- Kod: Zaznacz wszystko
[code]Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:38:02, on 2009-08-10
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\RunDLL32.exe
D:\Program Files\Winamp\winampa.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Java\jre6\bin\jusched.exe
D:\WINDOWS\RTHDCPL.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
D:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
D:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
D:\Program Files\PLAY ONLINE\PLAY ONLINE.exe
D:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Internet Download Manager Updater.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\FsUsbExService.Exe
D:\Program Files\Java\jre6\bin\jqs.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\WINDOWS\system32\wscntfy.exe
D:\WINDOWS\system32\wbem\wmiapsrv.exe
D:\Program Files\Internet Download Manager\IEMonitor.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Internet Download Manager\IDMan.exe
D:\Documents and Settings\Administrator\Moje dokumenty\Downloads\Programs\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = >>> 'Full Speed' Enabled <<<
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - D:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - D:\Documents and Settings\Administrator\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - D:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - D:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] D:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] "D:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [c0.exe] "C:\aidualc3\c0.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "D:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "D:\Program Files\Nowe Gadu-Gadu\gg.exe"
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [AutoStartNPSAgent] D:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Mobile Partner] "D:\Program Files\PLAY ONLINE\PLAY ONLINE.exe"
O4 - HKCU\..\Run: [AdobeUpdater] "D:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
O4 - HKCU\..\Run: [IDMan] D:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\RunOnce: [nLite] %systemroot%\inf\nlite.cmd (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\RunOnce: [nLite] %systemroot%\inf\nlite.cmd (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: Internet Download Manager Updater.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: &Winamp Search - D:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Ściągnij przez IDM - D:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - D:\Program Files\Internet Download Manager\IEGetVL.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{9F0749DA-7CC5-43EE-8E01-5C8219C5D95C}: NameServer = 89.108.195.20 89.108.195.21
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FsUsbExService - Teruten - D:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - D:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - D:\Program Files\PC Connectivity Solution\ServiceLayer.exe
--
End of file - 7827 bytes[/code]
[code]OTL logfile created on: 2009-08-21 12:44:23 - Run 1
OTL by OldTimer - Version 3.0.10.7 Folder = D:\Documents and Settings\Administrator\Pulpit
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
2,00 Gb Total Physical Memory | 1,43 Gb Available Physical Memory | 71,33% Memory free
3,85 Gb Paging File | 3,34 Gb Available in Paging File | 86,90% Paging File free
Paging file location(s): D:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 5,18 Gb Total Space | 3,21 Gb Free Space | 62,02% Space Free | Partition Type: NTFS
Drive D: | 122,81 Gb Total Space | 70,43 Gb Free Space | 57,35% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive J: | 11,74 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: MALINOWS-928C8C
Current User Name: Administrator
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2007-12-04 15:36:33 | 00,017,272 | ---- | M] (ALWIL Software) -- D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2007-12-04 14:00:16 | 00,140,664 | ---- | M] (ALWIL Software) -- D:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2002-12-31 14:00:00 | 01,033,728 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Explorer.EXE
PRC - [2007-12-04 14:00:23 | 00,079,224 | ---- | M] (ALWIL Software) -- D:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009-07-04 22:19:16 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009-02-17 15:50:32 | 17,508,864 | ---- | M] (Realtek Semiconductor Corp.) -- D:\WINDOWS\RTHDCPL.EXE
PRC - [2007-10-29 18:02:44 | 00,850,896 | R--- | M] (cFos Software GmbH) -- D:\Program Files\cFosSpeed\cFosSpeed.exe
PRC - [2006-11-16 19:04:20 | 00,139,264 | ---- | M] (Nero AG) -- D:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
