Nie działa mi menedżer zadań,edytor rejestru itp

**Posty:** 7 · przez **kryhven** 21 Maj 2009, 20:21

Nie działa rejestr,menedżer zadań a mianowicie włączam je i po chwili same się wyłączają .
Proszę o szybką pomoc !
Menedżer zadań włącze kombinację alt+ctrl+del lub ctrl+shift+Esc pojawia się na chwilę poczym znika a na pasku zadań zostaje ikona,jesli najade na nią znika.
Podczas instalacji HiJackThis też były problem bo okon tegoż programu się wyłączało (samo) ;s

Naprawdę proszę o pomoc!
A o to log z HiJackThis:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:55:59, on 2009-05-21 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Userinit.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\WINDOWS\system32\RunDll32.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\smgr32.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\nvsvc32.exe C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\smgr32.exe C:\WINDOWS\system32\wuauclt.exe D:\Instalki\Opera\opera.exe D:\Instalki\Hijackthis\HijackThis.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Startup: smgr32.exe O4 - Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Add to AMV Convert Tool... - D:\Instalki\MP4\AMVConverter\grab.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: MediaManager tool grab multimedia file - D:\Instalki\MP4\MediaManager\grab.html O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\Instalki\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O21 - SSODL: leorop - {DE0C485E-5CAE-4B8F-9C21-55201BDE2368} - (no file) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 4516 bytes

**Posty:** 18165 · przez **wojtas** 21 Maj 2009, 20:32

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z OTListIt2

**Posty:** 7 · przez **kryhven** 21 Maj 2009, 20:52

Podczas rozpakowywania wystąpił bład a mianowicie:
System Windows nie może odnaleść pliku "C:\SDFIX\apps\installed.txt. Upewnij sie (..)itd.
Co dalej? ... czy postępować dalej jak nakazał wojtas ? Czy przejmować sie tym problemem . ;s

**Posty:** 18165 · przez **wojtas** 21 Maj 2009, 21:00

sprobuj dla pewnosc wylaczyc antywirusa... jesli nie pomoze daj loga

**Posty:** 7 · przez **kryhven** 21 Maj 2009, 21:11

No to loga daje znów :

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:11:10, on 2009-05-21 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Userinit.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\WINDOWS\system32\RunDll32.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\smgr32.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\nvsvc32.exe C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\smgr32.exe C:\WINDOWS\system32\wuauclt.exe D:\Instalki\Opera\opera.exe C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\system32\drwtsn32.exe C:\WINDOWS\system32\drwtsn32.exe C:\WINDOWS\system32\taskmgr.exe D:\Instalki\Hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\Userinit.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - D:\Instalki\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Startup: smgr32.exe O4 - Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Add to AMV Convert Tool... - D:\Instalki\MP4\AMVConverter\grab.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: MediaManager tool grab multimedia file - D:\Instalki\MP4\MediaManager\grab.html O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\Instalki\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O21 - SSODL: leorop - {DE0C485E-5CAE-4B8F-9C21-55201BDE2368} - (no file) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 7357 bytes

**Posty:** 18165 · przez **wojtas** 21 Maj 2009, 21:17

miales dac log z OTListIt2

**Posty:** 7 · przez **kryhven** 21 Maj 2009, 21:34

Wojtas zrobiłem tak jak kazałeś, a mianowicie w trybie awaryjnym włączyłem ten plik .bat
zeskanowało procesy itp następnie komputer się zrestartował a potem gdy włączał się na nowo trwało to dość długo i wystąpiło skanowanie malware i wyskoczyło Że system windows nie może zakończyć tego programu i Zakończ Teraz i Anuluj było więc cały czas anulowałem czekając aż program sam się wyłączy no i log z OTListIt2

