logi z
OTL
- Kod: Zaznacz wszystko
OTL logfile created on: 2009-11-03 21:41:00 - Run 1
OTL by OldTimer - Version 3.1.3.3 Folder = C:\instalki\od virusow\VIRUS
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1023,17 Mb Total Physical Memory | 555,68 Mb Available Physical Memory | 54,31% Memory free
2,40 Gb Paging File | 2,05 Gb Available in Paging File | 85,26% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 44,72 Gb Free Space | 45,79% Space Free | Partition Type: NTFS
Drive D: | 7,88 Gb Total Space | 0,95 Gb Free Space | 12,00% Space Free | Partition Type: FAT32
Drive E: | 97,65 Gb Total Space | 25,63 Gb Free Space | 26,24% Space Free | Partition Type: NTFS
Drive F: | 97,65 Gb Total Space | 6,05 Gb Free Space | 6,19% Space Free | Partition Type: NTFS
Drive G: | 97,65 Gb Total Space | 89,65 Gb Free Space | 91,80% Space Free | Partition Type: NTFS
Drive H: | 75,13 Gb Total Space | 65,54 Gb Free Space | 87,23% Space Free | Partition Type: NTFS
Drive I: | 30,44 Gb Total Space | 21,50 Gb Free Space | 70,63% Space Free | Partition Type: NTFS
Computer Name: NOWSZY
Current User Name: adamo88
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2009-11-03 21:37:57 | 00,527,872 | ---- | M] (OldTimer Tools) -- C:\instalki\od virusow\VIRUS\OTL.exe
PRC - [2009-10-19 15:50:14 | 00,832,296 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2009-09-20 17:16:01 | 00,145,504 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\system32\bgsvcgen.exe
PRC - [2009-06-10 07:28:50 | 00,168,004 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2009-03-09 04:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2008-09-30 12:48:28 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2008-06-09 10:21:58 | 00,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe
PRC - [2008-05-02 05:15:46 | 00,015,872 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe
PRC - [2008-04-14 21:51:18 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008-02-19 15:34:00 | 16,858,112 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.exe
PRC - [2007-09-06 14:08:02 | 00,136,136 | ---- | M] (DT Soft Ltd.) -- C:\Program Files\DAEMON\DTProAgent.exe
PRC - [2007-07-11 11:15:06 | 00,081,920 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\VSGate.exe
PRC - [2007-07-11 11:02:32 | 00,147,456 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\LcSvrAdm.exe
PRC - [2007-07-11 10:54:50 | 00,217,088 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\LcSvrHis.exe
PRC - [2007-07-11 10:51:18 | 01,306,624 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\LcSvrAuf.exe
PRC - [2007-07-11 10:44:52 | 00,241,664 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\LcSvrDba.exe
PRC - [2006-11-13 14:57:16 | 01,289,000 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe
PRC - [2006-11-13 14:57:06 | 00,199,464 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft ActiveSync\rapimgr.exe
PRC - [2005-08-05 15:15:04 | 00,061,440 | ---- | M] (Vimicro) -- C:\WINDOWS\VM305_STI.exe
PRC - [2005-03-23 16:27:18 | 01,941,504 | ---- | M] (Kerio Technologies) -- C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
PRC - [2005-03-23 16:24:34 | 02,899,968 | ---- | M] (Kerio Technologies) -- C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
PRC - [2005-03-23 16:24:34 | 02,899,968 | ---- | M] (Kerio Technologies) -- C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
PRC - [2003-02-25 06:52:00 | 00,303,104 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\LEXBCES.EXE
PRC - [2003-02-25 06:50:00 | 00,174,592 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\LEXPPS.EXE
PRC - [1997-04-09 22:04:50 | 00,050,176 | ---- | M] () -- C:\WINDOWS\system32\CrypServ.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2009-11-03 21:37:57 | 00,527,872 | ---- | M] (OldTimer Tools) -- C:\instalki\od virusow\VIRUS\OTL.exe