PRC - [2008-12-29 12:40:30 | 00,687,560 | ---- | M] (DT Soft Ltd) -- D:\Program Files\DAEMON Tools Lite\daemon.exe
PRC - [2009-04-01 10:21:40 | 00,405,504 | ---- | M] (Sony Ericsson Mobile Communications AB) -- D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
PRC - [2006-11-16 18:58:32 | 00,884,736 | ---- | M] (Nero AG) -- D:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2009-03-12 19:43:30 | 00,102,400 | ---- | M] (Samsung Electronics Co., Ltd.) -- D:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
PRC - [2009-06-27 15:44:02 | 00,114,688 | ---- | M] () -- D:\Program Files\PLAY ONLINE\PLAY ONLINE.exe
PRC - [2009-08-07 14:29:16 | 02,807,216 | ---- | M] (Tonec Inc.) -- D:\Program Files\Internet Download Manager\IDMan.exe
PRC - [2009-06-27 15:17:43 | 00,287,536 | ---- | M] (BitTorrent, Inc.) -- D:\Program Files\uTorrent\uTorrent.exe
PRC - [2007-10-29 18:02:50 | 00,310,224 | R--- | M] (cFos Software GmbH) -- D:\Program Files\cFosSpeed\spd.exe
PRC - [2009-03-12 09:31:56 | 00,233,472 | ---- | M] (Teruten) -- D:\WINDOWS\System32\FsUsbExService.Exe
PRC - [2009-07-04 22:19:16 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2006-06-01 11:22:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\System32\nvsvc32.exe
PRC - [2007-12-04 13:59:53 | 00,247,160 | ---- | M] (ALWIL Software) -- D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2007-12-04 13:59:01 | 00,345,464 | ---- | M] (ALWIL Software) -- D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2002-12-31 14:00:00 | 00,013,824 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\System32\wscntfy.exe
PRC - [2008-02-18 15:01:01 | 00,251,312 | ---- | M] (Tonec Inc.) -- D:\Program Files\Internet Download Manager\IEMonitor.exe
PRC - [2009-06-30 19:55:21 | 00,185,896 | ---- | M] (RealNetworks, Inc.) -- D:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2009-08-05 10:36:57 | 00,307,704 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-08-21 12:35:38 | 00,514,048 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\Administrator\Pulpit\OTL.exe
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2007-10-24 01:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2007-12-04 15:36:33 | 00,017,272 | ---- | M] (ALWIL Software) -- D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv [Auto | Running])
SRV - [2007-12-04 14:00:16 | 00,140,664 | ---- | M] (ALWIL Software) -- D:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus [Auto | Running])
SRV - [2007-12-04 13:59:53 | 00,247,160 | ---- | M] (ALWIL Software) -- D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Running])
SRV - [2007-12-04 13:59:01 | 00,345,464 | ---- | M] (ALWIL Software) -- D:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Running])
SRV - [2007-10-29 18:02:50 | 00,310,224 | R--- | M] (cFos Software GmbH) -- D:\Program Files\cFosSpeed\spd.exe -- (cFosSpeedS [Auto | Running])
SRV - [2007-10-24 01:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2007-10-09 12:58:12 | 00,036,864 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])
SRV - [2009-03-12 09:31:56 | 00,233,472 | ---- | M] (Teruten) -- D:\WINDOWS\System32\FsUsbExService.Exe -- (FsUsbExService [Auto | Running])
SRV - [2009-07-02 16:57:05 | 00,183,280 | ---- | M] (Google) -- D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [Auto | Stopped])
SRV - [2002-12-31 14:00:00 | 00,038,912 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2007-10-11 09:55:10 | 00,864,256 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped])
SRV - [2009-07-04 22:19:16 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
SRV - [2006-11-10 19:18:02 | 00,774,144 | ---- | M] (Nero AG) -- D:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService [On_Demand | Stopped])
SRV - [2007-10-11 09:55:14 | 00,122,880 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])
SRV - [2006-06-01 11:22:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running])
SRV - [2008-04-07 09:17:30 | 00,430,592 | ---- | M] (Nokia.) -- D:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer [On_Demand | Stopped])
SRV - [2006-12-01 11:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- D:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2007-12-04 15:49:02 | 00,026,624 | ---- | M] (ALWIL Software) -- D:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4 [System | Running])
DRV - [2008-08-05 20:10:12 | 01,684,736 | ---- | M] (Creative) -- D:\WINDOWS\System32\drivers\Ambfilt.sys -- (Ambfilt [On_Demand | Stopped])
DRV - [2006-06-18 23:51:32 | 00,043,520 | ---- | M] (Advanced Micro Devices) -- D:\WINDOWS\System32\DRIVERS\AmdK8.sys -- (AmdK8 [System | Running])
DRV - [2007-12-04 15:55:46 | 00,094,544 | ---- | M] (ALWIL Software) -- D:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2 [Auto | Running])