Kod: Zaznacz wszystko: OTListIt logfile created on: 2009-05-21 21:29:42 - Run 2 OTListIt2 by OldTimer - Version 2.0.15.8 Folder = C:\Documents and Settings\Krystian\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,48 Mb Total Physical Memory | 680,30 Mb Available Physical Memory | 66,47% Memory free 1,65 Gb Paging File | 1,43 Gb Available in Paging File | 86,53% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 9,77 Gb Total Space | 1,53 Gb Free Space | 15,69% Space Free | Partition Type: NTFS Drive D: | 29,29 Gb Total Space | 2,93 Gb Free Space | 10,00% Space Free | Partition Type: NTFS Drive E: | 35,47 Gb Total Space | 11,28 Gb Free Space | 31,80% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DOM-ZABORZE Current User Name: Krystian Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Output = Standard File Age = 30 Days Company Name Whitelist: On [color=orange]========== Processes (SafeList) ==========[/color] PRC - [2009-05-19 19:04:51 | 00,596,539 | ---- | M] () -- C:\WINDOWS\Userinit.exe PRC - [2004-08-04 00:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2008-03-13 17:49:56 | 00,472,320 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2009-01-05 13:30:51 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2001-02-23 10:07:30 | 00,270,336 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe PRC - [2006-03-09 15:29:00 | 00,143,436 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe PRC - [2009-01-05 13:30:51 | 00,136,600 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2006-10-27 00:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2008-03-13 17:48:30 | 01,443,072 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2004-08-04 00:44:26 | 01,667,584 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2005-09-25 20:11:20 | 00,094,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe PRC - [2007-09-02 12:29:40 | 00,068,856 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe PRC - [2009-03-26 20:09:57 | 00,040,448 | ---- | M] () -- C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\smgr32.exe PRC - [2004-08-04 00:44:30 | 00,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\wmiprvse.exe PRC - [2004-08-04 00:44:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2009-05-21 21:13:09 | 00,501,248 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Krystian\Pulpit\OTListIt2.exe [color=orange]========== Win32 Services (SafeList) ==========[/color] SRV - [2008-10-22 21:40:49 | 00,072,704 | ---- | M] (Adobe Systems) -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service [On_Demand | Stopped]) SRV - [2007-10-24 02:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2007-10-24 02:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-03-13 17:55:26 | 00,019,200 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv [On_Demand | Stopped]) SRV - [2008-03-13 17:49:56 | 00,472,320 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn [Auto | Running]) SRV - [2007-10-09 13:58:12 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped]) SRV - [2009-04-04 11:19:40 | 00,137,200 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped]) SRV - [2004-08-04 00:44:08 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2005-11-14 01:06:04 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped]) SRV - [2007-10-11 10:55:10 | 00,864,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2004-08-04 00:44:02 | 00,027,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\irmon.dll -- (Irmon [Auto | Running]) SRV - [2009-01-05 13:30:51 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2001-02-23 10:07:30 | 00,270,336 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe -- (MDM [Auto | Running]) SRV - [2006-10-27 00:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [On_Demand | Stopped]) SRV - [2007-10-11 10:55:14 | 00,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2002-09-29 00:00:00 | 00,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\regedt32.exe -- (NOD32FiXTemDono [Auto | Stopped]) SRV - [2006-03-09 15:29:00 | 00,143,436 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running]) SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped]) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2007-03-26 14:06:24 | 00,292,864 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer [On_Demand | Stopped]) SRV - [2006-12-01 12:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [color=orange]========== Driver Services (SafeList) ==========[/color] DRV - [2003-07-02 18:41:42 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\axwhisky.sys -- (axwhisky [Boot | Running]) DRV - [2003-07-02 17:49:52 | 00,124,160 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\axwskbus.sys -- (axwskbus [Boot | Running]) DRV - [2003-10-17 05:52:06 | 00,754,560 | ---- | M] (C-Media Inc) -- C:\WINDOWS\system32\drivers\cmuda.sys -- (cmuda [On_Demand | Running]) DRV - [2006-05-05 13:36:26 | 00,223,128 | ---- | M] () -- C:\WINDOWS\System32\Drivers\dtscsi.sys -- (dtscsi [On_Demand | Running]) DRV - [2006-05-04 19:50:20 | 00,114,616 | ---- | M] (Analog Devices Inc.) -- C:\WINDOWS\system32\DRIVERS\e4usbaw.sys -- (e4usbaw [On_Demand | Stopped]) DRV - [2008-03-13 17:43:42 | 00,040,456 | ---- | M] (ESET) -- C:\WINDOWS\system32\DRIVERS\eamon.sys -- (eamon [Auto | Running]) DRV - [2008-03-13 17:44:36 | 00,029,704 | ---- | M] (ESET) -- C:\WINDOWS\system32\DRIVERS\easdrv.sys -- (easdrv [System | Running]) DRV - [2004-10-25 21:02:58 | 00,021,664 | ---- | M] (EnTech Taiwan) -- C:\WINDOWS\system32\DRIVERS\ENTECH.sys -- (ENTECH [On_Demand | Stopped]) DRV - [2008-03-13 17:52:18 | 00,033,800 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\epfwtdir.sys -- (epfwtdir [System | Running]) DRV - [2004-08-03 23:08:22 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running]) DRV - [2008-05-03 17:26:50 | 00,025,280 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\system32\DRIVERS\hamachi.sys -- (hamachi [On_Demand | Running]) DRV - [2006-03-02 20:25:04 | 00,063,555 | ---- | M] (Analog Deivces) -- C:\WINDOWS\System32\Drivers\e4ldr.sys -- (IKANLOADER2 [Auto | Stopped]) DRV - [2005-09-25 20:11:20 | 00,101,760 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDFs.sys -- (InCDFs [Disabled | Stopped]) DRV - [2005-09-25 20:11:20 | 00,030,464 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (InCDRm [System | Running]) DRV - [2006-02-17 21:34:10 | 00,058,288 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510bus.sys -- (k510bus [On_Demand | Stopped]) DRV - [2006-02-17 21:34:16 | 00,008,336 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510mdfl.sys -- (k510mdfl [On_Demand | Stopped]) DRV - [2006-02-17 21:34:18 | 00,094,064 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510mdm.sys -- (k510mdm [On_Demand | Stopped]) DRV - [2006-02-17 21:34:22 | 00,085,408 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510mgmt.sys -- (k510mgmt [On_Demand | Stopped]) DRV - [2006-02-17 21:34:24 | 00,083,344 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510obex.sys -- (k510obex [On_Demand | Stopped]) DRV - [2007-02-22 11:15:56 | 00,137,216 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (nmwcd [On_Demand | Stopped]) DRV - [2007-02-22 11:15:14 | 00,008,320 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (nmwcdc [On_Demand | Stopped]) DRV - [2007-02-22 11:15:14 | 00,012,288 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcdcj.sys -- (nmwcdcj [On_Demand | Stopped]) DRV - [2007-02-22 11:15:14 | 00,012,288 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (nmwcdcm [On_Demand | Stopped]) DRV - [2006-03-09 15:29:00 | 03,650,368 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running]) DRV - [2002-09-29 00:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\system32\DRIVERS\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2006-11-30 16:13:56 | 00,061,536 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45bus.sys -- (se45bus [On_Demand | Stopped]) DRV - [2006-11-30 16:14:04 | 00,009,360 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45mdfl.sys -- (se45mdfl [On_Demand | Stopped]) DRV - [2006-11-30 16:14:04 | 00,097,088 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45mdm.sys -- (se45mdm [On_Demand | Stopped]) DRV - [2006-11-30 16:14:10 | 00,088,624 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45mgmt.sys -- (se45mgmt [On_Demand | Stopped]) DRV - [2006-11-30 16:14:10 | 00,018,704 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45nd5.sys -- (se45nd5 [On_Demand | Stopped]) DRV - [2006-11-30 16:14:14 | 00,086,432 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45obex.sys -- (se45obex [On_Demand | Stopped]) DRV - [2006-11-30 16:14:22 | 00,090,800 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45unic.sys -- (se45unic [On_Demand | Stopped]) DRV - [2006-09-02 14:59:17 | 00,163,644 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [Auto | Running]) DRV - [2005-08-10 14:44:04 | 00,050,688 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01 [Boot | Running]) DRV - [2005-05-16 15:20:39 | 00,006,656 