Kilka dodatkowych informacji:
- po wpisaniu czegokolwiek w wyszukiwarkę i próbie wejścia przez wyszukane linki strona zostaje przekierowana na strony z reklamami
-Windows XP
-zrobiłem skanowanie malwerbytes i po usunięciu ok 10 zagrożeń problem nie zniknął
-próbowałem usuwania kilku aplikacji które jednak powracają (głównie jakieś toolbary), nie zadziałało przywrócenie sytemu
-obecnie brak antywirusa, do dzisiaj używany był avast
Tak więc proszę o pomoc
Wklejam logi z OTL natomiast co do logu z GMER niestety mam problem z pozbyciem się pliku sptd.sys.
Po zastosowaniu się do instrukcji i próbie zainicjowania SPTDinst 32 bit ( systemy 32-bit SPTDinst-v -x86.exe) dostaję odpowiedź że nie jest to prawidłowa aplikacja systemu win32. Jeżeli jest sposób żeby to ominąć postaram się uzupełnić loga.
- Kod: Zaznacz wszystko
OTL Extras logfile created on: 2011-04-22 17:19:04 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\R\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
510,00 Mb Total Physical Memory | 129,00 Mb Available Physical Memory | 25,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 71,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 8,45 Gb Free Space | 43,28% Space Free | Partition Type: NTFS
Drive D: | 39,06 Gb Total Space | 19,78 Gb Free Space | 50,65% Space Free | Partition Type: NTFS
Drive E: | 39,06 Gb Total Space | 2,81 Gb Free Space | 7,20% Space Free | Partition Type: NTFS
Drive F: | 51,39 Gb Total Space | 46,34 Gb Free Space | 90,18% Space Free | Partition Type: NTFS
Computer Name: RR | User Name: R | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
[HKEY_USERS\S-1-5-21-1960408961-562591055-725345543-1003\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- C:\Program Files\ParetoLogic\FileCure\FileCure_noapp.exe %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[color=#E56717]========== System Restore Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
[color=#E56717]========== Authorized Applications List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe" = C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe" = C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe" = C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx
"E:\Gry\pes08\PES2008.exe" = E:\Gry\pes08\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008 -- (KONAMI)
"E:\Gry\pes08\Pes 8 Pro evolution soccer 2008\PES2008.exe" = E:\Gry\pes08\Pes 8 Pro evolution soccer 2008\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008 -- (KONAMI)
"C:\Program Files\Nowe Gadu-Gadu\gg.exe" = C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare
"E:\Gry\cs\valve\hl.exe" = E:\Gry\cs\valve\hl.exe:*:Enabled:Half-Life Launcher
"C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.)
"D:\Anka\sims\PDFReader_Setup.exe" = D:\Anka\sims\PDFReader_Setup.exe:*:Enabled:PDF Reader 9.1
"C:\Documents and Settings\R\Ustawienia lokalne\Temp\is799009782\AInstaller.exe" = C:\Documents and Settings\R\Ustawienia lokalne\Temp\is799009782\AInstaller.exe:*:Enabled:AD Installer
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe" = C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{036FD544-AED6-3F33-856D-A2292D0CF471}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - PLK
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{083F79E4-6FE9-46FB-A6C6-4F8862742947}" = ATI HYDRAVISION
"{0893078B-8A9A-84D6-D393-119B9B0B033A}" = CCC Help French
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{0E2A60F7-2907-5718-FF16-7D8FAF70051E}" = CCC Help Chinese Standard
"{14FAE013-AE19-4FC9-B5BF-E56ADC01ECE6}" = CCC Help Turkish
"{17BB2784-6EE4-D7FF-FE63-58A3AD2B3708}" = CCC Help Russian
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{233588CF-96D5-46AF-EF74-7EC382662791}" = Catalyst Control Center Graphics Full Existing
"{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java(TM) 6 Update 24
"{2792F12C-3515-4D69-8083-B557AF35F06F}" = LightScribe 1.4.89.1
"{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 4.010.00
"{3260ECBC-9DDF-E7A3-0863-449473BC7BD5}" = CCC Help Chinese Traditional
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{39C6C229-CFFD-639E-229A-E463FCD87478}" = CCC Help German
"{4216D328-0FE8-48B8-85B8-BD300E6F080F}" = Nokia Connectivity Cable Driver
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840
"{4F11FC80-CE8C-1BD4-5C39-EBE5744E5135}" = CCC Help Portuguese
"{4FAB2BA7-E16C-95D2-F326-60A68409373F}" = Catalyst Control Center HydraVision Full
"{517B8FB2-26EE-43B0-AE1B-07408860AA69}" = DigitImg
"{529AA9A8-5020-6CFB-A809-BC5943C87077}" = CCC Help Thai
"{53604297-26FD-516D-6FF7-1063BA64A0A4}" = Catalyst Control Center Graphics Light
"{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}" = Photosmart 140,240,7200,7600,7700,7900 Series
"{55BD3B0B-F054-9341-514F-295A5F7EA450}" = CCC Help Spanish
"{5A4FA9C8-ED56-08C3-153B-FC5C19256290}" = CCC Help Dutch
"{6C390D51-E5F0-4FCD-24C4-731ACAF34571}" = CCC Help Japanese
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{71813834-C5F1-4B86-907A-54CEF83EB2E2}" = PSShortcuts
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{7AA8FA9A-1656-7DBD-633B-FE7A62BBED0C}" = CCC Help Czech
