Komputer się muli log na 6000 znaków

**Posty:** 540 · przez **Lijke** 23 Cze 2009, 19:28

Witam,
Nie mam żadnego anty-virusa ani nic włączone i niestety mozilla włącza mi się od 30sec-2minut proszę o pomoc
Log z rsit'a

Kod: Zaznacz wszystko: Logfile of random's system information tool 1.06 (written by random/random) Run by Hubertrnoob at 2009-06-23 19:30:03 Microsoft Windows XP Professional Dodatek Service Pack 2 System drive C: has 7 GB (22%) free of 30 GB Total RAM: 503 MB (27% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:30:04, on 2009-06-23 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.20696) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\svchost.pif C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\ABBYY FineReader 9.0 Home Edition\Bonus.ScreenshotReader.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\cityLAN\KDLink32.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\ESTsoft\ALSong\ALSong.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Nowe Gadu-Gadu\gg.exe C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe C:\Documents and Settings\Hubertrnoob\Pulpit\RSIT.exe C:\Program Files\trend micro\Hubertrnoob.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O1 - Hosts: 21.128.133.26 gwgt1.joymax.com O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing) O2 - BHO: - {A1FB2F9A-D35E-11DD-8935-E46A56D89593} - C:\Program Files\oovootb\dtx.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll O3 - Toolbar: ooVoo Toolbar - {A1FB2F9A-D35E-11DD-8935-E46A56D89593} - C:\Program Files\oovootb\dtx.dll O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [KernelFaultFix] C:\WINDOWS\svchost.pif O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ABBYY Screenshot Reader Bonus] "C:\Program Files\ABBYY FineReader 9.0 Home Edition\Bonus.ScreenshotReader.exe" -autorun O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe" O4 - HKCU\..\Run: [GG Tools] "C:\Program Files\kRk Software\GG Tools\GGT.exe" /tray O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Internet cityLAN.lnk = C:\Program Files\cityLAN\KDLink32.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file) O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{470CD7F6-2E58-48AC-93B7-E9CB0DB50DF4}: NameServer = 10.12.255.1 10.12.255.100 O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY (BIT Software) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Google Desktop Manager 5.1.709.19590 (GoogleDesktopManager-091907-194040) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: USBest Service Zero (UTSCSI) - Unknown owner - C:\WINDOWS\system32\UTSCSI.EXE -- End of file - 8428 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\PCConfidential.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A1FB2F9A-D35E-11DD-8935-E46A56D89593}] ooVoo Toolbar - C:\Program Files\oovootb\dtx.dll [2009-03-16 87512] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}] IEPluginBHO Class - C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll [2009-05-28 42088] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {A1FB2F9A-D35E-11DD-8935-E46A56D89593} - ooVoo Toolbar - C:\Program Files\oovootb\dtx.dll [2009-03-16 87512] {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - BearShare MediaBar - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll [2009-05-04 529848] {32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-03-23 94208] "igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-03-23 77824] "igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-03-23 118784] "SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-06-28 16248320] "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632] "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152] "KernelFaultFix"=C:\WINDOWS\svchost.pif [2009-04-18 588850] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888] "AASecuUFD"= [] "Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-05-08 1840128] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696] "RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-01-08 68640] "LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360] "ALLUpdate"=C:\Program Files\ALLPlayer\ALLUpdate.exe [2008-11-24 869888] "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208] "ABBYY Screenshot Reader Bonus"=C:\Program Files\ABBYY FineReader 9.0 Home Edition\Bonus.ScreenshotReader.exe [2008-10-10 935200] "Nowe Gadu-Gadu"=C:\Program Files\Nowe Gadu-Gadu\gg.exe [2009-05-28 10486376] "GG Tools"=C:\Program Files\kRk Software\GG Tools\GGT.exe [2008-07-16 2242560] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe Internet cityLAN.lnk - C:\Program Files\cityLAN\KDLink32.exe Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxdev.dll [2006-03-23 139264] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-01-24 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\cityLAN\KDLink32.exe"="C:\Program Files\cityLAN\KDLink32.exe:*:Enabled:Internet cityLAN" "C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster" "C:\Program Files\Tibia\Tibia.exe"="C:\Program Files\Tibia\Tibia.exe:*:Enabled:Tibia" "D:\Soldat11\Soldat.exe"="D:\Soldat11\Soldat.exe:*:Enabled:Soldat" "D:\Soldat\Soldat1555\Soldat.exe"="D:\Soldat\Soldat1555\Soldat.exe:*:Enabled:http://soldat.pl" "D:\ggg\Nowe Gadu-Gadu\gg.exe"="D:\ggg\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu beta" "C:\Program Files\Metin 2\metin2.bin"="C:\Program Files\Metin 2\metin2.bin:*:Enabled:metin2" "C:\Program Files\Java\jre6\launch4j-tmp\JDownloader.exe"="C:\Program Files\Java\jre6\launch4j-tmp\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Program Files\ooVoo\ooVoo.exe"="C:\Program Files\ooVoo\ooVoo.exe:*:Enabled:ooVoo" "C:\Program Files\Nowe Gadu-Gadu\gg.exe"="C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu" "C:\Documents and Settings\Hubertrnoob\Pulpit\Elitepvpers-MultiHackSelector [EPVP-MHS] 4.1 by MarcoPolo , Banjo & Remus\FreeWorld5\metin2.bin"="C:\Documents and Settings\Hubertrnoob\Pulpit\Elitepvpers-MultiHackSelector [EPVP-MHS] 4.1 by MarcoPolo , Banjo & Remus\FreeWorld5\metin2.bin:*:Enabled:metin2" "C:\Program Files\BearShare Applications\BearShare\BearShare.exe"="C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare" "D:\Nowy folder (6)\Ares\Ares.exe"="D:\Nowy folder (6)\Ares\Ares.exe:*:Enabled:Ares p2p for windows" "D:\cs\hl.exe"="D:\cs\hl.exe:*:Enabled:Half-Life Launcher" "D:\cs\saasds\hl.exe"="D:\cs\saasds\hl.exe:*:Enabled:Half-Life Launcher" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype " "D:\metinus\Metin2\metin2.bin"="D:\metinus\Metin2\metin2.bin:*:Enabled:metin2" "D:\Program Files\Ares\Ares.exe"="D:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows" "C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher" "C:\Program Files\Valve1\hltv.exe"="C:\Program Files\Valve1\hltv.exe:*:Enabled:HLTV Launcher" "C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Documents and Settings\Hubertrnoob\Pulpit\Little Fighter 4 Turbo\LF4t.exe"="C:\Documents and Settings\Hubertrnoob\Pulpit\Little Fighter 4 Turbo\LF4t.exe:*:Enabled:LF4t" "C:\Documents and Settings\Hubertrnoob\Pulpit\SRO_L4_Full_Client_Downloader.exe"="C:\Documents and Settings\Hubertrnoob\Pulpit\SRO_L4_Full_Client_Downloader.exe:*:Enabled:Full-Client Downloader" "D:\Nowy folder (2)\Silkroad\Silkroad.exe"="D:\Nowy folder (2)\Silkroad\Silkroad.exe:*:Enabled:Silkroad" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3ee39d32-527d-11de-9070-00138fc11656}] shell\AutoRun\command - I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe shell\open\command - I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4b21ce48-4b42-11de-9052-00138fc11656}] shell\AutoRun\command - I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe shell\open\command - I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4fd8159a-2b40-11de-abd9-00138fc11656}] shell\AutoRun\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe shell\open\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4fd8159b-2b40-11de-abd9-00138fc11656}] shell\AutoRun\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe shell\open\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{69f9320c-3972-11de-ac03-00138fc11656}] shell\AutoRun\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe shell\open\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{69f9320d-3972-11de-ac03-00138fc11656}] shell\AutoRun\command - J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe shell\open\command - J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{73a8f512-4e8e-11de-9061-00138fc11656}] shell\AutoRun\command - 2fiy.bat shell\open\command - 2fiy.bat [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7943ca7a-3183-11de-abf0-00138fc11656}] shell\AutoRun\command - G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe shell\open\command - G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9e20bcb8-3498-11de-abf5-00138fc11656}] shell\AutoRun\command - G:\USBNB.