MOD - [2008-05-02 05:15:35 | 00,004,608 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerHook.dll
MOD - [2008-04-14 21:50:32 | 00,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\framedyn.dll
MOD - [2008-04-14 21:29:10 | 01,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2009-09-28 08:26:55 | 00,655,624 | ---- | M] (Acresso Software Inc.) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009-09-20 17:16:01 | 00,145,504 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\System32\bgsvcgen.exe -- (bgsvcgen)
SRV - [2009-06-10 07:28:50 | 00,168,004 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe -- (nvsvc)
SRV - [2009-03-09 04:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2008-09-30 12:48:28 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2008-06-09 10:21:58 | 00,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe -- (LightScribeService)
SRV - [2008-04-14 21:50:46 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll -- (helpsvc)
SRV - [2007-07-11 11:15:06 | 00,081,920 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\VSGate.exe -- (VSGate)
SRV - [2007-07-11 11:02:32 | 00,147,456 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\LcSvrAdm.exe -- (LcSvrAdm)
SRV - [2007-07-11 10:54:50 | 00,217,088 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\LcSvrHis.exe -- (LcSvrHis)
SRV - [2007-07-11 10:51:18 | 01,306,624 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\LcSvrAuf.exe -- (LcSvrAuf)
SRV - [2007-07-11 10:44:52 | 00,241,664 | ---- | M] (Volkswagen AG) -- C:\ElsaWin\bin\LcSvrDba.exe -- (LcSvrDba)
SRV - [2006-12-01 11:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc)
SRV - [2006-10-30 02:34:02 | 00,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2006-10-30 02:33:58 | 00,741,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc)
SRV - [2006-10-27 00:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Office2007\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006-10-20 20:21:24 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0)
SRV - [2005-09-23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2005-09-23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state)
SRV - [2005-03-23 16:27:18 | 01,941,504 | ---- | M] (Kerio Technologies) -- C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe -- (KPF4)
SRV - [2003-02-25 06:52:00 | 00,303,104 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\LEXBCES.EXE -- (LexBceS)
SRV - [1997-04-09 22:04:50 | 00,050,176 | ---- | M] () -- C:\WINDOWS\System32\CrypServ.exe -- (Crypkey License)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2009-09-20 16:21:12 | 00,033,408 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\system32\drivers\CDRBSDRV.SYS -- (cdrbsdrv)
DRV - [2009-07-12 16:24:06 | 00,278,984 | ---- | M] () -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2009-07-12 16:24:05 | 00,025,416 | ---- | M] () -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009-06-10 05:03:00 | 08,087,712 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2009-02-10 20:34:25 | 00,004,032 | ---- | M] () -- C:\WINDOWS\system32\drivers\hostnt.sys -- (HOSTNT)
DRV - [2008-12-18 12:44:49 | 00,097,792 | ---- | M] (T0r0 & Tecar Forum 2009) -- C:\WINDOWS\system32\drivers\NSHE.SYS -- (NSHE)
DRV - [2008-11-16 17:29:24 | 00,685,816 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2008-10-02 07:42:00 | 00,054,272 | R--- | M] () -- C:\WINDOWS\system32\drivers\SSIPDDP.SYS -- (SSIPDDP)
DRV - [2008-04-13 22:05:40 | 00,020,992 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139)
