Jak usunąć program smart tweek?

[an]

Witam, jak w temacie...
Kawał czasu temu, szukając jakichś sterowników, wpakowałam się w mało sympatyczny program SmartTweek - Update my drivers. Próbowałam go usunąć w sposób "klasyczny" , ale mimo pozornego usuwania - ten nadal jest. Uruchamia się podczas startu i notorycznie włącza.
Próbowałam zablokować go w Start --Uruchom, ale też kicha...
Niby nic, a drażni..
Proszę o wskazówkę, pozdrawiam.

[wojtas]

Proszę zastosować się do obowiązkowych zasad w dziale bezpieczeństwo
- wstaw wymagane logi

[an]

Łatwiej by było napisać - zmień dział.
Dlaczego mam wstawiać logi w kontekście tego tematu i problemu?
prosze o ew. informację, co do przemianowania tematu etc.

[wojtas]

ponieważ za pomocą logów można usunąć program ??

[an]

OK, sorki...
http://www.wklej.org/id/644991/
zrób tak samo z logami z OTL

Dodano 10.12.2011 19:20:21:
Problem w tym, że na wklej.org wszystko mi się zawiesza, w ogóle komp zaczął szaleć...nie mogę nawet sprawdzić linka czy gmera odpowiednio zamieściłam, spróbuję tutaj raz jeszcze dać OTL...

Kod: Zaznacz wszystko

OTL logfile created on: 2011-12-10 17:35:24 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\an\Desktop
Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

765,17 Mb Total Physical Memory | 86,02 Mb Available Physical Memory | 11,24% Memory free
1,75 Gb Paging File | 0,46 Gb Available in Paging File | 26,21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 32,01 Gb Total Space | 4,66 Gb Free Space | 14,57% Space Free | Partition Type: NTFS
Drive D: | 42,52 Gb Total Space | 9,84 Gb Free Space | 23,14% Space Free | Partition Type: NTFS

Computer Name: AN-PC | User Name: an | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2011-12-10 17:34:01 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\an\Desktop\OTL.exe
PRC - [2011-09-10 17:57:13 | 000,243,360 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10w_ActiveX.exe
PRC - [2011-01-25 11:11:23 | 001,803,224 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2010-10-07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2010-08-23 09:56:00 | 004,386,696 | ---- | M] () -- C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe
PRC - [2010-05-21 00:16:24 | 011,312,128 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2010-05-21 00:16:22 | 011,318,784 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2009-10-31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-07-14 02:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009-07-14 02:14:41 | 000,354,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StikyNot.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2010-10-07 09:05:14 | 000,217,696 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\gglog.dll
MOD - [2010-10-07 09:05:14 | 000,123,488 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipcradioproxy.dll
MOD - [2010-10-07 09:05:10 | 000,017,504 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipc.dll
MOD - [2010-10-07 09:05:08 | 000,027,744 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcrypto.dll
MOD - [2010-10-07 09:05:06 | 000,356,960 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcommon.dll
MOD - [2010-08-23 09:56:00 | 004,386,696 | ---- | M] () -- C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe
MOD - [2010-08-06 20:01:42 | 002,404,352 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtCore4.dll
MOD - [2010-08-06 20:01:42 | 001,515,520 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtScript4.dll
MOD - [2010-08-06 20:01:42 | 001,040,384 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtNetwork4.dll
MOD - [2010-08-06 20:01:42 | 000,389,120 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXml4.dll
MOD - [2010-08-06 20:01:42 | 000,323,584 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtSvg4.dll
MOD - [2010-08-06 20:01:40 | 013,553,664 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtWebKit4.dll
MOD - [2010-08-06 20:01:38 | 008,818,688 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtGui4.dll
MOD - [2010-08-06 20:01:22 | 003,334,144 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXmlPatterns4.dll
MOD - [2010-08-06 20:00:32 | 000,311,296 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qtiff4.dll
MOD - [2010-08-06 20:00:32 | 000,274,432 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qmng4.dll
MOD - [2010-08-06 20:00:32 | 000,143,360 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qjpeg4.dll
MOD - [2010-08-06 20:00:32 | 000,027,648 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qgif4.dll
MOD - [2010-08-06 20:00:32 | 000,018,944 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qsvg4.dll
MOD - [2010-06-04 09:14:26 | 000,317,128 | ---- | M] () -- C:\Program Files\SmartTweak Software\UpdateMyDrivers\arc.dll
MOD - [2010-05-04 14:36:28 | 000,970,752 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2010-03-19 08:33:38 | 000,059,904 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\zlib1.dll
MOD - [2009-10-28 04:40:14 | 003,885,984 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2011-01-25 11:11:23 | 001,803,224 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2010-08-31 14:09:41 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009-07-14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2011-12-10 16:30:05 | 000,428,088 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2011-01-25 11:12:21 | 000,080,064 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\inspect.sys -- (inspect)
DRV - [2011-01-25 11:12:20 | 000,035,768 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2011-01-25 11:12:20 | 000,017,256 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmderd.sys -- (cmderd)
DRV - [2011-01-25 11:12:19 | 000,236,600 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2009-07-14 02:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus)
DRV - [2009-07-14 02:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt)
DRV - [2009-07-14 02:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc)
DRV - [2009-07-14 00:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009-07-14 00:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap)
DRV - [2009-07-14 00:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID)
DRV - [2009-07-13 23:02:53 | 000,048,128 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SiSGB6.sys -- (SiSGbeLH)
DRV - [2009-07-13 23:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008-12-29 06:24:52 | 000,463,872 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SISGRKMD.sys -- (SiS6350)
DRV - [2007-10-12 01:00:44 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2007-10-12 00:56:22 | 000,490,776 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LV561AV.SYS -- (PID_0928) Logitech QuickCam Express(PID_0928)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.stardoll.com/http://www.google.pl/ [binary data]
IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found


[2010-11-01 09:28:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\an\AppData\Roaming\Mozilla\Sunbird\Profiles\q8caarg7.default\extensions
[2011-06-11 17:01:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-02-05 21:34:12 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2011-04-15 22:47:55 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011-06-11 16:54:21 | 000,000,000 | ---D | M] (No name found) -- C:\PROGRAM FILES\MOZILLA SUNBIRD\EXTENSIONS\{E2FDA1A4-762B-4020-B5AD-A41DF1933103}
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA SUNBIRD\EXTENSIONS\CALENDAR-TIMEZONES@MOZILLA.ORG
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA SUNBIRD\EXTENSIONS\TALKBACK@MOZILLA.ORG
[2011-04-15 22:47:05 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010-08-20 10:07:12 | 000,669,176 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPWORDS.dll

O1 HOSTS File: ([2009-06-10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe (Franmo Software)
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [UpdateMyDrivers] C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\an\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html File not found
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {BFA1F11D-AFE1-3121-4112-894323212DAC} http://cached.gamedesire.com/g_bin/pl/words_2_0_0_55.cab (GameDesire Word Games)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B38EC22B-97D7-4D0F-A663-B9E198CDD1F9}: DhcpNameServer = 192.168.0.1 153.19.48.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B730605F-49E6-4751-9AE6-7999E85AE2EB}: DhcpNameServer = 62.179.1.63 62.179.1.62
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\Windows\system32\guard32.dll) -C:\Windows\System32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010-07-22 19:01:03 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{30d4a758-563c-11e0-a639-00a0d1ce318d}\Shell - "" = AutoRun
O33 - MountPoints2\{30d4a758-563c-11e0-a639-00a0d1ce318d}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{5f16ec6b-980f-11e0-ab51-00a0d1ce318d}\Shell - "" = AutoRun
O33 - MountPoints2\{5f16ec6b-980f-11e0-ab51-00a0d1ce318d}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{7617fdf0-e0cf-11df-b9e2-00a0d1ce318d}\Shell - "" = AutoRun
O33 - MountPoints2\{7617fdf0-e0cf-11df-b9e2-00a0d1ce318d}\Shell\AutoRun\command - "" = F:\Menu.exe
O33 - MountPoints2\{c5eba211-95c2-11df-92d1-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c5eba211-95c2-11df-92d1-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Menu.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2011-12-10 17:33:57 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\an\Desktop\OTL.exe
[2011-11-14 17:22:57 | 000,000,000 | ---D | C] -- C:\Users\an\Desktop\Eric_Emmanuel_Schmitt_-_Małe_zbrodnie_małżeńskie