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9e20bcb9-3498-11de-abf5-00138fc11656}] shell\AutoRun\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe shell\open\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe ======List of files/folders created in the last 3 months====== 2009-06-23 19:26:06 ----D---- C:\Program Files\trend micro 2009-06-23 19:26:00 ----D---- C:\rsit 2009-06-23 19:10:34 ----D---- C:\VundoFix Backups 2009-06-23 19:10:34 ----A---- C:\VundoFix.txt 2009-06-22 19:59:46 ----D---- C:\Program Files\Kovloria 8.42 2009-06-22 16:08:54 ----D---- C:\Program Files\SystemRequirementsLab 2009-06-20 19:29:10 ----A---- C:\m.txt 2009-06-20 19:07:51 ----D---- C:\Program Files\Dziobas Rar Player 2009-06-19 20:43:14 ----D---- C:\Program Files\Tibia8,31 2009-06-13 13:22:22 ----D---- C:\Program Files\Tibia8,42 2009-06-12 14:18:49 ----D---- C:\Program Files\Valve 2009-06-12 13:59:11 ----D---- C:\Program Files\sXe Injected 2009-06-09 18:18:34 ----D---- C:\Program Files\JoWooD 2009-06-09 18:18:23 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\InstallShield 2009-06-09 17:26:03 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM 2009-06-09 17:23:33 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\OpenFM 2009-06-07 21:12:24 ----A---- C:\WINDOWS\system32\bassmidi.dll 2009-06-07 21:12:24 ----A---- C:\WINDOWS\system32\bassflac.dll 2009-06-07 21:12:24 ----A---- C:\WINDOWS\system32\bass.dll 2009-06-07 21:12:23 ----D---- C:\Program Files\SCAR 3.20 2009-06-07 21:12:23 ----A---- C:\WINDOWS\system32\ssleay32.dll 2009-06-07 21:12:23 ----A---- C:\WINDOWS\system32\libeay32.dll 2009-06-07 17:55:33 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\GanymedeNet 2009-06-07 17:54:47 ----D---- C:\Program Files\~~a 2009-06-07 09:36:12 ----D---- C:\Program Files\Ubisoft 2009-06-07 09:18:52 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite 2009-06-07 09:18:26 ----D---- C:\Program Files\DAEMON Tools Toolbar 2009-06-07 09:17:22 ----D---- C:\Program Files\DAEMON Tools Lite 2009-06-07 09:15:47 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\DAEMON Tools Lite 2009-06-06 23:32:37 ----D---- C:\Program Files\Damian Pasternak 2009-06-06 17:05:50 ----A---- C:\WINDOWS\IsUn0415.exe 2009-06-03 19:21:02 ----D---- C:\Program Files\Gothic PL 2009-06-03 15:38:00 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Winferno 2009-06-03 15:33:06 ----D---- C:\Program Files\Winferno 2009-06-03 15:33:06 ----A---- C:\WINDOWS\system32\CapiCom.dll 2009-06-01 22:58:36 ----A---- C:\WINDOWS\system32\framedyn.dll 2009-06-01 22:58:19 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers 2009-05-31 23:09:21 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Samsung 2009-05-25 21:46:27 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\1BAB 2009-05-25 21:45:39 ----D---- C:\Program Files\BearShare Applications 2009-05-24 14:33:49 ----A---- C:\WINDOWS\forevermopt.INI 2009-05-23 15:51:29 ----A---- C:\WINDOWS\system32\kbdkor.dll 2009-05-23 15:51:29 ----A---- C:\WINDOWS\system32\kbdjpn.dll 2009-05-23 15:51:29 ----A---- C:\WINDOWS\system32\kbd106.dll 2009-05-23 15:51:29 ----A---- C:\WINDOWS\system32\kbd103.dll 2009-05-23 15:51:29 ----A---- C:\WINDOWS\system32\kbd101c.dll 2009-05-23 15:51:29 ----A---- C:\WINDOWS\system32\kbd101b.dll 2009-05-23 08:37:53 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\CyberLink 2009-05-23 08:37:49 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\CyberLink 2009-05-23 08:35:58 ----D---- C:\Program Files\CyberLink 2009-05-20 19:48:36 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\WoDBO 2009-05-19 17:09:06 ----D---- C:\Program Files\Metin 1 2009-05-18 14:21:51 ----A---- C:\WINDOWS\stream_blue.INI 2009-05-18 14:21:30 ----D---- C:\Program Files\STREAM soft 2009-05-18 14:21:30 ----D---- C:\Program Files\Common Files\Borland Shared 2009-05-16 19:14:41 ----D---- C:\Program Files\kRk Software 2009-05-16 16:21:58 ----D---- C:\Program Files\Nowe Gadu-Gadu 2009-05-16 16:20:56 ----D---- C:\WINDOWS\system32\appmgmt 2009-05-08 08:34:34 ----D---- C:\Program Files\Google 2009-05-08 07:57:40 ----D---- C:\Program Files\AVG 2009-05-06 00:08:58 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Locktime 2009-05-06 00:07:17 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Locktime 2009-05-05 19:31:21 ----D---- C:\Program Files\Alcohol Soft 2009-05-04 19:04:48 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\ABBYY 2009-05-04 18:22:37 ----D---- C:\temp 2009-05-03 19:46:21 ----D---- C:\Program Files\ABBYY FineReader 9.0 Home Edition 2009-05-03 19:46:20 ----D---- C:\Program Files\Common Files\ABBYY 2009-05-03 19:46:20 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\ABBYY 2009-05-03 12:10:41 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\EmailNotifier 2009-05-03 12:10:25 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\ooVoo Details 2009-05-03 12:09:30 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\EmailNotifier 2009-05-03 12:09:28 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\oovootb 2009-05-03 12:09:21 ----D---- C:\Program Files\oovootb 2009-05-03 12:08:25 ----D---- C:\Program Files\ooVoo 2009-04-29 16:59:10 ----D---- C:\Program Files\Tibia1 2009-04-29 15:12:54 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files 2009-04-29 15:10:38 ----D---- C:\Program Files\Pando Networks 2009-04-29 13:19:00 ----A---- C:\WINDOWS\system32\UTSCSI.EXE 2009-04-29 13:18:39 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\PLAux 2009-04-27 18:40:30 ----D---- C:\Program Files\Tibia 2009-04-27 18:40:30 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Tibia 2009-04-27 09:59:33 ----D---- C:\Program Files\Subagames 2009-04-26 09:33:40 ----D---- C:\Program Files\KeyBoardWindow 2009-04-26 09:27:47 ----D---- C:\WINDOWS\system32\dt 2009-04-26 09:00:29 ----D---- C:\Program Files\BPK 2009-04-24 13:27:04 ----D---- C:\WINDOWS\Sun 2009-04-24 12:41:32 ----A---- C:\WINDOWS\system32\javaws.exe 2009-04-24 12:41:32 ----A---- C:\WINDOWS\system32\javaw.exe 2009-04-24 12:41:32 ----A---- C:\WINDOWS\system32\java.exe 2009-04-23 07:26:13 ----D---- C:\Program Files\cityLAN 2009-04-22 00:01:16 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Publish Providers 2009-04-22 00:00:55 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Sony 2009-04-21 23:59:52 ----D---- C:\Program Files\Sony 2009-04-21 23:58:56 ----A---- C:\WINDOWS\system32\BASSMOD.dll 2009-04-21 23:49:53 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Sony Setup 2009-04-21 23:49:38 ----D---- C:\Program Files\Sony Setup 2009-04-21 14:12:27 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Image Zone Express 2009-04-19 15:24:55 ----A---- C:\WINDOWS\ocsdebug.txt 2009-04-19 12:19:35 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Skype 2009-04-19 12:19:20 ----RD---- C:\Program Files\Skype 2009-04-19 12:19:09 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Skype 2009-04-19 10:44:41 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Nowe Gadu-Gadu 2009-04-18 13:25:19 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Soldat 2009-04-17 19:24:18 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\HP 2009-04-17 19:24:07 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\HP 2009-04-17 19:22:31 ----D---- C:\Program Files\Common Files\HP 2009-04-17 19:20:50 ----D---- C:\Program Files\Hewlett-Packard 2009-04-17 19:20:29 ----D---- C:\Program Files\Common Files\Hewlett-Packard 2009-04-17 19:14:11 ----A---- C:\WINDOWS\ODBC.INI 2009-04-17 19:13:22 ----D---- C:\Program Files\Microsoft Visual Studio 2009-04-17 19:13:20 ----D---- C:\Program Files\Common Files\Designer 2009-04-17 19:12:36 ----D---- C:\WINDOWS\ShellNew 2009-04-17 19:11:42 ----D---- C:\Program Files\Microsoft Office 2009-04-17 19:11:42 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Microsoft Web Folders 2009-04-17 19:00:08 ----RA---- C:\WINDOWS\system32\HPZIDS01.dll 2009-04-17 19:00:07 ----A---- C:\WINDOWS\system32\hpz3l054.dll 2009-04-17 18:58:30 ----A---- C:\WINDOWS\system32\HPZisn12.dll 2009-04-17 18:58:30 ----A---- C:\WINDOWS\system32\HPZipt12.dll 2009-04-17 18:58:30 ----A---- C:\WINDOWS\system32\HPZipr12.dll 2009-04-17 18:58:29 ----A---- C:\WINDOWS\system32\HPZipm12.exe 2009-04-17 18:58:29 ----A---- C:\WINDOWS\system32\HPZinw12.exe 2009-04-17 18:58:29 ----A---- C:\WINDOWS\system32\HPZidr12.dll 2009-04-17 18:58:18 ----A---- C:\WINDOWS\IsUninst.exe 2009-04-17 18:55:29 ----D---- C:\Program Files\HP 2009-04-17 18:50:49 ----HD---- C:\Config.Msi 2009-04-17 17:07:50 ----D---- C:\Program Files\HyCam2 2009-04-16 21:55:18 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest 2009-04-16 21:55:18 ----A---- C:\WINDOWS\system32\ff_vfw.dll 2009-04-16 21:55:17 ----A---- C:\WINDOWS\system32\pthreadGC2.dll 2009-04-16 21:55:16 ----D---- C:\Program Files\ffdshow 2009-04-16 21:53:05 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\BESTplayer 2009-04-16 21:48:56 ----D---- C:\Program Files\NAPI-PROJEKT 2009-04-16 21:48:54 ----D---- C:\Program Files\ALLPlayer 2009-04-16 20:07:45 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Adobe Systems 2009-04-16 20:05:41 ----D---- C:\Program Files\Common Files\Adobe Systems Shared 2009-04-16 20:04:32 ----D---- C:\Program Files\Common Files\Adobe 2009-04-16 20:04:32 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Adobe 2009-04-16 20:04:24 ----D---- C:\Program Files\Adobe 2009-04-15 07:53:00 ----A---- C:\Program Files\Tibia.exe 2009-04-14 21:34:13 ----A---- C:\WINDOWS\system32\h323log.txt 2009-04-14 21:32:01 ----A---- C:\WINDOWS\system32\usbui.dll 2009-04-14 21:31:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-04-14 21:31:03 ----D---- C:\Program Files\Common Files\ODBC 2009-04-14 21:31:03 ----A---- C:\WINDOWS\ODBCINST.INI 2009-04-14 21:31:00 ----RD---- C:\Program Files 2009-04-14 21:31:00 ----D---- C:\Program Files\Common Files\SpeechEngines 2009-04-14 21:31:00 ----D---- C:\Program Files\Common Files\Microsoft Shared 2009-04-14 21:31:00 ----D---- C:\Program Files\Common Files 2009-04-14 21:30:53 ----RA---- C:\WINDOWS\system32\kbdtuq.dll 2009-04-14 21:30:53 ----RA---- C:\WINDOWS\system32\kbdtuf.dll 2009-04-14 21:30:53 ----RA---- C:\WINDOWS\system32\kbdazel.