Aplikacja nie zostala wlasciwie zainicjowana (0xc000000005). kliknij przycisk ok, aby zakonczyc aplikacje.
Oczywiscie wczesniej wszystko bylo ok, chyba przynioslem skads wirusa na pendrivie, daje log z OTLa
- Kod: Zaznacz wszystko
OTL logfile created on: 2009-08-19 18:01:16 - Run 1
OTL by OldTimer - Version 3.0.10.7 Folder = C:\Documents and Settings\test\Desktop
Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1023,23 Mb Total Physical Memory | 469,58 Mb Available Physical Memory | 45,89% Memory free
2,41 Gb Paging File | 1,87 Gb Available in Paging File | 77,92% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 88,51 Gb Total Space | 1,45 Gb Free Space | 1,64% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: LINK
Current User Name: test
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2004-08-10 14:00:00 | 00,069,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\AhnRpta.exe
PRC - [2005-01-18 01:38:38 | 00,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
PRC - [2004-08-28 09:33:00 | 00,110,592 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) -- C:\WINDOWS\System32\DVDRAMSV.exe
PRC - [2005-10-11 08:40:32 | 00,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehRecvr.exe
PRC - [2005-08-05 14:56:32 | 00,102,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehSched.exe
PRC - [2007-07-31 14:54:20 | 00,065,536 | ---- | M] (France Telecom SA) -- C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
PRC - [2005-08-30 03:54:00 | 00,127,042 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe
PRC - [2006-03-03 22:03:10 | 00,069,632 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe
PRC - [2002-09-20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
PRC - [2005-08-05 14:27:08 | 00,099,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ehome\mcrdsvc.exe
PRC - [2005-04-05 17:25:34 | 00,143,360 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
PRC - [2005-07-07 16:52:32 | 00,339,968 | ---- | M] (TOSHIBA Corporation) -- C:\WINDOWS\System32\TPSMain.exe
PRC - [2005-09-06 12:51:12 | 00,098,304 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
PRC - [2004-12-15 19:02:12 | 00,147,456 | ---- | M] (TOSHIBA Corp.) -- C:\WINDOWS\System32\TFNF5.exe
PRC - [2005-05-11 10:23:28 | 00,253,952 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\TOSHIBA Controls\TFncKy.exe
PRC - [2004-10-14 09:11:10 | 01,458,176 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
PRC - [2005-07-07 16:52:16 | 00,040,960 | ---- | M] (TOSHIBA Corporation) -- C:\WINDOWS\System32\TPSBattM.exe
PRC - [2004-08-10 14:00:00 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wscntfy.exe
PRC - [2005-05-13 12:03:16 | 00,188,416 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Program narzędziowy TOSHIBA Zooming Utility\SmoothView.exe
PRC - [2006-05-29 10:42:32 | 00,225,280 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\QuickTime\qttask.exe
PRC - [2005-08-30 14:21:36 | 01,155,152 | ---- | M] (TOSHIBA) -- C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
PRC - [2005-08-06 11:18:38 | 01,052,672 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
PRC - [2005-08-05 14:56:34 | 00,064,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ehome\ehtray.exe
PRC - [2005-05-31 06:33:00 | 00,122,941 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfswctrl.exe
PRC - [2005-07-29 23:31:56 | 00,872,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSServ.exe
PRC - [2004-03-24 07:40:00 | 00,278,528 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint2K\Apoint.exe
PRC - [2005-04-13 01:01:26 | 00,170,278 | ---- | M] (Agere Systems) -- C:\WINDOWS\AGRSMMSG.exe
PRC - [2005-08-05 14:56:28 | 00,046,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehmsas.exe
PRC - [2005-05-11 14:13:22 | 00,327,680 | ---- | M] (TOSHIBA Corporation) -- C:\WINDOWS\System32\00THotkey.exe
PRC - [2007-03-23 13:20:52 | 00,309,248 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
PRC - [2006-07-30 19:00:00 | 00,172,032 | R--- | M] (Hewlett-Packard) -- C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
PRC - [2003-08-20 00:22:30 | 00,360,448 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe
PRC - [2005-07-22 03:38:24 | 00,901,120 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFXFER.exe
PRC - [2005-04-12 13:04:18 | 00,143,360 | ---- | M] (TOSHIBA) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
PRC - [2004-10-13 18:24:37 | 01,772,032 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe
PRC - [2007-03-26 13:06:24 | 00,292,864 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
PRC - [2007-07-24 19:48:34 | 00,667,648 | ---- | M] (France Telecom SA) -- C:\Program Files\OrangeBS\BEWInternet-PL\Launcher\Launcher.exe
PRC - [2006-09-25 19:50:02 | 20,053,544 | ---- | M] () -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2003-02-26 20:08:00 | 00,045,056 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint2K\Apntex.exe
