Otwierające się strony - gameztar_installer.exe ?

[Ungabunga]

Witam. Nie chcialem drugi raz tworzyc takiego samego tematu wiec sie podczepiam. Mam identyczny problem, podczas przeglodania www otwieraja mi sie strony z roznego typu grami online. Po krotkim dochodzeniu okazalo sie ze siostrzyczka zainstalowala gameztar_installer.exe bo myslala ze to jest potrzebne zeby moc obejrzec teraz albo nigdy w necie... Podejrzewam ze to przez to bo to jakas wyszukiwarka gier czy cos, oczywiscie odinstalowalem ale strony ciagle sie otwieraja. Jesli to pomoze to ten gameztar zostal zapisany na dysku 27 listopada 2009, 00:17:46. Ponizej log z rsit'a:

Kod: Zaznacz wszystko

Logfile of random's system information tool 1.06 (written by random/random)
Run by Swiezaldo at 2009-11-28 00:02:23
Microsoft Windows XP Professional Dodatek Service Pack 3
System drive C: has 13 GB (64%) free of 20 GB
Total RAM: 2047 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:02:36, on 2009-11-28
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
F:\Programy\Tlen.pl\tlen.exe
C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice127.exe
C:\Program Files\QuestService\questservice.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\Downloady\RSIT.exe
C:\Program Files\trend micro\Swiezaldo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Automated Content Enhancer - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll
O2 - BHO: Customized Platform Advancer - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\3.1.0.1540\CPAIEAddOn.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Content Management Wizard - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1820\CMWIE.dll
O2 - BHO: TCP - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1380\TCPIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Web Search Operator - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1800\wso.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Pobierz za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: QuestService Service - Unknown owner - C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice127.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 7563 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Swiezaldo.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D74E9DD-8987-448b-B2CB-67FFF2B8A932}]
Automated Content Enhancer - C:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll [2009-11-12 200704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll [2009-07-16 664888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42C7C39F-3128-4a17-BDB7-91C46032B5B9}]
Customized Platform Advancer - C:\Program Files\Customized Platform Advancer\3.1.0.1540\CPAIEAddOn.dll [2009-11-24 229376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll [2007-08-25 316784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll [2009-11-08 116088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B72681C0-A222-4b21-A0E2-53A5A5CA3D41}]
Content Management Wizard - C:\Program Files\Content Management Wizard\1.1.0.1820\CMWIE.dll [2009-11-19 1232896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CAC89FF9-34A9-4431-8CFE-292A47F843BC}]
TCP - C:\Program Files\Textual Content Provider\1.1.0.1380\TCPIE.dll [2009-11-20 356352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-11-13 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-11-13 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431}]
Web Search Operator - C:\Program Files\Web Search Operator\3.1.0.1800\wso.dll [2009-11-09 221184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Show Norton Toolbar - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll [2007-08-25 316784]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-04-12 8429568]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-04-12 81920]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-12 16132608]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2008-10-17 51048]
"osCheck"=C:\Program Files\Norton Internet Security\osCheck.exe [2007-08-25 714608]
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2008-02-29 76304]
"WinFastDTV"=C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [2007-02-12 69632]
"WinFast Schedule"=C:\Program Files\WinFast\WFDTV\WFWIZ.exe [2007-02-12 397312]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-11-13 149280]
"CloneCDTray"=C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-29 57344]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Start WingMan Profiler"=C:\Program Files\Logitech\Profiler\lwemon.exe [2004-04-23 77824]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2008-05-02 72208]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2009-11-28 00:02:25 ----D---- C:\Program Files\trend micro
2009-11-28 00:02:23 ----D---- C:\rsit
2009-11-27 21:53:35 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\GetRightToGo
2009-11-27 21:51:12 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\vlc
2009-11-27 21:50:00 ----D---- C:\Program Files\VideoLAN
2009-11-27 00:19:11 ----D---- C:\Program Files\QuestService
2009-11-27 00:19:11 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\QuestService
2009-11-27 00:19:00 ----D---- C:\Program Files\Textual Content Provider
2009-11-27 00:18:55 ----D---- C:\Program Files\Content Management Wizard
2009-11-27 00:18:48 ----D---- C:\Program Files\Internet Today
2009-11-27 00:18:41 ----D---- C:\Program Files\Customized Platform Advancer
2009-11-27 00:18:37 ----D---- C:\Program Files\Automated Content Enhancer
2009-11-27 00:18:32 ----D---- C:\Program Files\Web Search Operator
2009-11-27 00:18:24 ----D---- C:\Program Files\Gameztar Toolbar
2009-11-26 19:06:48 ----D---- C:\Program Files\SlySoft
2009-11-25 15:01:15 ----D---- C:\WINDOWS\Sun
2009-11-19 13:59:30 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-11-19 13:49:01 ----D---- C:\Program Files\DAEMON Tools Lite
2009-11-19 13:48:02 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\DAEMON Tools Lite
2009-11-19 13:48:00 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
2009-11-19 00:31:09 ----D---- C:\Program Files\ConvertHelper
2009-11-18 14:18:49 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Media Player Classic
2009-11-18 14:18:39 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2009-11-18 14:18:39 ----A---- C:\WINDOWS\system32\pndx5032.dll
2009-11-18 14:18:39 ----A---- C:\WINDOWS\system32\pndx5016.dll
2009-11-18 14:18:39 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-11-18 14:18:38 ----D---- C:\Program Files\Real Alternative
2009-11-18 14:18:38 ----D---- C:\Program Files\Media Player Classic
2009-11-18 14:18:38 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Real
2009-11-18 14:18:38 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Real
2009-11-17 23:43:46 ----D---- C:\Program Files\BitComet
2009-11-14 18:44:22 ----A---- C:\WINDOWS\VPlayer.INI
2009-11-13 01:47:03 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Azureus
2009-11-13 01:47:02 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Azureus
2009-11-13 01:46:45 ----D---- C:\Program Files\Vuze
2009-11-13 01:45:57 ----A---- C:\WINDOWS\system32\javaws.exe
2009-11-13 01:45:57 ----A---- C:\WINDOWS\system32\javaw.exe
2009-11-13 01:45:57 ----A---- C:\WINDOWS\system32\java.exe
2009-11-13 01:45:57 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-11-13 01:45:48 ----D---- C:\Program Files\Java
2009-11-13 01:45:30 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Sun
2009-11-10 19:20:17 ----D---- C:\Program Files\FLVPlayer
2009-11-08 15:01:56 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Tlen.pl
2009-11-08 15:01:56 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl
2009-11-08 13:23:46 ----A---- C:\WINDOWS\unvise32.exe
2009-11-08 12:41:03 ----D---- C:\Program Files\Mplayer
2009-11-08 12:37:21 ----A---- C:\WINDOWS\IsUninst.exe
2009-11-08 12:36:51 ----A---- C:\WINDOWS\QIII.INI
2009-11-08 12:14:47 ----D---- C:\Program Files\AC3Filter
2009-11-08 12:14:39 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-11-08 12:14:38 ----D---- C:\Program Files\Xvid
2009-11-08 12:14:38 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2009-11-08 10:59:33 ----D---- C:\WFDB
2009-11-08 10:47:58 ----D---- C:\Program Files\Common Files\Logitech
2009-11-08 01:53:00 ----A---- C:\WINDOWS\system32\BtCoreIf.dll
2009-11-08 01:52:57 ----A---- C:\WINDOWS\system32\KemXML.dll
2009-11-08 01:52:57 ----A---- C:\WINDOWS\system32\KemWnd.dll
2009-11-08 01:52:57 ----A---- C:\WINDOWS\system32\KemUtil.dll
2009-11-08 01:52:57 ----A---- C:\WINDOWS\system32\kemutb.dll
2009-11-08 01:52:45 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Logitech
2009-11-08 01:52:41 ----D---- C:\Program Files\Logitech
2009-11-08 01:52:40 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\InstallShield
2009-11-08 01:37:12 ----A---- C:\WINDOWS\system32\Dvbpws.dll
2009-11-08 01:28:17 ----D---- C:\Program Files\Common Files\Ulead Systems
2009-11-08 01:28:00 ----D---- C:\Program Files\WinFast
2009-11-08 01:24:55 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-11-08 01:23:55 ----D---- C:\WINDOWS\system32\WinFox
2009-11-08 01:23:55 ----D---- C:\WINDOWS\system32\WinFast
2009-11-08 01:17:36 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\LogiShrd
2009-11-08 01:17:15 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Logitech
2009-11-08 01:16:40 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2009-11-08 01:16:02 ----D---- C:\Program Files\Common Files\Logishrd
2009-11-08 00:09:01 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Symantec
2009-11-08 00:08:01 ----D---- C:\Program Files\Windows Sidebar
2009-11-08 00:07:38 ----D---- C:\Program Files\Norton Internet Security
2009-11-08 00:07:05 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2009-11-08 00:07:02 ----D---- C:\Program Files\Symantec
2009-11-08 00:07:02 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Symantec
2009-11-08 00:06:45 ----D---- C:\Program Files\Common Files\Symantec Shared
2009-11-08 00:01:31 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\WinRAR
2009-11-08 00:01:24 ----D---- C:\Program Files\WinRAR
2009-11-07 23:34:30 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Mozilla
2009-11-07 23:34:26 ----D---- C:\Program Files\Mozilla Firefox
2009-11-07 23:30:19 ----D---- C:\Program Files\MozBackup
2009-11-07 23:09:04 ----A---- C:\WINDOWS\Ascd_tmp.ini
2009-11-07 23:08:55 ----A---- C:\WINDOWS\AS_Debug.txt
2009-11-07 23:03:44 ----SHD---- C:\RECYCLER
2009-11-07 23:03:43 ----D---- C:\WINDOWS\system32\Lang
2009-11-07 23:02:39 ----R---- C:\WINDOWS\system32\ChCfg.exe
2009-11-07 23:02:24 ----D---- C:\WINDOWS\system32\RTCOM
2009-11-07 23:02:23 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-11-07 23:02:20 ----R---- C:\WINDOWS\SoundMan.exe
2009-11-07 23:02:20 ----R---- C:\WINDOWS\SkyTel.exe
2009-11-07 23:02:19 ----R---- C:\WINDOWS\RtlUpd.exe
2009-11-07 23:02:16 ----R---- C:\WINDOWS\RTLCPL.exe
2009-11-07 23:02:09 ----R---- C:\WINDOWS\RTHDCPL.exe
2009-11-07 23:02:08 ----R---- C:\WINDOWS\MicCal.exe
2009-11-07 23:02:05 ----R---- C:\WINDOWS\Alcmtr.exe
2009-11-07 23:02:02 ----R---- C:\WINDOWS\alcwzrd.exe
2009-11-07 23:02:00 ----D---- C:\Program Files\Realtek
2009-11-07 23:01:53 ----A---- C:\WINDOWS\HideWin.exe
2009-11-07 23:01:52 ----R---- C:\WINDOWS\RtlExUpd.dll
2009-11-07 22:57:43 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-11-07 22:57:41 ----D---- C:\Program Files\Intel
2009-11-07 22:57:18 ----D---- C:\Intel
2009-11-07 22:53:01 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Adobe
2009-11-07 22:49:09 ----HD---- C:\Program Files\InstallShield Installation Information
2009-11-07 22:49:09 ----D---- C:\Program Files\Attansic
2009-11-07 22:49:07 ----D---- C:\WINDOWS\system32\Attansic
2009-11-07 22:47:29 ----A---- C:\WINDOWS\system32\h323log.txt
2009-11-07 22:43:19 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Macromedia
2009-11-07 22:43:04 ----SHD---- C:\WINDOWS\ftpcache
2009-11-07 22:42:42 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-11-07 22:41:03 ----A---- C:\WINDOWS\Ascd_log.ini
2009-11-07 22:40:49 ----A---- C:\WINDOWS\system32\usbui.dll
2009-11-07 22:39:59 ----A---- C:\WINDOWS\imsins.BAK
2009-11-07 22:39:57 ----SHD---- C:\WINDOWS\Installer
2009-11-07 22:39:57 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-07 22:39:56 ----D---- C:\Program Files\Common Files\ODBC
2009-11-07 22:39:56 ----A---- C:\WINDOWS\ODBCINST.INI
2009-11-07 22:39:54 ----RD---- C:\Program Files
2009-11-07 22:39:54 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-11-07 22:39:54 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-11-07 22:39:54 ----D---- C:\Program Files\Common Files
