Oto log z OTL-a.
- Kod: Zaznacz wszystko
OTL logfile created on: 2010-01-19 22:37:32 - Run 1
OTL by OldTimer - Version 3.1.25.2 Folder = C:\Documents and Settings\kras\Pulpit
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 10,45 Gb Total Space | 1,26 Gb Free Space | 12,06% Space Free | Partition Type: NTFS
Drive D: | 10,45 Gb Total Space | 5,28 Gb Free Space | 50,56% Space Free | Partition Type: NTFS
Drive E: | 128,14 Gb Total Space | 51,11 Gb Free Space | 39,89% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
Drive G: | 953,73 Mb Total Space | 114,22 Mb Free Space | 11,98% Space Free | Partition Type: FAT
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: LUBATOWKA
Current User Name: kras
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010-01-19 22:09:29 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\kras\Pulpit\OTL.exe
PRC - [2010-01-19 21:32:06 | 00,008,704 | ---- | M] () -- C:\WINDOWS\temp\yagiam.exe
PRC - [2009-11-11 10:57:36 | 01,521,152 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
PRC - [2009-10-27 09:26:36 | 00,657,408 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
PRC - [2009-10-27 09:15:44 | 00,210,432 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
PRC - [2009-10-27 09:15:02 | 00,120,832 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2008-10-29 03:09:10 | 00,585,728 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe
PRC - [2008-10-28 17:45:02 | 00,098,816 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2007-11-07 11:21:00 | 16,380,416 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.exe
PRC - [2007-05-28 17:57:54 | 00,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2007-04-13 07:49:00 | 00,101,528 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
PRC - [2007-02-04 12:02:14 | 00,153,128 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
PRC - [2006-10-27 00:47:42 | 00,112,936 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
PRC - [2006-10-23 01:48:38 | 00,419,440 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
PRC - [2006-10-05 12:10:12 | 00,009,216 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\agrsmsvc.exe
PRC - [2004-08-03 23:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010-01-19 22:09:29 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\kras\Pulpit\OTL.exe
MOD - [2007-02-05 09:29:04 | 00,139,264 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE4\OpHookSE4.dll
MOD - [2004-08-03 23:42:34 | 01,050,624 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2009-10-27 09:26:36 | 00,657,408 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008-10-29 03:09:10 | 00,585,728 | ---- | M] (ATI Technologies Inc.) [Auto | Running] -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller)
SRV - [2008-10-28 21:05:00 | 00,593,920 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\ati2sgag.exe -- (ATI Smart)
SRV - [2007-05-28 17:57:54 | 00,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2007-04-13 07:49:00 | 00,101,528 | ---- | M] () [Auto | Running] -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2006-10-27 00:47:54 | 00,147,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2006-10-26 19:49:34 | 00,510,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006-10-26 13:03:08 | 00,218,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006-10-05 12:10:12 | 00,009,216 | ---- | M] (Agere Systems) [Auto | Running] -- C:\WINDOWS\system32\agrsmsvc.exe -- (AgereModemAudio)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - File not found [Kernel | On_Demand | Running] -- -- (catchme)
DRV - File not found [Kernel | On_Demand | Running] -- -- (abp470n5)
DRV - [2009-11-29 18:11:35 | 00,685,816 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-10-06 11:52:50 | 00,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2009-10-06 11:52:34 | 00,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2009-10-06 11:52:34 | 00,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2009-10-06 11:52:34 | 00,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2008-10-29 04:10:58 | 03,341,824 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008-08-26 09:26:12 | 00,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007-11-07 11:21:00 | 04,547,584 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007-05-31 09:19:24 | 00,096,896 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007-03-12 21:47:54 | 00,011,264 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\UVCFTR_S.SYS -- (UVCFTR)
DRV - [2007-01-24 08:44:06 | 00,290,304 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21)
DRV - [2006-11-28 15:11:00 | 01,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2006-10-22 14:38:24 | 00,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser.sys -- (usbser)
DRV - [2005-01-07 11:07:18 | 00,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2004-07-17 10:36:38 | 00,027,440 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2001-08-17 22:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
O1 HOSTS File: ([2010-01-19 21:28:43 | 00,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe ()
O4 - HKLM..\Run: [OpwareSE4] C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKCU..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe (Alcohol Soft Development Team)
O4 - HKCU..\Run: [Google Update] C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe (Google Inc.)
