Mam następujący problem: Od kilku dni, miej wiecej jakiegoś tygodnia internet bardzo zwolnił.. Myślałem, że to wina dostawcy, aczkolwiek teraz to juz sam niewiem, gdyż sprawa była zgłaszana i nic nie pomogło.. Skanowałem kompa mksem online + antyspywarami, antymalwerami itd itp. Ponadto znalazlem wira ise32.exe, którego mks nazwał mi Trojan.Agent.Sbl, natomiast w google zobaczyłem ze to jest backdoor.. z tym problemem jednak chyba sobie poradzilem bo wywalilem z rejestru klucze+ plik kill boxem w awaryjnym ciachnołem.. i problem zniknął.. dołącze logi z OTlistIt, gdyż RSIT niechciał mi sie zloadingować do downloadu - awaria strony albo moj szybki net...
Dodam jeszcze ze na speedtestach wyniki wychodzą tak tragiczne ze szkoda gadac...mam 1mb/s niby od dziś przyspieszony do 2mb/s a prędkość neta na speedtestach od 90kbit/s -400kbit/s jak powinna byc w graniach 900kbit/s na poczatku a teraz juz okolo 1800kbit/s minimum...
OtlistIt:
- Kod: Zaznacz wszystko
OTListIt logfile created on: 2009-06-02 18:00:04 - Run 1
OTListIt2 by OldTimer - Version 2.0.15.8 Folder = C:\Documents and Settings\Mat\Pulpit
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1,50 Gb Total Physical Memory | 0,97 Gb Available Physical Memory | 64,86% Memory free
2,11 Gb Paging File | 1,66 Gb Available in Paging File | 78,70% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 22,24 Gb Total Space | 9,24 Gb Free Space | 41,53% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive M: | 164,07 Gb Total Space | 91,15 Gb Free Space | 55,55% Space Free | Partition Type: NTFS
Computer Name: MAT-2D8EC4AEA91
Current User Name: Mat
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Output = Standard
File Age = 30 Days
Company Name Whitelist: On
[color=orange]========== Processes (SafeList) ==========[/color]
PRC - [2008-07-04 05:12:02 | 00,561,152 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\Ati2evxx.exe
PRC - [2008-07-04 05:12:02 | 00,561,152 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\Ati2evxx.exe
PRC - [2008-07-09 09:05:18 | 00,075,304 | ---- | M] (Zone Labs, LLC) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe
PRC - [2004-08-04 14:00:00 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2007-05-15 15:55:46 | 01,550,896 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
PRC - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2008-12-13 12:49:01 | 00,066,872 | ---- | M] () -- C:\WINDOWS\system32\PnkBstrA.exe
PRC - [2005-01-28 13:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe
PRC - [2009-02-11 22:56:07 | 00,045,056 | ---- | M] () -- C:\WINDOWS\system32\UTSCSI.EXE
PRC - [2004-08-04 14:00:00 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe
PRC - [2008-07-09 09:05:20 | 00,919,016 | ---- | M] (Zone Labs, LLC) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
PRC - [2007-05-15 15:55:46 | 01,628,208 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
PRC - [2007-05-15 15:55:26 | 01,057,328 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCD.exe
PRC - [2009-03-09 17:49:18 | 00,037,888 | ---- | M] () -- M:\Program Files\Winamp\winampa.exe
PRC - [2007-07-17 11:13:56 | 00,049,152 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
PRC - [2007-08-16 13:24:39 | 00,167,368 | ---- | M] (DT Soft Ltd.) -- M:\Program Files\DAEMON Tools\daemon.exe
PRC - [2007-07-17 11:13:34 | 00,049,152 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
PRC - [2009-03-09 17:50:48 | 01,433,952 | ---- | M] (Nullsoft) -- M:\Program Files\Winamp\winamp.exe
PRC - [2002-08-21 05:13:12 | 00,189,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WISPTIS.EXE
PRC - [2009-04-28 17:33:08 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2008-03-20 12:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe
PRC - [2009-06-02 17:47:30 | 00,501,248 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mat\Pulpit\OTListIt2.exe
[color=orange]========== Win32 Services (SafeList) ==========[/color]