"{7C77393F-8237-3825-A88A-AFAF3C69C072}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - PLK
"{7DDB3F86-E1E5-11D7-A04D-0050FCB66B41}" = Soltek Hardware Monitor
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C22131B-8634-CECF-F0D1-A2ECC160B450}" = CCC Help Norwegian
"{8F2ED3E6-4049-4BEF-B4CB-0208D24E302F}" = USB TO IRDA Driver 1.3.0.5
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007
"{90170415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office FrontPage 2003
"{90FBE4D0-2ACA-A8A8-2CC4-CFFBAE528504}" = CCC Help Finnish
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D74375E-3012-E7D2-9229-B220C91F326A}" = Catalyst Control Center Core Implementation
"{9EE8BDCA-7505-4895-D91E-8108DD16292E}" = CCC Help English
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A8AF8BD3-61B5-7945-4D1B-217421F604FC}" = CCC Help Hungarian
"{AA46E1C5-A709-6D9B-D99D-92E4C6E042A9}" = CCC Help Korean
"{AA62A33C-9E5E-3913-7D88-7E58A8CB1493}" = CCC Help Greek
"{AC76BA86-7AD7-1045-7B44-A94000000001}" = Adobe Reader 9.4.0 - Polish
"{B653F643-A1B4-9936-2DB6-FEA9A3110D8D}" = ccc-core-preinstall
"{B71C4637-0247-78CE-6A3D-D61645CB8921}" = ccc-utility
"{BAE4A43D-6DDE-4E19-A2A5-BBD89A3ED48C}" = PS7200
"{BC2E7C0B-1AC6-5F6C-F31D-E1E72D8E0B5C}" = CCC Help Danish
"{BF8C7DA7-2DE6-ED67-6C82-6BE82F8BA8D3}" = Catalyst Control Center Graphics Full New
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = Athlon 64 Processor Driver
"{C409F338-BB20-6C4A-F40D-20CA07AF714C}" = CCC Help Polish
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D35191B3-F340-4C11-A4E0-8B09477B4302}" = Dysk wspomnieniowy HP
"{D4AEC53C-1720-41D9-B6D7-6A60DE62D444}" = PC Connectivity Solution
"{D4B7B2DC-E688-A9D6-6EC0-56AE540E074C}" = Catalyst Control Center Localization All
"{D9CD701B-3F04-FC69-D974-F3A7F5E9BA30}" = CCC Help Swedish
"{D9D93D74-107D-4BD3-87D0-AABCF7C98BD5}" = Catalyst Control Center - Branding
"{DDA2B32F-EB16-4C96-A130-4E4A4C1E6B12}" = HP Software Update
"{E213321B-1E88-B38D-DAB2-D8CB9355984A}" = Skins
"{EFE26D3B-2789-4068-A5BB-77E389FAEB98}" = PSUsage
"{F38FD0E4-B991-462B-873D-F2115EADD093}" = Nokia PC Suite
"{F4148D8F-ED3A-3097-509C-04D5560220F9}" = ccc-core-static
"{F7E68997-E626-952B-A7BF-F72066CD5D77}" = Catalyst Control Center Graphics Previews Common
"{F9000000-0001-0000-0000-074957833700}" = ABBYY FineReader 9.0 Professional Edition
"{FA36C82B-464D-51F2-A6A1-0BC9140BE067}" = CCC Help Italian
"504244733D18C8F63FF584AEB290E3904E791693" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"6DA48AFDE796708D5A4C9121A83E7617A63A9A15" = Pakiet sterowników systemu Windows - Nokia Modem (10/07/2010 4.6)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI
"ATI Display Driver" = ATI Display Driver
"AVS DVD Player_is1" = AVS DVD Player version 2.4
"AVS Update Manager_is1" = AVS Update Manager 1.0
"Deluxe Ski Jump 3_is1" = Deluxe Ski Jump 3 v1.7.0
"E5372C32E8562C76C24DBA6525002B1031495F34" = Pakiet sterowników systemu Windows - Nokia Modem (06/09/2010 7.01.0.8)
"Free PS Convert driver_is1" = Free PS Convert driver 8.15
"Gadu-Gadu 10" = Gadu-Gadu 10
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MoorHunt_is1" = MoorHunt 0.6.3.0
"Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16)
"MP3 To Ringtone Gold_is1" = MP3 To Ringtone Gold 8.7
"neostradatp.exe" = neostrada tp
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia PC Suite" = Nokia PC Suite
"R for Windows 2.11.1_is1" = R for Windows 2.11.1
"StmAdsl" = ADSL Modem
"VIA Audio Driver Setup Program" = VIA Audio Driver Setup Program
"VLC media player" = VLC media player 1.0.3
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = Archiwizator WinRAR
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2011-03-23 08:46:51 | Computer Name = RR | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd plugin-container.exe, wersja 1.9.2.4079,
moduł powodujący błąd ntdll.dll, wersja 5.1.2600.6055, adres błędu 0x0000100b.
Error - 2011-04-06 13:34:08 | Computer Name = RR | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd plugin-container.exe, wersja 1.9.2.4095,
moduł powodujący błąd ntdll.dll, wersja 5.1.2600.6055, adres błędu 0x0000100b.
Error - 2011-04-09 12:16:54 | Computer Name = RR | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd plugin-container.exe, wersja 1.9.2.4095,
moduł powodujący błąd ntdll.dll, wersja 5.1.2600.6055, adres błędu 0x0000100b.
Error - 2011-04-09 13:17:38 | Computer Name = RR | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 7.0.6000.17095, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x002727c1.
Error - 2011-04-15 16:39:31 | Computer Name = RR | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca neostradatp.exe, wersja 5.9.1.3, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2011-04-21 18:41:37 | Computer Name = RR | Source = LoadPerf | ID = 3001
Description = Występująca w rejestrze wartość ciągu nazwy licznika wydajności jest
niepoprawnie
sformatowana. Nieprawdziwy ciąg to 9708, nieprawdziwa wartość indeksu to pierwszy
wpis DWORD w sekcji danych (Data), a ostatnie prawidłowe wartości indeksu to drugi
i trzeci wpis DWORD w sekcji danych.
