- Kod: Zaznacz wszystko
GMER 1.0.15.15530 - http://www.gmer.net
Rootkit quick scan 2011-01-19 19:19:08
Windows 5.1.2600 Dodatek Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST9200827AS rev.3.AAA
Running: xm5xg7e9.exe; Driver: C:\DOCUME~1\btn\USTAWI~1\Temp\axrcrfow.sys
---- System - GMER 1.0.15 ----
SSDT d347bus.sys (PnP BIOS Extension/ ) ZwEnumerateKey [0xBA6812A8]
SSDT d347bus.sys (PnP BIOS Extension/ ) ZwEnumerateValueKey [0xBA68C910]
---- Devices - GMER 1.0.15 ----
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 89A3B528
Device \Driver\atapi \Device\Ide\IdePort0 89A3B528
Device \Driver\atapi \Device\Ide\IdePort1 89A3B528
Device \Driver\atapi \Device\Ide\IdePort2 89A3B528
Device \Driver\atapi \Device\Ide\IdePort3 89A3B528
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 89A3B528
Device \Driver\d347prt \Device\Scsi\d347prt1Port4Path0Target0Lun0 89A79910
Device \Driver\d347prt \Device\Scsi\d347prt1 89A79910
Device \FileSystem\Ntfs \Ntfs 89D6E1E8
Device \FileSystem\Ntfs \Ntfs 89CBE2E8
AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET)
AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdir.sys (ESET Antivirus Network Redirector/ESET)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
---- Modules - GMER 1.0.15 ----
Module _________ BA608000-BA620000 (98304 bytes)
---- EOF - GMER 1.0.15 ----
hijax
- Kod: Zaznacz wszystko
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:30:38, on 2011-01-19
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Immunet Protect\2.0.17\agent.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Atheros\ACU.exe
C:\WINDOWS\system32\ASUSTPE.exe
C:\WINDOWS\ASScrPro.exe
C:\Program Files\Immunet Protect\2.0.17\iptray.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\Program Files\ATK Hotkey\WDC.exe
D:\Riot Games\League of Legends\lol.launcher.exe
D:\Riot Games\League of Legends\Air\LOLClient.exe
D:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\NOTEPAD.EXE
D:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2475029
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [ATKHOTKEY] "C:\Program Files\ATK Hotkey\Hcontrol.exe"
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Wireless Console 2] "C:\Program Files\Wireless Console 2\wcourier.exe"
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [ASUSTPE] C:\WINDOWS\system32\ASUSTPE.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\WINDOWS\ASScrProlog.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\WINDOWS\ASScrPro.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Immunet Protect] "C:\Program Files\Immunet Protect\2.0.17\iptray.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{4B588AAA-7BDF-4808-8F26-EFD0A01A97CA}: NameServer = 82.160.13.20,213.199.225.14
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Usługa konfiguracji Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Immunet Protect (ImmunetProtect) - Immunet Corporation - C:\Program Files\Immunet Protect\2.0.17\agent.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
--
End of file - 5037 bytes
OTL
- Kod: Zaznacz wszystko
OTL logfile created on: 2011-01-19 19:22:45 - Run 1
OTL by OldTimer - Version 3.2.20.2 Folder = C:\Documents and Settings\btn\Moje dokumenty\Pobieranie
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 56,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 58,59 Gb Total Space | 40,36 Gb Free Space | 68,89% Space Free | Partition Type: NTFS
Drive D: | 127,71 Gb Total Space | 50,38 Gb Free Space | 39,45% Space Free | Partition Type: NTFS
Drive F: | 659,04 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: BTN-A21F458014C | User Name: btn | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2011-01-19 19:15:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\btn\Moje dokumenty\Pobieranie\OTL(3).exe
PRC - [2011-01-07 19:45:23 | 002,615,624 | ---- | M] (Immunet) -- C:\Program Files\Immunet Protect\2.0.17\iptray.exe
PRC - [2011-01-07 19:45:22 | 000,756,680 | ---- | M] (Immunet Corporation) -- C:\Program Files\Immunet Protect\2.0.17\agent.exe
PRC - [2010-12-12 19:55:25 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
PRC - [2010-12-12 19:55:21 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-11-05 14:27:18 | 007,168,768 | ---- | M] (TeamSpeak Systems GmbH) -- D:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
PRC - [2010-11-04 17:15:50 | 000,810,144 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2010-11-04 17:15:32 | 002,219,184 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2010-09-08 09:09:02 | 000,144,384 | ---- | M] (Adobe Systems Inc.) -- D:\Riot Games\League of Legends\air\LolClient.exe
PRC - [2010-05-10 17:59:38 | 000,033,136 | ---- | M] () -- C:\WINDOWS\ASScrPro.exe
PRC - [2010-05-05 00:34:58 | 000,421,888 | ---- | M] (Solid State Networks) -- D:\Riot Games\League of Legends\lol.launcher.exe
PRC - [2007-10-23 18:35:58 | 000,376,921 | ---- | M] (Atheros Communications, Inc.) -- C:\Program Files\Atheros\ACU.exe
PRC - [2007-10-23 18:35:40 | 000,364,629 | ---- | M] (Atheros) -- C:\WINDOWS\system32\acs.exe
PRC - [2007-10-17 18:04:00 | 007,737,344 | ---- | M] () -- C:\Program Files\ATKOSD2\ATKOSD2.exe
PRC - [2007-07-12 09:25:28 | 000,225,280 | ---- | M] () -- C:\Program Files\ATK Hotkey\HControl.exe
PRC - [2007-07-10 16:33:58 | 000,106,496 | ---- | M] () -- C:\Program Files\ATK Hotkey\WDC.exe
PRC - [2007-07-05 15:53:44 | 001,040,384 | ---- | M] () -- C:\Program Files\Wireless Console 2\wcourier.exe
PRC - [2007-05-23 15:56:14 | 002,420,736 | ---- | M] () -- C:\Program Files\ATK Hotkey\ATKOSD.exe
PRC - [2007-04-17 12:39:42 | 000,077,824 | ---- | M] () -- C:\Program Files\ATK Hotkey\KBFiltr.exe
PRC - [2007-01-16 15:13:14 | 000,106,496 | ---- | M] (ASUS) -- C:\WINDOWS\system32\ASUSTPE.exe
PRC - [2006-03-02 13:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2011-01-19 19:15:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\btn\Moje dokumenty\Pobieranie\OTL(3).exe