DRV - [2007-12-04 15:53:39 | 00,023,152 | ---- | M] (ALWIL Software) -- D:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr [On_Demand | Running])
DRV - [2007-12-04 15:51:52 | 00,042,912 | ---- | M] (ALWIL Software) -- D:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi [System | Running])
DRV - [2007-10-29 18:02:54 | 00,706,512 | R--- | M] (cFos Software GmbH) -- D:\WINDOWS\System32\DRIVERS\cfosspeed.sys -- (cFosSpeed [On_Demand | Running])
DRV - [2009-06-27 14:57:38 | 00,014,656 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- D:\WINDOWS\gdrv.sys -- (gdrv [On_Demand | Stopped])
DRV - [2004-05-02 10:47:08 | 00,023,040 | R--- | M] () -- D:\WINDOWS\System32\drivers\GVCplDrv.sys -- (GVCplDrv [On_Demand | Stopped])
DRV - [2005-01-07 17:07:18 | 00,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) -- D:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2008-03-17 11:03:46 | 00,101,376 | R--- | M] (Huawei Technologies Co., Ltd.) -- D:\WINDOWS\System32\DRIVERS\ewusbmdm.sys -- (hwdatacard [On_Demand | Running])
DRV - [2009-02-18 18:31:04 | 05,028,352 | ---- | M] (Realtek Semiconductor Corp.) -- D:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2006-01-04 15:41:48 | 01,389,056 | ---- | M] (Creative Technology Ltd.) -- D:\WINDOWS\System32\drivers\Monfilt.sys -- (Monfilt [On_Demand | Stopped])
DRV - [2006-06-01 11:22:00 | 03,925,920 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running])
DRV - [2007-09-17 15:53:26 | 00,021,632 | ---- | M] (Nokia) -- D:\WINDOWS\System32\DRIVERS\pccsmcfd.sys -- (pccsmcfd [On_Demand | Stopped])
DRV - [2002-12-31 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- D:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2008-08-20 19:58:58 | 00,044,944 | ---- | M] (Sonic Solutions) -- D:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])
DRV - [2008-05-16 12:33:12 | 00,089,256 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\s0016bus.sys -- (s0016bus [On_Demand | Stopped])
DRV - [2008-05-16 12:33:14 | 00,015,016 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\s0016mdfl.sys -- (s0016mdfl [On_Demand | Stopped])
DRV - [2008-05-16 12:33:12 | 00,120,744 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\s0016mdm.sys -- (s0016mdm [On_Demand | Stopped])
DRV - [2008-05-16 12:33:12 | 00,114,216 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\s0016mgmt.sys -- (s0016mgmt [On_Demand | Stopped])
DRV - [2008-05-16 12:33:14 | 00,025,512 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\s0016nd5.sys -- (s0016nd5 [On_Demand | Stopped])
DRV - [2008-05-16 12:33:12 | 00,110,632 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\s0016obex.sys -- (s0016obex [On_Demand | Stopped])
DRV - [2008-05-16 12:33:14 | 00,115,752 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\s0016unic.sys -- (s0016unic [On_Demand | Stopped])
DRV - [2009-08-01 22:20:09 | 00,028,400 | ---- | M] () -- D:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [Auto | Running])
DRV - [2009-06-27 15:15:32 | 00,717,296 | ---- | M] () -- D:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running])
DRV - [2007-07-03 16:54:24 | 00,080,552 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\sscdbus.sys -- (sscdbus [On_Demand | Stopped])
DRV - [2007-07-03 16:57:24 | 00,011,944 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\sscdmdfl.sys -- (sscdmdfl [On_Demand | Stopped])
DRV - [2007-07-03 16:58:20 | 00,106,792 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\sscdmdm.sys -- (sscdmdm [On_Demand | Stopped])
DRV - [2007-05-02 11:11:16 | 00,083,592 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\ss_bus.sys -- (ss_bus [On_Demand | Stopped])
DRV - [2007-05-02 11:11:18 | 00,015,112 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\ss_mdfl.sys -- (ss_mdfl [On_Demand | Stopped])
DRV - [2007-05-02 11:11:18 | 00,109,704 | ---- | M] (MCCI Corporation) -- D:\WINDOWS\System32\DRIVERS\ss_mdm.sys -- (ss_mdm [On_Demand | Stopped])
DRV - [2009-03-05 09:14:50 | 00,036,608 | ---- | M] () -- D:\WINDOWS\System32\FsUsbExDisk.SYS -- (FsUsbExDisk [On_Demand | Running])
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = D:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "google.pl"
FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:6.4
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {1650a312-02bc-40ee-977e-83f158701739}:28.0
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.10.1
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.13