Error - 2011-04-21 18:41:37 | Computer Name = RR | Source = LoadPerf | ID = 3001
Description = Występująca w rejestrze wartość ciągu nazwy licznika wydajności jest
niepoprawnie
sformatowana. Nieprawdziwy ciąg to 9708, nieprawdziwa wartość indeksu to pierwszy
wpis DWORD w sekcji danych (Data), a ostatnie prawidłowe wartości indeksu to drugi
i trzeci wpis DWORD w sekcji danych.
Error - 2011-04-21 18:41:37 | Computer Name = RR | Source = LoadPerf | ID = 3011
Description = Nie można usunąć z pamięci ciągów licznika wydajności dla usługi WmiApRpl
(WmiApRpl). Kod błędu to pierwszy wpis DWORD w sekcji danych (Data).
Error - 2011-04-21 18:41:40 | Computer Name = RR | Source = LoadPerf | ID = 3001
Description = Występująca w rejestrze wartość ciągu nazwy licznika wydajności jest
niepoprawnie
sformatowana. Nieprawdziwy ciąg to 9708, nieprawdziwa wartość indeksu to pierwszy
wpis DWORD w sekcji danych (Data), a ostatnie prawidłowe wartości indeksu to drugi
i trzeci wpis DWORD w sekcji danych.
Error - 2011-04-21 18:43:20 | Computer Name = RR | Source = MsiInstaller | ID = 11722
Description = Product: Java(TM) 6 Update 24 -- Error 1722.There is a problem with
this Windows Installer package. A program run as part of the setup did not finish
as expected. Contact your support personnel or package vendor. Action patchjre,
location: C:\Program Files\Java\jre6\patchjre.exe, command: -s "C:\Program Files\Java\jre6"
[ Application Events ]
Error - 2011-03-23 08:46:51 | Computer Name = RR | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd plugin-container.exe, wersja 1.9.2.4079,
moduł powodujący błąd ntdll.dll, wersja 5.1.2600.6055, adres błędu 0x0000100b.
Error - 2011-04-06 13:34:08 | Computer Name = RR | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd plugin-container.exe, wersja 1.9.2.4095,
moduł powodujący błąd ntdll.dll, wersja 5.1.2600.6055, adres błędu 0x0000100b.
Error - 2011-04-09 12:16:54 | Computer Name = RR | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd plugin-container.exe, wersja 1.9.2.4095,
moduł powodujący błąd ntdll.dll, wersja 5.1.2600.6055, adres błędu 0x0000100b.
Error - 2011-04-09 13:17:38 | Computer Name = RR | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 7.0.6000.17095, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x002727c1.
Error - 2011-04-15 16:39:31 | Computer Name = RR | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca neostradatp.exe, wersja 5.9.1.3, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2011-04-21 18:41:37 | Computer Name = RR | Source = LoadPerf | ID = 3001
Description = Występująca w rejestrze wartość ciągu nazwy licznika wydajności jest
niepoprawnie
sformatowana. Nieprawdziwy ciąg to 9708, nieprawdziwa wartość indeksu to pierwszy
wpis DWORD w sekcji danych (Data), a ostatnie prawidłowe wartości indeksu to drugi
i trzeci wpis DWORD w sekcji danych.
Error - 2011-04-21 18:41:37 | Computer Name = RR | Source = LoadPerf | ID = 3001
Description = Występująca w rejestrze wartość ciągu nazwy licznika wydajności jest
niepoprawnie
sformatowana. Nieprawdziwy ciąg to 9708, nieprawdziwa wartość indeksu to pierwszy
wpis DWORD w sekcji danych (Data), a ostatnie prawidłowe wartości indeksu to drugi
i trzeci wpis DWORD w sekcji danych.
Error - 2011-04-21 18:41:37 | Computer Name = RR | Source = LoadPerf | ID = 3011
Description = Nie można usunąć z pamięci ciągów licznika wydajności dla usługi WmiApRpl
(WmiApRpl). Kod błędu to pierwszy wpis DWORD w sekcji danych (Data).
Error - 2011-04-21 18:41:40 | Computer Name = RR | Source = LoadPerf | ID = 3001
Description = Występująca w rejestrze wartość ciągu nazwy licznika wydajności jest
niepoprawnie
sformatowana. Nieprawdziwy ciąg to 9708, nieprawdziwa wartość indeksu to pierwszy
wpis DWORD w sekcji danych (Data), a ostatnie prawidłowe wartości indeksu to drugi
i trzeci wpis DWORD w sekcji danych.
Error - 2011-04-21 18:43:20 | Computer Name = RR | Source = MsiInstaller | ID = 11722
Description = Product: Java(TM) 6 Update 24 -- Error 1722.There is a problem with
this Windows Installer package. A program run as part of the setup did not finish
as expected. Contact your support personnel or package vendor. Action patchjre,
location: C:\Program Files\Java\jre6\patchjre.exe, command: -s "C:\Program Files\Java\jre6"
[ System Events ]
Error - 2011-04-22 09:07:43 | Computer Name = RR | Source = Ftdisk | ID = 262193
Description = Konfigurowanie pliku strony dla zrzutu awaryjnego nie powiodło się.
Upewnij się, że na partycji rozruchowej znajduje się plik strony i że jest wystarczająco
duży, aby zawierać całą pamięć fizyczną.
Error - 2011-04-22 09:14:00 | Computer Name = RR | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (e4ldr.sys)
z powodu następującego błędu: %%2
Error - 2011-04-22 09:14:00 | Computer Name = RR | Source = Ftdisk | ID = 262189
Description = System nie może pomyślnie załadować sterownika zrzutu awaryjnego.
Error - 2011-04-22 09:14:00 | Computer Name = RR | Source = Ftdisk | ID = 262193
Description = Konfigurowanie pliku strony dla zrzutu awaryjnego nie powiodło się.
Upewnij się, że na partycji rozruchowej znajduje się plik strony i że jest wystarczająco
duży, aby zawierać całą pamięć fizyczną.
