pierwszy raz spotykam sie z takim przypadkiem(log silent run

[biigos]

Witajcie, otoz uruchamiam komputer mojego mlodszego brata, jeszcze przed pokazaniem sie pulpitu wyskakuje:

http://img128.imageshack.us/my.php?image=bbbhc5.jpg

Dobra klikam ok...Na pulpicie wszystki skroty maja ikonki(no tak jakby nie bylo widac co to jest,jaki plik nie ma wlasciwej ikonki jest jedna i ta sama)w pasku na dole nie ma ani godziny ani antywirusa ani firewalla nic...Jest za to starz...Pliki z office chodza,ale no nie moge wlaczyc hijacka,klikam i nic..Udalo mi sie zrobic loga z Silent Runners..

Kod: Zaznacz wszystko

"Silent Runners.vbs", revision R50, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS]
"kav" = ""C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"" ["Kaspersky Lab"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "AcroIEHlprObj Class"
                   \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Megaupload Toolbar"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL" ["MegaUpload"]
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Groove GFS Browser Helper"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Extension Affichage Panorama du Panneau de configuration"
  -> {HKLM...CLSID} = "Extension Affichage Panorama du Panneau de configuration"
                   \InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Extension icône HyperTerminal"
  -> {HKLM...CLSID} = "HyperTerminal Icon Ext"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
  -> {HKLM...CLSID} = "DesktopContext Class"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
  -> {HKLM...CLSID} = "NVIDIA CPL Extension"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
  -> {HKLM...CLSID} = "Desktop Explorer"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
  -> {HKLM...CLSID} = "nView Desktop Context Menu"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{85E0B171-04FA-11D1-B7DA-00A0C90348D6}" = "Ochrona WWW"
  -> {HKLM...CLSID} = "Ochrona WWW"
                   \InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll" ["Kaspersky Lab"]
"{97FA8AA2-EE77-4FF2-9449-424D8924EF21}" = "IntelliType Pro Zooming Control Panel Property Page"
  -> {HKLM...CLSID} = "IntelliType Pro Zooming Property Page"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliType Pro\itcplzm.dll"" [MS]
"{111D8120-25EB-4E1C-A4DF-C9EE5FCA35CB}" = "IntelliType Pro Scrolling Control Panel Property Page"
  -> {HKLM...CLSID} = "IntelliType Pro Scrolling Property Page"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliType Pro\itcplwhl.dll"" [MS]
"{ED6E87C6-8A83-43aa-8208-8DBC8247F4D2}" = "IntelliType Pro Key Settings Control Panel Property Page"
  -> {HKLM...CLSID} = "IntelliType Pro Key Settings Property Page"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliType Pro\itcplkey.dll"" [MS]
"{A2569D1F-4E06-43EC-9825-0088B471BE47}" = "IntelliType Pro Wireless Control Panel Property Page"
  -> {HKLM...CLSID} = "IntelliType Pro Wireless Control Panel Property Page"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliType Pro\itcplwir.dll"" [MS]
"{20082881-FC36-4E47-9A7A-644C95FF749F}" = "IntelliPoint Wireless Control Panel Property Page"
  -> {HKLM...CLSID} = "Page de propriétés sans fil"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliPoint\ipcplwir.dll"" [MS]
"{AF90F543-6A3A-4C1B-8B16-ECEC073E69BE}" = "IntelliPoint Wheel Control Panel Property Page"
  -> {HKLM...CLSID} = "Page des propriétés de la roulette"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliPoint\ipcplwhl.dll"" [MS]
"{653DCCC2-13DB-45B2-A389-427885776CFE}" = "IntelliPoint Activities Control Panel Property Page"
  -> {HKLM...CLSID} = "Page des propriétés des activités"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliPoint\ipcplact.dll"" [MS]
"{124597D8-850A-41AE-849C-017A4FA99CA2}" = "IntelliPoint Buttons Control Panel Property Page"
  -> {HKLM...CLSID} = "Page des propriétés des boutons"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliPoint\ipcplbtn.dll"" [MS]
"{72853161-30C5-4D22-B7F9-0BBC1D38A37E}" = "Groove GFS Browser Helper"
  -> {HKLM...CLSID} = "Groove GFS Browser Helper"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}" = "Groove GFS Explorer Bar"
  -> {HKLM...CLSID} = "Groove Folder Synchronization"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{A449600E-1DC6-4232-B948-9BD794D62056}" = "Groove GFS Stub Icon Handler"
  -> {HKLM...CLSID} = "Groove GFS Stub Icon Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" = "Groove GFS Stub Execution Hook"
  -> {HKLM...CLSID} = "Groove GFS Stub Execution Hook"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{6C467336-8281-4E60-8204-430CED96822D}" = "Groove GFS Context Menu Handler"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{387E725D-DC16-4D76-B310-2C93ED4752A0}" = "Groove XML Icon Handler"
  -> {HKLM...CLSID} = "Groove XML Icon Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{16F3DD56-1AF5-4347-846D-7C10C4192619}" = "Groove Explorer Icon Overlay 3 (GFS Folder)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 3 (GFS Folder)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}" = "Groove Explorer Icon Overlay 2 (GFS Stub)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 2 (GFS Stub)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}" = "Groove Explorer Icon Overlay 4 (GFS Unread Mark)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 4 (GFS Unread Mark)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{99FD978C-D287-4F50-827F-B2C658EDA8E7}" = "Groove Explorer Icon Overlay 1 (GFS Unread Stub)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 1 (GFS Unread Stub)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{920E6DB1-9907-4370-B3A0-BAFC03D81399}" = "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Custom Icon Handler"
  -> {HKLM...CLSID} = "Outlook File Icon Extension"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\OLKFSTUB.DLL" [MS]
"{00020D75-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Desktop Icon Handler"
  -> {HKLM...CLSID} = "Microsoft Office Outlook"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\MLSHEXT.DLL" [MS]
"{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C}" = "Microsoft Office OneNote Namespace Extension for Windows Desktop Search"
  -> {HKLM...CLSID} = "Microsoft Office OneNote Namespace Extension for Windows Desktop Search"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\ONFILTER.DLL" [MS]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office12\msohevi.dll" [MS]
"{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}" = "Microsoft Office Metadata Handler"
  -> {HKLM...CLSID} = "Microsoft Office Metadata Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\msoshext.dll" [MS]
"{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}" = "Microsoft Office Thumbnail Handler"
  -> {HKLM...CLSID} = "Microsoft Office Thumbnail Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\msoshext.dll" [MS]
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu"
  -> {HKLM...CLSID} = "Portable Media Devices Menu"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\
<<!>> "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" = "Groove GFS Stub Execution Hook"
  -> {HKLM...CLSID} = "Groove GFS Stub Execution Hook"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
<<!>> klogon\DLLName = "C:\WINDOWS\System32\klogon.dll" ["Kaspersky Lab"]

HKLM\Software\Classes\PROTOCOLS\Filter\
<<!>> text/xml\CLSID = "{807563E5-5146-11D5-A672-00B0D022E945}"
  -> {HKLM...CLSID} = "Microsoft Office InfoPath XML Mime Filter"
                   \InProcServer32\(Default) = "C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL" [MS]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll" ["Kaspersky Lab"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll" ["Kaspersky Lab"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\
XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]


Default executables:
--------------------

HKLM\Software\Classes\.bat\(Default) = (value not set)

HKLM\Software\Classes\.com\(Default) = (value not set)