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2011-12-10 17:42:37 | 001,474,832 | ---- | M] () -- C:\Windows\System32\drivers\sfi.dat
[2011-12-10 17:34:01 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\an\Desktop\OTL.exe
[2011-12-10 16:45:11 | 000,302,592 | ---- | M] () -- C:\Users\an\Desktop\iojczd6x.exe
[2011-12-10 16:41:50 | 000,017,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011-12-10 16:41:50 | 000,017,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011-12-10 16:34:45 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempIN1680.html
[2011-12-10 16:34:45 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempFB1680.html
[2011-12-10 16:32:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-12-10 16:32:35 | 601,755,648 | -HS- | M] () -- C:\hiberfil.sys
[2011-12-10 16:30:58 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TemppI1672.html
[2011-12-10 16:30:58 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempsa1672.html
[2011-12-09 23:45:57 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempnW1760.html
[2011-12-09 23:45:57 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempMv1760.html
[2011-12-09 20:53:58 | 000,091,334 | ---- | M] () -- C:\Users\an\Desktop\fll.jpg
[2011-12-09 20:36:51 | 000,025,400 | ---- | M] () -- C:\Users\an\Desktop\szkola.jpg
[2011-12-09 19:46:16 | 000,021,622 | ---- | M] () -- C:\Users\an\Desktop\Zal1-Regulamin-2011-2012.pdf
[2011-12-09 19:43:57 | 000,032,682 | ---- | M] () -- C:\Users\an\Desktop\Regulamin-2011-2012 Ojczyzna - Polszczyzna.pdf
[2011-12-09 19:39:31 | 000,014,703 | ---- | M] () -- C:\Users\an\Desktop\deklaracja_udzialu_szkoly.pdf
[2011-12-08 23:00:33 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Templi1820.html
[2011-12-08 23:00:32 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempyq1820.html
[2011-12-07 22:05:42 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TemphZ1832.html
[2011-12-07 22:05:42 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempUC1832.html
[2011-12-06 23:24:14 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TemppK1844.html
[2011-12-06 23:24:13 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempRr1844.html
[2011-12-05 22:18:05 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempic1692.html
[2011-12-05 22:18:05 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempjS1692.html
[2011-12-04 22:02:04 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempby1828.html
[2011-12-04 22:02:03 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempoe1828.html
[2011-12-03 23:08:18 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempdG1812.html
[2011-12-03 23:08:17 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempgH1812.html
[2011-12-02 23:14:10 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempgI1672.html
[2011-12-02 23:14:10 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempHQ1672.html
[2011-12-01 19:55:17 | 000,607,190 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-12-01 19:55:17 | 000,103,568 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-11-30 23:06:52 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempfn1668.html
[2011-11-30 23:06:52 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempiM1668.html
[2011-11-29 22:58:33 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempbL1828.html
[2011-11-29 22:58:33 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempzq1828.html
[2011-11-28 21:49:05 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempDl1788.html
[2011-11-28 21:49:05 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempZX1788.html
[2011-11-27 21:33:25 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempji1852.html
[2011-11-27 21:33:25 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempcS1852.html
[2011-11-27 00:30:24 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempho1808.html
[2011-11-27 00:30:24 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempqo1808.html
[2011-11-25 23:17:59 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempKo1804.html
[2011-11-25 23:17:59 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempjM1804.html
[2011-11-24 22:17:03 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempdZ1700.html
[2011-11-24 22:17:03 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempQo1700.html
[2011-11-23 21:59:02 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempDC1704.html
[2011-11-23 21:59:02 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempTv1704.html
[2011-11-22 22:46:34 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempTb1676.html
[2011-11-22 22:46:34 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempsu1676.html
[2011-11-20 22:48:25 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempus1856.html
[2011-11-20 22:48:25 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempRT1856.html
[2011-11-20 22:39:05 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempeU1868.html
[2011-11-20 22:39:05 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempxZ1868.html
[2011-11-20 01:52:51 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempAC1776.html
[2011-11-20 01:52:51 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempEA1776.html
[2011-11-19 23:29:21 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempxt1680.html
[2011-11-19 23:29:21 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempyi1680.html
[2011-11-18 23:28:33 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempCa1780.html
[2011-11-18 23:28:33 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempyi1780.html
[2011-11-17 23:02:49 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempIrb740.html
[2011-11-17 23:02:49 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempNeb740.html
[2011-11-16 23:13:31 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempkx1832.html
[2011-11-16 23:13:30 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempng1832.html
[2011-11-15 22:38:09 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempdF1688.html
[2011-11-15 22:38:09 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempyZ1688.html
[2011-11-15 00:05:47 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempgR1816.html
[2011-11-15 00:05:47 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Temphb1816.html
[2011-11-14 19:01:29 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Tempkq1692.html
[2011-11-14 19:01:29 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempdi1692.html
[2011-11-14 17:21:49 | 036,800,522 | ---- | M] () -- C:\Users\an\Desktop\Eric_Emmanuel_Schmitt_-_Małe_zbrodnie_małżeńskie.rar
[2011-11-13 23:43:58 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\Temprk1812.html
[2011-11-13 23:43:58 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempjA1812.html
[2011-11-12 14:24:18 | 000,041,272 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011-11-12 12:55:48 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_wpdcomp_01_09_00.Wdf
[2011-11-12 12:46:09 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempTI2100.html
[2011-11-12 12:46:09 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempzb2100.html
[2011-11-12 00:25:33 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempvI1856.html
[2011-11-12 00:25:33 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TemplS1856.html
[2011-11-10 23:50:56 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempiE1704.html
[2011-11-10 23:50:56 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempbi1704.html