PRC - [2004-08-28 09:37:00 | 00,225,280 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) -- C:\WINDOWS\System32\RAMASST.exe
PRC - [2007-07-24 19:16:32 | 00,090,112 | ---- | M] (France Telecom SA) -- C:\Program Files\Common Files\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
PRC - [2007-07-24 19:55:32 | 00,192,512 | ---- | M] (France Telecom SA) -- C:\Program Files\OrangeBS\BEWInternet-PL\systray\systrayapp.exe
PRC - [2007-07-31 14:58:02 | 00,364,544 | ---- | M] (France Telecom SA) -- C:\Program Files\OrangeBS\BEWInternet-PL\connectivity\CoreCom\CoreCom.exe
PRC - [2007-06-13 12:23:07 | 01,033,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-07-24 19:24:28 | 00,724,992 | ---- | M] (France Telecom SA) -- C:\Program Files\OrangeBS\BEWInternet-PL\connectivity\connectivitymanager.exe
PRC - [2007-07-24 19:52:54 | 00,827,392 | ---- | M] (France Telecom SA) -- C:\Program Files\OrangeBS\BEWInternet-PL\PhoneTools\TextMessaging.exe
PRC - [2007-07-31 14:58:12 | 00,028,672 | ---- | M] (France Telecom SA) -- C:\Program Files\OrangeBS\BEWInternet-PL\connectivity\CoreCom\OraConfigRecover.exe
PRC - [2007-07-31 14:54:40 | 00,065,536 | ---- | M] (France Telecom SA) -- C:\Program Files\Common Files\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
PRC - [2004-08-10 14:00:00 | 00,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\wmiprvse.exe
PRC - [2007-07-24 19:38:50 | 01,093,632 | ---- | M] () -- C:\Program Files\OrangeBS\BEWInternet-PL\Deskboard\deskboard.exe
PRC - [2007-08-13 19:43:56 | 00,622,080 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe
PRC - [2009-08-19 17:56:55 | 00,514,048 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\test\Desktop\OTL.exe
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2007-04-13 04:20:52 | 00,033,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2005-01-18 01:38:38 | 00,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs [Auto | Running])
SRV - [2007-04-13 04:21:18 | 00,068,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2004-08-28 09:33:00 | 00,110,592 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) -- C:\WINDOWS\System32\DVDRAMSV.exe -- (DVD-RAM_Service [Auto | Running])
SRV - [2005-10-11 08:40:32 | 00,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehRecvr.exe -- (ehRecvr [Auto | Running])
SRV - [2005-08-05 14:56:32 | 00,102,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehSched.exe -- (ehSched [Auto | Running])
SRV - [2007-07-31 14:54:20 | 00,065,536 | ---- | M] (France Telecom SA) -- C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe -- (FTRTSVC [Auto | Running])
SRV - [2004-08-10 14:00:00 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2005-04-04 00:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped])
SRV - [2005-09-21 14:29:56 | 00,323,584 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\iPod\bin\iPodService.exe -- (iPodService [On_Demand | Stopped])
SRV - [2005-08-05 14:27:08 | 00,099,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ehome\mcrdsvc.exe -- (McrdSvc [Auto | Running])
SRV - [2004-08-10 05:11:50 | 00,085,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mhn.dll -- (MHN [On_Demand | Stopped])
SRV - [2005-08-30 03:54:00 | 00,127,042 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running])
SRV - [2006-10-13 14:35:12 | 00,065,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\nwwks.dll -- (NWCWorkstation [Auto | Running])
SRV - [2003-07-28 21:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2006-03-03 22:03:10 | 00,069,632 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe -- (Pml Driver HPZ12 [Unknown | Running])
SRV - [2007-03-26 13:06:24 | 00,292,864 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer [On_Demand | Running])
SRV - [2002-09-20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default) [Auto | Running])
SRV - [2006-05-17 23:13:20 | 00,827,392 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2004-10-07 01:29:50 | 00,129,280 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\drivers\aeaudio.sys -- (aeaudio [On_Demand | Running])
DRV - [2004-10-08 03:16:04 | 00,035,840 | ---- | M] (Oak Technology Inc.) -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K [System | Running])
DRV - [2005-04-13 01:06:10 | 01,066,278 | ---- | M] (Agere Systems) -- C:\WINDOWS\System32\DRIVERS\AGRSM.sys -- (AgereSoftModem [On_Demand | Running])
DRV - [2005-07-20 19:08:26 | 00,327,808 | ---- | M] (Aladdin Knowledge Systems Ltd.) -- C:\WINDOWS\System32\DRIVERS\akshasp.sys -- (akshasp [On_Demand | Stopped])
DRV - [2004-05-09 05:38:00 | 00,101,833 | ---- | M] (Alps Electric Co., Ltd.) -- C:\WINDOWS\System32\DRIVERS\Apfiltr.sys -- (ApfiltrService [On_Demand | Running])
DRV - File not found -- -- (asc3360pr [On_Demand | Running])