HKLM\Software\Classes\.exe\(Default) = (value not set)
HKLM\Software\Classes\exefile\shell\open\command\(Default) = (value not set)

HKLM\Software\Classes\.pif\(Default) = (value not set)

HKLM\Software\Classes\.scr\(Default) = (value not set)


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}"
  -> {HKLM...CLSID} = "Megaupload Toolbar"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL" ["MegaUpload"]

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}" = (no title provided)
  -> {HKLM...CLSID} = "Megaupload Toolbar"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL" ["MegaUpload"]

Explorer Bars

HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\

HKLM\Software\Classes\CLSID\{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}\(Default) = "Groove Folder Synchronization"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Classes\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D6}\(Default) = "Ochrona WWW"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll" ["Kaspersky Lab"]

HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\(Default) = "&Research"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL" [MS]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Console Java (Sun)"
"CLSIDExtension" = "{08B0E5C0-4FCB-11CF-AAA5-00401C608501}"

{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}\
"ButtonText" = "Ochrona WWW"

{2670000A-7350-4F3C-8081-5663EE0C6C49}\
"ButtonText" = "Send to OneNote"
"MenuText" = "S&end to OneNote"
"CLSIDExtension" = "{48E73304-E1D6-4330-914C-F5F514E3486C}"
  -> {HKLM...CLSID} = "Send to OneNote from Internet Explorer button"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll" [MS]

{92780B25-18CC-41C8-B9BE-3C9C571A8263}\
"ButtonText" = "Research"

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Miscellaneous IE Hijack Points
------------------------------

C:\WINDOWS\INF\IERESET.INF (used to "Reset Web Settings")

Added lines (compared with English-language version):
[Strings]: SAFESITE_VALUE="http://home.microsoft.com/intl/fr/"

Missing lines (compared with English-language version):
[Strings]: 1 line


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Kaspersky Anti-Virus 6.0, AVP, "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe -r" ["Kaspersky Lab"]
NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\System32\nvsvc32.exe" ["NVIDIA Corporation"]
TrueVector Internet Monitor, vsmon, "C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service" ["Zone Labs, LLC"]
Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\System32\wdfmgr.exe" [MS]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
hpzlnt09\Driver = "hpzlnt09.dll" ["HP"]
Send To Microsoft OneNote Monitor\Driver = "msonpmon.dll" [MS]


----------
<<!>>: Suspicious data at a malware launch point.

+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
  DLL launch points, use the -supp parameter or answer "No" at the
  first message box and "Yes" at the second message box.
---------- (total run time: 38 seconds, including 3 seconds for message boxes)

Prosze o pomoc i z gory dziekuje.

[jeff]

nie moge wlaczyc hijacka,klikam i nic.

a w trybie awaryjnym ?

[Lukesh]

Sprobuj z ta wersja HJ: http://www.searchengines.pl/phpbb203/pliki/picasso/virus/tools/hijackthis.com

[biigos]

Probowalem,nic z tego identycznie jak normalnie...

Lukesh,probowalem, nic z tego ciagle klikajac nic sie nie dzieje i wszytskie ikonki sa takie same...tylko moj komputer IE moje dokumenty sa normalne...reszta nie....

[jeff]

sciagnij sobie na dysk:

http://securityresponse.symantec.com/avcenter/UnHookExec.inf

Wyłącz Przywracanie systemu i zastartuj do trybu awaryjnego. Uruchom progs ktory sciagnąles> prawy klik > Instaluj
potem reset

i próbuj odpalic Hijacka

[biigos]

Heh nie moge wylaczyc przywracania systemu bo klikajac na ikonke czyli start/narzedzia/system i juz dalej nie idzie...i probowalem zainstalowac, to wyskakuje przy pomocy jakiego programu zainstalowac...nie wybiore przeciez winampa...

[wojtas]

nie wybiore przeciez winampa...

:)

w awaryjnym zrob to co kazal anders

[biigos]

Nic z tego..dalej okienko jakiego programu uzyw lub czy chce skorzystac ze strony intenrentowej..nawet jak klikam tak to nic sie nie dzieje...

[wojtas]

na samym dole masz jak odblokowac :

http://www.searchengines.pl/phpbb203/index.php?showtopic=79791&pid=395643&mode=threaded&start=#entry395643

Autor postu otrzymał pochwałę

[biigos]

Wojtas, suoer wielkie dzieki, wszystko smiga, z tym ze na poczatku ciagle wyskakuje to okienko...
Log z hijacka, moim zdaniem czysty...

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 17:04:02, on 21.03.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
I:\Bartek\Programy\Anty Wirusy\Anty Wirusy\HijackThis.exe
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://analyze.hijackfree.com/analyze/?id=b609d827-654e-43ff-9329-33beb154184d
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [Gadu-Gadu] "I:\Krzysiek\programy\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Download with &FileFactory Turbo - I:\Krzysiek\FileFactory Turbo\Plugins\IE\FileFactoryIE.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


[ Dodano: Dzisiaj o 17:14 ]

Wojtas, suoer wielkie dzieki, wszystko smiga, z tym ze na poczatku ciagle wyskakuje to okienko...
Log z hijacka.

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 17:04:02, on 21.03.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
I:\Bartek\Programy\Anty Wirusy\Anty Wirusy\HijackThis.exe
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://analyze.hijackfree.com/analyze/?id=b609d827-654e-43ff-9329-33beb154184d
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [Gadu-Gadu] "I:\Krzysiek\programy\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Download with &FileFactory Turbo - I:\Krzysiek\FileFactory Turbo\Plugins\IE\FileFactoryIE.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


[wojtas]

skasuj:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

daj loga z comboscana

opis>>

http://forum.programosy.pl/dodatkowe-narzedzia-do-usuwania-i-ochrony-vt42021.html

[biigos]

[code]ComboScan v20070306.20 run by Propriétaire on 2007-03-21 at 17:53:37
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created ComboScan Restore Point.


-- Last 5 Restore Point(s) --
16: 2007-03-21 16:53:42 UTC - RP132 - ComboScan Restore Point
15: 2007-03-21 16:22:08 UTC - RP131 - Point de vérification système
14: 2007-03-15 12:13:01 UTC - RP130 - Software Distribution Service 2.0
13: 2007-03-14 18:51:54 UTC - RP129 - Point de vérification système
12: 2007-03-08 17:09:23 UTC - RP128 - Software Distribution Service 2.0


-- First Restore Point --
1: 2007-03-05 19:50:07 UTC - RP117 - Le KB922819 pour Windows XP a été installé.


Performed disk cleanup.