SRV - [2005-09-23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2008-07-04 05:12:02 | 00,561,152 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running])
SRV - [2008-07-03 21:05:00 | 00,593,920 | ---- | M] () -- C:\WINDOWS\system32\ati2sgag.exe -- (ATI Smart [Auto | Stopped])
SRV - [2005-09-23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2004-08-04 14:00:00 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2007-05-15 15:55:46 | 01,550,896 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv [Auto | Running])
SRV - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
SRV - [2007-04-13 21:09:56 | 00,792,112 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService [On_Demand | Stopped])
SRV - [2007-05-08 19:47:22 | 00,271,920 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Stopped])
SRV - [2003-07-28 20:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2008-12-13 12:49:01 | 00,066,872 | ---- | M] () -- C:\WINDOWS\system32\PnkBstrA.exe -- (PnkBstrA [Auto | Running])
SRV - [2005-01-28 13:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe -- (UMWdf [Auto | Running])
SRV - [2009-02-11 22:56:07 | 00,045,056 | ---- | M] () -- C:\WINDOWS\system32\UTSCSI.EXE -- (UTSCSI [Auto | Running])
SRV - [2008-07-09 09:05:18 | 00,075,304 | ---- | M] (Zone Labs, LLC) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- (vsmon [Auto | Running])
[color=orange]========== Driver Services (SafeList) ==========[/color]
DRV - [2002-02-04 18:35:40 | 00,278,908 | ---- | M] (Avance Logic, Inc.) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running])
DRV - [2008-07-04 08:33:33 | 03,230,720 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running])
DRV - [2001-10-26 18:50:42 | 00,117,760 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\DRIVERS\e100b325.sys -- (E100B [On_Demand | Running])
DRV - [2004-08-04 01:08:22 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running])
DRV - [2002-08-14 00:00:00 | 00,013,782 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\DRIVERS\IdeBusDr.sys -- (IdeBusDr [Boot | Running])
DRV - [2002-08-14 00:00:00 | 00,093,594 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\DRIVERS\IdeChnDr.sys -- (IdeChnDr [Boot | Running])
DRV - [2007-05-15 15:55:36 | 00,118,576 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDFs.sys -- (InCDfs [Disabled | Running])
DRV - [2007-05-15 15:55:36 | 00,037,040 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDPass.sys -- (InCDPass [System | Running])
DRV - [2007-05-15 15:55:36 | 00,038,576 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm [System | Running])
DRV - [2007-07-19 15:10:28 | 00,127,768 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\system32\DRIVERS\klif.sys -- (KLIF [System | Running])
DRV - [2001-08-18 00:00:04 | 00,002,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401 [On_Demand | Running])
DRV - [2003-04-02 09:54:16 | 00,020,648 | R--- | M] (Thomson Inc.) -- C:\WINDOWS\system32\DRIVERS\netrcacm.sys -- (netrcacm [On_Demand | Running])
DRV - [2001-08-10 07:00:00 | 00,003,252 | ---- | M] () -- C:\WINDOWS\System32\drivers\PQNTDRV.SYS -- (PQNTDrv [System | Running])
DRV - [2004-08-04 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2008-08-20 19:58:58 | 00,044,944 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])
DRV - [2004-08-04 14:00:00 | 00,027,440 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2001-08-17 22:56:16 | 00,007,552 | ---- | M] (Sony Corporation) -- C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS -- (SONYPVU1 [On_Demand | Stopped])
DRV - [2008-10-10 21:57:30 | 00,685,816 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running])
DRV - [2008-02-27 03:10:44 | 00,051,176 | ---- | M] (Zone Labs, LLC) -- C:\WINDOWS\system32\ZoneLabs\srescan.sys -- (srescan [Boot | Running])
DRV - [2008-07-09 09:05:22 | 00,394,952 | ---- | M] (Zone Labs, LLC) -- C:\WINDOWS\System32\vsdatant.sys -- (vsdatant [System | Running])
[color=orange]========== Standard Registry (SafeList) ==========[/color]