DRV - [2005-04-22 04:22:00 | 00,088,352 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\system32\drivers\drvmcdb.sys -- (drvmcdb [Boot | Running])
DRV - [2005-04-21 03:56:00 | 00,040,544 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\drvnddm.sys -- (drvnddm [Auto | Running])
DRV - [2006-04-16 08:34:28 | 00,223,128 | ---- | M] (DT Soft Ltd.) -- C:\WINDOWS\System32\Drivers\dtscsi.sys -- (dtscsi [On_Demand | Stopped])
DRV - [2004-06-22 17:32:34 | 00,154,112 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\DRIVERS\e100b325.sys -- (E100B [On_Demand | Running])
DRV - [2005-02-02 01:21:04 | 00,014,408 | ---- | M] (GEAR Software Inc.) -- C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM [On_Demand | Running])
DRV - [2006-04-13 02:04:39 | 00,049,664 | R--- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZid412.sys -- (HPZid412 [On_Demand | Stopped])
DRV - [2006-04-13 02:04:39 | 00,016,496 | R--- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZipr12.sys -- (HPZipr12 [On_Demand | Stopped])
DRV - [2006-04-13 02:04:39 | 00,021,568 | R--- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZius12.sys -- (HPZius12 [On_Demand | Stopped])
DRV - [2005-06-29 01:43:39 | 00,046,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\IrBus.sys -- (IrBus [On_Demand | Stopped])
DRV - [2003-09-11 00:36:54 | 00,021,060 | ---- | M] (InterVideo, Inc.) -- C:\WINDOWS\System32\drivers\iviaspi.sys -- (Iviaspi [On_Demand | Running])
DRV - [2005-06-02 12:33:00 | 00,102,384 | ---- | M] (Matsushita Electric Industrial Co.,Ltd.) -- C:\WINDOWS\System32\Drivers\meiudf.sys -- (meiudf [System | Running])
DRV - [2004-08-04 00:10:14 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\MPE.sys -- (MPE [On_Demand | Stopped])
DRV - [2003-01-29 23:35:00 | 00,012,032 | ---- | M] (TOSHIBA Corporation.) -- C:\WINDOWS\System32\DRIVERS\netdevio.sys -- (Netdevio [Auto | Running])
DRV - [2007-02-22 10:15:56 | 00,137,216 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcd.sys -- (nmwcd [On_Demand | Stopped])
DRV - [2007-02-22 10:15:14 | 00,008,320 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdc.sys -- (nmwcdc [On_Demand | Stopped])
DRV - [2007-02-22 10:15:14 | 00,012,288 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdcj.sys -- (nmwcdcj [On_Demand | Stopped])
DRV - [2007-02-22 10:15:14 | 00,012,288 | ---- | M] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdcm.sys -- (nmwcdcm [On_Demand | Stopped])
DRV - [2005-08-30 03:54:00 | 03,222,048 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running])
DRV - [2004-08-10 14:00:00 | 00,088,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys -- (NwlnkIpx [Auto | Running])
DRV - [2004-08-10 14:00:00 | 00,063,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\nwlnknb.sys -- (NwlnkNb [Auto | Running])
DRV - [2004-08-10 14:00:00 | 00,055,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys -- (NwlnkSpx [Auto | Running])
DRV - [2006-10-13 12:23:15 | 00,163,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\nwrdr.sys -- (NWRDR [On_Demand | Running])
DRV - [2003-09-23 11:38:34 | 00,034,688 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\PCAMPR5.SYS -- (PCAMPR5 [On_Demand | Stopped])
DRV - [2006-03-01 19:53:54 | 00,032,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\PCANDIS5.SYS -- (PCANDIS5 [On_Demand | Running])
DRV - [2003-09-19 02:47:00 | 00,010,368 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\System32\drivers\pfc.sys -- (Pfc [On_Demand | Running])
DRV - [2004-08-10 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])
DRV - [2004-08-10 14:00:00 | 00,027,440 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2005-01-03 00:32:00 | 00,114,944 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\DRIVERS\GCXX.sys -- (SEMWModem [On_Demand | Stopped])
DRV - [2005-01-03 00:32:00 | 00,053,248 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\DRIVERS\GCXXNet.sys -- (SEMWWNIC [On_Demand | Stopped])
DRV - [2005-06-23 13:56:26 | 00,048,384 | ---- | M] (Prolific Technology Inc.) -- C:\WINDOWS\System32\DRIVERS\ser2pl.sys -- (Ser2pl [On_Demand | Stopped])
DRV - [2004-09-01 11:17:46 | 00,259,648 | ---- | M] (Analog Devices, Inc.) -- C:\WINDOWS\System32\drivers\smwdm.sys -- (smwdm [On_Demand | Running])
DRV - [2001-08-17 14:56:16 | 00,007,552 | ---- | M] (Sony Corporation) -- C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS -- (SONYPVU1 [On_Demand | Stopped])
DRV - [2006-04-16 08:32:53 | 00,664,064 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running])
DRV - [2005-05-13 11:37:28 | 00,005,627 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\sscdbhk5.sys -- (sscdbhk5 [System | Running])
DRV - [2007-07-03 16:54:24 | 00,080,552 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\sscdbus.sys -- (sscdbus [On_Demand | Stopped])
DRV - [2007-07-03 16:57:24 | 00,011,944 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\sscdmdfl.sys -- (sscdmdfl [On_Demand | Stopped])