-- HijackThis (run as Propriétaire.exe) ----------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 17:54:00, on 21.03.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
I:\Krzysiek\programy\Gadu-Gadu\gg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
C:\WINDOWS\system32\wuauclt.exe
I:\Bartek\Programy\Anty Wirusy\comboscan.exe
I:\Bartek\Programy\ANTYWI~1\Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://analyze.hijackfree.com/analyze/?id=b609d827-654e-43ff-9329-33beb154184d
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [Gadu-Gadu] "I:\Krzysiek\programy\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O8 - Extra context menu item: Download with &FileFactory Turbo - I:\Krzysiek\FileFactory Turbo\Plugins\IE\FileFactoryIE.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


-- HijackThis Fixed Entries (I:\Bartek\Programy\ANTYWI~1\backups\) -------------

backup-20070321-174023-111 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
backup-20070321-174023-194 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
backup-20070321-174023-202 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
backup-20070321-174023-704 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
backup-20070321-174023-736 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
backup-20070321-174023-913 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
backup-20070321-174505-465 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
backup-20070321-174505-497 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
backup-20070321-174505-674 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
backup-20070321-174505-685 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
backup-20070321-174505-705 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
backup-20070321-174505-764 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
backup-20070321-174505-860 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
backup-20070321-175307-510 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

-- File Associations -----------------------------------------------------------

[COLOR=red].bat - unable to read key[/COLOR]
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
[COLOR=red].com - unable to read key[/COLOR]
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
[COLOR=red].pif - unable to read key[/COLOR]
.reg - regfile - regedit.exe "%1"
[COLOR=red].scr - unable to read key[/COLOR]
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

1R AFS2K - C:\WINDOWS\system32\drivers\AFS2K.SYS
3R Arp1394 (Protocole client ARP 1394) - C:\WINDOWS\system32\drivers\arp1394.sys
0R d347bus - C:\WINDOWS\system32\drivers\d347bus.sys
0R d347prt - C:\WINDOWS\system32\drivers\d347prt.sys
3R HidUsb (Pilote de classe HID Microsoft) - C:\WINDOWS\system32\drivers\hidusb.sys
3S HPZid412 (IEEE-1284.4 Driver HPZid412) - C:\WINDOWS\system32\drivers\hpzid412.sys
3S HPZipr12 (Print Class Driver for IEEE-1284.4 HPZipr12) - C:\WINDOWS\system32\drivers\HPZipr12.sys
3S HPZius12 (USB to IEEE-1284.4 Translation Driver HPZius12) - C:\WINDOWS\system32\drivers\HPZius12.sys
1R intelppm (Pilote de processeur Intel) - C:\WINDOWS\system32\drivers\intelppm.sys
1R kbdhid (Pilote HID de clavier) - C:\WINDOWS\system32\drivers\kbdhid.sys
0R kl1 - C:\WINDOWS\system32\drivers\kl1.sys
1R klif - C:\WINDOWS\system32\drivers\klif.sys
3R mouhid (Pilote HID de souris) - C:\WINDOWS\system32\drivers\mouhid.sys
3R NIC1394 (Pilote réseau 1394) - C:\WINDOWS\system32\drivers\nic1394.sys
3R nv - C:\WINDOWS\system32\drivers\nv4_mini.sys
0R ohci1394 (Contrôleurs hôte IEEE 1394 compatible OHCI) - C:\WINDOWS\system32\drivers\ohci1394.sys
3R Point32 (Microsoft IntelliPoint Filter Driver) - C:\WINDOWS\system32\drivers\point32.sys
0R PxHelp20 - C:\WINDOWS\system32\drivers\PxHelp20.sys
0R SISAGP (SiS AGP Filter) - C:\WINDOWS\system32\drivers\SISAGPX.SYS
3R SISNIC (SiS PCI Fast Ethernet Adapter Driver) - C:\WINDOWS\system32\drivers\sisnic.sys
0R srescan - C:\WINDOWS\system32\ZoneLabs\srescan.sys
3R STAC97 (SigmaTel C-Major Audio) - C:\WINDOWS\system32\drivers\STAC97.sys
3R usbccgp (Pilote parent générique USB Microsoft) - C:\WINDOWS\system32\drivers\usbccgp.sys
3R usbehci (Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft) - C:\WINDOWS\system32\drivers\usbehci.sys
3R usbohci (Pilote miniport de contrôleur hôte ouvert USB Microsoft) - C:\WINDOWS\system32\drivers\usbohci.sys
3S usbprint (Classe d'imprimantes USB Microsoft) - C:\WINDOWS\system32\drivers\usbprint.sys
3R usbstor (Pilote de stockage de masse USB) - C:\WINDOWS\system32\drivers\usbstor.sys
1R vsdatant - C:\WINDOWS\system32\vsdatant.sys
3S WpdUsb - C:\WINDOWS\system32\drivers\wpdusb.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

3S aspnet_state (ASP.NET State Service) - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
2R AVP (Kaspersky Anti-Virus 6.0) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe -r
3S IDriverT (InstallDriver Table Manager) - "C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe"
3S Microsoft Office Groove Audit Service - "C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe"
2R NVSvc (NVIDIA Display Driver Service) - C:\WINDOWS\System32\nvsvc32.exe
3S odserv (Microsoft Office Diagnostics Service) - "C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE"
3S ose (Office Source Engine) - "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
3S Pml Driver HPZ12 - C:\WINDOWS\System32\HPZipm12.exe
2R UMWdf (Windows User Mode Driver Framework) - C:\WINDOWS\System32\wdfmgr.exe
2R vsmon (TrueVector Internet Monitor) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service