2009-11-07 22:39:50 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-11-07 22:39:50 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-11-07 22:39:50 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-11-07 22:39:48 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-11-07 22:39:48 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-11-07 22:39:48 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-11-07 22:39:48 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-11-07 22:39:48 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-11-07 22:39:48 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-11-07 22:39:47 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-11-07 22:39:47 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-11-07 22:39:47 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-11-07 22:39:47 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-11-07 22:39:47 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-11-07 22:39:47 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-11-07 22:39:45 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-11-07 22:39:45 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-11-07 22:39:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-11-07 22:39:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-11-07 22:39:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-11-07 22:39:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-11-07 22:39:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-11-07 22:39:42 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-11-07 22:39:42 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-11-07 22:39:42 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-11-07 22:39:42 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-11-07 22:39:42 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdycl.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdsl.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdro.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdhu.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdcz2.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdcz1.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdcz.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\kbdcr.dll
2009-11-07 22:39:38 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2009-11-07 22:39:37 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-11-07 22:39:37 ----A---- C:\WINDOWS\system32\irclass.dll
2009-11-07 22:39:37 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-11-07 22:39:37 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-11-07 22:39:37 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-11-07 22:39:34 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-11-07 22:39:34 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-11-07 22:39:34 ----A---- C:\WINDOWS\system32\batt.dll
2009-11-07 22:39:33 ----A---- C:\WINDOWS\system32\storprop.dll
2009-11-07 22:39:33 ----A---- C:\WINDOWS\notepad.exe
2009-11-07 22:39:26 ----ASH---- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
2009-11-07 22:39:22 ----RA---- C:\WINDOWS\SET8.tmp
2009-11-07 22:39:21 ----RA---- C:\WINDOWS\SET4.tmp
2009-11-07 22:39:20 ----RA---- C:\WINDOWS\SET3.tmp
2009-11-07 22:39:15 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-07 22:39:15 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-07 22:39:10 ----SD---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
2009-11-07 22:38:43 ----A---- C:\WINDOWS\setuplog.txt
2009-11-07 22:38:41 ----D---- C:\Documents and Settings
2009-11-07 22:38:40 ----SHD---- C:\System Volume Information
2009-11-07 22:36:55 ----SH---- C:\boot.ini
2009-11-07 22:32:42 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-11-07 22:32:42 ----RSD---- C:\WINDOWS\Fonts
2009-11-07 22:32:42 ----RD---- C:\WINDOWS\Web
2009-11-07 22:32:42 ----HD---- C:\WINDOWS\inf
2009-11-07 22:32:42 ----D---- C:\WINDOWS\WinSxS
2009-11-07 22:32:42 ----D---- C:\WINDOWS\twain_32
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Temp
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\wins
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\wbem
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\usmt
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\spool
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\ShellExt
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\Setup
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\ras
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\oobe
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\npp
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\mui
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\inetsrv
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\IME
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\icsxml
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\ias
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\export
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\drivers
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\dhcp
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\config
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\3com_dmi
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\3076
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\2052
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\1054
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\1045
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\1042
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\1041
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\1037
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\1033
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\1031
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\1028
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32\1025
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system32
2009-11-07 22:32:42 ----D---- C:\WINDOWS\system
2009-11-07 22:32:42 ----D---- C:\WINDOWS\security
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Resources
2009-11-07 22:32:42 ----D---- C:\WINDOWS\repair
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Provisioning
2009-11-07 22:32:42 ----D---- C:\WINDOWS\PeerNet
2009-11-07 22:32:42 ----D---- C:\WINDOWS\pchealth
2009-11-07 22:32:42 ----D---- C:\WINDOWS\mui
2009-11-07 22:32:42 ----D---- C:\WINDOWS\msapps
2009-11-07 22:32:42 ----D---- C:\WINDOWS\msagent
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Media
2009-11-07 22:32:42 ----D---- C:\WINDOWS\java
2009-11-07 22:32:42 ----D---- C:\WINDOWS\ime
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Help
2009-11-07 22:32:42 ----D---- C:\WINDOWS\ehome
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Driver Cache
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Debug
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Cursors
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Connection Wizard
2009-11-07 22:32:42 ----D---- C:\WINDOWS\Config
2009-11-07 22:32:42 ----D---- C:\WINDOWS\AppPatch
2009-11-07 22:32:42 ----D---- C:\WINDOWS\addins
2009-11-07 22:32:42 ----AD---- C:\WINDOWS
2009-11-07 22:23:32 ----D---- C:\WINDOWS\nview
2009-11-07 22:23:32 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-11-07 22:22:47 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-11-07 22:22:33 ----D---- C:\Program Files\Common Files\InstallShield
2009-11-07 22:15:45 ----D---- C:\WINDOWS\Prefetch
2009-11-07 22:12:12 ----N---- C:\WINDOWS\system32\msxml6r.dll
2009-11-07 22:12:12 ----N---- C:\WINDOWS\system32\msxml6.dll
2009-11-07 22:12:07 ----N---- C:\WINDOWS\system32\comsdupd.exe
2009-11-07 22:12:06 ----N---- C:\WINDOWS\system32\smtpapi.dll
2009-11-07 22:12:06 ----N---- C:\WINDOWS\system32\rwnh.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\eapsvc.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\eapqec.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\eappprxy.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\eapphost.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\eappgnui.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\eappcfg.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\eapolqec.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dot3ui.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dot3svc.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dot3msm.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dot3api.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dimsroam.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\credssp.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\azroles.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\ati3duag.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2009-11-07 22:12:05 ----N---- C:\WINDOWS\system32\aaclient.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\napstat.exe
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\napmontr.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\napipsec.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\mssha.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\mmcperf.exe
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\mmcex.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\kmsvc.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\kbdpash.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2009-11-07 22:12:04 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\verclsid.exe
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\tzchange.exe
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\tspkg.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\tsgqec.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\slserv.exe
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\slrundll.exe
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\slgen.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\slextspk.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\slcoinst.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\setupn.exe
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\s3gnb.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\rasqec.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\qutil.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\qcliprov.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\qagentrt.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\qagent.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2009-11-07 22:12:03 ----N---- C:\WINDOWS\system32\onex.dll
2009-11-07 22:12:03 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2009-11-07 22:12:02 ----N---- C:\WINDOWS\system32\xmllite.dll
2009-11-07 22:12:02 ----N---- C:\WINDOWS\system32\wmphoto.dll
2009-11-07 22:12:02 ----N---- C:\WINDOWS\system32\wlanapi.dll
2009-11-07 22:12:02 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2009-11-07 22:12:02 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2009-11-07 22:12:01 ----N---- C:\WINDOWS\slrundll.exe
2009-11-07 22:12:01 ----D---- C:\WINDOWS\system32\pl-pl
2009-11-07 22:12:01 ----D---- C:\WINDOWS\system32\pl
2009-11-07 22:12:01 ----D---- C:\WINDOWS\system32\bits
2009-11-07 22:12:01 ----D---- C:\WINDOWS\l2schemas
2009-11-07 22:11:03 ----D---- C:\WINDOWS\ServicePackFiles
2009-11-07 22:09:53 ----D---- C:\WINDOWS\network diagnostic
2009-11-07 22:09:06 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-11-07 22:09:04 ----A---- C:\WINDOWS\002679_.tmp
2009-11-07 22:08:59 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-11-07 22:08:57 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-11-07 22:07:47 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-11-07 22:01:55 ----D---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Identities
2009-11-07 22:01:54 ----HD---- C:\Program Files\Uninstall Information
2009-11-07 22:01:49 ----SD---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Microsoft
2009-11-07 22:01:49 ----ASH---- C:\Documents and Settings\Swiezaldo\Dane aplikacji\desktop.ini
2009-11-07 22:00:38 ----D---- C:\WINDOWS\SoftwareDistribution
2009-11-07 22:00:36 ----SD---- C:\WINDOWS\system32\Microsoft
2009-11-07 22:00:36 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-07 21:57:04 ----D---- C:\WINDOWS\system32\xircom
2009-11-07 21:57:04 ----D---- C:\Program Files\xerox
2009-11-07 21:57:04 ----D---- C:\Program Files\microsoft frontpage
2009-11-07 21:56:50 ----A---- C:\WINDOWS\control.ini
2009-11-07 21:56:50 ----A---- C:\AUTOEXEC.BAT
2009-11-07 21:56:42 ----A---- C:\WINDOWS\OEWABLog.txt
2009-11-07 21:56:38 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-11-07 21:56:03 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-07 21:56:03 ----RD---- C:\WINDOWS\Offline Web Pages
2009-11-07 21:56:03 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-11-07 21:56:00 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-11-07 21:55:56 ----HD---- C:\Program Files\WindowsUpdate
2009-11-07 21:55:53 ----D---- C:\Program Files\Usługi online
2009-11-07 21:55:22 ----D---- C:\WINDOWS\system32\DirectX
2009-11-07 21:54:38 ----A---- C:\WINDOWS\system32\atrace.dll
2009-11-07 21:54:33 ----A---- C:\WINDOWS\system32\desktop.ini
2009-11-07 21:54:33 ----A---- C:\WINDOWS\desktop.ini
2009-11-07 21:54:23 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-11-07 21:54:21 ----A---- C:\WINDOWS\system32\acctres.dll
2009-11-07 21:54:20 ----D---- C:\Program Files\Common Files\Services
2009-11-07 21:54:14 ----SD---- C:\WINDOWS\Tasks
2009-11-07 21:54:14 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-11-07 21:54:13 ----D---- C:\Program Files\Common Files\MSSoap
2009-11-07 21:54:06 ----D---- C:\WINDOWS\srchasst
2009-11-07 21:54:04 ----D---- C:\WINDOWS\system32\Macromed
2009-11-07 21:53:59 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-11-07 21:53:58 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-11-07 21:53:58 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-11-07 21:53:58 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-11-07 21:53:57 ----A---- C:\WINDOWS\system32\wups.dll