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02 [Boot | Running]) DRV - [2005-11-03 16:40:07 | 00,063,488 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02 [Boot | Running]) DRV - [2004-08-03 22:31:36 | 00,032,768 | ---- | M] (SiS Corporation) -- C:\WINDOWS\System32\DRIVERS\sisnic.sys -- (SISNIC [On_Demand | Stopped]) DRV - [2006-05-05 13:35:13 | 00,664,064 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2001-08-17 21:49:10 | 00,026,624 | ---- | M] (SigmaTel, Inc.) -- C:\WINDOWS\system32\DRIVERS\irstusb.sys -- (STIrUsb [On_Demand | Stopped]) DRV - [2003-06-22 18:00:00 | 00,043,264 | R--- | M] (NEC Corporation) -- C:\WINDOWS\system32\DRIVERS\ulusbc.sys -- (ulusbc [On_Demand | Stopped]) DRV - [2003-06-22 18:00:00 | 00,012,928 | R--- | M] (NEC Corporation) -- C:\WINDOWS\system32\DRIVERS\ulusbe.sys -- (ulusbe [On_Demand | Stopped]) DRV - [2003-06-22 18:00:00 | 00,036,352 | R--- | M] (NEC Corporation) -- C:\WINDOWS\system32\DRIVERS\ulusbm.sys -- (ulusbm [On_Demand | Stopped]) DRV - [2003-07-23 18:00:00 | 00,033,920 | R--- | M] (NEC Corporation) -- C:\WINDOWS\system32\DRIVERS\ulusbo.sys -- (ulusbo [On_Demand | Stopped]) DRV - [2004-06-10 01:42:38 | 00,015,429 | R--- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\Sacm2A.sys -- (USBCM [On_Demand | Running]) [color=orange]========== Standard Registry (SafeList) ==========[/color] [color=orange]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=orange]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.wp.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.5 FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-01-05 13:30:52 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.20\extensions\\Components: D:\INSTALKI\MOZILLA FIREFOX\COMPONENTS [2009-02-08 15:06:28 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.20\extensions\\Plugins: D:\INSTALKI\MOZILLA FIREFOX\PLUGINS [2009-02-08 15:06:28 | 00,000,000 | ---D | M] [2008-09-14 17:42:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\mozilla\Extensions [2008-09-14 17:42:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-05-21 20:47:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\mozilla\Firefox\Profiles\ozchqr6a.default\extensions [2009-01-08 19:00:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\mozilla\Firefox\Profiles\ozchqr6a.default\extensions\{526fd696-27a0-11dc-8314-0800200c9a66} O1 HOSTS File: (686 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx () O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - D:\Instalki\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.) O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (&Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O4 - HKLM..\Run: [cleanup] File not found O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found O4 - HKLM..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice (ESET) O4 - HKLM..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" (Microsoft Corporation) O4 - HKLM..\Run: [iconcache] File not found O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found O4 - HKLM..\Run: [SDFix] C:\DOCUME~1\Krystian\MOJEDO~1\GTASAN~1\SDFix\RunThis.bat /second () O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.) O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" (Nero AG) O4 - HKCU..\Run: [Ivacy Monitor] File not found O4 - HKCU..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\smgr32.exe () O4 - Startup: C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to AMV Convert Tool... - D:\Instalki\MP4\AMVConverter\grab.html File not found O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 (Microsoft Corporation) O8 - Extra context menu item: MediaManager tool grab multimedia file - D:\Instalki\MP4\MediaManager\grab.html File not found O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\Instalki\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKCU\..Trusted Domains: ([]msn in Mój komputer) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\Userinit.exe) - C:\WINDOWS\Userinit.exe () O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-05-05 10:38:19 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{c16159e1-9bb6-11dd-beea-001cea7b9bd5}\Shell - "" = Autorun O33 - MountPoints2\{c16159e1-9bb6-11dd-beea-001cea7b9bd5}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com -- File not found O33 - MountPoints2\{c16159e1-9bb6-11dd-beea-001cea7b9bd5}\Shell\Open\command - "" = I:\resycled\boot.com -- File not found O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - * [2009-05-21 21:23:56 | 00,000,000 | ---D | M] [color=orange]========== Files/Folders - Created Within 30 Days ==========[/color] [15 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] File not found -- C:\Documents and Settings\Krystian\Pulpit\Shaun Baker - HeY Hi HeLLo File not found -- C:\Documents and Settings\Krystian\Pulpit\Infinity 2008 File not found -- C:\Documents and Settings\Krystian\Pulpit\Etna Niewolnica File not found -- C:\Documents and Settings\Krystian\Pulpit\ Tarzan Boy - Baltimora [2009-05-21 21:24:17 | 00,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\user32.dll [2009-05-21 21:23:56 | 00,003,220 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\catchme.zip [2009-05-21 21:22:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2009-05-21 21:13:09 | 00,501,248 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Krystian\Pulpit\OTListIt2.exe [2009-05-21 20:47:35 | 01,529,241 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\SDFix.exe [2009-05-21 19:41:28 | 00,000,651 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\HijackThis.lnk [2009-05-21 19:40:18 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Krystian\Pulpit\HJTInstall.exe [2009-05-21 18:53:38 | 00,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy [2009-05-21 18:30:59 | 00,596,539 | ---- | C] () -- C:\WINDOWS\Userinit.exe [2009-05-21 18:30:53 | 00,155,648 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll [2009-05-21 18:30:41 | 00,688,128 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll [2009-05-21 18:30:41 | 00,000,015 | ---- | C] () -- C:\WINDOWS\winsock.dll [2009-05-21 15:30:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\Klasowa wycieczka do kina 14.05.09 [2009-05-20 20:22:13 | 00,261,295 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\unlocker1.8.7.exe [2009-05-19 16:27:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\100MSDCF [2009-05-19 16:25:56 | 06,588,884 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\100MSDCF.rar [2009-05-16 11:19:59 | 15,556,006 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\01 - Chris Lake - Only One (Original Mix).mp3 [2009-05-16 10:47:24 | 00,078,704 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\38734651.jpg [2009-05-14 23:19:14 | 00,047,967 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\62cea7effd.jpeg [2009-05-14 18:34:35 | 00,992,306 | ---- | C] (Ivacy ) -- C:\Documents and Settings\Krystian\Pulpit\ivacymonitor_setup.exe [2009-05-09 16:23:24 | 05,769,600 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\ultra flirt - the time is now 2009 (leon laney remix)www.tammy82.zafriko.pl.mp3 [2009-05-09 08:21:20 | 05,083,962 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Mbrother - Push It (Max Farenthide Extended Rmx)_WWW.CLUB-TEAM.W8W.PL.mp3 [2009-05-09 08:19:24 | 03,168,697 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\21. Wet Fingers - Put Your Hands Up.mp3 [2009-05-07 18:49:17 | 00,014,471 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\waypointy i target.rar [2009-04-27 18:53:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\Rafik [2009-04-26 16:08:17 | 00,026,112 | -HS- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Thumbs.db [2009-04-25 22:47:59 | 00,231,756 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\lol.JPG [2009-04-23 17:15:09 | 00,005,702 | -H-- | C] () -- C:\WINDOWS\nod32restoretemdono.reg [2009-04-23 17:15:09 | 00,000,568 | -H-- | C] () -- C:\WINDOWS\nod32fixtemdono.reg [2009-04-23 17:11:07 | 17,293,128 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\NOD32_3.0.650.7z [2009-03-31 20:46:11 | 00,154,624 | ---- | C] () -- C:\WINDOWS\System32\lualib.dll [2009-03-14 19:28:09 | 00,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2009-02-26 21:53:53 | 00,000,076 | ---- | C] () -- C:\WINDOWS\my.ini [2008-11-26 22:01:00 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008-11-26 22:00:59 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2008-11-26 22:00:49 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-11-26 22:00:49 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008-11-26 22:00:38 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-11-26 22:00:38 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-10-20 20:23:00 | 00,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll [2008-09-10 15:20:06 | 00,053,693 | R--- | C] () -- C:\WINDOWS\UNDPX2A.sys [2008-09-10 15:20:05 | 00,015,429 | R--- | C] ( ) -- C:\WINDOWS\System32\drivers\Sacm2A.sys [2008-08-27 20:27:20 | 00,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI [2008-03-13 17:52:18 | 00,033,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\epfwtdir.sys [2008-01-09 13:18:12 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-01-09 13:16:10 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest [2008-01-09 13:16:10 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest [2007-12-04 19:56:35 | 00,000,040 | ---- | C] () -- C:\WINDOWS\nfsc_patch.ini [2007-12-03 19:28:32 | 00,000,168 | ---- | C] () -- C:\WINDOWS\adidsl.ini [2007-12-03 19:28:32 | 00,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini [2007-12-03 19:28:15 | 00,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll [2007-12-03 19:28:13 | 00,046,892 | ---- | C] () -- C:\WINDOWS\System32\ADADIX16.DLL [2007-12-03 19:27:06 | 00,000,990 | ---- | C] () -- C:\WINDOWS\adiras.ini [2007-11-24 09:31:55 | 01,867,776 | ---- | C] () -- C:\WINDOWS\System32\python24.dll [2007-11-18 16:21:34 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2007-11-17 10:10:42 | 00,028,672 | R--- | C] () -- C:\WINDOWS\System32\adinst32.dll [2007-11-17 09:51:13 | 00,000,030 | ---- | C] () -- C:\WINDOWS\TextSpy.ini [2007-07-23 09:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2007-07-23 09:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2007-07-23 09:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2007-05-18 19:25:15 | 00,056,320 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll [2007-04-17 18:40:11 | 00,000,020 | ---- | C] () -- C:\WINDOWS\naglos.INI [2007-04-06 19:21:35 | 00,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll [2007-04-06 19:21:35 | 00,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll [2007-04-04 13:36:17 | 00,000,604 | ---- | C] () -- C:\WINDOWS\Thps3.INI [2007-02-27 21:25:34 | 00,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll [2007-02-27 21:25:34 | 00,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll [2007-02-27 21:25:33 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll [2007-01-17 21:05:31 | 00,000,072 | ---- | C] () -- C:\WINDOWS\MediaManager.INI [2006-11-02 20:22:41 | 00,005,852 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys [2006-11-02 20:22:41 | 00,000,056 | RHS- | C] () -- C:\WINDOWS\System32\09155316B1.sys [2006-10-30 19:34:54 | 00,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2006-10-30 19:34:53 | 00,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2006-10-30 19:34:53 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2006-10-30 19:34:53 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2006-06-04 10:01:06 | 00,602,112 | ---- | C] () -- C:\WINDOWS\System32\dfxg115.dll [2006-06-03 18:30:17 | 00,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2006-06-03 14:05:45 | 00,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys [2006-06-03 13:58:19 | 00,000,144 | ---- | C] () -- C:\WINDOWS\1stsr.INI [2006-06-03 13:58:09 | 00,000,069 | ---- | C] () -- C:\WINDOWS\ae_mini.INI [2006-05-29 19:17:47 | 00,000,254 | ---- | C] () -- C:\WINDOWS\SloOrtEx.ini [2006-05-21 21:09:57 | 00,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2006-05-19 19:12:22 | 00,000,238 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2006-05-05 17:32:10 | 00,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI [2006-05-05 17:32:10 | 00,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI [2006-05-05 17:32:08 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Wininit.ini [2006-05-05 17:31:53 | 00,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll [2006-05-05 17:30:57 | 00,002,140 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2006-05-05 17:30:55 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2006-05-05 14:32:58 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006-05-05 13:46:08 | 00,000,192 | ---- | C] () -- C:\WINDOWS\winamp.ini [2006-05-05 13:36:25 | 00,223,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\dtscsi.sys [2006-05-05 13:35:13 | 00,664,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2006-05-05 13:35:13 | 00,096,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd3789.sys [2006-05-05 13:20:04 | 00,000,426 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2006-05-05 13:18:07 | 00,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2006-05-05 11:17:49 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2006-03-09 15:29:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2006-03-09 15:29:00 | 01,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2006-03-09 15:29:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2006-03-09 15:29:00 | 00,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2006-03-09 15:29:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2006-03-09 15:29:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2006-03-09 15:29:00 | 00,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2004-09-01 17:49:17 | 03,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll [2003-11-20 16:09:09 | 00,286,208 | ---- | C] () -- C:\WINDOWS\System32\CNCS232.DLL [2003-07-02 18:41:42 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\axwhisky.sys [2003-07-02 17:49:52 | 00,124,160 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\axwskbus.sys [2002-09-29 00:00:00 | 00,000,750 | ---- | C] () -- C:\WINDOWS\win.ini [2002-09-29 00:00:00 | 00,000,439 | ---- | C] () -- C:\WINDOWS\system.ini [color=orange]========== Files - Modified Within 30 Days ==========[/color] [15 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] File not found -- C:\Documents and Settings\Krystian\Pulpit\Shaun Baker - HeY Hi HeLLo File not found -- C:\Documents and Settings\Krystian\Pulpit\Infinity 2008 File not found -- C:\Documents and Settings\Krystian\Pulpit\Etna Niewolnica File not found -- C:\Documents and Settings\Krystian\Pulpit\ Tarzan Boy - Baltimora [2009-05-21 21:29:10 | 00,050,257 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2009-05-21 21:28:10 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-05-21 21:28:08 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\Krystian\Ustawienia lokalne\desktop.ini [2009-05-21 21:28:07 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-05-21 21:25:37 | 00,000,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS [2009-05-21 21:24:17 | 00,578,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\user32.dll [2009-05-21 21:23:56 | 00,003,220 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\catchme.zip [2009-05-21 21:13:09 | 00,501,248 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Krystian\Pulpit\OTListIt2.exe [2009-05-21 20:41:01 | 01,529,241 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\SDFix.exe [2009-05-21 19:41:28 | 00,000,651 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\HijackThis.lnk [2009-05-21 19:40:22 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Krystian\Pulpit\HJTInstall.exe [2009-05-21 18:30:59 | 00,000,015 | ---- | M] () -- C:\WINDOWS\winsock.dll [2009-05-21 18:30:57 | 00,155,648 | ---- | M] () -- C:\WINDOWS\System32\ssleay32.dll [2009-05-21 18:30:52 | 00,688,128 | ---- | M] () -- C:\WINDOWS\System32\libeay32.dll [2009-05-21 15:21:59 | 00,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-05-20 20:22:16 | 00,261,295 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\unlocker1.8.7.exe [2009-05-20 20:17:23 | 00,000,439 | ---- | M] () -- C:\WINDOWS\system.ini [2009-05-20 14:47:06 | 00,000,561 | ---- | M] () -- C:\WINDOWS\System\CmiCnfg.ini [2009-05-19 19:04:51 | 00,596,539 | ---- | M] () -- C:\WINDOWS\Userinit.exe [2009-05-19 16:26:00 | 06,588,884 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\100MSDCF.rar [2009-05-16 11:21:19 | 15,556,006 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\01 - Chris Lake - Only One (Original Mix).mp3 [2009-05-16 10:47:38 | 00,026,112 | -HS- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Thumbs.db [2009-05-16 10:47:24 | 00,078,704 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\38734651.jpg [2009-05-14 23:19:14 | 00,047,967 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\62cea7effd.jpeg [2009-05-14 18:34:44 | 00,992,306 | ---- | M] (Ivacy ) -- C:\Documents and Settings\Krystian\Pulpit\ivacymonitor_setup.exe [2009-05-09 16:23:58 | 05,769,600 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\ultra flirt - the time is now 2009 (leon laney remix)www.tammy82.zafriko.pl.mp3 [2009-05-09 08:21:28 | 05,083,962 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Mbrother - Push It (Max Farenthide Extended Rmx)_WWW.CLUB-TEAM.W8W.PL.mp3 [2009-05-09 08:19:31 | 03,168,697 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\21. Wet Fingers - Put Your Hands Up.mp3 [2009-05-08 19:33:14 | 00,231,756 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\lol.JPG [2009-05-07 18:49:17 | 00,014,471 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\waypointy i target.rar [2009-04-23 17:12:26 | 17,293,128 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\NOD32_3.0.650.7z [color=orange]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 225 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:4EE74317 < End of report >