-- Files created between 2007-02-21 and 2007-03-21 -----------------------------

2007-03-21 17:42:16 0 d-------- C:\WINDOWS\pss
2007-03-19 22:03:51 0 d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau<VOISIN~1>
2007-03-19 22:03:51 0 d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression<VOISIN~2>
2007-03-19 22:03:51 0 d--h----- C:\Documents and Settings\Administrateur\Modèles<MODLES~1>
2007-03-19 22:03:51 0 d-------- C:\Documents and Settings\Administrateur\Mes documents<MESDOC~1>
2007-03-19 22:03:51 0 dr------- C:\Documents and Settings\Administrateur\Menu Démarrer<MENUDM~1>
2007-03-19 22:03:51 0 d-------- C:\Documents and Settings\Administrateur\Favoris
2007-03-19 22:03:51 0 d-------- C:\Documents and Settings\Administrateur\Bureau
2007-03-19 22:03:51 0 d-------- C:\Documents and Settings\Administrateur\Application Data\Sun
2007-03-19 22:03:50 524288 --ah----- C:\Documents and Settings\Administrateur\NTUSER.DAT
2007-03-11 19:57:21 0 d-------- C:\Program Files\MegauploadToolbar<MEGAUP~1>
2007-03-11 19:57:21 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\MegauploadToolbar<MEGAUP~1>
2007-03-06 21:14:57 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\ArcSoft
2007-03-06 20:37:30 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-03-06 20:37:05 0 d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer<APPLEC~1>
2007-03-06 20:33:53 245408 --a------ C:\WINDOWS\system32\unicows.dll
2007-03-06 20:33:53 1645320 --a------ C:\WINDOWS\system32\gdiplus.dll
2007-03-06 20:33:53 0 d-------- C:\Program Files\Fichiers communs\ArcSoft
2007-03-06 20:33:52 348160 --a------ C:\WINDOWS\system32\msvcr71.dll
2007-03-06 20:33:52 499712 -ra------ C:\WINDOWS\system32\msvcp71.dll
2007-03-06 20:31:17 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\AdobeUM
2007-03-06 20:30:54 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\Adobe
2007-03-06 20:30:41 0 d-------- C:\Program Files\Fichiers communs\Adobe
2007-03-05 21:10:30 32592 --a------ C:\WINDOWS\system32\msonpmon.dll
2007-03-05 21:07:10 0 d-------- C:\Program Files\Microsoft Works<MIF2B0~1>
2007-03-05 21:06:56 0 d-------- C:\Program Files\MSBuild
2007-03-05 21:06:24 0 d-------- C:\Program Files\Fichiers communs\DESIGNER
2007-03-05 21:05:19 0 d-------- C:\Program Files\Microsoft.NET<MICROS~1.NET>
2007-03-05 21:01:32 0 d-------- C:\WINDOWS\SHELLNEW
2007-03-05 21:00:35 0 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help<MICROS~2>
2007-03-05 20:59:01 0 dr-h----- C:\MSOCache
2007-03-05 20:57:45 0 d-------- C:\Documents and Settings\LocalService\Menu Démarrer<MENUDM~1>
2007-03-05 20:55:11 0 d-------- C:\WINDOWS\Prefetch
2007-03-05 20:12:20 221184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-03-05 20:10:31 0 d-------- C:\WINDOWS\peernet
2007-03-05 20:10:30 0 d-------- C:\WINDOWS\provisioning<PROVIS~1>
2007-03-05 20:08:15 0 d-------- C:\WINDOWS\ServicePackFiles<SERVIC~1>
2007-03-05 19:58:08 0 d-------- C:\WINDOWS\EHome
2007-03-05 19:49:39 11776 -----n--- C:\WINDOWS\system32\spnpinst.exe
2007-03-05 19:49:38 4569 -----n--- C:\WINDOWS\system32\secupd.dat
2007-03-05 19:38:04 0 d---s---- C:\Documents and Settings\Propriétaire\UserData
2007-03-05 19:34:15 5248 --a------ C:\WINDOWS\system32\drivers\d347prt.sys
2007-03-05 19:34:15 155136 --a------ C:\WINDOWS\system32\drivers\d347bus.sys
2007-03-05 19:34:12 0 d-------- C:\Program Files\D-Tools
2007-03-05 19:33:57 0 d-------- C:\WINDOWS\Downloaded Installations<DOWNLO~2>
2007-03-05 19:18:25 57344 -ra------ C:\WINDOWS\system32\HPZisn12.dll
2007-03-05 19:18:25 94208 -ra------ C:\WINDOWS\system32\HPZipt12.dll
2007-03-05 19:18:25 61699 -ra------ C:\WINDOWS\system32\HPZinw12.exe
2007-03-05 19:18:24 196608 -ra------ C:\WINDOWS\system32\HPZipr12.dll
2007-03-05 19:18:24 65795 -ra------ C:\WINDOWS\system32\HPZipm12.exe
2007-03-05 19:18:24 266296 -ra------ C:\WINDOWS\system32\HPZidr12.dll
2007-03-05 19:18:24 16496 -ra------ C:\WINDOWS\system32\drivers\HPZipr12.sys
2007-03-05 19:18:20 51056 -ra------ C:\WINDOWS\system32\drivers\hpzid412.sys
2007-03-05 19:17:33 262144 -ra------ C:\WINDOWS\system32\HPZc3212.dll
2007-03-05 19:17:33 21488 -ra------ C:\WINDOWS\system32\drivers\HPZius12.sys
2007-03-05 19:17:29 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-03-05 19:16:33 483328 -ra------ C:\WINDOWS\system32\hphmon05.exe
2007-03-05 19:16:22 6353 -ra------ C:\WINDOWS\system32\hphmon05.dat
2007-03-05 19:12:10 4308 -----n--- C:\WINDOWS\hphmdl01.dat
2007-03-05 19:12:10 17325 --a------ C:\WINDOWS\HPHins01.dat
2007-03-05 19:10:50 0 d-------- C:\WINDOWS\system32\NtmsData
2007-03-05 18:57:32 82380 --a------ C:\WINDOWS\system32\drivers\AFS2K.SYS
2007-03-05 18:53:32 0 d-------- C:\Program Files\Hewlett-Packard<HEWLET~1>
2007-03-05 18:09:28 1168 --a------ C:\WINDOWS\mozver.dat
2007-03-04 13:27:32 332800 --a------ C:\WINDOWS\system32\ipnathlp.dll
2007-03-04 13:27:31 614912 --a------ C:\WINDOWS\system32\h323msp.dll
2007-03-04 13:16:41 0 d-------- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage<WINDOW~1>
2007-03-04 13:16:00 262144 --a------ C:\Documents and Settings\All Users\ntuser.dat
2007-03-04 12:03:57 1097728 --a------ C:\WINDOWS\system32\esent.dll
2007-03-04 11:50:01 0 d-------- C:\WINDOWS\system32\bits
2007-03-04 11:48:51 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1>
2007-03-04 11:48:48 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-03-04 11:48:46 0 d--h----- C:\WINDOWS\$hf_mig$
2007-03-03 14:55:15 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe
2007-03-03 14:55:15 129784 -----n--- C:\WINDOWS\system32\pxafs.dll