Error - 2011-04-22 10:13:03 | Computer Name = RR | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (e4ldr.sys)
z powodu następującego błędu: %%2
Error - 2011-04-22 10:13:22 | Computer Name = RR | Source = Ftdisk | ID = 262189
Description = System nie może pomyślnie załadować sterownika zrzutu awaryjnego.
Error - 2011-04-22 10:13:22 | Computer Name = RR | Source = Ftdisk | ID = 262193
Description = Konfigurowanie pliku strony dla zrzutu awaryjnego nie powiodło się.
Upewnij się, że na partycji rozruchowej znajduje się plik strony i że jest wystarczająco
duży, aby zawierać całą pamięć fizyczną.
Error - 2011-04-22 11:01:17 | Computer Name = RR | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (e4ldr.sys)
z powodu następującego błędu: %%2
Error - 2011-04-22 11:01:31 | Computer Name = RR | Source = Ftdisk | ID = 262189
Description = System nie może pomyślnie załadować sterownika zrzutu awaryjnego.
Error - 2011-04-22 11:01:31 | Computer Name = RR | Source = Ftdisk | ID = 262193
Description = Konfigurowanie pliku strony dla zrzutu awaryjnego nie powiodło się.
Upewnij się, że na partycji rozruchowej znajduje się plik strony i że jest wystarczająco
duży, aby zawierać całą pamięć fizyczną.
< End of report >
- Kod: Zaznacz wszystko
OTL logfile created on: 2011-04-22 17:19:03 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\R\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
510,00 Mb Total Physical Memory | 129,00 Mb Available Physical Memory | 25,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 71,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 8,45 Gb Free Space | 43,28% Space Free | Partition Type: NTFS
Drive D: | 39,06 Gb Total Space | 19,78 Gb Free Space | 50,65% Space Free | Partition Type: NTFS
Drive E: | 39,06 Gb Total Space | 2,81 Gb Free Space | 7,20% Space Free | Partition Type: NTFS
Drive F: | 51,39 Gb Total Space | 46,34 Gb Free Space | 90,18% Space Free | Partition Type: NTFS
Computer Name: RR | User Name: R | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2011-04-22 17:05:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\R\Pulpit\OTL.exe
PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
PRC - [2005-12-06 14:53:30 | 000,819,200 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\neostradatp.exe
PRC - [2005-11-22 12:54:18 | 000,249,856 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\ComComp.exe
PRC - [2004-11-02 15:31:20 | 000,069,632 | ---- | M] (France Telecom R&D) -- C:\Program Files\neostrada tp\Toaster.exe
PRC - [2004-10-27 11:30:44 | 000,032,768 | ---- | M] () -- C:\Program Files\neostrada tp\Inactivity.exe
PRC - [2004-10-27 11:07:06 | 000,069,632 | ---- | M] () -- C:\Program Files\neostrada tp\PollingModule.exe
PRC - [2004-10-21 08:50:52 | 000,045,056 | ---- | M] () -- C:\WINDOWS\system32\AlertModule\AlertModule.exe
PRC - [2004-08-23 14:49:56 | 000,040,960 | ---- | M] (France Telecom) -- C:\WINDOWS\system32\FTRTSVC.exe
PRC - [2004-08-23 14:49:56 | 000,020,480 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\Watch.exe
PRC - [2004-05-05 07:22:12 | 000,491,520 | ---- | M] (Hewlett-Packard) -- C:\WINDOWS\system32\hphmon05.exe
PRC - [2003-12-22 08:38:40 | 000,135,168 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2011-04-22 17:05:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\R\Pulpit\OTL.exe
MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2004-10-26 09:49:34 | 000,028,672 | ---- | M] () -- C:\Program Files\neostrada tp\Inactivity.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2010-12-08 14:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2007-12-06 21:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0)
SRV - [2004-08-23 14:49:56 | 000,040,960 | ---- | M] (France Telecom) [Auto | Running] -- C:\WINDOWS\system32\FTRTSVC.exe -- (FTRTSVC)
SRV - [2004-03-18 16:55:48 | 000,065,536 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2010-07-30 14:16:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010-07-30 14:16:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010-07-30 14:16:42 | 000,023,040 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010-07-30 14:16:38 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2009-07-21 18:30:48 | 003,565,056 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2009-05-19 15:07:13 | 000,043,672 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K)
DRV - [2009-05-14 19:00:28 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2006-06-16 12:53:16 | 000,025,088 | ---- | M] (Ark Pioneer MicroElectronics Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\IrUSB.sys -- (IrUSB)
DRV - [2006-05-25 19:28:44 | 000,684,265 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\torususb.sys -- (TaurusUsb)
DRV - [2004-09-06 10:01:56 | 000,161,536 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vinyl97.sys -- (VIAudio) Vinyl AC'97 Audio Controller (WDM)
DRV - [2003-08-12 18:51:00 | 000,060,255 | R--- | M] (STMicroelectronics ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\stmatm.sys -- (Stmatm)
DRV - [2003-08-04 13:22:44 | 000,016,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5)
DRV - [2003-07-01 22:42:00 | 000,027,904 | R--- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = about:blank
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = about:blank
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
IE - HKU\S-1-5-21-1960408961-562591055-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\S-1-5-21-1960408961-562591055-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-1960408961-562591055-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-1960408961-562591055-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1960408961-562591055-725345543-1003\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\neostrada tp\SearchPageURL.dll ()
IE - HKU\S-1-5-21-1960408961-562591055-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultenginename: "Web Search..."