DRV - [2007-07-03 16:58:20 | 00,106,792 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\sscdmdm.sys -- (sscdmdm [On_Demand | Stopped])
DRV - [2005-05-13 11:37:20 | 00,023,545 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\ssrtln.sys -- (ssrtln [System | Running])
DRV - [2006-07-24 16:05:00 | 00,005,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen [System | Running])
DRV - File not found -- Service key not found. -- (SYMTDI [Unknown | Running])
DRV - [2005-05-31 06:33:00 | 00,025,725 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfsnboio.sys -- (tfsnboio [Auto | Running])
DRV - [2005-05-31 06:33:00 | 00,034,845 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfsncofs.sys -- (tfsncofs [Auto | Running])
DRV - [2005-05-31 06:33:00 | 00,004,125 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfsndrct.sys -- (tfsndrct [Auto | Running])
DRV - [2005-05-31 06:33:00 | 00,002,241 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfsndres.sys -- (tfsndres [Auto | Running])
DRV - [2005-05-31 06:33:00 | 00,086,876 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfsnifs.sys -- (tfsnifs [Auto | Running])
DRV - [2005-05-31 06:33:00 | 00,015,069 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfsnopio.sys -- (tfsnopio [Auto | Running])
DRV - [2005-05-31 06:33:00 | 00,006,365 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfsnpool.sys -- (tfsnpool [Auto | Running])
DRV - [2005-05-31 06:33:00 | 00,098,716 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfsnudf.sys -- (tfsnudf [Auto | Running])
DRV - [2005-05-31 06:33:00 | 00,100,605 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\dla\tfsnudfa.sys -- (tfsnudfa [Auto | Running])
DRV - [2005-06-04 01:50:40 | 00,162,176 | ---- | M] (Texas Instruments) -- C:\WINDOWS\System32\drivers\tifm21.sys -- (tifm21 [On_Demand | Running])
DRV - [2005-07-11 18:01:24 | 00,163,712 | ---- | M] (Toshiba Corporation) -- C:\Program Files\TOSHIBA\TMP2VDec\TOS_SPS.sys -- (TOS_SPS [Auto | Running])
DRV - [2005-09-22 04:35:36 | 00,173,696 | ---- | M] (TOSHIBA) -- C:\WINDOWS\System32\drivers\ttv400x.sys -- (ttv400x [On_Demand | Running])
DRV - [2004-09-08 18:49:00 | 00,009,216 | ---- | M] (TOSHIBA Corporation) -- C:\WINDOWS\system32\DRIVERS\TVALZ.SYS -- (TVALZ [Boot | Running])
DRV - [2005-05-10 18:50:00 | 00,029,056 | ---- | M] (TOSHIBA Corporation) -- C:\WINDOWS\System32\DRIVERS\Tvs.sys -- (Tvs [On_Demand | Running])
DRV - [2004-08-03 23:08:44 | 00,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\usbser.sys -- (usbser [On_Demand | Stopped])
DRV - [2004-10-29 19:48:10 | 03,222,784 | ---- | M] (Intel® Corporation) -- C:\WINDOWS\System32\DRIVERS\w29n51.sys -- (w29n51 [On_Demand | Running])
DRV - [2006-12-01 16:10:58 | 00,089,984 | ---- | M] (ZTE Incorporated) -- C:\WINDOWS\System32\DRIVERS\ZTEusbmdm6k.sys -- (ZTEusbmdm6k [On_Demand | Running])
DRV - [2006-12-01 16:10:58 | 00,089,984 | ---- | M] (ZTE Incorporated) -- C:\WINDOWS\System32\DRIVERS\ZTEusbnmea.sys -- (ZTEusbnmea [On_Demand | Running])
DRV - [2006-12-01 16:10:58 | 00,089,984 | ---- | M] (ZTE Incorporated) -- C:\WINDOWS\System32\DRIVERS\ZTEusbser6k.sys -- (ZTEusbser6k [On_Demand | Running])
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
O1 HOSTS File: (732 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\dla\tfswshx.dll (Sonic Solutions)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O4 - HKLM..\Run: [000StTHK] C:\WINDOWS\System32\000StTHK.exe ()
O4 - HKLM..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe File not found
O4 - HKLM..\Run: [AGRSMMSG] C:\WINDOWS\AGRSMMSG.exe (Agere Systems)
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [BEWINTERNET-PLSessionManager] C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe (France Telecom SA)
O4 - HKLM..\Run: [CFSServ.exe] C:\Program Files\Toshiba\ConfigFree\CFSServ.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [dla] C:\WINDOWS\System32\dla\tfswctrl.exe (Sonic Solutions)
O4 - HKLM..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation)
O4 - HKLM..\Run: [FineReader7NewsReaderPro] C:\Program Files\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe (ABBYY (BIT Software))
O4 - HKLM..\Run: [NDSTray.exe] C:\Program Files\Toshiba\ConfigFree\NDSTray.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe (Hewlett-Packard)
O4 - HKLM..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe (TOSHIBA)
O4 - HKLM..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe (Nokia)
O4 - HKLM..\Run: [pdfFactory Dispatcher v3] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Computer, Inc.)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\Program narzędziowy TOSHIBA Zooming Utility\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [TFncKy] C:\Program Files\Toshiba\TOSHIBA Controls\TFncKy.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TFNF5] C:\WINDOWS\System32\TFNF5.exe (TOSHIBA Corp.)