O4 - HKCU..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe ()
O4 - Startup: C:\Documents and Settings\kras\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - C:\WINDOWS\System32\WgaLogon.dll ()
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-11-20 12:31:39 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010-01-19 20:11:54 | 00,000,035 | RHS- | M] () - G:\autorun.inf -- [ FAT ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2010-01-19 22:09:26 | 00,547,328 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\kras\Pulpit\OTL.exe
[2010-01-19 21:26:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010-01-19 21:23:43 | 00,000,000 | RHSD | C] -- C:\cmdcons
[2010-01-19 21:21:12 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010-01-19 21:21:12 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010-01-19 21:21:12 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010-01-19 21:21:12 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010-01-19 21:21:07 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010-01-19 21:18:48 | 00,000,000 | ---D | C] -- C:\Qoobox
[2010-01-19 15:29:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Moje dokumenty\Notesy programu OneNote
[2010-01-18 22:09:34 | 00,000,000 | ---D | C] -- C:\!KillBox
[2010-01-18 21:54:08 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010-01-18 20:57:24 | 00,000,000 | ---D | C] -- C:\Config.Msi
[2010-01-18 20:55:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\DoctorWeb
[2010-01-18 20:53:05 | 00,000,000 | ---D | C] -- C:\Program Files\DrWeb
[2010-01-15 11:38:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Pulpit\nowe
[2010-01-14 21:37:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Dane aplikacji\Ahead
[2010-01-14 21:34:42 | 00,089,184 | ---- | C] (Ahead Software AG and its licensors) -- C:\WINDOWS\System32\drivers\imagedrv.sys
[2010-01-14 21:34:42 | 00,057,344 | ---- | C] (Ahead Software AG) -- C:\WINDOWS\System32\ImageDrive.cpl
[2010-01-14 21:34:35 | 00,569,344 | ---- | C] (Pegasus Software,LLC) -- C:\WINDOWS\System32\imagr5.dll
[2010-01-14 21:34:35 | 00,544,768 | ---- | C] (Pegasus Software, LLC) -- C:\WINDOWS\System32\imagx5.dll
[2010-01-14 21:34:35 | 00,283,920 | ---- | C] (Pegasus Software, LLC) -- C:\WINDOWS\System32\ImagXpr5.dll
[2010-01-14 21:34:35 | 00,225,280 | ---- | C] (Ahead Software Gmbh) -- C:\WINDOWS\System32\NeroCheck.exe
[2010-01-14 21:34:35 | 00,038,912 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\picn20.dll
[2010-01-14 21:34:35 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead
[2010-01-14 21:34:32 | 00,000,000 | ---D | C] -- C:\Program Files\Ahead
[2010-01-13 15:07:17 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2010-01-13 14:28:02 | 00,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbser.sys
[2010-01-13 14:28:02 | 00,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbser.sys
[2010-01-13 14:27:40 | 00,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll
[2010-01-13 14:27:36 | 00,023,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2010-01-13 14:24:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Nokia
[2010-01-13 14:11:04 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 6.0
[2010-01-13 14:07:43 | 00,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys
[2010-01-13 14:07:38 | 00,000,000 | ---D | C] -- C:\Program Files\PC Connectivity Solution
[2010-01-13 14:07:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel
[2010-01-13 14:07:00 | 00,007,936 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys
[2010-01-13 14:07:00 | 00,007,936 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerflt.sys
[2010-01-13 14:06:59 | 00,022,016 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys
[2010-01-13 14:06:58 | 01,112,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01007.dll
[2010-01-13 14:06:58 | 00,660,480 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll
[2010-01-13 14:06:58 | 00,017,664 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys
[2010-01-13 14:05:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Installations
[2010-01-11 23:28:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Dane aplikacji\Media Player Classic
[2010-01-11 14:38:24 | 00,000,000 | ---D | C] -- C:\Downloads
[2010-01-11 14:38:06 | 00,000,000 | ---D | C] -- C:\Program Files\BitComet
[2010-01-10 22:31:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\DC++
[2010-01-10 22:31:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Dane aplikacji\DC++
[2010-01-10 22:28:46 | 00,000,000 | ---D | C] -- C:\Program Files\DC++
[2010-01-10 22:20:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Moje dokumenty\Downloads
[2010-01-10 21:51:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\Temp
[2010-01-10 21:51:20 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\Google
[2010-01-10 12:19:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Pulpit\nieruchomosci
[2010-01-08 22:51:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Kaspersky Lab Setup Files
[2010-01-07 16:46:15 | 00,000,000 | ---D | C] -- C:\Program Files\BearShare
[2010-01-07 16:36:22 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Dane aplikacji\Macromedia
[2010-01-07 16:13:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Dane aplikacji\Gadu-Gadu
[2010-01-07 16:13:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Gadu-Gadu
[2010-01-07 16:13:06 | 00,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu
[2010-01-07 15:02:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\Opera