MOD - [2006-03-02 13:00:00 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011-01-07 19:45:24 | 000,326,224 | ---- | M] (Immunet) [On_Demand | Stopped] -- C:\Program Files\Immunet Protect\tetra\scan.dll -- (scan)
SRV - [2011-01-07 19:45:22 | 000,756,680 | ---- | M] (Immunet Corporation) [Auto | Running] -- C:\Program Files\Immunet Protect\2.0.17\agent.exe -- (ImmunetProtect)
SRV - [2010-11-04 17:18:10 | 000,033,584 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2010-11-04 17:15:50 | 000,810,144 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2010-05-03 18:01:00 | 003,658,096 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2007-10-23 18:35:40 | 000,364,629 | ---- | M] (Atheros) [Auto | Running] -- C:\WINDOWS\system32\acs.exe -- (ACS)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2011-01-07 19:45:25 | 000,041,424 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\ImmunetProtect.sys -- (ImmunetProtectDriver)
DRV - [2011-01-07 19:45:25 | 000,031,184 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\ImmunetSelfProtect.sys -- (ImmunetSelfProtectDriver)
DRV - [2011-01-07 19:45:24 | 000,036,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- c:\Program Files\Immunet Protect\tetra\trufos.sys -- (Trufos)
DRV - [2011-01-07 19:45:24 | 000,013,056 | ---- | M] () [Kernel | On_Demand | Stopped] -- c:\Program Files\Immunet Protect\tetra\profos.sys -- (Profos)
DRV - [2010-08-04 10:50:36 | 000,140,752 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2010-08-03 12:28:36 | 000,095,896 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2010-07-29 12:31:26 | 000,115,008 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2010-07-17 02:58:58 | 000,139,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2010-06-29 10:52:25 | 000,685,816 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2007-10-26 01:20:36 | 000,549,184 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2007-08-24 04:46:48 | 000,005,760 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2007-08-21 09:50:54 | 000,030,208 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l251x86.sys -- (AtcL002)
DRV - [2007-08-03 05:26:22 | 000,020,936 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys -- (ghaio)
DRV - [2007-07-03 18:46:24 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wsimd.sys -- (WSIMD)
DRV - [2007-02-02 08:03:24 | 001,975,296 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2007-01-24 11:08:40 | 000,005,632 | R--- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2006-11-22 10:35:00 | 000,982,272 | R--- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial)
DRV - [2006-11-03 02:32:30 | 004,394,496 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006-06-09 23:07:28 | 000,027,520 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTSTOR.sys -- (RTSTOR)
DRV - [2006-05-25 12:40:58 | 000,193,088 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2005-01-07 16:07:18 | 000,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus)
DRV - [2004-08-22 16:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt)
DRV - [2004-08-22 16:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus)
DRV - [2004-08-03 22:07:56 | 000,059,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1004336348-412668190-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2475029
IE - HKU\S-1-5-21-1004336348-412668190-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultthis.engineName: "MyAshampoo Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT2475029&SearchSource=13"
FF - prefs.js..extensions.enabledItems: searchrecs@veoh.com:1.5.2
FF - prefs.js..extensions.enabledItems: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4}:2.5.6.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}:5.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&q="
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-18 23:12:48 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-01-02 12:32:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011-01-18 22:07:07 | 000,000,000 | ---D | M]
[2010-05-10 19:24:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\btn\Dane aplikacji\Mozilla\Extensions
[2011-01-18 22:55:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\btn\Dane aplikacji\Mozilla\Firefox\Profiles\gw193bwf.default\extensions
[2010-09-16 06:57:24 | 000,000,000 | ---D | M] (MyAshampoo Toolbar) -- C:\Documents and Settings\btn\Dane aplikacji\Mozilla\Firefox\Profiles\gw193bwf.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
[2010-06-20 23:10:15 | 000,000,000 | ---D | M] (Veoh Video Compass) -- C:\Documents and Settings\btn\Dane aplikacji\Mozilla\Firefox\Profiles\gw193bwf.default\extensions\searchrecs@veoh.com
[2010-01-20 11:19:10 | 000,000,923 | ---- | M] () -- C:\Documents and Settings\btn\Dane aplikacji\Mozilla\Firefox\Profiles\gw193bwf.default\searchplugins\conduit.xml
[2011-01-18 22:55:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-01-03 21:40:27 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}
[2011-01-11 22:22:38 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2011-01-02 12:32:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011-01-02 12:32:41 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011-01-02 12:32:40 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010-04-01 18:33:11 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-04-01 18:33:11 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-04-01 18:33:11 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-04-01 18:33:11 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-04-01 18:33:11 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-04-01 18:33:11 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
O1 HOSTS File: ([2010-11-17 01:07:35 | 000,419,169 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 14466 more lines...
O4 - HKLM..\Run: [ACU] C:\Program Files\Atheros\ACU.exe (Atheros Communications, Inc.)