DRV - [2008-04-13 21:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2008-04-13 21:06:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-02-26 16:01:00 | 04,737,024 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2008-02-06 02:00:00 | 00,044,608 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2007-05-31 09:40:58 | 00,020,864 | ---- | M] (Canopus Co,. Ltd.) -- C:\WINDOWS\system32\drivers\cdrblock.sys -- (cdrblock)
DRV - [2006-11-22 09:01:48 | 00,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006-11-06 17:04:56 | 00,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\wceusbsh.sys -- (wceusbsh)
DRV - [2006-05-08 10:24:24 | 00,391,688 | ---- | M] (Vimicro Corporation) -- C:\WINDOWS\system32\drivers\usbVM305.sys -- (ZSMC0305)
DRV - [2005-12-06 00:16:14 | 00,005,273 | ---- | M] (Arrowkey) -- C:\Program Files\Quintessential Player\cdrpdacc.sys -- (CDRPDACC)
DRV - [2005-08-18 00:00:00 | 00,007,168 | ---- | M] () -- C:\Program Files\EVEREST\kerneld.wnt -- (EverestDriver)
DRV - [2005-06-13 10:08:36 | 00,085,664 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\w800obex.sys -- (w800obex)
DRV - [2005-06-13 10:06:58 | 00,087,792 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\w800mgmt.sys -- (w800mgmt)
DRV - [2005-06-13 10:05:16 | 00,096,224 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\w800mdm.sys -- (w800mdm)
DRV - [2005-06-13 10:05:08 | 00,009,264 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\w800mdfl.sys -- (w800mdfl)
DRV - [2005-06-13 10:03:12 | 00,060,768 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\w800bus.sys -- (w800bus)
DRV - [2005-03-21 15:39:16 | 00,270,336 | ---- | M] (Kerio Technologies) -- C:\WINDOWS\system32\drivers\fwdrv.sys -- (fwdrv)
DRV - [2005-03-11 15:28:30 | 00,004,608 | ---- | M] (Canopus Co,. Ltd.) -- C:\WINDOWS\system32\drivers\cdrport.sys -- (cdrport)
DRV - [2005-02-11 10:24:24 | 00,079,488 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750obex.sys -- (k750obex)
DRV - [2005-02-11 10:22:48 | 00,081,728 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750mgmt.sys -- (k750mgmt)
DRV - [2005-02-11 10:21:10 | 00,089,872 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750mdm.sys -- (k750mdm)
DRV - [2005-02-11 10:21:02 | 00,006,576 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750mdfl.sys -- (k750mdfl)
DRV - [2005-02-11 10:19:20 | 00,055,216 | ---- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750bus.sys -- (k750bus)
DRV - [2004-10-25 20:02:00 | 00,021,664 | ---- | M] (EnTech Taiwan) -- C:\WINDOWS\system32\drivers\Entech.sys -- (ENTECH)
DRV - [2004-03-24 19:21:30 | 00,006,689 | ---- | M] (Dallas Semiconductor MAXIM) -- C:\WINDOWS\system32\drivers\DS1410D.SYS -- (DS1410D)
DRV - [2001-08-17 22:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [1997-04-09 21:31:22 | 00,020,768 | ---- | M] () -- C:\WINDOWS\system32\ckldrv.sys -- (NetworkX)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2025429265-2077806209-842925246-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-2025429265-2077806209-842925246-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-2025429265-2077806209-842925246-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/
IE - HKU\S-1-5-21-2025429265-2077806209-842925246-1003\S-1-5-21-2025429265-2077806209-842925246-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2008-11-12 05:46:37 | 00,000,000 | ---D | M]
O1 HOSTS File: (716 bytes) - C:\WINDOWS\system32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Office2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE (Vimicro)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Inc.)
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Tweak UI] C:\WINDOWS\System32\TWEAKUI.CPL (Microsoft Corporation)
O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe ()
O4 - HKU\S-1-5-21-2025429265-2077806209-842925246-1003..\Run: [DAEMON Tools Pro Agent] C:\Program Files\DAEMON\DTProAgent.exe (DT Soft Ltd.)