[color=orange]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wyborcza.pl/0,0.html?p=015
IE - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\S-1-5-21-1757981266-1767777339-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=orange]========== FireFox ==========[/color]
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "onet.pl"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}:6.0.10
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {208722fa-38e0-4142-83e5-a341b43a35dd}:1.5.48.2
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.10
FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008-11-22 20:11:00 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009-04-30 23:38:43 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009-05-25 17:37:24 | 00,000,000 | ---D | M]
[2008-10-08 20:08:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Mat\Dane aplikacji\mozilla\Extensions
[2008-10-08 20:08:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Mat\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009-06-02 15:31:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Mat\Dane aplikacji\mozilla\Firefox\Profiles\hkbdufk7.default\extensions
[2009-02-08 21:42:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Mat\Dane aplikacji\mozilla\Firefox\Profiles\hkbdufk7.default\extensions\{208722fa-38e0-4142-83e5-a341b43a35dd}
[2009-01-31 22:57:42 | 00,002,447 | ---- | M] () -- C:\Documents and Settings\Mat\Dane aplikacji\Mozilla\FireFox\Profiles\hkbdufk7.default\searchplugins\bsplayer-search.xml
[2009-04-05 12:56:22 | 00,002,517 | ---- | M] () -- C:\Documents and Settings\Mat\Dane aplikacji\Mozilla\FireFox\Profiles\hkbdufk7.default\searchplugins\wefind.xml
[2009-06-02 15:31:27 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009-04-28 17:33:19 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2008-11-05 14:08:37 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
[2008-11-22 20:11:50 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
[2008-12-12 14:41:08 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
[2009-04-03 14:58:46 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009-04-28 17:33:08 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009-04-28 17:33:08 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2006-06-03 18:43:22 | 00,000,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2008-04-03 19:19:08 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2008-04-16 06:08:20 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2007-03-31 19:11:54 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2006-06-03 18:43:22 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2008-03-28 23:36:04 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2007-01-05 13:40:56 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
O1 HOSTS File: (686 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\..\Toolbar\ShellBrowser: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL File not found
O3 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\..\Toolbar\ShellBrowser: (no name) - {F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL File not found
O3 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\..\Toolbar\WebBrowser: (no name) - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll ()
O4 - HKLM..\Run: [BearShare] "M:\Program Files\BearShare\BearShare.exe" /pause (Free Peers, Inc.)
O4 - HKLM..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe (Nero AG)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe (Nero AG)
O4 - HKLM..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [WinampAgent] "M:\Program Files\Winamp\winampa.exe" ()
O4 - HKLM..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" (Zone Labs, LLC)
O4 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004..\Run: [DAEMON Tools] "M:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 (DT Soft Ltd.)
O4 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray (Gadu-Gadu S.A.)