FF - prefs.js..browser.search.defaulturl: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=14542"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl"
FF - prefs.js..extensions.enabledItems: ffxtlbr@Facemoods.com:1.1.0
FF - prefs.js..extensions.enabledItems: {5EB37AE4-DA0A-41ab-8037-BDEDDCC70669}:1.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {E84D42CA-64EB-11DE-A65F-8C3656D89593}:3.0
FF - prefs.js..extensions.enabledItems: wrc@avast.com:20110101
FF - prefs.js..extensions.enabledItems: bkmrksync@nokia.com:1.0.0.736
FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q="
FF - HKLM\software\mozilla\Firefox\extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2011-03-28 19:51:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-04-22 00:20:33 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-04-22 15:56:51 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
[2009-05-13 21:12:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Extensions
[2011-04-22 16:42:33 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Firefox\Profiles\b3pahs5p.default\extensions
[2009-08-12 12:19:51 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Firefox\Profiles\b3pahs5p.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2009-09-30 18:37:26 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Firefox\Profiles\b3pahs5p.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009-11-11 14:21:11 | 000,000,000 | ---D | M] (MediaBar) -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Firefox\Profiles\b3pahs5p.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}
[2010-09-26 12:46:48 | 000,000,000 | ---D | M] (Facemoods) -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Firefox\Profiles\b3pahs5p.default\extensions\ffxtlbr@Facemoods.com
[2011-02-14 10:50:04 | 000,000,000 | ---D | M] (vShare) -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Firefox\Profiles\b3pahs5p.default\extensions\vshare@toolbar(2)
[2009-07-18 01:02:48 | 000,002,476 | ---- | M] () -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Firefox\Profiles\b3pahs5p.default\searchplugins\BearShareWebSearch.xml
[2011-02-09 21:37:09 | 000,001,583 | ---- | M] () -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Firefox\Profiles\b3pahs5p.default\searchplugins\web-search.xml
[2009-08-12 12:19:58 | 000,001,196 | ---- | M] () -- C:\Documents and Settings\R\Dane aplikacji\Mozilla\Firefox\Profiles\b3pahs5p.default\searchplugins\winamp-search.xml
[2011-04-22 15:56:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2009-10-20 20:50:38 | 000,000,000 | ---D | M] (flashget Extension) -- C:\Program Files\Mozilla Firefox\extensions\{5EB37AE4-DA0A-41ab-8037-BDEDDCC70669}
[2011-04-22 15:56:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2008-07-25 10:31:48 | 000,028,672 | ---- | M] (flashget) -- C:\Program Files\Mozilla Firefox\components\flashgetXpi.dll
[2011-04-22 15:56:35 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010-09-26 12:46:01 | 000,002,226 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
[2009-07-18 01:02:48 | 000,002,476 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml
[2010-03-28 18:56:18 | 000,002,035 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrchFxt.xml
[2009-12-09 11:46:54 | 000,000,832 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\WebSearch.xml
O1 HOSTS File: ([2001-10-26 15:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - File not found
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - File not found
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-1960408961-562591055-725345543-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-1960408961-562591055-725345543-1003\..\Toolbar\WebBrowser: (no name) - {577EBCA9-8ED3-45FC-A514-55B3817D4BCF} - No CLSID value found.
O3 - HKU\S-1-5-21-1960408961-562591055-725345543-1003\..\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - File not found
O4 - HKLM..\Run: [BVRPLiveUpdate] File not found
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe (HP)
O4 - HKLM..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe (Hewlett-Packard)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [WOOWATCH] C:\Program Files\neostrada tp\Watch.exe (France Télécom R&D)
O4 - HKU\S-1-5-21-1960408961-562591055-725345543-1003..\Run: [iGoD] File not found
O4 - HKU\S-1-5-21-1960408961-562591055-725345543-1003..\Run: [Software Informer] File not found
O4 - HKU\S-1-5-21-1960408961-562591055-725345543-1003..\Run: [UniblueRegistryBooster] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1960408961-562591055-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O7 - HKU\S-1-5-21-1960408961-562591055-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} Reg Error: Key error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 () - C:/Program Files/Gadu-Gadu 10/5.JPG
O24 - Desktop Components:1 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-05-13 19:01:09 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010-12-30 21:15:53 | 000,000,000 | RHSD | M] - C:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-12-30 21:15:55 | 000,000,000 | RHSD | M] - D:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-12-30 21:15:56 | 000,000,000 | RHSD | M] - E:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-12-30 21:15:57 | 000,000,000 | RHSD | M] - F:\Autorun.inf -- [ NTFS ]
O33 - MountPoints2\{e1215f4c-793e-11de-843d-006900003efb}\Shell\AutoRun\command - "" = I:\xs6kpr0.exe
O33 - MountPoints2\{e1215f4c-793e-11de-843d-006900003efb}\Shell\open\Command - "" = I:\xs6kpr0.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2011-04-22 17:05:48 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\R\Pulpit\OTL.exe
[2011-04-22 15:57:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011-04-22 15:56:51 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011-04-22 15:56:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011-04-22 15:56:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011-04-22 15:56:51 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2011-04-22 14:15:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\R\Dane aplikacji\Malwarebytes
[2011-04-22 14:15:43 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011-04-22 14:15:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware
[2011-04-22 14:15:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2011-04-22 14:15:38 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011-04-22 14:15:38 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011-04-22 14:09:39 | 007,734,240 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\R\Pulpit\mbam_1.50.1.1100_[www.programosy.pl].exe
[2011-04-22 00:43:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\facemoods.com
[2011-04-22 00:24:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\R\Pulpit\Nowy folder
[2011-04-22 00:20:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox
[2011-04-22 00:20:16 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\R\Recent
[2011-04-21 23:45:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner
[2011-04-21 23:20:54 | 000,000,000 | ---D | C] -- C:\_OTL
[2011-04-09 11:48:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\Macromedia
[2011-04-09 11:48:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\AskToolbar
[2011-03-28 19:51:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Nokia PC Suite
[2011-03-28 19:51:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PCSuite