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2011-12-10 16:44:56 | 000,302,592 | ---- | C] () -- C:\Users\an\Desktop\iojczd6x.exe
[2011-12-10 16:34:45 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempIN1680.html
[2011-12-10 16:34:45 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempFB1680.html
[2011-12-10 09:15:55 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemppI1672.html
[2011-12-10 09:15:55 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempsa1672.html
[2011-12-09 20:54:05 | 000,091,334 | ---- | C] () -- C:\Users\an\Desktop\fll.jpg
[2011-12-09 20:37:12 | 000,025,400 | ---- | C] () -- C:\Users\an\Desktop\szkola.jpg
[2011-12-09 19:46:16 | 000,021,622 | ---- | C] () -- C:\Users\an\Desktop\Zal1-Regulamin-2011-2012.pdf
[2011-12-09 19:43:56 | 000,032,682 | ---- | C] () -- C:\Users\an\Desktop\Regulamin-2011-2012 Ojczyzna - Polszczyzna.pdf
[2011-12-09 19:39:30 | 000,014,703 | ---- | C] () -- C:\Users\an\Desktop\deklaracja_udzialu_szkoly.pdf
[2011-12-09 16:59:42 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempnW1760.html
[2011-12-09 16:59:42 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempMv1760.html
[2011-12-08 14:36:42 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempyq1820.html
[2011-12-08 14:36:42 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Templi1820.html
[2011-12-07 18:01:45 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemphZ1832.html
[2011-12-07 18:01:45 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempUC1832.html
[2011-12-06 13:26:55 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempRr1844.html
[2011-12-06 13:26:55 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TemppK1844.html
[2011-12-05 19:06:52 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempic1692.html
[2011-12-05 19:06:52 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempjS1692.html
[2011-12-04 15:41:01 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempoe1828.html
[2011-12-04 15:41:01 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempby1828.html
[2011-12-03 16:42:04 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempgH1812.html
[2011-12-03 16:42:04 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempdG1812.html
[2011-12-01 12:01:37 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempgI1672.html
[2011-12-01 12:01:37 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempHQ1672.html
[2011-11-30 18:47:47 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempiM1668.html
[2011-11-30 18:47:46 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempfn1668.html
[2011-11-29 18:46:43 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempbL1828.html
[2011-11-29 18:46:43 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempzq1828.html
[2011-11-28 14:17:46 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempDl1788.html
[2011-11-28 14:17:46 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempZX1788.html
[2011-11-27 09:53:35 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempji1852.html
[2011-11-27 09:53:35 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempcS1852.html
[2011-11-26 12:45:36 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempho1808.html
[2011-11-26 12:45:36 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempqo1808.html
[2011-11-25 16:15:59 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempKo1804.html
[2011-11-25 16:15:59 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempjM1804.html
[2011-11-24 15:32:55 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempQo1700.html
[2011-11-24 15:32:54 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempdZ1700.html
[2011-11-23 18:10:35 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempDC1704.html
[2011-11-23 18:10:35 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempTv1704.html
[2011-11-21 16:43:40 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempTb1676.html
[2011-11-21 16:43:40 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempsu1676.html
[2011-11-20 22:46:04 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempus1856.html
[2011-11-20 22:46:04 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempRT1856.html
[2011-11-20 16:14:46 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempeU1868.html
[2011-11-20 16:14:46 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempxZ1868.html
[2011-11-20 00:22:33 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempAC1776.html
[2011-11-20 00:22:33 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempEA1776.html
[2011-11-19 07:48:17 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempxt1680.html
[2011-11-19 07:48:17 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempyi1680.html
[2011-11-18 07:16:02 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempCa1780.html
[2011-11-18 07:16:02 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempyi1780.html
[2011-11-17 14:14:39 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempIrb740.html
[2011-11-17 14:14:39 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempNeb740.html
[2011-11-16 19:10:57 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempng1832.html
[2011-11-16 19:10:57 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempkx1832.html
[2011-11-15 14:09:33 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempdF1688.html
[2011-11-15 14:09:33 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempyZ1688.html
[2011-11-14 20:48:30 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempgR1816.html
[2011-11-14 20:48:30 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Temphb1816.html
[2011-11-14 17:21:45 | 036,800,522 | ---- | C] () -- C:\Users\an\Desktop\Eric_Emmanuel_Schmitt_-_Małe_zbrodnie_małżeńskie.rar
[2011-11-14 13:00:29 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempkq1692.html
[2011-11-14 13:00:29 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempdi1692.html
[2011-11-12 19:22:17 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Temprk1812.html
[2011-11-12 19:22:17 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempjA1812.html
[2011-11-12 12:55:48 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_wpdcomp_01_09_00.Wdf
[2011-11-12 12:46:09 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempTI2100.html
[2011-11-12 12:46:09 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempzb2100.html
[2011-11-11 08:40:49 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempvI1856.html
[2011-11-11 08:40:49 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TemplS1856.html
[2011-11-10 11:28:55 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempiE1704.html
[2011-11-10 11:28:55 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempbi1704.html
[2011-11-09 07:15:53 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempQn1740.html
[2011-11-09 07:15:53 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempuA1740.html
[2011-11-08 18:08:51 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempot1728.html
[2011-11-08 18:08:51 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempET1728.html
[2011-11-07 13:33:40 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempXj1788.html
[2011-11-07 13:33:40 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempnj1788.html
[2011-11-06 10:55:55 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempoK1824.html
[2011-11-06 10:55:55 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Templu1824.html
[2011-11-05 18:16:19 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempRN1720.html
[2011-11-05 18:16:19 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempXz1720.html
[2011-11-04 09:04:16 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempBs1700.html
[2011-11-04 09:04:16 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempie1700.html
[2011-11-03 07:58:40 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempnZ1676.html
[2011-11-03 07:58:40 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempVs1676.html
[2011-11-02 07:39:50 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Temprq1708.html
[2011-11-02 07:39:50 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TemplY1708.html
[2011-11-01 10:33:34 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempXM1688.html
[2011-11-01 10:33:34 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempmL1688.html
[2011-10-31 09:13:54 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempwF1692.html
[2011-10-31 09:13:54 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempuw1692.html
[2011-10-30 22:44:24 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempVW1720.html
[2011-10-30 22:44:24 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempWK1720.html
[2011-10-30 10:28:24 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempOM1700.html
[2011-10-30 10:28:24 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempXu1700.html
[2011-10-29 16:10:21 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempov1828.html
[2011-10-29 16:10:21 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempYJ1828.html
[2011-10-27 09:44:48 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempCU1704.html
[2011-10-27 09:44:48 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempAF1704.html
[2011-10-25 09:50:55 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempsT1720.html
[2011-10-25 09:50:55 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempAL1720.html
[2011-10-24 09:55:38 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempZB1704.html
[2011-10-24 09:55:38 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Templm1704.html
[2011-10-23 16:19:02 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemptT1704.html
[2011-10-23 16:19:02 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempZo1704.html
[2011-10-22 07:14:20 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempGo1784.html
[2011-10-22 07:14:20 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempCX1784.html
[2011-10-21 10:06:17 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempMR1692.html
[2011-10-21 10:06:17 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempjC1692.html
[2011-10-20 14:36:13 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempIF1704.html
[2011-10-20 14:36:13 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempLB1704.html
[2011-10-19 22:45:51 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempwx1868.html
[2011-10-19 22:45:51 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempRa1868.html
[2011-10-19 08:55:29 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempxe1696.html
[2011-10-19 08:55:29 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempCD1696.html
[2011-10-18 07:57:38 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempgQ1700.html
[2011-10-18 07:57:38 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempoR1700.html
[2011-10-17 15:25:31 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempCG2032.html
[2011-10-17 15:25:31 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempuW2032.html
[2011-10-16 09:59:29 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempFM1736.html
[2011-10-16 09:59:29 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempLM1736.html
[2011-10-15 07:54:25 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempjh1708.html
[2011-10-15 07:54:25 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempRJ1708.html
[2011-10-14 13:19:38 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempjO1696.html
[2011-10-14 13:19:38 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempBj1696.html
[2011-10-13 16:13:15 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempwM1768.html
[2011-10-13 16:13:15 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempOj1768.html
[2011-10-12 14:38:51 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemppZ1688.html
[2011-10-12 14:38:51 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempGI1688.html
[2011-10-11 17:00:03 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempQN1812.html
[2011-10-11 17:00:03 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempmS1812.html
[2011-10-10 09:19:30 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempuA1756.html
[2011-10-10 09:19:30 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempUU1756.html
[2011-10-09 17:58:05 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempTV1940.html
[2011-10-09 17:58:05 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempBt1940.html
[2011-10-08 18:14:28 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempIk1692.html
[2011-10-08 18:14:28 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempZa1692.html
[2011-10-07 17:14:45 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempQB1792.html
[2011-10-07 17:14:45 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempma1792.html
[2011-10-06 16:55:35 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempeM1764.html
[2011-10-06 16:55:35 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempZl1764.html
[2011-10-05 15:01:40 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempgo1748.html
[2011-10-05 15:01:40 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempKc1748.html
[2011-10-04 12:30:10 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempQV1752.html
[2011-10-04 12:30:10 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempsL1752.html
[2011-10-03 06:12:24 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempFr1296.html
[2011-10-03 06:12:24 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempBh1296.html
[2011-10-02 09:58:13 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempFB1332.html
[2011-10-02 09:58:13 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempbv1332.html
[2011-10-01 11:40:35 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempmn1260.html
[2011-10-01 11:40:34 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempgl1260.html
[2011-09-30 19:05:21 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempKX1712.html
[2011-09-30 19:05:21 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempek1712.html
[2011-09-29 19:17:34 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TemppY1680.html
[2011-09-29 19:17:33 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempHK1680.html
[2011-09-28 14:30:21 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempmP1700.html
[2011-09-28 14:30:21 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempGR1700.html
[2011-09-27 17:41:41 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempth1716.html
[2011-09-27 17:41:41 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempxH1716.html
[2011-09-26 13:31:21 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempNj1808.html
[2011-09-26 13:31:21 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempXH1808.html
[2011-09-25 09:02:36 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemppJ1704.html
[2011-09-25 09:02:36 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempbW1704.html
[2011-09-24 16:51:43 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Temprq1664.html
[2011-09-24 16:51:43 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempMm1664.html
[2011-09-23 14:57:13 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempMV1844.html
[2011-09-23 14:57:13 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempxW1844.html
[2011-09-22 13:22:20 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempjt1832.html
[2011-09-22 13:22:20 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempwc1832.html
[2011-09-21 18:26:17 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempuZ1844.html
[2011-09-21 18:26:17 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempKp1844.html
[2011-09-20 14:41:45 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempqQ1676.html
[2011-09-20 14:41:45 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempWP1676.html
[2011-09-19 14:39:34 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempom1692.html
[2011-09-19 14:39:34 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempAQ1692.html
[2011-09-18 10:17:03 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Temprf1848.html
[2011-09-18 10:17:03 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempMa1848.html
[2011-09-17 07:48:40 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempQo1832.html
[2011-09-17 07:48:40 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempnx1832.html
[2011-09-16 15:31:00 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempBJ1728.html
[2011-09-16 15:31:00 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempTC1728.html