O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\WINDOWS\ASScrProlog.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\WINDOWS\ASScrPro.exe ()
O4 - HKLM..\Run: [ASUSTPE] C:\WINDOWS\system32\ASUSTPE.exe (ASUS)
O4 - HKLM..\Run: [ATKHOTKEY] C:\Program Files\ATK Hotkey\Hcontrol.exe ()
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ATKOSD2\ATKOSD2.exe ()
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [Immunet Protect] C:\Program Files\Immunet Protect\2.0.17\iptray.exe (Immunet)
O4 - HKLM..\Run: [SunJavaUpdateSched] File not found
O4 - HKLM..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1004336348-412668190-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1004336348-412668190-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm ()
O9 - Extra Button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm ()
O9 - Extra 'Tools' menuitem : Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm ()
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_21-windows-i586.cab (Java Plug-in 1.5.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.100
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\btn\Dane aplikacji\Mozilla\Firefox\Tapeta pulpitu.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\btn\Dane aplikacji\Mozilla\Firefox\Tapeta pulpitu.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-05-10 17:07:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2003-03-13 16:43:09 | 000,057,344 | R--- | M] () - F:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2003-04-06 22:17:02 | 000,000,042 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{30e34235-5c61-11df-a29d-0015af81f2cc}\Shell - "" = AutoRun
O33 - MountPoints2\{75730166-8364-11df-a28e-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{75730166-8364-11df-a28e-806d6172696f}\Shell\AutoRun\command - "" = F:\Autorun.exe -- [2003-03-13 16:43:09 | 000,057,344 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2011-01-19 18:25:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Menu Start\Programy\HiJackThis
[2011-01-18 22:06:51 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2011-01-18 22:06:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ESET
[2011-01-18 22:06:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2011-01-16 17:29:00 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\btn\Recent
[2011-01-11 22:30:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Dane aplikacji\OpenOffice.org
[2011-01-11 22:26:18 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\OpenOffice.org 3.2
[2011-01-11 22:23:26 | 000,000,000 | ---D | C] -- C:\Program Files\JRE
[2011-01-11 22:23:08 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3
[2011-01-11 22:22:33 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011-01-11 22:22:33 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011-01-11 22:22:33 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011-01-11 22:19:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Pulpit\OpenOffice.org 3.2 (pl) Installation Files
[2011-01-11 22:01:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Dane aplikacji\Thinstall
[2011-01-11 21:59:09 | 050,287,763 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\btn\Pulpit\PowerPoint2003PL(Portable).exe
[2011-01-07 19:46:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Dane aplikacji\Immunet
[2011-01-07 19:46:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Immunet
[2011-01-07 19:45:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Immunet Protect
[2011-01-07 19:45:33 | 000,031,184 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\System32\drivers\ImmunetSelfProtect.sys
[2011-01-07 19:45:27 | 000,041,424 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\System32\drivers\ImmunetProtect.sys
[2011-01-07 19:45:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2011-01-07 19:45:22 | 000,000,000 | ---D | C] -- C:\Program Files\Immunet Protect
[2011-01-07 16:19:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Menu Start\Programy\WinRAR
[2011-01-07 16:19:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\WinRAR
[2011-01-06 21:46:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Pulpit\LeagueOfLegends.EU.12_20_2010
[2011-01-03 21:39:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Ustawienia lokalne\Dane aplikacji\Sun
[2011-01-03 21:39:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\SourceTec
[2011-01-03 21:39:09 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4a.dll
[2011-01-03 21:39:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SourceTec
[2011-01-02 12:33:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sun
[2011-01-02 12:33:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011-01-02 12:32:55 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2011-01-02 12:32:55 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2011-01-02 12:32:35 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2011-01-02 12:32:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Dane aplikacji\Sun
[2010-12-29 01:12:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Pulpit\Pierdoły
[2010-12-29 01:12:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Pulpit\Gry
[2010-12-27 17:36:54 | 000,000,000 | ---D | C] -- C:\Program Files\Strategy First
[2010-12-27 17:36:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\btn\Menu Start\Programy\Strategy First
[2010-12-27 17:36:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Strategy First
[2010-12-27 00:36:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ID_STRING3
[2010-12-22 19:37:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Blizzard Entertainment
[2010-12-22 15:26:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Blizzard
[2010-12-20 22:06:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Google
[2010-06-29 10:53:39 | 000,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys
[2010-06-29 10:53:39 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys
[2010-05-17 21:11:44 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\btn\Dane aplikacji\pcouffin.sys
[2010-05-10 17:28:43 | 000,005,632 | R--- | C] ( ) -- C:\WINDOWS\System32\drivers\kbfiltr.sys
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2011-01-19 18:30:00 | 000,002,317 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\HiJackThis.lnk