O4 - HKLM..\RunOnce: [IATA Storage needs reboot] File not found
O4 - HKLM..\RunOnce: [IATA UnInstallSecondPass] C:\WINDOWS\system32\rundll32.exe IPrtCnst.dll,UninstallSecondPass C:\WINDOWS\inf\mshdc.inf File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 36
O7 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF [binary data]
O7 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1757981266-1767777339-725345543-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-10-08 19:57:02 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-05-26 17:50:51 | 00,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-05-26 17:50:56 | 00,000,000 | RHSD | M] - M:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{92dd0e6a-b302-11dd-871f-0090275f5309}\Shell\AutoRun\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe -- File not found
O33 - MountPoints2\{92dd0e6a-b302-11dd-871f-0090275f5309}\Shell\open\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - * [2009-05-27 22:57:37 | 00,000,000 | ---D | M]
[color=orange]========== Files/Folders - Created Within 30 Days ==========[/color]
[3 C:\WINDOWS\*.tmp files]
[1 C:\Documents and Settings\Mat\Moje dokumenty\*.tmp files]
[2009-06-02 17:52:28 | 00,359,893 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\dds.scr
[2009-06-02 17:45:35 | 00,501,248 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Mat\Pulpit\OTListIt2.exe
[2009-06-02 17:10:22 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2009-06-02 17:10:21 | 00,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2009-06-02 17:04:26 | 02,085,616 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Mat\Pulpit\WindowsXP-KB894391-x86-PLK.exe
[2009-06-02 16:59:47 | 00,201,030 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\lspfix.zip
[2009-06-01 22:58:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT
[2009-06-01 22:55:06 | 00,000,000 | ---D | C] -- C:\SDFix
[2009-06-01 22:52:52 | 01,482,684 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\sdfix_1.173.exe
[2009-06-01 22:33:54 | 00,000,000 | ---D | C] -- C:\!KillBox
[2009-06-01 22:33:43 | 00,092,672 | ---- | C] (Option^Explicit Software vbtechcd@gmail.com) -- C:\Documents and Settings\Mat\Pulpit\KillBox.exe
[2009-06-01 21:58:07 | 00,000,351 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\Skrót do RECYCLER.lnk
[2009-06-01 21:57:20 | 00,000,124 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\fix.reg
[2009-06-01 16:29:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Pulpit\religia
[2009-05-31 21:39:06 | 00,938,816 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\bUUAHAHA.JPG
[2009-05-31 21:39:06 | 00,000,020 | -H-- | C] () -- C:\Documents and Settings\Mat\Pulpit\bUUAHAHA.JPG.sha
[2009-05-31 21:20:06 | 00,075,776 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\P5290061.JPG
[2009-05-31 21:20:06 | 00,000,020 | -H-- | C] () -- C:\Documents and Settings\Mat\Pulpit\P5290061.JPG.sha
[2009-05-28 19:21:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Pulpit\Polak
[2009-05-27 22:56:49 | 00,132,980 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\Manu.JPG
[2009-05-26 20:46:01 | 00,051,232 | ---- | C] (gkweb) -- C:\Documents and Settings\Mat\Pulpit\wwdc.exe
[2009-05-26 19:21:06 | 00,063,488 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\Działanie wyszukiwarki internetowej.doc
[2009-05-26 18:13:47 | 14,144,128 | ---- | C] (Doctor Web, Ltd.) -- C:\Documents and Settings\Mat\Pulpit\launch.exe
[2009-05-26 18:09:11 | 00,000,290 | ---- | C] () -- C:\fix.reg
[2009-05-26 18:08:48 | 00,000,000 | ---D | C] -- C:\RECYCLER
[2009-05-26 17:51:45 | 00,000,000 | --SD | C] -- C:\ComboFix
[2009-05-26 17:51:43 | 00,395,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF17928.exe
[2009-05-26 17:50:51 | 00,000,000 | RHSD | C] -- C:\autorun.inf
[2009-05-26 17:49:23 | 00,132,597 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\Flash_Disinfector.exe
[2009-05-26 17:37:45 | 02,997,408 | R--- | C] () -- C:\Documents and Settings\Mat\Pulpit\ComboFix.exe
[2009-05-26 17:35:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Pulpit\szkoła