[2011-09-15 13:30:26 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempAV1848.html
[2011-09-15 13:30:26 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempCr1848.html
[2011-09-14 13:17:27 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempgo1684.html
[2011-09-14 13:17:26 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempRb1684.html
[2011-09-13 19:10:02 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempeE1252.html
[2011-09-13 19:10:02 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempwL1252.html
[2011-09-13 11:45:48 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempmX1720.html
[2011-09-13 11:45:48 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempGY1720.html
[2011-09-12 05:57:48 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempQA1808.html
[2011-09-12 05:57:48 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempJu1808.html
[2011-09-11 10:07:35 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempTe1716.html
[2011-09-11 10:07:35 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TemppY1716.html
[2011-09-10 17:03:36 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempBz1676.html
[2011-09-10 17:03:36 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempfe1676.html
[2011-09-09 14:58:40 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempeu1688.html
[2011-09-09 14:58:40 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempQA1688.html
[2011-09-08 17:47:08 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempLo1832.html
[2011-09-08 17:47:08 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempWb1832.html
[2011-09-08 11:30:32 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempAu1268.html
[2011-09-08 11:30:32 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempzS1268.html
[2011-09-07 13:01:21 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempfs1676.html
[2011-09-07 13:01:21 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempdt1676.html
[2011-09-06 19:14:58 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempoG1628.html
[2011-09-06 19:14:58 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempvH1628.html
[2011-09-05 05:25:26 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempqE1780.html
[2011-09-05 05:25:26 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempIX1780.html
[2011-09-04 08:40:02 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempEG1736.html
[2011-09-04 08:40:02 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempYp1736.html
[2011-09-03 08:27:16 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Templi1844.html
[2011-09-03 08:27:16 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempZr1844.html
[2011-09-02 05:47:02 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempor1724.html
[2011-09-02 05:47:02 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempLM1724.html
[2011-09-01 15:28:59 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempJl1800.html
[2011-09-01 15:28:59 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempqX1800.html
[2011-08-31 05:25:00 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempLf1680.html
[2011-08-31 05:25:00 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempkc1680.html
[2011-08-30 06:01:36 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempDf1740.html
[2011-08-30 06:01:36 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempzQ1740.html
[2011-08-29 05:31:58 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemppD1824.html
[2011-08-29 05:31:58 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempLJ1824.html
[2011-08-28 22:35:09 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempcq1768.html
[2011-08-28 22:35:09 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempWx1768.html
[2011-08-28 08:24:50 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempKj1692.html
[2011-08-28 08:24:50 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempVd1692.html
[2011-08-27 16:12:18 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempSs1692.html
[2011-08-27 16:12:18 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempIF1692.html
[2011-08-26 08:44:10 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemppT1696.html
[2011-08-26 08:44:10 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempch1696.html
[2011-08-25 16:36:20 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempvt1664.html
[2011-08-25 16:36:20 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempDm1664.html
[2011-08-24 11:42:29 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempnO2700.html
[2011-08-24 11:42:29 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempVY2700.html
[2011-08-24 11:21:11 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempPy1872.html
[2011-08-24 11:21:11 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempHW1872.html
[2011-08-23 09:47:14 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempzw1712.html
[2011-08-23 09:47:14 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempMz1712.html
[2011-08-22 15:38:00 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempOx1700.html
[2011-08-22 15:38:00 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Templs1700.html
[2011-08-20 17:08:10 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempUU1736.html
[2011-08-20 17:08:10 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempej1736.html
[2011-08-19 18:41:54 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempfAI264.html
[2011-08-19 18:41:54 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempyrC264.html
[2011-08-14 19:58:23 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempCe1668.html
[2011-08-14 19:58:23 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempzz1668.html
[2011-08-14 09:01:22 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TemplY1780.html
[2011-08-14 09:01:21 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempzY1780.html
[2011-08-11 23:43:47 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempIR1680.html
[2011-08-11 10:09:18 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempQy1752.html
[2011-08-11 10:09:18 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempaZ1752.html
[2011-08-03 20:11:10 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempLK1880.html
[2011-08-03 20:11:10 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempmO1880.html
[2011-08-03 09:07:27 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempYP1836.html
[2011-08-03 09:07:27 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempQa1836.html
[2011-08-02 22:43:09 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll
[2011-08-02 22:34:28 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempch1768.html
[2011-08-02 15:11:28 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempUg3660.html
[2011-08-02 15:11:28 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempFZ3660.html
[2011-08-02 15:08:59 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempOS3484.html
[2011-08-02 15:08:59 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempPA3484.html
[2011-08-02 14:52:15 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempgu1680.html
[2011-08-02 14:52:14 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempQY1680.html
[2011-08-02 14:47:51 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempiO1676.html
[2011-08-02 14:47:51 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempso1676.html
[2011-08-02 14:43:14 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempdR1832.html
[2011-08-02 14:43:14 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempBg1832.html
[2011-08-02 09:37:27 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempCn1700.html
[2011-08-02 09:37:27 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempBb1700.html
[2011-08-01 22:10:01 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempVW1804.html
[2011-08-01 22:10:01 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempUe1804.html
[2011-08-01 20:41:03 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempgV1700.html
[2011-08-01 20:33:31 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempPC1728.html
[2011-08-01 20:33:30 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempRx1728.html
[2011-08-01 13:42:11 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemplM1680.html
[2011-08-01 13:42:11 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempwh1680.html
[2011-08-01 13:37:01 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemptZ1816.html
[2011-08-01 13:37:01 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempZM1816.html
[2011-07-31 09:48:37 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempDU1824.html
[2011-07-31 09:48:37 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempTc1824.html
[2011-07-30 19:40:23 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempSV1688.html
[2011-07-30 19:40:23 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempoc1688.html
[2011-07-27 15:16:13 | 000,000,000 | ---- | C] () -- C:\Users\an\AppData\Local\{4D3B19EE-5DD9-4145-9314-0D756745879D}
[2011-07-27 15:15:38 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempzs1880.html
[2011-07-27 15:15:38 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempxD1880.html
[2011-07-27 15:12:13 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempFn1712.html
[2011-07-27 15:12:12 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempoH1712.html
[2011-07-27 13:56:39 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempFR1788.html
[2011-07-27 13:56:39 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempzy1788.html
[2011-07-27 09:39:07 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempvS1668.html
[2011-07-27 09:39:07 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempJI1668.html
[2011-07-25 17:48:15 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempOQ1748.html
[2011-07-25 17:48:15 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempSw1748.html
[2011-07-25 17:44:17 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempkG1692.html
[2011-07-25 17:44:16 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempjA1692.html
[2011-07-24 17:59:55 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempxb1680.html
[2011-07-24 17:59:55 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempCX1680.html
[2011-07-23 20:09:35 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Temppo1824.html
[2011-07-23 20:09:35 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempux1824.html
[2011-07-23 08:39:19 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempMV1668.html
[2011-07-23 08:39:19 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempNQ1668.html
[2011-07-21 21:19:53 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempkb1692.html
[2011-07-21 21:19:53 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempFp1692.html
[2011-07-21 10:20:24 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempzZ1680.html
[2011-07-21 10:20:24 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempCa1680.html
[2011-07-20 10:31:49 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempXS1700.html
[2011-07-20 10:31:49 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TemplB1700.html
[2011-07-19 10:09:02 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempsf1836.html
[2011-07-19 10:09:02 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempia1836.html
[2011-07-17 18:44:29 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempfc1684.html
[2011-07-17 18:44:29 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempoF1684.html
[2011-07-17 10:25:38 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempbM3636.html
[2011-07-17 10:25:38 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempta3636.html
[2011-07-16 01:12:05 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempZG1664.html
[2011-07-15 19:49:37 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempCww188.html
[2011-07-15 19:49:37 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempxUi188.html
[2011-07-15 09:20:10 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempdB1688.html
[2011-07-15 09:20:10 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempkV1688.html
[2011-07-12 19:58:01 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011-07-12 09:47:01 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Temper1704.html
[2011-07-12 09:47:01 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempFX1704.html
[2011-07-11 17:51:40 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempKj1696.html
[2011-07-11 17:51:40 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempAm1696.html
[2011-07-10 09:24:55 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempCT1800.html
[2011-07-10 09:24:55 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempfq1800.html
[2011-07-09 09:44:22 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempuk1948.html
[2011-07-09 09:44:22 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempXX1948.html
[2011-07-08 22:45:32 | 000,003,584 | ---- | C] () -- C:\Users\an\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-07-08 09:10:09 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempEF1812.html
[2011-07-08 09:10:09 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TemprV1812.html
[2011-07-07 10:20:12 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\Tempvu1680.html
[2011-07-07 10:20:12 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempIv1680.html
[2011-07-06 17:15:49 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempAc1732.html
[2011-07-06 17:15:49 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempox1732.html
[2011-07-06 08:57:15 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempBN1288.html
[2011-07-06 08:57:15 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempGd1288.html
[2011-07-05 09:59:49 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempgX1684.html
[2011-07-05 09:59:49 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempVB1684.html
[2011-07-03 10:47:21 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempIC1684.html
[2011-07-03 10:47:21 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempLj1684.html
[2011-07-02 11:52:24 | 000,074,752 | ---- | C] () -- C:\Windows\System32\CLEyeDevices.dll
[2011-07-02 10:18:09 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempZy1688.html
[2011-07-02 10:18:09 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempnv1688.html
[2011-07-01 09:42:35 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempJx1832.html
[2011-07-01 09:42:35 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempqw1832.html
[2011-06-11 19:25:48 | 000,000,004 | ---- | C] () -- C:\Windows\System32\proc-1963933865.bin
[2011-04-28 21:59:55 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempAdc904.html
[2011-04-28 18:19:21 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempNpt904.html
[2011-04-06 21:31:57 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempcwb224.html
[2011-04-06 14:07:59 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempKMX224.html
[2011-04-04 17:42:20 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TemprRh704.html
[2011-04-04 17:42:20 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempTId704.html
[2011-02-05 21:32:22 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-08-31 13:54:30 | 000,001,473 | ---- | C] () -- C:\Windows\hpdj3500.ini
[2010-07-23 19:41:41 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
[2010-07-22 20:44:36 | 001,474,832 | ---- | C] () -- C:\Windows\System32\drivers\sfi.dat
[2009-07-14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009-07-14 05:33:53 | 000,431,312 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009-07-14 03:05:48 | 000,607,190 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009-07-14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009-07-14 03:05:48 | 000,103,568 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009-07-14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009-07-14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009-07-14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009-07-14 01:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2009-07-14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009-07-14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009-06-10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2007-10-12 00:11:58 | 000,059,500 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini
[2003-04-08 10:40:22 | 000,005,679 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI

[color=#E56717]========== LOP Check ==========[/color]

[2010-07-22 23:14:25 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\Gadu-Gadu 10
[2010-10-08 18:28:42 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\GanymedeNet
[2010-09-27 15:20:01 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\ipla
[2011-07-04 13:43:58 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\Leadertech
[2010-11-30 09:09:47 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\OpenFM
[2010-07-22 22:37:28 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\OpenOffice.org
[2011-09-10 17:41:21 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\Opera
[2010-08-18 22:01:44 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\XemiComputers
[2011-10-16 09:57:36 | 000,032,620 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



< End of report >


Dodano 10.12.2011 19:21:28:

Kod: Zaznacz wszystko

OTL Extras logfile created on: 2011-12-10 17:35:24 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\an\Desktop
Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

765,17 Mb Total Physical Memory | 86,02 Mb Available Physical Memory | 11,24% Memory free
1,75 Gb Paging File | 0,46 Gb Available in Paging File | 26,21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 32,01 Gb Total Space | 4,66 Gb Free Space | 14,57% Space Free | Partition Type: NTFS
Drive D: | 42,52 Gb Total Space | 9,84 Gb Free Space | 23,14% Space Free | Partition Type: NTFS

Computer Name: AN-PC | User Name: an | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- "C:\Program Files\Opera\Opera.exe" "%1"

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java(TM) 6 Update 24
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8727531E-6C58-4852-A90B-39CF45E269A9}" = OpenOffice.org 3.2
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{93AF59FF-F70F-4B26-BD8B-4E3E12CCEC8F}" = Wielki Słownik Angielsko-Polski Polsko-Angielski
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.4
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{CC6B1BB4-4E06-4A5B-A166-B371B551324B}" = COMODO Internet Security
"{CD104A82-D92A-484B-90F9-4CA044315DEC}" = UpdateMyDrivers
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ALLPlayer_is1" = ALLPlayer V4.X
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Gadu-Gadu 10" = Gadu-Gadu 10
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware wersja 1.51.2.1300
"Odkurzacz 12.5_is1" = Odkurzacz 12.5
"Świadectwa sp N" = Librus Świadectwa 4-6
"UpdateMyDrivers" = UpdateMyDrivers
"WinRAR archiver" = Archiwizator WinRAR

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2011-11-02 13:26:50 | Computer Name = an-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 8.0.7600.16385,
time stamp: 0x4a5bc69e  Faulting module name: Flash10w.ocx, version: 10.3.183.7, time
stamp: 0x4e52e8e0  Exception code: 0xc0000005  Fault offset: 0x00425d4f  Faulting process
id: 0x964  Faulting application start time: 0x01cc995cbad768c8  Faulting application
path: C:\Program Files\Internet Explorer\iexplore.exe  Faulting module path: C:\Windows\system32\Macromed\Flash\Flash10w.ocx
Report
Id: d88e0cb9-0577-11e1-b839-00a0d1ce318d

Error - 2011-11-05 19:29:04 | Computer Name = an-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.    Process ID: b58    Start
Time: 01cc9bdf9410fa9c    Termination Time: 0    Application Path: C:\Program Files\Internet
Explorer\iexplore.exe    Report Id:   

Error - 2011-11-11 17:02:27 | Computer Name = an-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.    Process ID: 92c    Start
Time: 01cca088e3694129    Termination Time: 1918    Application Path: C:\Program Files\Internet
Explorer\iexplore.exe    Report Id: 67a9b19c-0ca8-11e1-b5e7-00a0d1ce318d 

Error - 2011-11-11 17:29:57 | Computer Name = an-PC | Source = Microsoft-Windows-RestartManager | ID = 10007
Description = Application or service 'Process Monitor' could not be restarted.

Error - 2011-11-19 20:22:45 | Computer Name = an-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.    Process ID: 658    Start
Time: 01cca71260a3d38e    Termination Time: 3116    Application Path: C:\Program Files\Internet
Explorer\iexplore.exe    Report Id: a1c4fc3c-130d-11e1-a926-00a0d1ce318d 

Error - 2011-11-22 17:43:02 | Computer Name = an-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.    Process ID: 13c    Start
Time: 01cca865041bfd4e    Termination Time: 880    Application Path: C:\Program Files\Internet
Explorer\iexplore.exe    Report Id: e98ad2a9-1552-11e1-9e12-00a0d1ce318d 

Error - 2011-11-28 09:21:46 | Computer Name = an-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 8.0.7600.16385,
time stamp: 0x4a5bc69e  Faulting module name: mshtml.dll, version: 8.0.7600.16625,
time stamp: 0x4c2ae0bb  Exception code: 0xc0000005  Fault offset: 0x001b6547  Faulting
process id: 0x2d4  Faulting application start time: 0x01ccadd08fd6fc6e  Faulting application
path: C:\Program Files\Internet Explorer\iexplore.exe  Faulting module path: C:\Windows\System32\mshtml.dll
Report
Id: eb4e8574-19c3-11e1-9daf-00a0d1ce318d

Error - 2011-12-04 10:43:15 | Computer Name = an-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 8.0.7600.16385,
time stamp: 0x4a5bc69e  Faulting module name: mshtml.dll, version: 8.0.7600.16625,
time stamp: 0x4c2ae0bb  Exception code: 0xc0000005  Fault offset: 0x001b6547  Faulting
process id: 0xc54  Faulting application start time: 0x01ccb292e94729b2  Faulting application
path: C:\Program Files\Internet Explorer\iexplore.exe  Faulting module path: C:\Windows\System32\mshtml.dll
Report
Id: 4bb024bf-1e86-11e1-bfe9-00a0d1ce318d

Error - 2011-12-09 12:05:52 | Computer Name = an-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 8.0.7600.16385,
time stamp: 0x4a5bc69e  Faulting module name: mshtml.dll, version: 8.0.7600.16625,
time stamp: 0x4c2ae0bb  Exception code: 0xc0000005  Fault offset: 0x001b6547  Faulting
process id: 0x820  Faulting application start time: 0x01ccb68c2d7c613f  Faulting application
path: C:\Program Files\Internet Explorer\iexplore.exe  Faulting module path: C:\Windows\System32\mshtml.dll
Report
Id: aa68dbae-227f-11e1-b83c-00a0d1ce318d

Error - 2011-12-10 11:29:25 | Computer Name = an-PC | Source = VSS | ID = 8194
Description =

[ Media Center Events ]
Error - 2011-07-29 16:35:05 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 22:35:04 - Error connecting to the internet.  22:35:04 -     Unable
to contact server.. 

Error - 2011-07-29 17:36:07 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 23:36:06 - Error connecting to the internet.  23:36:07 -     Unable
to contact server.. 

Error - 2011-09-08 06:34:41 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 12:34:40 - Error connecting to the internet.  12:34:41 -     Unable
to contact server.. 

Error - 2011-09-08 06:34:59 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 12:34:46 - Error connecting to the internet.  12:34:46 -     Unable
to contact server.. 

Error - 2011-09-08 07:35:39 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 13:35:39 - Error connecting to the internet.  13:35:39 -     Unable
to contact server.. 