[2011-01-19 06:49:54 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-01-18 22:17:38 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011-01-17 22:33:48 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-01-16 15:58:56 | 000,192,512 | ---- | M] () -- C:\Documents and Settings\btn\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-01-15 03:24:12 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-01-13 21:31:31 | 000,490,866 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-01-13 21:31:31 | 000,432,690 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-01-13 21:31:31 | 000,084,078 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-01-13 21:31:31 | 000,067,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-01-13 15:07:40 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2011-01-12 08:33:02 | 000,008,704 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\OKOK.ppt
[2011-01-12 08:17:00 | 000,121,336 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-01-11 23:05:47 | 000,487,936 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\Bąblowiec.ppt
[2011-01-11 22:51:56 | 000,288,284 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\Bez tytułu 1.odp
[2011-01-11 22:48:43 | 000,921,654 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\Echinococcus-3.bmp
[2011-01-11 22:26:18 | 000,000,923 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\OpenOffice.org 3.2.lnk
[2011-01-11 22:06:42 | 000,033,834 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\TasiemiecGlowka.jpg
[2011-01-11 22:04:41 | 000,021,221 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\wtf.jpg
[2011-01-10 18:48:27 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\SubEdit-Player.lnk
[2011-01-09 18:56:01 | 000,000,524 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\µTorrent.lnk
[2011-01-08 17:40:57 | 000,000,697 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk
[2011-01-07 19:46:18 | 000,000,796 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Immunet Protect.lnk
[2011-01-07 19:45:25 | 000,041,424 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\System32\drivers\ImmunetProtect.sys
[2011-01-07 19:45:25 | 000,031,184 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\System32\drivers\ImmunetSelfProtect.sys
[2011-01-07 16:54:23 | 000,000,592 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\foobar2000.lnk
[2011-01-07 16:26:06 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\Skrót do lol.launcher.lnk
[2011-01-07 16:20:35 | 000,000,639 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Sothink SWF Quicker.lnk
[2011-01-07 14:46:50 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\AQQ.lnk
[2011-01-07 01:02:26 | 000,000,716 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Play League of Legends.lnk
[2011-01-03 21:55:26 | 003,072,054 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\bez tytułu.bmp
[2011-01-03 21:22:35 | 000,711,553 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\rozenmaiden_16_1280.jpg
[2011-01-02 12:32:40 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011-01-02 12:32:40 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011-01-02 12:32:40 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011-01-02 12:32:40 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2011-01-02 12:32:39 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010-12-27 01:51:17 | 000,000,295 | ---- | M] () -- C:\Documents and Settings\btn\Pulpit\ID_STRING5.lnk
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2011-01-19 18:25:07 | 000,002,317 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\HiJackThis.lnk
[2011-01-12 08:33:01 | 000,008,704 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\OKOK.ppt
[2011-01-11 23:05:47 | 000,487,936 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\Bąblowiec.ppt
[2011-01-11 22:51:53 | 000,288,284 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\Bez tytułu 1.odp
[2011-01-11 22:48:42 | 000,921,654 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\Echinococcus-3.bmp
[2011-01-11 22:26:18 | 000,000,923 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\OpenOffice.org 3.2.lnk
[2011-01-11 22:06:42 | 000,033,834 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\TasiemiecGlowka.jpg
[2011-01-11 22:04:40 | 000,021,221 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\wtf.jpg
[2011-01-10 18:48:27 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\SubEdit-Player.lnk
[2011-01-09 18:56:01 | 000,000,524 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\µTorrent.lnk
[2011-01-07 19:46:18 | 000,000,796 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Immunet Protect.lnk
[2011-01-07 16:54:22 | 000,000,592 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\foobar2000.lnk
[2011-01-07 16:26:06 | 000,000,618 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\Skrót do lol.launcher.lnk
[2011-01-07 16:20:35 | 000,000,639 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Sothink SWF Quicker.lnk
[2011-01-07 01:02:26 | 000,000,716 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Play League of Legends.lnk
[2011-01-03 21:55:25 | 003,072,054 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\bez tytułu.bmp
[2011-01-03 21:22:33 | 000,711,553 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\rozenmaiden_16_1280.jpg
[2010-12-27 01:51:17 | 000,000,295 | ---- | C] () -- C:\Documents and Settings\btn\Pulpit\ID_STRING5.lnk
[2010-12-27 01:19:35 | 000,000,066 | ---- | C] () -- C:\Documents and Settings\btn\maestro-server.log
[2010-10-02 18:50:47 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010-08-30 23:10:05 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2010-07-17 02:58:58 | 000,139,336 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010-06-29 10:52:25 | 000,685,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2010-06-03 22:19:48 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2010-05-17 23:16:08 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-05-17 23:16:08 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010-05-17 23:15:59 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010-05-17 23:15:55 | 000,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-05-17 23:03:33 | 000,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010-05-17 23:03:27 | 000,207,360 | ---- | C] () -- C:\WINDOWS\System32\evrprop.dll