Przepraszam za długi log .. ;s
a tu treść report.txt

Kod: Zaznacz wszystko: [b]SDFix: Version 1.240 [/b] Run by Krystian on 2009-05-21 at 21:25 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\Documents and Settings\Krystian\Moje dokumenty\GTA San Andreas User Files\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting

**Posty:** 18165 · przez **wojtas** 21 Maj 2009, 21:56

Uruchom OTListIt2 i w oknie Custom Scans/Fixes wklej :

:OTLI
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O4 - HKLM..\Run: [cleanup] File not found
O4 - HKLM..\Run: [SDFix] C:\DOCUME~1\Krystian\MOJEDO~1\GTASAN~1\SDFix\RunThis.bat /second ()
O4 - HKCU..\Run: [Ivacy Monitor] File not found
O4 - Startup: C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\smgr32.exe ()
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\Userinit.exe) - C:\WINDOWS\Userinit.exe ()
O33 - MountPoints2\{c16159e1-9bb6-11dd-beea-001cea7b9bd5}\Shell - "" = Autorun
O33 - MountPoints2\{c16159e1-9bb6-11dd-beea-001cea7b9bd5}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com -- File not found
O33 - MountPoints2\{c16159e1-9bb6-11dd-beea-001cea7b9bd5}\Shell\Open\command - "" = I:\resycled\boot.com -- File not found

:Files
C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\smgr32.exe
C:\WINDOWS\Userinit.exe

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTListIt2 z opcją Run Scan. Pokazujesz nowy log OTListIt.txt (czyszczenie i skan )

**Posty:** 7 · przez **kryhven** 21 Maj 2009, 22:07

No i log po restarcie kompa :
(znów jest długi przepraszam)