O4 - HKU\S-1-5-21-2025429265-2077806209-842925246-1003..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O4 - HKU\S-1-5-21-2025429265-2077806209-842925246-1003..\Run: [H/PC Connection Agent] C:\Program Files\Microsoft ActiveSync\Wcescomm.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2025429265-2077806209-842925246-1003..\Run: [Konnekt] C:\Program Files\Konnekt\konnekt.exe (Stamina)
O4 - Startup: C:\Documents and Settings\JA\Menu Start\Programy\Autostart\Skrót do avp.exe.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2025429265-2077806209-842925246-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2025429265-2077806209-842925246-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2025429265-2077806209-842925246-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-2025429265-2077806209-842925246-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 43 01 00 00 [binary data]
O7 - HKU\S-1-5-21-2025429265-2077806209-842925246-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Office2007\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Utwórz Ulubione dla urządzenia przenośnego... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Office2007\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O16 - DPF: {00000161-0000-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/msaudio.cab (Reg Error: Key error.)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.177.196.14 195.177.196.4 195.177.196.3 195.177.196.1
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Office2007\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\vw-wi {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\ElsaWin\bin\wiprot.dll (TODO: <Company name>)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Office2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-10-28 20:07:35 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006-03-18 12:26:24 | 00,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2009-04-28 23:13:52 | 00,000,024 | ---- | M] () - G:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2009-11-03 21:38:36 | 00,000,000 | ---D | C] -- C:\rsit
[2009-10-25 02:33:16 | 00,000,000 | ---D | C] -- C:\SDFix
[2009-10-25 00:46:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\adamo88\Ustawienia lokalne\Dane aplikacji\Fen-Soft
[2009-10-25 00:45:15 | 00,000,000 | ---D | C] -- C:\Program Files\MP3HD Converter
[2009-10-15 21:06:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\adamo88\Pulpit\do prostownika
[2009-10-15 17:47:46 | 00,000,000 | ---D | C] -- C:\Program Files\Sonic Foundry
[2009-10-15 17:47:46 | 00,000,000 | ---D | C] -- C:\Program Files\Pure Motion
[2009-10-15 17:47:35 | 00,000,000 | ---D | C] -- C:\Program Files\DebugMode
[2009-10-13 10:36:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\adamo88\Ustawienia lokalne\Dane aplikacji\PCHealth
[2009-10-09 22:54:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\adamo88\Dane aplikacji\Cogniview
[2009-10-09 22:54:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Cogniview
[2009-10-07 00:01:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\adamo88\Pulpit\asus
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2009-11-03 21:20:56 | 00,202,404 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2009-11-03 20:54:29 | 07,602,176 | -H-- | M] () -- C:\Documents and Settings\adamo88\NTUSER.DAT
[2009-11-03 20:54:29 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\adamo88\ntuser.ini
[2009-11-03 20:52:30 | 00,000,592 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk
[2009-11-03 20:02:12 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-11-03 20:02:10 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-11-02 14:49:08 | 00,002,259 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2009-11-01 20:03:10 | 00,285,329 | ---- | M] () -- C:\WINDOWS\CLIENT99SE.rcs
[2009-11-01 20:03:10 | 00,009,283 | ---- | M] () -- C:\WINDOWS\Client99SE.INI
[2009-11-01 20:03:10 | 00,008,633 | ---- | M] () -- C:\WINDOWS\CLIENT99SE.raf
[2009-11-01 20:03:10 | 00,003,036 | ---- | M] () -- C:\WINDOWS\CLIENT99SE.ndr
[2009-11-01 20:03:08 | 00,000,758 | ---- | M] () -- C:\WINDOWS\ProHelp99SE.INI