2007-03-03 14:55:15 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-03-03 14:55:15 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-03-03 14:55:15 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-03-03 14:54:09 0 d-------- C:\Program Files\Winamp
2007-03-03 14:08:24 351232 --a------ C:\WINDOWS\system32\winhttp.dll
2007-03-03 14:08:24 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-03-03 14:08:24 7168 -----n--- C:\WINDOWS\system32\bitsprx3.dll
2007-03-03 14:08:24 8192 -----n--- C:\WINDOWS\system32\bitsprx2.dll
2007-03-03 14:06:18 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-03-03 14:02:28 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1>
2007-03-03 14:01:18 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-03-03 14:01:13 173536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-03-03 14:01:13 41240 --a------ C:\WINDOWS\system32\wups.dll
2007-03-03 14:01:13 128792 --a------ C:\WINDOWS\system32\wucltui.dll
2007-03-03 14:01:13 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-03-03 14:01:13 175896 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-03-03 14:01:13 467224 --a------ C:\WINDOWS\system32\wuapi.dll
2007-03-03 13:58:04 0 d-------- C:\Documents and Settings\Propriétaire\Gadu-Gadu<GADU-G~1>
2007-03-03 13:49:03 12288 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2007-03-03 13:49:03 23680 --a------ C:\WINDOWS\system32\drivers\mouclass.sys
2007-03-03 13:48:57 54400 --a------ C:\WINDOWS\system32\drivers\i8042prt.sys
2007-03-03 13:48:41 0 d-------- C:\Program Files\Microsoft IntelliPoint<MICROS~3>
2007-03-03 13:48:07 14848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys
2007-03-03 13:48:07 25216 --a------ C:\WINDOWS\system32\drivers\kbdclass.sys
2007-03-03 13:47:54 21504 --a------ C:\WINDOWS\system32\hidserv.dll
2007-03-03 13:47:49 0 d-------- C:\Program Files\Microsoft IntelliType Pro<MICROS~2>
2007-03-03 13:47:45 9600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2007-03-03 13:47:41 31616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2007-03-03 11:33:26 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\Opera
2007-03-03 11:33:16 0 d-------- C:\Program Files\Opera
2007-03-03 11:30:11 0 d-------- C:\Program Files\a-squared HiJackFree<A-SQUA~1>
2007-03-03 11:19:21 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\Lavasoft
2007-03-03 11:18:45 0 d-------- C:\Program Files\Lavasoft
2007-03-03 11:08:42 4212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2007-03-03 11:08:10 0 d-------- C:\WINDOWS\system32\ZoneLabs
2007-03-03 11:07:31 0 d-------- C:\WINDOWS\Internet Logs<INTERN~1>
2007-03-03 11:02:27 0 d-------- C:\Program Files\Kaspersky Lab<KASPER~1>
2007-03-03 11:02:27 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab<KASPER~1>
2007-03-03 11:02:26 383776 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-03-03 11:02:26 5229088 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-03-03 10:54:32 0 d-------- C:\Documents and Settings\All Users\Application Data\Adobe
2007-03-03 10:52:17 0 d-------- C:\WINDOWS\Cache
2007-03-03 10:51:17 1010 --a------ C:\tmpFile.dat
2007-03-03 10:51:15 0 d-------- C:\Documentation en ligne<DOCUME~2>
2007-03-03 10:50:53 204800 --a------ C:\WINDOWS\system32\IVIresizeW7.dll<IV828C~1.DLL>
2007-03-03 10:50:53 188416 --a------ C:\WINDOWS\system32\IVIresizePX.dll<IV760B~1.DLL>
2007-03-03 10:50:53 192512 --a------ C:\WINDOWS\system32\IVIresizeP6.dll<IVIRES~4.DLL>
2007-03-03 10:50:53 192512 --a------ C:\WINDOWS\system32\IVIresizeM6.dll<IVIRES~3.DLL>
2007-03-03 10:50:53 200704 --a------ C:\WINDOWS\system32\IVIresizeA6.dll<IVIRES~2.DLL>
2007-03-03 10:50:53 20480 --a------ C:\WINDOWS\system32\IVIresize.dll<IVIRES~1.DLL>
2007-03-03 10:50:50 0 d-------- C:\Program Files\InterVideo<INTERV~1>
2007-03-03 10:49:52 0 d-------- C:\$CTJTMP
2007-03-03 10:48:01 53248 -----n--- C:\WINDOWS\system32\vbalicom6.dll<VBALIC~1.DLL>
2007-03-03 10:48:01 32768 -----n--- C:\WINDOWS\system32\ssubtmr6.dll
2007-03-03 10:48:01 1392671 --a------ C:\WINDOWS\system32\msvbvm60.dll
2007-03-03 10:48:01 0 d-------- C:\SigmaTel
2007-03-03 10:48:01 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-03-03 10:47:57 32768 -ra------ C:\WINDOWS\system32\drivers\sisnic.sys
2007-03-03 10:47:54 0 d-------- C:\Program Files\Fichiers communs\InstallShield<INSTAL~1>
2007-03-03 10:47:52 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-03-03 10:47:50 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-03-03 10:47:50 52864 --a------ C:\WINDOWS\system32\drivers\dmusic.sys
2007-03-03 10:47:49 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-03-03 10:47:48 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-03-03 10:47:47 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-03-03 10:47:46 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-03-03 10:47:45 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-03-03 10:47:28 192512 -ra------ C:\WINDOWS\system32\stac97co.dll
2007-03-03 10:47:28 262096 -ra------ C:\WINDOWS\system32\drivers\STAC97.sys
2007-03-03 10:47:28 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-03-03 10:47:28 0 d-------- C:\Program Files\Sigmatel
2007-03-03 10:47:10 155648 -ra------ C:\WINDOWS\system32\nvwrszht.dll
2007-03-03 10:47:10 151552 -ra------ C:\WINDOWS\system32\nvwrszhc.dll
2007-03-03 10:47:10 278528 -ra------ C:\WINDOWS\system32\nvwrstr.dll
2007-03-03 10:47:10 110592 -ra------ C:\WINDOWS\system32\nvrszht.dll
2007-03-03 10:47:10 200704 -ra------ C:\WINDOWS\system32\nvrszhc.dll
2007-03-03 10:47:10 225280 -ra------ C:\WINDOWS\system32\nvrstr.dll
2007-03-03 10:47:09 274432 -ra------ C:\WINDOWS\system32\nvwrssv.dll
2007-03-03 10:47:09 278528 -ra------ C:\WINDOWS\system32\nvwrssl.dll
2007-03-03 10:47:09 274432 -ra------ C:\WINDOWS\system32\nvwrssk.dll