[2011-03-28 19:51:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nokia
[2011-03-28 19:50:33 | 000,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys
[2011-03-28 19:50:02 | 000,000,000 | ---D | C] -- C:\Program Files\PC Connectivity Solution
[2011-03-28 19:47:58 | 000,008,192 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys
[2011-03-28 19:47:55 | 000,008,192 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerflt.sys
[2011-03-28 19:47:53 | 000,023,040 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys
[2011-03-28 19:47:41 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01009.dll
[2011-03-28 19:47:41 | 000,604,160 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll
[2011-03-28 19:47:41 | 000,111,104 | ---- | C] (Nokia) -- C:\WINDOWS\System32\ccdcmbwu.dll
[2011-03-28 19:47:41 | 000,018,048 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys
[2010-10-18 18:53:54 | 000,568,664 | ---- | C] (Google Inc.) -- C:\Program Files\GoogleEarthPluginSetup.exe
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\*.tmp files -> C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2011-04-22 17:21:28 | 000,000,857 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\cfg
[2011-04-22 17:17:14 | 001,195,254 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\ekran.bmp
[2011-04-22 17:05:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\R\Pulpit\OTL.exe
[2011-04-22 17:05:03 | 000,301,568 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\lh7e35yu.exe
[2011-04-22 17:01:11 | 000,000,292 | ---- | M] () -- C:\WINDOWS\tasks\systems.job
[2011-04-22 17:01:07 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2011-04-22 17:01:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-04-22 16:59:53 | 006,029,312 | ---- | M] () -- C:\Documents and Settings\R\ntuser.dat
[2011-04-22 16:59:53 | 000,000,292 | -HS- | M] () -- C:\Documents and Settings\R\ntuser.ini
[2011-04-22 16:59:00 | 000,001,116 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-562591055-725345543-1003UA.job
[2011-04-22 16:56:12 | 000,154,838 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\SPTDinst-v178-x64.exe
[2011-04-22 16:26:36 | 000,154,838 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\SPTDinst-v178-x86.exe
[2011-04-22 16:10:29 | 000,000,461 | ---- | M] () -- C:\WINDOWS\win.ini
[2011-04-22 16:10:29 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2011-04-22 16:10:29 | 000,000,211 | ---- | M] () -- C:\boot.ini
[2011-04-22 15:56:35 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2011-04-22 15:56:35 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011-04-22 15:56:35 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011-04-22 15:56:35 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011-04-22 15:56:35 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2011-04-22 15:12:31 | 004,812,744 | -H-- | M] () -- C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2011-04-22 15:11:27 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011-04-22 14:15:43 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2011-04-22 14:09:39 | 007,734,240 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\R\Pulpit\mbam_1.50.1.1100_[www.programosy.pl].exe
[2011-04-22 08:26:01 | 000,222,432 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-04-22 01:27:25 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011-04-22 01:25:32 | 001,177,700 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2011-04-22 01:25:32 | 000,538,024 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-04-22 01:25:32 | 000,475,454 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-04-22 01:25:32 | 000,107,996 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-04-22 01:25:32 | 000,085,266 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-04-22 01:01:04 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-04-22 00:28:07 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-04-21 23:59:01 | 000,001,064 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-562591055-725345543-1003Core.job
[2011-04-21 23:49:55 | 000,158,644 | ---- | M] () -- C:\Documents and Settings\R\Moje dokumenty\cc_20110421_234947.reg
[2011-04-20 20:31:32 | 000,020,749 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\tiulowa.jpg
[2011-04-18 15:45:24 | 003,180,403 | ---- | M] () -- C:\Documents and Settings\R\Moje dokumenty\Obraz 5598.jpg
[2011-04-13 15:28:27 | 006,257,329 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\na_rosyjski_konkurs___.zip
[2011-04-13 14:36:41 | 000,054,082 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\morza.jpg
[2011-04-13 14:36:16 | 000,042,909 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\cieniny.jpg
[2011-04-13 14:35:55 | 000,045,471 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\zatoki.jpg
[2011-04-09 10:29:48 | 000,104,699 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\geo.jpg
[2011-03-30 21:39:32 | 000,000,151 | ---- | M] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2011-03-28 19:57:15 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2011-03-28 19:57:12 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011-03-28 19:51:57 | 000,001,763 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Nokia PC Suite.lnk
[2011-03-28 19:43:53 | 036,930,464 | ---- | M] () -- C:\Documents and Settings\R\Pulpit\Nokia_PC_Suite_pol_web.exe
[2011-03-28 11:45:37 | 000,028,160 | ---- | M] () -- C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\*.tmp files -> C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2011-04-22 17:16:24 | 001,195,254 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\ekran.bmp
[2011-04-22 17:05:01 | 000,301,568 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\lh7e35yu.exe
[2011-04-22 16:56:12 | 000,154,838 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\SPTDinst-v178-x64.exe
[2011-04-22 16:53:09 | 000,000,606 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\cfg
[2011-04-22 16:26:36 | 000,154,838 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\SPTDinst-v178-x86.exe
[2011-04-22 14:15:43 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2011-04-22 00:42:43 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2011-04-21 23:54:03 | 000,001,116 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-562591055-725345543-1003UA.job
[2011-04-21 23:54:03 | 000,001,064 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-562591055-725345543-1003Core.job
[2011-04-21 23:49:51 | 000,158,644 | ---- | C] () -- C:\Documents and Settings\R\Moje dokumenty\cc_20110421_234947.reg
[2011-04-20 20:27:54 | 000,020,749 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\tiulowa.jpg
[2011-04-18 15:43:45 | 003,180,403 | ---- | C] () -- C:\Documents and Settings\R\Moje dokumenty\Obraz 5598.jpg
[2011-04-13 15:55:53 | 000,104,699 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\geo.jpg
[2011-04-13 15:27:43 | 006,257,329 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\na_rosyjski_konkurs___.zip
[2011-04-13 14:36:41 | 000,054,082 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\morza.jpg
[2011-04-13 14:36:16 | 000,042,909 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\cieniny.jpg
[2011-04-13 14:35:53 | 000,045,471 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\zatoki.jpg
[2011-04-02 19:43:32 | 006,029,312 | ---- | C] () -- C:\Documents and Settings\R\ntuser.dat