[2009-11-01 20:03:06 | 00,285,329 | ---- | M] () -- C:\WINDOWS\CLIENT99SE.~cs
[2009-11-01 20:03:06 | 00,217,088 | ---- | M] () -- C:\WINDOWS\Client99SE.cfg
[2009-11-01 20:03:06 | 00,008,633 | ---- | M] () -- C:\WINDOWS\CLIENT99SE.~af
[2009-11-01 20:03:06 | 00,007,855 | ---- | M] () -- C:\WINDOWS\ADVPCB99SE.INI
[2009-10-29 15:40:00 | 00,002,332 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2009-10-28 00:56:40 | 00,069,632 | ---- | M] () -- C:\Documents and Settings\adamo88\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-10-26 23:48:03 | 00,002,644 | ---- | M] () -- C:\WINDOWS\System32\config.nt
[2009-10-25 22:04:33 | 00,484,968 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2009-10-25 22:04:33 | 00,427,900 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009-10-25 22:04:33 | 00,082,126 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2009-10-25 22:04:33 | 00,066,492 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009-10-25 22:04:32 | 01,075,486 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-10-25 00:50:37 | 72,045,7584 | ---- | M] () -- C:\Documents and Settings\All Users\Dokumenty\liroy dekada.mdf
[2009-10-25 00:50:37 | 00,002,256 | ---- | M] () -- C:\Documents and Settings\All Users\Dokumenty\liroy dekada.mds
[2009-10-25 00:45:24 | 00,276,928 | ---- | M] () -- C:\Documents and Settings\adamo88\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-10-24 17:09:57 | 00,000,033 | ---- | M] () -- C:\WINDOWS\System32\cnpsedufet4a.EXT
[2009-10-15 17:55:24 | 00,000,604 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2009-10-15 17:51:05 | 00,000,400 | ---- | M] () -- C:\WINDOWS\klm32.ini
[2009-10-14 12:06:11 | 00,737,440 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-10-13 10:25:03 | 00,010,068 | ---- | M] () -- C:\Documents and Settings\adamo88\Moje dokumenty\szablon.dotx
[2009-10-13 07:53:44 | 00,000,262 | ---- | M] () -- C:\WINDOWS\LEXSTAT.INI
[2009-10-09 23:07:51 | 00,010,245 | ---- | M] () -- C:\Documents and Settings\adamo88\Moje dokumenty\plan IV rok zima.xlsx
[2009-10-06 12:56:53 | 00,029,696 | ---- | M] () -- C:\Documents and Settings\adamo88\Moje dokumenty\trening.doc
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2009-11-03 20:52:30 | 00,000,592 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk
[2009-10-25 00:47:55 | 72,045,7584 | ---- | C] () -- C:\Documents and Settings\All Users\Dokumenty\liroy dekada.mdf
[2009-10-25 00:47:53 | 00,002,256 | ---- | C] () -- C:\Documents and Settings\All Users\Dokumenty\liroy dekada.mds
[2009-10-24 17:09:51 | 00,000,033 | ---- | C] () -- C:\WINDOWS\System32\cnpsedufet4a.EXT
[2009-10-13 10:25:03 | 00,010,068 | ---- | C] () -- C:\Documents and Settings\adamo88\Moje dokumenty\szablon.dotx
[2009-10-09 23:07:51 | 00,010,245 | ---- | C] () -- C:\Documents and Settings\adamo88\Moje dokumenty\plan IV rok zima.xlsx
[2009-10-06 12:51:52 | 00,029,696 | ---- | C] () -- C:\Documents and Settings\adamo88\Moje dokumenty\trening.doc
[2009-09-22 23:01:50 | 00,009,728 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2009-09-22 19:14:38 | 00,057,344 | ---- | C] () -- C:\WINDOWS\System32\Kopia pavedius.dll
[2009-09-22 17:59:56 | 00,000,071 | ---- | C] () -- C:\WINDOWS\CANOPUS.INI
[2009-09-22 17:56:30 | 00,057,344 | ---- | C] () -- C:\WINDOWS\System32\pavedius4db.dll
[2009-09-22 17:56:30 | 00,049,152 | ---- | C] () -- C:\WINDOWS\System32\pavedius.dll
[2009-07-12 16:24:06 | 00,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2009-07-12 16:24:05 | 00,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2009-06-21 09:29:32 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\k_KBDPL1.DLL
[2009-06-21 09:28:48 | 00,000,400 | ---- | C] () -- C:\WINDOWS\klm32.ini
[2009-06-10 07:29:34 | 01,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2009-06-10 07:29:34 | 01,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2009-06-10 07:29:34 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2009-06-10 07:29:32 | 01,507,328 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2009-05-27 13:24:30 | 00,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2009-03-30 05:36:02 | 00,000,161 | ---- | C] () -- C:\WINDOWS\DemaDivxFix.ini