Error - 2011-09-08 07:35:56 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 13:35:44 - Error connecting to the internet.  13:35:44 -     Unable
to contact server.. 

Error - 2011-09-08 09:11:34 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 15:11:34 - Error connecting to the internet.  15:11:34 -     Unable
to contact server.. 

Error - 2011-09-08 09:11:47 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 15:11:39 - Error connecting to the internet.  15:11:39 -     Unable
to contact server.. 

Error - 2011-09-13 06:49:18 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 12:49:17 - Error connecting to the internet.  12:49:17 -     Unable
to contact server.. 

Error - 2011-09-13 06:49:49 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 12:49:23 - Error connecting to the internet.  12:49:23 -     Unable
to contact server.. 

[ System Events ]
Error - 2011-03-23 13:07:51 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the Netman service.

Error - 2011-03-24 15:05:15 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the fdPHost service.

Error - 2011-03-24 17:14:50 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the EapHost service.

Error - 2011-03-25 14:01:01 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the SysMain service.

Error - 2011-03-25 15:37:19 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the EFS service.

Error - 2011-03-25 17:46:51 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the Wlansvc service.

Error - 2011-03-26 13:02:32 | Computer Name = an-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 18:01:02 on ?2011-?03-?26 was unexpected.

Error - 2011-03-26 15:19:21 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the ShellHWDetection service.

Error - 2011-03-26 16:50:38 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the NlaSvc service.

Error - 2011-03-26 18:04:25 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the SysMain service.


< End of report >


Dodano 10.12.2011 19:22:27:
Przepraszam najmocniej, ale tylko w ten sposób udało mi się cokolwiek zrobić...

[wojtas]

log z Gmera robiony w nieodpowiednich warunkach :

[Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)

poczytaj i zastosuj się do tego, i daj nowego loga z Gmera w następnym poście.

odinstaluj w dodaj usun UpdateMyDrivers

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [UpdateMyDrivers] C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe ()
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

:Files
C:\Users\an\AppData\Local\Temp*.html
C:\Program Files\SmartTweak Software

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).

[an]

Więc ponownie, przepraszam, z Gmerem postąpiłam niewłaściwie, mimo najszczerszych chęci.
Link do nowego:
http://wklej.org/id/646307/

Niestety, z wklej.org mam nadal problemy, więc OTL klasycznie wpinam tutaj.

Kod: Zaznacz wszystko

OTL logfile created on: 2011-12-12 18:44:58 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\an\Desktop
Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

765,17 Mb Total Physical Memory | 123,28 Mb Available Physical Memory | 16,11% Memory free
1,75 Gb Paging File | 0,39 Gb Available in Paging File | 22,52% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 32,01 Gb Total Space | 4,98 Gb Free Space | 15,55% Space Free | Partition Type: NTFS
Drive D: | 42,52 Gb Total Space | 9,81 Gb Free Space | 23,08% Space Free | Partition Type: NTFS

Computer Name: AN-PC | User Name: an | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2011-12-10 17:34:01 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\an\Desktop\OTL.exe
PRC - [2011-09-10 17:57:13 | 000,243,360 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10w_ActiveX.exe
PRC - [2011-01-25 11:11:23 | 001,803,224 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2010-10-07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2010-05-21 00:16:24 | 011,312,128 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2010-05-21 00:16:22 | 011,318,784 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2009-11-24 11:32:22 | 000,234,792 | ---- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
PRC - [2009-10-31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-07-14 02:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2010-10-07 09:05:14 | 000,217,696 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\gglog.dll
MOD - [2010-10-07 09:05:14 | 000,123,488 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipcradioproxy.dll
MOD - [2010-10-07 09:05:10 | 000,017,504 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipc.dll
MOD - [2010-10-07 09:05:08 | 000,027,744 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcrypto.dll
MOD - [2010-10-07 09:05:06 | 000,356,960 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcommon.dll
MOD - [2010-08-06 20:01:42 | 002,404,352 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtCore4.dll
MOD - [2010-08-06 20:01:42 | 001,515,520 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtScript4.dll
MOD - [2010-08-06 20:01:42 | 001,040,384 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtNetwork4.dll
MOD - [2010-08-06 20:01:42 | 000,389,120 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXml4.dll
MOD - [2010-08-06 20:01:42 | 000,323,584 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtSvg4.dll
MOD - [2010-08-06 20:01:40 | 013,553,664 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtWebKit4.dll
MOD - [2010-08-06 20:01:38 | 008,818,688 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtGui4.dll
MOD - [2010-08-06 20:01:22 | 003,334,144 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXmlPatterns4.dll
MOD - [2010-08-06 20:00:32 | 000,311,296 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qtiff4.dll
MOD - [2010-08-06 20:00:32 | 000,274,432 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qmng4.dll
MOD - [2010-08-06 20:00:32 | 000,143,360 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qjpeg4.dll
MOD - [2010-08-06 20:00:32 | 000,027,648 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qgif4.dll
MOD - [2010-08-06 20:00:32 | 000,018,944 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qsvg4.dll
MOD - [2010-05-04 14:36:28 | 000,970,752 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2010-03-19 08:33:38 | 000,059,904 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\zlib1.dll
MOD - [2009-10-28 04:40:14 | 003,885,984 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2011-01-25 11:11:23 | 001,803,224 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2010-08-31 14:09:41 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009-07-14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2011-01-25 11:12:21 | 000,080,064 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\inspect.sys -- (inspect)
DRV - [2011-01-25 11:12:20 | 000,035,768 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2011-01-25 11:12:20 | 000,017,256 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmderd.sys -- (cmderd)
DRV - [2011-01-25 11:12:19 | 000,236,600 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2009-07-14 02:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus)
DRV - [2009-07-14 02:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt)
DRV - [2009-07-14 02:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc)
DRV - [2009-07-14 00:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009-07-14 00:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap)
DRV - [2009-07-14 00:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID)
DRV - [2009-07-13 23:02:53 | 000,048,128 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SiSGB6.sys -- (SiSGbeLH)
DRV - [2009-07-13 23:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008-12-29 06:24:52 | 000,463,872 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SISGRKMD.sys -- (SiS6350)
DRV - [2007-10-12 01:00:44 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2007-10-12 00:56:22 | 000,490,776 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LV561AV.SYS -- (PID_0928) Logitech QuickCam Express(PID_0928)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.stardoll.com/http://www.google.pl/ [binary data]
IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found


[2010-11-01 09:28:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\an\AppData\Roaming\Mozilla\Sunbird\Profiles\q8caarg7.default\extensions
[2011-06-11 17:01:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-02-05 21:34:12 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2011-04-15 22:47:55 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011-06-11 16:54:21 | 000,000,000 | ---D | M] (No name found) -- C:\PROGRAM FILES\MOZILLA SUNBIRD\EXTENSIONS\{E2FDA1A4-762B-4020-B5AD-A41DF1933103}
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA SUNBIRD\EXTENSIONS\CALENDAR-TIMEZONES@MOZILLA.ORG
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA SUNBIRD\EXTENSIONS\TALKBACK@MOZILLA.ORG
[2011-04-15 22:47:05 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010-08-20 10:07:12 | 000,669,176 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPWORDS.dll

O1 HOSTS File: ([2009-06-10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-1158332841-1477850335-1516271769-1000..\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe (Franmo Software)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\an\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html File not found
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {BFA1F11D-AFE1-3121-4112-894323212DAC} http://cached.gamedesire.com/g_bin/pl/words_2_0_0_55.cab (GameDesire Word Games)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B38EC22B-97D7-4D0F-A663-B9E198CDD1F9}: DhcpNameServer = 192.168.0.1 153.19.48.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B730605F-49E6-4751-9AE6-7999E85AE2EB}: DhcpNameServer = 62.179.1.63 62.179.1.62
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\Windows\system32\guard32.dll) -C:\Windows\System32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010-07-22 19:01:03 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{30d4a758-563c-11e0-a639-00a0d1ce318d}\Shell - "" = AutoRun
O33 - MountPoints2\{30d4a758-563c-11e0-a639-00a0d1ce318d}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{5f16ec6b-980f-11e0-ab51-00a0d1ce318d}\Shell - "" = AutoRun
O33 - MountPoints2\{5f16ec6b-980f-11e0-ab51-00a0d1ce318d}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{7617fdf0-e0cf-11df-b9e2-00a0d1ce318d}\Shell - "" = AutoRun
O33 - MountPoints2\{7617fdf0-e0cf-11df-b9e2-00a0d1ce318d}\Shell\AutoRun\command - "" = F:\Menu.exe
O33 - MountPoints2\{c5eba211-95c2-11df-92d1-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c5eba211-95c2-11df-92d1-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Menu.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2011-12-11 22:07:33 | 000,000,000 | ---D | C] -- C:\_OTL
[2011-12-10 17:33:57 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\an\Desktop\OTL.exe
[2011-11-14 17:22:57 | 000,000,000 | ---D | C] -- C:\Users\an\Desktop\Eric_Emmanuel_Schmitt_-_Małe_zbrodnie_małżeńskie