[2010-05-17 23:02:04 | 000,080,384 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll
[2010-05-17 23:02:04 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll
[2010-05-17 22:56:05 | 000,192,512 | ---- | C] () -- C:\Documents and Settings\btn\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-05-17 22:49:08 | 000,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-05-17 22:49:08 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010-05-17 21:11:51 | 000,000,034 | ---- | C] () -- C:\Documents and Settings\btn\Dane aplikacji\pcouffin.log
[2010-05-17 21:11:44 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\btn\Dane aplikacji\inst.exe
[2010-05-17 21:11:44 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\btn\Dane aplikacji\pcouffin.cat
[2010-05-17 21:11:44 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\btn\Dane aplikacji\pcouffin.inf
[2010-05-10 18:50:06 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-05-10 17:59:33 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
[2010-05-10 17:59:30 | 005,227,462 | ---- | C] () -- C:\Documents and Settings\btn\Ustawienia lokalne\Dane aplikacji\Install.exe
[2010-05-10 17:27:29 | 000,005,760 | R--- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys
[2006-03-02 13:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2004-08-22 16:04:56 | 000,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll
[color=#E56717]========== LOP Check ==========[/color]
[2011-01-18 22:17:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software
[2010-09-16 06:57:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2010-06-29 10:50:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2011-01-18 22:06:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2010-07-17 02:17:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\id Software
[2010-09-30 23:17:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IObit
[2010-07-14 00:18:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nexon
[2010-07-14 00:18:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NexonEU
[2011-01-07 00:23:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files
[2010-08-21 16:34:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TP-LINK
[2010-09-16 06:58:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\Ashampoo
[2010-06-29 10:50:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\DAEMON Tools Lite
[2011-01-18 20:09:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\EurekaLog
[2011-01-19 18:39:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\foobar2000
[2010-07-17 02:17:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\id Software
[2011-01-07 19:46:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\Immunet
[2010-12-20 21:54:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\IObit
[2010-05-21 13:40:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\LolClient
[2010-10-26 18:59:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\Mount&Blade
[2011-01-03 23:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\Mumble
[2011-01-11 22:30:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\OpenOffice.org
[2011-01-11 22:01:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\Thinstall
[2010-09-13 22:47:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\TS3Client
[2011-01-15 03:23:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\uTorrent
[2010-05-17 21:11:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\btn\Dane aplikacji\Vso
[color=#E56717]========== Purity Check ==========[/color]
< End of report >
eXTRA
- Kod: Zaznacz wszystko
OTL Extras logfile created on: 2011-01-19 19:22:46 - Run 1
OTL by OldTimer - Version 3.2.20.2 Folder = C:\Documents and Settings\btn\Moje dokumenty\Pobieranie
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 56,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 58,59 Gb Total Space | 40,36 Gb Free Space | 68,89% Space Free | Partition Type: NTFS
Drive D: | 127,71 Gb Total Space | 50,38 Gb Free Space | 39,45% Space Free | Partition Type: NTFS
Drive F: | 659,04 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: BTN-A21F458014C | User Name: btn | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
[HKEY_USERS\S-1-5-21-1004336348-412668190-725345543-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1"
https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1"
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[color=#E56717]========== System Restore Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"56736:TCP" = 56736:TCP:*:Enabled:Pando Media Booster
"56736:UDP" = 56736:UDP:*:Enabled:Pando Media Booster
"56196:TCP" = 56196:TCP:*:Enabled:Pando Media Booster
"56196:UDP" = 56196:UDP:*:Enabled:Pando Media Booster
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"56736:TCP" = 56736:TCP:*:Enabled:Pando Media Booster
"56736:UDP" = 56736:UDP:*:Enabled:Pando Media Booster
"8377:TCP" = 8377:TCP:*:Enabled:League of Legends Launcher
"8377:UDP" = 8377:UDP:*:Enabled:League of Legends Launcher
"8378:TCP" = 8378:TCP:*:Enabled:League of Legends Launcher
"8378:UDP" = 8378:UDP:*:Enabled:League of Legends Launcher
"8394:TCP" = 8394:TCP:*:Enabled:League of Legends Launcher
"8394:UDP" = 8394:UDP:*:Enabled:League of Legends Launcher
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"6908:TCP" = 6908:TCP:*:Enabled:League of Legends Launcher
"6908:UDP" = 6908:UDP:*:Enabled:League of Legends Launcher
"6929:TCP" = 6929:TCP:*:Enabled:League of Legends Launcher
"6929:UDP" = 6929:UDP:*:Enabled:League of Legends Launcher
"8395:TCP" = 8395:TCP:*:Enabled:League of Legends Launcher
"8395:UDP" = 8395:UDP:*:Enabled:League of Legends Launcher
"8396:TCP" = 8396:TCP:*:Enabled:League of Legends Launcher
"8396:UDP" = 8396:UDP:*:Enabled:League of Legends Launcher
"6970:TCP" = 6970:TCP:*:Enabled:League of Legends Launcher
"6970:UDP" = 6970:UDP:*:Enabled:League of Legends Launcher
"6904:TCP" = 6904:TCP:*:Enabled:League of Legends Launcher
"6904:UDP" = 6904:UDP:*:Enabled:League of Legends Launcher
"6995:TCP" = 6995:TCP:*:Enabled:League of Legends Launcher
"6995:UDP" = 6995:UDP:*:Enabled:League of Legends Launcher
"6902:TCP" = 6902:TCP:*:Enabled:League of Legends Launcher
"6902:UDP" = 6902:UDP:*:Enabled:League of Legends Launcher
"56196:TCP" = 56196:TCP:*:Enabled:Pando Media Booster
"56196:UDP" = 56196:UDP:*:Enabled:Pando Media Booster
"6981:TCP" = 6981:TCP:*:Enabled:League of Legends Launcher