2007-03-03 10:47:09 290816 -ra------ C:\WINDOWS\system32\nvwrsru.dll
2007-03-03 10:47:09 225280 -ra------ C:\WINDOWS\system32\nvrssv.dll
2007-03-03 10:47:09 225280 -ra------ C:\WINDOWS\system32\nvrssl.dll
2007-03-03 10:47:09 225280 -ra------ C:\WINDOWS\system32\nvrssk.dll
2007-03-03 10:47:08 294912 -ra------ C:\WINDOWS\system32\nvwrsptb.dll
2007-03-03 10:47:08 299008 -ra------ C:\WINDOWS\system32\nvwrspt.dll
2007-03-03 10:47:08 274432 -ra------ C:\WINDOWS\system32\nvwrspl.dll
2007-03-03 10:47:08 237568 -ra------ C:\WINDOWS\system32\nvrsru.dll
2007-03-03 10:47:08 237568 -ra------ C:\WINDOWS\system32\nvrsptb.dll
2007-03-03 10:47:08 237568 -ra------ C:\WINDOWS\system32\nvrspt.dll
2007-03-03 10:47:08 225280 -ra------ C:\WINDOWS\system32\nvrspl.dll
2007-03-03 10:47:07 274432 -ra------ C:\WINDOWS\system32\nvwrsno.dll
2007-03-03 10:47:07 294912 -ra------ C:\WINDOWS\system32\nvwrsnl.dll
2007-03-03 10:47:07 184320 -ra------ C:\WINDOWS\system32\nvwrsko.dll
2007-03-03 10:47:07 225280 -ra------ C:\WINDOWS\system32\nvrsno.dll
2007-03-03 10:47:07 241664 -ra------ C:\WINDOWS\system32\nvrsnl.dll
2007-03-03 10:47:07 233472 -ra------ C:\WINDOWS\system32\nvrsko.dll
2007-03-03 10:47:06 196608 -ra------ C:\WINDOWS\system32\nvwrsja.dll
2007-03-03 10:47:06 299008 -ra------ C:\WINDOWS\system32\nvwrsit.dll
2007-03-03 10:47:06 290816 -ra------ C:\WINDOWS\system32\nvwrshu.dll
2007-03-03 10:47:06 237568 -ra------ C:\WINDOWS\system32\nvrsja.dll
2007-03-03 10:47:06 249856 -ra------ C:\WINDOWS\system32\nvrsit.dll
2007-03-03 10:47:06 225280 -ra------ C:\WINDOWS\system32\nvrshu.dll
2007-03-03 10:47:05 258048 -ra------ C:\WINDOWS\system32\nvwrshe.dll
2007-03-03 10:47:05 299008 -ra------ C:\WINDOWS\system32\nvwrsfr.dll
2007-03-03 10:47:05 278528 -ra------ C:\WINDOWS\system32\nvwrsfi.dll
2007-03-03 10:47:05 303104 -ra------ C:\WINDOWS\system32\nvwrsesm.dll
2007-03-03 10:47:05 282624 -ra------ C:\WINDOWS\system32\nvrshe.dll
2007-03-03 10:47:05 249856 -ra------ C:\WINDOWS\system32\nvrsfr.dll
2007-03-03 10:47:05 217088 -ra------ C:\WINDOWS\system32\nvrsfi.dll
2007-03-03 10:47:04 311296 -ra------ C:\WINDOWS\system32\nvwrses.dll
2007-03-03 10:47:04 262144 -ra------ C:\WINDOWS\system32\nvwrseng.dll
2007-03-03 10:47:04 311296 -ra------ C:\WINDOWS\system32\nvwrsel.dll
2007-03-03 10:47:04 241664 -ra------ C:\WINDOWS\system32\nvrsesm.dll
2007-03-03 10:47:04 249856 -ra------ C:\WINDOWS\system32\nvrses.dll
2007-03-03 10:47:04 217088 -ra------ C:\WINDOWS\system32\nvrseng.dll
2007-03-03 10:47:04 249856 -ra------ C:\WINDOWS\system32\nvrsel.dll
2007-03-03 10:47:03 282624 -ra------ C:\WINDOWS\system32\nvwrsde.dll
2007-03-03 10:47:03 274432 -ra------ C:\WINDOWS\system32\nvwrsda.dll
2007-03-03 10:47:03 262144 -ra------ C:\WINDOWS\system32\nvwrscs.dll
2007-03-03 10:47:03 245760 -ra------ C:\WINDOWS\system32\nvrsde.dll
2007-03-03 10:47:03 225280 -ra------ C:\WINDOWS\system32\nvrsda.dll
2007-03-03 10:47:03 217088 -ra------ C:\WINDOWS\system32\nvrscs.dll
2007-03-03 10:47:02 917504 -ra------ C:\WINDOWS\system32\nwiz.exe
2007-03-03 10:47:02 258048 -ra------ C:\WINDOWS\system32\nvwrsar.dll
2007-03-03 10:47:02 1019904 -ra------ C:\WINDOWS\system32\nvwimg.dll
2007-03-03 10:47:02 1646592 -ra------ C:\WINDOWS\system32\nvwdmcpl.dll
2007-03-03 10:47:02 462848 -ra------ C:\WINDOWS\system32\nvshell.dll
2007-03-03 10:47:02 290816 -ra------ C:\WINDOWS\system32\nvrsar.dll
2007-03-03 10:47:02 1437696 -ra------ C:\WINDOWS\system32\nview.dll
2007-03-03 10:47:01 172032 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-03-03 10:47:01 1339392 -ra------ C:\WINDOWS\system32\nvdspsch.exe
2007-03-03 10:47:01 442368 -ra------ C:\WINDOWS\system32\nvappbar.exe
2007-03-03 10:47:01 352256 -ra------ C:\WINDOWS\system32\keystone.exe
2007-03-03 10:47:01 0 d-------- C:\WINDOWS\nview
2007-03-03 10:47:00 81920 -ra------ C:\WINDOWS\system32\nvwddi.dll
2007-03-03 10:47:00 266240 -ra------ C:\WINDOWS\system32\nvnt4cpl.dll
2007-03-03 10:47:00 86016 -ra------ C:\WINDOWS\system32\nvmctray.dll
2007-03-03 10:46:59 5193728 -ra------ C:\WINDOWS\system32\nvoglnt.dll
2007-03-03 10:46:59 4493312 -ra------ C:\WINDOWS\system32\nvcpl.dll
2007-03-03 10:46:58 114755 -ra------ C:\WINDOWS\system32\nvsvc32.exe
2007-03-03 10:46:58 32256 -ra------ C:\WINDOWS\system32\nvcodins.dll
2007-03-03 10:46:58 32256 -ra------ C:\WINDOWS\system32\nvcod.dll
2007-03-03 10:46:58 3772032 -ra------ C:\WINDOWS\system32\nv4_disp.dll
2007-03-03 10:46:58 2627328 -ra------ C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-03-03 10:46:57 40320 -ra------ C:\WINDOWS\system32\drivers\intelppm.sys
2007-03-03 10:46:45 0 d-------- C:\WINDOWS\system32\ReinstallBackups<REINST~1>
2007-03-03 10:46:45 36992 -ra------ C:\WINDOWS\system32\drivers\SISAGPX.SYS
2007-03-03 10:46:11 518 --a------ C:\pnpID.dat
2007-03-03 10:45:01 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2>
2007-03-03 10:44:38 51200 --a------ C:\WINDOWS\system32\wstdecod.dll
2007-03-03 10:44:38 363520 --a------ C:\WINDOWS\system32\psisdecd.dll
2007-03-03 10:44:38 19328 --a------ C:\WINDOWS\system32\drivers\wstcodec.sys
2007-03-03 10:44:38 15360 --a------ C:\WINDOWS\system32\drivers\streamip.sys
2007-03-03 10:44:38 11136 --a------ C:\WINDOWS\system32\drivers\slip.sys
2007-03-03 10:44:38 10880 --a------ C:\WINDOWS\system32\drivers\ndisip.sys
2007-03-03 10:44:37 733696 --a------ C:\WINDOWS\system32\qedwipes.dll
2007-03-03 10:44:37 563200 --a------ C:\WINDOWS\system32\qedit.dll
2007-03-03 10:44:37 17408 --a------ C:\WINDOWS\system32\msyuv.dll
2007-03-03 10:44:37 204800 --a------ C:\WINDOWS\system32\mswebdvd.dll
2007-03-03 10:44:37 1433600 --a------ C:\WINDOWS\system32\msvidctl.dll
2007-03-03 10:44:37 14336 --a------ C:\WINDOWS\system32\msdmo.dll