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2011-12-12 18:40:11 | 001,474,832 | ---- | M] () -- C:\Windows\System32\drivers\sfi.dat
[2011-12-12 17:48:50 | 000,017,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011-12-12 17:48:50 | 000,017,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011-12-12 17:41:43 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempvK1856.html
[2011-12-12 17:41:43 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempcr1856.html
[2011-12-12 17:40:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-12-12 17:40:14 | 601,755,648 | -HS- | M] () -- C:\hiberfil.sys
[2011-12-12 17:37:08 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempSM1684.html
[2011-12-12 17:37:08 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TempSF1684.html
[2011-12-12 17:22:08 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempQa1836.html
[2011-12-12 17:22:08 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\Tempia1836.html
[2011-12-12 11:51:12 | 000,236,695 | ---- | M] () -- C:\Users\an\Desktop\21ceny_odido.pdf
[2011-12-11 22:26:44 | 000,002,432 | ---- | M] () -- C:\Users\an\AppData\Local\TempqG2380.html
[2011-12-11 22:26:44 | 000,002,089 | ---- | M] () -- C:\Users\an\AppData\Local\TemphB2380.html
[2011-12-10 17:34:01 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\an\Desktop\OTL.exe
[2011-12-10 16:45:11 | 000,302,592 | ---- | M] () -- C:\Users\an\Desktop\iojczd6x.exe
[2011-12-09 20:53:58 | 000,091,334 | ---- | M] () -- C:\Users\an\Desktop\fll.jpg
[2011-12-09 20:36:51 | 000,025,400 | ---- | M] () -- C:\Users\an\Desktop\szkola.jpg
[2011-12-09 19:46:16 | 000,021,622 | ---- | M] () -- C:\Users\an\Desktop\Zal1-Regulamin-2011-2012.pdf
[2011-12-09 19:43:57 | 000,032,682 | ---- | M] () -- C:\Users\an\Desktop\Regulamin-2011-2012 Ojczyzna - Polszczyzna.pdf
[2011-12-09 19:39:31 | 000,014,703 | ---- | M] () -- C:\Users\an\Desktop\deklaracja_udzialu_szkoly.pdf
[2011-12-01 19:55:17 | 000,607,190 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-12-01 19:55:17 | 000,103,568 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-11-14 17:21:49 | 036,800,522 | ---- | M] () -- C:\Users\an\Desktop\Eric_Emmanuel_Schmitt_-_Małe_zbrodnie_małżeńskie.rar

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2011-12-12 17:41:43 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempvK1856.html
[2011-12-12 17:41:43 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempcr1856.html
[2011-12-12 17:26:05 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempSM1684.html
[2011-12-12 17:26:05 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TempSF1684.html
[2011-12-12 11:50:51 | 000,236,695 | ---- | C] () -- C:\Users\an\Desktop\21ceny_odido.pdf
[2011-12-12 09:34:13 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempQa1836.html
[2011-12-12 09:34:13 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\Tempia1836.html
[2011-12-11 22:20:02 | 000,002,432 | ---- | C] () -- C:\Users\an\AppData\Local\TempqG2380.html
[2011-12-11 22:20:02 | 000,002,089 | ---- | C] () -- C:\Users\an\AppData\Local\TemphB2380.html
[2011-12-10 16:44:56 | 000,302,592 | ---- | C] () -- C:\Users\an\Desktop\iojczd6x.exe
[2011-12-09 20:54:05 | 000,091,334 | ---- | C] () -- C:\Users\an\Desktop\fll.jpg
[2011-12-09 20:37:12 | 000,025,400 | ---- | C] () -- C:\Users\an\Desktop\szkola.jpg
[2011-12-09 19:46:16 | 000,021,622 | ---- | C] () -- C:\Users\an\Desktop\Zal1-Regulamin-2011-2012.pdf
[2011-12-09 19:43:56 | 000,032,682 | ---- | C] () -- C:\Users\an\Desktop\Regulamin-2011-2012 Ojczyzna - Polszczyzna.pdf
[2011-12-09 19:39:30 | 000,014,703 | ---- | C] () -- C:\Users\an\Desktop\deklaracja_udzialu_szkoly.pdf
[2011-11-14 17:21:45 | 036,800,522 | ---- | C] () -- C:\Users\an\Desktop\Eric_Emmanuel_Schmitt_-_Małe_zbrodnie_małżeńskie.rar
[2011-08-02 22:43:09 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll
[2011-07-27 15:16:13 | 000,000,000 | ---- | C] () -- C:\Users\an\AppData\Local\{4D3B19EE-5DD9-4145-9314-0D756745879D}
[2011-07-12 19:58:01 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011-07-08 22:45:32 | 000,003,584 | ---- | C] () -- C:\Users\an\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-07-02 11:52:24 | 000,074,752 | ---- | C] () -- C:\Windows\System32\CLEyeDevices.dll
[2011-06-11 19:25:48 | 000,000,004 | ---- | C] () -- C:\Windows\System32\proc-1963933865.bin
[2011-02-05 21:32:22 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-08-31 13:54:30 | 000,001,473 | ---- | C] () -- C:\Windows\hpdj3500.ini
[2010-07-23 19:41:41 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
[2010-07-22 20:44:36 | 001,474,832 | ---- | C] () -- C:\Windows\System32\drivers\sfi.dat
[2009-07-14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009-07-14 05:33:53 | 000,431,312 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009-07-14 03:05:48 | 000,607,190 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009-07-14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009-07-14 03:05:48 | 000,103,568 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009-07-14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009-07-14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009-07-14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009-07-14 01:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2009-07-14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009-07-14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009-06-10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2007-10-12 00:11:58 | 000,059,500 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini
[2003-04-08 10:40:22 | 000,005,679 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI

[color=#E56717]========== LOP Check ==========[/color]

[2010-07-22 23:14:25 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\Gadu-Gadu 10
[2010-10-08 18:28:42 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\GanymedeNet
[2010-09-27 15:20:01 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\ipla
[2011-07-04 13:43:58 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\Leadertech
[2010-11-30 09:09:47 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\OpenFM
[2010-07-22 22:37:28 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\OpenOffice.org
[2011-09-10 17:41:21 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\Opera
[2010-08-18 22:01:44 | 000,000,000 | ---D | M] -- C:\Users\an\AppData\Roaming\XemiComputers
[2011-10-16 09:57:36 | 000,032,620 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



< End of report >


Dodano 12.12.2011 20:19:59:
i drugi log OTL

Kod: Zaznacz wszystko

/OTL Extras logfile created on: 2011-12-12 18:44:58 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\an\Desktop
Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

765,17 Mb Total Physical Memory | 123,28 Mb Available Physical Memory | 16,11% Memory free
1,75 Gb Paging File | 0,39 Gb Available in Paging File | 22,52% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 32,01 Gb Total Space | 4,98 Gb Free Space | 15,55% Space Free | Partition Type: NTFS
Drive D: | 42,52 Gb Total Space | 9,81 Gb Free Space | 23,08% Space Free | Partition Type: NTFS

Computer Name: AN-PC | User Name: an | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- "C:\Program Files\Opera\Opera.exe" "%1"

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java(TM) 6 Update 24
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8727531E-6C58-4852-A90B-39CF45E269A9}" = OpenOffice.org 3.2
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{93AF59FF-F70F-4B26-BD8B-4E3E12CCEC8F}" = Wielki Słownik Angielsko-Polski Polsko-Angielski
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.4
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{CC6B1BB4-4E06-4A5B-A166-B371B551324B}" = COMODO Internet Security
"{CD104A82-D92A-484B-90F9-4CA044315DEC}" = UpdateMyDrivers
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ALLPlayer_is1" = ALLPlayer V4.X
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Gadu-Gadu 10" = Gadu-Gadu 10
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware wersja 1.51.2.1300
"Odkurzacz 12.5_is1" = Odkurzacz 12.5
"Świadectwa sp N" = Librus Świadectwa 4-6
"UpdateMyDrivers" = UpdateMyDrivers
"WinRAR archiver" = Archiwizator WinRAR