2009-11-07 21:53:57 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-11-07 21:53:56 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-11-07 21:53:56 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-11-07 21:53:56 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-11-07 21:53:55 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-11-07 21:53:55 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-11-07 21:53:55 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-11-07 21:53:55 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-11-07 21:53:46 ----D---- C:\Program Files\Movie Maker
2009-11-07 21:53:40 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-11-07 21:53:40 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-11-07 21:53:40 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-11-07 21:53:40 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-11-07 21:53:33 ----A---- C:\WINDOWS\system32\fltmc.exe
2009-11-07 21:53:33 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-11-07 21:53:32 ----D---- C:\WINDOWS\system32\Restore
2009-11-07 21:53:32 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-11-07 21:53:32 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-11-07 21:53:32 ----A---- C:\WINDOWS\system32\srclient.dll
2009-11-07 21:53:31 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-11-07 21:53:31 ----A---- C:\WINDOWS\system32\ils.dll
2009-11-07 21:53:30 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-11-07 21:53:30 ----A---- C:\WINDOWS\system32\msconf.dll
2009-11-07 21:53:30 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-11-07 21:53:30 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-11-07 21:53:26 ----D---- C:\Program Files\NetMeeting
2009-11-07 21:53:26 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-11-07 21:53:25 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-11-07 21:53:24 ----A---- C:\WINDOWS\system32\inetres.dll
2009-11-07 21:53:23 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-11-07 21:53:19 ----D---- C:\Program Files\Outlook Express
2009-11-07 21:53:19 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-11-07 21:53:19 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-11-07 21:53:19 ----A---- C:\WINDOWS\system32\mstask.dll
2009-11-07 21:53:18 ----A---- C:\WINDOWS\system32\isign32.dll
2009-11-07 21:53:18 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-11-07 21:53:18 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-11-07 21:53:18 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-11-07 21:53:05 ----D---- C:\Program Files\Common Files\System
2009-11-07 21:53:04 ----D---- C:\Program Files\Internet Explorer
2009-11-07 21:52:40 ----D---- C:\Program Files\ComPlus Applications
2009-11-07 21:52:38 ----A---- C:\WINDOWS\vbaddin.ini
2009-11-07 21:52:38 ----A---- C:\WINDOWS\vb.ini
2009-11-07 21:52:34 ----D---- C:\WINDOWS\Registration
2009-11-07 21:52:28 ----D---- C:\Program Files\Windows Media Player
2009-11-07 21:52:22 ----D---- C:\Program Files\Messenger
2009-11-07 21:52:16 ----D---- C:\Program Files\MSN Gaming Zone
2009-11-07 21:52:15 ----A---- C:\WINDOWS\system32\write.exe
2009-11-07 21:51:51 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-11-07 21:51:51 ----A---- C:\WINDOWS\system32\hticons.dll
2009-11-07 21:51:50 ----A---- C:\WINDOWS\system32\avwav.dll
2009-11-07 21:51:50 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-11-07 21:51:50 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-11-07 21:51:49 ----A---- C:\WINDOWS\system32\winchat.exe
2009-11-07 21:51:35 ----A---- C:\WINDOWS\system32\getuname.dll
2009-11-07 21:51:35 ----A---- C:\WINDOWS\system32\charmap.exe
2009-11-07 21:51:35 ----A---- C:\WINDOWS\system32\calc.exe
2009-11-07 21:51:34 ----A---- C:\WINDOWS\system32\winmine.exe
2009-11-07 21:51:34 ----A---- C:\WINDOWS\system32\sol.exe
2009-11-07 21:51:33 ----A---- C:\WINDOWS\system32\reset.exe
2009-11-07 21:51:33 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-11-07 21:51:33 ----A---- C:\WINDOWS\system32\freecell.exe
2009-11-07 21:51:32 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-11-07 21:51:32 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-11-07 21:51:32 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-11-07 21:51:32 ----A---- C:\WINDOWS\system32\tskill.exe
2009-11-07 21:51:32 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-11-07 21:51:32 ----A---- C:\WINDOWS\system32\tscon.exe
2009-11-07 21:51:31 ----A---- C:\WINDOWS\system32\shadow.exe
2009-11-07 21:51:31 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-11-07 21:51:31 ----A---- C:\WINDOWS\system32\regini.exe
2009-11-07 21:51:31 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-11-07 21:51:31 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-11-07 21:51:31 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-11-07 21:51:31 ----A---- C:\WINDOWS\system32\msg.exe
2009-11-07 21:51:30 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-11-07 21:51:30 ----A---- C:\WINDOWS\system32\logoff.exe
2009-11-07 21:51:30 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-11-07 21:51:29 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-11-07 21:51:29 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-11-07 21:51:28 ----A---- C:\WINDOWS\system32\stclient.dll
2009-11-07 21:51:28 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-11-07 21:51:28 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-11-07 21:51:28 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-11-07 21:51:28 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-11-07 21:51:27 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-11-07 21:51:16 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-11-07 21:51:14 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-11-07 21:51:14 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-11-07 21:51:14 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-11-07 21:51:13 ----D---- C:\Program Files\Windows NT
2009-11-07 21:51:13 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-11-07 21:51:12 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-11-07 21:51:12 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-11-07 21:51:11 ----A---- C:\WINDOWS\system32\spider.exe
2009-11-07 21:51:10 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-11-07 21:51:10 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-11-07 21:51:10 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-11-07 21:51:09 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-11-07 21:51:09 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-11-07 21:51:09 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-11-07 21:51:09 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-11-07 21:51:09 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-11-07 21:51:08 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-11-07 21:51:08 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-11-07 21:51:08 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-11-07 21:51:08 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-11-07 21:51:07 ----D---- C:\WINDOWS\system32\MsDtc
2009-11-07 21:51:07 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-11-07 21:51:07 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-11-07 21:51:07 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-11-07 21:51:07 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-11-07 21:51:07 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-11-07 21:51:06 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-11-07 21:51:06 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-11-07 21:51:05 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-11-07 21:51:05 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-11-07 21:51:05 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-11-07 21:51:05 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-11-07 21:51:04 ----D---- C:\WINDOWS\system32\Com
2009-11-07 21:51:03 ----A---- C:\WINDOWS\system32\colbact.dll
2009-11-07 21:51:03 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-11-07 21:51:03 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-11-07 21:51:03 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-11-07 21:51:03 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-11-07 21:51:02 ----A---- C:\WINDOWS\system32\comuid.dll
2009-11-07 21:51:02 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-11-07 21:51:01 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-11-07 21:50:47 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-11-07 21:50:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-11-07 21:50:47 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-11-07 21:50:47 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2009-11-07 22:39:53 ----A---- C:\WINDOWS\system.ini
2009-11-07 21:56:50 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 kbdhid;Sterownik klawiatury HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys []
R1 SRTSPX;SRTSPX; C:\WINDOWS\System32\Drivers\SRTSPX.SYS [2007-11-30 43696]
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2009-02-19 184496]
R2 CO_Mon;CO_Mon; \??\C:\WINDOWS\system32\drivers\CO_Mon.sys []
R2 CX23880;WinFast CX2388x WDM Video Capture.; C:\WINDOWS\system32\drivers\cx88vid.sys [2006-10-18 162944]
R2 CXAVXBAR;WinFast CX2388x WDM Crossbar.; C:\WINDOWS\system32\drivers\cxavxbar.sys [2006-10-18 9728]
R2 CXTUNE;WinFast CX2388x WDM TVTuner.; C:\WINDOWS\system32\drivers\CX88TUNE.sys [2006-10-18 50816]
R3 Arp1394;Protokół klienta 1394 ARP; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller; C:\WINDOWS\system32\DRIVERS\atl01_xp.sys [2007-03-15 38656]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 HDAudBus;Sterownik magistrali Microsoft UAA dla High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-23 4402176]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2008-02-29 20240]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-02-29 36880]
R3 mouhid;Sterownik myszy HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NAVENG;NAVENG; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20091126.016\NAVENG.SYS []
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20091126.016\NAVEX15.SYS []
R3 NIC1394;Sterownik sieci 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-04-12 6738656]
R3 SRTSP;SRTSP; C:\WINDOWS\System32\Drivers\SRTSP.SYS [2007-11-30 279088]
R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2009-02-19 13616]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2009-02-19 96560]
R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2009-02-19 38576]
R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\ipsdefs\20091111.001\SymIDSCo.sys []
R3 SymIMMP;SymIMMP; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-02-19 31280]
R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2009-02-19 37424]
R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2009-02-19 22320]
R3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
R3 WFIOCTL;WFIOCTL; \??\C:\Program Files\WinFast\WFDTV\WFIOCTL.SYS []
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2004-04-14 10144]
R3 WmFilter;Logitech WingMan HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2004-04-14 21280]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2004-04-14 5600]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2004-04-14 44064]
S3 aaj9xa8x;aaj9xa8x; C:\WINDOWS\system32\drivers\aaj9xa8x.sys []
S3 CCDECODE;Dekoder napisów; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 COH_Mon;COH_Mon; \??\C:\WINDOWS\system32\Drivers\COH_Mon.sys []
S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;Koder-dekoder NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Połączenie TV/wideo firmy Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SRTSPL;SRTSPL; C:\WINDOWS\System32\Drivers\SRTSPL.SYS [2007-11-30 317616]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-02-19 31280]
S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Kodery-dekodery teletekstu w standardzie światowym; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Automatic LiveUpdate Scheduler;Automatic LiveUpdate Scheduler; C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe [2007-08-31 243064]
R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-10-17 149352]
R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-10-17 149352]
R2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-10-17 149352]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-11-13 153376]
R2 LiveUpdate Notice;LiveUpdate Notice; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-10-17 149352]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-04-12 163908]
R2 QuestService Service;QuestService Service; C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice127.exe [2009-11-26 58744]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R3 Symantec Core LC;Symantec Core LC; C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe [2009-11-08 1251720]
S3 comHost;COM Host; C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [2007-08-22 55640]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2008-05-02 121360]
S3 LiveUpdate;LiveUpdate; C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE [2007-08-23 3192184]