[2010-01-07 15:02:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\kras\Dane aplikacji\Opera
[2010-01-07 15:00:32 | 00,000,000 | ---D | C] -- C:\Program Files\Opera
[2009-11-20 12:36:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-11-20 12:36:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-11-20 12:31:36 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2009-11-20 12:31:36 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010-01-19 22:09:29 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\kras\Pulpit\OTL.exe
[2010-01-19 22:04:48 | 00,020,519 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\memberlist.htm
[2010-01-19 21:56:00 | 00,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-179605362-839522115-1003UA.job
[2010-01-19 21:56:00 | 00,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-179605362-839522115-1003Core.job
[2010-01-19 21:28:57 | 00,000,264 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-01-19 21:28:43 | 00,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010-01-19 21:28:36 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-01-19 21:28:35 | 00,060,452 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap
[2010-01-19 21:28:35 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-01-19 21:27:34 | 03,407,872 | -H-- | M] () -- C:\Documents and Settings\kras\NTUSER.DAT
[2010-01-19 21:27:34 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\kras\ntuser.ini
[2010-01-19 21:23:48 | 00,000,281 | RHS- | M] () -- C:\boot.ini
[2010-01-19 21:14:05 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\HijackThis.lnk
[2010-01-19 20:11:49 | 00,023,552 | ---- | M] () -- C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-01-19 15:29:34 | 00,000,983 | ---- | M] () -- C:\Documents and Settings\kras\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
[2010-01-18 18:46:53 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-01-17 23:43:49 | 00,045,214 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\index.html
[2010-01-17 23:27:19 | 00,068,887 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\studniowka1_620.jpg
[2010-01-17 23:12:27 | 00,771,584 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\praca mgr poprawiona zmiany nowe.doc
[2010-01-16 10:53:15 | 00,061,952 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\Miejsce rynku nieruchomości w gospodarce1.doc
[2010-01-16 10:52:27 | 00,025,508 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\Miejsce rynku nieruchomości w gospodarce.docx
[2010-01-15 21:31:05 | 00,760,832 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\praca mgr poprawiona.doc
[2010-01-15 13:04:22 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\kras\Pulpit\~$ejsce rynku nieruchomości w gospodarce.docx
[2010-01-15 09:39:38 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\kras\Pulpit\~$aca mgr_ab.doc
[2010-01-15 09:37:02 | 00,843,264 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\praca mgr_ab.doc
[2010-01-14 13:58:04 | 00,014,290 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\Staże w ramach projektu.docx
[2010-01-14 11:07:31 | 00,010,813 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\pomniki.docx
[2010-01-14 10:50:01 | 00,011,903 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\EKONTO nr _63968074 za 2009-12.htm
[2010-01-13 15:18:18 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\kras\Pulpit\~$aże w ramach projektu.docx
[2010-01-13 14:27:46 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
[2010-01-13 14:27:45 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
[2010-01-13 14:07:58 | 00,001,763 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Nokia PC Suite.lnk
[2010-01-12 18:54:54 | 00,367,075 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\img013.jpg
[2010-01-11 14:38:10 | 00,000,682 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\BitComet.lnk
[2010-01-11 11:34:43 | 00,816,128 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\praca mgr.doc
[2010-01-11 11:34:15 | 00,040,960 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\Ścieżka edukacyjna poprawiona.doc
[2010-01-10 21:56:29 | 00,002,295 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\Google Chrome.lnk
[2010-01-10 21:17:20 | 00,306,806 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\praca mgr.docx
[2010-01-10 21:02:20 | 00,011,499 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\wstep inna wersja.docx
[2010-01-10 19:49:46 | 01,165,695 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\Adynkiewiczpasy brzegowe.pdf
[2010-01-10 19:20:24 | 00,060,387 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\www.odra.org.pl_ Czy można_br_ pogodzić ochronę przyrody z ochroną przeciwpowodziową_.htm
[2010-01-08 10:38:36 | 00,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010-01-07 15:01:03 | 00,000,592 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Opera.lnk
[2010-01-07 13:26:45 | 00,004,635 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010-01-07 13:26:43 | 00,762,602 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-01-07 13:26:43 | 00,355,724 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-01-07 13:26:43 | 00,311,802 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-01-07 13:26:43 | 00,049,690 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-01-07 13:26:43 | 00,040,190 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-01-06 18:42:19 | 00,024,494 | ---- | M] () -- C:\Documents and Settings\kras\Pulpit\Tabela 1.docx