[2009-05-25 18:54:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Dane aplikacji\Lavasoft
[2009-05-25 18:54:42 | 00,000,841 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ad-Aware SE Personal.lnk
[2009-05-25 18:54:41 | 00,000,000 | ---D | C] -- C:\Program Files\Lavasoft
[2009-05-25 17:36:23 | 00,000,211 | ---- | C] () -- C:\Boot.bak
[2009-05-25 17:36:19 | 00,262,400 | ---- | C] () -- C:\cmldr
[2009-05-25 17:36:14 | 00,000,000 | RHSD | C] -- C:\cmdcons
[2009-05-25 17:27:19 | 00,154,624 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2009-05-24 21:57:52 | 05,486,038 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\DAJ KAMIENIA.AVI
[2009-05-24 10:49:46 | 00,106,104 | RHS- | C] () -- C:\n68mqcra.exe
[2009-05-23 15:30:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Pulpit\131
[2009-05-22 22:41:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Pulpit\2
[2009-05-22 22:41:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Pulpit\1
[2009-05-22 22:18:09 | 00,018,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdaudio.sys
[2009-05-05 21:15:34 | 00,000,564 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\SopCast.lnk
[2009-05-05 21:14:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Pulpit\SopCast
[2009-05-05 18:02:26 | 16,018,196 | ---- | C] () -- C:\Documents and Settings\Mat\Pulpit\video 2.mp4
[2009-05-04 17:49:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Pulpit\prezentacja german
[2009-05-04 17:28:44 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Mat\Moje dokumenty\Expressivo Podcasts
[2009-05-04 17:28:44 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Mat\Moje dokumenty\Expressivo Documents
[2009-05-04 00:01:47 | 00,000,673 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Play Lineage II PTS.lnk
[2009-05-03 23:31:00 | 00,005,174 | ---- | C] () -- C:\WINDOWS\System32\nppt9x.vxd
[2009-05-03 23:31:00 | 00,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\npptNT2.sys
[2009-05-03 21:58:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mat\Dane aplikacji\InstallShield
[2008-12-15 18:27:44 | 00,372,736 | ---- | C] () -- C:\WINDOWS\System32\hpzidi01.dll
[2008-12-15 18:27:44 | 00,077,824 | ---- | C] () -- C:\WINDOWS\System32\hpzids01.dll
[2008-12-13 12:49:18 | 00,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2008-10-23 19:53:20 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008-10-22 17:32:24 | 00,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008-10-21 22:14:03 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2008-10-21 22:14:02 | 00,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2008-10-10 21:57:28 | 00,685,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2008-10-10 15:42:46 | 00,796,048 | ---- | C] () -- C:\WINDOWS\System32\libeay32_0.9.6l.dll
[2008-10-09 22:41:09 | 00,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2008-10-09 20:18:16 | 00,003,252 | ---- | C] () -- C:\WINDOWS\System32\drivers\PQNTDRV.SYS
[2008-10-08 21:38:43 | 00,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll
[2008-10-08 21:38:43 | 00,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar3.dll
[2008-10-08 21:38:43 | 00,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll
[2008-10-08 21:38:43 | 00,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll
[2004-12-19 15:29:40 | 00,106,496 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2004-12-19 15:17:10 | 00,614,400 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2004-08-04 14:00:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004-08-04 14:00:00 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2004-08-04 14:00:00 | 00,000,573 | ---- | C] () -- C:\WINDOWS\win.ini
[2004-08-04 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[2003-04-08 11:40:22 | 00,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002-10-06 20:42:57 | 00,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2002-10-05 01:04:25 | 00,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll
[2002-10-05 01:04:24 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2002-10-05 01:04:17 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2002-05-16 01:38:40 | 00,091,136 | ---- | C] () -- C:\WINDOWS\System32\mp4fil32.dll