"6981:UDP" = 6981:UDP:*:Enabled:League of Legends Launcher
"6942:TCP" = 6942:TCP:*:Enabled:League of Legends Launcher
"6942:UDP" = 6942:UDP:*:Enabled:League of Legends Launcher
"6980:TCP" = 6980:TCP:*:Enabled:League of Legends Launcher
"6980:UDP" = 6980:UDP:*:Enabled:League of Legends Launcher
"6967:TCP" = 6967:TCP:*:Enabled:League of Legends Launcher
"6967:UDP" = 6967:UDP:*:Enabled:League of Legends Launcher
"6943:TCP" = 6943:TCP:*:Enabled:League of Legends Launcher
"6943:UDP" = 6943:UDP:*:Enabled:League of Legends Launcher
"6953:TCP" = 6953:TCP:*:Enabled:League of Legends Launcher
"6953:UDP" = 6953:UDP:*:Enabled:League of Legends Launcher
"6978:TCP" = 6978:TCP:*:Enabled:League of Legends Launcher
"6978:UDP" = 6978:UDP:*:Enabled:League of Legends Launcher
"6889:TCP" = 6889:TCP:*:Enabled:League of Legends Launcher
"6889:UDP" = 6889:UDP:*:Enabled:League of Legends Launcher
"8393:TCP" = 8393:TCP:*:Enabled:League of Legends Lobby
"8393:UDP" = 8393:UDP:*:Enabled:League of Legends Lobby
"8390:TCP" = 8390:TCP:*:Enabled:League of Legends Game Client
"8390:UDP" = 8390:UDP:*:Enabled:League of Legends Game Client
"6921:TCP" = 6921:TCP:*:Enabled:League of Legends Launcher
"6921:UDP" = 6921:UDP:*:Enabled:League of Legends Launcher
[color=#E56717]========== Authorized Applications List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\Nowy folder\Combat Arms EU\CombatArms.exe" = D:\Nowy folder\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"D:\Nowy folder\Combat Arms EU\Engine.exe" = D:\Nowy folder\Combat Arms EU\Engine.exe:*Enabled:Engine.exe
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Program Files\uTorrent\uTorrent.exe" = D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"D:\Program Files\Ventrilo\Ventrilo.exe" = D:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe
"C:\Program Files\League of Legends\Air\LolClient.exe" = C:\Program Files\League of Legends\Air\LolClient.exe:*:Enabled:League of Legends Lobby
"C:\Program Files\League of Legends\Game\League of Legends.exe" = C:\Program Files\League of Legends\Game\League of Legends.exe:*:Enabled:League of Legends Game Client
"C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" = C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:*:Enabled:Veoh Web Player -- (Veoh Networks)
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes]
"C:\Documents and Settings\All Users\Dane aplikacji\NexonEU\NGM\NGM.exe" = C:\Documents and Settings\All Users\Dane aplikacji\NexonEU\NGM\NGM.exe:*:Enabled:Nexon Game Manager -- (Nexon)
"D:\Nowy folder\Combat Arms EU\CombatArms.exe" = D:\Nowy folder\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"D:\Nowy folder\Combat Arms EU\Engine.exe" = D:\Nowy folder\Combat Arms EU\Engine.exe:*Enabled:Engine.exe
"D:\Nowy folder\Combat Arms EU\NMService.exe" = D:\Nowy folder\Combat Arms EU\NMService.exe:*:Enabled:Nexon Messenger Core
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"D:\Program Files\air\LolClient.exe" = D:\Program Files\air\LolClient.exe:*:Enabled:League of Legends Lobby
"D:\Program Files\game\League of Legends.exe" = D:\Program Files\game\League of Legends.exe:*:Enabled:League of Legends Game Client
"D:\Riot Games\League of Legends\air\LolClient.exe" = D:\Riot Games\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby -- (Adobe Systems Inc.)
"D:\Riot Games\League of Legends\game\League of Legends.exe" = D:\Riot Games\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client -- ()
"D:\Riot Games\League of Legends\lol.launcher.exe" = D:\Riot Games\League of Legends\lol.launcher.exe:*:Enabled:League of Legends Launcher -- (Solid State Networks)
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FF2C26-DBCE-DADA-BEE5-0928E0F8F623}" = CCC Help German
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{05F4ABAC-8697-2291-16D8-4BFD7DD78B59}" = CCC Help Japanese
"{07C85A90-668F-A807-5C67-975E0777A9E8}" = Catalyst Control Center Localization Russian
"{0A755762-EED8-47AB-A446-505766F93D43}" = Atheros Communications Inc.(R) L2 Fast Ethernet Driver
"{0EA06F05-4320-E4DC-4374-E6C0986C964D}" = Catalyst Control Center Localization Finnish
"{12B4E2C0-8D67-408D-86DF-119BEAAD5308}" = Blowfish Advanced CS
"{137C5C08-8B6F-497A-1529-502359B3BA88}" = Catalyst Control Center Localization Polish
"{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}" = ATK Media
"{17EE76BB-5264-8946-DA8F-D564ED25EDDD}" = CCC Help English
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = LifeFrame2
"{1E2FDD18-E514-4631-AF4A-0CC58FD93DCB}" = Quake Live Mozilla Plugin
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216020F0}" = Java(TM) 6 Update 20
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23
"{27599825-6BD9-1081-D1CC-0BFC01157204}" = CCC Help Hungarian
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Client Installation Program
"{2E13776F-DEAF-7C83-C2A9-3BF073D51BFD}" = Catalyst Control Center Localization Swedish
"{3248F0A8-6813-11D6-A77B-00B0D0150210}" = J2SE Runtime Environment 5.0 Update 21
"{3482A5D0-F16D-A6C9-397F-8D85EA61BF93}" = Catalyst Control Center Localization Norwegian
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey
"{3C3CA756-9FB1-60D9-4435-6D9FEB42C637}" = Catalyst Control Center Localization Dutch
"{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}" = DAEMON Tools
"{3E4039F8-5DA8-0414-B7E1-8DA8C8FC1565}" = Catalyst Control Center Localization Thai
"{4462AD13-F2AA-4CBD-9F95-293C38EED870}" = Power4 Gear
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{48D4215F-414F-1554-8534-E3D8156C0666}" = Skins
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A0FAC3C-852D-C0A3-1715-6F844C184CF0}" = CCC Help Portuguese
"{4B29B49E-F274-58CE-25D2-791570F1619A}" = CCC Help French
"{4B546AE5-DF17-6D39-A846-A9ECD0153C9A}" = Catalyst Control Center Localization Greek
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57B15AD4-8C9D-4164-82BB-E33D8644E757}" = ASUS InstantFun
"{57EF4BC7-0C52-1872-C0CE-AEAB996E5626}" = Catalyst Control Center Localization Korean
"{5B701396-48C3-A3FA-43DB-FF975446759C}" = Catalyst Control Center Localization French
"{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2
"{5ECA8F33-8F8E-1042-2082-5F02E64D6140}" = CCC Help Polish
"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe
"{640BE6CD-9B4E-4FA4-98BC-E6975A30DC4F}" = ESET NOD32 Antivirus