-----------------EOF-----------------


[NieWiem]

• Pobierz aplikację OTL i zapisz ją na pulpicie.
• Kliknij dwukrotnie na ikonę, aby uruchomić program (użytkownicy systemów Vista oraz Se7en => prawoklik oraz wybrać opcję Uruchom jako Administrator).
• Gdy pojawi sie okno, skonfiguruj go następująco:
  • Zaznacz opcje LOP Check i Purity Check
  • Zaznacz opcje Scan All Users.
  • Upewnij się, że w okienku Extra Registry jest zaznaczone Use Safelist.
• Upewnij się, że wszystkie pozostałe okna są zamknięte i pozwól mu pracować bez zakłóceń - nie stukaj w klawiaturę, nie ruszaj myszką.
• Kliknij Run Scan i poczekaj cierpliwie aż program wykona swoje.
• Kiedy skanowanie sie skończy, pojawią sie 2 okna notatnika, zatytułowane OTL.txt i Extras.txt. Będą one zapisane w tym samym miejscu, co aplikacja OTL.
• Skopiuj (Edycja => Zaznacz wszystko, Edycja => Kopiuj) zawartość tych plików i wklej na http://www.wklej.org lub w poście w tagach [code].

[Ungabunga]

OTL.txt:

Kod: Zaznacz wszystko

OTL logfile created on: 2009-11-28 14:30:20 - Run 1
OTL by OldTimer - Version 3.1.11.1     Folder = C:\Documents and Settings\Swiezaldo\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,37 Gb Available Physical Memory | 68,56% Memory free
3,85 Gb Paging File | 3,44 Gb Available in Paging File | 89,51% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 12,55 Gb Free Space | 64,26% Space Free | Partition Type: NTFS
Drive D: | 698,64 Gb Total Space | 443,92 Gb Free Space | 63,54% Space Free | Partition Type: NTFS
Drive E: | 24,41 Gb Total Space | 7,11 Gb Free Space | 29,14% Space Free | Partition Type: NTFS
Drive F: | 188,93 Gb Total Space | 26,13 Gb Free Space | 13,83% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: WICHURA
Current User Name: Swiezaldo
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 7 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2009-11-28 13:52:18 | 00,535,040 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Swiezaldo\Pulpit\OTL.exe
PRC - [2009-11-26 15:29:56 | 00,058,744 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice127.exe
PRC - [2009-11-26 15:29:56 | 00,058,744 | ---- | M] () -- C:\Program Files\QuestService\questservice.exe
PRC - [2009-11-13 01:45:50 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009-11-13 01:45:50 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009-11-08 00:15:34 | 01,251,720 | ---- | M] () -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
PRC - [2009-10-30 12:57:08 | 00,369,200 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2009-01-29 23:20:49 | 00,057,344 | ---- | M] (SlySoft, Inc.) -- C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
PRC - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE
PRC - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE
PRC - [2008-05-02 02:44:08 | 00,805,392 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe
PRC - [2008-05-02 02:40:56 | 00,076,304 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
PRC - [2008-04-14 22:51:18 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-08-31 11:49:50 | 00,243,064 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
PRC - [2007-04-12 16:44:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2007-04-12 10:33:10 | 16,132,608 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.exe
PRC - [2007-02-12 18:16:10 | 00,069,632 | ---- | M] (Leadtek Research Inc.) -- C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
PRC - [2007-02-12 16:22:24 | 00,397,312 | ---- | M] (Leadtek Research Inc.) -- C:\Program Files\WinFast\WFDTV\WFWIZ.exe
PRC - [2004-12-13 04:34:32 | 00,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2004-04-23 14:28:00 | 00,077,824 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Profiler\LWEMon.exe


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2009-11-28 13:52:18 | 00,535,040 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Swiezaldo\Pulpit\OTL.exe
MOD - [2009-11-26 15:29:52 | 00,598,016 | ---- | M] () -- C:\Program Files\QuestService\questservice.dll
MOD - [2008-05-02 02:42:50 | 00,045,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\lgscroll.dll
MOD - [2008-05-02 02:38:54 | 00,064,016 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\GameHook.dll
MOD - [2006-12-01 22:54:32 | 00,626,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
MOD - [2004-04-23 14:26:48 | 00,053,248 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Profiler\LWEHook.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2009-11-26 15:29:56 | 00,058,744 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice127.exe -- (QuestService Service)
SRV - [2009-11-13 01:45:50 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009-11-08 00:15:34 | 01,251,720 | ---- | M] () -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)
SRV - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice)
SRV - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)
SRV - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2008-05-02 02:42:06 | 00,121,360 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2007-08-31 11:49:50 | 00,243,064 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)
SRV - [2007-08-23 21:35:22 | 03,192,184 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate)
SRV - [2007-08-22 08:21:30 | 00,055,640 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe -- (comHost)
SRV - [2007-04-12 16:44:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
SRV - [2004-12-13 04:34:32 | 00,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2009-11-19 13:49:06 | 00,691,696 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-11-08 00:47:16 | 00,124,464 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2009-10-20 20:51:54 | 00,251,768 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SymcData\ipsdefs\20091111.001\SymIDSCo.sys -- (SYMIDSCO)
DRV - [2009-10-19 08:15:04 | 01,323,568 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20091126.016\NAVEX15.SYS -- (NAVEX15)
DRV - [2009-10-19 08:15:04 | 00,371,248 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2009-10-19 08:15:04 | 00,102,448 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2009-10-19 08:15:04 | 00,084,912 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20091126.016\NAVENG.SYS -- (NAVENG)
DRV - [2009-03-17 12:56:58 | 00,447,024 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2009-02-19 13:31:42 | 00,031,280 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\SymIM.sys -- (SymIMMP)
DRV - [2009-02-19 13:31:42 | 00,031,280 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\SymIM.sys -- (SymIM)
DRV - [2009-02-19 13:31:16 | 00,184,496 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2009-02-19 13:31:16 | 00,096,560 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMFW.SYS -- (SYMFW)
DRV - [2009-02-19 13:31:16 | 00,038,576 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMIDS.SYS -- (SYMIDS)
DRV - [2009-02-19 13:31:16 | 00,037,424 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMNDIS.SYS -- (SYMNDIS)
DRV - [2009-02-19 13:31:16 | 00,022,320 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2009-02-19 13:31:16 | 00,013,616 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMDNS.SYS -- (SYMDNS)
DRV - [2009-02-17 18:11:30 | 00,024,232 | ---- | M] (Elaborate Bytes AG) -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV - [2008-07-30 17:42:12 | 00,023,888 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2008-04-13 22:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2008-04-13 22:06:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-02-29 03:13:24 | 00,036,880 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2008-02-29 03:13:16 | 00,035,344 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2008-02-29 03:12:48 | 00,020,240 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007-11-30 23:57:12 | 00,317,616 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2007-11-30 23:57:12 | 00,279,088 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2007-11-30 23:57:12 | 00,043,696 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2007-08-09 00:39:56 | 00,036,056 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\CO_Mon.sys -- (CO_Mon)
DRV - [2007-04-23 11:12:28 | 04,402,176 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007-04-12 16:44:00 | 06,738,656 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2007-03-15 07:12:02 | 00,038,656 | R--- | M] (Attansic Technology corporation.) -- C:\WINDOWS\system32\drivers\atl01_xp.sys -- (AtcL001)
DRV - [2007-02-16 01:57:04 | 00,034,760 | ---- | M] (SlySoft, Inc.) -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2006-10-18 11:38:38 | 00,009,728 | ---- | M] (Leadtek Research Inc.) -- C:\WINDOWS\system32\drivers\cxavxbar.sys -- (CXAVXBAR)
DRV - [2006-10-18 11:37:56 | 00,050,816 | ---- | M] (Leadtek Research Inc.) -- C:\WINDOWS\system32\drivers\cx88tune.sys -- (CXTUNE)
DRV - [2006-10-18 11:37:26 | 00,162,944 | ---- | M] (Leadtek Research Inc.) -- C:\WINDOWS\system32\drivers\cx88vid.sys -- (CX23880)
DRV - [2005-01-06 16:55:38 | 00,009,446 | ---- | M] (Leadtek Research Inc.) -- C:\Program Files\WinFast\WFDTV\WFIOCTL.sys -- (WFIOCTL)
DRV - [2004-08-13 19:56:20 | 00,005,810 | R--- | M] () -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2004-04-14 11:08:00 | 00,044,064 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2004-04-14 11:08:00 | 00,021,280 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2004-04-14 11:08:00 | 00,010,144 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2004-04-14 11:08:00 | 00,005,600 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2001-08-18 00:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm


IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1957994488-1604221776-839522115-1003\S-1-5-21-1957994488-1604221776-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.1.0.5050
FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.10
FF - prefs.js..extensions.enabledItems: {19D3B002-1AD1-4a69-A5B3-AA98773DBB86}:1.4.5
FF - prefs.js..extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:3.1.0.1540
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.6.4
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: morningCoffee@shaneliesegang:1.33
FF - prefs.js..extensions.enabledItems: {F2DDDB92-1605-4260-9B25-45A4DAE87B50}:1.0
FF - prefs.js..extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:3.1.0.1800

FF - HKLM\software\mozilla\Firefox\extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\3.1.0.1800\FF [2009-11-27 00:18:32 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5050\FF [2009-11-27 00:18:38 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\3.1.0.1540\FF [2009-11-27 00:18:41 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-11-18 14:18:40 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-11-18 14:18:40 | 00,000,000 | ---D | M]

[2009-11-07 23:34:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Mozilla\Extensions
[2009-11-27 20:17:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Mozilla\Firefox\Profiles\df01twi7.default\extensions
[2009-11-08 15:07:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Mozilla\Firefox\Profiles\df01twi7.default\extensions\{19D3B002-1AD1-4a69-A5B3-AA98773DBB86}
[2009-11-08 15:05:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Mozilla\Firefox\Profiles\df01twi7.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2009-11-17 23:43:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Mozilla\Firefox\Profiles\df01twi7.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2009-11-08 15:04:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Mozilla\Firefox\Profiles\df01twi7.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009-11-08 15:06:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Mozilla\Firefox\Profiles\df01twi7.default\extensions\morningCoffee@shaneliesegang
[2009-11-27 22:14:20 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009-11-27 22:14:20 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{F2DDDB92-1605-4260-9B25-45A4DAE87B50}
[2009-07-17 09:40:12 | 00,704,512 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2009-11-03 02:54:10 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-11-03 02:54:10 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-11-03 02:54:10 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-11-03 02:54:10 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-11-27 00:21:37 | 00,002,405 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\questservice125.xml
[2009-11-27 22:14:20 | 00,002,405 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\questservice127.xml
[2009-11-03 02:54:10 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-11-03 02:54:10 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

O1 HOSTS File: (742 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll ()
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\3.1.0.1540\CPAIEAddOn.dll ()
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1820\CMWIE.dll ()
O2 - BHO: (TCP) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1380\TCPIE.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1800\WSO.dll ()
O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-1957994488-1604221776-839522115-1003\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [CloneCDTray] C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [osCheck] C:\Program Files\Norton Internet Security\osCheck.exe (Symantec Corporation)
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe (Leadtek Research Inc.)
O4 - HKLM..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe (Leadtek Research Inc.)
O4 - HKU\S-1-5-21-1957994488-1604221776-839522115-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1957994488-1604221776-839522115-1003..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Profiler\lwemon.exe (Logitech Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1957994488-1604221776-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-11-07 21:56:50 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (*) -  File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found

[color=#E56717]========== Files/Folders - Created Within 7 Days ==========[/color]