[2011-03-28 19:57:15 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2011-03-28 19:57:12 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011-03-28 19:51:57 | 000,001,763 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Nokia PC Suite.lnk
[2011-03-28 19:38:47 | 036,930,464 | ---- | C] () -- C:\Documents and Settings\R\Pulpit\Nokia_PC_Suite_pol_web.exe
[2010-09-16 18:22:26 | 000,000,343 | ---- | C] () -- C:\WINDOWS\pdf2word.INI
[2010-08-11 20:51:54 | 000,000,127 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2010-05-08 19:58:22 | 000,336,896 | ---- | C] () -- C:\WINDOWS\System32\ammppg.dll
[2010-05-08 19:58:22 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010-05-08 19:58:22 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\a1.dll
[2010-05-08 19:58:20 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\qscl.dll
[2010-05-08 19:58:20 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\amrdec.dll
[2010-05-08 19:58:20 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\qcpsdk.dll
[2010-04-09 18:25:53 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfmonnt.dll
[2010-04-09 18:25:51 | 000,000,164 | ---- | C] () -- C:\WINDOWS\System32\psconv.ini
[2010-02-27 14:43:42 | 000,000,148 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2009-12-30 16:50:38 | 000,102,400 | ---- | C] () -- C:\WINDOWS\removeARKIRDA.exe
[2009-11-22 14:12:50 | 000,000,021 | ---- | C] () -- C:\WINDOWS\kit.ini
[2009-11-21 13:32:58 | 000,000,018 | ---- | C] () -- C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\devcpp.cfg
[2009-11-21 10:47:32 | 007,025,862 | ---- | C] () -- C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\cache.ccc
[2009-11-21 10:44:14 | 000,004,702 | ---- | C] () -- C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\devcpp.ini
[2009-11-11 13:56:31 | 000,000,161 | R--- | C] () -- C:\WINDOWS\DSLSetup.ini
[2009-11-11 13:56:29 | 000,000,902 | R--- | C] () -- C:\WINDOWS\System32\setup.ini
[2009-11-11 13:56:23 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\stmclean.exe
[2009-11-11 13:56:20 | 000,684,265 | R--- | C] () -- C:\WINDOWS\System32\drivers\torususb.sys
[2009-10-15 17:36:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2009-07-21 17:17:04 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2009-07-21 17:17:04 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2009-06-20 17:01:42 | 000,000,048 | ---- | C] () -- C:\Documents and Settings\R\Dane aplikacji\AVSDVDPlayer.m3u
[2009-06-20 16:55:54 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-06-20 16:55:54 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-06-20 13:04:38 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-06-19 20:54:27 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2009-05-19 15:13:05 | 000,019,887 | ---- | C] () -- C:\WINDOWS\HPHins02.dat
[2009-05-19 15:13:05 | 000,004,308 | ---- | C] () -- C:\WINDOWS\hphmdl02.dat
[2009-05-19 15:09:37 | 000,019,887 | ---- | C] () -- C:\WINDOWS\HPHins02.dat.temp
[2009-05-19 15:09:37 | 000,004,308 | ---- | C] () -- C:\WINDOWS\hphmdl02.dat.temp
[2009-05-14 20:19:21 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-05-14 19:00:28 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-05-13 21:18:13 | 000,028,160 | ---- | C] () -- C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-05-13 21:12:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009-05-13 20:20:12 | 001,177,700 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-05-13 20:20:12 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-05-13 20:18:57 | 000,222,432 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-05-13 19:54:37 | 000,049,048 | ---- | C] () -- C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-05-13 19:54:22 | 000,000,126 | ---- | C] () -- C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2009-05-13 19:50:25 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2009-05-13 19:50:18 | 000,189,051 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2009-05-13 19:42:33 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\UnAudioNT.dll
[2009-05-13 19:38:57 | 000,000,017 | ---- | C] () -- C:\WINDOWS\System32\auto.ini
[2009-05-13 19:08:36 | 004,812,744 | -H-- | C] () -- C:\Documents and Settings\R\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-05-13 19:03:42 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009-05-13 19:01:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini
[2009-05-13 19:00:03 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2009-05-13 18:59:58 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009-05-13 18:58:30 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\fltlib.dll
[2009-05-13 18:57:50 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-05-13 18:57:40 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini
[2009-05-13 18:57:40 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini
[2009-05-13 18:56:55 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini
[2009-05-13 18:56:54 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini
[2009-05-13 18:56:44 | 000,351,744 | ---- | C] () -- C:\WINDOWS\System32\hypertrm.dll
[2006-10-24 12:30:20 | 000,412,160 | ---- | C] () -- C:\WINDOWS\System32\photometadatahandler.dll
[2004-08-04 00:56:48 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004-08-04 00:44:10 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll
[2004-08-04 00:44:04 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll
[2004-08-04 00:43:58 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll
[2004-08-04 00:43:56 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll
[2004-08-04 00:43:54 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll
[2004-08-04 00:43:16 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll
[2004-08-03 22:51:32 | 000,053,920 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe
[2004-08-03 22:48:52 | 000,003,346 | ---- | C] () -- C:\WINDOWS\System32\redir.exe
[2004-08-03 22:46:56 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys
[2004-08-03 22:45:34 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys
[2004-08-03 22:45:16 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys
[2004-08-03 22:45:16 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys
[2004-08-03 22:45:14 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys
[2004-08-03 22:45:12 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys
[2004-08-02 14:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004-07-17 11:46:14 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini
[2004-07-17 11:34:48 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll
[2004-05-05 07:13:02 | 000,006,478 | ---- | C] () -- C:\WINDOWS\System32\hphmon05.dat
[2004-04-01 16:52:10 | 000,364,544 | ---- | C] () -- C:\WINDOWS\System32\hphped05.exe
[2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001-10-26 19:29:54 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe
[2001-10-26 19:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll
[2001-10-26 17:29:40 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\scriptpw.dll
[2001-10-26 17:29:32 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll
[2001-10-26 17:28:34 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll
[2001-10-26 17:27:02 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll
[2001-10-26 16:15:16 | 000,538,024 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2001-10-26 16:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2001-10-26 16:15:16 | 000,107,996 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2001-10-26 16:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2001-10-26 16:15:10 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\vwipxspx.exe
[2001-10-26 16:15:08 | 000,011,859 | ---- | C] () -- C:\WINDOWS\System32\setver.exe
[2001-10-26 16:15:08 | 000,003,260 | ---- | C] () -- C:\WINDOWS\System32\nw16.exe
[2001-10-26 16:15:04 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys
[2001-10-26 16:14:58 | 000,007,116 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe
[2001-10-26 16:14:56 | 000,039,434 | ---- | C] () -- C:\WINDOWS\System32\mem.exe
[2001-10-26 16:14:54 | 000,014,913 | ---- | C] () -- C:\WINDOWS\System32\kb16.com
[2001-10-26 16:14:54 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com
[2001-10-26 16:14:52 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys
[2001-10-26 16:14:50 | 000,019,806 | ---- | C] () -- C:\WINDOWS\System32\graphics.com
[2001-10-26 16:14:48 | 000,008,520 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe
[2001-10-26 16:14:46 | 000,012,866 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe
[2001-10-26 16:14:42 | 000,020,986 | ---- | C] () -- C:\WINDOWS\System32\debug.exe
[2001-10-26 16:14:38 | 000,051,823 | ---- | C] () -- C:\WINDOWS\System32\command.com
[2001-10-26 16:14:34 | 000,012,594 | ---- | C] () -- C:\WINDOWS\System32\append.exe
[2001-10-26 16:14:32 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys
[2001-10-26 16:12:52 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini
[2001-10-26 15:45:26 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini
[2001-10-26 15:45:26 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini
[2001-10-26 15:45:24 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini
[2001-10-26 15:45:10 | 000,070,622 | ---- | C] () -- C:\WINDOWS\System32\edit.com
[2001-10-26 15:42:08 | 000,020,629 | ---- | C] () -- C:\WINDOWS\System32\mqperf.ini
[2001-10-26 15:42:08 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini
[2001-10-26 15:42:08 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini
[2001-10-26 15:42:08 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini
[2001-08-23 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001-08-23 13:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001-08-17 21:35:10 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe
[2001-08-17 21:32:34 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe
[2001-08-17 21:32:34 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe
[2001-08-17 21:31:56 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys
[2001-08-17 21:31:56 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys
[2001-08-17 21:31:50 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys
[2001-08-17 21:31:46 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys
[2001-08-17 21:31:46 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys
[2001-08-17 21:31:44 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys
[2001-08-17 21:30:24 | 000,475,454 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001-08-17 21:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001-08-17 21:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001-08-17 21:30:22 | 000,085,266 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001-08-17 21:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001-08-17 21:13:24 | 000,002,656 | ---- | C] () -- C:\WINDOWS\System32\netware.drv
[2001-08-17 19:55:06 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini
[2001-07-22 02:25:18 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini
[2001-07-21 22:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001-07-21 22:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001-07-21 22:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001-07-21 22:16:20 | 000,000,461 | ---- | C] () -- C:\WINDOWS\win.ini
[2001-07-21 22:15:52 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[2001-07-21 22:15:50 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll
[color=#E56717]========== LOP Check ==========[/color]
[2009-10-08 17:46:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\29196
[2011-03-17 13:46:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software
[2011-04-22 15:11:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2009-05-17 11:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\B138
[2009-08-09 18:55:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software
[2009-11-11 14:11:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\D271
[2009-05-14 19:17:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2011-02-14 10:47:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\dOjBjKa04300
[2010-01-28 20:29:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FileCure
[2010-08-04 17:02:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2011-03-28 19:44:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2009-09-23 22:15:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-05-17 11:54:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2009-10-08 17:42:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SpeedBit
[2009-10-08 17:40:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2011-04-22 00:43:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\facemoods.com
[2010-09-23 21:37:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\$CUERoot$
[2010-05-02 10:34:44 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\R\Dane aplikacji\.#
[2009-11-11 14:10:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\BearShareTb
[2011-04-22 15:54:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\BITS
[2009-05-14 19:18:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\DAEMON Tools
[2009-05-14 20:12:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\DAEMON Tools Lite
[2009-05-14 19:18:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\DAEMON Tools Pro
[2010-08-17 12:52:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\ESET
[2010-09-26 12:48:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\facemoods.com
[2011-04-08 09:05:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\Gadu-Gadu 10
[2009-08-29 11:39:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\gtk-2.0
[2009-05-17 11:54:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\Nokia
[2009-08-15 15:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\Nowe Gadu-Gadu
[2009-09-23 22:15:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\OpenFM
[2011-03-28 19:58:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\PC Suite
[2010-12-27 19:48:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\PhotoFiltre
[2009-11-01 13:50:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\Thinstall
[2010-09-01 20:32:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\Uniblue
[2010-09-26 12:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\R\Dane aplikacji\uTorrent
[2011-04-22 17:01:11 | 000,000,292 | ---- | M] () -- C:\WINDOWS\Tasks\systems.job
[color=#E56717]========== Purity Check ==========[/color]
[color=#E56717]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:D74B6CF5
< End of report >
Tak jak pisałem wcześniej robiłem skan Malwerbytes ale pomimo usunięcia infekcji problem istniał dalej. Właściwie już w akcie rozpaczy ściągnąłem aktualnego DrWeba i już w szybkim skanowaniu znalazł intruza i po wyleczeniu jak na razie wszystko działa. 