"{68B84920-CD46-8C5B-DABE-EC0FF6F0C703}" = Catalyst Control Center Localization German
"{6AF75C96-2093-51F4-0412-501CB317A7F9}" = CCC Help Thai
"{6D219284-A368-A0A5-AA55-8BAAE9EA60CC}" = Catalyst Control Center Localization Japanese
"{732442CA-AFFC-E75D-C586-2A3C71D8CFFE}" = CCC Help Finnish
"{767EE8DA-A2AA-00A9-1A21-9584E00867B8}" = Catalyst Control Center Core Implementation
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{815B5312-F7B5-EDD5-A899-B0228C3C7F3A}" = CCC Help Turkish
"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2
"{857D4360-762B-978B-76AD-491AA719E47A}" = ccc-core-static
"{86552A3A-0437-319B-46C5-569FC9F7ACA9}" = ccc-utility
"{8727531E-6C58-4852-A90B-39CF45E269A9}" = OpenOffice.org 3.2
"{89EAD7B4-1CAC-CC9E-F040-FE041A2EA77C}" = Catalyst Control Center Localization Spanish
"{8BE3174F-3BFE-8822-4493-A0519D1E4E94}" = Catalyst Control Center Localization Portuguese
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{95C5F81D-0779-4932-BE83-32AAF814F4B9}" = League of Legends
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{9D7802F0-3C39-ED52-10D9-AE8A7FB5A94C}" = Catalyst Control Center Localization Hungarian
"{9E640C51-DB83-485B-8E3F-280BFD7D61C1}" = TP-LINK Wireless Client Utility
"{9F303CF8-2998-4541-C9F7-C3AAEC2B88B0}" = Catalyst Control Center Graphics Full Existing
"{A042FD6F-D051-ECE5-71C9-52ABFE36EBF9}" = Catalyst Control Center Localization Czech
"{A125DDDB-E0C0-08E0-F04C-7B5409DFFC79}" = Catalyst Control Center Graphics Light
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AB1E9EC2-42E4-E801-83BB-AAFF86DDEC7E}" = CCC Help Czech
"{AC76BA86-7AD7-1045-7B44-A93000000001}" = Adobe Reader 9.3.2 - Polish
"{B02A3921-F7B7-C73F-395B-8172C9EE4006}" = Catalyst Control Center Localization Italian
"{BD17DEF2-8970-E4F5-337A-C10DE4D33F29}" = CCC Help Korean
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C5A2542D-CF79-3EE6-7673-2CEDA2338172}" = CCC Help Greek
"{C69B9631-B617-B714-7FE2-6FCD5B891ACD}" = Catalyst Control Center Localization Chinese Traditional
"{C6D7BC96-A608-0908-F6E7-53C118423087}" = CCC Help Chinese Standard
"{C8A4038E-4DA5-879D-A353-7443FC3EE22C}" = CCC Help Spanish
"{C9B7D4A2-7A42-96BC-DE77-6EB23F1116A8}" = CCC Help Swedish
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE344E77-B015-C6D0-9A1B-0EA0043E7A52}" = CCC Help Russian
"{D3490D20-3AE0-459D-AAD6-59195140EAC2}_is1" = Sothink SWF Quicker
"{D88C3E7C-1DA6-4AD7-97FC-75BC8705B266}" = runtime
"{D9D45F79-D38C-9BCA-4023-6F3E365D5D25}" = CCC Help Dutch
"{DB891739-2EB3-45A8-9CBD-941C255CECD4}" = ASUS Touch Pad Extra
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DCE907E3-4D72-4CD3-A08A-BEFC8C7A5869}" = Branding
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{E4BCF2E7-B181-C240-B6EC-04A8FA633EEF}" = Catalyst Control Center Graphics Full New
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{E91EBA1F-DA25-58B2-365F-FB76BDC81F86}" = Catalyst Control Center Localization Turkish
"{EA2F03AD-BF9D-EECC-F24C-549046AEC17A}" = Catalyst Control Center Localization Danish
"{EE78C2A7-1413-105B-DC86-3F9FA6B10C2F}" = CCC Help Danish
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2AAE965-966C-104E-ECCD-9F111A83139C}" = CCC Help Italian
"{F3AEE6A8-5FA3-F9AA-8CA7-D1AAD6352065}" = Catalyst Control Center Localization Chinese Standard
"{F7F564DD-A790-D01A-5390-6D1386AA5621}" = CCC Help Norwegian
"{FD9B0D38-7B82-5A3A-E046-D8DBF3F06A93}" = CCC Help Chinese Traditional
"1Click DVD Converter_is1" = 1Click DVD Converter 2.1.5.7
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe flex sdk redistributed by sothink_is1" = 3.4.0.9271.1
"Advanced SystemCare 3_is1" = Advanced SystemCare 3
"All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI
"ALLPlayer_is1" = ALLPlayer V4.X
"AQQ" = WapSter AQQ
"Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.4
"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver
"ATI Display Driver" = ATI Display Driver
"CCleaner" = CCleaner
"Disciples 2 Gold Gallean" = Disciples 2 Gold Gallean
"Disciples II Rise of the Elves" = Disciples II Rise of the Elves
"Dungeon Keeper II" = Dungeon Keeper 2
"foobar2000" = foobar2000 v1.1.1
"Game Booster_is1" = Game Booster
"Garena" = Garena 2010
"Immunet Protect" = Immunet Protect
"KLiteCodecPack_is1" = K-Lite Codec Pack 4.8.5 (Full)
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mount&Blade" = Mount&Blade
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"Mumble" = Mumble and Murmur
"Nero7Lite_is1" = Nero 7 Lite
"Pizza Syndicate PL" = Pizza Syndicate PL
"PunkBusterSvc" = PunkBuster Services
"RealAlt_is1" = Real Alternative 2.0.2 Lite
"SMSERIAL" = Motorola SM56 Speakerphone Modem
"Spolszczenie" = Spolszczenie 1.0
"SubEdit-Player_is1" = SubEdit-Player
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Unlocker" = Unlocker 1.8.9
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.0.5
"Warcraft III Reign of Chaos & The Frozen Throne" = Warcraft III Reign of Chaos & The Frozen Throne
"WIC" = Windows Imaging Component
"WinRAR archiver" = Archiwizator WinRAR
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2010-11-25 12:57:56 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
Error - 2010-11-26 06:25:49 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
Error - 2010-11-28 16:00:19 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
Error - 2010-11-29 10:25:04 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
Error - 2010-11-30 12:01:19 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
Error - 2010-12-01 05:46:54 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
Error - 2010-12-01 11:40:26 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
Error - 2010-12-01 13:24:23 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
Error - 2010-12-01 15:08:08 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
Error - 2010-12-01 15:16:11 | Computer Name = BTN-A21F458014C | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
[ System Events ]
Error - 2011-01-15 19:06:26 | Computer Name = BTN-A21F458014C | Source = ACPIEC | ID = 327681
Description = \Device\ACPIEC: Sprzęt kontrolera osadzonego nie odpowiedział przed
upłynięciem limitu czasu. Może to wskazywać na błąd w sprzęcie lub oprogramowaniu
układowym kontrolera osadzonego. Możliwe również, że wadliwie zaprojektowany system
BIOS uzyskuje dostęp do kontrolera osadzonego w sposób, który nie jest bezpieczny.