Kod: Zaznacz wszystko: OTListIt logfile created on: 2009-05-21 22:04:10 - Run 3 OTListIt2 by OldTimer - Version 2.0.15.8 Folder = C:\Documents and Settings\Krystian\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,48 Mb Total Physical Memory | 655,43 Mb Available Physical Memory | 64,04% Memory free 1,65 Gb Paging File | 1,40 Gb Available in Paging File | 84,46% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 9,77 Gb Total Space | 1,53 Gb Free Space | 15,63% Space Free | Partition Type: NTFS Drive D: | 29,29 Gb Total Space | 2,93 Gb Free Space | 10,00% Space Free | Partition Type: NTFS Drive E: | 35,47 Gb Total Space | 11,28 Gb Free Space | 31,80% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DOM-ZABORZE Current User Name: Krystian Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Output = Standard File Age = 30 Days Company Name Whitelist: On [color=orange]========== Processes (SafeList) ==========[/color] PRC - [2004-08-04 00:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2009-01-05 13:30:51 | 00,136,600 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2006-10-27 00:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2008-03-13 17:48:30 | 01,443,072 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2004-08-04 00:44:26 | 01,667,584 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2005-09-25 20:11:20 | 00,094,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe PRC - [2007-09-02 12:29:40 | 00,068,856 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe PRC - [2008-03-13 17:49:56 | 00,472,320 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2009-01-05 13:30:51 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2001-02-23 10:07:30 | 00,270,336 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe PRC - [2006-03-09 15:29:00 | 00,143,436 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe PRC - [2004-08-04 00:44:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2008-10-28 18:45:02 | 00,098,816 | ---- | M] (Opera Software) -- D:\Instalki\Opera\opera.exe PRC - [2009-05-21 21:13:09 | 00,501,248 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Krystian\Pulpit\OTListIt2.exe [color=orange]========== Win32 Services (SafeList) ==========[/color] SRV - [2008-10-22 21:40:49 | 00,072,704 | ---- | M] (Adobe Systems) -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service [On_Demand | Stopped]) SRV - [2007-10-24 02:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2007-10-24 02:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-03-13 17:55:26 | 00,019,200 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv [On_Demand | Stopped]) SRV - [2008-03-13 17:49:56 | 00,472,320 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn [Auto | Running]) SRV - [2007-10-09 13:58:12 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped]) SRV - [2009-04-04 11:19:40 | 00,137,200 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped]) SRV - [2004-08-04 00:44:08 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2005-11-14 01:06:04 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped]) SRV - [2007-10-11 10:55:10 | 00,864,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2004-08-04 00:44:02 | 00,027,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\irmon.dll -- (Irmon [Auto | Running]) SRV - [2009-01-05 13:30:51 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2001-02-23 10:07:30 | 00,270,336 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe -- (MDM [Auto | Running]) SRV - [2006-10-27 00:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [On_Demand | Stopped]) SRV - [2007-10-11 10:55:14 | 00,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2002-09-29 00:00:00 | 00,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\regedt32.exe -- (NOD32FiXTemDono [Auto | Stopped]) SRV - [2006-03-09 15:29:00 | 00,143,436 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running]) SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped]) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2007-03-26 14:06:24 | 00,292,864 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer [On_Demand | Stopped]) SRV - [2006-12-01 12:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [color=orange]========== Driver Services (SafeList) ==========[/color] DRV - [2003-07-02 18:41:42 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\axwhisky.sys -- (axwhisky [Boot | Running]) DRV - [2003-07-02 17:49:52 | 00,124,160 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\axwskbus.sys -- (axwskbus [Boot | Running]) DRV - [2003-10-17 05:52:06 | 00,754,560 | ---- | M] (C-Media Inc) -- C:\WINDOWS\system32\drivers\cmuda.sys -- (cmuda [On_Demand | Running]) DRV - [2006-05-05 13:36:26 | 00,223,128 | ---- | M] () -- C:\WINDOWS\System32\Drivers\dtscsi.sys -- (dtscsi [On_Demand | Running]) DRV - [2006-05-04 19:50:20 | 00,114,616 | ---- | M] (Analog Devices Inc.) -- C:\WINDOWS\system32\DRIVERS\e4usbaw.sys -- (e4usbaw [On_Demand | Stopped]) DRV - [2008-03-13 17:43:42 | 00,040,456 | ---- | M] (ESET) -- C:\WINDOWS\system32\DRIVERS\eamon.sys -- (eamon [Auto | Running]) DRV - [2008-03-13 17:44:36 | 00,029,704 | ---- | M] (ESET) -- C:\WINDOWS\system32\DRIVERS\easdrv.sys -- (easdrv [System | Running]) DRV - [2004-10-25 21:02:58 | 00,021,664 | ---- | M] (EnTech Taiwan) -- C:\WINDOWS\system32\DRIVERS\ENTECH.sys -- (ENTECH [On_Demand | Stopped]) DRV - [2008-03-13 17:52:18 | 00,033,800 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\epfwtdir.sys -- (epfwtdir [System | Running]) DRV - [2004-08-03 23:08:22 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running]) DRV - [2008-05-03 17:26:50 | 00,025,280 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\system32\DRIVERS\hamachi.sys -- (hamachi [On_Demand | Running]) DRV - [2006-03-02 20:25:04 | 00,063,555 | ---- | M] (Analog Deivces) -- C:\WINDOWS\System32\Drivers\e4ldr.sys -- (IKANLOADER2 [Auto | Stopped]) DRV - [2005-09-25 20:11:20 | 00,101,760 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDFs.sys -- (InCDFs [Disabled | Stopped]) DRV - [2005-09-25 20:11:20 | 00,030,464 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (InCDRm [System | Running]) DRV - [2006-02-17 21:34:10 | 00,058,288 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510bus.sys -- (k510bus [On_Demand | Stopped]) DRV - [2006-02-17 21:34:16 | 00,008,336 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510mdfl.sys -- (k510mdfl [On_Demand | Stopped]) DRV - [2006-02-17 21:34:18 | 00,094,064 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510mdm.sys -- (k510mdm [On_Demand | Stopped]) DRV - [2006-02-17 21:34:22 | 00,085,408 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510mgmt.sys -- (k510mgmt [On_Demand | Stopped]) DRV - [2006-02-17 21:34:24 | 00,083,344 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\k510obex.sys -- (k510obex [On_Demand | Stopped]) DRV - [2007-02-22 11:15:56 | 00,137,216 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (nmwcd [On_Demand | Stopped]) DRV - [2007-02-22 11:15:14 | 00,008,320 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (nmwcdc [On_Demand | Stopped]) DRV - [2007-02-22 11:15:14 | 00,012,288 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcdcj.sys -- (nmwcdcj [On_Demand | Stopped]) DRV - [2007-02-22 11:15:14 | 00,012,288 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (nmwcdcm [On_Demand | Stopped]) DRV - [2006-03-09 15:29:00 | 03,650,368 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running]) DRV - [2002-09-29 00:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\system32\DRIVERS\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2006-11-30 16:13:56 | 00,061,536 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45bus.sys -- (se45bus [On_Demand | Stopped]) DRV - [2006-11-30 16:14:04 | 00,009,360 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45mdfl.sys -- (se45mdfl [On_Demand | Stopped]) DRV - [2006-11-30 16:14:04 | 00,097,088 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45mdm.sys -- (se45mdm [On_Demand | Stopped]) DRV - [2006-11-30 16:14:10 | 00,088,624 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45mgmt.sys -- (se45mgmt [On_Demand | Stopped]) DRV - [2006-11-30 16:14:10 | 00,018,704 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45nd5.sys -- (se45nd5 [On_Demand | Stopped]) DRV - [2006-11-30 16:14:14 | 00,086,432 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45obex.sys -- (se45obex [On_Demand | Stopped]) DRV - [2006-11-30 16:14:22 | 00,090,800 | R--- | M] (MCCI) -- C:\WINDOWS\system32\DRIVERS\se45unic.sys -- (se45unic [On_Demand | Stopped]) DRV - [2006-09-02 14:59:17 | 00,163,644 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [Auto | Running]) DRV - [2005-08-10 14:44:04 | 00,050,688 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01 [Boot | Running]) DRV - [2005-05-16 15:20:39 | 00,006,656 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02 [Boot | Running]) DRV - [2005-11-03 16:40:07 | 00,063,488 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02 [Boot | Running]) DRV - [2004-08-03 22:31:36 | 00,032,768 | ---- | M] (SiS Corporation) -- C:\WINDOWS\System32\DRIVERS\sisnic.sys -- (SISNIC [On_Demand | Stopped]) DRV - [2006-05-05 13:35:13 | 00,664,064 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2001-08-17 21:49:10 | 00,026,624 | ---- | M] (SigmaTel, Inc.) -- C:\WINDOWS\system32\DRIVERS\irstusb.sys -- (STIrUsb [On_Demand | Stopped]) DRV - [2003-06-22 18:00:00 | 00,043,264 | R--- | M] (NEC Corporation) -- C:\WINDOWS\system32\DRIVERS\ulusbc.sys -- (ulusbc [On_Demand | Stopped]) DRV - [2003-06-22 18:00:00 | 00,012,928 | R--- | M] (NEC Corporation) -- C:\WINDOWS\system32\DRIVERS\ulusbe.sys -- (ulusbe [On_Demand | Stopped]) DRV - [2003-06-22 18:00:00 | 00,036,352 | R--- | M] (NEC Corporation) -- C:\WINDOWS\system32\DRIVERS\ulusbm.sys -- (ulusbm [On_Demand | Stopped]) DRV - [2003-07-23 18:00:00 | 00,033,920 | R--- | M] (NEC Corporation) -- C:\WINDOWS\system32\DRIVERS\ulusbo.sys -- (ulusbo [On_Demand | Stopped]) DRV - [2004-06-10 01:42:38 | 00,015,429 | R--- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\Sacm2A.sys -- (USBCM [On_Demand | Running]) [color=orange]========== Standard Registry (SafeList) ==========[/color] [color=orange]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=orange]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.wp.