O4 - HKLM..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TPSMain] C:\WINDOWS\System32\TPSMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TPSODDCtl] C:\WINDOWS\System32\TPSODDCtl.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [VVSN] File not found
O4 - HKCU..\Run: [ares] C:\Program Files\Ares\Ares.exe (Ares Development Group)
O4 - HKCU..\Run: [cdoosoft] C:\DOCUME~1\test\LOCALS~1\Temp\herss.exe File not found
O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O4 - HKCU..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Nowe Gadu-Gadu] C:\Program Files\Nowe Gadu-Gadu\gg.exe (GG Network S.A.)
O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe ()
O4 - HKCU..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe (TOSHIBA)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\RAMASST.lnk = C:\WINDOWS\System32\RAMASST.exe (Matsushita Electric Industrial Co., Ltd.)
O4 - Startup: C:\Documents and Settings\test\Start Menu\Programs\Startup\PowerReg Scheduler.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Java Plug-in 1.5.0_11)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Java Plug-in 1.5.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Java Plug-in 1.5.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O28 - HKLM ShellExecuteHooks: {BB4C402F-882A-4526-8C08-51278EA437C1} - C:\WINDOWS\System32\e8main0.dll ()
O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005-10-06 09:08:43 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-08-19 14:18:51 | 00,000,053 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{07c4c44e-94ff-11db-bf7a-dffc078c54e8}\Shell\AutoRun\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{07c4c44e-94ff-11db-bf7a-dffc078c54e8}\Shell\open\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{0ed35bbe-cd13-11da-bc2b-a51c900d29e5}\Shell - "" = AutoRun
O33 - MountPoints2\{0ed35bbe-cd13-11da-bc2b-a51c900d29e5}\Shell\AutoRun\command - "" = G:\setup\rsrc\Autorun.exe -- File not found
O33 - MountPoints2\{1f5f9506-7343-11dd-8323-000e7b72ed9a}\Shell\AutoRun\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{1f5f9506-7343-11dd-8323-000e7b72ed9a}\Shell\open\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{22681412-8ddf-11db-bf63-b498f2aa01ee}\Shell\AutoRun\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{22681412-8ddf-11db-bf63-b498f2aa01ee}\Shell\open\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{7d123074-5bf3-11dd-830a-000e7b72ed9a}\Shell\AutoRun\command - "" = E:\0xuc.com -- File not found
O33 - MountPoints2\{7d123074-5bf3-11dd-830a-000e7b72ed9a}\Shell\open\Command - "" = E:\0xuc.com -- File not found
O33 - MountPoints2\{80316c48-56d6-11de-8377-000e7b72ed9a}\Shell\AutoRun\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{80316c48-56d6-11de-8377-000e7b72ed9a}\Shell\open\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{8dbb543e-f8ca-11dc-8268-000e7b72ed9a}\Shell\AutoRun\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{8dbb543e-f8ca-11dc-8268-000e7b72ed9a}\Shell\open\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{9621dcc0-c670-11db-bff8-000e7b72ed9a}\Shell - "" = AutoRun
O33 - MountPoints2\{ad103a99-8367-11dd-832b-000e7b72ed9a}\Shell\AutoRun\command - "" = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{ad103a99-8367-11dd-832b-000e7b72ed9a}\Shell\open\command - "" = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{b37d6407-01ca-11dd-827d-000e7b72ed9a}\Shell\AutoRun\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{b37d6407-01ca-11dd-827d-000e7b72ed9a}\Shell\open\command - "" = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{c852da7d-ea80-11da-bcb7-0013ce92adbd}\Shell\AutoRun\command - "" = F:\0xuc.com -- File not found
O33 - MountPoints2\{c852da7d-ea80-11da-bcb7-0013ce92adbd}\Shell\open\Command - "" = F:\0xuc.com -- File not found
O33 - MountPoints2\{d00a89fc-c0a2-11da-bc08-806d6172696f}\Shell\AutoRun\command - "" = C:\lcw.exe -- [2009-08-19 13:29:59 | 01,027,983 | RHS- | M] ()
O33 - MountPoints2\{d00a89fc-c0a2-11da-bc08-806d6172696f}\Shell\open\Command - "" = C:\lcw.exe -- [2009-08-19 13:29:59 | 01,027,983 | RHS- | M] ()
O33 - MountPoints2\{e108b521-f2f0-11dd-834c-000e7b72ed9a}\Shell\AutoPlay\Command - "" = E:\xhnrv.exe -- File not found