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdycc.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbduzb.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdur.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdtat.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdru1.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdru.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdmon.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdkyr.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdkaz.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdbu.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdblr.dll 2009-04-14 21:30:51 ----RA---- C:\WINDOWS\system32\kbdaze.dll 2009-04-14 21:30:50 ----RA---- C:\WINDOWS\system32\kbdhept.dll 2009-04-14 21:30:50 ----RA---- C:\WINDOWS\system32\kbdhela3.dll 2009-04-14 21:30:50 ----RA---- C:\WINDOWS\system32\kbdhela2.dll 2009-04-14 21:30:50 ----RA---- C:\WINDOWS\system32\kbdhe319.dll 2009-04-14 21:30:50 ----RA---- C:\WINDOWS\system32\kbdhe220.dll 2009-04-14 21:30:50 ----RA---- C:\WINDOWS\system32\kbdgkl.dll 2009-04-14 21:30:49 ----RA---- C:\WINDOWS\system32\kbdhe.dll 2009-04-14 21:30:48 ----RA---- C:\WINDOWS\system32\kbdlv1.dll 2009-04-14 21:30:48 ----RA---- C:\WINDOWS\system32\kbdlv.dll 2009-04-14 21:30:48 ----RA---- C:\WINDOWS\system32\kbdlt1.dll 2009-04-14 21:30:48 ----RA---- C:\WINDOWS\system32\kbdlt.dll 2009-04-14 21:30:48 ----RA---- C:\WINDOWS\system32\kbdest.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdycl.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdro.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdcz.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\kbdcr.dll 2009-04-14 21:30:42 ----RA---- C:\WINDOWS\system32\KBDAL.DLL 2009-04-14 21:30:41 ----A---- C:\WINDOWS\system32\spxcoins.dll 2009-04-14 21:30:41 ----A---- C:\WINDOWS\system32\irclass.dll 2009-04-14 21:30:41 ----A---- C:\WINDOWS\system32\EqnClass.Dll 2009-04-14 21:30:41 ----A---- C:\WINDOWS\system32\dgsetup.dll 2009-04-14 21:30:41 ----A---- C:\WINDOWS\system32\dgrpsetu.dll 2009-04-14 21:30:39 ----N---- C:\WINDOWS\system32\CONFIG.TMP 2009-04-14 21:30:39 ----A---- C:\WINDOWS\TASKMAN.EXE 2009-04-14 21:30:39 ----A---- C:\WINDOWS\system32\batt.dll 2009-04-14 21:30:38 ----A---- C:\WINDOWS\system32\storprop.dll 2009-04-14 21:30:38 ----A---- C:\WINDOWS\NOTEPAD.EXE 2009-04-14 21:30:30 ----ASH---- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini 2009-04-14 21:30:20 ----RA---- C:\WINDOWS\SET8.tmp 2009-04-14 21:30:18 ----RA---- C:\WINDOWS\SET4.tmp 2009-04-14 21:30:17 ----RA---- C:\WINDOWS\SET3.tmp 2009-04-14 21:30:12 ----D---- C:\WINDOWS\system32\CatRoot2 2009-04-14 21:30:12 ----D---- C:\WINDOWS\system32\CatRoot 2009-04-14 21:30:06 ----SD---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft 2009-04-14 21:29:57 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Estsoft 2009-04-14 21:29:55 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\ESTsoft 2009-04-14 21:29:44 ----SHD---- C:\System Volume Information 2009-04-14 21:29:44 ----D---- C:\Documents and Settings 2009-04-14 21:29:43 ----D---- C:\Program Files\ESTsoft 2009-04-14 21:29:05 ----SH---- C:\boot.ini 2009-04-14 21:27:32 ----D---- C:\Program Files\WinRAR 2009-04-14 21:27:27 ----AD---- C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2009-04-14 21:27:08 ----D---- C:\Program Files\TibiaBot NG 2009-04-14 21:25:45 ----SHD---- C:\WINDOWS\Installer 2009-04-14 21:25:45 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-04-14 21:25:45 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-04-14 21:25:45 ----RSD---- C:\WINDOWS\Fonts 2009-04-14 21:25:45 ----RD---- C:\WINDOWS\Web 2009-04-14 21:25:45 ----HD---- C:\WINDOWS\inf 2009-04-14 21:25:45 ----D---- C:\WINDOWS\WinSxS 2009-04-14 21:25:45 ----D---- C:\WINDOWS\WBEM 2009-04-14 21:25:45 ----D---- C:\WINDOWS\twain_32 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Temp 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\wins 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\wbem 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\usmt 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\spool 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\ShellExt 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\Setup 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\ras 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\PreInstall 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\pl-pl 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\oobe 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\npp 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\mui 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\inetsrv 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\IME 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\icsxml 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\ias 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\export 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\drivers 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\dhcp 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\config 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\3com_dmi 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\3076 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\2052 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\1054 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\1045 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\1042 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\1041 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\1037 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\1033 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\1031 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\1028 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32\1025 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system32 2009-04-14 21:25:45 ----D---- C:\WINDOWS\system 2009-04-14 21:25:45 ----D---- C:\WINDOWS\security 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Resources 2009-04-14 21:25:45 ----D---- C:\WINDOWS\repair 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Provisioning 2009-04-14 21:25:45 ----D---- C:\WINDOWS\PeerNet 2009-04-14 21:25:45 ----D---- C:\WINDOWS\pchealth 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Offline Web Pages 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Network Diagnostic 2009-04-14 21:25:45 ----D---- C:\WINDOWS\mui 2009-04-14 21:25:45 ----D---- C:\WINDOWS\msapps 2009-04-14 21:25:45 ----D---- C:\WINDOWS\msagent 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Media 2009-04-14 21:25:45 ----D---- C:\WINDOWS\java 2009-04-14 21:25:45 ----D---- C:\WINDOWS\ime 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Help 2009-04-14 21:25:45 ----D---- C:\WINDOWS\ehome 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Driver Cache 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Debug 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Cursors 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Connection Wizard 2009-04-14 21:25:45 ----D---- C:\WINDOWS\Config 2009-04-14 21:25:45 ----D---- C:\WINDOWS\AppPatch 2009-04-14 21:25:45 ----D---- C:\WINDOWS\addins 2009-04-14 21:25:45 ----D---- C:\WINDOWS 2009-04-14 21:05:50 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\WinRAR 2009-04-14 21:00:05 ----A---- C:\WINDOWS\system32\deploytk.dll 2009-04-14 20:58:31 ----D---- C:\Program Files\Java 2009-04-14 20:56:32 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Sun 2009-04-14 20:51:46 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Gadu-Gadu 2009-04-14 20:34:07 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Opera 2009-04-14 20:25:29 ----RSHD---- C:\RECYCLER 2009-04-14 20:25:04 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Macromedia 2009-04-14 20:25:04 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Adobe 2009-04-14 20:16:03 ----D---- C:\WINDOWS\system32\CatRoot_bak 2009-04-14 20:09:09 ----RA---- C:\WINDOWS\system32\igfxres.dll 2009-04-14 20:06:38 ----R---- C:\WINDOWS\system32\RtlCPAPI.dll 2009-04-14 20:06:38 ----R---- C:\WINDOWS\system32\ChCfg.exe 2009-04-14 20:06:17 ----D---- C:\Program Files\Opera 2009-04-14 20:06:16 ----D---- C:\WINDOWS\system32\RTCOM 2009-04-14 20:06:12 ----A---- C:\WINDOWS\system32\ksuser.dll 2009-04-14 20:05:47 ----A---- C:\WINDOWS\system32\spupdsvc.exe 2009-04-14 20:05:46 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$ 2009-04-14 20:05:44 ----R---- C:\WINDOWS\SoundMan.exe 2009-04-14 20:05:43 ----R---- C:\WINDOWS\SkyTel.exe 2009-04-14 20:05:42 ----R---- C:\WINDOWS\RtlUpd.exe 2009-04-14 20:05:39 ----R---- C:\WINDOWS\RTLCPL.exe 2009-04-14 20:05:32 ----R---- C:\WINDOWS\RTHDCPL.exe 2009-04-14 20:05:31 ----R---- C:\WINDOWS\MicCal.exe 2009-04-14 20:05:31 ----R---- C:\WINDOWS\Alcmtr.exe 2009-04-14 20:05:30 ----R---- C:\WINDOWS\alcwzrd.exe 2009-04-14 20:05:29 ----D---- C:\Program Files\Realtek 2009-04-14 20:05:28 ----HD---- C:\Program Files\InstallShield Installation Information 2009-04-14 20:05:23 ----R---- C:\WINDOWS\RtlExUpd.dll 2009-04-14 20:05:19 ----D---- C:\Program Files\Common Files\InstallShield 2009-04-14 20:04:19 ----RA---- C:\WINDOWS\system32\ialmuTRK.dll 2009-04-14 20:04:19 ----RA---- C:\WINDOWS\system32\ialmuTHA.dll 2009-04-14 20:04:19 ----RA---- C:\WINDOWS\system32\ialmuSVE.dll 2009-04-14 20:04:19 ----RA---- C:\WINDOWS\system32\iAlmCoIn_v4543.