2007-03-03 10:44:37 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-03-03 10:44:37 4352 --a------ C:\WINDOWS\system32\drivers\swenum.sys
2007-03-03 10:44:37 48640 --a------ C:\WINDOWS\system32\drivers\stream.sys
2007-03-03 10:44:37 85376 --a------ C:\WINDOWS\system32\drivers\nabtsfec.sys
2007-03-03 10:44:37 5504 --a------ C:\WINDOWS\system32\drivers\mstee.sys
2007-03-03 10:44:37 4992 --a------ C:\WINDOWS\system32\drivers\mspqm.sys
2007-03-03 10:44:37 5376 --a------ C:\WINDOWS\system32\drivers\mspclock.sys
2007-03-03 10:44:37 7552 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys
2007-03-03 10:44:37 51328 --a------ C:\WINDOWS\system32\drivers\msdv.sys
2007-03-03 10:44:37 15360 --a------ C:\WINDOWS\system32\drivers\mpe.sys
2007-03-03 10:44:37 140928 --a------ C:\WINDOWS\system32\drivers\ks.sys
2007-03-03 10:44:37 17024 --a------ C:\WINDOWS\system32\drivers\ccdecode.sys
2007-03-03 10:44:37 11776 --a------ C:\WINDOWS\system32\drivers\bdasup.sys
2007-03-03 10:44:36 1293312 --a------ C:\WINDOWS\system32\quartz.dll
2007-03-03 10:44:36 386048 --a------ C:\WINDOWS\system32\qdvd.dll
2007-03-03 10:44:36 279040 --a------ C:\WINDOWS\system32\qdv.dll
2007-03-03 10:44:36 192512 --a------ C:\WINDOWS\system32\qcap.dll
2007-03-03 10:44:36 35328 --a------ C:\WINDOWS\system32\mciqtz32.dll
2007-03-03 10:44:36 20480 --a------ C:\WINDOWS\system32\encapi.dll
2007-03-03 10:44:36 19456 --a------ C:\WINDOWS\system32\dswave.dll
2007-03-03 10:44:36 104448 --a------ C:\WINDOWS\system32\dmusic.dll
2007-03-03 10:44:36 103424 --a------ C:\WINDOWS\system32\dmsynth.dll
2007-03-03 10:44:36 105984 --a------ C:\WINDOWS\system32\dmstyle.dll
2007-03-03 10:44:36 35840 --a------ C:\WINDOWS\system32\dmloader.dll
2007-03-03 10:44:36 181248 --a------ C:\WINDOWS\system32\dmime.dll
2007-03-03 10:44:36 61440 --a------ C:\WINDOWS\system32\dmcompos.dll
2007-03-03 10:44:36 28672 --a------ C:\WINDOWS\system32\dmband.dll
2007-03-03 10:44:36 59904 --a------ C:\WINDOWS\system32\devenum.dll
2007-03-03 10:44:36 70656 --a------ C:\WINDOWS\system32\amstream.dll
2007-03-03 10:44:35 44544 --a------ C:\WINDOWS\system32\dxdllreg.exe
2007-03-03 10:44:35 2113536 --a------ C:\WINDOWS\system32\dxdiagn.dll
2007-03-03 10:44:35 1298432 --a------ C:\WINDOWS\system32\dxdiag.exe
2007-03-03 10:44:35 1227264 --a------ C:\WINDOWS\system32\dx8vb.dll
2007-03-03 10:44:35 619008 --a------ C:\WINDOWS\system32\dx7vb.dll
2007-03-03 10:44:35 1294336 --a------ C:\WINDOWS\system32\dsound3d.dll
2007-03-03 10:44:35 367616 --a------ C:\WINDOWS\system32\dsound.dll
2007-03-03 10:44:35 72192 --a------ C:\WINDOWS\system32\dsdmoprp.dll
2007-03-03 10:44:35 181760 --a------ C:\WINDOWS\system32\dsdmo.dll
2007-03-03 10:44:35 57856 --a------ C:\WINDOWS\system32\dpwsockx.dll
2007-03-03 10:44:35 116736 --a------ C:\WINDOWS\system32\dpvvox.dll
2007-03-03 10:44:35 83456 --a------ C:\WINDOWS\system32\dpvsetup.exe
2007-03-03 10:44:35 213504 --a------ C:\WINDOWS\system32\dpvoice.dll
2007-03-03 10:44:35 21504 --a------ C:\WINDOWS\system32\dpvacm.dll
2007-03-03 10:44:35 18432 --a------ C:\WINDOWS\system32\dpnsvr.exe
2007-03-03 10:44:35 3584 --a------ C:\WINDOWS\system32\dpnlobby.dll
2007-03-03 10:44:35 60928 --a------ C:\WINDOWS\system32\dpnhupnp.dll
2007-03-03 10:44:35 35328 --a------ C:\WINDOWS\system32\dpnhpast.dll
2007-03-03 10:44:35 375296 --a------ C:\WINDOWS\system32\dpnet.dll
2007-03-03 10:44:35 3584 --a------ C:\WINDOWS\system32\dpnaddr.dll
2007-03-03 10:44:35 24064 --a------ C:\WINDOWS\system32\dpmodemx.dll
2007-03-03 10:44:35 229888 --a------ C:\WINDOWS\system32\dplayx.dll
2007-03-03 10:44:35 30208 --a------ C:\WINDOWS\system32\dplaysvr.exe
2007-03-03 10:44:35 82432 --a------ C:\WINDOWS\system32\dmscript.dll
2007-03-03 10:44:35 27136 --a------ C:\WINDOWS\system32\ddrawex.dll
2007-03-03 10:44:35 266240 --a------ C:\WINDOWS\system32\ddraw.dll
2007-03-03 10:44:35 825344 --a------ C:\WINDOWS\system32\d3dim700.dll
2007-03-03 10:44:35 1689088 --a------ C:\WINDOWS\system32\d3d9.dll
2007-03-03 10:44:35 8192 --a------ C:\WINDOWS\system32\d3d8thk.dll
2007-03-03 10:44:35 1179648 --a------ C:\WINDOWS\system32\d3d8.dll
2007-03-02 19:15:33 41984 --a------ C:\WINDOWS\system32\osuninst.exe
2007-03-02 19:15:32 18944 --a------ C:\WINDOWS\vmmreg32.dll
2007-03-02 19:15:32 18176 --a------ C:\WINDOWS\system32\vga64k.dll
2007-03-02 19:15:32 51456 --a------ C:\WINDOWS\system32\vga256.dll
2007-03-02 19:15:32 209408 --a------ C:\WINDOWS\system32\drivers\update.sys
2007-03-02 19:15:23 15360 --a------ C:\WINDOWS\system32\pentnt.exe
2007-03-02 19:15:23 20511 --a------ C:\WINDOWS\system32\odtext32.dll
2007-03-02 19:15:23 20510 --a------ C:\WINDOWS\system32\odpdx32.dll
2007-03-02 19:15:23 20510 --a------ C:\WINDOWS\system32\odfox32.dll
2007-03-02 19:15:23 20510 --a------ C:\WINDOWS\system32\odexl32.dll
2007-03-02 19:15:23 20511 --a------ C:\WINDOWS\system32\oddbse32.dll
2007-03-02 19:15:20 348189 --a------ C:\WINDOWS\system32\msxbde40.dll
2007-03-02 19:15:20 253952 --a------ C:\WINDOWS\system32\msvcrt20.dll
2007-03-02 19:15:20 258077 --a------ C:\WINDOWS\system32\mstext40.dll
2007-03-02 19:15:19 552989 --a------ C:\WINDOWS\system32\msrepl40.dll
2007-03-02 19:15:19 28746 --a------ C:\WINDOWS\system32\msrecr40.dll
2007-03-02 19:15:19 421919 --a------ C:\WINDOWS\system32\msrd2x40.dll
2007-03-02 19:15:19 73802 --a------ C:\WINDOWS\system32\msrclr40.dll
2007-03-02 19:15:19 7168 --a------ C:\WINDOWS\system32\msr2cenu.dll
2007-03-02 19:15:19 69632 --a------ C:\WINDOWS\system32\msr2c.dll
2007-03-02 19:15:19 348189 --a------ C:\WINDOWS\system32\mspbde40.dll
2007-03-02 19:15:19 213023 --a------ C:\WINDOWS\system32\msltus40.dll
2007-03-02 19:15:19 319517 --a------ C:\WINDOWS\system32\msexcl40.dll
