Laptop zwalnia, błąd licencji kasperskiego.

**Posty:** 4 · przez **klapkowy** 24 Kwi 2011, 21:30

Witam,

Chciałbym prosić o pomoc w naprawie kompa. Z każdym dniem sypie mi się coś w kompie, a niestety na format dysku nie stać mnie czasowo - na co dzień korzystam z programów graficznych, nietypowych fontów etc., czego reinstalacja zajęłaby mi wieki, toteż będę wdzięczny za pomoc. Generalnie co jakiś czas wyskakują mi nieoczekiwane błędy (zdarza się, ze są to błędy bez treści - jedynie z możliwością kliknięcia "ok"), laptop chodzi już okropnie wolno. Z takich poważniejszych usterek, to wyświetla mi się błąd licencji kasperskiego (po czym jest on zamykany) mimo że do jej wygaśnięcia brakuje ok. 9 miesięcy. Próbowałem przeskanować rejestr darmowymi programami do tego, ale nie dało to kompletnie nic. Poniżej zamieszczam loga. Będę wdzięczny za wszelką pomoc. (Skan z Hijack'a)

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:17:04, on 2011-04-24 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\System32\WLTRYSVC.EXE C:\WINDOWS\System32\bcmwltry.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\agrsmsvc.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\MP3 Rocket Toolbar\Mp3RocketSvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe C:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\SearchIndexer.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe C:\WINDOWS\Explorer.EXE C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\WLTRAY.exe E:\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICZE.EXE C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Windows Desktop Search\WindowsSearch.exe C:\Documents and Settings\marko\Dane aplikacji\Dropbox\bin\Dropbox.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Program Files\WapSter\WapSter AQQ\AQQ.exe C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\WINDOWS\system32\SearchProtocolHost.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15866&l=dis R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file) R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file) O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O3 - Toolbar: MP3 Rocket Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) O3 - Toolbar: Mp3Rocket Toolbar - {4C350B19-6CA1-4569-B14C-296D8D65300B} - "C:\Program Files\MP3 Rocket Toolbar\mp3rockettb.dll" (file missing) O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "E:\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "E:\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [BEWINTERNET-PL-IEWSessionManager] "C:\Program Files\OrangeBS\BEWInternet-PL-IEW\SessionManager\SessionManager.exe" O4 - HKLM\..\Run: [combofix] "C:\ComboFix\CF29148.cfxxe" /c "C:\ComboFix\C.bat" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [UniblueRegistryBooster] "C:\Program Files\Uniblue\RegistryBooster\launcher.exe" delay 20000 O4 - HKCU\..\Run: [EPSON B-300] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICZE.EXE /FU "C:\WINDOWS\TEMP\E_SC4.tmp" /EF "HKCU" O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Dropbox.lnk = C:\Documents and Settings\marko\Dane aplikacji\Dropbox\bin\Dropbox.exe O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Wyślij do interfejsu Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: &Klawiatura wirtualna - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll O9 - Extra button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\marko\Menu Start\Programy\IMVU\Run IMVU.lnk (file missing) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Usługa Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe O23 - Service: Usługa Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe O23 - Service: DisplayLink Service (DisplayLinkService) - DisplayLink Corp. - C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Mp3Rocket Toolbar Helper - Unknown owner - C:\Program Files\MP3 Rocket Toolbar\Mp3RocketSvc.exe O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE -- End of file - 15092 bytes

**Posty:** 18165 · przez **wojtas** 25 Kwi 2011, 11:04

Proszę zastosować się do obowiązkowych zasad w dziale bezpieczeństwo
- wstaw wymagane 3 logi (pamiętaj o emulacji)

**Posty:** 4 · przez **klapkowy** 25 Kwi 2011, 11:55

Przepraszam. Poniżej logi wykonane zgodnie z Waszymi instrukcjami:

OTL.txt

Kod: Zaznacz wszystko: OTL logfile created on: 2011-04-25 11:39:14 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\marko\Moje dokumenty\Downloads Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 71,00% Memory free 5,00 Gb Paging File | 4,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,81 Gb Total Space | 1,97 Gb Free Space | 6,61% Space Free | Partition Type: NTFS Drive D: | 134,68 Gb Total Space | 42,60 Gb Free Space | 31,63% Space Free | Partition Type: NTFS Drive E: | 133,60 Gb Total Space | 27,16 Gb Free Space | 20,33% Space Free | Partition Type: NTFS Computer Name: MARKO-7CB2DC3AF | User Name: marko | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-04-25 11:35:46 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\marko\Moje dokumenty\Downloads\OTL.exe PRC - [2011-04-13 02:51:02 | 001,004,088 | ---- | M] (Google Inc.) -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe PRC - [2011-04-07 12:34:04 | 008,882,688 | ---- | M] (Creative Team S.A.) -- C:\Program Files\WapSter\WapSter AQQ\AQQ.exe PRC - [2010-11-02 23:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe PRC - [2010-10-27 22:21:54 | 001,155,072 | ---- | M] (Last.fm) -- C:\Program Files\Last.fm\LastFM.exe PRC - [2010-06-23 01:37:32 | 000,275,112 | ---- | M] () -- C:\Program Files\MP3 Rocket Toolbar\Mp3RocketSvc.exe PRC - [2010-04-09 13:04:49 | 000,181,312 | ---- | M] () -- C:\Program Files\Photodex\ProShowProducer\scsiaccess.exe PRC - [2010-02-26 07:10:20 | 021,979,992 | ---- | M] () -- C:\Documents and Settings\marko\Dane aplikacji\Dropbox\bin\Dropbox.exe PRC - [2009-03-10 07:47:48 | 000,492,904 | ---- | M] (DisplayLink Corp.) -- C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe PRC - [2009-03-10 07:47:47 | 000,447,848 | ---- | M] (DisplayLink Corp.) -- C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe PRC - [2009-03-10 07:47:44 | 004,711,784 | ---- | M] (DisplayLink Corp.) -- C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe PRC - [2009-01-09 19:51:18 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin PRC - [2009-01-09 19:50:10 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe PRC - [2008-08-04 01:04:00 | 001,345,376 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe PRC - [2008-06-11 23:43:26 | 000,640,376 | ---- | M] (Adobe Systems Inc.) -- E:\Adobe\Acrobat 9.0\Acrobat\acrotray.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-03-18 12:27:12 | 000,013,312 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\agrsmsvc.exe PRC - [2008-03-17 07:00:00 | 000,185,856 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATICZE.EXE PRC - [2007-07-24 11:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-04-25 11:35:46 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\marko\Moje dokumenty\Downloads\OTL.exe MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt) SRV - [2010-11-02 23:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe -- (AVP) SRV - [2010-06-23 01:37:32 | 000,275,112 | ---- | M] () [Auto | Running] -- C:\Program Files\MP3 Rocket Toolbar\Mp3RocketSvc.exe -- (Mp3Rocket Toolbar Helper) SRV - [2010-04-09 13:04:49 | 000,181,312 | ---- | M] () [Auto | Running] -- C:\Program Files\Photodex\ProShowProducer\scsiaccess.exe -- (ScsiAccess) SRV - [2009-10-30 19:03:14 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009-03-10 07:47:47 | 000,447,848 | ---- | M] (DisplayLink Corp.) [Auto | Running] -- C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe -- (DisplayLinkService) SRV - [2008-08-15 06:46:20 | 000,284,016 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe -- (Adobe Version Cue CS4) SRV - [2008-03-18 12:27:12 | 000,013,312 | ---- | M] (Agere Systems) [Auto | Running] -- C:\WINDOWS\system32\agrsmsvc.exe -- (AgereModemAudio) SRV - [2007-07-24 11:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-04-25 11:28:12 | 000,443,448 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2011-01-11 23:13:33 | 000,475,736 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF) DRV - [2010-11-24 01:22:42 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DrvAgent32.sys -- (DrvAgent32) DRV - [2010-10-30 15:20:26 | 000,052,824 | ---- | M] (NCH Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\stdriver32.sys -- (stdriver) DRV - [2010-06-09 17:43:52 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl2.sys -- (kl2) DRV - [2010-06-09 17:43:50 | 000,132,184 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\kl1.sys -- (KL1) DRV - [2010-05-07 12:06:26 | 000,032,856 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5) DRV - [2009-11-02 20:27:24 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt) DRV - [2009-09-07 20:14:17 | 001,952,512 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX) DRV - [2009-09-06 18:17:43 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2009-09-06 18:17:43 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009-08-04 13:04:28 | 000,102,656 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbfake.sys -- (hwusbfake) DRV - [2009-08-04 13:04:28 | 000,102,400 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2009-08-04 11:04:26 | 000,034,688 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcampr5.sys -- (PCAMPR5) DRV - [2009-08-04 11:04:26 | 000,032,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcandis5.sys -- (PCANDIS5) DRV - [2009-03-19 11:40:10 | 000,009,216 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey) DRV - [2008-05-09 01:00:00 | 002,880,512 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008-04-14 18:22:40 | 000,800,000 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dmboot.sys -- (dmboot) DRV - [2008-04-04 10:57:00 | 000,296,320 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp) DRV - [2008-04-03 16:40:44 | 000,879,624 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2008-04-03 16:40:44 | 000,539,512 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio) DRV - [2008-04-03 16:40:44 | 000,156,392 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS) DRV - [2008-04-03 16:40:44 | 000,074,688 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2008-04-03 16:40:44 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2008-03-28 10:14:02 | 000,024,064 | ---- | M] (Sonic Focus, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfaudio.sys -- (SFAUDIO) DRV - [2008-03-21 12:13:00 | 001,203,776 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2007-06-18 17:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2006-09-24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan) DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15866&l=dis IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - File not found IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Ask.com" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl" FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.8.0.99999 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3 FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.60 FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.52 FF - prefs.js..extensions.enabledItems: smarterwiki@wikiatic.com:4.3.5 FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.5.4 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:11.0.2.556 FF - prefs.js..extensions.enabledItems: mp3rocket@mp3rocket.com:1.0 FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1 FF - prefs.js..extensions.enabledItems: pl@dictionaries.addons.mozilla.org:1.0.20110211 FF - prefs.js..extensions.enabledItems: {c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.9 FF - prefs.js..extensions.enabledItems: {07b2a769-ed19-4483-87ce-c643914c9626}:1.6 FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=MP3R7&o=15863&locale=en_US&apn_uid=03F30100-9259-4740-9075-08E7CF9FA98F&apn_ptnrs=RV&apn_sauid=E6FBC408-B9E0-48C5-B8F7-3693DBF9D3AB&apn_dtid=YYYYYYYYPL&q=" FF - HKLM\software\mozilla\Mozilla Firefox 3.5.18\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-03-24 04:34:36 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.18\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-03-24 04:34:36 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011-03-07 01:22:20 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011-01-13 22:21:33 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Extensions [2011-01-13 22:21:33 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010-06-07 23:55:58 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Extensions\IMVUClientXUL@imvu.com [2011-04-23 16:30:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions [2010-09-14 23:11:13 | 000,000,000 | ---D | M] (ANTHEM) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{07b2a769-ed19-4483-87ce-c643914c9626} [2011-01-08 10:47:41 | 000,000,000 | ---D | M] (Web Developer) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12} [2010-12-25 00:08:37 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-12-11 17:30:39 | 000,000,000 | ---D | M] ("BitDefender QuickScan") -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2010-01-23 15:57:55 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2010-05-07 12:46:41 | 000,000,000 | ---D | M] (Firebug) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\firebug@software.joehewitt.com [2010-09-14 23:04:53 | 000,000,000 | ---D | M] (Personas) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\personas@christopher.beard [2011-03-24 01:06:08 | 000,000,000 | ---D | M] (Polski slownik poprawnej pisowni) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\pl@dictionaries.addons.mozilla.org [2011-03-24 01:06:03 | 000,000,000 | ---D | M] (FastestFox) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\smarterwiki@wikiatic.com [2010-11-03 21:17:13 | 000,000,000 | ---D | M] ("MP3 Rocket Toolbar") -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\toolbar@ask.com [2011-04-23 16:21:18 | 000,002,567 | ---- | M] () -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\searchplugins\askcom.xml [2009-10-18 16:36:20 | 000,000,523 | ---- | M] () -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\searchplugins\daemon-search.xml [2011-04-23 16:30:51 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-02-26 14:22:15 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-07-02 01:31:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2011-01-16 15:36:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-03-22 21:37:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-01-11 23:15:58 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2010-10-30 13:12:06 | 000,000,000 | ---D | M] (MP3Rocket Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\mp3rocket@mp3rocket.com [2009-10-12 10:31:40 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2010-01-30 10:35:06 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [2006-12-11 20:13:02 | 000,061,440 | ---- | M] (Multimedia Cafe www.mmcafe.pl) -- C:\Program Files\Mozilla Firefox\plugins\npcnmozillainterface.dll [2011-02-02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2009-07-31 00:44:16 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-07-31 00:44:16 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-07-31 00:44:16 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2011-04-25 11:30:44 | 000,045,258 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\Mp3Rocket.xml [2011-04-25 11:30:44 | 000,045,238 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\Mp3Rocket.xml.bak [2009-07-31 00:44:16 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-07-31 00:44:16 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-07-31 00:44:16 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-03-13 19:14:55 | 000,001,407 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 16 more lines... O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Adobe\/Adobe Contribute CS4/contributeieplugin.dll () O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (MP3 Rocket Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - File not found O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Mp3Rocket Toolbar) - {4C350B19-6CA1-4569-B14C-296D8D65300B} - C:\Program Files\MP3 Rocket Toolbar\mp3rockettb.dll (Mp3Rocket) O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Adobe\/Adobe Contribute CS4/contributeieplugin.dll () O3 - HKLM\..\Toolbar: (MP3 Rocket Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - File not found O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKCU\..\Toolbar\WebBrowser: (MP3 Rocket Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - File not found O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Acrobat Assistant 8.0] E:\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] E:\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe_ID0ENQBO] C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe (Kaspersky Lab ZAO) O4 - HKLM..\Run: [BEWINTERNET-PL-IEWSessionManager] File not found O4 - HKLM..\Run: [combofix] File not found O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKCU..\Run: [ALLUpdate] File not found O4 - HKCU..\Run: [EPSON B-300] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICZE.EXE (SEIKO EPSON CORPORATION) O4 - HKCU..\Run: [UniblueRegistryBooster] File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O4 - Startup: C:\Documents and Settings\marko\Menu Start\Programy\Autostart\Dropbox.lnk = C:\Documents and Settings\marko\Dane aplikacji\Dropbox\bin\Dropbox.exe () O4 - Startup: C:\Documents and Settings\marko\Menu Start\Programy\Autostart\OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Wyślij do interfejsu Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O9 - Extra Button: &Klawiatura wirtualna - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.) O9 - Extra Button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\mzvkbd3.dll (Kaspersky Lab ZAO) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-05 16:20:47 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{122ab7b2-6b1f-11e0-b0d8-0022645cefdc}\Shell - "" = AutoRun O33 - MountPoints2\{122ab7b2-6b1f-11e0-b0d8-0022645cefdc}\Shell\AutoRun\command - "" = H:\MicroLauncher.exe O33 - MountPoints2\{29d3dad7-a2a3-11de-ae97-002186b6810f}\Shell - "" = AutoRun O33 - MountPoints2\{29d3dad7-a2a3-11de-ae97-002186b6810f}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -a O33 - MountPoints2\{42e02cca-a8b6-11df-afeb-0022645cefdc}\Shell - "" = AutoRun O33 - MountPoints2\{42e02cca-a8b6-11df-afeb-0022645cefdc}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{6a126fc3-022d-11df-af1f-002186b6810f}\Shell - "" = AutoRun O33 - MountPoints2\{6a126fc3-022d-11df-af1f-002186b6810f}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a O33 - MountPoints2\{a334cc52-4aeb-11e0-b0b4-0022645cefdc}\Shell - "" = AutoRun O33 - MountPoints2\{a334cc52-4aeb-11e0-b0b4-0022645cefdc}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{a334cc55-4aeb-11e0-b0b4-0022645cefdc}\Shell - "" = AutoRun O33 - MountPoints2\{a334cc55-4aeb-11e0-b0b4-0022645cefdc}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{a334cc63-4aeb-11e0-b0b4-0022645cefdc}\Shell - "" = AutoRun O33 - MountPoints2\{a334cc63-4aeb-11e0-b0b4-0022645cefdc}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{b1dfcf4a-b9af-11de-aec8-002186b6810f}\Shell\AutoRun\command - "" = H:\p6xebrnt.exe O33 - MountPoints2\{b1dfcf4a-b9af-11de-aec8-002186b6810f}\Shell\open\Command - "" = H:\p6xebrnt.exe O33 - MountPoints2\{ea0af3d9-ee93-11df-b021-0022645cefdc}\Shell\AutoRun\command - "" = H:\APPInst.exe O33 - MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\Shell\autoPlAy\comMand - "" = H:\unsyys.exe O33 - MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\Shell\AutoRun\command - "" = H:\unsyys.exe O33 - MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\Shell\explORE\COmmAND - "" = H:\unsyys.exe O33 - MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\Shell\oPEn\CommanD - "" = H:\unsyys.