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuRUS.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuPTG.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuPTB.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuPLK.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuNOR.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuNLD.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuKOR.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuJPN.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuITA.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuHUN.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuHEB.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuFRC.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuFRA.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuFIN.dll 2009-04-14 20:04:18 ----RA---- C:\WINDOWS\system32\ialmuESP.dll 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmuENG.dll 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmuELL.dll 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmudlg.exe 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmuDEU.dll 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmuDAN.dll 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmuCSY.dll 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmuCHT.dll 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmuCHS.dll 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmuARB.dll 2009-04-14 20:04:17 ----RA---- C:\WINDOWS\system32\ialmuARA.dll 2009-04-14 20:04:16 ----RA---- C:\WINDOWS\system32\iglicd32.dll 2009-04-14 20:04:16 ----RA---- C:\WINDOWS\system32\igldev32.dll 2009-04-14 20:04:16 ----RA---- C:\WINDOWS\system32\igfxexps.dll 2009-04-14 20:04:16 ----RA---- C:\WINDOWS\system32\ialmrem.dll 2009-04-14 20:04:15 ----RA---- C:\WINDOWS\system32\igfxext.exe 2009-04-14 20:04:14 ----RA---- C:\WINDOWS\system32\igfxress.dll 2009-04-14 20:04:14 ----RA---- C:\WINDOWS\system32\igfxpers.exe 2009-04-14 20:04:14 ----RA---- C:\WINDOWS\system32\hkcmd.exe 2009-04-14 20:04:13 ----RA---- C:\WINDOWS\system32\igfxzoom.exe 2009-04-14 20:04:13 ----RA---- C:\WINDOWS\system32\igfxtray.exe 2009-04-14 20:04:13 ----RA---- C:\WINDOWS\system32\igfxsrvc.exe 2009-04-14 20:04:13 ----RA---- C:\WINDOWS\system32\igfxsrvc.dll 2009-04-14 20:04:13 ----RA---- C:\WINDOWS\system32\igfxpph.dll 2009-04-14 20:04:13 ----RA---- C:\WINDOWS\system32\igfxdo.dll 2009-04-14 20:04:13 ----RA---- C:\WINDOWS\system32\igfxdev.dll 2009-04-14 20:04:13 ----RA---- C:\WINDOWS\system32\igfxcfg.exe 2009-04-14 20:04:13 ----RA---- C:\WINDOWS\system32\hccutils.dll 2009-04-14 20:04:12 ----RA---- C:\WINDOWS\system32\ialmrnt5.dll 2009-04-14 20:04:12 ----RA---- C:\WINDOWS\system32\ialmdnt5.dll 2009-04-14 20:04:12 ----RA---- C:\WINDOWS\system32\ialmdev5.dll 2009-04-14 20:04:12 ----RA---- C:\WINDOWS\system32\ialmdd5.dll 2009-04-14 20:01:45 ----A---- C:\WINDOWS\system32\XAudio2_1.dll 2009-04-14 20:01:45 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll 2009-04-14 20:01:45 ----A---- C:\WINDOWS\system32\xactengine3_1.dll 2009-04-14 20:01:45 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll 2009-04-14 20:01:44 ----A---- C:\WINDOWS\system32\XAudio2_0.dll 2009-04-14 20:01:44 ----A---- C:\WINDOWS\system32\D3DX9_38.dll 2009-04-14 20:01:44 ----A---- C:\WINDOWS\system32\d3dx10_38.dll 2009-04-14 20:01:44 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll 2009-04-14 20:01:43 ----A---- C:\WINDOWS\system32\xactengine3_0.dll 2009-04-14 20:01:42 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll 2009-04-14 20:01:42 ----A---- C:\WINDOWS\system32\D3DX9_37.dll 2009-04-14 20:01:42 ----A---- C:\WINDOWS\system32\d3dx10_37.dll 2009-04-14 20:01:42 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll 2009-04-14 20:01:41 ----A---- C:\WINDOWS\system32\xactengine2_10.dll 2009-04-14 20:01:41 ----A---- C:\WINDOWS\system32\d3dx10_36.dll 2009-04-14 20:01:41 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll 2009-04-14 20:01:40 ----A---- C:\WINDOWS\system32\d3dx9_36.dll 2009-04-14 20:01:39 ----A---- C:\WINDOWS\system32\xactengine2_9.dll 2009-04-14 20:01:37 ----A---- C:\WINDOWS\system32\xactengine2_8.dll 2009-04-14 20:01:37 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll 2009-04-14 20:01:37 ----A---- C:\WINDOWS\system32\d3dx9_35.dll 2009-04-14 20:01:37 ----A---- C:\WINDOWS\system32\d3dx10_35.dll 2009-04-14 20:01:37 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll 2009-04-14 20:01:36 ----A---- C:\WINDOWS\system32\d3dx9_34.dll 2009-04-14 20:01:36 ----A---- C:\WINDOWS\system32\d3dx10_34.dll 2009-04-14 20:01:36 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll 2009-04-14 20:01:35 ----A---- C:\WINDOWS\system32\xinput1_3.dll 2009-04-14 20:01:35 ----A---- C:\WINDOWS\system32\xactengine2_7.dll 2009-04-14 20:01:34 ----A---- C:\WINDOWS\system32\d3dx10_33.dll 2009-04-14 20:01:34 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll 2009-04-14 20:01:33 ----A---- C:\WINDOWS\system32\d3dx9_33.dll 2009-04-14 20:01:32 ----A---- C:\WINDOWS\system32\xactengine2_6.dll 2009-04-14 20:01:32 ----A---- C:\WINDOWS\system32\xactengine2_5.dll 2009-04-14 20:01:32 ----A---- C:\WINDOWS\system32\d3dx9_32.dll 2009-04-14 20:01:31 ----A---- C:\WINDOWS\system32\xactengine2_4.dll 2009-04-14 20:01:31 ----A---- C:\WINDOWS\system32\xactengine2_3.dll 2009-04-14 20:01:31 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll 2009-04-14 20:01:31 ----A---- C:\WINDOWS\system32\d3dx9_31.dll 2009-04-14 20:01:30 ----A---- C:\WINDOWS\system32\xinput1_2.dll 2009-04-14 20:01:29 ----A---- C:\WINDOWS\system32\xinput1_1.dll 2009-04-14 20:01:29 ----A---- C:\WINDOWS\system32\xactengine2_2.dll 2009-04-14 20:01:29 ----A---- C:\WINDOWS\system32\xactengine2_1.dll 2009-04-14 20:01:28 ----A---- C:\WINDOWS\system32\xactengine2_0.dll 2009-04-14 20:01:28 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll 2009-04-14 20:01:28 ----A---- C:\WINDOWS\system32\d3dx9_30.dll 2009-04-14 20:01:28 ----A---- C:\WINDOWS\system32\d3dx9_29.dll 2009-04-14 20:01:28 ----A---- C:\WINDOWS\system32\d3dx9_28.dll 2009-04-14 20:01:27 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll 2009-04-14 20:01:27 ----A---- C:\WINDOWS\system32\d3dx9_27.dll 2009-04-14 20:01:27 ----A---- C:\WINDOWS\system32\d3dx9_26.dll 2009-04-14 20:01:26 ----A---- C:\WINDOWS\system32\d3dx9_25.dll 2009-04-14 20:01:26 ----A---- C:\WINDOWS\system32\d3dx9_24.dll 2009-04-14 20:01:09 ----D---- C:\WINDOWS\Logs 2009-04-14 19:57:23 ----D---- C:\Program Files\Metin 2 2009-04-14 19:50:00 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Mozilla 2009-04-14 19:49:18 ----D---- C:\WINDOWS\system32\ReinstallBackups 2009-04-14 19:49:11 ----D---- C:\Program Files\Intel 2009-04-14 19:48:55 ----D---- C:\Program Files\Mozilla Firefox 2009-04-14 19:48:34 ----A---- C:\WINDOWS\Ascd_tmp.ini 2009-04-14 19:45:00 ----D---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Identities 2009-04-14 19:44:57 ----HD---- C:\Program Files\Uninstall Information 2009-04-14 19:44:57 ----D---- C:\WINDOWS\system32\SoftwareDistribution 2009-04-14 19:44:50 ----ASH---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\desktop.ini 2009-04-14 19:44:49 ----SD---- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Microsoft 2009-04-14 19:43:51 ----D---- C:\WINDOWS\SoftwareDistribution 2009-04-14 19:43:42 ----SD---- C:\WINDOWS\system32\Microsoft 2009-04-14 19:43:42 ----D---- C:\WINDOWS\Prefetch 2009-04-14 19:43:42 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-04-14 19:40:14 ----D---- C:\WINDOWS\system32\xircom 2009-04-14 19:40:14 ----D---- C:\Program Files\xerox 2009-04-14 19:40:14 ----D---- C:\Program Files\microsoft frontpage 2009-04-14 19:39:49 ----HD---- C:\WINDOWS\$hf_mig$ 2009-04-14 19:39:45 ----D---- C:\Program Files\MSXML 6.0 2009-04-14 19:39:42 ----D---- C:\Program Files\MSXML 4.0 2009-04-14 19:39:24 ----A---- C:\WINDOWS\control.ini 2009-04-14 19:39:24 ----A---- C:\AUTOEXEC.BAT 2009-04-14 19:39:08 ----A---- C:\WINDOWS\system32\mapi32.dll 2009-04-14 19:38:16 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest 2009-04-14 19:38:13 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest 2009-04-14 19:38:08 ----HD---- C:\Program Files\WindowsUpdate 2009-04-14 19:38:05 ----D---- C:\Program Files\Usługi online 2009-04-14 19:37:51 ----D---- C:\WINDOWS\system32\DirectX 2009-04-14 19:37:33 ----A---- C:\WINDOWS\system32\atrace.dll 2009-04-14 19:37:31 ----A---- C:\WINDOWS\system32\desktop.ini 2009-04-14 19:37:31 ----A---- C:\WINDOWS\desktop.ini 2009-04-14 19:37:25 ----A---- C:\WINDOWS\system32\nmevtmsg.dll 2009-04-14 19:37:24 ----D---- C:\Program Files\Common Files\Services 2009-04-14 19:37:24 ----A---- C:\WINDOWS\system32\acctres.dll 2009-04-14 19:37:22 ----SD---- C:\WINDOWS\Tasks 2009-04-14 19:37:22 ----A---- C:\WINDOWS\system32\icfgnt5.dll 2009-04-14 19:37:21 ----D---- C:\Program Files\Common Files\MSSoap 2009-04-14 19:37:17 ----D---- C:\WINDOWS\system32\Macromed 2009-04-14 19:37:17 ----D---- C:\WINDOWS\srchasst 2009-04-14 19:37:15 ----A---- C:\WINDOWS\system32\wuweb.dll 2009-04-14 19:37:15 ----A---- C:\WINDOWS\system32\wucltui.dll 2009-04-14 19:37:15 ----A---- C:\WINDOWS\system32\wuauserv.dll 2009-04-14 19:37:15 ----A---- C:\WINDOWS\system32\wuaueng1.dll 2009-04-14 19:37:14 ----A---- C:\WINDOWS\system32\wups.dll 2009-04-14 19:37:14 ----A---- C:\WINDOWS\system32\wuaueng.dll 2009-04-14 19:37:14 ----A---- C:\WINDOWS\system32\wuauclt1.exe 2009-04-14 19:37:14 ----A---- C:\WINDOWS\system32\wuauclt.exe 2009-04-14 19:37:14 ----A---- C:\WINDOWS\system32\wuapi.dll 2009-04-14 19:37:14 ----A---- C:\WINDOWS\system32\qmgrprxy.dll 2009-04-14 19:37:14 ----A---- C:\WINDOWS\system32\qmgr.dll 2009-04-14 19:37:14 ----A---- C:\WINDOWS\system32\bitsprx3.dll 2009-04-14 19:37:14 ----A---- C:\WINDOWS\system32\bitsprx2.dll 2009-04-14 19:37:10 ----D---- C:\Program Files\Movie Maker 2009-04-14 19:37:07 ----A---- C:\WINDOWS\system32\safrslv.dll 2009-04-14 19:37:07 ----A---- C:\WINDOWS\system32\safrdm.dll 2009-04-14 19:37:07 ----A---- C:\WINDOWS\system32\safrcdlg.dll 2009-04-14 19:37:07 ----A---- C:\WINDOWS\system32\racpldlg.dll 2009-04-14 19:37:02 ----A---- C:\WINDOWS\system32\fltMc.exe 2009-04-14 19:37:02 ----A---- C:\WINDOWS\system32\fltlib.dll 2009-04-14 19:37:01 ----D---- C:\WINDOWS\system32\Restore 2009-04-14 19:37:01 ----A---- C:\WINDOWS\system32\srsvc.dll 2009-04-14 19:37:01 ----A---- C:\WINDOWS\system32\srrstr.dll 2009-04-14 19:37:01 ----A---- C:\WINDOWS\system32\srclient.dll 2009-04-14 19:37:01 ----A---- C:\WINDOWS\system32\ils.dll 2009-04-14 19:37:00 ----A---- C:\WINDOWS\system32\nmmkcert.dll 2009-04-14 19:37:00 ----A---- C:\WINDOWS\system32\msconf.dll 2009-04-14 19:37:00 ----A---- C:\WINDOWS\system32\mnmsrvc.exe 2009-04-14 19:37:00 ----A---- C:\WINDOWS\system32\mnmdd.dll 2009-04-14 19:37:00 ----A---- C:\WINDOWS\system32\isrdbg32.dll 2009-04-14 19:36:56 ----D---- C:\Program Files\NetMeeting 2009-04-14 19:36:55 ----A---- C:\WINDOWS\system32\msoert2.dll 2009-04-14 19:36:55 ----A---- C:\WINDOWS\system32\msoeacct.dll 2009-04-14 19:36:54 ----A---- C:\WINDOWS\system32\inetres.dll 2009-04-14 19:36:54 ----A---- C:\WINDOWS\system32\inetcomm.dll 2009-04-14 19:36:52 ----D---- C:\Program Files\Outlook Express 2009-04-14 19:36:52 ----A---- C:\WINDOWS\system32\schedsvc.dll 2009-04-14 19:36:52 ----A---- C:\WINDOWS\system32\mstinit.exe 2009-04-14 19:36:52 ----A---- C:\WINDOWS\system32\mstask.dll 2009-04-14 19:36:51 ----A---- C:\WINDOWS\system32\isign32.dll 2009-04-14 19:36:51 ----A---- C:\WINDOWS\system32\inetcfg.dll 2009-04-14 19:36:51 ----A---- C:\WINDOWS\system32\icwphbk.dll 2009-04-14 19:36:51 ----A---- C:\WINDOWS\system32\icwdial.dll 2009-04-14 19:36:41 ----D---- C:\Program Files\Common Files\System 2009-04-14 19:36:39 ----D---- C:\Program Files\Internet Explorer 2009-04-14 19:36:07 ----D---- C:\Program Files\ComPlus Applications 2009-04-14 19:36:05 ----A---- C:\WINDOWS\vbaddin.ini 2009-04-14 19:36:05 ----A---- C:\WINDOWS\vb.ini 2009-04-14 19:36:01 ----D---- C:\WINDOWS\Registration 2009-04-14 19:35:47 ----D---- C:\Program Files\Windows Media Connect 2 2009-04-14 19:35:46 ----D---- C:\Program Files\Windows Media Player 2009-04-14 19:35:44 ----D---- C:\Program Files\Messenger 2009-04-14 19:35:42 ----D---- C:\Program Files\MSN Gaming Zone 2009-04-14 19:35:42 ----A---- C:\WINDOWS\system32\write.exe 2009-04-14 19:35:34 ----A---- C:\WINDOWS\system32\sndvol32.exe 2009-04-14 19:35:34 ----A---- C:\WINDOWS\system32\hticons.dll 2009-04-14 19:35:34 ----A---- C:\WINDOWS\system32\avwav.dll 2009-04-14 19:35:34 ----A---- C:\WINDOWS\system32\avtapi.dll 2009-04-14 19:35:34 ----A---- C:\WINDOWS\system32\avmeter.dll 2009-04-14 19:35:33 ----A---- C:\WINDOWS\system32\winchat.exe 2009-04-14 19:35:28 ----A---- C:\WINDOWS\system32\sol.exe 2009-04-14 19:35:28 ----A---- C:\WINDOWS\system32\getuname.dll 2009-04-14 19:35:28 ----A---- C:\WINDOWS\system32\charmap.exe 2009-04-14 19:35:28 ----A---- C:\WINDOWS\system32\calc.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\winmine.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\usrlogon.cmd 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\tsshutdn.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\tslabels.ini 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\tskill.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\tsdiscon.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\tscon.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\shadow.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\rwinsta.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\reset.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\mshearts.exe 2009-04-14 19:35:27 ----A---- C:\WINDOWS\system32\freecell.exe 2009-04-14 19:35:26 ----A---- C:\WINDOWS\system32\regini.exe 2009-04-14 19:35:26 ----A---- C:\WINDOWS\system32\rdpcfgex.dll 2009-04-14 19:35:26 ----A---- C:\WINDOWS\system32\qwinsta.exe 2009-04-14 19:35:26 ----A---- C:\WINDOWS\system32\qappsrv.exe 2009-04-14 19:35:26 ----A---- C:\WINDOWS\system32\msg.exe 2009-04-14 19:35:26 ----A---- C:\WINDOWS\system32\msdtcprf.ini 2009-04-14 19:35:26 ----A---- C:\WINDOWS\system32\logoff.exe 2009-04-14 19:35:26 ----A---- C:\WINDOWS\system32\cdmodem.dll 2009-04-14 19:35:25 ----A---- C:\WINDOWS\system32\stclient.dll 2009-04-14 19:35:25 ----A---- C:\WINDOWS\system32\mtxlegih.dll 2009-04-14 19:35:25 ----A---- C:\WINDOWS\system32\mtxex.dll 2009-04-14 19:35:25 ----A---- C:\WINDOWS\system32\mtxdm.dll 2009-04-14 19:35:25 ----A---- C:\WINDOWS\system32\dcomcnfg.exe 2009-04-14 19:35:25 ----A---- C:\WINDOWS\system32\comsnap.dll 2009-04-14 19:35:25 ----A---- C:\WINDOWS\system32\comrepl.dll 2009-04-14 19:35:25 ----A---- C:\WINDOWS\system32\comaddin.dll 2009-04-14 19:35:21 ----A---- C:\WINDOWS\system32\wmimgmt.msc 2009-04-14 19:35:20 ----A---- C:\WINDOWS\system32\sndrec32.exe 2009-04-14 19:35:20 ----A---- C:\WINDOWS\system32\mplay32.exe 2009-04-14 19:35:20 ----A---- C:\WINDOWS\system32\hypertrm.dll 2009-04-14 19:35:20 ----A---- C:\WINDOWS\system32\accwiz.exe 2009-04-14 19:35:19 ----D---- C:\Program Files\Windows NT 2009-04-14 19:35:19 ----A---- C:\WINDOWS\system32\spider.exe 2009-04-14 19:35:19 ----A---- C:\WINDOWS\system32\mspaint.exe 2009-04-14 19:35:19 ----A---- C:\WINDOWS\system32\clipbrd.exe 2009-04-14 19:35:18 ----A---- C:\WINDOWS\system32\tscfgwmi.dll 2009-04-14 19:35:18 ----A---- C:\WINDOWS\system32\sessmgr.exe 2009-04-14 19:35:18 ----A---- C:\WINDOWS\system32\remotepg.dll 2009-04-14 19:35:18 ----A---- C:\WINDOWS\system32\rdshost.exe 2009-04-14 19:35:18 ----A---- C:\WINDOWS\system32\rdsaddin.exe 2009-04-14 19:35:18 ----A---- C:\WINDOWS\system32\mstscax.dll 2009-04-14 19:35:18 ----A---- C:\WINDOWS\system32\mstsc.exe 2009-04-14 19:35:17 ----D---- C:\WINDOWS\system32\MsDtc 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\tscupgrd.exe 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\termsrv.dll 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\rdpwsx.dll 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\rdpsnd.dll 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\rdpclip.exe 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\rdchost.dll 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\qprocess.exe 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\mtxoci.dll 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\msdtcuiu.dll 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\icaapi.dll 2009-04-14 19:35:17 ----A---- C:\WINDOWS\system32\cfgbkend.dll 2009-04-14 19:35:16 ----A---- C:\WINDOWS\system32\xolehlp.dll 2009-04-14 19:35:16 ----A---- C:\WINDOWS\system32\msdtctm.dll 2009-04-14 19:35:16 ----A---- C:\WINDOWS\system32\msdtcprx.dll 2009-04-14 19:35:16 ----A---- C:\WINDOWS\system32\msdtclog.dll 2009-04-14 19:35:16 ----A---- C:\WINDOWS\system32\msdtc.exe 2009-04-14 19:35:15 ----D---- C:\WINDOWS\system32\Com