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: D:\Program Files\Real\RealPlayer\browserrecord [2009-06-30 19:55:37 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: D:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-07-04 22:19:17 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.13\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2009-08-09 17:37:26 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.13\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2009-08-13 14:49:44 | 00,000,000 | ---D | M]
[2009-06-27 15:10:42 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Extensions
[2009-06-27 15:10:42 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009-08-20 21:55:06 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Firefox\Profiles\27dkwtso.default\extensions
[2009-07-09 12:42:21 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Firefox\Profiles\27dkwtso.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2009-07-04 22:27:18 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Firefox\Profiles\27dkwtso.default\extensions\{1650a312-02bc-40ee-977e-83f158701739}
[2009-06-27 15:27:19 | 00,002,921 | ---- | M] () -- D:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\FireFox\Profiles\27dkwtso.default\searchplugins\daemon-search.xml
[2009-07-09 12:42:28 | 00,001,196 | ---- | M] () -- D:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\FireFox\Profiles\27dkwtso.default\searchplugins\winamp-search.xml
[2009-08-20 21:55:06 | 00,000,000 | ---D | M] -- D:\Program Files\mozilla firefox\extensions
[2009-08-05 10:36:56 | 00,000,000 | ---D | M] -- D:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009-07-04 22:19:24 | 00,000,000 | ---D | M] -- D:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009-08-05 10:36:55 | 00,023,032 | ---- | M] (Mozilla Foundation) -- D:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009-08-05 10:36:55 | 00,134,648 | ---- | M] (Mozilla Foundation) -- D:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009-07-04 22:19:16 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\mozilla firefox\plugins\npdeploytk.dll
[2009-06-15 11:14:40 | 00,120,296 | ---- | M] ( ) -- D:\Program Files\mozilla firefox\plugins\npganymedenet.dll
[2009-08-05 10:37:00 | 00,065,528 | ---- | M] (mozilla.org) -- D:\Program Files\mozilla firefox\plugins\npnul32.dll
[2006-10-23 00:24:00 | 00,091,768 | ---- | M] (Adobe Systems Inc.) -- D:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2009-06-30 19:55:30 | 00,144,984 | ---- | M] (RealNetworks, Inc.) -- D:\Program Files\mozilla firefox\plugins\nppl3260.dll
[2009-06-30 19:56:15 | 00,008,192 | ---- | M] (RealNetworks, Inc.) -- D:\Program Files\mozilla firefox\plugins\nprjplug.dll
[2009-06-30 19:55:26 | 00,094,208 | ---- | M] (RealNetworks, Inc.) -- D:\Program Files\mozilla firefox\plugins\nprpjplug.dll
[2009-07-28 16:08:20 | 00,002,767 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2009-07-04 16:19:05 | 00,001,406 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2009-07-04 16:19:05 | 00,001,706 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\google.xml
[2009-07-04 16:19:05 | 00,000,917 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2009-07-04 16:19:05 | 00,000,858 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2009-07-04 16:19:05 | 00,001,183 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2009-07-04 16:19:05 | 00,001,683 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
O1 HOSTS File: (742 bytes) - D:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - D:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - D:\Documents and Settings\Administrator\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - D:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - D:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - D:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - D:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKLM..\Run: [Alcmtr] D:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avast!] D:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [cFosSpeed] D:\Program Files\cFosSpeed\cFosSpeed.exe (cFos Software GmbH)
O4 - HKLM..\Run: [NeroFilterCheck] D:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\NvMCTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] D:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [RTHDCPL] D:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TkBellExe] D:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [AdobeUpdater] D:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [AutoStartNPSAgent] D:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] D:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKCU..\Run: [DAEMON Tools Lite] D:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU..\Run: [IDMan] D:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [Mobile Partner] D:\Program Files\PLAY ONLINE\PLAY ONLINE.exe ()
O4 - HKCU..\Run: [Nowe Gadu-Gadu] D:\Program Files\Nowe Gadu-Gadu\gg.exe (GG Network S.A.)