[2009-11-28 13:52:15 | 00,535,040 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Swiezaldo\Pulpit\OTL.exe
[2009-11-28 00:02:25 | 00,000,000 | ---D | C] -- C:\Program Files\trend micro
[2009-11-28 00:02:23 | 00,000,000 | ---D | C] -- C:\rsit
[2009-11-27 21:53:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\GetRightToGo
[2009-11-27 21:51:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\vlc
[2009-11-27 21:50:00 | 00,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2009-11-27 00:19:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Textual Content Provider
[2009-11-27 00:19:11 | 00,000,000 | ---D | C] -- C:\Program Files\QuestService
[2009-11-27 00:19:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService
[2009-11-27 00:19:00 | 00,000,000 | ---D | C] -- C:\Program Files\Textual Content Provider
[2009-11-27 00:18:55 | 00,000,000 | ---D | C] -- C:\Program Files\Content Management Wizard
[2009-11-27 00:18:48 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Today
[2009-11-27 00:18:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Internet Today
[2009-11-27 00:18:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer
[2009-11-27 00:18:41 | 00,000,000 | ---D | C] -- C:\Program Files\Customized Platform Advancer
[2009-11-27 00:18:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer
[2009-11-27 00:18:37 | 00,000,000 | ---D | C] -- C:\Program Files\Automated Content Enhancer
[2009-11-27 00:18:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Web Search Operator
[2009-11-27 00:18:32 | 00,000,000 | ---D | C] -- C:\Program Files\Web Search Operator
[2009-11-27 00:18:24 | 00,000,000 | ---D | C] -- C:\Program Files\Gameztar Toolbar
[2009-11-27 00:18:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar
[2009-11-26 19:06:48 | 00,000,000 | ---D | C] -- C:\Program Files\SlySoft
[2009-11-25 15:01:15 | 00,000,000 | ---D | C] -- C:\WINDOWS\Sun
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 7 Days ==========[/color]

[2009-11-28 13:52:18 | 00,535,040 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Swiezaldo\Pulpit\OTL.exe
[2009-11-28 00:08:11 | 01,835,008 | -H-- | M] () -- C:\Documents and Settings\Swiezaldo\NTUSER.DAT
[2009-11-27 23:17:58 | 00,000,002 | ---- | M] () -- C:\WINDOWS\System32\Dvbpws.dll
[2009-11-27 21:44:44 | 00,038,400 | ---- | M] () -- C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-11-27 13:36:42 | 00,000,626 | ---- | M] () -- C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Swiezaldo.job
[2009-11-27 02:17:32 | 00,002,742 | ---- | M] () -- C:\WINDOWS\VPlayer.INI
[2009-11-27 02:17:32 | 00,000,137 | ---- | M] () -- C:\WINDOWS\VplayerINI.vpl
[2009-11-27 01:24:37 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-11-27 01:24:36 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-11-26 19:08:59 | 00,000,041 | -HS- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib
[2009-11-26 19:08:00 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-11-26 19:06:50 | 00,000,766 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CloneCD.lnk
[2009-11-26 18:31:12 | 00,000,562 | ---- | M] () -- C:\Documents and Settings\Swiezaldo\Pulpit\Uruchom rFactor.lnk
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2009-11-26 19:08:59 | 00,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib
[2009-11-26 19:06:50 | 00,000,766 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CloneCD.lnk
[2009-11-26 18:31:12 | 00,000,562 | ---- | C] () -- C:\Documents and Settings\Swiezaldo\Pulpit\Uruchom rFactor.lnk
[2009-11-19 13:49:06 | 00,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-11-14 18:44:22 | 00,002,742 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2009-11-08 12:36:51 | 00,000,821 | ---- | C] () -- C:\WINDOWS\QIII.INI
[2009-11-08 12:14:39 | 00,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-11-08 12:14:38 | 00,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-11-08 01:37:12 | 00,000,002 | ---- | C] () -- C:\WINDOWS\System32\Dvbpws.dll
[2009-11-08 01:21:39 | 00,000,760 | ---- | C] () -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\setup_ldm.iss
[2009-11-07 23:09:04 | 00,013,264 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009-11-07 22:41:03 | 00,015,310 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2009-11-07 22:40:27 | 00,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2009-11-07 22:40:07 | 00,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2009-11-07 22:04:47 | 00,038,400 | ---- | C] () -- C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007-04-12 16:44:00 | 01,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007-04-12 16:44:00 | 01,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007-04-12 16:44:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007-04-12 16:44:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007-04-12 16:44:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2002-10-03 14:42:27 | 00,000,034 | ---- | C] () -- C:\WINDOWS\Q3version.ini

[color=#E56717]========== LOP Check ==========[/color]

[2009-11-13 01:47:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Azureus
[2009-11-19 13:48:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2009-11-27 20:23:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService
[2009-11-08 15:01:56 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl
[2009-11-13 21:57:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Azureus
[2009-11-19 13:54:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\DAEMON Tools Lite
[2009-11-27 21:58:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\GetRightToGo
[2009-11-27 20:07:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Swiezaldo\Dane aplikacji\Tlen.pl

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 24 bytes -> C:\WINDOWS:393E57A96463C5B6
< End of report >


Extras.txt:

Kod: Zaznacz wszystko

OTL Extras logfile created on: 2009-11-28 14:30:20 - Run 1
OTL by OldTimer - Version 3.1.11.1     Folder = C:\Documents and Settings\Swiezaldo\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,37 Gb Available Physical Memory | 68,56% Memory free
3,85 Gb Paging File | 3,44 Gb Available in Paging File | 89,51% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 12,55 Gb Free Space | 64,26% Space Free | Partition Type: NTFS
Drive D: | 698,64 Gb Total Space | 443,92 Gb Free Space | 63,54% Space Free | Partition Type: NTFS
Drive E: | 24,41 Gb Total Space | 7,11 Gb Free Space | 29,14% Space Free | Partition Type: NTFS
Drive F: | 188,93 Gb Total Space | 26,13 Gb Free Space | 13,83% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: WICHURA
Current User Name: Swiezaldo
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 7 Days
Output = Standard

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1957994488-1604221776-839522115-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"14063:TCP" = 14063:TCP:*:Enabled:BitComet 14063 TCP
"14063:UDP" = 14063:UDP:*:Enabled:BitComet 14063 UDP

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe -- (www.BitComet.com)


[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{1F698102-5739-441E-96F0-74F4EA540F06}" = Attansic Ethernet Utility
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17
"{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1" = ConvertHelper 2.2
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{31478BE1-CDE5-4753-A8B2-F6D4BC1FBE09}" = Component Framework
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{55A6283C-638A-4EE0-B491-51118554BDA2}" = Norton Confidential Core
"{62120008-8E1E-4807-860D-A8B48F8552DB}" = Norton Protection Center
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{77772678-817F-4401-9301-ED1D01A8DA56}" = SPBBC 32bit
"{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}" = Norton AntiVirus
"{86C344AE-853E-4F43-A2FE-28F39555DACA}" = SymNet
"{9BA5F13C-E9C8-43C5-BAE6-8638E0D61785}" = Symantec Real Time Storage Protection Component
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{B24E05CC-46FF-4787-BBB8-5CD516AFB118}" = ccCommon
"{B9242864-2841-4ADE-86E0-8F90F91B04DD}" = Logitech Gaming Software
"{C1C185CA-C531-49F5-A6FA-B838405A049D}" = Norton Internet Security
"{C92C584E-C781-475E-A8E2-C67D993A6B95}" = WinFast PVR2
"{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}" = Norton AntiVirus Help
"{E80F62FF-5D3C-4A19-8409-9721F2928206}" = LiveUpdate (Symantec Corporation)
"{EDD4371F-74B4-47AB-BB1C-AE94001B2826}" = WinFast TV2000 Expert / WinFast DV2000 Driver
"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}" = AppCore
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"AC3Filter_is1" = AC3Filter 1.63b
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AtcL1" = Attansic L1 Gigabit Ethernet Driver
"BitComet" = BitComet 1.16
"CloneCD" = CloneCD
"FLVPlayer" = FLV Player 1.3.3
"HijackThis" = HijackThis 2.0.2
"MozBackup_is1" = MozBackup 1.4.6 PL
"Mozilla Firefox (3.5.5)" = Mozilla Firefox (3.5.5)
"NVIDIA Drivers" = NVIDIA Drivers
"PsuedoLiveUpdate" = LiveUpdate (Symantec Corporation)
"Quake III Arena" = Quake III Arena
"Quake III Arena Point Release 1.32" = Quake III Arena Point Release 1.32
"QuestService" = QuestService 1.0 build 127
"RA3" = Rocket Arena 3 1.6 (remove only)
"RealAlt_is1" = Real Alternative 1.51
"rFactor" = rFactor (remove only)
"SymSetup.{C1C185CA-C531-49F5-A6FA-B838405A049D}" = Norton Internet Security (Symantec Corporation)
"Tlen.pl" = Tlen.pl
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = Archiwizator WinRAR
"Xvid_is1" = Xvid 1.2.2 final uninstall

[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2009-11-18 19:28:49 | Computer Name = WICHURA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd wmplayer.exe, wersja 9.0.0.4503, moduł powodujący
błąd raac.dll, wersja 10.0.0.1066, adres błędu 0x00001a2d.

Error - 2009-11-18 19:29:05 | Computer Name = WICHURA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd wmplayer.exe, wersja 9.0.0.4503, moduł powodujący
błąd raac.dll, wersja 10.0.0.1066, adres błędu 0x00001a2d.

Error - 2009-11-19 15:55:08 | Computer Name = WICHURA | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca rFactor.exe, wersja 1.2.5.5, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2009-11-21 06:25:58 | Computer Name = WICHURA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd wmplayer.exe, wersja 9.0.0.4503, moduł powodujący
błąd flvsplitter.ax, wersja 1.0.0.5, adres błędu 0x0000d0f0.

[ System Events ]
Error - 2009-11-23 18:29:20 | Computer Name = WICHURA | Source = Disk | ID = 262151
Description = W urządzeniu \Device\Harddisk2\D wystąpił zły blok.

Error - 2009-11-23 18:29:21 | Computer Name = WICHURA | Source = Disk | ID = 262151
Description = W urządzeniu \Device\Harddisk2\D wystąpił zły blok.

Error - 2009-11-23 18:29:23 | Computer Name = WICHURA | Source = Disk | ID = 262151
Description = W urządzeniu \Device\Harddisk2\D wystąpił zły blok.

Error - 2009-11-23 18:29:28 | Computer Name = WICHURA | Source = Disk | ID = 262151
Description = W urządzeniu \Device\Harddisk2\D wystąpił zły blok.

Error - 2009-11-26 09:42:35 | Computer Name = WICHURA | Source = Dhcp | ID = 1002
Description = Adres IP połączenia 89.75.146.112 dla karty sieciowej o adresie 001D60165239
został  zabroniony przez serwer DHCP 0.0.0.0 (Serwer DHCP wysłał komunikat DHCPNACK).