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-04-24 21:12:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\HijackThis [2011-04-24 21:02:27 | 000,000,000 | ---D | C] -- C:\Program Files\TweakNow RegCleaner Std [2011-04-24 21:02:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\TweakNow RegCleaner Std [2011-04-24 21:01:16 | 001,068,608 | ---- | C] (TweakNow.com ) -- C:\Documents and Settings\marko\Pulpit\RegCleaner.exe [2011-04-21 14:31:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix _data [2011-04-20 14:54:43 | 000,034,688 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\pcampr5.sys [2011-04-20 14:54:43 | 000,032,128 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\pcandis5.sys [2011-04-20 14:54:26 | 000,000,000 | ---D | C] -- C:\Program Files\OrangeBS [2011-04-20 14:54:03 | 000,102,400 | R--- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys [2011-04-20 14:53:25 | 000,102,656 | R--- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbfake.sys [2011-04-20 14:53:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\France Telecom [2011-04-08 11:16:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\marko\Pulpit\druki [2011-03-31 12:14:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\marko\Pulpit\Esej dla Kassandry [2011-03-28 12:49:19 | 000,000,000 | ---D | C] -- C:\Program Files\PowerDataRecovery [33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-04-25 11:30:57 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-04-25 11:30:43 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2011-04-25 11:30:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-04-25 11:29:22 | 013,893,632 | ---- | M] () -- C:\Documents and Settings\marko\ntuser.dat [2011-04-25 11:29:22 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\marko\ntuser.ini [2011-04-25 11:28:12 | 000,443,448 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys [2011-04-25 09:38:53 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{90DE9089-0E63-49B0-9CBF-FB3D811424E3}.job [2011-04-25 01:05:00 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-299502267-725345543-1004UA.job [2011-04-24 21:02:27 | 000,001,685 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TweakNow RegCleaner Std.lnk [2011-04-24 21:01:18 | 001,068,608 | ---- | M] (TweakNow.com ) -- C:\Documents and Settings\marko\Pulpit\RegCleaner.exe [2011-04-24 09:39:38 | 000,031,232 | ---- | M] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-04-24 09:27:18 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-04-22 15:05:02 | 000,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-299502267-725345543-1004Core.job [2011-04-22 11:58:27 | 000,003,088 | -HS- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys [2011-04-21 14:39:23 | 003,202,847 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\woman.mp3 [2011-04-21 14:38:47 | 000,011,789 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix .aup [2011-04-21 14:27:46 | 000,000,630 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\Audacity.lnk [2011-04-21 14:18:33 | 003,400,547 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix .mp3 [2011-04-20 14:45:43 | 000,000,823 | ---- | M] () -- C:\Documents and Settings\marko\.recently-used.xbel [2011-04-20 08:43:44 | 002,749,408 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-04-19 14:36:20 | 000,123,272 | ---- | M] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2011-04-18 16:08:43 | 000,003,644 | ---- | M] () -- C:\WINDOWS\wincmd.ini [2011-04-18 15:53:18 | 000,001,443 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini [2011-04-14 21:30:59 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-04-14 21:29:57 | 000,742,974 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-04-14 21:29:57 | 000,624,948 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-04-14 21:29:57 | 000,215,874 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-04-14 21:29:57 | 000,162,096 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011-04-14 21:29:57 | 000,005,590 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2011-04-08 22:30:21 | 000,038,848 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\O nas.rtf [2011-04-08 11:51:18 | 000,000,151 | ---- | M] () -- C:\WINDOWS\fcp5.cfg [2011-04-06 10:39:17 | 000,531,774 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0154.jpg [2011-04-06 10:39:16 | 000,692,119 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0148.jpg [2011-04-06 10:39:15 | 000,506,169 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0134.jpg [2011-04-06 10:39:13 | 000,110,277 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0125.jpg [2011-04-06 10:39:08 | 000,610,430 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0126.jpg [2011-04-04 18:02:04 | 000,115,267 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat [2011-04-04 18:02:04 | 000,097,859 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat [2011-03-31 02:59:42 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-04-24 21:02:27 | 000,001,685 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\TweakNow RegCleaner Std.lnk [2011-04-21 14:38:59 | 003,202,847 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\woman.mp3 [2011-04-21 14:31:08 | 000,011,789 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix .aup [2011-04-21 14:27:46 | 000,000,636 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Audacity.lnk [2011-04-21 14:27:46 | 000,000,630 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\Audacity.lnk [2011-04-21 14:18:20 | 003,400,547 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix .mp3 [2011-04-20 14:45:43 | 000,000,823 | ---- | C] () -- C:\Documents and Settings\marko\.recently-used.xbel [2011-04-08 22:30:21 | 000,038,848 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\O nas.rtf [2011-04-06 10:39:13 | 000,531,774 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0154.jpg [2011-04-06 10:39:11 | 000,692,119 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0148.jpg [2011-04-06 10:39:10 | 000,506,169 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0134.jpg [2011-04-06 10:39:09 | 000,110,277 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0125.jpg [2011-04-06 10:39:05 | 000,610,430 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0126.jpg [2011-01-11 23:15:42 | 000,115,267 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat [2011-01-11 23:15:42 | 000,097,859 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat [2010-10-02 14:40:55 | 000,000,055 | ---- | C] () -- C:\WINDOWS\videotoaudio.ini [2010-10-02 14:39:57 | 000,000,005 | ---- | C] () -- C:\WINDOWS\System32\SySmtm.dat [2010-07-04 11:16:52 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010-05-29 00:42:59 | 000,668,160 | ---- | C] () -- C:\WINDOWS\is-Q4VLO.exe [2010-02-25 04:38:52 | 000,000,014 | ---- | C] () -- C:\WINDOWS\hpmssnpjt.ini [2010-01-17 00:36:36 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-01-08 12:35:08 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\BioPdf.PdfWriter.Lib.dll [2009-12-14 04:20:38 | 000,000,054 | ---- | C] () -- C:\Documents and Settings\marko\Dane aplikacji\AVSDVDPlayer.m3u [2009-12-14 02:04:59 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\marko\Dane aplikacji\AVSMediaPlayer.m3u [2009-12-14 01:45:25 | 000,000,067 | ---- | C] () -- C:\WINDOWS\DVDRegionFree.INI [2009-10-18 16:27:02 | 000,443,448 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-09-11 08:19:05 | 000,001,443 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini [2009-09-09 19:01:40 | 000,027,675 | ---- | C] () -- C:\WINDOWS\System32\drivers\klopp.dat [2009-09-08 00:19:08 | 000,003,088 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys [2009-09-08 00:19:08 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\DBFB157B15.sys [2009-09-07 20:22:36 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SMWizard.INI [2009-09-07 20:14:25 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll [2009-09-07 20:14:25 | 000,025,088 | ---- | C] () -- C:\WINDOWS\System32\WLTRYSVC.EXE [2009-09-07 20:14:24 | 000,757,760 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll [2009-09-07 19:21:25 | 000,031,232 | ---- | C] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-09-06 19:26:03 | 000,000,048 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2009-09-06 18:17:43 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2009-09-06 18:17:43 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2009-09-06 14:32:15 | 000,000,000 | ---- | C] () -- C:\WINDOWS\HPMProp.INI [2009-09-06 13:57:41 | 000,000,880 | ---- | C] () -- C:\WINDOWS\HBCIKRNL.INI [2009-09-06 12:08:33 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2009-09-06 11:18:09 | 000,003,644 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-09-05 18:25:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2009-09-05 18:16:56 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll [2009-09-05 18:10:42 | 000,005,590 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-09-05 18:10:41 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009-09-05 18:09:27 | 002,749,408 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-09-05 17:49:35 | 000,123,272 | ---- | C] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-09-05 17:05:42 | 006,391,744 | -H-- | C] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-09-05 16:47:33 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-09-05 16:27:49 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2009-09-05 16:23:52 | 000,001,112 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2009-09-05 16:20:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2009-09-05 16:19:54 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2009-09-05 16:19:50 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2009-09-05 16:18:14 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009-09-05 16:18:00 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2009-09-05 16:18:00 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2009-09-05 16:17:03 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2009-09-05 16:17:02 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2008-05-26 22:22:36 | 000,016,222 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini [2008-05-26 22:22:34 | 000,021,728 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini [2008-05-26 22:22:32 | 000,016,164 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini [2008-05-26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin [2008-05-26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin [2008-05-08 21:48:46 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2008-05-08 21:48:46 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2008-05-08 21:48:46 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2008-03-31 14:30:34 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll [2008-03-06 10:40:54 | 000,168,883 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2005-02-17 12:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest [2005-02-17 12:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest [2004-08-04 14:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2004-08-04 14:00:00 | 000,742,974 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2004-08-04 14:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2004-08-04 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2004-08-04 14:00:00 | 000,624,948 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2004-08-04 14:00:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2004-08-04 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2004-08-04 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2004-08-04 14:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2004-08-04 14:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2004-08-04 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2004-08-04 14:00:00 | 000,215,874 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2004-08-04 14:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2004-08-04 14:00:00 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2004-08-04 14:00:00 | 000,162,096 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2004-08-04 14:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2004-08-04 14:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2004-08-04 14:00:00 | 000,070,622 | ---- | C] () -- C:\WINDOWS\System32\edit.com [2004-08-04 14:00:00 | 000,053,920 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe [2004-08-04 14:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2004-08-04 14:00:00 | 000,051,823 | ---- | C] () -- C:\WINDOWS\System32\command.com [2004-08-04 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2004-08-04 14:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2004-08-04 14:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2004-08-04 14:00:00 | 000,039,434 | ---- | C] () -- C:\WINDOWS\System32\mem.exe [2004-08-04 14:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2004-08-04 14:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2004-08-04 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2004-08-04 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2004-08-04 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2004-08-04 14:00:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2004-08-04 14:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2004-08-04 14:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2004-08-04 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2004-08-04 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2004-08-04 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2004-08-04 14:00:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2004-08-04 14:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2004-08-04 14:00:00 | 000,020,986 | ---- | C] () -- C:\WINDOWS\System32\debug.exe [2004-08-04 14:00:00 | 000,019,806 | ---- | C] () -- C:\WINDOWS\System32\graphics.com [2004-08-04 14:00:00 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2004-08-04 14:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2004-08-04 14:00:00 | 000,014,913 | ---- | C] () -- C:\WINDOWS\System32\kb16.com [2004-08-04 14:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2004-08-04 14:00:00 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2004-08-04 14:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [2004-08-04 14:00:00 | 000,012,866 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe [2004-08-04 14:00:00 | 000,012,594 | ---- | C] () -- C:\WINDOWS\System32\append.exe [2004-08-04 14:00:00 | 000,011,859 | ---- | C] () -- C:\WINDOWS\System32\setver.exe [2004-08-04 14:00:00 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2004-08-04 14:00:00 | 000,008,520 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe [2004-08-04 14:00:00 | 000,007,116 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe [2004-08-04 14:00:00 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2004-08-04 14:00:00 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2004-08-04 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2004-08-04 14:00:00 | 000,003,346 | ---- | C] () -- C:\WINDOWS\System32\redir.exe [2004-08-04 14:00:00 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2004-08-04 14:00:00 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2004-08-04 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2004-08-04 14:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2004-08-04 14:00:00 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2004-08-04 14:00:00 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com [2004-08-04 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe [2004-08-04 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe [2004-08-04 14:00:00 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe [2004-08-04 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2004-08-04 14:00:00 | 000,000,642 | ---- | C] () -- C:\WINDOWS\win.ini [2004-08-04 14:00:00 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2004-08-04 14:00:00 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2003-07-30 11:48:28 | 000,004,711 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2003-07-30 10:49:22 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2002-03-19 01:18:54 | 000,120,832 | ---- | C] () -- C:\WINDOWS\System32\LAME_ENC.DLL [2001-11-14 13:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll [2001-10-26 19:29:54 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe [2001-10-26 19:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [2001-03-30 22:58:36 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\Property.dll [1996-04-03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys [color=#E56717]========== LOP Check ==========[/color] [2010-07-09 14:51:00 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ [2011-03-14 14:36:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EPSON [2009-10-06 19:39:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm [2010-10-30 16:38:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound [2009-12-15 21:38:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-01-08 12:36:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PDF Writer [2010-04-09 12:44:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Photodex [2011-04-24 20:34:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Soulseek [2009-12-15 21:19:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl [2011-02-22 02:49:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TmForever [2010-10-14 18:50:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2009-12-11 03:36:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2010-05-29 00:31:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\BESTplayer [2009-09-10 10:52:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Bitstream [2009-12-05 20:26:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\com.adobe.ExMan [2010-03-13 19:20:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2009-10-18 16:26:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\DAEMON Tools [2011-04-25 11:33:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Dropbox [2011-03-14 14:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\EPSON [2010-01-27 01:59:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\EurekaLog [2009-10-17 15:06:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\FindeXer [2011-03-19 22:39:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\FontCreator [2010-11-21 02:05:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\foobar2000 [2009-12-15 21:31:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Gadu-Gadu 10 [2011-01-24 02:28:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\gtk-2.0 [2011-03-25 21:41:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\inkscape [2011-02-09 23:20:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Klipfolio [2010-10-30 13:15:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\MP3Rocket [2010-10-30 13:12:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Mp3Rocket Toolbar [2010-10-30 15:20:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\NCH Swift Sound [2010-04-09 12:44:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Netscape [2011-03-21 01:17:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Notepad++ [2009-09-06 18:01:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Nowe Gadu-Gadu [2010-11-05 03:59:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Nvu [2009-12-15 21:36:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\OpenFM [2009-09-11 02:35:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\OpenOffice.org [2011-02-05 15:20:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Opera [2010-07-04 13:21:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\cenzura! Culture Foundation [2011-01-24 02:28:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\PCF-VLC [2010-01-08 12:36:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\PDF Writer [2010-04-09 13:21:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Photodex [2010-04-23 15:19:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Program Files [2010-12-09 12:41:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\QuickScan [2010-04-03 18:26:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Thinstall [2011-01-13 22:21:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Thunderbird [2011-02-26 00:37:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Tlen.pl [2010-01-29 20:33:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Uniblue [2011-01-05 15:13:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\vimeo.Duplo.3E2F2984357E7A95AE95C69EF2C5C14640284048.1 [2010-06-08 00:00:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Vivox [2009-10-12 12:26:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Windows Desktop Search [2009-10-17 15:59:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Windows Search [2011-04-25 09:38:53 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{90DE9089-0E63-49B0-9CBF-FB3D811424E3}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >

extras.txt

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-04-25 11:39:14 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\marko\Moje dokumenty\Downloads Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 71,00% Memory free 5,00 Gb Paging File | 4,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,81 Gb Total Space | 1,97 Gb Free Space | 6,61% Space Free | Partition Type: NTFS Drive D: | 134,68 Gb Total Space | 42,60 Gb Free Space | 31,63% Space Free | Partition Type: NTFS Drive E: | 133,60 Gb Total Space | 27,16 Gb Free Space | 20,33% Space Free | Partition Type: NTFS Computer Name: MARKO-7CB2DC3AF | User Name: marko | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "5353:TCP" = 5353:TCP:*:Enabled:Adobe CSI CS4 "3703:TCP" = 3703:TCP:*:Enabled:Adobe Version Cue CS4 Server "3704:TCP" = 3704:TCP:*:Enabled:Adobe Version Cue CS4 Server "51000:TCP" = 51000:TCP:*:Enabled:Adobe Version Cue CS4 Server "51001:TCP" = 51001:TCP:*:Enabled:Adobe Version Cue CS4 Server "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\totalcmd\TOTALCMD.EXE" = C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows -- (C. Ghisler & Co.) "C:\Program Files\SoulseekNS\slsk.exe" = C:\Program Files\SoulseekNS\slsk.exe:*:Enabled:SoulSeek -- () "C:\Documents and Settings\marko\Pulpit\www\mov_amp_Joomla_1.5.14_PL\Mov'AMP - Joomla 1.5.14_PL\mnt\usr\local\apache2\bin\Apache.exe" = C:\Documents and Settings\marko\Pulpit\www\mov_amp_Joomla_1.5.14_PL\Mov'AMP - Joomla 1.5.14_PL\mnt\usr\local\apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server "C:\Documents and Settings\marko\Pulpit\www\mov_amp_Joomla_1.5.14_PL\Mov'AMP - Joomla 1.5.14_PL\mnt\usr\local\mysql\bin\mysqld.exe" = C:\Documents and Settings\marko\Pulpit\www\mov_amp_Joomla_1.5.14_PL\Mov'AMP - Joomla 1.5.14_PL\mnt\usr\local\mysql\bin\mysqld.exe:*:Enabled:mysqld "C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program glowny -- (Gadu-Gadu Sp. z oo) "C:\Program Files\WapSter\WapSter AQQ\AQQ.exe" = C:\Program Files\WapSter\WapSter AQQ\AQQ.exe:*:Enabled:AQQ Communicator -- (Creative Team S.A.) "C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software) "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" = C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4 -- (Adobe Systems Incorporated) "C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe" = C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe:*:Enabled:Adobe Version Cue CS4 Server -- (Adobe Systems Incorporated) "C:\Documents and Settings\marko\Dane aplikacji\Thinstall\Alcohol_120%_v1.9.6.5429\4000004900003i\StarWindServiceAE.exe" = C:\Documents and Settings\marko\Dane aplikacji\Thinstall\Alcohol_120%_v1.9.6.5429\4000004900003i\StarWindServiceAE.exe:*:Enabled:StarWindServiceAE -- () "E:\programy\www\mov_amp_Joomla_1.5.14_PL\Mov'AMP - Joomla 1.5.14_PL\mnt\usr\local\apache2\bin\Apache.exe" = E:\programy\www\mov_amp_Joomla_1.5.14_PL\Mov'AMP - Joomla 1.5.14_PL\mnt\usr\local\apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server -- (Apache Software Foundation) "E:\programy\www\mov_amp_Joomla_1.5.14_PL\Mov'AMP - Joomla 1.5.14_PL\mnt\usr\local\mysql\bin\mysqld.exe" = E:\programy\www\mov_amp_Joomla_1.5.14_PL\Mov'AMP - Joomla 1.5.14_PL\mnt\usr\local\mysql\bin\mysqld.exe:*:Enabled:mysqld -- () "C:\Program Files\Tlen7\tlen7.exe" = C:\Program Files\Tlen7\tlen7.exe:*:Enabled:tlen7 "C:\Program Files\Tlen.pl\tlen.exe" = C:\Program Files\Tlen.pl\tlen.exe:*:Enabled:Komunikator Tlen.pl "D:\Gry\counter strike\Steam.exe" = D:\Gry\counter strike\Steam.exe:*:Enabled:Steam "C:\Documents and Settings\marko\Dane aplikacji\IMVUClient\1VivoxVoice.exe" = C:\Documents and Settings\marko\Dane aplikacji\IMVUClient\1VivoxVoice.exe:*:Enabled:1VivoxVoice "C:\Program Files\cenzura! Culture Foundation\Miro\Miro_Downloader.exe" = C:\Program Files\cenzura! Culture Foundation\Miro\Miro_Downloader.exe:*:Enabled:Miro_Downloader -- () "C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam "C:\Program Files\Steam\steamapps\common\mafia ii - public demo\launcher.exe" = C:\Program Files\Steam\steamapps\common\mafia ii - public demo\launcher.exe:*:Enabled:Mafia II - Demo "D:\EA Sports\FIFA 11 Demo\Game\fifa.exe" = D:\EA Sports\FIFA 11 Demo\Game\fifa.exe:*:Enabled:FIFA 11 "C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "D:\TmNationsForever\TmForever.exe" = D:\TmNationsForever\TmForever.exe:*:Enabled:TmForever -- () "C:\Program Files\EpsonNet\EpsonNet Config V3\ENConfig.exe" = C:\Program Files\EpsonNet\EpsonNet Config V3\ENConfig.exe:*:Enabled:EpsonNet Config -- (SEIKO EPSON CORPORATION) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "_{7F05E704-30A6-421A-97A7-8EEB1C7FF010}" = CorelDRAW(R) Graphics Suite X4 "_{CE2DA11A-917F-4CF5-AB55-755EC115DD10}" = CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension "{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4 "{01E6CFB0-2EAA-A019-7894-18986696E711}" = Catalyst Control Center Localization Finnish "{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4 "{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4 "{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center "{096F7700-03BA-B421-703A-FE4D2CE88D08}" = Catalyst Control Center Graphics Light "{098727E1-775A-4450-B573-3F441F1CA243}" = kuler "{0BE2FA8D-6705-EF8E-E6AB-2C3442D16675}" = Vimeo Uploader "{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4 "{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4 "{10E1E87C-656C-4D08-86D6-5443D28583BE}" = TrayApp "{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP1900_series" = Canon iP1900 series Printer Driver "{12F80942-5FE0-7CE9-F1B3-121795A32054}" = CCC Help Swedish "{14F70205-1940-4000-88C7-BE799A6B2CAD}" = Adobe Soundbooth CS4 "{15030405-7B1E-7300-1C6C-9FE98BA68CB4}" = CCC Help Norwegian "{154446FB-439A-2AF4-B124-9E31CD3B3E88}" = Catalyst Control Center Localization Chinese Standard "{154E4F71-DFC0-4B31-8D99-F97615031B02}" = HP Webcam Application "{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B}" = Adobe SGM CS4 "{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4 "{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4 "{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB "{176722EA-EB96-5AC0-9BC0-FD774C1A94FB}" = Catalyst Control Center Localization Russian "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 "{1B7C06E1-4888-47A6-992A-0990B9683486}" = Adobe Version Cue CS4 Server "{1CDB842D-9C18-5EBC-91D4-C6F8DA0AE7CE}" = CCC Help Turkish "{1CF67A1B-1063-D44B-3234-42717D7D3FF8}" = Catalyst Control Center Localization French "{1DCA3EAA-6EB5-4563-A970-EA14D75037BA}" = Adobe InDesign CS4 "{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1}" = Adobe InDesign CS4 Icon Handler "{1FE5BFA8-C0E0-68FD-52DD-42FB11B3B160}" = Catalyst Control Center Localization Norwegian "{2168245A-B5AD-40D8-A641-48E3E070B5B6}" = Adobe Flash CS4 STI-en "{243A6B8F-203D-EDAD-350D-15393AD822CD}" = CCC Help German "{2480B673-194C-3C4B-1523-4C20F354E40C}" = Catalyst Control Center Localization Danish "{263A0833-85A9-AF55-F3EE-5945FAC78614}" = Catalyst Control Center Graphics Full Existing "{2696556B-1D2B-26B3-75B1-52F342C150D0}" = CCC Help Dutch "{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 24 "{2746C43F-4D85-73C6-8ADC-C38453C3531E}" = CCC Help Czech "{297190A1-4B0D-4CD6-8B9F-3907F15C3FD8}" = Adobe CS4 American English Speech Analysis Models "{2B0CDD4D-5C1A-47F7-89E2-9BF604670ABC}" = EpsonNet Config V3 "{2BAF2B96-7560-48B4-87D4-10178DDBE217}" = Adobe InDesign CS4 Application Feature Set Files (Roman) "{2C0988B9-3BEA-7A45-2A67-BD0267973878}" = CCC Help Hungarian "{2CE5A2E7-3437-4CE7-BCF4-85ED6EEFF9E4}" = iTunes "{30BF4E6C-D866-46F7-A4F6-81A45E97706E}" = Catalyst Control Center - Branding "{30C8AA56-4088-426F-91D1-0EDFD3A25678}" = Adobe Dreamweaver CS4 "{31BFEC6C-1F27-45B5-839C-BCBAE327993A}" = OpenOffice.org 3.0 "{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6 "{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4 "{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player "{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4 "{3A6829EF-0791-4FDD-9382-C690DD0821B9}" = Adobe Flash Player 10 ActiveX "{3C9643A7-ACF9-3431-3B42-89D553C20CCE}" = Catalyst Control Center Localization Portuguese "{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4 "{3D5238BD-B6F7-0325-4577-7B1DD3AC539F}" = CCC Help Thai "{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin "{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX "{415CDA53-9100-476F-A7B2-476691E117C7}" = HP Smart Web Printing "{428FDF9F-E010-4C4C-A8BB-156960AFCA1C}" = Adobe Fireworks CS4 "{434DEF64-89D3-F83B-E008-5200E5B2F2D9}" = ccc-utility "{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit "{44A27085-0616-4181-A0C3-81C7ECA17F73}" = CorelDRAW Graphics Suite X4 "{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets "{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4 "{4841F481-1272-A1BE-D424-78628D252426}" = Catalyst Control Center Localization German "{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A52555C-032A-4083-BDD9-6A85ABFB39A8}" = Adobe SING CS4 "{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840 "{4CE1CFF4-7F88-02DD-70BD-CD3B18F6CDC9}" = ccc-core-preinstall "{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport "{548D4E14-F59D-4FA3-A357-CE5BA0D41D34}" = Opera 11.01 "{5526E90B-7ED3-1881-4C96-35FF5E124225}" = Catalyst Control Center Localization Thai "{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4 "{5EAD5443-7194-46CC-A055-428E6ABB1BAF}" = Adobe Encore CS4 "{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support "{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection "{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4 "{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support "{64CB2553-C109-4132-AA51-1F421B515FD1}" = Microsoft .NET Framework 1.1 Polish Language Pack "{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Anti-Virus 2011 "{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4 "{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK "{6834B8AE-D23B-4B26-A919-6515844CF2BA}" = CorelDRAW Graphics Suite X4 - Lang PL "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{69DAC00A-7665-4E9B-B441-093D40736429}" = HP BatteryCheck 2.10 A2 "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6D397775-EFF0-26D7-AC85-5993391AEC4F}" = Catalyst Control Center Localization Dutch "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{730837D4-FF5E-48DB-BA49-33E732DFF0B3}" = PanoStandAlone "{73816D2F-B783-4590-A9BE-C1E68BE4041A}" = DisplayLink Core Software "{7406DF60-016D-476B-A2C7-55D997592047}" = Adobe OnLocation CS4 "{76582A2F-F5FD-BF58-C69F-1E9AB9CBDF6A}" = Catalyst Control Center Localization Spanish "{793D1D88-6141-43DE-BE58-59BCE31B4090}" = Adobe Flash CS4 Extension - Flash Lite STI en "{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C}" = Adobe InDesign CS4 Common Base Files "{7E20EFE6-E604-48C6-8B39-BA4742F2CDB4}" = Zune Desktop Theme "{7F05E704-30A6-421A-97A7-8EEB1C7FF010}" = CorelDRAW Graphics SUite X4 - ICA "{7F05E704-30A6-421A-97A7-8EEB1C7FF012}" = CorelDRAW Graphics Suite X4 - Capture "{7F05E704-30A6-421A-97A7-8EEB1C7FF013}" = CorelDRAW Graphics Suite X4 - Draw "{7F05E704-30A6-421A-97A7-8EEB1C7FF014}" = CorelDRAW Graphics Suite X4 - PP "{7F05E704-30A6-421A-97A7-8EEB1C7FF016}" = CorelDRAW Graphics Suite X4 - Content "{7F05E704-30A6-421A-97A7-8EEB1C7FF017}" = CorelDRAW Graphics Suite X4 - Filters "{7F05E704-30A6-421A-97A7-8EEB1C7FF019}" = CorelDRAW Graphics Suite X4 - FontNav "{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4 "{82B6333C-10B0-6BF2-F02B-FB907129C44C}" = ccc-core-static "{82C2F4FF-B768-12D6-E53D-62C8E17E8662}" = CCC Help Japanese "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4 "{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4 "{8452B997-80A4-B2F9-9CAD-00A3FA45AD92}" = Catalyst Control Center Localization Swedish "{84814E6B-2581-46EC-926A-823BD1C670F6}" = HP Integrated Module with Bluetooth wireless technology "{865821E8-88E8-BE83-A4C0-4B2723352AE4}" = Catalyst Control Center Localization Japanese "{8676226D-E23E-8701-778F-7DE0E12DA452}" = CCC Help Chinese Standard "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar "{87532CAB-7932-4F84-8937-823337622807}" = Adobe Illustrator CS4 "{87885939-F824-42bf-B790-231B1E8EF2BB}" = dj_sf_software "{89CA8C53-9CE5-B628-AA17-11F232F1E726}" = CCC Help Danish "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8B68D7D1-258E-0B52-B216-DD8DD59B544A}" = Catalyst Control Center Localization Italian "{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12 "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4 "{93F54611-2701-454e-94AB-623F458D9E6B}" = DeviceDiscovery "{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4 "{9919B071-F93A-8BFD-6A65-01D560121DC5}" = CCC Help French "{9A154D6D-13D6-4CA1-BB3A-E792C18DACBF}" = SCR3xxx Smart Card Reader "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A6F0720-739C-408B-966F-93091631A918}" = "{9ADABDDE-9644-461B-9E73-83FA3EFCAB50}" = HP Wireless Assistant "{9D0798D0-AF6C-4E62-94B1-AEBF1A43E00A}" = CorelDRAW Graphics Suite X4 - IPM "{9E60B43A-50D6-057F-8EA6-8286CE00A65C}" = CCC Help Greek "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A36CBCBC-10B5-EBC0-1219-95830657FF98}" = CCC Help Portuguese "{A4502FB2-69C0-9F71-C697-0F0AC94656E3}" = Catalyst Control Center Localization Czech "{A6EC82A0-1414-475D-8AFD-469089F3080D}" = Adobe Contribute CS4 "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC76BA86-1033-F400-7760-000000000004}" = Adobe Acrobat 9 Pro - English, Français, Deutsch "{AC76BA86-7AD7-1038-7B44-CEA000000001}" = Adobe Reader 6.0.2 CE "{ADAE950C-FF76-F081-5861-FBD5AF48FE56}" = Catalyst Control Center Graphics Full New "{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4 "{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4 "{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content "{B29AD377-CC12-490A-A480-1452337C618D}" = Connect "{B4205456-1F3F-7156-5EE2-DA1045FD7207}" = Catalyst Control Center Localization Turkish "{B42A8EA7-2A15-2E30-651E-DD47C000301D}" = CCC Help Finnish "{B61D21B6-469D-4423-B161-62DB20B8A70E}" = Visual Basic for Applications (R) Core - English "{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4 "{B9F4561A-924D-4510-A85A-BB0960C338CB}" = Adobe Asset Services CS4 "{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module "{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter "{BF439B41-0252-48DE-8B8B-0430CB26A181}" = CorelDRAW Graphics Suite X4 - VBA "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C45FB733-E259-A7FF-5C9F-4FC68CC69365}" = CCC Help Italian "{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4 "{C94AAA8B-4152-3F32-E94E-E23503D21EAC}" = CCC Help Spanish "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw "{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}" = Apple Mobile Device Support "{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE2DA11A-917F-4CF5-AB55-755EC115DD10}" = CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension "{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4 "{D889ECAE-D516-363D-0CEC-17F1D2E1AA81}" = CCC Help Korean "{D9199DDB-B5EE-BF67-7C85-31790A8B5D85}" = CCC Help Chinese Traditional "{D9803478-F222-AC9C-48FB-1F4D6B54F1FF}" = Catalyst Control Center Localization Chinese Traditional "{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support "{DB81779E-7CC5-4630-BCFC-754004956444}" = Visual Basic for Applications (R) Core "{DCA43467-6F0F-CC7B-B944-F54AA1752BBE}" = Catalyst Control Center Core Implementation "{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4 "{E11D4FE9-718A-D54C-9C19-A13CA89B9E18}" = Skins "{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm "{E277DDEB-9395-77FA-E273-A2BD084CEE0C}" = CCC Help Russian "{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1 "{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime "{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup "{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby "{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX "{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help "{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}" = Wiedźmin "{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL "{F4306DF8-7B00-158B-435B-05FA42C81795}" = Catalyst Control Center Localization Greek "{F4341149-443F-4DC4-B1FB-F8178B66145B}" = HP USB Docking Video "{F5D61F44-C37E-2015-BA9F-A718B9DBF69D}" = Catalyst Control Center Localization Korean "{F6019CF2-24CA-F33D-091A-D6F65CB54D01}" = Catalyst Control Center Localization Polish "{F6E99614-F042-4459-82B7-8B38B2601356}" = Adobe Flash CS4 "{F7B0E599-C114-4493-BC4D-D8FC7CBBABBB}" = 32 Bit HP CIO Components Installer "{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4 "{F9048FF8-45E1-8BD4-0161-468F777BA2B4}" = CCC Help English "{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4 "{FC00DD7E-8EBD-DAF9-B345-6643818AC242}" = Catalyst Control Center Localization Hungarian "{FC1DCE80-2E83-A938-1450-A846B851E264}" = CCC Help Polish "{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All "{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}" = Status "{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour "Adobe AIR" = Adobe AIR "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe_b2d6abde968e6f277ddbfd501383e02" = Adobe Creative Suite 4 Master Collection "Agere Systems Soft Modem" = Agere Systems HDA Modem "AQQ" = WapSter AQQ "ATI Display Driver" = ATI Display Driver "Audacity_is1" = Audacity 1.2.6 "AVS DVD Player_is1" = AVS DVD Player version 2.2 "Broadcom 802.11 Application" = Bezprzewodowe narzędzie firmy Broadcom "Broadcom 802.11b Network Adapter" = Karta sieci bezprzewodowej Broadcom 802.11 "Bullzip PDF Printer_is1" = Bullzip PDF Printer 7.1.0.1082 "CCleaner" = CCleaner "com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player "Combined Community Codec Pack_is1" = Combined Community Codec Pack 2009-09-09 "CZATeriaKam" = CZATeriaKam 2.6.01 "DAEMON Tools Toolbar" = DAEMON Tools Toolbar "DriverAgent.exe" = DriverAgent by eSupport.com "EasyBurning" = Easy Burning (remove only) "ENTERPRISE" = Microsoft Office Enterprise 2007 "EPSON B-300" = Odinstaluj drukarkę EPSON B-300 "FontCreator6_is1" = High-Logic FontCreator 6.2 "foobar2000" = foobar2000 v1.0.3 "Foxit Reader" = Foxit Reader "Free Monitor for Google_is1" = Free Monitor for Google 2.5 "Gadu-Gadu" = Gadu-Gadu 7.0 "HP Imaging Device Functions" = HP Imaging Device Functions 9.0 "ie8" = Windows Internet Explorer 8 "Inkscape" = Inkscape 0.48.1 "InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Anti-Virus 2011 "Klipfolio" = Klipfolio (remove only) "LastFM_is1" = Last.fm 1.5.4.27091 "Marvell Miniport Driver" = Marvell Miniport Driver "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Miro" = Miro "Mozilla Firefox (3.5.18)" = Mozilla Firefox (3.5.18) "Mozilla Thunderbird (3.1.9)" = Mozilla Thunderbird (3.1.9) "MP3 Rocket Toolbar" = MP3 Rocket Toolbar "NapiProjekt_is1" = NapiProjekt 1.0.6.9 "Nero8Lite_is1" = Nero 8 Lite 8.1.1.4 "Notepad++" = Notepad++ "Nvu_is1" = Nvu 1.0 "Photodex Presenter" = Photodex Presenter "Picasa 3" = Picasa 3 "ProShow Producer" = ProShow Producer "Przeglądarka Czcionek_is1" = Przeglądarka Czcionek 1.5 "Slownik jezyka polskiego 3t" = Słownik języka polskiego PWN "Soulseek2" = SoulSeek 157 NS 13c "SoundTap" = SoundTap Streaming Audio Recorder "SpeedFan" = SpeedFan (remove only) "Switch" = Switch Sound File Converter "SynTPDeinstKey" = Synaptics Pointing Device Driver "TmNationsForever_is1" = TmNationsForever "Totalcmd" = Total Commander (Remove or Repair) "TweakNow RegCleaner Standard_is1" = TweakNow RegCleaner Standard "vimeo.Duplo.3E2F2984357E7A95AE95C69EF2C5C14640284048.1" = Vimeo Uploader "Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 "Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 "WIC" = Windows Imaging Component "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format Runtime "Windows XP Service Pack" = Windows XP Service Pack 3 "WinGimp-2.0_is1" = GIMP 2.6.6 "WinRAR archiver" = Archiwizator WinRAR [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Analog Clock" = Analog Clock "Google Chrome" = Google Chrome [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-04-24 06:12:24 | Computer Name = MARKO-7CB2DC3AF | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 2011-04-24 06:12:24 | Computer Name = MARKO-7CB2DC3AF | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 4094 Error - 2011-04-24 06:12:24 | Computer Name = MARKO-7CB2DC3AF | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 4094 Error - 2011-04-24 19:15:34 | Computer Name = MARKO-7CB2DC3AF | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 2011-04-24 19:15:34 | Computer Name = MARKO-7CB2DC3AF | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 2265 Error - 2011-04-24 19:15:34 | Computer Name = MARKO-7CB2DC3AF | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 2265 Error - 2011-04-25 03:44:38 | Computer Name = MARKO-7CB2DC3AF | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 2011-04-25 03:44:38 | Computer Name = MARKO-7CB2DC3AF | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 2062 Error - 2011-04-25 03:44:38 | Computer Name = MARKO-7CB2DC3AF | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 2062 Error - 2011-04-25 05:43:45 | Computer Name = MARKO-7CB2DC3AF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd avp.exe, wersja 11.0.2.571, moduł powodujący błąd kavbase.kdl.85dc1fb8fbc01feed31284972149b114, wersja 2.1.5.39, adres błędu 0x00017f44. [ OSession Events ] Error - 2010-09-22 05:29:31 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 29108 seconds with 1200 seconds of active time. This session ended with a crash. Error - 2010-09-22 11:37:13 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 19726 seconds with 5700 seconds of active time. This session ended with a crash. Error - 2010-09-23 20:00:40 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 40503 seconds with 13500 seconds of active time. This session ended with a crash. Error - 2010-09-24 14:54:29 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 38880 seconds with 11340 seconds of active time. This session ended with a crash. Error - 2010-10-04 10:10:34 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 21500 seconds with 480 seconds of active time. This session ended with a crash. Error - 2010-10-20 20:03:45 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 57767 seconds with 120 seconds of active time. This session ended with a crash. Error - 2010-10-28 03:41:14 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 31591 seconds with 240 seconds of active time. This session ended with a crash. Error - 2010-12-12 21:20:47 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 114 seconds with 60 seconds of active time. This session ended with a crash. Error - 2011-02-14 13:00:27 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 548 seconds with 120 seconds of active time. This session ended with a crash. Error - 2011-02-14 13:36:32 | Computer Name = MARKO-7CB2DC3AF | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1521 seconds with 0 seconds of active time. This session ended with a crash. [ System Events ] Error - 2011-04-25 05:37:47 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7023 Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący błąd: %%126 Error - 2011-04-25 05:37:47 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7023 Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący błąd: %%126 Error - 2011-04-25 05:37:47 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7023 Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący błąd: %%126 Error - 2011-04-25 05:37:48 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7023 Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący błąd: %%126 Error - 2011-04-25 05:37:48 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7023 Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący błąd: %%126 Error - 2011-04-25 05:37:48 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7023 Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący błąd: %%126 Error - 2011-04-25 05:37:48 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7023 Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący błąd: %%126 Error - 2011-04-25 05:37:48 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7023 Description = Usługa Zarządzanie aplikacjami zakończyła działanie; wystąpił następujący błąd: %%126 Error - 2011-04-25 05:44:01 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7031 Description = Usługa Usługa Kaspersky Anti-Virus niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error - 2011-04-25 05:44:11 | Computer Name = MARKO-7CB2DC3AF | Source = Service Control Manager | ID = 7032 Description = Menedżer sterowania usługami próbował podjąć akcję korekcyjną (Uruchom usługę ponownie) po nieoczekiwanym zakończeniu usługi Usługa Kaspersky Anti-Virus, ale ta akcja nie powiodła się przy następującym błędzie: %%1056. < End of report >

Dzięki!