O4 - HKCU..\Run: [Sony Ericsson PC Suite] D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe (Sony Ericsson Mobile Communications AB)
O4 - HKCU..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [uTorrent] D:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: D:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: D:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceClassicControlPanel = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleStartMenu = 1
O8 - Extra context menu item: &Winamp Search - D:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Ściągnij przez IDM - D:\Program Files\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - D:\Program Files\Internet Download Manager\IEGetVL.htm ()
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-27 13:21:18 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008-04-23 23:44:40 | 00,114,688 | R--- | M] (Huawei Technologies Co., Ltd.) - J:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2008-08-04 19:05:00 | 00,000,049 | R--- | M] () - J:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{3c519cae-631e-11de-a627-ab4e78a66da7}\Shell - "" = AutoRun
O33 - MountPoints2\{3c519cae-631e-11de-a627-ab4e78a66da7}\Shell\AutoRun\command - "" = J:\AutoRun.exe -- [2008-04-23 23:44:40 | 00,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - D:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[1 D:\WINDOWS\System32\*.tmp files]
[4 D:\WINDOWS\*.tmp files]
[2009-08-21 12:42:13 | 00,308,735 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\s0beit mod 3.9.1 .rar
[2009-08-21 12:35:29 | 00,514,048 | ---- | C] (OldTimer Tools) -- D:\Documents and Settings\Administrator\Pulpit\OTL.exe
[2009-08-21 12:33:11 | 04,857,339 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\Gta SA-MP (najnowszy).exe
[2009-08-20 22:04:51 | 00,000,000 | ---D | C] -- D:\Program Files\MTA San Andreas
[2009-08-20 22:04:35 | 05,557,195 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\MTA Setup.exe
[2009-08-20 22:04:30 | 02,027,162 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\MTA Server Setup.exe
[2009-08-19 17:49:20 | 02,817,655 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\SASIEDZI.3gp
[2009-08-19 17:31:09 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Pulpit\NIE USUWAĆ DO GTA
[2009-08-17 19:53:37 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Pulpit\imgtool20
[2009-08-16 18:01:19 | 00,000,000 | ---D | C] -- D:\gtasa
[2009-08-14 21:46:00 | 00,000,000 | ---D | C] -- D:\Program Files\HLTooLz
[2009-08-14 18:56:38 | 00,706,512 | R--- | C] (cFos Software GmbH) -- D:\WINDOWS\System32\drivers\cfosspeed.sys
[2009-08-14 18:55:18 | 00,281,552 | ---- | C] (cFos Software GmbH) -- D:\WINDOWS\System32\cfosspeed.dll
[2009-08-14 18:55:18 | 00,000,000 | ---D | C] -- D:\Program Files\cFosSpeed
[2009-08-13 21:15:21 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Moje dokumenty\GTA San Andreas User Files
[2009-08-13 20:53:13 | 00,001,591 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\GTA San Andreas.lnk
[2009-08-13 20:53:13 | 00,000,000 | ---D | C] -- D:\Program Files\Rockstar Games
[2009-08-13 18:13:26 | 00,004,096 | ---- | C] () -- D:\WINDOWS\d3dx.dat
[2009-08-13 14:50:30 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Dane aplikacji\GanymedeNet
[2009-08-13 14:49:06 | 00,000,000 | ---D | C] -- D:\Program Files\Ganymede
[2009-08-12 15:01:01 | 00,000,000 | ---D | C] -- D:\WINDOWS\Sun
[2009-08-10 14:02:26 | 00,000,651 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\DSJ3.lnk
[2009-08-10 14:02:25 | 00,000,000 | ---D | C] -- D:\Program Files\Deluxe Ski Jump 3
[2009-08-09 23:39:43 | 00,000,000 | ---D | C] -- D:\WINDOWS\'Full Speed' Internet Booster + Performance Tests
[2009-08-09 23:39:21 | 00,000,000 | ---D | C] -- D:\fullspeed