[color=orange]========== Files - Modified Within 30 Days ==========[/color]
[4 C:\WINDOWS\System32\*.tmp files]
[3 C:\WINDOWS\*.tmp files]
[1 C:\Documents and Settings\Mat\Moje dokumenty\*.tmp files]
[2009-06-02 17:53:30 | 00,359,893 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\dds.scr
[2009-06-02 17:52:32 | 04,843,552 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.dat
[2009-06-02 17:47:30 | 00,501,248 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mat\Pulpit\OTListIt2.exe
[2009-06-02 17:09:27 | 02,085,616 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Mat\Pulpit\WindowsXP-KB894391-x86-PLK.exe
[2009-06-02 17:02:24 | 00,201,030 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\lspfix.zip
[2009-06-02 16:38:47 | 00,000,164 | ---- | M] () -- C:\WINDOWS\avrack.ini
[2009-06-02 14:57:42 | 00,000,442 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2009-06-02 14:57:36 | 00,352,918 | ---- | M] () -- C:\WINDOWS\System32\vsconfig.xml
[2009-06-02 14:57:16 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-06-02 14:57:04 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\Mat\Ustawienia lokalne\desktop.ini
[2009-06-02 14:57:02 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-06-01 23:01:39 | 00,000,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS
[2009-06-01 22:56:16 | 00,058,940 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.idx
[2009-06-01 22:54:41 | 01,482,684 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\sdfix_1.173.exe
[2009-06-01 22:33:46 | 00,092,672 | ---- | M] (Option^Explicit Software vbtechcd@gmail.com) -- C:\Documents and Settings\Mat\Pulpit\KillBox.exe
[2009-06-01 22:22:11 | 00,000,290 | ---- | M] () -- C:\fix.reg
[2009-06-01 21:58:07 | 00,000,351 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\Skrót do RECYCLER.lnk
[2009-06-01 21:57:21 | 00,000,124 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\fix.reg
[2009-06-01 12:29:54 | 00,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-05-31 21:40:53 | 00,938,816 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\bUUAHAHA.JPG
[2009-05-31 21:40:48 | 00,000,020 | -H-- | M] () -- C:\Documents and Settings\Mat\Pulpit\bUUAHAHA.JPG.sha
[2009-05-31 21:20:53 | 00,075,776 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\P5290061.JPG
[2009-05-31 21:20:06 | 00,000,020 | -H-- | M] () -- C:\Documents and Settings\Mat\Pulpit\P5290061.JPG.sha
[2009-05-31 15:45:34 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2009-05-27 22:56:49 | 00,132,980 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\Manu.JPG
[2009-05-27 00:00:46 | 00,063,488 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\Działanie wyszukiwarki internetowej.doc
[2009-05-26 20:46:03 | 00,051,232 | ---- | M] (gkweb) -- C:\Documents and Settings\Mat\Pulpit\wwdc.exe
[2009-05-26 18:24:34 | 14,144,128 | ---- | M] (Doctor Web, Ltd.) -- C:\Documents and Settings\Mat\Pulpit\launch.exe
[2009-05-26 18:02:18 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009-05-26 17:51:23 | 00,395,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\CF17928.exe
[2009-05-26 17:51:07 | 02,997,408 | R--- | M] () -- C:\Documents and Settings\Mat\Pulpit\ComboFix.exe
[2009-05-26 17:49:31 | 00,132,597 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\Flash_Disinfector.exe
[2009-05-25 18:54:42 | 00,000,841 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ad-Aware SE Personal.lnk
[2009-05-25 17:36:23 | 00,000,281 | RHS- | M] () -- C:\boot.ini
[2009-05-25 14:43:39 | 00,106,104 | RHS- | M] () -- C:\n68mqcra.exe
[2009-05-24 22:00:56 | 05,486,038 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\DAJ KAMIENIA.AVI
[2009-05-24 16:01:49 | 00,154,624 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2009-05-11 23:15:58 | 00,036,396 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\1.m3u
[2009-05-05 21:15:34 | 00,000,564 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\SopCast.lnk
[2009-05-05 18:24:01 | 16,018,196 | ---- | M] () -- C:\Documents and Settings\Mat\Pulpit\video 2.mp4