**Posty:** 18165 · przez **wojtas** 25 Kwi 2011, 13:47

brakuje loga z Gmera, przed nim pamiętaj o tym

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15866&l=dis
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - File not found
IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - File not found
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.8.0.99999
FF - prefs.js..extensions.enabledItems: mp3rocket@mp3rocket.com:1.0
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=MP3R7&o=15863&locale=en_US&apn_uid=03F30100-9259-4740-9075-08E7CF9FA98F&apn_ptnrs=RV&apn_sauid=E6FBC408-B9E0-48C5-B8F7-3693DBF9D3AB&apn_dtid=YYYYYYYYPL&q="
[2010-11-03 21:17:13 | 000,000,000 | ---D | M] ("MP3 Rocket Toolbar") -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\toolbar@ask.com
[2011-04-23 16:21:18 | 000,002,567 | ---- | M] () -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\searchplugins\askcom.xml
[2009-10-18 16:36:20 | 000,000,523 | ---- | M] () -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\searchplugins\daemon-search.xml
[2011-04-25 11:30:44 | 000,045,258 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\Mp3Rocket.xml
[2011-04-25 11:30:44 | 000,045,238 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\Mp3Rocket.xml.bak
[2010-10-30 13:12:06 | 000,000,000 | ---D | M] (MP3Rocket Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\mp3rocket@mp3rocket.com
O2 - BHO: (MP3 Rocket Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - File not found
O3 - HKCU\..\Toolbar\WebBrowser: (MP3 Rocket Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - File not found
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [combofix] File not found
O4 - HKCU..\Run: [UniblueRegistryBooster] File not found
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [ALLUpdate] File not found
O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - File not found
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O33 - MountPoints2\{122ab7b2-6b1f-11e0-b0d8-0022645cefdc}\Shell - "" = AutoRun
O33 - MountPoints2\{122ab7b2-6b1f-11e0-b0d8-0022645cefdc}\Shell\AutoRun\command - "" = H:\MicroLauncher.exe
O33 - MountPoints2\{29d3dad7-a2a3-11de-ae97-002186b6810f}\Shell - "" = AutoRun
O33 - MountPoints2\{29d3dad7-a2a3-11de-ae97-002186b6810f}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -a
O33 - MountPoints2\{42e02cca-a8b6-11df-afeb-0022645cefdc}\Shell - "" = AutoRun
O33 - MountPoints2\{42e02cca-a8b6-11df-afeb-0022645cefdc}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{6a126fc3-022d-11df-af1f-002186b6810f}\Shell - "" = AutoRun
O33 - MountPoints2\{6a126fc3-022d-11df-af1f-002186b6810f}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{a334cc52-4aeb-11e0-b0b4-0022645cefdc}\Shell - "" = AutoRun
O33 - MountPoints2\{a334cc52-4aeb-11e0-b0b4-0022645cefdc}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{a334cc55-4aeb-11e0-b0b4-0022645cefdc}\Shell - "" = AutoRun
O33 - MountPoints2\{a334cc55-4aeb-11e0-b0b4-0022645cefdc}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{a334cc63-4aeb-11e0-b0b4-0022645cefdc}\Shell - "" = AutoRun
O33 - MountPoints2\{a334cc63-4aeb-11e0-b0b4-0022645cefdc}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{b1dfcf4a-b9af-11de-aec8-002186b6810f}\Shell\AutoRun\command - "" = H:\p6xebrnt.exe
O33 - MountPoints2\{b1dfcf4a-b9af-11de-aec8-002186b6810f}\Shell\open\Command - "" = H:\p6xebrnt.exe
O33 - MountPoints2\{ea0af3d9-ee93-11df-b021-0022645cefdc}\Shell\AutoRun\command - "" = H:\APPInst.exe
O33 - MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\Shell\autoPlAy\comMand - "" = H:\unsyys.exe
O33 - MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\Shell\AutoRun\command - "" = H:\unsyys.exe
O33 - MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\Shell\explORE\COmmAND - "" = H:\unsyys.exe
O33 - MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\Shell\oPEn\CommanD - "" = H:\unsyys.exe
[2011-04-25 09:38:53 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{90DE9089-0E63-49B0-9CBF-FB3D811424E3}.job
[2011-04-25 01:05:00 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-299502267-725345543-1004UA.job

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

odinstaluj śmieci: DAEMON Tools Toolbar, Ask Toolbar, MP3 Rocket Toolbar

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).

**Posty:** 4 · przez **klapkowy** 26 Kwi 2011, 01:53

ok, po wykonaniu skryptu komp zwalnia jeszcze bardziej - jakieś 1000x

oto raport po wykonaniu skryptu:

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ deleted successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{08C06D61-F1F3-4799-86F8-BE1A89362C85} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08C06D61-F1F3-4799-86F8-BE1A89362C85}\ deleted successfully. Prefs.js: "Ask.com" removed from browser.search.defaultengine Prefs.js: "Ask.com" removed from browser.search.defaultenginename Prefs.js: "Ask.com" removed from browser.search.order.1 Prefs.js: "Ask.com" removed from browser.search.selectedEngine Prefs.js: toolbar@ask.com:3.8.0.99999 removed from extensions.enabledItems Prefs.js: mp3rocket@mp3rocket.com:1.0 removed from extensions.enabledItems Prefs.js: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=MP3R7&o=15863&locale=en_US&apn_uid=03F30100-9259-4740-9075-08E7CF9FA98F&apn_ptnrs=RV&apn_sauid=E6FBC408-B9E0-48C5-B8F7-3693DBF9D3AB&apn_dtid=YYYYYYYYPL&q=" removed from keyword.URL Folder C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\toolbar@ask.com\ not found. C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\searchplugins\askcom.xml moved successfully. C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\searchplugins\daemon-search.xml moved successfully. C:\Program Files\Mozilla Firefox\searchplugins\Mp3Rocket.xml moved successfully. C:\Program Files\Mozilla Firefox\searchplugins\Mp3Rocket.xml.bak moved successfully. Folder C:\Program Files\Mozilla Firefox\extensions\mp3rocket@mp3rocket.com\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\combofix deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\UniblueRegistryBooster deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ALLUpdate deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{d9288080-1baa-4bc4-9cf8-a92d743db949}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d9288080-1baa-4bc4-9cf8-a92d743db949}\ not found. Starting removal of ActiveX control {31435657-9980-0010-8000-00AA00389B71} C:\WINDOWS\Downloaded Program Files\wvc1dmo.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{31435657-9980-0010-8000-00AA00389B71}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{31435657-9980-0010-8000-00AA00389B71}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{122ab7b2-6b1f-11e0-b0d8-0022645cefdc}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{122ab7b2-6b1f-11e0-b0d8-0022645cefdc}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{122ab7b2-6b1f-11e0-b0d8-0022645cefdc}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{122ab7b2-6b1f-11e0-b0d8-0022645cefdc}\ not found. File H:\MicroLauncher.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{29d3dad7-a2a3-11de-ae97-002186b6810f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{29d3dad7-a2a3-11de-ae97-002186b6810f}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{29d3dad7-a2a3-11de-ae97-002186b6810f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{29d3dad7-a2a3-11de-ae97-002186b6810f}\ not found. File J:\LaunchU3.exe -a not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{42e02cca-a8b6-11df-afeb-0022645cefdc}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42e02cca-a8b6-11df-afeb-0022645cefdc}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{42e02cca-a8b6-11df-afeb-0022645cefdc}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42e02cca-a8b6-11df-afeb-0022645cefdc}\ not found. File H:\AutoRun.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6a126fc3-022d-11df-af1f-002186b6810f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6a126fc3-022d-11df-af1f-002186b6810f}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6a126fc3-022d-11df-af1f-002186b6810f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6a126fc3-022d-11df-af1f-002186b6810f}\ not found. File H:\LaunchU3.exe -a not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a334cc52-4aeb-11e0-b0b4-0022645cefdc}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a334cc52-4aeb-11e0-b0b4-0022645cefdc}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a334cc52-4aeb-11e0-b0b4-0022645cefdc}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a334cc52-4aeb-11e0-b0b4-0022645cefdc}\ not found. File H:\AutoRun.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a334cc55-4aeb-11e0-b0b4-0022645cefdc}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a334cc55-4aeb-11e0-b0b4-0022645cefdc}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a334cc55-4aeb-11e0-b0b4-0022645cefdc}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a334cc55-4aeb-11e0-b0b4-0022645cefdc}\ not found. File H:\AutoRun.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a334cc63-4aeb-11e0-b0b4-0022645cefdc}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a334cc63-4aeb-11e0-b0b4-0022645cefdc}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a334cc63-4aeb-11e0-b0b4-0022645cefdc}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a334cc63-4aeb-11e0-b0b4-0022645cefdc}\ not found. File H:\AutoRun.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b1dfcf4a-b9af-11de-aec8-002186b6810f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b1dfcf4a-b9af-11de-aec8-002186b6810f}\ not found. File H:\p6xebrnt.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b1dfcf4a-b9af-11de-aec8-002186b6810f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b1dfcf4a-b9af-11de-aec8-002186b6810f}\ not found. File H:\p6xebrnt.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea0af3d9-ee93-11df-b021-0022645cefdc}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ea0af3d9-ee93-11df-b021-0022645cefdc}\ not found. File H:\APPInst.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ea0af3e1-ee93-11df-b021-0022645cefdc}\ not found. File H:\unsyys.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ea0af3e1-ee93-11df-b021-0022645cefdc}\ not found. File H:\unsyys.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ea0af3e1-ee93-11df-b021-0022645cefdc}\ not found. File H:\unsyys.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea0af3e1-ee93-11df-b021-0022645cefdc}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ea0af3e1-ee93-11df-b021-0022645cefdc}\ not found. File H:\unsyys.exe not found. C:\WINDOWS\tasks\User_Feed_Synchronization-{90DE9089-0E63-49B0-9CBF-FB3D811424E3}.job moved successfully. C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-299502267-725345543-1004UA.job moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"SuperHidden"|dword:00000001 /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"Hidden"|dword:00000001 /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"ShowSuperHidden"|dword:00000001 /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\\"CheckedValue"|dword:00000001 /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\ deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\\@|"" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 41620 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 245961 bytes User: marko ->Temp folder emptied: 1333677952 bytes ->Temporary Internet Files folder emptied: 15868316 bytes ->Java cache emptied: 10526523 bytes ->FireFox cache emptied: 80224559 bytes ->Google Chrome cache emptied: 224724921 bytes ->Opera cache emptied: 10025135 bytes ->Flash cache emptied: 272269 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2503512 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 59048719 bytes RecycleBin emptied: 370424618 bytes Total Files Cleaned = 2 010,00 mb [EMPTYFLASH] User: All Users User: Default User ->Flash cache emptied: 0 bytes User: LocalService User: marko ->Flash cache emptied: 0 bytes User: NetworkService Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.22.3 log created on 04252011_141201 Files\Folders moved on Reboot... File\Folder C:\WINDOWS\temp\klsC5C1.tmp not found! Registry entries deleted on Reboot...

Dodano Dzisiaj, 01:54:
to raport z otl'a po powtórnym skanowaniu:

Kod: Zaznacz wszystko: OTL logfile created on: 2011-04-25 17:00:07 - Run 2 OTL by OldTimer - Version 3.2.22.3 Folder = E:\programy\antyviry mocne\programy do logów Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 57,00% Memory free 5,00 Gb Paging File | 4,00 Gb Available in Paging File | 75,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,81 Gb Total Space | 4,04 Gb Free Space | 13,56% Space Free | Partition Type: NTFS Drive D: | 134,68 Gb Total Space | 42,60 Gb Free Space | 31,63% Space Free | Partition Type: NTFS Drive E: | 133,60 Gb Total Space | 28,78 Gb Free Space | 21,54% Space Free | Partition Type: NTFS Computer Name: MARKO-7CB2DC3AF | User Name: marko | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-04-25 11:35:46 | 000,580,608 | ---- | M] (OldTimer Tools) -- E:\programy\antyviry mocne\programy do logów\OTL.exe PRC - [2011-04-13 02:51:02 | 001,004,088 | ---- | M] (Google Inc.) -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe PRC - [2011-04-07 12:34:04 | 008,882,688 | ---- | M] (Creative Team S.A.) -- C:\Program Files\WapSter\WapSter AQQ\AQQ.exe PRC - [2010-11-02 23:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe PRC - [2010-10-27 22:21:54 | 001,155,072 | ---- | M] (Last.fm) -- C:\Program Files\Last.fm\LastFM.exe PRC - [2010-04-09 13:04:49 | 000,181,312 | ---- | M] () -- C:\Program Files\Photodex\ProShowProducer\scsiaccess.exe PRC - [2010-02-26 07:10:20 | 021,979,992 | ---- | M] () -- C:\Documents and Settings\marko\Dane aplikacji\Dropbox\bin\Dropbox.exe PRC - [2009-03-10 07:47:48 | 000,492,904 | ---- | M] (DisplayLink Corp.) -- C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe PRC - [2009-03-10 07:47:47 | 000,447,848 | ---- | M] (DisplayLink Corp.) -- C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe PRC - [2009-03-10 07:47:44 | 004,711,784 | ---- | M] (DisplayLink Corp.) -- C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe PRC - [2009-01-09 19:51:18 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin PRC - [2009-01-09 19:50:10 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe PRC - [2008-08-04 01:04:00 | 001,345,376 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe PRC - [2008-06-11 23:43:26 | 000,640,376 | ---- | M] (Adobe Systems Inc.) -- E:\Adobe\Acrobat 9.0\Acrobat\acrotray.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-03-18 12:27:12 | 000,013,312 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\agrsmsvc.exe PRC - [2007-07-24 11:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-04-25 11:35:46 | 000,580,608 | ---- | M] (OldTimer Tools) -- E:\programy\antyviry mocne\programy do logów\OTL.exe MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt) SRV - [2010-11-02 23:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe -- (AVP) SRV - [2010-04-09 13:04:49 | 000,181,312 | ---- | M] () [Auto | Running] -- C:\Program Files\Photodex\ProShowProducer\scsiaccess.exe -- (ScsiAccess) SRV - [2009-10-30 19:03:14 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009-03-10 07:47:47 | 000,447,848 | ---- | M] (DisplayLink Corp.) [Auto | Running] -- C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe -- (DisplayLinkService) SRV - [2008-03-18 12:27:12 | 000,013,312 | ---- | M] (Agere Systems) [Auto | Running] -- C:\WINDOWS\system32\agrsmsvc.exe -- (AgereModemAudio) SRV - [2007-07-24 11:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-04-25 11:28:12 | 000,443,448 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2011-01-11 23:13:33 | 000,475,736 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF) DRV - [2010-11-24 01:22:42 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DrvAgent32.sys -- (DrvAgent32) DRV - [2010-10-30 15:20:26 | 000,052,824 | ---- | M] (NCH Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\stdriver32.sys -- (stdriver) DRV - [2010-06-09 17:43:52 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl2.sys -- (kl2) DRV - [2010-06-09 17:43:50 | 000,132,184 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\kl1.sys -- (KL1) DRV - [2010-05-07 12:06:26 | 000,032,856 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5) DRV - [2009-11-02 20:27:24 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt) DRV - [2009-09-07 20:14:17 | 001,952,512 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX) DRV - [2009-09-06 18:17:43 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2009-09-06 18:17:43 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009-08-04 13:04:28 | 000,102,656 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbfake.sys -- (hwusbfake) DRV - [2009-08-04 13:04:28 | 000,102,400 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2009-08-04 11:04:26 | 000,034,688 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcampr5.sys -- (PCAMPR5) DRV - [2009-08-04 11:04:26 | 000,032,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcandis5.sys -- (PCANDIS5) DRV - [2009-03-19 11:40:10 | 000,009,216 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey) DRV - [2008-05-09 01:00:00 | 002,880,512 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008-04-04 10:57:00 | 000,296,320 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp) DRV - [2008-04-03 16:40:44 | 000,879,624 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2008-04-03 16:40:44 | 000,539,512 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio) DRV - [2008-04-03 16:40:44 | 000,156,392 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS) DRV - [2008-04-03 16:40:44 | 000,074,688 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2008-04-03 16:40:44 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2008-03-28 10:14:02 | 000,024,064 | ---- | M] (Sonic Focus, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfaudio.sys -- (SFAUDIO) DRV - [2008-03-21 12:13:00 | 001,203,776 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2007-06-18 17:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2006-09-24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan) DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1644491937-299502267-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-1644491937-299502267-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-1644491937-299502267-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKU\S-1-5-21-1644491937-299502267-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-1644491937-299502267-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-1644491937-299502267-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1644491937-299502267-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "" FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.selectedEngine: "" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl" FF - prefs.js..extensions.enabledItems: "" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3 FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.60 FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.52 FF - prefs.js..extensions.enabledItems: smarterwiki@wikiatic.com:4.3.5 FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.5.4 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:11.0.2.556 FF - prefs.js..extensions.enabledItems: "" FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1 FF - prefs.js..extensions.enabledItems: pl@dictionaries.addons.mozilla.org:1.0.20110211 FF - prefs.js..extensions.enabledItems: {c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.9 FF - prefs.js..extensions.enabledItems: {07b2a769-ed19-4483-87ce-c643914c9626}:1.6 FF - HKLM\software\mozilla\Mozilla Firefox 3.5.18\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-03-24 04:34:36 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.18\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-03-24 04:34:36 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011-03-07 01:22:20 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011-01-13 22:21:33 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Extensions [2011-01-13 22:21:33 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010-06-07 23:55:58 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Extensions\IMVUClientXUL@imvu.com [2011-04-25 13:59:35 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions [2010-09-14 23:11:13 | 000,000,000 | ---D | M] (ANTHEM) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{07b2a769-ed19-4483-87ce-c643914c9626} [2011-01-08 10:47:41 | 000,000,000 | ---D | M] (Web Developer) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12} [2010-12-25 00:08:37 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-12-11 17:30:39 | 000,000,000 | ---D | M] ("BitDefender QuickScan") -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2010-01-23 15:57:55 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2010-05-07 12:46:41 | 000,000,000 | ---D | M] (Firebug) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\firebug@software.joehewitt.com [2010-09-14 23:04:53 | 000,000,000 | ---D | M] (Personas) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\personas@christopher.beard [2011-03-24 01:06:08 | 000,000,000 | ---D | M] (Polski slownik poprawnej pisowni) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\pl@dictionaries.addons.mozilla.org [2011-03-24 01:06:03 | 000,000,000 | ---D | M] (FastestFox) -- C:\Documents and Settings\marko\Dane aplikacji\Mozilla\Firefox\Profiles\cist9uza.default\extensions\smarterwiki@wikiatic.com [2011-04-25 14:00:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-02-26 14:22:15 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-07-02 01:31:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2011-01-16 15:36:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-03-22 21:37:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-01-11 23:15:58 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MARKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\CIST9UZA.DEFAULT\EXTENSIONS\TOOLBAR@ASK.COM [2009-10-12 10:31:40 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\MP3ROCKET@MP3ROCKET.COM [2010-01-30 10:35:06 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [2006-12-11 20:13:02 | 000,061,440 | ---- | M] (Multimedia Cafe www.mmcafe.pl) -- C:\Program Files\Mozilla Firefox\plugins\npcnmozillainterface.dll [2011-02-02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2009-07-31 00:44:16 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-07-31 00:44:16 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-07-31 00:44:16 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-07-31 00:44:16 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-07-31 00:44:16 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-07-31 00:44:16 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-03-13 19:14:55 | 000,001,407 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 16 more lines... O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKU\S-1-5-21-1644491937-299502267-725345543-1004\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKU\S-1-5-21-1644491937-299502267-725345543-1004\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O4 - HKLM..\Run: [Acrobat Assistant 8.0] E:\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] E:\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe (Kaspersky Lab ZAO) O4 - HKLM..\Run: [BEWINTERNET-PL-IEWSessionManager] File not found O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-21-1644491937-299502267-725345543-1004..\Run: [EPSON B-300] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICZE.EXE (SEIKO EPSON CORPORATION) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O4 - Startup: C:\Documents and Settings\marko\Menu Start\Programy\Autostart\Dropbox.lnk = C:\Documents and Settings\marko\Dane aplikacji\Dropbox\bin\Dropbox.exe () O4 - Startup: C:\Documents and Settings\marko\Menu Start\Programy\Autostart\OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1644491937-299502267-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1644491937-299502267-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1644491937-299502267-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1644491937-299502267-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Wyślij do interfejsu Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O9 - Extra Button: &Klawiatura wirtualna - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.) O9 - Extra Button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\mzvkbd3.dll (Kaspersky Lab ZAO) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-05 16:20:47 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-04-25 14:12:01 | 000,000,000 | ---D | C] -- C:\_OTL [2011-04-24 21:12:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\HijackThis [2011-04-24 21:02:27 | 000,000,000 | ---D | C] -- C:\Program Files\TweakNow RegCleaner Std [2011-04-24 21:02:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\TweakNow RegCleaner Std [2011-04-24 21:01:16 | 001,068,608 | ---- | C] (TweakNow.com ) -- C:\Documents and Settings\marko\Pulpit\RegCleaner.exe [2011-04-21 14:31:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix _data [2011-04-20 14:54:43 | 000,034,688 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\pcampr5.sys [2011-04-20 14:54:43 | 000,032,128 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\pcandis5.sys [2011-04-20 14:54:26 | 000,000,000 | ---D | C] -- C:\Program Files\OrangeBS [2011-04-20 14:54:03 | 000,102,400 | R--- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys [2011-04-20 14:53:25 | 000,102,656 | R--- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbfake.sys [2011-04-20 14:53:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\France Telecom [2011-04-08 11:16:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\marko\Pulpit\druki [2011-03-31 12:14:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\marko\Pulpit\Esej dla Kassandry [2011-03-28 12:49:19 | 000,000,000 | ---D | C] -- C:\Program Files\PowerDataRecovery [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-04-25 15:05:00 | 000,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-299502267-725345543-1004Core.job [2011-04-25 14:18:36 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2011-04-25 14:18:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-04-25 14:17:22 | 013,893,632 | ---- | M] () -- C:\Documents and Settings\marko\ntuser.dat [2011-04-25 14:17:22 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\marko\ntuser.ini [2011-04-25 14:12:08 | 000,743,890 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-04-25 14:12:08 | 000,625,590 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-04-25 14:12:08 | 000,216,408 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-04-25 14:12:08 | 000,162,546 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011-04-25 14:12:08 | 000,005,608 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2011-04-25 11:30:57 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-04-25 11:28:12 | 000,443,448 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys [2011-04-24 21:02:27 | 000,001,685 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TweakNow RegCleaner Std.lnk [2011-04-24 21:01:18 | 001,068,608 | ---- | M] (TweakNow.com ) -- C:\Documents and Settings\marko\Pulpit\RegCleaner.exe [2011-04-24 09:39:38 | 000,031,232 | ---- | M] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-04-24 09:27:18 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-04-22 11:58:27 | 000,003,088 | -HS- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys [2011-04-21 14:39:23 | 003,202,847 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\woman.mp3 [2011-04-21 14:38:47 | 000,011,789 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix .aup [2011-04-21 14:27:46 | 000,000,630 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\Audacity.lnk [2011-04-21 14:18:33 | 003,400,547 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix .mp3 [2011-04-20 14:45:43 | 000,000,823 | ---- | M] () -- C:\Documents and Settings\marko\.recently-used.xbel [2011-04-20 08:43:44 | 002,749,408 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-04-19 14:36:20 | 000,123,272 | ---- | M] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2011-04-18 16:08:43 | 000,003,644 | ---- | M] () -- C:\WINDOWS\wincmd.ini [2011-04-18 15:53:18 | 000,001,443 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini [2011-04-14 21:30:59 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-04-08 22:30:21 | 000,038,848 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\O nas.rtf [2011-04-08 11:51:18 | 000,000,151 | ---- | M] () -- C:\WINDOWS\fcp5.cfg [2011-04-06 10:39:17 | 000,531,774 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0154.jpg [2011-04-06 10:39:16 | 000,692,119 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0148.jpg [2011-04-06 10:39:15 | 000,506,169 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0134.jpg [2011-04-06 10:39:13 | 000,110,277 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0125.jpg [2011-04-06 10:39:08 | 000,610,430 | ---- | M] () -- C:\Documents and Settings\marko\Pulpit\DSC_0126.jpg [2011-04-04 18:02:04 | 000,115,267 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat [2011-04-04 18:02:04 | 000,097,859 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat [2011-03-31 02:59:42 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-04-24 21:02:27 | 000,001,685 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\TweakNow RegCleaner Std.lnk [2011-04-21 14:38:59 | 003,202,847 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\woman.mp3 [2011-04-21 14:31:08 | 000,011,789 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix .aup [2011-04-21 14:27:46 | 000,000,636 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Audacity.lnk [2011-04-21 14:27:46 | 000,000,630 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\Audacity.lnk [2011-04-21 14:18:20 | 003,400,547 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\Wolfmother - woman - mstrkrft remix .mp3 [2011-04-20 14:45:43 | 000,000,823 | ---- | C] () -- C:\Documents and Settings\marko\.recently-used.xbel [2011-04-08 22:30:21 | 000,038,848 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\O nas.rtf [2011-04-06 10:39:13 | 000,531,774 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0154.jpg [2011-04-06 10:39:11 | 000,692,119 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0148.jpg [2011-04-06 10:39:10 | 000,506,169 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0134.jpg [2011-04-06 10:39:09 | 000,110,277 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0125.jpg [2011-04-06 10:39:05 | 000,610,430 | ---- | C] () -- C:\Documents and Settings\marko\Pulpit\DSC_0126.jpg [2011-01-11 23:15:42 | 000,115,267 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat [2011-01-11 23:15:42 | 000,097,859 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat [2010-10-02 14:40:55 | 000,000,055 | ---- | C] () -- C:\WINDOWS\videotoaudio.ini [2010-10-02 14:39:57 | 000,000,005 | ---- | C] () -- C:\WINDOWS\System32\SySmtm.dat [2010-07-04 11:16:52 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010-05-29 00:42:59 | 000,668,160 | ---- | C] () -- C:\WINDOWS\is-Q4VLO.exe [2010-02-25 04:38:52 | 000,000,014 | ---- | C] () -- C:\WINDOWS\hpmssnpjt.ini [2010-01-17 00:36:36 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-01-08 12:35:08 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\BioPdf.PdfWriter.Lib.dll [2009-12-14 04:20:38 | 000,000,054 | ---- | C] () -- C:\Documents and Settings\marko\Dane aplikacji\AVSDVDPlayer.m3u [2009-12-14 02:04:59 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\marko\Dane aplikacji\AVSMediaPlayer.m3u [2009-12-14 01:45:25 | 000,000,067 | ---- | C] () -- C:\WINDOWS\DVDRegionFree.INI [2009-10-18 16:27:02 | 000,443,448 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-09-11 08:19:05 | 000,001,443 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini [2009-09-09 19:01:40 | 000,027,675 | ---- | C] () -- C:\WINDOWS\System32\drivers\klopp.dat [2009-09-08 00:19:08 | 000,003,088 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys [2009-09-08 00:19:08 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\DBFB157B15.sys [2009-09-07 20:22:36 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SMWizard.INI [2009-09-07 20:14:25 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll [2009-09-07 20:14:25 | 000,025,088 | ---- | C] () -- C:\WINDOWS\System32\WLTRYSVC.EXE [2009-09-07 20:14:24 | 000,757,760 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll [2009-09-07 19:21:25 | 000,031,232 | ---- | C] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-09-06 19:26:03 | 000,000,048 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2009-09-06 18:17:43 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2009-09-06 18:17:43 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2009-09-06 14:32:15 | 000,000,000 | ---- | C] () -- C:\WINDOWS\HPMProp.INI [2009-09-06 13:57:41 | 000,000,880 | ---- | C] () -- C:\WINDOWS\HBCIKRNL.INI [2009-09-06 12:08:33 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2009-09-06 11:18:09 | 000,003,644 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-09-05 18:25:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2009-09-05 18:16:56 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll [2009-09-05 18:10:42 | 000,005,608 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-09-05 18:10:41 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009-09-05 18:09:27 | 002,749,408 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-09-05 17:49:35 | 000,123,272 | ---- | C] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-09-05 17:05:42 | 006,391,744 | -H-- | C] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-09-05 16:47:33 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\marko\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-09-05 16:27:49 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2009-09-05 16:23:52 | 000,001,112 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2009-09-05 16:20:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2009-09-05 16:19:54 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2009-09-05 16:19:50 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2009-09-05 16:18:14 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009-09-05 16:18:00 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2009-09-05 16:18:00 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2009-09-05 16:17:03 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2009-09-05 16:17:02 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2008-05-26 22:22:36 | 000,016,222 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini [2008-05-26 22:22:34 | 000,021,728 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini [2008-05-26 22:22:32 | 000,016,164 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini [2008-05-26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin [2008-05-26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin [2008-05-08 21:48:46 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2008-05-08 21:48:46 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2008-05-08 21:48:46 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2008-03-31 14:30:34 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll [2008-03-06 10:40:54 | 000,168,883 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2005-02-17 12:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest [2005-02-17 12:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest [2004-08-04 14:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2004-08-04 14:00:00 | 000,743,890 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2004-08-04 14:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2004-08-04 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2004-08-04 14:00:00 | 000,625,590 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2004-08-04 14:00:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2004-08-04 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2004-08-04 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2004-08-04 14:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2004-08-04 14:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2004-08-04 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2004-08-04 14:00:00 | 000,216,408 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2004-08-04 14:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2004-08-04 14:00:00 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2004-08-04 14:00:00 | 000,162,546 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2004-08-04 14:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2004-08-04 14:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2004-08-04 14:00:00 | 000,070,622 | ---- | C] () -- C:\WINDOWS\System32\edit.com [2004-08-04 14:00:00 | 000,053,920 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe [2004-08-04 14:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2004-08-04 14:00:00 | 000,051,823 | ---- | C] () -- C:\WINDOWS\System32\command.com [2004-08-04 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2004-08-04 14:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2004-08-04 14:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2004-08-04 14:00:00 | 000,039,434 | ---- | C] () -- C:\WINDOWS\System32\mem.exe [2004-08-04 14:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2004-08-04 14:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2004-08-04 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2004-08-04 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2004-08-04 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2004-08-04 14:00:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2004-08-04 14:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2004-08-04 14:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2004-08-04 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2004-08-04 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2004-08-04 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2004-08-04 14:00:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2004-08-04 14:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2004-08-04 14:00:00 | 000,020,986 | ---- | C] () -- C:\WINDOWS\System32\debug.exe [2004-08-04 14:00:00 | 000,019,806 | ---- | C] () -- C:\WINDOWS\System32\graphics.com [2004-08-04 14:00:00 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2004-08-04 14:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2004-08-04 14:00:00 | 000,014,913 | ---- | C] () -- C:\WINDOWS\System32\kb16.com [2004-08-04 14:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2004-08-04 14:00:00 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2004-08-04 14:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [2004-08-04 14:00:00 | 000,012,866 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe [2004-08-04 14:00:00 | 000,012,594 | ---- | C] () -- C:\WINDOWS\System32\append.exe [2004-08-04 14:00:00 | 000,011,859 | ---- | C] () -- C:\WINDOWS\System32\setver.exe [2004-08-04 14:00:00 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2004-08-04 14:00:00 | 000,008,520 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe [2004-08-04 14:00:00 | 000,007,116 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe [2004-08-04 14:00:00 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2004-08-04 14:00:00 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2004-08-04 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2004-08-04 14:00:00 | 000,003,346 | ---- | C] () -- C:\WINDOWS\System32\redir.exe [2004-08-04 14:00:00 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2004-08-04 14:00:00 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2004-08-04 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2004-08-04 14:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2004-08-04 14:00:00 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2004-08-04 14:00:00 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com [2004-08-04 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe [2004-08-04 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe [2004-08-04 14:00:00 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe [2004-08-04 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2004-08-04 14:00:00 | 000,000,642 | ---- | C] () -- C:\WINDOWS\win.ini [2004-08-04 14:00:00 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2004-08-04 14:00:00 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2003-07-30 11:48:28 | 000,004,711 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2003-07-30 10:49:22 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2002-03-19 01:18:54 | 000,120,832 | ---- | C] () -- C:\WINDOWS\System32\LAME_ENC.DLL [2001-11-14 13:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll [2001-10-26 19:29:54 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe [2001-10-26 19:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [2001-03-30 22:58:36 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\Property.dll [1996-04-03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys [color=#E56717]========== LOP Check ==========[/color] [2010-07-09 14:51:00 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ [2011-03-14 14:36:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EPSON [2009-10-06 19:39:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm [2010-10-30 16:38:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound [2009-12-15 21:38:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-01-08 12:36:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PDF Writer [2010-04-09 12:44:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Photodex [2011-04-24 20:34:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Soulseek [2009-12-15 21:19:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl [2011-02-22 02:49:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TmForever [2010-10-14 18:50:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2009-12-11 03:36:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2010-05-29 00:31:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\BESTplayer [2009-09-10 10:52:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Bitstream [2009-12-05 20:26:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\com.adobe.ExMan [2010-03-13 19:20:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2009-10-18 16:26:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\DAEMON Tools [2011-04-25 14:22:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Dropbox [2011-03-14 14:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\EPSON [2010-01-27 01:59:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\EurekaLog [2009-10-17 15:06:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\FindeXer [2011-03-19 22:39:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\FontCreator [2010-11-21 02:05:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\foobar2000 [2009-12-15 21:31:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Gadu-Gadu 10 [2011-01-24 02:28:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\gtk-2.0 [2011-03-25 21:41:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\inkscape [2011-02-09 23:20:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Klipfolio [2010-10-30 13:15:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\MP3Rocket [2010-10-30 15:20:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\NCH Swift Sound [2010-04-09 12:44:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Netscape [2011-03-21 01:17:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Notepad++ [2009-09-06 18:01:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Nowe Gadu-Gadu [2010-11-05 03:59:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Nvu [2009-12-15 21:36:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\OpenFM [2009-09-11 02:35:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\OpenOffice.org [2011-02-05 15:20:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Opera [2010-07-04 13:21:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\cenzura! Culture Foundation [2011-01-24 02:28:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\PCF-VLC [2010-01-08 12:36:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\PDF Writer [2010-04-09 13:21:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Photodex [2010-04-23 15:19:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Program Files [2010-12-09 12:41:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\QuickScan [2010-04-03 18:26:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Thinstall [2011-01-13 22:21:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Thunderbird [2011-02-26 00:37:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Tlen.pl [2010-01-29 20:33:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Uniblue [2011-01-05 15:13:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\vimeo.Duplo.3E2F2984357E7A95AE95C69EF2C5C14640284048.1 [2010-06-08 00:00:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Vivox [2009-10-12 12:26:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Windows Desktop Search [2009-10-17 15:59:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\marko\Dane aplikacji\Windows Search [color=#E56717]========== Purity Check ==========[/color] < End of report >