To nie koniec niemoge wstawić bo 6000 znaków

**Posty:** 18165 · przez **wojtas** 24 Cze 2009, 00:10

Pobierz OTL i daj z niego loga

**Posty:** 540 · przez **Lijke** 24 Cze 2009, 11:15

Ots

Kod: Zaznacz wszystko: OTL logfile created on: 2009-06-24 11:12:13 - Run 2 OTL by OldTimer - Version 3.0.5.2 Folder = C:\Documents and Settings\Hubertrnoob\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 503,23 Mb Total Physical Memory | 58,12 Mb Available Physical Memory | 11,55% Memory free 1,20 Gb Paging File | 0,80 Gb Available in Paging File | 66,24% Paging File free Paging file location(s): C:\pagefile.sys 756 1512 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,29 Gb Total Space | 6,49 Gb Free Space | 22,16% Space Free | Partition Type: NTFS Drive D: | 45,23 Gb Total Space | 13,22 Gb Free Space | 29,24% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: Z-5E732675BB5A4 Current User Name: Hubertrnoob Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2008-01-24 14:29:10 | 01,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2006-03-23 08:47:04 | 00,094,208 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxtray.exe PRC - [2006-03-23 08:43:40 | 00,077,824 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\hkcmd.exe PRC - [2006-03-23 08:47:50 | 00,118,784 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxpers.exe PRC - [2006-02-19 02:41:10 | 00,049,152 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe PRC - [2009-04-18 11:40:20 | 00,588,850 | -HS- | M] ( ) -- C:\WINDOWS\svchost.pif PRC - [2009-03-09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2007-01-08 22:26:08 | 00,068,640 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe PRC - [2004-10-13 11:51:26 | 01,694,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2008-10-10 05:33:12 | 00,935,200 | ---- | M] (ABBYY Software Ltd) -- C:\Program Files\ABBYY FineReader 9.0 Home Edition\Bonus.ScreenshotReader.exe PRC - [2009-05-28 13:53:12 | 10,486,376 | ---- | M] (GG Network S.A.) -- C:\Program Files\Nowe Gadu-Gadu\gg.exe PRC - [2009-04-23 18:21:38 | 00,691,656 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe PRC - [2009-05-28 13:03:44 | 00,077,824 | ---- | M] () -- C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe PRC - [2006-02-19 04:21:22 | 00,288,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe PRC - [2008-10-14 14:57:16 | 00,962,048 | ---- | M] (QuestPRO Software) -- C:\Program Files\cityLAN\KDLink32.exe PRC - [2006-02-19 05:24:52 | 00,239,320 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe PRC - [2008-10-09 11:24:16 | 00,759,072 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe PRC - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2007-01-08 22:39:44 | 00,171,040 | ---- | M] () -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe PRC - [2004-08-04 04:14:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wscntfy.exe PRC - [2009-06-14 10:47:59 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-04-16 09:23:24 | 02,375,680 | ---- | M] (CipSoft GmbH) -- C:\Program Files\Tibia8,42\Tibia.exe PRC - [2009-06-24 11:04:34 | 00,512,512 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Hubertrnoob\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2008-10-09 11:24:16 | 00,759,072 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Sprint.9.0 [Auto | Running]) SRV - [2009-04-16 20:05:41 | 00,072,704 | ---- | M] (Adobe Systems) -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service [On_Demand | Stopped]) SRV - [2009-05-08 08:34:46 | 01,840,128 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe -- (GoogleDesktopManager-091907-194040 [On_Demand | Stopped]) SRV - [2004-08-04 04:14:08 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2006-03-03 21:03:10 | 00,069,632 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe -- (Pml Driver HPZ12 [Unknown | Stopped]) SRV - [2007-01-08 22:39:44 | 00,171,040 | ---- | M] () -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe -- (RichVideo [Auto | Running]) SRV - [2009-04-29 14:00:16 | 00,000,000 | ---- | M] () -- C:\WINDOWS\System32\UTSCSI.EXE -- (UTSCSI [Auto | Stopped]) SRV - [2006-12-01 14:16:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2004-04-30 09:37:02 | 00,160,640 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\a347bus.sys -- (a347bus [Boot | Running]) DRV - [2004-04-30 09:33:00 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\System32\Drivers\a347scsi.sys -- (a347scsi [Boot | Running]) DRV - [2004-08-03 22:59:44 | 00,095,360 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\atapi.sys -- (atapi [Boot | Running]) DRV - [2009-06-04 07:40:14 | 00,100,224 | ---- | M] () -- C:\Program Files\sXe Injected\ddsxei.sys -- (ddsxeiservice [On_Demand | Stopped]) DRV - [2005-01-07 17:07:18 | 00,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running]) DRV - [2006-04-13 04:34:39 | 00,049,664 | R--- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZid412.sys -- (HPZid412 [On_Demand | Stopped]) DRV - [2006-04-13 04:34:39 | 00,016,496 | R--- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZipr12.sys -- (HPZipr12 [On_Demand | Stopped]) DRV - [2006-04-13 04:34:39 | 00,021,568 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZius12.sys -- (HPZius12 [On_Demand | Stopped]) DRV - [2006-03-23 09:17:06 | 01,166,972 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\DRIVERS\ialmnt5.sys -- (ialm [On_Demand | Running]) DRV - [2006-06-28 12:55:24 | 04,304,384 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running]) DRV - [2001-08-18 02:19:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2004-08-04 03:01:34 | 00,020,992 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\DRIVERS\RTL8139.SYS -- (rtl8139 [On_Demand | Running]) DRV - [2008-01-24 14:22:06 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2009-06-07 09:15:52 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2007-05-02 11:11:16 | 00,083,592 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\ss_bus.sys -- (ss_bus [On_Demand | Stopped]) DRV - [2007-05-02 11:11:18 | 00,015,112 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\ss_mdfl.sys -- (ss_mdfl [On_Demand | Stopped]) DRV - [2007-05-02 11:11:18 | 00,109,704 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\ss_mdm.sys -- (ss_mdm [On_Demand | Stopped]) DRV - [2009-05-31 23:07:30 | 00,005,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen [System | Running]) DRV - [2008-01-24 01:55:32 | 00,027,136 | ---- | M] (The OpenVPN Project) -- C:\WINDOWS\System32\DRIVERS\tapvpn.sys -- (tapvpn [On_Demand | Stopped]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Yahoo" FF - prefs.js..browser.search.order.1: "Yahoo" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.daemon-search.com/startpage|http://www.mystart.com?pr=oovoo2_0" FF - prefs.js..extensions.enabledItems: {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}:2.0.0.66311 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.0.8.0552 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 FF - prefs.js..extensions.enabledItems: {99E00A4C-D35E-11DD-BA95-9B6A56D89593}:2.0 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.11 FF - prefs.js..extensions.enabledItems: {c1dffba0-628e-11d9-9669-0800200c9a66}:3.0.4 FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-06-18 11:38:00 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-06-14 10:48:04 | 00,000,000 | ---D | M] [2009-04-14 19:50:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\mozilla\Extensions [2009-04-14 19:50:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-06-22 21:49:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\mozilla\Firefox\Profiles\g1ue4kwz.default\extensions [2009-05-18 13:53:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\mozilla\Firefox\Profiles\g1ue4kwz.default\extensions\{99E00A4C-D35E-11DD-BA95-9B6A56D89593} [2009-04-30 15:15:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\mozilla\Firefox\Profiles\g1ue4kwz.default\extensions\{c1dffba0-628e-11d9-9669-0800200c9a66} [2009-06-07 09:18:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\mozilla\Firefox\Profiles\g1ue4kwz.default\extensions\DTToolbar@toolbarnet.com [2009-06-07 09:18:26 | 00,002,395 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Mozilla\FireFox\Profiles\g1ue4kwz.default\searchplugins\daemon-search.xml [2009-06-23 09:59:59 | 00,000,963 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Mozilla\FireFox\Profiles\g1ue4kwz.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml [2009-06-22 21:49:25 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-06-14 10:48:04 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009-04-14 21:00:10 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} [2009-04-24 12:41:41 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} [2009-05-25 21:46:02 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} [2009-06-14 10:47:59 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-06-14 10:47:59 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-05-08 08:34:47 | 00,135,680 | ---- | M] (Google) -- C:\Program Files\mozilla firefox\components\GoogleDesktopMozilla.dll [2009-03-09 05:19:09 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll [2009-05-19 09:24:10 | 00,120,296 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll [2009-06-14 10:48:01 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2009-04-29 15:12:41 | 00,239,432 | ---- | M] (Pando Networks) -- C:\Program Files\mozilla firefox\plugins\npPandoWebInst.dll [2009-02-27 12:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2006-06-03 21:13:22 | 00,000,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2008-04-03 21:49:08 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2008-04-16 08:38:20 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2007-03-31 21:41:54 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2006-06-03 21:13:22 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2008-03-29 02:06:04 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2007-01-05 16:10:56 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (774 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 21.128.133.26 gwgt1.joymax.com O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll File not found O2 - BHO: (ooVoo Toolbar) - {A1FB2F9A-D35E-11DD-8935-E46A56D89593} - C:\Program Files\oovootb\dtx.dll () O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (ooVoo Toolbar) - {A1FB2F9A-D35E-11DD-8935-E46A56D89593} - C:\Program Files\oovootb\dtx.dll () O3 - HKLM\..\Toolbar: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare) O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare) O4 - HKLM..\Run: [AASecuUFD] File not found O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Google Desktop Search] File not found O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [igfxhkcmd] C:\WINDOWS\System32\hkcmd.exe (Intel Corporation) O4 - HKLM..\Run: [igfxpers] C:\WINDOWS\System32\igfxpers.exe (Intel Corporation) O4 - HKLM..\Run: [igfxtray] C:\WINDOWS\System32\igfxtray.exe (Intel Corporation) O4 - HKLM..\Run: [KernelFaultFix] C:\WINDOWS\svchost.pif ( ) O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe () O4 - HKLM..\Run: [RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Cyberlink Corp.) O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKCU..\Run: [ABBYY Screenshot Reader Bonus] C:\Program Files\ABBYY FineReader 9.0 Home Edition\Bonus.Scr File not found O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O4 - HKCU..\Run: [GG Tools] C:\Program Files\kRk Software\GG Tools\GGT.exe (Krzysztof Mortka) O4 - HKCU..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O4 - HKCU..\Run: [Nowe Gadu-Gadu] C:\Program Files\Nowe Gadu-Gadu\gg.exe (GG Network S.A.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Development Company, L.P.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Internet cityLAN.lnk = C:\Program Files\cityLAN\KDLink32.exe (QuestPRO Software) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-04-14 19:39:24 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{3ee39d32-527d-11de-9070-00138fc11656}\Shell\AutoRun\command - "" = I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{3ee39d32-527d-11de-9070-00138fc11656}\Shell\open\command - "" = I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{4b21ce48-4b42-11de-9052-00138fc11656}\Shell\AutoRun\command - "" = I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{4b21ce48-4b42-11de-9052-00138fc11656}\Shell\open\command - "" = I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{4fd8159a-2b40-11de-abd9-00138fc11656}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{4fd8159a-2b40-11de-abd9-00138fc11656}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{4fd8159b-2b40-11de-abd9-00138fc11656}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{4fd8159b-2b40-11de-abd9-00138fc11656}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{69f9320c-3972-11de-ac03-00138fc11656}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{69f9320c-3972-11de-ac03-00138fc11656}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{69f9320d-3972-11de-ac03-00138fc11656}\Shell\AutoRun\command - "" = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{69f9320d-3972-11de-ac03-00138fc11656}\Shell\open\command - "" = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{73a8f512-4e8e-11de-9061-00138fc11656}\Shell\AutoRun\command - "" = 2fiy.bat O33 - MountPoints2\{73a8f512-4e8e-11de-9061-00138fc11656}\Shell\open\Command - "" = 2fiy.bat O33 - MountPoints2\{7943ca7a-3183-11de-abf0-00138fc11656}\Shell\AutoRun\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{7943ca7a-3183-11de-abf0-00138fc11656}\Shell\open\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{9e20bcb8-3498-11de-abf5-00138fc11656}\Shell - "" = AutoRun O33 - MountPoints2\{9e20bcb8-3498-11de-abf5-00138fc11656}\Shell\AutoRun\command - "" = G:\USBNB.exe -- File not found O33 - MountPoints2\{9e20bcb9-3498-11de-abf5-00138fc11656}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O33 - MountPoints2\{9e20bcb9-3498-11de-abf5-00138fc11656}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [2009-06-24 11:04:30 | 00,512,512 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Hubertrnoob\Pulpit\OTL.exe [2009-06-23 21:43:35 | 00,117,490 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\12312312312312.jpg [2009-06-23 21:42:53 | 03,932,214 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\1234124124.bmp [2009-06-23 21:41:56 | 00,089,262 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\121213.jpg [2009-06-23 21:41:08 | 03,932,214 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\2e213412.bmp [2009-06-23 21:38:45 | 03,932,214 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\22133122.bmp [2009-06-23 21:38:12 | 03,932,214 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\5.bmp [2009-06-23 21:36:47 | 03,932,214 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\6.bmp [2009-06-23 21:34:35 | 00,011,568 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\s492.jpg [2009-06-23 21:34:18 | 00,021,178 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\s493.jpg [2009-06-23 19:26:06 | 00,000,000 | ---D | C] -- C:\Program Files\trend micro [2009-06-23 01:26:00 | 00,623,566 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\5135.exe [2009-06-23 00:43:27 | 00,079,274 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\a6w2nl.jpg [2009-06-22 19:59:46 | 00,000,000 | ---D | C] -- C:\Program Files\Kovloria 8.42 [2009-06-22 18:46:25 | 00,000,104 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\Mój komputer.lnk [2009-06-22 17:05:03 | 15,369,143 | ---- | C] (KovSoft ) -- C:\Documents and Settings\Hubertrnoob\Pulpit\kov842setup.exe [2009-06-22 16:10:03 | 01,118,054 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\2.bmp [2009-06-22 16:08:54 | 00,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab [2009-06-21 23:07:05 | 00,174,006 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\DSC01955.JPG [2009-06-21 13:15:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Pulpit\datki [2009-06-20 19:07:51 | 00,000,000 | ---D | C] -- C:\Program Files\Dziobas Rar Player [2009-06-20 10:30:42 | 02,451,734 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\1.bmp [2009-06-19 20:43:14 | 00,000,000 | ---D | C] -- C:\Program Files\Tibia8,31 [2009-06-13 13:22:22 | 00,000,000 | ---D | C] -- C:\Program Files\Tibia8,42 [2009-06-12 15:50:39 | 00,000,744 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\filterclsid.dat [2009-06-12 15:32:08 | 39,947,264 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\SARNIE_ZNIWO.bin [2009-06-12 15:30:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\My Art [2009-06-12 14:23:06 | 00,001,607 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\Counter Strike.lnk [2009-06-12 14:18:49 | 00,000,000 | ---D | C] -- C:\Program Files\Valve [2009-06-12 13:59:11 | 00,000,000 | ---D | C] -- C:\Program Files\sXe Injected [2009-06-11 20:17:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Pulpit\MPH Aimbot v15 [2009-06-09 18:22:39 | 00,001,748 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Gothic II.lnk [2009-06-09 18:18:34 | 00,000,000 | ---D | C] -- C:\Program Files\JoWooD [2009-06-09 18:18:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\InstallShield [2009-06-09 17:26:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2009-06-09 17:23:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\OpenFM [2009-06-07 21:12:35 | 00,000,613 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\SCAR Divi 3.20.lnk [2009-06-07 21:12:24 | 00,098,360 | ---- | C] (Un4seen Developments) -- C:\WINDOWS\System32\bass.dll [2009-06-07 21:12:24 | 00,025,152 | ---- | C] (Un4seen Developments) -- C:\WINDOWS\System32\bassmidi.dll [2009-06-07 21:12:24 | 00,025,152 | ---- | C] (Un4seen Developments) -- C:\WINDOWS\System32\bassflac.dll [2009-06-07 21:12:23 | 00,688,128 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll [2009-06-07 21:12:23 | 00,155,648 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll [2009-06-07 21:12:23 | 00,000,000 | ---D | C] -- C:\Program Files\SCAR 3.20 [2009-06-07 17:55:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\GanymedeNet [2009-06-07 17:54:47 | 00,000,000 | ---D | C] -- C:\Program Files\~~a [2009-06-07 09:38:53 | 00,001,950 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\The Elder Scrolls III - Morrowind Złota Edycja.lnk [2009-06-07 09:36:12 | 00,000,000 | ---D | C] -- C:\Program Files\Ubisoft [2009-06-07 09:18:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2009-06-07 09:18:26 | 00,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Toolbar [2009-06-07 09:17:22 | 00,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite [2009-06-07 09:15:51 | 00,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-06-07 09:15:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\DAEMON Tools Lite [2009-06-06 23:32:37 | 00,000,845 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CWK.lnk [2009-06-06 23:32:37 | 00,000,000 | ---D | C] -- C:\Program Files\Damian Pasternak [2009-06-06 17:07:25 | 00,000,986 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk [2009-06-04 08:28:04 | 00,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat [2009-06-04 08:27:34 | 00,001,642 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\Gothic PL.lnk [2009-06-03 19:21:02 | 00,000,000 | ---D | C] -- C:\Program Files\Gothic PL [2009-06-03 16:46:18 | 00,015,911 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\skanuj0001.gif [2009-06-03 15:45:32 | 00,031,615 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\chemia-wzory.gif [2009-06-03 15:38:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Winferno [2009-06-03 15:34:00 | 00,000,416 | ---- | C] () -- C:\WINDOWS\tasks\PCConfidential.job [2009-06-03 15:33:56 | 00,212,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Richtx32.ocx [2009-06-03 15:33:06 | 00,516,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CapiCom.dll [2009-06-03 15:33:06 | 00,000,000 | ---D | C] -- C:\Program Files\Winferno [2009-06-01 22:58:36 | 00,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\framedyn.dll [2009-06-01 22:58:19 | 00,109,704 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_mdm.sys [2009-06-01 22:58:19 | 00,083,592 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_bus.sys [2009-06-01 22:58:19 | 00,015,112 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_mdfl.sys [2009-06-01 22:58:19 | 00,012,424 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_whnt.sys [2009-06-01 22:58:19 | 00,012,424 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_wh.sys [2009-06-01 22:58:19 | 00,012,424 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_cmnt.sys [2009-06-01 22:58:19 | 00,012,424 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_cm.sys [2009-06-01 22:58:19 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Samsung_USB_Drivers [2009-06-01 22:58:07 | 00,000,766 | ---- | C] () -- C:\WINDOWS\System32\Uninstall.ico [2009-06-01 22:58:01 | 00,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2009-06-01 22:57:45 | 00,000,287 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Samsung PC Studio 3.lnk [2009-06-01 19:40:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Pulpit\Nowy folder [2009-06-01 15:12:04 | 00,000,098 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\PDVD_MediaDisc.PlayList [2009-05-31 23:09:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Samsung [2009-05-31 23:09:09 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt [2009-05-31 20:35:17 | 00,028,382 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\Obraz [2009-05-31 14:31:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\My Webs [2009-05-25 21:56:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Ustawienia lokalne\Dane aplikacji\Ares [2009-05-25 21:55:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\Nowy folder [2009-05-25 21:46:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\My Received Files [2009-05-25 21:46:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\My Music [2009-05-25 21:46:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\BearShare [2009-05-25 21:46:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\1BAB [2009-05-25 21:46:14 | 00,076,407 | ---- | C] () -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Smiley.ico [2009-05-25 21:45:42 | 00,483,328 | ---- | C] (SoftShape Development) -- C:\WINDOWS\System32\actskn45.ocx [2009-05-25 21:45:39 | 00,000,000 | ---D | C] -- C:\Program Files\BearShare Applications [2009-05-24 14:33:49 | 00,000,033 | ---- | C] () -- C:\WINDOWS\forevermopt.INI [2009-05-18 14:21:51 | 00,000,493 | ---- | C] () -- C:\WINDOWS\stream_blue.INI [2009-05-05 19:31:23 | 00,160,640 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347bus.sys [2009-05-05 19:31:23 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347scsi.sys [2009-04-21 23:58:56 | 00,009,728 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2009-04-17 19:14:11 | 00,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-04-17 19:00:08 | 00,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll [2009-04-16 21:55:18 | 00,067,584 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-04-16 21:55:18 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-04-14 20:06:38 | 00,135,168 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2009-04-14 19:48:34 | 00,004,654 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2009-04-14 19:48:28 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2004-08-04 02:29:44 | 00,095,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atapi.sys [2001-07-22 02:46:20 | 00,000,704 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-22 02:45:52 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini [2001-07-07 03:00:02 | 00,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI [1999-01-22 22:16:58 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] [2009-06-24 11:04:34 | 00,512,512 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Hubertrnoob\Pulpit\OTL.exe [2009-06-24 11:02:03 | 00,000,416 | ---- | M] () -- C:\WINDOWS\tasks\PCConfidential.job [2009-06-24 11:01:49 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-06-24 11:01:46 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-06-23 21:43:49 | 00,117,490 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\12312312312312.jpg [2009-06-23 21:43:00 | 03,932,214 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\1234124124.bmp [2009-06-23 21:41:59 | 00,089,262 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\121213.jpg [2009-06-23 21:41:24 | 03,932,214 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\2e213412.bmp [2009-06-23 21:38:52 | 03,932,214 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\22133122.bmp [2009-06-23 21:38:15 | 03,932,214 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\5.bmp [2009-06-23 21:37:09 | 03,932,214 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\6.bmp [2009-06-23 21:34:35 | 00,011,568 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\s492.jpg [2009-06-23 21:34:19 | 00,021,178 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\s493.jpg [2009-06-23 18:57:19 | 01,580,100 | -H-- | M] () -- C:\Documents and Settings\Hubertrnoob\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-06-23 01:26:17 | 00,623,566 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\5135.exe [2009-06-23 00:43:38 | 00,079,274 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\a6w2nl.jpg [2009-06-22 18:46:25 | 00,000,104 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\Mój komputer.lnk [2009-06-22 17:09:56 | 15,369,143 | ---- | M] (KovSoft ) -- C:\Documents and Settings\Hubertrnoob\Pulpit\kov842setup.exe [2009-06-22 16:10:04 | 01,118,054 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\2.bmp [2009-06-22 09:00:11 | 00,013,030 | ---- | M] () -- C:\PDOXUSRS.NET [2009-06-21 23:07:14 | 00,174,006 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\DSC01955.JPG [2009-06-20 10:36:51 | 00,013,824 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-06-20 10:30:44 | 02,451,734 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\1.bmp [2009-06-19 20:43:15 | 00,000,670 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Tibia.lnk [2009-06-19 15:34:58 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-06-16 11:07:13 | 00,002,291 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ewa.lnk [2009-06-12 16:18:09 | 39,947,264 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\SARNIE_ZNIWO.bin [2009-06-12 15:50:39 | 00,000,744 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\filterclsid.dat [2009-06-12 15:49:55 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt [2009-06-12 14:23:06 | 00,001,607 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\Counter Strike.lnk [2009-06-09 18:22:40 | 00,001,748 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gothic II.lnk [2009-06-09 17:23:50 | 00,001,642 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\Gothic PL.lnk [2009-06-07 21:12:35 | 00,000,613 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\SCAR Divi 3.20.lnk [2009-06-07 09:38:53 | 00,001,950 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\The Elder Scrolls III - Morrowind Złota Edycja.lnk [2009-06-07 09:15:52 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-06-06 23:32:37 | 00,000,845 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CWK.lnk [2009-06-06 21:43:27 | 00,000,704 | ---- | M] () -- C:\WINDOWS\win.ini [2009-06-06 17:07:25 | 00,000,986 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk [2009-06-04 08:28:04 | 00,004,096 | ---- | M] () -- C:\WINDOWS\d3dx.dat [2009-06-03 16:46:52 | 00,015,911 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\skanuj0001.gif [2009-06-03 15:46:04 | 00,031,615 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\chemia-wzory.gif [2009-06-01 22:57:45 | 00,000,287 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Samsung PC Studio 3.lnk [2009-06-01 15:12:04 | 00,000,098 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Moje dokumenty\PDVD_MediaDisc.PlayList [2009-05-31 23:07:30 | 00,005,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2009-05-31 20:34:54 | 00,028,382 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\Obraz [2009-05-31 15:34:29 | 00,004,797 | ---- | M] () -- C:\Documents and Settings\Hubertrnoob\Pulpit\a.html [2009-05-25 17:24:06 | 00,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [color=#E56717]========== LOP Check ==========[/color] [2009-06-20 14:04:27 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji [2009-05-25 21:46:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1BAB [2009-05-23 08:37:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CyberLink [2009-06-07 09:18:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2009-05-03 12:09:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EmailNotifier [2009-04-14 21:29:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Estsoft [2009-05-06 00:07:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Locktime [2009-06-09 17:27:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2009-04-29 21:41:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files [2009-05-31 10:38:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2009-06-03 15:38:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Winferno [2009-06-12 15:50:39 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji [2009-06-19 15:42:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\BESTplayer [2009-05-23 08:37:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\CyberLink [2009-06-07 09:35:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\DAEMON Tools Lite [2009-05-03 12:10:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\EmailNotifier [2009-04-14 21:29:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\ESTsoft [2009-04-14 20:51:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Gadu-Gadu [2009-06-07 18:22:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\GanymedeNet [2009-06-19 21:44:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Image Zone Express [2009-05-06 00:08:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Locktime [2009-05-16 16:26:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Nowe Gadu-Gadu [2009-05-03 12:10:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\ooVoo Details [2009-06-23 01:39:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\oovootb [2009-06-09 17:23:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\OpenFM [2009-04-14 20:34:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Opera [2009-04-29 13:59:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\PLAux [2009-04-22 00:01:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Publish Providers [2009-05-31 23:09:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Samsung [2009-04-18 13:25:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Soldat [2009-04-22 00:00:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Sony [2009-04-21 23:49:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Sony Setup [2009-06-22 20:22:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\Tibia [2009-05-22 20:54:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Hubertrnoob\Dane aplikacji\WoDBO [2001-07-22 02:47:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-06-24 11:02:03 | 00,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\PCConfidential.job [2009-06-24 11:01:49 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 88 bytes -> C:\Program Files\Tibia.exe:SummaryInformation @Alternate Data Stream - 226 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:4EE74317 @Alternate Data Stream - 206 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:E41EAF13 < End of report >