[2009-08-09 18:29:55 | 00,000,000 | ---D | C] -- D:\Program Files\bloobs
[2009-08-08 17:47:58 | 00,000,000 | ---D | C] -- D:\Ultisoft
[2009-08-08 17:39:10 | 00,604,432 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\Comctl32.ocx
[2009-08-08 17:39:10 | 00,198,456 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\MCI32.OCX
[2009-08-07 18:32:08 | 00,000,238 | ---- | C] () -- D:\WINDOWS\mafosav.INI
[2009-08-07 18:29:36 | 00,000,611 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\ .lnk
[2009-08-07 18:29:15 | 19,693,799 | ---- | C] () -- D:\MarioForever.exe
[2009-08-07 14:28:42 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Dane aplikacji\IDM
[2009-08-07 14:28:38 | 00,000,000 | ---D | C] -- D:\Program Files\Internet Download Manager
[2009-08-06 19:37:25 | 00,000,000 | ---D | C] -- D:\Program Files\Mozilla ActiveX Control v1.7.12
[2009-08-06 17:45:42 | 00,000,621 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\Pool Champs.lnk
[2009-08-05 10:52:40 | 00,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-08-05 10:52:40 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Dane aplikacji\OpenFM
[2009-08-03 19:01:38 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Winamp Toolbar
[2009-08-03 19:01:14 | 00,000,000 | ---D | C] -- D:\Program Files\Common Files\SWF Studio
[2009-08-01 15:46:38 | 00,000,000 | -H-D | C] -- D:\WINDOWS\System32\GroupPolicy
[2009-07-30 22:47:40 | 00,000,000 | ---D | C] -- D:\Program Files\KGB Archiver
[2009-07-30 21:57:20 | 00,000,000 | ---D | C] -- D:\obraz sims2
[2009-07-30 21:56:49 | 00,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dokumenty\DAEMON Tools Images
[2009-07-30 13:57:16 | 00,000,000 | ---D | C] -- D:\WINDOWS\System32\AGEIA
[2009-07-30 13:57:15 | 00,000,000 | ---D | C] -- D:\Program Files\AGEIA Technologies
[2009-07-30 13:57:02 | 00,000,000 | ---D | C] -- D:\Program Files\Common Files\Wise Installation Wizard
[2009-07-30 10:55:57 | 00,001,430 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Need for Speed™ Carbon.lnk
[2009-07-29 21:30:32 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Moje dokumenty\NFS Carbon
[2009-07-28 16:46:36 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Dane aplikacji\WeatherWatcher
[2009-07-28 16:46:28 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Dane aplikacji\WeatherWatcherLive
[2009-07-28 16:45:59 | 00,102,400 | ---- | C] (Info-ZIP) -- D:\WINDOWS\System32\unzip32.dll
[2009-07-28 16:45:58 | 01,066,176 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\MSCOMCTL.OCX
[2009-07-28 13:51:28 | 00,001,627 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\Counter-Strike.lnk
[2009-07-28 13:51:28 | 00,001,572 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\Half-Life.lnk
[2009-07-28 13:48:42 | 00,000,000 | ---D | C] -- D:\Program Files\Counter-Strike
[2009-07-27 21:38:39 | 00,020,077 | ---- | C] () -- D:\Documents and Settings\Administrator\Moje dokumenty\zwody pes2009.odt
[2009-07-27 18:18:42 | 00,000,000 | -HSD | C] -- D:\WINDOWS\CSC
[2009-07-27 14:46:20 | 00,000,151 | ---- | C] () -- D:\WINDOWS\PhotoSnapViewer.INI
[2009-07-26 23:10:59 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Moje dokumenty\KONAMI
[2009-07-26 23:09:55 | 00,000,606 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\PES 2009.lnk
[2009-07-26 23:09:30 | 00,000,000 | -H-D | C] -- D:\WINDOWS\msdownld.tmp
[2009-07-26 21:34:51 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Pulpit\PES 2009
[2009-07-26 18:11:18 | 00,000,769 | ---- | C] () -- D:\Documents and Settings\Administrator\Pulpit\Universal Extractor.lnk
[2009-07-26 18:11:14 | 00,000,000 | ---D | C] -- D:\Program Files\Universal Extractor
[2009-07-26 11:20:32 | 01,197,294 | ---- | C] () -- D:\WINDOWS\System32\dllcache\sysmain.sdb