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-1158332841-1477850335-1516271769-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2011-12-09 12:05:52 | Computer Name = an-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 8.0.7600.16385,
time stamp: 0x4a5bc69e  Faulting module name: mshtml.dll, version: 8.0.7600.16625,
time stamp: 0x4c2ae0bb  Exception code: 0xc0000005  Fault offset: 0x001b6547  Faulting
process id: 0x820  Faulting application start time: 0x01ccb68c2d7c613f  Faulting application
path: C:\Program Files\Internet Explorer\iexplore.exe  Faulting module path: C:\Windows\System32\mshtml.dll
Report
Id: aa68dbae-227f-11e1-b83c-00a0d1ce318d

Error - 2011-12-10 11:29:25 | Computer Name = an-PC | Source = VSS | ID = 8194
Description =

Error - 2011-12-10 14:07:47 | Computer Name = an-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.    Process ID: 7c4    Start
Time: 01ccb751bac4aae1    Termination Time: 1173    Application Path: C:\Program Files\Internet
Explorer\iexplore.exe    Report Id: d2ea2dc3-2359-11e1-9304-00a0d1ce318d 

Error - 2011-12-10 14:11:57 | Computer Name = an-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.    Process ID: bb4    Start
Time: 01ccb766a62b51ad    Termination Time: 155    Application Path: C:\Program Files\Internet
Explorer\iexplore.exe    Report Id: 6accdd88-235a-11e1-9304-00a0d1ce318d 

Error - 2011-12-10 14:13:20 | Computer Name = an-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.    Process ID: 1ac    Start
Time: 01ccb7673818583c    Termination Time: 233    Application Path: C:\Program Files\Internet
Explorer\iexplore.exe    Report Id: 9de26545-235a-11e1-9304-00a0d1ce318d 

Error - 2011-12-10 14:15:38 | Computer Name = an-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.    Process ID: fd0    Start
Time: 01ccb7676840c731    Termination Time: 215    Application Path: C:\Program Files\Internet
Explorer\iexplore.exe    Report Id: f1884772-235a-11e1-9304-00a0d1ce318d 

Error - 2011-12-11 08:02:12 | Computer Name = an-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 8.0.7600.16385,
time stamp: 0x4a5bc69e  Faulting module name: skypeieplugin.dll_unloaded, version:
0.0.0.0, time stamp: 0x4b3888a1  Exception code: 0xc0000005  Fault offset: 0x02f39ae0
Faulting
process id: 0xcf4  Faulting application start time: 0x01ccb7fc976ec218  Faulting application
path: C:\Program Files\Internet Explorer\iexplore.exe  Faulting module path: skypeieplugin.dll
Report
Id: f51b0db3-23ef-11e1-8ce9-00a0d1ce318d

Error - 2011-12-12 05:29:57 | Computer Name = an-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.    Process ID: 248    Start
Time: 01ccb8af2b1e673e    Termination Time: 0    Application Path: C:\Program Files\Internet
Explorer\iexplore.exe    Report Id:   

Error - 2011-12-12 12:20:36 | Computer Name = an-PC | Source = VSS | ID = 8194
Description =

Error - 2011-12-12 12:43:56 | Computer Name = an-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 8.0.7600.16385,
time stamp: 0x4a5bc69e  Faulting module name: mshtml.dll, version: 8.0.7600.16625,
time stamp: 0x4c2ae0bb  Exception code: 0xc0000005  Fault offset: 0x001b6547  Faulting
process id: 0xab8  Faulting application start time: 0x01ccb8ed0bf7599d  Faulting application
path: C:\Program Files\Internet Explorer\iexplore.exe  Faulting module path: C:\Windows\System32\mshtml.dll
Report
Id: 7ae6b0dd-24e0-11e1-aa4a-00a0d1ce318d

[ Media Center Events ]
Error - 2011-07-29 16:35:05 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 22:35:04 - Error connecting to the internet.  22:35:04 -     Unable
to contact server.. 

Error - 2011-07-29 17:36:07 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 23:36:06 - Error connecting to the internet.  23:36:07 -     Unable
to contact server.. 

Error - 2011-09-08 06:34:41 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 12:34:40 - Error connecting to the internet.  12:34:41 -     Unable
to contact server.. 

Error - 2011-09-08 06:34:59 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 12:34:46 - Error connecting to the internet.  12:34:46 -     Unable
to contact server.. 

Error - 2011-09-08 07:35:39 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 13:35:39 - Error connecting to the internet.  13:35:39 -     Unable
to contact server.. 

Error - 2011-09-08 07:35:56 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 13:35:44 - Error connecting to the internet.  13:35:44 -     Unable
to contact server.. 

Error - 2011-09-08 09:11:34 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 15:11:34 - Error connecting to the internet.  15:11:34 -     Unable
to contact server.. 

Error - 2011-09-08 09:11:47 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 15:11:39 - Error connecting to the internet.  15:11:39 -     Unable
to contact server.. 

Error - 2011-09-13 06:49:18 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 12:49:17 - Error connecting to the internet.  12:49:17 -     Unable
to contact server.. 

Error - 2011-09-13 06:49:49 | Computer Name = an-PC | Source = MCUpdate | ID = 0
Description = 12:49:23 - Error connecting to the internet.  12:49:23 -     Unable
to contact server.. 

[ System Events ]
Error - 2011-03-25 17:46:51 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the Wlansvc service.

Error - 2011-03-26 13:02:32 | Computer Name = an-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 18:01:02 on ?2011-?03-?26 was unexpected.

Error - 2011-03-26 15:19:21 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the ShellHWDetection service.

Error - 2011-03-26 16:50:38 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the NlaSvc service.

Error - 2011-03-26 18:04:25 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the SysMain service.

Error - 2011-03-27 07:34:55 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the Netman service.

Error - 2011-03-27 10:26:12 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the ShellHWDetection service.

Error - 2011-03-27 10:26:12 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the WinDefend service.

Error - 2011-03-27 13:09:54 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the hidserv service.

Error - 2011-03-27 15:10:01 | Computer Name = an-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the SysMain service.


< End of report >

Dodano 12.12.2011 20:23:45:
Nie mogę ...przeskakują mi wersy i trzęsie się obraz..sorki

[wojtas]

w logu z OTL widzę UpdateMyDrivers czy odinstalowałaś to ?

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html File not found

Kliknij wykonaj skrypt.

Nie mogę ...przeskakują mi wersy i trzęsie się obraz..sorki

problem ze sterownikami ? zastosuj się do tego:
viewtopic.php?f=30&t=103090&p=792393#p792393

[an]

Tak, odinstalowałam Smart Tweeka. Jest o tyle lepiej, że nie pojawia się zaraz po włączeniu kompa i nie ma go na pasku. Nie wiem dlaczego jest widoczny jeszcze w logach..zrobiłam wszystko tak, jak mi napisałeś.

Wykonałam opcję z OTL, rozumiem, że nie ma potrzeby zamieszczania kolejnego loga?

Obraz trzęsie sie tylko na wklej.org , cały czas pojawia się wówczas komunikat - not responding oraz tutaj, gdy próbuję wkleić jakiekolwiek logi...normalnie nie mam z tym żadnych problemów. Ale zaglądnę pod wskazany przez Ciebie temat.

Gorąco dziękuję Ci za pomoc. Jesli mogę zrobić coś jeszcze/jeśli czegokoliwek wymaga jeszcze komputer, będę wdzięczna za podpowiedź, łączę pozdrowienia. an.

[wojtas]

pokaż ten komunikat albo jego treść jak w ogóle komputer śmiga ?

Autor postu otrzymał pochwałę

[an]

NIe komunikat - obraz pokrywa sie mgłą...wiem, że to brzmi śmiesznie, ale tak jest i na górze strony pojawia się także w nawiasie (Not responding). I tak sobie miga i miga. Muszę włączać Menadżera Zadań i zamykam w ten sposób zadanie, po raz kolejny wchodzę w Internet, odtwarzam poprzednią sesję i czasem się udaje, że się poprawnie otworzy. Ale tak się dzieje tylko w przypadku wklej.org czy otwierania plików z Worda np. Normalnie, nie ma żadnych problemów.
Przyzwyczaiłam się i chyba już nic z tym się nie da zrobić. Cuda na kiju...

[wojtas]

*Uruchom OTL z opcji sprzątanie.
* wykonaj optymalizację Windowsa ( instrukcja dla Windowsa XP, lecz w innych systemach jest podobnie )
* zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )
* Skasuj stan przywracania systemu


Zaktualizuj zabezpieczenia:
>>> Adobe Reader (bez Free McAfee® Security Scan Plus)
>>> Java™ 6
>>> Adobe Flash Player