Error - 2009-11-26 09:43:24 | Computer Name = WICHURA | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 192.168.100.10 na
karcie  sieciowej o adresie sieciowym 001D60165239.

Error - 2009-11-26 14:08:14 | Computer Name = WICHURA | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1055” podczas próby uruchomienia usługi
winmgmt z argumentami „”  w celu uruchomienia serwera:  {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error - 2009-11-26 14:08:14 | Computer Name = WICHURA | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1055” podczas próby uruchomienia usługi
netman z argumentami „”  w celu uruchomienia serwera:  {BA126AE5-2166-11D1-B1D0-00805FC1270E}

Error - 2009-11-26 20:24:54 | Computer Name = WICHURA | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1055” podczas próby uruchomienia usługi
netman z argumentami „”  w celu uruchomienia serwera:  {BA126AE5-2166-11D1-B1D0-00805FC1270E}

Error - 2009-11-26 20:24:54 | Computer Name = WICHURA | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1055” podczas próby uruchomienia usługi
winmgmt z argumentami „”  w celu uruchomienia serwera:  {8BC3F05E-D86B-11D0-A075-00C04FB68820}


< End of report >


[Avnitary]

W OTL Wklej

Kod: Zaznacz wszystko

:Processes
Explorer.exe

:OTL
PRC - [2009-11-26 15:29:56 | 00,058,744 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice127.exe
PRC - [2009-11-26 15:29:56 | 00,058,744 | ---- | M] () -- C:\Program Files\QuestService\questservice.exe
MOD - [2009-11-26 15:29:52 | 00,598,016 | ---- | M] () -- C:\Program Files\QuestService\questservice.dll
SRV - [2009-11-26 15:29:56 | 00,058,744 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice127.exe -- (QuestService Service)

:files
C:\Documents and Settings\All Users\Dane aplikacji\.zreglib


:Commands
[emptytemp]
[start explorer]
[Reboot]


Kliknij run fix potem nowy log z otl + log z usuwania

a i żeby sie na przyszłość zabezpieczyć dodaj to do pliku host
127.0.0.1 http://www.gameztar.com
127.0.0.1 www.gameztar.com
127.0.0.1 gameztar.com

Zauważyłem że u mnie podczas otwierania storny seans24.pl gdy chciałem obejrzeć film również otwierała sie ta strona z propozycja oprogramowania.
Została ona natychmiastowo dodana do pliku host i już mam 100% pewność że nikt z tego komputera na nią nie wejdzie

Autor postu otrzymał pochwałę

[Ungabunga]

Niestety strony nadal sie otwieraja. Logi ze skanu po fix'ie:
OTL.txt
Extras.txt
Tym razem linki do wklej.org bo nie wiem czemu, ale jak chcialem tak jak poprzednio wkleic logi w code to pojawial sie blad ze za duzo znakow...

[wojtas]

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1800\WSO.dll ()
O2 - BHO: (TCP) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1380\TCPIE.dll ()
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll ()
O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\3.1.0.1540\CPAIEAddOn.dll ()
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1820\CMWIE.dll ()

:Files
C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Textual Content Provider
C:\Program Files\QuestService
C:\Documents and Settings\All Users\Dane aplikacji\QuestService
C:\Program Files\Textual Content Provider
C:\Program Files\Content Management Wizard
C:\Program Files\Internet Today
C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Internet Today
C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer
C:\Program Files\Customized Platform Advancer
C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer
C:\Program Files\Automated Content Enhancer
C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Web Search Operator
C:\Program Files\Web Search Operator
C:\Program Files\Gameztar Toolbar
C:\Documents and Settings\Swiezaldo\Ustawienia lokalne\Dane aplikacji\Gameztar Tool

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia kompa

Autor postu otrzymał pochwałę

[Ungabunga]

czyszczenie
OTL.txt
Extras.txt
i w razie gdyby sie przydalo log z poprzedniego czyszczenia poprzednie czyszczenie
Stronki poki co nie wyskakuja, a w logach jest git?

[NieWiem]

Jeszcze pusty wpis usługi na kasację:

• Uruchom ponownie program OTL
• W okienku na dole Custom Scans / Fixes wklej to, co poniżej w ramce:
  

  Kod: Zaznacz wszystko

  :Processes
explorer.exe
:OTL
SRV - File not found --  -- (QuestService Service)
:Services
QuestService Service
:Commands
[start explorer]
[reboot]

• Upewnij się, że wszystkie inne okna, programy, komunikatory są wyłączone.
• Kliknij przycisk Run Fix i poczekaj cierpliwie. To może chwilę potrwać!
• Na prośbę komputera o restart zgódź się.
• Po restarcie program automatycznie wyświetli raport z czyszczenia, który należy zapisać i wkleić w poście w tagach [code], lub na stronie http://www.wklej.org

I powinno być już czysto, więc:

• Pobierz program OTC
• Kliknij dwukrotnie na ikonę, aby uruchomić program (użytkownicy systemów Vista oraz Se7en => prawoklik oraz wybrać opcję Uruchom jako Administrator).
• Wciśnij przycisk Clean Up!
• Na pytanie "Begin cleanup Process?" wciśnij Yes.
• Jeśli padnie prośba o restart - zgódź się.

• Pobierz program TFC
• Zamknij wszystkie otwarte programy - inaczej TFC zrobi to za Ciebie
• Kliknij dwukrotnie na ikonę, aby uruchomić program (użytkownicy systemów Vista oraz Se7en => prawoklik oraz wybrać opcję Uruchom jako Administrator).
• Kliknij przycisk Start
• Czyszczenie lokalizacji tymczasowych może chwilę potrwać (ale znowu bez przesady), uzbrój się w cierpliwość.
• Jeśli padnie prośba o restart - zgódź się.

Czyszczenie punktów przywracania systemu jest konieczne, ponieważ w backupach Windowsa znajdują się także kopie szkodników.

• Wyłączenie przywracania systemu
  • Na pulpicie => prawoklik na Mój Komputer
  • opcja Właściwości
  • zakładka Przywracanie systemu
  • Zaznaczyć opcję Wyłącz przywracanie systemu
  • Kliknąć Zastosuj, a potem OK.
• Zrestartować komputer!
• Włączanie przywracania systemu
  • Na pulpicie => prawoklik na Mój Komputer
  • opcja Właściwości
  • zakładka Przywracanie systemu
  • Odznaczyć opcję Wyłącz przywracanie systemu
  • Kliknąć Zastosuj, a potem OK.

Autor postu otrzymał pochwałę

[Ungabunga]

Stronki juz sie nie otwieraja! Dzieki wszystkim za pomoc. Log z fix'a:

Kod: Zaznacz wszystko

========== PROCESSES ==========
Process explorer.exe killed successfully!
========== OTL ==========
Service QuestService Service stopped successfully!
Service QuestService Service deleted successfully!
========== SERVICES/DRIVERS ==========
No service named QuestService Service was found to stop!
Unable to stop service QuestService Service!
========== COMMANDS ==========

OTL by OldTimer - Version 3.1.11.1 log created on 11292009_210849

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...


[NieWiem]

No to safe surfing, jak to mówią

[Robert_S]

Witam. Mam dokładnie taki sam problem, też dzięki młodszej siostrze, z tym, że już na dwóch komputerach. Chciałbym się dowiedzieć, czy usunięcie tego problemu będzie wyglądało w identyczny sposób jak powyżej? Z góry dzięki za odpowiedź!

[wojtas]

na pewno trochę inaczej wiec załóż swoj temat opisz problem i daj loga z OTL w tagach code

[joasia1972]

również mam ten problem i proszę o pomoc

Kod: Zaznacz wszystko

OTL logfile created on: 2009-12-02 18:51:26 - Run 3
[code]OTL by OldTimer - Version 3.1.11.4     Folder = D:\Documents and Settings\x\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

