | 000,009,047 | ---- | C] () -- C:\WINDOWS\System32\nvinfo.pb
[2010-03-10 01:20:39 | 002,283,526 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010-03-10 01:12:20 | 003,932,214 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\anty analising BF 2.bmp
[2010-03-02 18:48:19 | 000,014,417 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\10.02.27-76ers VS Lakers by JasonFeng.torrent
[2010-03-01 16:46:04 | 000,029,696 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Trening Siłownia.doc
[2010-03-01 15:22:56 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\wiaservg.log
[2010-02-26 15:39:03 | 000,031,803 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\21022010546.jpg
[2010-01-11 02:50:01 | 000,000,761 | ---- | C] () -- C:\WINDOWS\QIII.INI
[2009-12-22 17:13:44 | 000,002,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2009-05-20 13:18:32 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009-05-07 15:30:45 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-05-07 15:30:45 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-05-07 15:30:44 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009-05-07 15:30:44 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-05-07 15:30:44 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-02-09 23:37:39 | 000,000,028 | ---- | C] () -- C:\WINDOWS\wordpad.ini
[2009-01-04 21:39:15 | 000,000,190 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\default.rss
[2009-01-04 18:12:56 | 000,000,029 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2008-10-09 23:29:11 | 000,000,109 | ---- | C] () -- C:\WINDOWS\disney.ini
[2008-01-26 17:02:24 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2008-01-19 23:47:01 | 000,001,173 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2007-11-27 19:12:32 | 000,138,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2007-11-26 21:56:28 | 000,151,415 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2007-11-10 21:42:30 | 000,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib
[2007-11-04 21:51:17 | 000,000,045 | ---- | C] () -- C:\WINDOWS\msgtn.ini
[2007-10-23 12:26:42 | 000,010,082 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
[2007-08-29 21:43:32 | 000,000,195 | ---- | C] () -- C:\WINDOWS\MPLAYER.INI
[2007-08-20 10:42:38 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2007-08-18 09:45:43 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007-08-17 18:38:42 | 000,000,713 | ---- | C] () -- C:\WINDOWS\Thps3.INI
[2007-08-17 12:25:10 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007-08-17 10:49:34 | 000,183,808 | ---- | C] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007-08-17 10:48:13 | 000,015,010 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2007-08-17 10:39:31 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2007-08-17 10:39:28 | 000,014,682 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2007-08-17 10:39:22 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007-04-12 16:44:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007-04-12 16:44:00 | 001,478,656 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007-04-12 16:44:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007-04-12 16:44:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007-04-12 16:44:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-03-02 13:00:00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\Sfloppy.sys
[2002-12-10 00:00:00 | 001,708,032 | ---- | C] () -- C:\WINDOWS\System32\MSO97V.DLL
[2002-12-10 00:00:00 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\DOCOBJ.DLL
[2002-12-10 00:00:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\MSORFS.DLL
[2002-12-10 00:00:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\HLINKPRX.DLL
[2002-10-15 23:54:04 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:AE7261F6
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:D1B5B4F1
< End of report >


[wojtas]

C:\atmarpc.sys
C:\ipfltdrv.sys
C:\modem.sys
C:\ip6fw.sys
C:\tdtcp.sys
C:\ipinip.sys
C:\asyncmac.sys
C:\tdpipe.sys
C:\irenum.sys

skasuj już te pliki


Czynności końcowe :

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )


zapodaj log Extras.txt

Gdy chcemy utworzyć log zaznaczamy wszystkie opcje tak jak na w/w obrazku ( Scan All Users / LOP Check / Purity Check / Extra Registry - Use SafeList).

i powinny wyskoczyć Ci 2 logi i daj extras

[zimnodzis]

Dzieki wielkie!!!!

Uruchamianie:
NvMcTray RUNDLL32.exe system32\NvMcTray.dll,NvTaskbarInit
NvCpl RUNDLL32.exe system32\NvCpl.dll,NvStartup

btw moge to odznaczyc??

[wojtas]

te zostaw ta sa pliki od karty graficznej, nie obciążają systemu

[zimnodzis]

OK;d heheh, jeszcze raz dzieki wielkie!!!