Dodano Dzisiaj, 01:55:
a tu z GMERa:

Kod: Zaznacz wszystko: GMER 1.0.15.15570 - http://www.gmer.net Rootkit scan 2011-04-25 22:21:43 Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 TOSHIBA_MK3252GSX rev.LV011C Running: gmer.exe; Driver: C:\DOCUME~1\marko\USTAWI~1\Temp\pwkcraow.sys ---- System - GMER 1.0.15 ---- SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwAdjustPrivilegesToken [0xAA8F85FA] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwClose [0xAA8F8EFE] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwConnectPort [0xAA8F9D32] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateEvent [0xAA8FA27C] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateFile [0xAA8F91DA] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateKey [0xAA8F746A] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateMutant [0xAA8FA162] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateNamedPipeFile [0xAA8F81E8] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreatePort [0xAA8FA036] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateSection [0xAA8F8390] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateSemaphore [0xAA8FA39C] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateSymbolicLinkObject [0xAA90F6C0] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateThread [0xAA8F8B86] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateWaitablePort [0xAA8FA0CC] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDebugActiveProcess [0xAA8FBA84] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDeleteKey [0xAA8F7A74] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDeleteValueKey [0xAA8F7E28] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDeviceIoControlFile [0xAA8F965C] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDuplicateObject [0xAA8FCC90] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwEnumerateKey [0xAA8F7F74] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwEnumerateValueKey [0xAA8F800C] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwFsControlFile [0xAA8F946A] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwLoadDriver [0xAA8FBB76] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwLoadKey [0xAA8F7446] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwLoadKey2 [0xAA8F7458] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwMapViewOfSection [0xAA8FC2DE] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwNotifyChangeKey [0xAA8F8138] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenEvent [0xAA8FA312] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenFile [0xAA8F8F80] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenKey [0xAA8F762A] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenMutant [0xAA8FA1F2] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenProcess [0xAA8F8836] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenSection [0xAA8FC078] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenSemaphore [0xAA8FA432] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenThread [0xAA8F8728] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwPlugPlayControl [0xAA90F6D0] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQueryKey [0xAA8F80A4] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQueryMultipleValueKey [0xAA8F7CDC] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQuerySection [0xAA8FC618] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQueryValueKey [0xAA8F7906] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQueueApcThread [0xAA8FBF0A] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwRenameKey [0xAA8F7B96] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwReplaceKey [0xAA8F6E80] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwReplyPort [0xAA8FA796] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwReplyWaitReceivePort [0xAA8FA65C] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwRequestWaitReplyPort [0xAA8FB81E] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwRestoreKey [0xAA8F71F8] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwResumeThread [0xAA8FCB32] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSaveKey [0xAA8F6E18] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSecureConnectPort [0xAA8F9A78] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSetContextThread [0xAA8F8DA2] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSetInformationToken [0xAA8FB0BE] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSetSecurityObject [0xAA8FBD14] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSetSystemInformation [0xAA8FC768] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSetValueKey [0xAA8F7780] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSuspendProcess [0xAA8FC85A] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSuspendThread [0xAA8FC994] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSystemDebugControl [0xAA8FB9A8] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwTerminateProcess [0xAA8F89D2] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwTerminateThread [0xAA8F8932] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwUnmapViewOfSection [0xAA8FC4BC] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwWriteVirtualMemory [0xAA8F8ABC] INT 0x62 ? 8ACC2CB8 INT 0x63 ? 8ACC2CB8 INT 0x63 ? 8ACC2CB8 INT 0x63 ? 8AA85CB8 INT 0x63 ? 8AA85CB8 INT 0x63 ? 8ACC2CB8 INT 0x82 ? 8ACC2CB8 INT 0x83 ? 8AA85CB8 INT 0x83 ? 8AA85CB8 INT 0x94 ? 8AA85CB8 INT 0xA4 ? 8AA85CB8 INT 0xB4 ? 8AA85CB8 Code \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) FsRtlCheckLockForReadAccess Code \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) IoIsOperationSynchronous ---- Kernel code sections - GMER 1.0.15 ---- .text ntkrnlpa.exe!FsRtlCheckLockForReadAccess 804EAF84 5 Bytes JMP AA8EAFEC \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) .text ntkrnlpa.exe!IoIsOperationSynchronous 804EF912 5 Bytes JMP AA8EB3C8 \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) .text ntkrnlpa.exe!ZwCallbackReturn + 2CAC 80504548 16 Bytes [90, 83, 8F, AA, 9C, A3, 8F, ...] .text ntkrnlpa.exe!ZwCallbackReturn + 2D68 80504604 12 Bytes [76, BB, 8F, AA, 46, 74, 8F, ...] .text ntkrnlpa.exe!ZwCallbackReturn + 2EE4 80504780 16 Bytes [96, 7B, 8F, AA, 80, 6E, 8F, ...] .text ntkrnlpa.exe!ZwCallbackReturn + 2FD8 80504874 12 Bytes [5A, C8, 8F, AA, 94, C9, 8F, ...] .text sptd.sys B9E92000 28 Bytes [30, 78, 6E, 80, A6, CB, 6E, ...] .text sptd.sys B9E9201D 3 Bytes [79, 6E, 80] .text sptd.sys B9E92024 120 Bytes [D8, 52, 53, 80, 68, B9, 54, ...] .text sptd.sys B9E9209D 124 Bytes [97, 53, 80, A0, 98, 53, 80, ...] .text sptd.sys B9E9211A 178 Bytes [4F, 80, 82, F8, 4E, 80, 3E, ...] .text ... .sptd2 C:\WINDOWS\system32\drivers\sptd.sys entry point in ".sptd2" section [0xB9F3C9E3] ? C:\WINDOWS\system32\drivers\sptd.sys Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces. .text C:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xB86D3000, 0x18A19E, 0xE8000020] .text USBPORT.SYS!DllUnload B86B28AC 5 Bytes JMP 8AA851C8 .text C:\WINDOWS\system32\DRIVERS\atksgt.sys section is writeable [0xA08BE300, 0x3AE88, 0xE8000020] .text C:\WINDOWS\system32\DRIVERS\lirsgt.sys section is writeable [0xA40F6300, 0x1B7E, 0xE8000020] ---- User code sections - GMER 1.0.15 ---- ? C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] C:\WINDOWS\system32\ntdll.dll time/date stamp mismatch; ? C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] C:\WINDOWS\system32\kernel32.dll time/date stamp mismatch; .text C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] USER32.dll!AlignRects + FFFA5598 7E362A78 4 Bytes [E0, 13, 48, 6C] {LOOPNZ 0x15; DEC EAX; INSB } .text C:\WINDOWS\system32\SearchIndexer.exe[1504] kernel32.dll!WriteFile 7C810E27 7 Bytes JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation) ? C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] C:\WINDOWS\system32\ntdll.dll time/date stamp mismatch; ? C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] C:\WINDOWS\system32\kernel32.dll time/date stamp mismatch; .text C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] USER32.dll!AlignRects + FFFA5598 7E362A78 4 Bytes [E0, 13, 48, 6C] {LOOPNZ 0x15; DEC EAX; INSB } ---- Kernel IAT/EAT - GMER 1.0.15 ---- IAT \WINDOWS\system32\DRIVERS\PCIIDEX.SYS[HAL.dll!WRITE_PORT_ULONG] [B9E9420E] sptd.sys IAT \WINDOWS\system32\DRIVERS\PCIIDEX.SYS[HAL.dll!READ_PORT_UCHAR] [B9E9370C] sptd.sys IAT \WINDOWS\system32\DRIVERS\PCIIDEX.SYS[HAL.dll!WRITE_PORT_UCHAR] [B9E93EEE] sptd.sys IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [B9E9370C] sptd.sys IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [B9E938F0] sptd.sys IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [B9E93832] sptd.sys IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [B9E940CC] sptd.sys IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [B9E93EEE] sptd.sys IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [B9EA7F56] sptd.sys IAT \SystemRoot\system32\DRIVERS\tcpip.sys[TDI.SYS!TdiRegisterDeviceObject] [B981DDA0] kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) IAT \SystemRoot\system32\DRIVERS\netbt.sys[TDI.SYS!TdiRegisterDeviceObject] [B981DDA0] kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!RtlAllocateHeap] 00F50240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!RtlFreeHeap] 00F502B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!RtlSizeHeap] 00F50320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!RtlReAllocateHeap] 00F50390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!SetErrorMode] 012204E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 01220550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 012205C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!FreeLibrary] 01220630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!GetModuleHandleA] 012206A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!HeapDestroy] 00F50940 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!HeapCreate] 00F509B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!VirtualFree] 00F50A20 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!VirtualAlloc] 00F50A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!CreateThread] 00F50B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetErrorMode] 012208D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!CreateThread] 00F50CC0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleW] 01220940 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 012209B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleA] 01220A20 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!FreeLibrary] 01220A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 01220B00 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!VirtualAlloc] 00F50E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!VirtualFree] 00F50E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [ntdll.dll!RtlFreeHeap] 00F50EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [ntdll.dll!RtlAllocateHeap] 00F50F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ADVAPI32.dll [ntdll.dll!RtlReAllocateHeap] 7D1E0400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 01220B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!FreeLibrary] 01220BE0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 01220C50 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!CreateThread] 7D1E0550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!GetModuleHandleW] 01220CC0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!VirtualAlloc] 7D1E05C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!VirtualFree] 7D1E0630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\RPCRT4.dll [ntdll.dll!RtlFreeHeap] 7D1E06A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\RPCRT4.dll [ntdll.dll!RtlAllocateHeap] 7D1E0710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 01220D30 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!GetModuleHandleW] 01220DA0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 01220E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!FreeLibrary] 01220E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\Secur32.dll [ntdll.dll!RtlFreeHeap] 7D1E0780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\Secur32.dll [ntdll.dll!RtlAllocateHeap] 7D1E07F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!FreeLibrary] 01220EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 01220F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F02B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!CreateThread] 7D1E0860 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!GetModuleHandleA] 7D1F0320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!GetModuleHandleW] 7D1F04E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!CreateThread] 7D1E08D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!GetModuleHandleA] 7D1F0550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F05C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 7D1F0630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!FreeLibrary] 7D1F06A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\USER32.dll [ntdll.dll!RtlAllocateHeap] 7D1E0B00 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\USER32.dll [ntdll.dll!RtlFreeHeap] 7D1E0B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F0710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!FreeLibrary] 7D1F0780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 7D1F07F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\GDI32.dll [ntdll.dll!RtlAllocateHeap] 7D1E0BE0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\GDI32.dll [ntdll.dll!RtlFreeHeap] 7D1E0C50 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!SetErrorMode] 7D1F0EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!CreateThread] 00F60470 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!GetProcAddress] 7D1F0F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!FreeLibrary] 01230010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 01230080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\userenv.dll [ntdll.dll!RtlFreeHeap] 00F604E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\netapi32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 012302B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\netapi32.dll [KERNEL32.dll!FreeLibrary] 01230320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\netapi32.dll [KERNEL32.dll!GetProcAddress] 01230390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\netapi32.dll [KERNEL32.dll!CreateThread] 00F605C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\netapi32.dll [ntdll.dll!RtlAllocateHeap] 00F60710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\netapi32.dll [ntdll.dll!RtlFreeHeap] 00F60780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\PSAPI.DLL [KERNEL32.dll!FreeLibrary] 01230550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\PSAPI.DLL [KERNEL32.dll!GetProcAddress] 012305C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\PSAPI.DLL [KERNEL32.dll!SetUnhandledExceptionFilter] 01230630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 012306A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetErrorMode] 01230710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleA] 01230780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleW] 012307F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!FreeLibrary] 01230860 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!CreateThread] 00F60A20 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!HeapDestroy] 00F60A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!HeapCreate] 00F60B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 012308D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 01230D30 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!GetModuleHandleW] 01230DA0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!FreeLibrary] 01230E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!CreateThread] 00F700F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!VirtualAlloc] 00F70160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 01230E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\ole32.dll [ntdll.dll!RtlFreeHeap] 00F701D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!VirtualAlloc] 00F70390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!GetModuleHandleA] 01230F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!HeapCreate] 00F70400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!VirtualFree] 00F70470 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!HeapDestroy] 00F70630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 01240010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!GetModuleHandleW] 01240080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetErrorMode] 012400F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 01240160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!CreateThread] 00F706A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!FreeLibrary] 012401D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SHELL32.dll [ntdll.dll!RtlFreeHeap] 00F70710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!HeapCreate] 7D1E0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!HeapDestroy] 7D1E02B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 7D1F0160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!CreateThread] 7D1E01D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!FreeLibrary] 7D1F0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!FreeLibrary] 7D1F0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!GetModuleHandleA] 7D1F0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!CreateThread] 7D1E01D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress] 7D1F0160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\iphlpapi.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\iphlpapi.dll [KERNEL32.dll!FreeLibrary] 7D1F0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\iphlpapi.dll [KERNEL32.dll!HeapCreate] 7D1E0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\iphlpapi.dll [KERNEL32.dll!HeapDestroy] 7D1E02B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] 7D1F0160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\iphlpapi.dll [ntdll.dll!RtlFreeHeap] 7D1E0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\iphlpapi.dll [ntdll.dll!RtlAllocateHeap] 7D1E0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!CreateThread] 7D1E01D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!SetErrorMode] 7D1F01D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!GetModuleHandleA] 7D1F0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!GetModuleHandleW] 7D1F00F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!GetProcAddress] 7D1F0160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!FreeLibrary] 7D1F0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SAMLIB.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SAMLIB.dll [KERNEL32.dll!VirtualFree] 7D1E0390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[832] @ C:\WINDOWS\system32\SAMLIB.dll [KERNEL32.dll!VirtualAlloc] 7D1E0320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!RtlAllocateHeap] 01230240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!RtlFreeHeap] 012302B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!RtlSizeHeap] 01230320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!RtlReAllocateHeap] 01230390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!SetErrorMode] 00AA04E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 00AA0550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 00AA05C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!FreeLibrary] 00AA0630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!GetModuleHandleA] 00AA06A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!HeapDestroy] 01230940 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!HeapCreate] 012309B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!VirtualFree] 01230A20 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!VirtualAlloc] 01230A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!CreateThread] 01230B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetErrorMode] 00AA08D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!CreateThread] 01230CC0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleW] 00AA0940 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 00AA09B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleA] 00AA0A20 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!FreeLibrary] 00AA0A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 00AA0B00 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!VirtualAlloc] 01230E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!VirtualFree] 01230E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [ntdll.dll!RtlFreeHeap] 01230EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [ntdll.dll!RtlAllocateHeap] 01230F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ADVAPI32.dll [ntdll.dll!RtlReAllocateHeap] 7D1E0400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 00AA0B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!FreeLibrary] 00AA0BE0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 00AA0C50 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!CreateThread] 7D1E0550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!GetModuleHandleW] 00AA0CC0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!VirtualAlloc] 7D1E05C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!VirtualFree] 7D1E0630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\RPCRT4.dll [ntdll.dll!RtlFreeHeap] 7D1E06A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\RPCRT4.dll [ntdll.dll!RtlAllocateHeap] 7D1E0710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 00AA0D30 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!GetModuleHandleW] 00AA0DA0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 00AA0E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!FreeLibrary] 00AA0E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\Secur32.dll [ntdll.dll!RtlFreeHeap] 7D1E0780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\Secur32.dll [ntdll.dll!RtlAllocateHeap] 7D1E07F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!FreeLibrary] 00AA0EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 00AA0F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F02B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!CreateThread] 7D1E0860 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!GetModuleHandleA] 7D1F0320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!GetModuleHandleW] 7D1F04E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!CreateThread] 7D1E08D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!GetModuleHandleA] 7D1F0550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F05C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 7D1F0630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!FreeLibrary] 7D1F06A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\USER32.dll [ntdll.dll!RtlAllocateHeap] 7D1E0B00 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\USER32.dll [ntdll.dll!RtlFreeHeap] 7D1E0B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F0710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!FreeLibrary] 7D1F0780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 7D1F07F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\GDI32.dll [ntdll.dll!RtlAllocateHeap] 7D1E0BE0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\GDI32.dll [ntdll.dll!RtlFreeHeap] 7D1E0C50 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!SetErrorMode] 7D1F0EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!CreateThread] 01240470 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!GetProcAddress] 7D1F0F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!FreeLibrary] 00AB0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 00AB0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\userenv.dll [ntdll.dll!RtlFreeHeap] 012404E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\netapi32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 00AB02B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\netapi32.dll [KERNEL32.dll!FreeLibrary] 00AB0320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\netapi32.dll [KERNEL32.dll!GetProcAddress] 00AB0390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\netapi32.dll [KERNEL32.dll!CreateThread] 012405C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\netapi32.dll [ntdll.dll!RtlAllocateHeap] 01240710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\netapi32.dll [ntdll.dll!RtlFreeHeap] 01240780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\PSAPI.DLL [KERNEL32.dll!FreeLibrary] 00AB0550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\PSAPI.DLL [KERNEL32.dll!GetProcAddress] 00AB05C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\PSAPI.DLL [KERNEL32.dll!SetUnhandledExceptionFilter] 00AB0630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 00AB06A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetErrorMode] 00AB0710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleA] 00AB0780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleW] 00AB07F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!FreeLibrary] 00AB0860 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!CreateThread] 01240A20 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!HeapDestroy] 01240A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!HeapCreate] 01240B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 00AB08D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!VirtualAlloc] 01250080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!GetModuleHandleA] 00AB0D30 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!HeapCreate] 012500F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!VirtualFree] 01250160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!HeapDestroy] 01250320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 00AB0DA0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!GetModuleHandleW] 00AB0E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetErrorMode] 00AB0E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 00AB0EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!CreateThread] 01250390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!FreeLibrary] 00AB0F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\SHELL32.dll [ntdll.dll!RtlFreeHeap] 01250400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 00AC0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!GetModuleHandleW] 00AC0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!FreeLibrary] 00AC00F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!CreateThread] 01250630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!VirtualAlloc] 012506A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 00AC0160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\ole32.dll [ntdll.dll!RtlFreeHeap] 01250710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!HeapCreate] 7D1E0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!HeapDestroy] 7D1E02B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 7D1F0160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!CreateThread] 7D1E01D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!FreeLibrary] 7D1F0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!FreeLibrary] 7D1F0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7D1F0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!GetModuleHandleA] 7D1F0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!CreateThread] 7D1E01D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe[4084] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress] 7D1F0160 ---- Devices - GMER 1.0.15 ---- Device \FileSystem\Ntfs \Ntfs 8ACC11E8 AttachedDevice \Driver\Tcpip \Device\Ip kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 Wdf01000.sys (WDF Dynamic/Microsoft Corporation) Device \Driver\usbuhci \Device\USBPDO-0 8AA841E8 Device \Driver\usbuhci \Device\USBPDO-1 8AA841E8 Device \Driver\usbehci \Device\USBPDO-2 8A9A8430 Device \Driver\usbuhci \Device\USBPDO-3 8AA841E8 Device \Driver\usbuhci \Device\USBPDO-4 8AA841E8 AttachedDevice \Driver\Tcpip \Device\Tcp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\usbehci \Device\USBPDO-5 8A9A8430 Device \Driver\usbuhci \Device\USBPDO-6 8AA841E8 Device \Driver\usbuhci \Device\USBPDO-7 8AA841E8 Device \Driver\Cdrom \Device\CdRom0 8A9311E8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 [B9E23B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdePort0 [B9E23B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdePort1 [B9E23B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdePort2 [B9E23B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdePort3 [B9E23B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-12 [B9E23B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\NetBT \Device\NetBt_Wins_Export 89CB71E8 Device \Driver\NetBT \Device\NetbiosSmb 89CB71E8 AttachedDevice \Driver\Tcpip \Device\Udp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) AttachedDevice \Driver\Tcpip \Device\RawIp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\usbuhci \Device\USBFDO-0 8AA841E8 Device \Driver\NetBT \Device\NetBT_Tcpip_{589F17A7-CC73-4917-B0DE-CD18AD45204B} 89CB71E8 Device \Driver\usbuhci \Device\USBFDO-1 8AA841E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 89C4D1E8 Device \Driver\usbuhci \Device\USBFDO-2 8AA841E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector 89C4D1E8 Device \Driver\usbehci \Device\USBFDO-3 8A9A8430 Device \Driver\NetBT \Device\NetBT_Tcpip_{51D295F0-66EE-4BC3-A031-CA150DC0E225} 89CB71E8 Device \Driver\usbuhci \Device\USBFDO-4 8AA841E8 Device \Driver\usbuhci \Device\USBFDO-5 8AA841E8 Device \Driver\usbuhci \Device\USBFDO-6 8AA841E8 Device \Driver\usbehci \Device\USBFDO-7 8A9A8430 Device \FileSystem\Cdfs \Cdfs 8A43C430 ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x57 0xED 0x18 0xD1 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x50 0x8C 0x58 0x47 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xE3 0x0B 0xD3 0xDB ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x62 0x7B 0xD7 0xBA ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x50 0x8C 0x58 0x47 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x69 0x20 0xC8 0xD0 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x57 0xED 0x18 0xD1 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x50 0x8C 0x58 0x47 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xE3 0x0B 0xD3 0xDB ... ---- EOF - GMER 1.0.15 ----

**Posty:** 18165 · przez **wojtas** 26 Kwi 2011, 14:37

log z Gmera robiony w nieodpowiednich warunkach :

[Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)

poczytaj i zastosuj się do tego, i daj nowego loga z Gmera w następnym poście.

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-1644491937-299502267-725345543-1004\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [BEWINTERNET-PL-IEWSessionManager] File not found

daj wykonaj skrypt...

zobacz jak działa komp bez antywirusa, sprawdź czy jakiś proces ,,nie zużywa duzo procka " w menadżerze zadań

**Posty:** 4 · przez **klapkowy** 26 Kwi 2011, 23:41

hej, oto log po zastosowaniu skryptu:

Kod: Zaznacz wszystko: ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. Registry value HKEY_USERS\S-1-5-21-1644491937-299502267-725345543-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BEWINTERNET-PL-IEWSessionManager not found. OTL by OldTimer - Version 3.2.22.3 log created on 04262011_233856

po wyłączeniu kasperskiego faktycznie komp radykalnie przyspieszył i jest w stanie "używalności". niestety nadal długo się włącza.

po zastosowaniu się do instrukcji próbowałem skanować gmerem 3x - za każdym razem wyskakuje bluescreen (choć mam wersje z podlinkowanej strony).

co do procesów, to żaden z nich nie zajmuje więcej niż 100 kb (RAMu mam 4 GB, procesor dwurdzeniowy)

**Posty:** 18165 · przez **wojtas** 28 Kwi 2011, 17:02

Wykonaj czynności końcowe :
*Uruchom OTL z opcji sprzątanie.
* wykonaj optymalizację Windowsa ( instrukcja dla Windowsa XP, lecz w innych systemach jest podobnie )
* zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )
* Skasuj stan przywracania systemu

Kto jest na forum