1022,42 Mb Total Physical Memory | 539,47 Mb Available Physical Memory | 52,76% Memory free
2,40 Gb Paging File | 2,07 Gb Available in Paging File | 86,06% Paging File free
Paging file location(s): D:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 193,82 Gb Total Space | 149,28 Gb Free Space | 77,02% Space Free | Partition Type: NTFS
Drive D: | 39,05 Gb Total Space | 15,89 Gb Free Space | 40,69% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SPECIAL-XP
Current User Name: x
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2009-12-02 10:33:09 | 00,535,552 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\x\Pulpit\OTL.exe
PRC - [2009-11-03 04:41:11 | 00,908,248 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-10-14 16:57:04 | 01,251,720 | ---- | M] () -- D:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
PRC - [2009-07-01 17:37:06 | 00,037,888 | ---- | M] () -- D:\Program Files\Winamp\winampa.exe
PRC - [2009-02-11 21:37:54 | 07,143,424 | ---- | M] (OpenOffice.org) -- D:\Program Files\OpenOffice.ux.pl 3\program\soffice.exe
PRC - [2009-02-11 21:37:54 | 07,135,232 | ---- | M] (OpenOffice.org) -- D:\Program Files\OpenOffice.ux.pl 3\program\soffice.bin
PRC - [2009-01-17 15:48:08 | 05,853,672 | ---- | M] (o2.pl Sp. z o.o.) -- D:\Program Files\Tlen.pl\tlen.exe
PRC - [2008-10-17 14:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE
PRC - [2008-04-14 21:51:18 | 01,035,264 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exe
PRC - [2008-03-20 11:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- D:\Program Files\Gadu-Gadu\gg.exe
PRC - [2008-03-17 17:06:00 | 01,848,648 | ---- | M] (CANON INC.) -- D:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
PRC - [2007-08-23 13:35:00 | 00,243,064 | ---- | M] (Symantec Corporation) -- D:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
PRC - [2007-04-14 14:50:30 | 01,556,480 | ---- | M] (D-Link) -- D:\Program Files\D-Link\AirPlus G\AirGCFG.exe
PRC - [2007-01-19 10:49:04 | 00,049,152 | ---- | M] (Wireless Service) -- D:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
PRC - [2006-07-07 16:15:12 | 00,348,160 | ---- | M] (Leadtek Research Inc.) -- D:\Program Files\WinFast\WFTVFM\WFWIZ.exe
PRC - [2006-06-01 10:22:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\nvsvc32.exe
PRC - [2006-05-01 03:07:44 | 00,843,776 | R--- | M] (Analog Devices, Inc.) -- D:\Program Files\Analog Devices\Core\smax4pnp.exe
PRC - [2006-04-10 08:19:46 | 00,729,088 | ---- | M] (Analog Devices, Inc.) -- D:\Program Files\Analog Devices\SoundMAX\SMax4.exe
PRC - [2004-12-13 03:34:32 | 00,049,152 | ---- | M] (Ulead Systems, Inc.) -- D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2004-06-16 05:03:04 | 00,081,920 | ---- | M] (InstallShield Software Corporation) -- D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2009-12-02 10:33:09 | 00,535,552 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\x\Pulpit\OTL.exe
MOD - [2008-06-19 13:20:08 | 00,017,408 | ---- | M] () -- D:\Program Files\Tlen.pl\hook.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2009-11-01 09:51:33 | 00,000,000 | ---- | M] () -- D:\WINDOWS\system32\UTSCSI.EXE -- (UTSCSI)
SRV - [2009-10-14 16:57:04 | 01,251,720 | ---- | M] () -- D:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)
SRV - [2008-10-17 14:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice)
SRV - [2008-10-17 14:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)
SRV - [2008-10-17 14:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2008-10-17 14:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2007-08-23 13:35:00 | 03,192,184 | ---- | M] (Symantec Corporation) -- D:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate)
SRV - [2007-08-23 13:35:00 | 00,243,064 | ---- | M] (Symantec Corporation) -- D:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)
SRV - [2007-01-19 10:49:26 | 00,049,152 | ---- | M] (Wireless Service) -- D:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe -- (ANIWZCSdService)
SRV - [2006-06-01 10:22:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
SRV - [2004-12-13 03:34:32 | 00,049,152 | ---- | M] (Ulead Systems, Inc.) -- D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2009-11-20 04:02:58 | 00,268,664 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\SymcData\ipsdefs\20091120.002\SymIDSCo.sys -- (SYMIDSCO)
DRV - [2009-10-14 16:58:32 | 00,124,464 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2009-09-17 07:51:04 | 01,323,568 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\VirusDefs\20091202.006\NAVEX15.SYS -- (NAVEX15)
DRV - [2009-09-17 07:51:04 | 00,371,248 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2009-09-17 07:51:04 | 00,084,912 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\VirusDefs\20091202.006\NAVENG.SYS -- (NAVENG)
DRV - [2009-09-01 00:00:00 | 00,102,448 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2009-04-28 21:20:06 | 00,044,944 | ---- | M] (Sonic Solutions) -- D:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2009-03-17 11:56:58 | 00,447,024 | ---- | M] (Symantec Corporation) -- D:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2009-02-19 12:31:42 | 00,031,280 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\system32\drivers\SymIM.sys -- (SymIMMP)
DRV - [2009-02-19 12:31:42 | 00,031,280 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\system32\drivers\SymIM.sys -- (SymIM)
DRV - [2009-02-19 12:31:16 | 00,184,496 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2009-02-19 12:31:16 | 00,096,560 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\System32\Drivers\SYMFW.SYS -- (SYMFW)
DRV - [2009-02-19 12:31:16 | 00,038,576 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\System32\Drivers\SYMIDS.SYS -- (SYMIDS)
DRV - [2009-02-19 12:31:16 | 00,037,424 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\System32\Drivers\SYMNDIS.SYS -- (SYMNDIS)
DRV - [2009-02-19 12:31:16 | 00,022,320 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2009-02-19 12:31:16 | 00,013,616 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\System32\Drivers\SYMDNS.SYS -- (SYMDNS)
DRV - [2008-07-30 16:42:12 | 00,023,888 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2008-05-02 07:48:55 | 00,062,208 | ---- | M] (Silicon Image, Inc.) -- D:\WINDOWS\system32\drivers\si3112.sys -- (Si3112)
DRV - [2008-05-02 07:48:37 | 00,105,344 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\drivers\nvatabus.sys -- (nvatabus)
DRV - [2008-04-13 21:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- D:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2008-04-13 21:06:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- D:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007-11-30 22:57:12 | 00,317,616 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2007-11-30 22:57:12 | 00,279,088 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2007-11-30 22:57:12 | 00,043,696 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2006-06-01 10:22:00 | 03,925,920 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2006-05-16 12:25:02 | 00,018,944 | R--- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006-05-16 12:25:00 | 00,052,736 | R--- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006-05-10 10:33:00 | 00,043,520 | ---- | M] (Advanced Micro Devices) -- D:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006-05-04 03:02:00 | 00,380,928 | ---- | M] (Ralink Technology Inc.) -- D:\WINDOWS\system32\drivers\rt61.sys -- (RT61)
DRV - [2006-05-02 10:12:06 | 00,229,376 | R--- | M] (Analog Devices, Inc.) -- D:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService)
DRV - [2006-05-01 10:27:00 | 00,100,736 | R--- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata)
DRV - [2006-04-26 23:42:40 | 00,093,824 | R--- | M] (Andrea Electronics Corporation) -- D:\WINDOWS\system32\drivers\aeaudio.sys -- (AEAudio)
DRV - [2006-04-20 14:20:22 | 00,019,456 | ---- | M] (Leadtek Research Inc.) -- D:\WINDOWS\system32\drivers\wf2ktunr.sys -- (tv2ktunr)
DRV - [2006-04-20 13:50:34 | 00,059,776 | ---- | M] (Leadtek Research Inc.) -- D:\WINDOWS\system32\drivers\wf2kvcap.sys -- (BT848)
DRV - [2006-04-20 13:49:26 | 00,009,600 | ---- | M] (Leadtek Research Inc.) -- D:\WINDOWS\system32\drivers\wf2kXbar.sys -- (Tv2kXbar)
DRV - [2006-03-17 11:18:58 | 00,392,960 | R--- | M] (Sensaura) -- D:\WINDOWS\system32\drivers\senfilt.sys -- (SenFiltService)
DRV - [2005-12-11 10:55:38 | 00,028,195 | ---- | M] (Alpha Networks Inc.) -- D:\WINDOWS\system32\ANIO.sys -- (ANIO)
DRV - [2005-01-31 09:30:00 | 00,141,246 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\drivers\NVCAP.SYS -- (nvcap) nVidia WDM Video Capture (universal)
DRV - [2005-01-31 09:30:00 | 00,016,176 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\drivers\NVXBAR.SYS -- (NVXBAR)
DRV - [2005-01-06 15:55:38 | 00,009,446 | ---- | M] (Leadtek Research Inc.) -- D:\Program Files\WinFast\WFTVFM\WFIOCTL.sys -- (WFIOCTL)
DRV - [2004-08-13 03:56:20 | 00,005,810 | R--- | M] () -- D:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2004-05-02 09:47:08 | 00,023,040 | R--- | M] () -- D:\WINDOWS\system32\drivers\GVCplDrv.sys -- (GVCplDrv)
DRV - [2001-08-17 22:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- D:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKU\S-1-5-21-1214440339-1958367476-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.pl [binary data]
IE - HKU\S-1-5-21-1214440339-1958367476-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.theprizeday.com/today.php
IE - HKU\S-1-5-21-1214440339-1958367476-682003330-1003\S-1-5-21-1214440339-1958367476-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.startup.homepage: "http://www.google.pl/firefox?client=firefox-a&rls=org.mozilla:pl:official"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.1

FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: D:\Program Files\Web Search Operator\3.1.0.1800\FF [2009-11-28 19:21:14 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: D:\Program Files\Automated Content Enhancer\4.1.0.5050\FF [2009-11-28 19:21:23 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: D:\Program Files\Customized Platform Advancer\3.1.0.1540\FF [2009-11-28 19:21:31 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2009-11-30 12:07:23 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2009-11-30 12:04:33 | 00,000,000 | ---D | M]

[2009-10-13 21:18:29 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\Mozilla\Extensions
[2009-12-02 18:25:33 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\4yqy4v7f.default\extensions
[2009-10-21 13:52:39 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\4yqy4v7f.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009-12-02 10:45:37 | 00,000,000 | ---D | M] -- D:\Program Files\Mozilla Firefox\extensions
[2009-11-03 02:54:10 | 00,002,767 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-11-03 02:54:10 | 00,001,406 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-11-03 02:54:10 | 00,000,917 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-11-03 02:54:10 | 00,000,858 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-11-03 02:54:10 | 00,001,183 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-11-03 02:54:10 | 00,001,683 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