[2009-03-23 13:32:28 | 00,002,528 | ---- | C] () -- C:\Documents and Settings\adamo88\Dane aplikacji\$_hpcst$.hpc
[2009-02-27 09:29:56 | 00,000,146 | ---- | C] () -- C:\WINDOWS\capture.INI
[2009-02-25 11:30:29 | 00,903,168 | ---- | C] () -- C:\WINDOWS\System32\mitmdl30.dll
[2009-02-25 11:30:29 | 00,110,080 | ---- | C] () -- C:\WINDOWS\System32\lfpng60n.dll
[2009-02-25 11:30:29 | 00,046,080 | ---- | C] () -- C:\WINDOWS\System32\lftif60n.dll
[2009-02-25 11:30:29 | 00,023,552 | ---- | C] () -- C:\WINDOWS\System32\lfpcx60n.dll
[2009-02-25 11:30:29 | 00,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfpct60n.dll
[2009-02-25 11:30:29 | 00,020,480 | ---- | C] () -- C:\WINDOWS\System32\lfpsd60n.dll
[2009-02-25 11:30:29 | 00,019,968 | ---- | C] () -- C:\WINDOWS\System32\lftga60n.dll
[2009-02-25 11:30:29 | 00,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwpg60n.dll
[2009-02-25 11:30:29 | 00,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwmf60n.dll
[2009-02-25 11:30:28 | 00,176,128 | ---- | C] () -- C:\WINDOWS\System32\lffax60n.dll
[2009-02-25 11:30:28 | 00,141,824 | ---- | C] () -- C:\WINDOWS\System32\lfcmp60n.dll
[2009-02-25 11:30:28 | 00,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfeps60n.dll
[2009-02-25 11:30:28 | 00,022,016 | ---- | C] () -- C:\WINDOWS\System32\lfbmp60n.dll
[2009-02-25 11:30:28 | 00,018,432 | ---- | C] () -- C:\WINDOWS\System32\lfmsp60n.dll
[2009-02-25 11:30:28 | 00,017,920 | ---- | C] () -- C:\WINDOWS\System32\lfmac60n.dll
[2009-02-25 11:26:39 | 00,000,000 | ---- | C] () -- C:\WINDOWS\SPLASH.INI
[2009-02-25 11:02:08 | 00,193,024 | ---- | C] () -- C:\WINDOWS\System32\co2c40en.dll
[2009-02-25 11:02:08 | 00,017,920 | ---- | C] () -- C:\WINDOWS\System32\implode.dll
[2009-02-25 11:02:07 | 00,953,344 | ---- | C] () -- C:\WINDOWS\System32\pg32.dll
[2009-02-25 10:47:59 | 00,054,272 | R--- | C] () -- C:\WINDOWS\System32\drivers\SSIPDDP.SYS
[2009-02-22 00:48:28 | 00,000,083 | ---- | C] () -- C:\WINDOWS\ManRoute99SE.INI
[2009-02-21 23:50:24 | 00,000,045 | ---- | C] () -- C:\WINDOWS\hdkctnts.ini
[2009-02-21 23:37:37 | 00,000,168 | ---- | C] () -- C:\WINDOWS\CAMBillOfMaterials99SE.ini
[2009-02-10 20:34:25 | 00,004,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\hostnt.sys
[2009-01-06 22:35:11 | 00,000,604 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008-12-08 01:42:20 | 00,000,336 | ---- | C] () -- C:\WINDOWS\Wave99SE.INI
[2008-12-08 01:42:20 | 00,000,142 | ---- | C] () -- C:\WINDOWS\SimView99SE.INI
[2008-12-08 01:42:19 | 00,000,185 | ---- | C] () -- C:\WINDOWS\PCB3D99SE.INI
[2008-12-08 01:42:19 | 00,000,162 | ---- | C] () -- C:\WINDOWS\CAMManager99SE.ini
[2008-12-08 01:13:45 | 00,007,855 | ---- | C] () -- C:\WINDOWS\ADVPCB99SE.INI
[2008-12-08 01:13:45 | 00,005,495 | ---- | C] () -- C:\WINDOWS\PCBPrint99SE.Ini
[2008-12-08 00:52:11 | 00,000,758 | ---- | C] () -- C:\WINDOWS\ProHelp99SE.INI
[2008-12-08 00:49:56 | 00,020,768 | ---- | C] () -- C:\WINDOWS\System32\CKLDRV.sys
[2008-12-08 00:49:49 | 00,008,455 | ---- | C] () -- C:\WINDOWS\AdvSch99SE.ini
[2008-12-08 00:49:49 | 00,000,369 | ---- | C] () -- C:\WINDOWS\HelpAdvisor99SE.ini
[2008-12-08 00:49:49 | 00,000,332 | ---- | C] () -- C:\WINDOWS\CRYPKEY.INI
[2008-12-08 00:49:49 | 00,000,073 | ---- | C] () -- C:\WINDOWS\AdvSIM99SE.INI
[2008-12-08 00:49:48 | 00,009,283 | ---- | C] () -- C:\WINDOWS\Client99SE.INI
[2008-11-21 22:47:52 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2008-11-21 22:45:16 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest
[2008-11-21 22:45:16 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest
[2008-11-21 22:44:16 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2008-11-16 20:18:19 | 00,004,767 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2008-11-16 17:29:24 | 00,685,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2008-11-09 21:21:11 | 00,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys
[2008-11-03 23:56:39 | 00,276,928 | ---- | C] () -- C:\Documents and Settings\adamo88\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2008-11-02 21:52:11 | 00,069,632 | ---- | C] () -- C:\Documents and Settings\adamo88\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-11-02 17:39:29 | 00,000,262 | ---- | C] () -- C:\WINDOWS\LEXSTAT.INI
[2008-10-29 22:49:13 | 00,002,332 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2008-10-28 20:49:44 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
[2008-10-28 20:36:46 | 02,109,382 | -H-- | C] () -- C:\Documents and Settings\adamo88\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2008-10-28 20:12:41 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\adamo88\Dane aplikacji\desktop.ini
[2001-07-21 23:16:20 | 00,000,905 | ---- | C] () -- C:\WINDOWS\win.ini
[2001-07-21 23:15:52 | 00,000,277 | ---- | C] () -- C:\WINDOWS\system.ini
[1999-11-16 13:04:36 | 00,485,376 | ---- | C] () -- C:\WINDOWS\System32\DrRw40.dll
[1996-04-03 20:33:26 | 00,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys
[color=#E56717]========== LOP Check ==========[/color]
[2009-03-05 23:02:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Altium2004
[2009-09-22 18:42:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Canopus
[2009-10-15 17:50:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Cogniview
[2008-11-16 17:34:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\DAEMON Tools Pro
[2009-10-28 00:50:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\DC++
[2009-03-19 17:52:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\eXPert PDF Editor
[2008-10-28 21:45:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Gadu-Gadu
[2009-09-22 21:52:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Inscriber
[2009-01-11 15:30:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Kaspersky_Key_Finder_(KKF
[2009-09-20 17:17:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\LEAPS
[2008-10-28 21:19:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Opera
[2009-09-20 16:21:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Pegasys Inc
[2009-09-22 23:02:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Publish Providers
[2009-05-14 23:55:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Quintessential Player
[2009-02-07 16:43:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Red Alert 3
[2009-02-07 16:41:08 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\SecuROM
[2009-09-22 23:02:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Sony
[2009-09-22 22:12:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\adamo88\Dane aplikacji\Sony Setup
[2009-03-03 23:09:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Altium2004
[2009-09-23 16:15:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canopus
[2009-10-15 17:50:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Cogniview
[2008-11-16 17:35:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Pro
[2009-02-10 21:51:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Evc
[2008-11-16 21:20:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LightScribe
[2009-02-25 15:30:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\mgc
[2009-02-25 10:50:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\pads
[2009-09-22 23:00:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony
[2009-09-24 00:03:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-09-23 17:03:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Canopus
[2009-09-11 12:21:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\DC++
[2008-11-09 17:25:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Gadu-Gadu
[2008-11-09 17:17:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Opera
[2001-07-21 23:17:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini
[2009-11-03 20:02:12 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT
[color=#E56717]========== Purity Check ==========[/color]
[color=#E56717]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 142 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:E8956AB5
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:888AFB86
< End of report >
HijackThis http://wklej.org/id/194517/
RSit http://wklej.org/id/194520/
Silent Runnershttp://wklej.org/id/194517/