O33 - MountPoints2\{e108b521-f2f0-11dd-834c-000e7b72ed9a}\Shell\AutoRun\command - "" = E:\xhnrv.exe -- File not found
O33 - MountPoints2\{e108b521-f2f0-11dd-834c-000e7b72ed9a}\Shell\ExpLOre\command - "" = E:\xhnrv.exe -- File not found
O33 - MountPoints2\{e108b521-f2f0-11dd-834c-000e7b72ed9a}\Shell\OPen\coMmANd - "" = E:\xhnrv.exe -- File not found
O33 - MountPoints2\{e3b24721-8a97-11de-838f-000e7b72ed9a}\Shell\AUtopLaY\command - "" = H:\yakx.cmd -- File not found
O33 - MountPoints2\{e3b24721-8a97-11de-838f-000e7b72ed9a}\Shell\AutoRun\command - "" = H:\yakx.cmd -- File not found
O33 - MountPoints2\{e3b24721-8a97-11de-838f-000e7b72ed9a}\Shell\ExPlore\COmMaNd - "" = H:\yakx.cmd -- File not found
O33 - MountPoints2\{e3b24721-8a97-11de-838f-000e7b72ed9a}\Shell\opeN\ComMand - "" = H:\yakx.cmd -- File not found
O33 - MountPoints2\{e3b24722-8a97-11de-838f-000e7b72ed9a}\Shell\AutoRun\command - "" = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O33 - MountPoints2\{e3b24722-8a97-11de-838f-000e7b72ed9a}\Shell\open\command - "" = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\wisenis32.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2009-08-19 17:56:55 | 00,514,048 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\test\Desktop\OTL.exe
[2009-08-19 17:51:02 | 00,119,757 | ---- | C] () -- C:\Documents and Settings\test\Desktop\otlv4_h.zip
[2009-08-19 01:24:46 | 00,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2009-08-19 01:07:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\test\Desktop\Jazz
[2009-08-18 00:48:43 | 01,027,983 | RHS- | C] () -- C:\lcw.exe
[2009-08-16 17:20:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\test\Application Data\VSO
[2009-08-16 17:16:26 | 00,000,773 | ---- | C] () -- C:\Documents and Settings\test\Desktop\VSO Image Resizer.lnk
[2009-08-16 17:16:23 | 00,000,000 | ---D | C] -- C:\Program Files\VSO
[2009-08-16 17:15:39 | 05,790,744 | ---- | C] (VSO-Software ) -- C:\Documents and Settings\test\Desktop\vso_image_resizer2_setup.exe
[2009-08-16 17:01:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\test\Desktop\brud
[2009-08-15 17:17:09 | 00,360,448 | RHS- | C] () -- C:\m1eqos3.exe
[2009-08-14 00:23:04 | 00,001,629 | ---- | C] () -- C:\Documents and Settings\test\Desktop\POI Loader (2).lnk
[2009-08-13 22:46:50 | 00,106,620 | RHS- | C] () -- C:\y8.exe
[2009-08-12 00:02:00 | 00,360,448 | RHS- | C] () -- C:\9u.exe
[2009-08-10 11:57:04 | 00,106,711 | RHS- | C] () -- C:\wbj.exe
[2009-08-07 23:37:14 | 00,209,757 | ---- | C] () -- C:\ktly.exe
[2009-08-07 23:25:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\test\Desktop\Kopia turWywolac
[2009-08-07 10:32:39 | 00,032,768 | ---- | C] () -- C:\Documents and Settings\test\Desktop\tabelka 2.doc
[2009-08-07 09:51:31 | 00,034,816 | ---- | C] () -- C:\Documents and Settings\test\Desktop\tabelka1.doc
[2009-08-06 01:27:21 | 00,002,014 | ---- | C] () -- C:\Documents and Settings\test\Desktop\Rajd na Berlin - Oddziały specjalne.lnk
[2009-08-06 01:14:08 | 00,001,769 | ---- | C] () -- C:\Documents and Settings\test\Desktop\Rajd na Berlin.lnk
[2009-08-06 00:57:31 | 02,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_25.dll
[2009-08-06 00:55:05 | 00,000,000 | ---D | C] -- C:\Program Files\City Interactive
[2009-08-05 00:57:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\test\Desktop\do wydrukowania w mm 2 razy po 150 zdjec
[2009-08-05 00:36:00 | 00,026,112 | ---- | C] () -- C:\Documents and Settings\test\Desktop\adaptacja.doc
[2009-08-03 21:50:20 | 00,360,448 | RHS- | C] () -- C:\22yj2fy1.exe
[2009-08-01 22:41:06 | 00,106,995 | RHS- | C] () -- C:\mqhnawe.bat
[2009-08-01 18:19:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\test\Desktop\turWywolac
[2009-07-31 21:07:30 | 00,393,216 | RHS- | C] () -- C:\6rxt26.exe
[2009-07-31 13:15:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\test\Desktop\turcja
[2009-07-29 20:06:01 | 00,107,843 | RHS- | C] () -- C:\rx.exe
[2009-07-29 20:04:11 | 00,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\AhnRpta.exe
[2009-07-29 19:56:23 | 00,112,212 | RHS- | C] () -- C:\qr.exe
[2009-04-28 13:58:52 | 00,075,073 | RHS- | C] () -- C:\WINDOWS\System32\nmdfgds1.dll
[2009-04-15 20:47:43 | 00,098,304 | ---- | C] () -- C:\WINDOWS\System32\nmdfgds0.dll