Jeśli to możliwe, sterownik kontrolera osadzonego ponowi niepomyślną transakcję.
Error - 2011-01-15 22:27:59 | Computer Name = BTN-A21F458014C | Source = ACPIEC | ID = 327681
Description = \Device\ACPIEC: Sprzęt kontrolera osadzonego nie odpowiedział przed
upłynięciem limitu czasu. Może to wskazywać na błąd w sprzęcie lub oprogramowaniu
układowym kontrolera osadzonego. Możliwe również, że wadliwie zaprojektowany system
BIOS uzyskuje dostęp do kontrolera osadzonego w sposób, który nie jest bezpieczny.
Jeśli to możliwe, sterownik kontrolera osadzonego ponowi niepomyślną transakcję.
Error - 2011-01-16 09:31:25 | Computer Name = BTN-A21F458014C | Source = Service Control Manager | ID = 7031
Description = Usługa Immunet Protect niespodziewanie zakończyła pracę. Wystąpiło
to razy: 1. W przeciągu 300000 milisekund zostanie podjęta następująca czynność
korekcyjna: Uruchom usługę ponownie.
Error - 2011-01-16 10:57:08 | Computer Name = BTN-A21F458014C | Source = ACPIEC | ID = 327681
Description = \Device\ACPIEC: Sprzęt kontrolera osadzonego nie odpowiedział przed
upłynięciem limitu czasu. Może to wskazywać na błąd w sprzęcie lub oprogramowaniu
układowym kontrolera osadzonego. Możliwe również, że wadliwie zaprojektowany system
BIOS uzyskuje dostęp do kontrolera osadzonego w sposób, który nie jest bezpieczny.
Jeśli to możliwe, sterownik kontrolera osadzonego ponowi niepomyślną transakcję.
Error - 2011-01-16 12:26:44 | Computer Name = BTN-A21F458014C | Source = Service Control Manager | ID = 7031
Description = Usługa Immunet Protect niespodziewanie zakończyła pracę. Wystąpiło
to razy: 2. W przeciągu 900000 milisekund zostanie podjęta następująca czynność
korekcyjna: Uruchom usługę ponownie.
Error - 2011-01-17 15:17:00 | Computer Name = BTN-A21F458014C | Source = ACPIEC | ID = 327681
Description = \Device\ACPIEC: Sprzęt kontrolera osadzonego nie odpowiedział przed
upłynięciem limitu czasu. Może to wskazywać na błąd w sprzęcie lub oprogramowaniu
układowym kontrolera osadzonego. Możliwe również, że wadliwie zaprojektowany system
BIOS uzyskuje dostęp do kontrolera osadzonego w sposób, który nie jest bezpieczny.
Jeśli to możliwe, sterownik kontrolera osadzonego ponowi niepomyślną transakcję.
Error - 2011-01-17 15:17:28 | Computer Name = BTN-A21F458014C | Source = ACPIEC | ID = 327681
Description = \Device\ACPIEC: Sprzęt kontrolera osadzonego nie odpowiedział przed
upłynięciem limitu czasu. Może to wskazywać na błąd w sprzęcie lub oprogramowaniu
układowym kontrolera osadzonego. Możliwe również, że wadliwie zaprojektowany system
BIOS uzyskuje dostęp do kontrolera osadzonego w sposób, który nie jest bezpieczny.
Jeśli to możliwe, sterownik kontrolera osadzonego ponowi niepomyślną transakcję.
Error - 2011-01-18 17:11:57 | Computer Name = BTN-A21F458014C | Source = NetBT | ID = 4307
Description = Zainicjowanie nie powiodło się, ponieważ transport odmówił otwarcia
adresów początkowych.
Error - 2011-01-19 11:25:46 | Computer Name = BTN-A21F458014C | Source = Service Control Manager | ID = 7038
Description = Usługa SSDPSRV nie mogła zalogować się jako NT AUTHORITY\LocalService
z aktualnie skonfigurowanym hasłem z powodu następującego błędu: %%5 Aby upewnić
się, że usługa jest skonfigurowana właściwie, użyj przystawki Usługi w programie
Microsoft
Management Console (MMC).
Error - 2011-01-19 11:25:46 | Computer Name = BTN-A21F458014C | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Usługa odnajdywania SSDP z powodu następującego
błędu: %%1069
< End of report >
Dziękuje z góry za sprawdzenia i włożony czas jeśli coś wkleiłem źle to sory