[2009-07-26 11:20:32 | 00,764,868 | ---- | C] () -- D:\WINDOWS\System32\dllcache\apph_sp.sdb
[2009-07-26 11:20:32 | 00,217,118 | ---- | C] () -- D:\WINDOWS\System32\dllcache\apphelp.sdb
[2009-07-26 11:20:27 | 00,014,640 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\spmsg.dll
[2009-07-26 11:20:18 | 00,221,184 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\wmpns.dll
[2009-07-26 10:55:24 | 00,001,108 | ---- | C] () -- D:\key.reg
[2009-07-25 18:48:31 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Help
[2009-07-25 18:48:31 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Dane aplikacji\Help
[2009-07-24 12:29:12 | 00,000,356 | ---- | C] () -- D:\WINDOWS\antexp.ini
[2009-07-24 11:27:47 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Moje dokumenty\FFOutput
[2009-07-22 14:28:21 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Moje dokumenty\My Art
[2009-07-01 15:44:03 | 00,110,592 | ---- | C] () -- D:\WINDOWS\System32\FsUsbExDevice.Dll
[2009-07-01 15:44:03 | 00,036,608 | ---- | C] () -- D:\WINDOWS\System32\FsUsbExDisk.Sys
[2009-06-30 19:59:24 | 00,000,950 | ---- | C] () -- D:\WINDOWS\notepad.ini
[2009-06-30 19:57:53 | 00,000,025 | ---- | C] () -- D:\WINDOWS\cdplayer.ini
[2009-06-27 19:14:49 | 00,000,116 | ---- | C] () -- D:\WINDOWS\NeroDigital.ini
[2009-06-27 15:15:32 | 00,717,296 | ---- | C] () -- D:\WINDOWS\System32\drivers\sptd.sys
[2009-06-27 15:10:38 | 00,168,448 | ---- | C] () -- D:\WINDOWS\System32\unrar.dll
[2009-06-27 15:10:36 | 03,596,288 | ---- | C] () -- D:\WINDOWS\System32\qt-dx331.dll
[2009-06-27 15:10:36 | 00,795,648 | ---- | C] () -- D:\WINDOWS\System32\xvidcore.dll
[2009-06-27 15:10:36 | 00,130,048 | ---- | C] () -- D:\WINDOWS\System32\xvidvfw.dll
[2009-06-27 15:10:35 | 00,057,344 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll
[2009-06-27 15:10:35 | 00,000,547 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-06-27 14:44:15 | 00,023,040 | R--- | C] () -- D:\WINDOWS\System32\drivers\GVCplDrv.sys
[2008-04-30 13:55:16 | 00,071,208 | ---- | C] () -- D:\WINDOWS\System32\PhysXLoader.dll
[2008-04-28 11:11:16 | 00,053,248 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008-04-28 11:11:16 | 00,053,248 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelSwedish.dll
[2008-04-28 11:11:16 | 00,053,248 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelSpanish.dll
[2008-04-28 11:11:16 | 00,053,248 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008-04-28 11:11:16 | 00,053,248 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelPortugese.dll
[2008-04-28 11:11:16 | 00,053,248 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelKorean.dll
[2008-04-28 11:11:16 | 00,053,248 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelJapanese.dll
[2008-04-28 11:11:16 | 00,053,248 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelGerman.dll
[2008-04-28 11:11:16 | 00,053,248 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelFrench.dll
[2007-10-25 17:26:10 | 00,005,632 | ---- | C] () -- D:\WINDOWS\System32\drivers\StarOpen.sys
[2006-06-01 11:22:00 | 01,662,976 | ---- | C] () -- D:\WINDOWS\System32\nvwdmcpl.dll
[2006-06-01 11:22:00 | 01,466,368 | ---- | C] () -- D:\WINDOWS\System32\nview.dll
[2006-06-01 11:22:00 | 01,019,904 | ---- | C] () -- D:\WINDOWS\System32\nvwimg.dll
[2006-06-01 11:22:00 | 00,581,632 | ---- | C] () -- D:\WINDOWS\System32\nvhwvid.dll
[2006-06-01 11:22:00 | 00,466,944 | ---- | C] () -- D:\WINDOWS\System32\nvshell.dll
[2006-06-01 11:22:00 | 00,286,720 | ---- | C] () -- D:\WINDOWS\System32\nvnt4cpl.dll
[2006-06-01 11:22:00 | 00,196,608 | ---- | C] () -- D:\WINDOWS\System32\nvapi.dll
[2002-12-31 14:00:00 | 00,081,920 | ---- | C] () -- D:\WINDOWS\System32\ieencode.dll
[2002-12-31 14:00:00 | 00,028,400 | ---- | C] () -- D:\WINDOWS\System32\drivers\secdrv.sys