[2009-05-04 22:41:29 | 00,061,952 | -HS- | M] () -- C:\Documents and Settings\Mat\Pulpit\Thumbs.db
[2009-05-04 00:01:47 | 00,000,673 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Play Lineage II PTS.lnk
< End of report >
- Kod: Zaznacz wszystko
OTListIt Extras logfile created on: 2009-06-02 18:00:04 - Run 1
OTListIt2 by OldTimer - Version 2.0.15.8 Folder = C:\Documents and Settings\Mat\Pulpit
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1,50 Gb Total Physical Memory | 0,97 Gb Available Physical Memory | 64,86% Memory free
2,11 Gb Paging File | 1,66 Gb Available in Paging File | 78,70% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 22,24 Gb Total Space | 9,24 Gb Free Space | 41,53% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive M: | 164,07 Gb Total Space | 91,15 Gb Free Space | 55,55% Space Free | Partition Type: NTFS
Computer Name: MAT-2D8EC4AEA91
Current User Name: Mat
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Output = Standard
File Age = 30 Days
Company Name Whitelist: On
[color=orange]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[HKEY_USERS\S-1-5-21-1757981266-1767777339-725345543-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[color=orange]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring" = 1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall" = 0
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
[color=orange]========== Authorized Applications List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
[2008-03-20 12:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny
[2008-06-15 10:18:57 | 33,574,912 | ---- | M] (Sports Interactive) -- M:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:*:Enabled:Football Manager 2008
[2009-02-13 20:23:58 | 00,270,128 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Mat\Pulpit\utorrent.exe:*:Enabled:µTorrent
[2008-12-13 23:04:07 | 27,840,512 | ---- | M] (Sports Interactive) -- M:\Program Files\Sports Interactive\Football Manager 2009\fm.exe:*:Enabled:Football Manager 2009
[color=orange]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0004D4C8-7F6C-BA20-32B2-5C861FA340CB}" = Catalyst Control Center Graphics Full Existing
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{09984AEC-6B9F-4ca7-B78D-CB44D4771DA3}" = Destinations
"{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0
"{10053F59-0765-163D-F759-155E6DA35AB6}" = CCC Help English
"{101E4225-8983-7850-3E8C-00C5E0A13B40}" = ccc-core-static
"{15EE79F4-4ED1-4267-9B0F-351009325D7D}" = HP Software Update
"{1E5007FA-DA5E-4EDD-BDE5-14D128D66887}" = PowerQuest PartitionMagic 7.0
"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
"{2315B23D-3E21-4920-837D-AE6460934ECB}" = FIFA 09
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}" = Java(TM) 6 Update 13
"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3819891A-030B-4a4e-98ED-B28A649E48AB}" = HP Deskjet 3900 series
"{3F555374-449A-0734-73EA-5FF6207FA30F}" = Skins
"{42F6BED9-41DD-40F1-85A8-8E0350493626}" = HPDeskjet3900Series
"{430B1017-1B12-420C-8F27-05D0EC2995E0}" = Lineage II
"{5141D667-6FE0-DFD6-FDC8-C981DC06520C}" = Catalyst Control Center Graphics Full New
"{51C9B6D6-BF0F-3BA5-1EA4-17C6190DBE07}" = ccc-core-preinstall
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg
"{5F26311C-B135-4F7F-B11E-8E650F83651E}" = DeviceFunctionQFolder
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{86F68693-A637-1F4D-5D4F-4D58486A4601}" = ccc-utility
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{9984DF60-1C5B-11D3-ACA1-908A4FC10801}" = Intel Application Accelerator
"{9B4E6CB9-E54D-47F7-A414-E2D5740E1045}" = Nero 7 Essentials
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1038-7B44-CEA000000001}" = Adobe Reader 6.0.2 CE
"{AE888E0F-6727-0045-A966-CFB975AC15BA}" = Catalyst Control Center Graphics Previews Common
"{B996AE66-10DB-4ac5-B151-E8B4BFBC42FC}" = BufferChm
"{C952BD03-9AC6-F898-B17F-9352638EC93C}" = Catalyst Control Center Core Implementation
"{CADF1911-C4FB-8651-36E0-FF06DAA75F28}" = Catalyst Control Center Graphics Light