[2008-12-11 12:12:21 | 00,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfmonnt.dll
[2008-12-11 12:12:19 | 00,000,164 | ---- | C] () -- C:\WINDOWS\System32\psconv.ini
[2008-12-11 12:00:59 | 00,054,272 | ---- | C] () -- C:\WINDOWS\System32\P2irdao.dll
[2008-12-11 12:00:59 | 00,050,176 | ---- | C] () -- C:\WINDOWS\System32\P2ctdao.dll
[2008-12-11 12:00:58 | 00,748,160 | ---- | C] () -- C:\WINDOWS\System32\Co2c40en.dll
[2008-12-11 12:00:58 | 00,018,944 | ---- | C] ( ) -- C:\WINDOWS\System32\Implode.dll
[2008-10-14 20:46:18 | 00,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2007-10-18 19:54:07 | 00,106,496 | R--- | C] () -- C:\WINDOWS\System32\vshp1018.dll
[2007-07-26 11:15:26 | 00,000,005 | -HS- | C] () -- C:\WINDOWS\System32\dfeaabe5_g.dll
[2007-02-25 18:23:38 | 00,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2007-01-01 21:42:14 | 00,000,008 | RHS- | C] () -- C:\WINDOWS\System32\7E32E3AC8A.sys
[2006-12-14 09:54:42 | 00,003,654 | ---- | C] () -- C:\WINDOWS\System32\drivers\Sonyhcp.dll
[2006-10-12 13:11:44 | 00,000,056 | RHS- | C] () -- C:\WINDOWS\System32\580E6756F3.sys
[2006-10-11 14:17:15 | 00,000,434 | ---- | C] () -- C:\WINDOWS\MP3trtg.ini
[2006-10-11 14:01:28 | 00,001,103 | ---- | C] () -- C:\WINDOWS\psmplay.ini
[2006-10-03 21:37:41 | 00,005,729 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2006-09-18 14:13:59 | 00,011,255 | ---- | C] () -- C:\WINDOWS\hpdj5100.ini
[2006-09-17 16:42:38 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006-09-17 14:47:39 | 00,000,020 | ---- | C] () -- C:\WINDOWS\naglos.INI
[2006-08-25 17:29:58 | 00,000,056 | ---- | C] () -- C:\WINDOWS\Kulki.ini
[2006-07-02 01:13:40 | 00,011,894 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2006-07-02 01:13:40 | 00,000,056 | RHS- | C] () -- C:\WINDOWS\System32\D88E146096.sys
[2006-07-02 00:45:13 | 00,001,219 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2006-04-16 08:32:53 | 00,664,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2006-04-16 08:32:53 | 00,096,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd8397.sys
[2005-12-07 12:31:00 | 00,202,752 | R--- | C] () -- C:\WINDOWS\System32\CddbCdda.dll
[2005-10-06 18:47:38 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2005-10-06 18:47:38 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2005-10-06 18:47:37 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2005-10-06 18:47:36 | 01,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2005-10-06 13:27:41 | 00,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005-10-06 13:06:03 | 00,000,634 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005-10-06 12:53:49 | 00,000,012 | ---- | C] () -- C:\WINDOWS\dirsaver.ini
[2005-10-06 11:44:52 | 00,000,234 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2005-10-06 11:39:48 | 00,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2005-10-06 11:39:48 | 00,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2005-10-06 11:39:48 | 00,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2005-10-06 11:39:48 | 00,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2005-10-06 11:39:48 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2005-10-06 11:39:48 | 00,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2005-10-06 11:37:56 | 00,000,000 | ---- | C] () -- C:\WINDOWS\NDSTray.INI
[2005-10-06 11:23:51 | 00,128,113 | ---- | C] () -- C:\WINDOWS\System32\csellang.ini
[2005-10-06 11:23:51 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\csellang.dll
[2005-10-06 11:23:51 | 00,010,147 | ---- | C] () -- C:\WINDOWS\System32\tosmreg.ini
[2005-10-06 11:23:51 | 00,007,671 | ---- | C] () -- C:\WINDOWS\System32\cseltbl.ini
[2005-10-06 11:16:30 | 00,034,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\WOWXT_kern_i386.sys
[2005-10-06 11:16:30 | 00,029,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSXT_kern_i386.sys
[2005-10-06 11:12:08 | 00,024,576 | ---- | C] () -- C:\WINDOWS\System32\e100bmsg.dll
[2005-10-06 07:53:27 | 00,028,672 | ---- | C] () -- C:\WINDOWS\System32\ToshBIOS.dll
[2005-10-06 07:53:27 | 00,000,083 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005-10-06 07:52:42 | 00,001,061 | ---- | C] () -- C:\WINDOWS\win.ini
[2005-10-06 07:52:39 | 00,000,282 | ---- | C] () -- C:\WINDOWS\system.ini