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.5 FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-01-05 13:30:52 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.20\extensions\\Components: D:\INSTALKI\MOZILLA FIREFOX\COMPONENTS [2009-02-08 15:06:28 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.20\extensions\\Plugins: D:\INSTALKI\MOZILLA FIREFOX\PLUGINS [2009-02-08 15:06:28 | 00,000,000 | ---D | M] [2008-09-14 17:42:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\mozilla\Extensions [2008-09-14 17:42:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-05-21 20:47:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\mozilla\Firefox\Profiles\ozchqr6a.default\extensions [2009-01-08 19:00:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\mozilla\Firefox\Profiles\ozchqr6a.default\extensions\{526fd696-27a0-11dc-8314-0800200c9a66} O1 HOSTS File: (686 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx () O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - D:\Instalki\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.) O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (&Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found O4 - HKLM..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice (ESET) O4 - HKLM..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" (Microsoft Corporation) O4 - HKLM..\Run: [iconcache] File not found O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.) O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" (Nero AG) O4 - HKCU..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\Krystian\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to AMV Convert Tool... - D:\Instalki\MP4\AMVConverter\grab.html File not found O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 (Microsoft Corporation) O8 - Extra context menu item: MediaManager tool grab multimedia file - D:\Instalki\MP4\MediaManager\grab.html File not found O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\Instalki\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKCU\..Trusted Domains: ([]msn in Mój komputer) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\Userinit.exe) - C:\WINDOWS\Userinit.exe File not found O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-05-05 10:38:19 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - * [2009-05-21 22:00:22 | 00,000,000 | ---D | M] [color=orange]========== Files/Folders - Created Within 30 Days ==========[/color] [15 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] File not found -- C:\Documents and Settings\Krystian\Pulpit\Shaun Baker - HeY Hi HeLLo File not found -- C:\Documents and Settings\Krystian\Pulpit\Infinity 2008 File not found -- C:\Documents and Settings\Krystian\Pulpit\Etna Niewolnica File not found -- C:\Documents and Settings\Krystian\Pulpit\ Tarzan Boy - Baltimora [2009-05-21 21:59:06 | 00,000,000 | ---D | C] -- C:\_OTListIt [2009-05-21 21:24:17 | 00,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\user32.dll [2009-05-21 21:23:56 | 00,003,220 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\catchme.zip [2009-05-21 21:22:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2009-05-21 21:13:09 | 00,501,248 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Krystian\Pulpit\OTListIt2.exe [2009-05-21 20:47:35 | 01,529,241 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\SDFix.exe [2009-05-21 19:41:28 | 00,000,651 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\HijackThis.lnk [2009-05-21 19:40:18 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Krystian\Pulpit\HJTInstall.exe [2009-05-21 18:53:38 | 00,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy [2009-05-21 18:30:53 | 00,155,648 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll [2009-05-21 18:30:41 | 00,688,128 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll [2009-05-21 18:30:41 | 00,000,015 | ---- | C] () -- C:\WINDOWS\winsock.dll [2009-05-21 15:30:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\Klasowa wycieczka do kina 14.05.09 [2009-05-20 20:22:13 | 00,261,295 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\unlocker1.8.7.exe [2009-05-19 16:27:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\100MSDCF [2009-05-19 16:25:56 | 06,588,884 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\100MSDCF.rar [2009-05-16 11:19:59 | 15,556,006 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\01 - Chris Lake - Only One (Original Mix).mp3 [2009-05-16 10:47:24 | 00,078,704 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\38734651.jpg [2009-05-14 23:19:14 | 00,047,967 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\62cea7effd.jpeg [2009-05-14 18:34:35 | 00,992,306 | ---- | C] (Ivacy ) -- C:\Documents and Settings\Krystian\Pulpit\ivacymonitor_setup.exe [2009-05-09 16:23:24 | 05,769,600 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\ultra flirt - the time is now 2009 (leon laney remix)www.tammy82.zafriko.pl.mp3 [2009-05-09 08:21:20 | 05,083,962 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Mbrother - Push It (Max Farenthide Extended Rmx)_WWW.CLUB-TEAM.W8W.PL.mp3 [2009-05-09 08:19:24 | 03,168,697 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\21. Wet Fingers - Put Your Hands Up.mp3 [2009-05-07 18:49:17 | 00,014,471 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\waypointy i target.rar [2009-04-27 18:53:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\Rafik [2009-04-26 16:08:17 | 00,026,112 | -HS- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Thumbs.db [2009-04-25 22:47:59 | 00,231,756 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\lol.JPG [2009-04-23 17:15:09 | 00,005,702 | -H-- | C] () -- C:\WINDOWS\nod32restoretemdono.reg [2009-04-23 17:15:09 | 00,000,568 | -H-- | C] () -- C:\WINDOWS\nod32fixtemdono.reg [2009-04-23 17:11:07 | 17,293,128 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\NOD32_3.0.650.7z [2009-03-31 20:46:11 | 00,154,624 | ---- | C] () -- C:\WINDOWS\System32\lualib.dll [2009-03-14 19:28:09 | 00,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2009-02-26 21:53:53 | 00,000,076 | ---- | C] () -- C:\WINDOWS\my.ini [2008-11-26 22:01:00 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008-11-26 22:00:59 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2008-11-26 22:00:49 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-11-26 22:00:49 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008-11-26 22:00:38 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-11-26 22:00:38 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-10-20 20:23:00 | 00,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll [2008-09-10 15:20:06 | 00,053,693 | R--- | C] () -- C:\WINDOWS\UNDPX2A.sys [2008-09-10 15:20:05 | 00,015,429 | R--- | C] ( ) -- C:\WINDOWS\System32\drivers\Sacm2A.sys [2008-08-27 20:27:20 | 00,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI [2008-03-13 17:52:18 | 00,033,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\epfwtdir.sys [2008-01-09 13:18:12 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-01-09 13:16:10 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest [2008-01-09 13:16:10 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest [2007-12-04 19:56:35 | 00,000,040 | ---- | C] () -- C:\WINDOWS\nfsc_patch.ini [2007-12-03 19:28:32 | 00,000,168 | ---- | C] () -- C:\WINDOWS\adidsl.ini [2007-12-03 19:28:32 | 00,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini [2007-12-03 19:28:15 | 00,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll [2007-12-03 19:28:13 | 00,046,892 | ---- | C] () -- C:\WINDOWS\System32\ADADIX16.DLL [2007-12-03 19:27:06 | 00,000,990 | ---- | C] () -- C:\WINDOWS\adiras.ini [2007-11-24 09:31:55 | 01,867,776 | ---- | C] () -- C:\WINDOWS\System32\python24.dll [2007-11-18 16:21:34 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2007-11-17 10:10:42 | 00,028,672 | R--- | C] () -- C:\WINDOWS\System32\adinst32.dll [2007-11-17 09:51:13 | 00,000,030 | ---- | C] () -- C:\WINDOWS\TextSpy.ini [2007-07-23 09:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2007-07-23 09:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2007-07-23 09:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2007-05-18 19:25:15 | 00,056,320 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll [2007-04-17 18:40:11 | 00,000,020 | ---- | C] () -- C:\WINDOWS\naglos.INI [2007-04-06 19:21:35 | 00,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll [2007-04-06 19:21:35 | 00,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll [2007-04-04 13:36:17 | 00,000,604 | ---- | C] () -- C:\WINDOWS\Thps3.INI [2007-02-27 21:25:34 | 00,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll [2007-02-27 21:25:34 | 00,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll [2007-02-27 21:25:33 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll [2007-01-17 21:05:31 | 00,000,072 | ---- | C] () -- C:\WINDOWS\MediaManager.INI [2006-11-02 20:22:41 | 00,005,852 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys [2006-11-02 20:22:41 | 00,000,056 | RHS- | C] () -- C:\WINDOWS\System32\09155316B1.sys [2006-10-30 19:34:54 | 00,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2006-10-30 19:34:53 | 00,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2006-10-30 19:34:53 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2006-10-30 19:34:53 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2006-06-04 10:01:06 | 00,602,112 | ---- | C] () -- C:\WINDOWS\System32\dfxg115.dll [2006-06-03 18:30:17 | 00,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2006-06-03 14:05:45 | 00,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys [2006-06-03 13:58:19 | 00,000,144 | ---- | C] () -- C:\WINDOWS\1stsr.INI [2006-06-03 13:58:09 | 00,000,069 | ---- | C] () -- C:\WINDOWS\ae_mini.INI [2006-05-29 19:17:47 | 00,000,254 | ---- | C] () -- C:\WINDOWS\SloOrtEx.ini [2006-05-21 21:09:57 | 00,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2006-05-19 19:12:22 | 00,000,238 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2006-05-05 17:32:10 | 00,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI [2006-05-05 17:32:10 | 00,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI [2006-05-05 17:32:08 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Wininit.ini [2006-05-05 17:31:53 | 00,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll [2006-05-05 17:30:57 | 00,002,140 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2006-05-05 17:30:55 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2006-05-05 14:32:58 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006-05-05 13:46:08 | 00,000,192 | ---- | C] () -- C:\WINDOWS\winamp.ini [2006-05-05 13:36:25 | 00,223,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\dtscsi.sys [2006-05-05 13:35:13 | 00,664,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2006-05-05 13:35:13 | 00,096,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd3789.sys [2006-05-05 13:20:04 | 00,000,426 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2006-05-05 13:18:07 | 00,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2006-05-05 11:17:49 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2006-03-09 15:29:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2006-03-09 15:29:00 | 01,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2006-03-09 15:29:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2006-03-09 15:29:00 | 00,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2006-03-09 15:29:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2006-03-09 15:29:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2006-03-09 15:29:00 | 00,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2004-09-01 17:49:17 | 03,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll [2003-11-20 16:09:09 | 00,286,208 | ---- | C] () -- C:\WINDOWS\System32\CNCS232.DLL [2003-07-02 18:41:42 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\axwhisky.sys [2003-07-02 17:49:52 | 00,124,160 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\axwskbus.sys [2002-09-29 00:00:00 | 00,000,750 | ---- | C] () -- C:\WINDOWS\win.ini [2002-09-29 00:00:00 | 00,000,439 | ---- | C] () -- C:\WINDOWS\system.ini [color=orange]========== Files - Modified Within 30 Days ==========[/color] [15 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] File not found -- C:\Documents and Settings\Krystian\Pulpit\Shaun Baker - HeY Hi HeLLo File not found -- C:\Documents and Settings\Krystian\Pulpit\Infinity 2008 File not found -- C:\Documents and Settings\Krystian\Pulpit\Etna Niewolnica File not found -- C:\Documents and Settings\Krystian\Pulpit\ Tarzan Boy - Baltimora [2009-05-21 22:00:24 | 00,050,257 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2009-05-21 22:00:21 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-05-21 22:00:19 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\Krystian\Ustawienia lokalne\desktop.ini [2009-05-21 22:00:18 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-05-21 21:25:37 | 00,000,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS [2009-05-21 21:24:17 | 00,578,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\user32.dll [2009-05-21 21:23:56 | 00,003,220 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\catchme.zip [2009-05-21 21:13:09 | 00,501,248 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Krystian\Pulpit\OTListIt2.exe [2009-05-21 20:41:01 | 01,529,241 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\SDFix.exe [2009-05-21 19:41:28 | 00,000,651 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\HijackThis.lnk [2009-05-21 19:40:22 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Krystian\Pulpit\HJTInstall.exe [2009-05-21 18:30:59 | 00,000,015 | ---- | M] () -- C:\WINDOWS\winsock.dll [2009-05-21 18:30:57 | 00,155,648 | ---- | M] () -- C:\WINDOWS\System32\ssleay32.dll [2009-05-21 18:30:52 | 00,688,128 | ---- | M] () -- C:\WINDOWS\System32\libeay32.dll [2009-05-21 15:21:59 | 00,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-05-20 20:22:16 | 00,261,295 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\unlocker1.8.7.exe [2009-05-20 20:17:23 | 00,000,439 | ---- | M] () -- C:\WINDOWS\system.ini [2009-05-20 14:47:06 | 00,000,561 | ---- | M] () -- C:\WINDOWS\System\CmiCnfg.ini [2009-05-19 16:26:00 | 06,588,884 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\100MSDCF.rar [2009-05-16 11:21:19 | 15,556,006 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\01 - Chris Lake - Only One (Original Mix).mp3 [2009-05-16 10:47:38 | 00,026,112 | -HS- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Thumbs.db [2009-05-16 10:47:24 | 00,078,704 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\38734651.jpg [2009-05-14 23:19:14 | 00,047,967 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\62cea7effd.jpeg [2009-05-14 18:34:44 | 00,992,306 | ---- | M] (Ivacy ) -- C:\Documents and Settings\Krystian\Pulpit\ivacymonitor_setup.exe [2009-05-09 16:23:58 | 05,769,600 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\ultra flirt - the time is now 2009 (leon laney remix)www.tammy82.zafriko.pl.mp3 [2009-05-09 08:21:28 | 05,083,962 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Mbrother - Push It (Max Farenthide Extended Rmx)_WWW.CLUB-TEAM.W8W.PL.mp3 [2009-05-09 08:19:31 | 03,168,697 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\21. Wet Fingers - Put Your Hands Up.mp3 [2009-05-08 19:33:14 | 00,231,756 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\lol.JPG [2009-05-07 18:49:17 | 00,014,471 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\waypointy i target.rar [2009-04-23 17:12:26 | 17,293,128 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\NOD32_3.0.650.7z [color=orange]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 225 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:4EE74317 < End of report >

**Posty:** 18165 · przez **wojtas** 21 Maj 2009, 22:10

1.Uruchom OTListIt2 z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. Wykonaj skan Dr. Web CureIt
5. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym (skasuj co znajdzie)

Malwarebytes Anti-Malware.

Jeśli masz Adobe Reader to zaaktualizuj go do najnowszej wersji

**Posty:** 7 · przez **kryhven** 21 Maj 2009, 22:31

Doszedłem do punktu 5 i stoję bo IE krzyczy: Nie można wyświetlić strony! ;s
co radzisz robić dalej ?
Jeśli chodzi o uprzednie punkty nic nie znalazło.

Dodano Dzisiaj, 22:38:
Ale już menedżer zadań działa i regedit również

Dziękuję

**Posty:** 18165 · przez **wojtas** 21 Maj 2009, 22:42

co ? skan Malwarebytes Anti-Malware i to wszystko

pozdrawiam

Autor postu otrzymał pochwałę

**Posty:** 7 · przez **kryhven** 21 Maj 2009, 22:49

Dobrze zeskanuję

ale i tak dziękuję ogromnie za pomoc

Naprawdę Pochwały Warty Moderator