**Posty:** 18165 · przez **wojtas** 24 Cze 2009, 11:42

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O1 - Hosts: 21.128.133.26 gwgt1.joymax.com
O3 - HKLM\..\Toolbar: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare)
O3 - HKCU\..\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare)
O4 - HKLM..\Run: [KernelFaultFix] C:\WINDOWS\svchost.pif ( )
33 - MountPoints2\{3ee39d32-527d-11de-9070-00138fc11656}\Shell\AutoRun\command - "" = I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{3ee39d32-527d-11de-9070-00138fc11656}\Shell\open\command - "" = I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{4b21ce48-4b42-11de-9052-00138fc11656}\Shell\AutoRun\command - "" = I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{4b21ce48-4b42-11de-9052-00138fc11656}\Shell\open\command - "" = I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{4fd8159a-2b40-11de-abd9-00138fc11656}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{4fd8159a-2b40-11de-abd9-00138fc11656}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{4fd8159b-2b40-11de-abd9-00138fc11656}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{4fd8159b-2b40-11de-abd9-00138fc11656}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{69f9320c-3972-11de-ac03-00138fc11656}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{69f9320c-3972-11de-ac03-00138fc11656}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{69f9320d-3972-11de-ac03-00138fc11656}\Shell\AutoRun\command - "" = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{69f9320d-3972-11de-ac03-00138fc11656}\Shell\open\command - "" = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{73a8f512-4e8e-11de-9061-00138fc11656}\Shell\AutoRun\command - "" = 2fiy.bat
O33 - MountPoints2\{73a8f512-4e8e-11de-9061-00138fc11656}\Shell\open\Command - "" = 2fiy.bat
O33 - MountPoints2\{7943ca7a-3183-11de-abf0-00138fc11656}\Shell\AutoRun\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{7943ca7a-3183-11de-abf0-00138fc11656}\Shell\open\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{9e20bcb8-3498-11de-abf5-00138fc11656}\Shell - "" = AutoRun
O33 - MountPoints2\{9e20bcb8-3498-11de-abf5-00138fc11656}\Shell\AutoRun\command - "" = G:\USBNB.exe -- File not found
O33 - MountPoints2\{9e20bcb9-3498-11de-abf5-00138fc11656}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found
O33 - MountPoints2\{9e20bcb9-3498-11de-abf5-00138fc11656}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\xop32.exe -- File not found

:Files
C:\Program Files\BearShare Applications\BearShare MediaBar

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia kompa

**Posty:** 540 · przez **Lijke** 24 Cze 2009, 17:50

Chyba coś źle zrobiłeś:|
Bo zrobiłem wszystko to co trzeba i musiałem sformatować komputer ;//
I chciałbym teraz amty-virusa dla mojego komputera
http://i42.tinypic.com/r0b1nn.jpg

**Posty:** 8001 · przez **Okocza** 24 Cze 2009, 18:00

Lijke, NOD32 lub Kaspersky

**Posty:** 540 · przez **Lijke** 24 Cze 2009, 18:05

Hehe miałem raz kasperskiego to bardziej muliło kompa niż przed formatem z wirusami xDDD

**Posty:** 18165 · przez **wojtas** 25 Cze 2009, 00:10

jak formata ? przeciez wszystko ok w skrypcie

**Posty:** 540 · przez **Lijke** 25 Cze 2009, 09:55

Już zrobiłem nie wiem ale jak właczałem komputer to się właczał napisz Zapraszamy i nic się nie działo