[2005-10-06 07:52:34 | 00,282,112 | ---- | C] () -- C:\WINDOWS\System32\sbe(2).dll
[2005-10-06 07:52:34 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2005-10-06 07:52:19 | 00,356,352 | ---- | C] () -- C:\WINDOWS\System32\encdec(2).dll
[2005-10-06 07:52:19 | 00,060,072 | ---- | C] () -- C:\WINDOWS\System32\e8main0.dll
[2005-08-11 04:02:04 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005-08-05 15:01:54 | 00,239,104 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll
[2005-08-05 15:01:54 | 00,239,104 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd(2).dll
[2005-06-06 15:56:57 | 00,005,632 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2005-02-24 18:56:45 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2004-07-12 23:07:21 | 03,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll
[2004-01-14 03:46:34 | 00,172,032 | ---- | C] () -- C:\WINDOWS\System32\tifmicon.dll
[2001-07-07 04:00:02 | 00,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[20 C:\WINDOWS\System32\*.tmp files]
[2009-08-19 17:56:55 | 00,514,048 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\test\Desktop\OTL.exe
[2009-08-19 17:52:27 | 00,001,061 | ---- | M] () -- C:\WINDOWS\win.ini
[2009-08-19 17:52:03 | 00,119,757 | ---- | M] () -- C:\Documents and Settings\test\Desktop\otlv4_h.zip
[2009-08-19 17:25:02 | 00,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-08-19 17:24:36 | 00,030,466 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2009-08-19 17:23:39 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-08-19 17:23:32 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-08-19 17:23:26 | 10,730,08640 | -HS- | M] () -- C:\hiberfil.sys
[2009-08-19 14:18:51 | 00,000,053 | RHS- | M] () -- C:\autorun.inf
[2009-08-19 13:29:59 | 01,027,983 | RHS- | M] () -- C:\lcw.exe
[2009-08-19 01:24:46 | 00,000,552 | ---- | M] () -- C:\WINDOWS\System32\d3d8caps.dat
[2009-08-19 00:42:19 | 00,011,894 | -HS- | M] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2009-08-18 21:33:40 | 00,032,768 | ---- | M] () -- C:\Documents and Settings\test\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-08-18 18:57:57 | 00,032,933 | ---- | M] () -- C:\WINDOWS\bestplayer.bbt
[2009-08-18 18:57:57 | 00,001,219 | ---- | M] () -- C:\WINDOWS\bestplayer.ini
[2009-08-18 18:57:56 | 00,000,120 | ---- | M] () -- C:\WINDOWS\bestplayer.bpp
[2009-08-16 21:07:18 | 00,000,282 | ---- | M] () -- C:\WINDOWS\system.ini
[2009-08-16 17:16:26 | 00,000,773 | ---- | M] () -- C:\Documents and Settings\test\Desktop\VSO Image Resizer.lnk
[2009-08-16 17:16:15 | 05,790,744 | ---- | M] (VSO-Software ) -- C:\Documents and Settings\test\Desktop\vso_image_resizer2_setup.exe
[2009-08-15 17:16:40 | 00,360,448 | RHS- | M] () -- C:\m1eqos3.exe
[2009-08-14 00:23:04 | 00,001,629 | ---- | M] () -- C:\Documents and Settings\test\Desktop\POI Loader (2).lnk
[2009-08-13 22:46:21 | 00,106,620 | RHS- | M] () -- C:\y8.exe
[2009-08-13 01:20:42 | 00,360,448 | RHS- | M] () -- C:\9u.exe
[2009-08-10 18:19:06 | 00,106,711 | RHS- | M] () -- C:\wbj.exe
[2009-08-07 23:36:47 | 00,209,757 | ---- | M] () -- C:\ktly.exe
[2009-08-07 10:32:46 | 00,034,816 | ---- | M] () -- C:\Documents and Settings\test\Desktop\tabelka1.doc
[2009-08-07 10:32:39 | 00,032,768 | ---- | M] () -- C:\Documents and Settings\test\Desktop\tabelka 2.doc
[2009-08-07 00:35:38 | 00,360,448 | RHS- | M] () -- C:\22yj2fy1.exe
[2009-08-06 01:27:21 | 00,002,014 | ---- | M] () -- C:\Documents and Settings\test\Desktop\Rajd na Berlin - Oddziały specjalne.lnk
[2009-08-06 01:14:08 | 00,001,769 | ---- | M] () -- C:\Documents and Settings\test\Desktop\Rajd na Berlin.lnk
[2009-08-05 00:36:01 | 00,026,112 | ---- | M] () -- C:\Documents and Settings\test\Desktop\adaptacja.doc
[2009-08-01 22:40:38 | 00,106,995 | RHS- | M] () -- C:\mqhnawe.bat
[2009-07-31 21:07:01 | 00,393,216 | RHS- | M] () -- C:\6rxt26.exe
[2009-07-31 13:19:04 | 00,107,843 | RHS- | M] () -- C:\rx.exe
[2009-07-29 19:55:56 | 00,075,073 | RHS- | M] () -- C:\WINDOWS\System32\nmdfgds1.dll
[2009-07-29 19:55:53 | 00,112,212 | RHS- | M] () -- C:\WINDOWS\System32\olhrwef.exe
[2009-07-29 19:55:53 | 00,112,212 | RHS- | M] () -- C:\qr.exe
[2009-07-29 19:54:27 | 00,098,304 | ---- | M] () -- C:\WINDOWS\System32\nmdfgds0.dll
< End of report >