[2010-01-06 15:10:33 | 00,069,536 | ---- | M] () -- C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010-01-19 22:04:48 | 00,020,519 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\memberlist.htm
[2010-01-19 21:23:48 | 00,000,211 | ---- | C] () -- C:\Boot.bak
[2010-01-19 21:23:46 | 00,262,400 | ---- | C] () -- C:\cmldr
[2010-01-19 21:21:12 | 00,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010-01-19 21:21:12 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010-01-19 21:21:12 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010-01-19 21:21:12 | 00,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010-01-19 21:21:12 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010-01-19 15:29:34 | 00,000,983 | ---- | C] () -- C:\Documents and Settings\kras\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
[2010-01-18 22:27:44 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\HijackThis.lnk
[2010-01-17 23:43:49 | 00,045,214 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\index.html
[2010-01-17 23:27:19 | 00,068,887 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\studniowka1_620.jpg
[2010-01-17 18:15:23 | 00,771,584 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\praca mgr poprawiona zmiany nowe.doc
[2010-01-16 10:53:14 | 00,061,952 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\Miejsce rynku nieruchomości w gospodarce1.doc
[2010-01-15 17:15:38 | 00,760,832 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\praca mgr poprawiona.doc
[2010-01-15 15:14:34 | 00,306,806 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\praca mgr.docx
[2010-01-15 12:00:28 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\kras\Pulpit\~$ejsce rynku nieruchomości w gospodarce.docx
[2010-01-15 09:39:38 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\kras\Pulpit\~$aca mgr_ab.doc
[2010-01-15 09:36:54 | 00,843,264 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\praca mgr_ab.doc
[2010-01-14 21:41:23 | 67,108,864 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\James Camerons Avatar The Game.nds
[2010-01-14 11:07:31 | 00,010,813 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\pomniki.docx
[2010-01-14 10:50:01 | 00,011,903 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\EKONTO nr _63968074 za 2009-12.htm
[2010-01-13 17:48:08 | 00,025,508 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\Miejsce rynku nieruchomości w gospodarce.docx
[2010-01-13 15:18:18 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\kras\Pulpit\~$aże w ramach projektu.docx
[2010-01-13 14:27:46 | 00,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
[2010-01-13 14:27:45 | 00,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
[2010-01-13 14:07:58 | 00,001,763 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Nokia PC Suite.lnk
[2010-01-12 18:54:54 | 00,367,075 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\img013.jpg
[2010-01-11 14:38:10 | 00,000,682 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\BitComet.lnk
[2010-01-11 11:34:42 | 00,816,128 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\praca mgr.doc
[2010-01-11 11:34:15 | 00,040,960 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\Ścieżka edukacyjna poprawiona.doc
[2010-01-10 21:56:29 | 00,002,295 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\Google Chrome.lnk
[2010-01-10 21:51:22 | 00,001,128 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-179605362-839522115-1003UA.job
[2010-01-10 21:51:21 | 00,001,076 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-179605362-839522115-1003Core.job
[2010-01-10 21:02:20 | 00,011,499 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\wstep inna wersja.docx
[2010-01-10 19:55:09 | 01,165,695 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\Adynkiewiczpasy brzegowe.pdf
[2010-01-10 19:20:22 | 00,060,387 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\www.odra.org.pl_ Czy można_br_ pogodzić ochronę przyrody z ochroną przeciwpowodziową_.htm
[2010-01-08 09:38:43 | 00,014,290 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\Staże w ramach projektu.docx
[2010-01-07 15:01:03 | 00,000,592 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Opera.lnk
[2010-01-06 16:09:09 | 01,923,527 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\37443049,zalacznik.pdf
[2010-01-06 16:08:41 | 00,024,494 | ---- | C] () -- C:\Documents and Settings\kras\Pulpit\Tabela 1.docx
[2009-12-01 18:25:03 | 00,023,552 | ---- | C] () -- C:\Documents and Settings\kras\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-11-29 19:51:14 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-11-29 19:51:12 | 01,559,040 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-11-29 19:51:12 | 00,282,624 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-11-29 19:51:11 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009-11-29 19:51:10 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-11-29 19:51:10 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-11-29 18:16:27 | 00,000,412 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2009-11-29 18:11:35 | 00,685,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-11-29 17:36:51 | 00,000,133 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-11-29 15:46:24 | 00,003,584 | ---- | C] () -- C:\WINDOWS\System32\WgaLogon.dll
[2004-08-03 23:44:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004-07-17 10:36:38 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
< End of report >
rób formata z odłączonym kablem od sieci .. po postawieniu systemu przeskanuj kompa tym : http://www.programosy.pl/program,dr-web-cureit.html i 