"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant
"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter
"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status
"{FA3A247D-437A-455E-A88F-7EB6E5F9E799}" = Catalyst Control Center - Branding
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Avance AC'97 Audio
"Ad-Aware SE Personal" = Ad-Aware SE Personal
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player
"All ATI Software" = ATI - Software Uninstall Utility
"ALLPlayer_is1" = ALLPlayer V3.X
"ATI Display Driver" = ATI Display Driver
"AVI Codec Pack" = AVI Codec Pack
"BearShare" = BearShare
"BS.Player ControlBar" = BS.Player ControlBar
"BSPlayerf" = BS.Player FREE
"Egzamin gimnazjalny 2009" = Egzamin gimnazjalny 2009 1.0
"ffdshow_is1" = ffdshow [rev 2509] [2008-12-18]
"FIFA MANAGER 09" = FIFA MANAGER 09
"Football Manager 2008" = Football Manager 2008
"Football Manager 2009" = Football Manager 2009
"Gadu-Gadu" = Gadu-Gadu 7.7
"HaaliMkx" = Haali Media Splitter
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 5.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.0
"Icy Tower v1.3.1_is1" = Icy Tower v1.3.1
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Mozilla Firefox (3.0.10)" = Mozilla Firefox (3.0.10)
"My Global Search Uninstall" = My Global Search Bar
"NAPIPROJEKT_is1" = NAPIPROJEKT 1.0.6.2
"Nowe Gadu-Gadu" = Nowe Gadu-Gadu
"save2pc Light_is1" = save2pc Light 3.48
"SkanerOnline" = Skaner on-line mks_vir
"SopCast" = SopCast 3.0.3
"SystemRequirementsLab" = System Requirements Lab
"The Core Media Player" = The Core Media Player 4.0
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format Runtime
"WinGimp-2.0_is1" = GIMP 2.6.5
"WinRAR archiver" = Archiwizator WinRAR
"ZoneAlarm" = ZoneAlarm
"ZoneAlarmSB Uninstall" = ZoneAlarm Spy Blocker
[color=orange]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2009-05-28 05:27:53 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca WINWORD.EXE, wersja 11.0.5604.0, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2009-05-28 08:17:58 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x71a5664d.
Error - 2009-05-29 08:18:20 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x71a5664d.
Error - 2009-05-30 06:03:21 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x71a5664d.
Error - 2009-05-31 05:26:32 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x71a5664d.
Error - 2009-05-31 05:27:38 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd drwtsn32.exe, wersja 5.1.2600.0, moduł powodujący
błąd dbghelp.dll, wersja 5.1.2600.2180, adres błędu 0x0001295d.
Error - 2009-06-01 06:30:08 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x71a5664d.
Error - 2009-06-01 08:16:53 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x71a5664d.
Error - 2009-06-01 08:18:27 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x71a5664d.
Error - 2009-06-01 08:19:09 | Computer Name = MAT-2D8EC4AEA91 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd explorer.exe, wersja 6.0.2900.2180, moduł
powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x71a5664d.
[ System Events ]
Error - 2009-06-02 10:42:17 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
Error - 2009-06-02 10:42:17 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
Error - 2009-06-02 10:42:17 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
Error - 2009-06-02 10:42:18 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
Error - 2009-06-02 10:42:18 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
Error - 2009-06-02 10:42:18 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
Error - 2009-06-02 10:42:18 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
Error - 2009-06-02 10:42:18 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
Error - 2009-06-02 10:42:18 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
Error - 2009-06-02 10:42:18 | Computer Name = MAT-2D8EC4AEA91 | Source = Service Control Manager | ID = 7023
Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący
błąd: %%126
< End of report >
Czekam na odp
mam nadzieje, że coś da rade zrobic 
Pozdro 