O1 HOSTS File: (742 bytes) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - D:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll ()
O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - D:\Program Files\Customized Platform Advancer\3.1.0.1540\CPAIEAddOn.dll ()
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - D:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - D:\Program Files\Content Management Wizard\1.1.0.1820\CMWIE.dll ()
O2 - BHO: (TCP) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - D:\Program Files\Textual Content Provider\1.1.0.1380\TCPIE.dll ()
O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - D:\Program Files\Web Search Operator\3.1.0.1800\WSO.dll ()
O3 - HKU\S-1-5-21-1214440339-1958367476-682003330-1003\..\Toolbar\WebBrowser: (no name) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - No CLSID value found.
O4 - HKLM..\Run: [Adobe ARM] D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] D:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ANIWZCS2Service] D:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Wireless Service)
O4 - HKLM..\Run: [CanonMyPrinter] D:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] D:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [ccApp] D:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [D-Link AirPlus G] D:\Program Files\D-Link\AirPlus G\AirGCFG.exe (D-Link)
O4 - HKLM..\Run: [Internet Today Task] D:\Program Files\Internet Today\1.1.0.1090\InternetToday.exe File not found
O4 - HKLM..\Run: [ISUSPM Startup] D:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] D:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [osCheck] D:\Program Files\Norton AntiVirus\osCheck.exe (Symantec Corporation)
O4 - HKLM..\Run: [SoundMAX] D:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe ()
O4 - HKLM..\Run: [WinFast Schedule] D:\Program Files\WinFast\WFTVFM\WFWIZ.exe (Leadtek Research Inc.)
O4 - HKU\S-1-5-21-1214440339-1958367476-682003330-1003..\Run: [Gadu-Gadu] D:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O4 - HKU\S-1-5-21-1214440339-1958367476-682003330-1003..\Run: [Komunikator] D:\Program Files\Tlen.pl\tlen.exe (o2.pl Sp. z o.o.)
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2]  File not found
O4 - HKU\.DEFAULT..\RunOnce: [nltide_3] D:\WINDOWS\System32\advpack.dll (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2]  File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_3] D:\WINDOWS\System32\advpack.dll (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [nltide_2]  File not found
O4 - HKU\S-1-5-19..\RunOnce: [nltide_3] D:\WINDOWS\System32\advpack.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [nltide_2]  File not found
O4 - HKU\S-1-5-20..\RunOnce: [nltide_3] D:\WINDOWS\System32\advpack.dll (Microsoft Corporation)
O4 - HKLM..\RunOnceEx: [Flag] Reg Error: Invalid data type. File not found
O4 - Startup: D:\Documents and Settings\x\Menu Start\Programy\Autostart\OpenOffice.ux.pl 3.0.lnk = D:\Program Files\OpenOffice.ux.pl 3\program\quickstart.exe ()
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1214440339-1958367476-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-10-12 22:05:45 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{0247c979-c6c3-11de-a809-0018f3e008f0}\Shell\AutoRun\command - "" = G:\USBNB.exe -- File not found
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (*) -  File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2009-12-02 18:35:15 | 00,000,000 | ---D | C] -- D:\Documents and Settings\x\Pulpit\seba
[2009-12-02 11:05:37 | 00,000,000 | ---D | C] -- D:\Program Files\CleanUp!
[2009-12-02 10:33:00 | 00,535,552 | ---- | C] (OldTimer Tools) -- D:\Documents and Settings\x\Pulpit\OTL.exe
[2009-11-28 19:22:41 | 00,000,000 | ---D | C] -- D:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Textual Content Provider
[2009-11-28 19:22:05 | 00,000,000 | ---D | C] -- D:\Program Files\Textual Content Provider
[2009-11-28 19:21:54 | 00,000,000 | ---D | C] -- D:\Program Files\Content Management Wizard
[2009-11-28 19:21:31 | 00,000,000 | ---D | C] -- D:\Program Files\Customized Platform Advancer
[2009-11-28 19:21:31 | 00,000,000 | ---D | C] -- D:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer
[2009-11-28 19:21:23 | 00,000,000 | ---D | C] -- D:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer
[2009-11-28 19:21:22 | 00,000,000 | ---D | C] -- D:\Program Files\Automated Content Enhancer
[2009-11-28 19:21:15 | 00,000,000 | ---D | C] -- D:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Web Search Operator
[2009-11-28 19:21:13 | 00,000,000 | ---D | C] -- D:\Program Files\Web Search Operator
[2009-11-28 19:20:40 | 00,000,000 | ---D | C] -- D:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar
[2009-11-24 18:13:34 | 00,000,000 | ---D | C] -- D:\Program Files\Emergency 3
[2009-11-23 15:25:10 | 00,000,000 | ---D | C] -- D:\Program Files\Flight Unlimited II
[2009-11-17 15:10:59 | 00,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\Komputerowa Gratka
[2009-11-16 18:48:48 | 00,000,000 | ---D | C] -- D:\Program Files\Marzenie Bujanego Konika
[2009-11-16 18:04:39 | 00,000,000 | -HSD | C] -- D:\WINDOWS\ftpcache
[2009-11-16 18:01:46 | 00,000,000 | ---D | C] -- D:\Program Files\Pluszaki Rozrabiaki
[2009-11-16 18:01:44 | 00,000,000 | ---D | C] -- D:\Documents and Settings\x\Dane aplikacji\Fabrykagier
[4 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2009-12-02 18:35:00 | 00,005,120 | ---- | M] () -- D:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-12-02 18:21:27 | 00,000,002 | ---- | M] () -- D:\WINDOWS\System32\ANIWZCSUSERNAME{EBB872B7-0542-4F88-B905-A187FD334FB2}
[2009-12-02 18:21:11 | 00,063,804 | ---- | M] () -- D:\WINDOWS\System32\nvapps.xml
[2009-12-02 18:20:52 | 00,000,006 | -H-- | M] () -- D:\WINDOWS\tasks\SA.DAT
[2009-12-02 18:20:46 | 00,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2009-12-02 11:07:11 | 03,145,728 | -H-- | M] () -- D:\Documents and Settings\x\NTUSER.DAT
[2009-12-02 11:07:11 | 00,000,188 | -HS- | M] () -- D:\Documents and Settings\x\ntuser.ini
[2009-12-02 11:07:02 | 04,810,654 | -H-- | M] () -- D:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-12-02 10:33:09 | 00,535,552 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\x\Pulpit\OTL.exe
[2009-11-30 20:29:27 | 00,000,578 | ---- | M] () -- D:\WINDOWS\tasks\Norton AntiVirus - Uruchom pełne skanowanie systemu - x.job
[2009-11-30 19:39:36 | 00,012,107 | ---- | M] () -- D:\Documents and Settings\x\Pulpit\Nowy OpenDocument Dokument tekstowy.odt
[2009-11-30 12:06:33 | 00,000,007 | ---- | M] () -- D:\WINDOWS\System32\ANIWZCSUSERNAME
[2009-11-30 11:31:32 | 00,001,602 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
[2009-11-30 11:17:27 | 00,000,165 | ---- | M] () -- D:\WINDOWS\disney.ini
[2009-11-21 13:57:12 | 00,000,400 | ---- | M] () -- D:\Documents and Settings\x\Moje dokumenty\spider.sav
[2009-11-17 18:08:12 | 00,009,573 | ---- | M] () -- D:\Documents and Settings\x\Moje dokumenty\patryk.odt
[2009-11-17 17:39:21 | 00,009,656 | ---- | M] () -- D:\Documents and Settings\x\Moje dokumenty\mikołaj laura.odt
[2009-11-16 18:04:09 | 00,000,779 | ---- | M] () -- D:\Documents and Settings\x\Pulpit\Kontrola czasu gry Pluszaki Rozrabiaki.lnk
[2009-11-16 16:02:58 | 00,009,291 | ---- | M] () -- D:\Documents and Settings\x\Moje dokumenty\mikołaj.odt
[2009-11-14 20:01:05 | 00,000,069 | ---- | M] () -- D:\WINDOWS\NeroDigital.ini
[2009-11-12 12:13:08 | 00,014,523 | ---- | M] () -- D:\Documents and Settings\x\Moje dokumenty\prażuchy.odt
[2009-11-12 10:05:47 | 00,020,345 | ---- | M] () -- D:\Documents and Settings\x\Moje dokumenty\racuchy.odt
[2009-11-10 11:54:40 | 00,021,813 | ---- | M] () -- D:\Documents and Settings\x\Moje dokumenty\przepisy na rogaliki.odt
[4 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2009-11-24 20:00:11 | 00,012,107 | ---- | C] () -- D:\Documents and Settings\x\Pulpit\Nowy OpenDocument Dokument tekstowy.odt
[2009-11-17 18:08:11 | 00,009,573 | ---- | C] () -- D:\Documents and Settings\x\Moje dokumenty\patryk.odt
[2009-11-17 16:13:10 | 00,009,656 | ---- | C] () -- D:\Documents and Settings\x\Moje dokumenty\mikołaj laura.odt
[2009-11-16 18:04:09 | 00,000,779 | ---- | C] () -- D:\Documents and Settings\x\Pulpit\Kontrola czasu gry Pluszaki Rozrabiaki.lnk
[2009-11-16 16:02:58 | 00,009,291 | ---- | C] () -- D:\Documents and Settings\x\Moje dokumenty\mikołaj.odt
[2009-11-12 12:13:08 | 00,014,523 | ---- | C] () -- D:\Documents and Settings\x\Moje dokumenty\prażuchy.odt
[2009-11-12 09:58:27 | 00,020,345 | ---- | C] () -- D:\Documents and Settings\x\Moje dokumenty\racuchy.odt
[2009-11-10 11:54:39 | 00,021,813 | ---- | C] () -- D:\Documents and Settings\x\Moje dokumenty\przepisy na rogaliki.odt
[2009-11-09 11:38:39 | 00,000,069 | ---- | C] () -- D:\WINDOWS\NeroDigital.ini
[2009-10-16 08:05:58 | 00,000,165 | ---- | C] () -- D:\WINDOWS\disney.ini
[2009-10-16 08:05:46 | 00,000,192 | ---- | C] () -- D:\WINDOWS\disneysy.ini
[2009-10-14 16:04:17 | 00,164,352 | ---- | C] () -- D:\WINDOWS\System32\unrar.dll
[2009-10-14 16:04:16 | 00,000,038 | ---- | C] () -- D:\WINDOWS\avisplitter.ini
[2009-10-14 16:04:14 | 03,596,288 | ---- | C] () -- D:\WINDOWS\System32\qt-dx331.dll
[2009-10-14 16:04:14 | 00,755,027 | ---- | C] () -- D:\WINDOWS\System32\xvidcore.dll
[2009-10-14 16:04:14 | 00,159,839 | ---- | C] () -- D:\WINDOWS\System32\xvidvfw.dll
[2009-10-14 16:04:13 | 00,007,680 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll
[2009-10-14 16:04:13 | 00,000,547 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-10-14 16:03:51 | 00,001,931 | ---- | C] () -- D:\WINDOWS\wincmd.ini
[2009-10-13 20:16:08 | 00,005,120 | ---- | C] () -- D:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-10-13 19:29:00 | 00,049,152 | ---- | C] () -- D:\WINDOWS\System32\JJAKEn.dll
[2009-10-12 22:25:23 | 00,023,040 | R--- | C] () -- D:\WINDOWS\System32\drivers\GVCplDrv.sys
[2009-10-12 22:24:11 | 00,024,965 | ---- | C] () -- D:\WINDOWS\Ascd_tmp.ini
[2009-10-12 22:12:46 | 00,000,804 | R--- | C] () -- D:\WINDOWS\System32\AsusSetup.ini
[2009-10-12 22:12:46 | 00,000,396 | R--- | C] () -- D:\WINDOWS\System32\raidmgmt.ini
[2009-10-12 22:11:47 | 00,005,810 | R--- | C] () -- D:\WINDOWS\System32\drivers\ASACPI.sys
[2009-10-12 22:11:31 | 00,005,824 | ---- | C] () -- D:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2008-05-03 08:24:01 | 00,000,082 | ---- | C] () -- D:\WINDOWS\System32\oeminfo.ini
[2007-07-09 09:27:00 | 00,004,657 | ---- | C] () -- D:\Program Files\Save.swf
[2006-06-01 10:22:00 | 01,662,976 | ---- | C] () -- D:\WINDOWS\System32\nvwdmcpl.dll
[2006-06-01 10:22:00 | 01,466,368 | ---- | C] () -- D:\WINDOWS\System32\nview.dll
[2006-06-01 10:22:00 | 01,019,904 | ---- | C] () -- D:\WINDOWS\System32\nvwimg.dll
[2006-06-01 10:22:00 | 00,581,632 | ---- | C] () -- D:\WINDOWS\System32\nvhwvid.dll
[2006-06-01 10:22:00 | 00,466,944 | ---- | C] () -- D:\WINDOWS\System32\nvshell.dll
[2006-06-01 10:22:00 | 00,286,720 | ---- | C] () -- D:\WINDOWS\System32\nvnt4cpl.dll
[2006-06-01 10:22:00 | 00,196,608 | ---- | C] () -- D:\WINDOWS\System32\nvapi.dll

[color=#E56717]========== LOP Check ==========[/color]

[2009-10-15 16:50:06 | 00,000,000 | -H-D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\CanonBJ
[2009-10-31 16:53:55 | 00,000,000 | -H-D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\CanonIJEGV
[2009-11-17 15:25:39 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Komputerowa Gratka
[2009-10-15 12:01:03 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl
[2009-10-13 20:07:27 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems
[2009-10-29 14:18:00 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\Canon
[2009-11-16 18:01:44 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\Fabrykagier
[2009-10-15 11:46:57 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\Gadu-Gadu
[2009-10-14 16:49:28 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\Nowe Gadu-Gadu
[2009-10-15 11:23:57 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\OpenOffice.ux.pl
[2009-11-01 09:46:43 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\OTi
[2009-11-01 09:46:47 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\PLAux
[2009-10-15 12:02:14 | 00,000,000 | ---D | M] -- D:\Documents and Settings\x\Dane aplikacji\Tlen.pl

[color=#E56717]========== Purity Check ==========[/color]


< End of report >

[wojtas]

proszę założyć swój temat, dać loga w tagi code i opisać problem dokładnie