[2002-12-31 14:00:00 | 00,000,507 | ---- | C] () -- D:\WINDOWS\win.ini
[2002-12-31 14:00:00 | 00,000,231 | ---- | C] () -- D:\WINDOWS\system.ini
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[1 D:\WINDOWS\System32\*.tmp files]
[4 D:\WINDOWS\*.tmp files]
[2009-08-21 12:42:18 | 00,308,735 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\s0beit mod 3.9.1 .rar
[2009-08-21 12:35:43 | 04,857,339 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\Gta SA-MP (najnowszy).exe
[2009-08-21 12:35:38 | 00,514,048 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\Administrator\Pulpit\OTL.exe
[2009-08-21 10:58:48 | 00,000,972 | ---- | M] () -- D:\WINDOWS\tasks\Google Software Updater.job
[2009-08-21 10:58:06 | 00,063,804 | ---- | M] () -- D:\WINDOWS\System32\nvapps.xml
[2009-08-21 10:57:48 | 00,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2009-08-20 19:39:33 | 00,000,116 | ---- | M] () -- D:\WINDOWS\NeroDigital.ini
[2009-08-19 17:50:39 | 02,817,655 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\SASIEDZI.3gp
[2009-08-19 16:13:04 | 00,035,840 | ---- | M] () -- D:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-08-15 23:43:58 | 02,110,458 | -H-- | M] () -- D:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-08-14 21:45:48 | 00,249,856 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Setup1.exe
[2009-08-14 21:45:48 | 00,073,216 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\ST6UNST.EXE
[2009-08-14 19:17:36 | 00,016,896 | ---- | M] () -- D:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-08-14 18:40:47 | 00,114,968 | ---- | M] () -- D:\WINDOWS\System32\FNTCACHE.DAT
[2009-08-13 20:53:13 | 00,001,591 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\GTA San Andreas.lnk
[2009-08-13 18:13:26 | 00,004,096 | ---- | M] () -- D:\WINDOWS\d3dx.dat
[2009-08-12 19:25:46 | 00,000,238 | ---- | M] () -- D:\WINDOWS\mafosav.INI
[2009-08-10 14:02:45 | 00,000,651 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\DSJ3.lnk
[2009-08-07 18:29:36 | 00,000,611 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\ .lnk
[2009-08-06 17:45:42 | 00,000,621 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\Pool Champs.lnk
[2009-08-01 22:20:09 | 00,028,400 | ---- | M] () -- D:\WINDOWS\System32\drivers\secdrv.sys
[2009-07-30 22:36:33 | 00,001,038 | ---- | M] () -- D:\WINDOWS\unins000.dat
[2009-07-30 10:55:57 | 00,001,430 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Need for Speed™ Carbon.lnk
[2009-07-28 13:51:28 | 00,001,627 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\Counter-Strike.lnk
[2009-07-28 13:51:28 | 00,001,572 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\Half-Life.lnk
[2009-07-27 21:38:40 | 00,020,077 | ---- | M] () -- D:\Documents and Settings\Administrator\Moje dokumenty\zwody pes2009.odt
[2009-07-27 15:13:28 | 00,000,151 | ---- | M] () -- D:\WINDOWS\PhotoSnapViewer.INI
[2009-07-26 23:17:17 | 00,000,356 | ---- | M] () -- D:\WINDOWS\antexp.ini
[2009-07-26 23:09:55 | 00,000,606 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\PES 2009.lnk
[2009-07-26 18:11:18 | 00,000,769 | ---- | M] () -- D:\Documents and Settings\Administrator\Pulpit\Universal Extractor.lnk
[2009-07-26 11:20:30 | 00,001,374 | ---- | M] () -- D:\WINDOWS\imsins.BAK
[2009-07-26 11:20:19 | 00,023,392 | ---- | M] () -- D:\WINDOWS\System32\nscompat.tlb
[2009-07-26 11:20:19 | 00,016,832 | ---- | M] () -- D:\WINDOWS\System32\amcompat.tlb
[2009-07-26 11:20:18 | 00,000,507 | ---- | M] () -- D:\WINDOWS\win.ini
[2009-07-26 11:18:44 | 00,002,206 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl
[2009-07-26 10:55:24 | 00,001,108 | ---- | M] () -- D:\key.reg
< End of report >
Witam macie tu loga z Hijackthis i loga z OTL. Mógłby ktoś je przeanalizować? Z góry dzięki