2007-03-02 19:15:19 512029 --a------ C:\WINDOWS\system32\msexch40.dll
2007-03-02 19:15:18 52736 --a------ C:\WINDOWS\system32\migpwd.exe
2007-03-02 19:15:18 26624 --a------ C:\WINDOWS\system32\lnkstub.exe
2007-03-02 19:15:18 4224 --a------ C:\WINDOWS\system32\drivers\mnmdd.sys
2007-03-02 19:15:16 92608 --a------ C:\WINDOWS\system32\krnl386.exe
2007-03-02 19:15:15 24576 --a------ C:\WINDOWS\system32\dbmsvinn.dLL
2007-03-02 19:15:15 590336 --a------ C:\WINDOWS\system32\d3dramp.dll
2007-03-02 19:15:15 27136 --a------ C:\WINDOWS\system32\ctl3d32.dll
2007-03-02 19:15:12 60928 --a------ C:\WINDOWS\system32\wmerrFRA.dll
2007-03-02 19:15:12 322810 --a------ C:\WINDOWS\system32\perfi00C.dat
2007-03-02 19:15:12 445016 --a------ C:\WINDOWS\system32\perfh00C.dat
2007-03-02 19:15:12 34108 --a------ C:\WINDOWS\system32\perfd00C.dat
2007-03-02 19:15:12 63614 --a------ C:\WINDOWS\system32\perfc00C.dat
2007-03-02 19:15:12 57344 --a------ C:\WINDOWS\system32\mfc42loc.dll
2007-03-02 19:15:12 45568 --a------ C:\WINDOWS\system32\mfc40loc.dll
2007-03-02 19:15:11 57392 --a------ C:\WINDOWS\system32\wshfr.dll
2007-03-02 19:15:11 24624 --a------ C:\WINDOWS\system32\vbsfr.dll
2007-03-02 19:15:11 24626 --a------ C:\WINDOWS\system32\scrrnfr.dll
2007-03-02 19:15:11 24624 --a------ C:\WINDOWS\system32\scofr.dll
2007-03-02 19:15:11 28719 --a------ C:\WINDOWS\system32\jsfr.dll
2007-03-02 19:15:07 197632 --a------ C:\WINDOWS\system32\xpsp1res.dll
2007-03-02 19:15:06 71102 --a------ C:\WINDOWS\system32\edit.com
2007-03-02 19:15:01 195584 --a------ C:\WINDOWS\system32\msutb.dll
2007-03-02 19:15:01 25600 --a------ C:\WINDOWS\system32\mslbui.dll
2007-03-02 19:15:01 159232 --a------ C:\WINDOWS\system32\msimtf.dll
2007-03-02 19:15:01 69120 --a------ C:\WINDOWS\system32\msctfp.dll
2007-03-02 19:15:01 15360 --a------ C:\WINDOWS\system32\ctfmon.exe
2007-03-02 19:15:00 294400 --a------ C:\WINDOWS\system32\msctf.dll
2007-03-02 19:14:48 177784 --a------ C:\WINDOWS\system32\xenroll.dll
2007-03-02 19:14:48 30720 --a------ C:\WINDOWS\system32\xcopy.exe
2007-03-02 19:14:48 91648 --a------ C:\WINDOWS\system32\xactsrv.dll
2007-03-02 19:14:47 378880 --a------ C:\WINDOWS\system32\wzcdlg.dll
2007-03-02 19:14:47 32256 --a------ C:\WINDOWS\system32\wupdmgr.exe
2007-03-02 19:14:47 18432 --a------ C:\WINDOWS\system32\wtsapi32.dll
2007-03-02 19:14:47 25088 --a------ C:\WINDOWS\system32\wsock32.dll
2007-03-02 19:14:47 42496 --a------ C:\WINDOWS\system32\wsnmp32.dll
2007-03-02 19:14:47 19968 --a------ C:\WINDOWS\system32\wshtcpip.dll
2007-03-02 19:14:47 11776 --a------ C:\WINDOWS\system32\wshrm.dll
2007-03-02 19:14:47 7168 --a------ C:\WINDOWS\system32\wshnetbs.dll
2007-03-02 19:14:47 11776 --a------ C:\WINDOWS\system32\wshisn.dll
2007-03-02 19:14:47 65536 --a------ C:\WINDOWS\system32\wshext.dll
2007-03-02 19:14:47 28672 --a------ C:\WINDOWS\system32\wshcon.dll
2007-03-02 19:14:47 9216 --a------ C:\WINDOWS\system32\wshatm.dll
2007-03-02 19:14:47 114688 --a------ C:\WINDOWS\system32\wscript.exe
2007-03-02 19:14:47 19968 --a------ C:\WINDOWS\system32\ws2help.dll
2007-03-02 19:14:47 32768 --a------ C:\WINDOWS\system32\wpnpinst.exe
2007-03-02 19:14:47 32256 --a------ C:\WINDOWS\system32\wpabaln.exe
2007-03-02 19:14:47 10608 --a------ C:\WINDOWS\system32\wowexec.exe
2007-03-02 19:14:47 12032 --a------ C:\WINDOWS\system32\drivers\ws2ifsl.sys
2007-03-02 19:14:46 2736 --a------ C:\WINDOWS\system32\wowdeb.exe
2007-03-02 19:14:46 265216 --a------ C:\WINDOWS\system32\wow32.dll
2007-03-02 19:14:46 446464 --a------ C:\WINDOWS\system32\wmvdmoe.dll
2007-03-02 19:14:46 1677312 --a------ C:\WINDOWS\system32\wmvcore2.dll
2007-03-02 19:14:45 311327 --a------ C:\WINDOWS\system32\wmv8dmod.dll
2007-03-02 19:14:45 303616 --a------ C:\WINDOWS\system32\wmstream.dll
2007-03-02 19:14:45 115200 --a------ C:\WINDOWS\system32\wmsdmoe.dll
2007-03-02 19:14:45 20480 --a------ C:\WINDOWS\system32\wmpui.dll
2007-03-02 19:14:45 77824 --a------ C:\WINDOWS\system32\wmpstub.exe
2007-03-02 19:14:45 86016 --a------ C:\WINDOWS\system32\wmpshell.dll
2007-03-02 19:14:44 3424256 --a------ C:\WINDOWS\system32\wmploc.dll
2007-03-02 19:14:44 20480 --a------ C:\WINDOWS\system32\wmpcore.dll
2007-03-02 19:14:44 20480 --a------ C:\WINDOWS\system32\wmpcd.dll
2007-03-02 19:14:42 19456 --a------ C:\WINDOWS\system32\wmiprop.dll
2007-03-02 19:14:42 4352 --a------ C:\WINDOWS\system32\drivers\wmilib.sys
2007-03-02 19:14:41 5632 --a------ C:\WINDOWS\system32\wmi.dll
2007-03-02 19:14:41 94208 --a------ C:\WINDOWS\system32\wlnotify.dll
2007-03-02 19:14:41 172544 --a------ C:\WINDOWS\system32\wldap32.dll
2007-03-02 19:14:41 132096 --a------ C:\WINDOWS\system32\wkssvc.dll
2007-03-02 19:14:41 5632 --a------ C:\WINDOWS\system32\winver.exe
2007-03-02 19:14:41 176640 --a------ C:\WINDOWS\system32\wintrust.dll
2007-03-02 19:14:41 21504 --a------ C:\WINDOWS\system32\winstrm.dll
2007-03-02 19:14:41 53760 --a------ C:\WINDOWS\system32\winsta.dll
2007-03-02 19:14:41 292352 --a------ C:\WINDOWS\system32\winsrv.dll
2007-03-02 19:14:41 2112 --a------ C:\WINDOWS\system32\winspool.exe
2007-03-02 19:14:40 2864 --a------ C:\WINDOWS\system32\winsock.dll
2007-03-02 19:14:40 100352 --a------ C:\WINDOWS\system32\winscard.dll
2007-03-02 19:14:40 16896 --a------ C:\WINDOWS\system32\winrnr.dll
2007-03-02 19:14:40 773632 --a------ C:\WINDOWS\system32\winntbbu.dll
2007-03-02 19:14:40 5120 --a------ C:\WINDOWS\system32\winnls.dll
2007-03-02 19:14:40 11776 --a------ C:\WINDOWS\system32\winmsd.exe
2007-03-02 19:14:40 180736 --a------ C:\WINDOWS\system32\winmm.dll
2007-03-02 19:14:40 506368 --a------ C:\WINDOWS\system32\winlogon.exe
2007-03-02 19:14:40 8192 --a------ C:\WINDOWS\system32\winhlp32.exe
2007-03-02 19:14:39 288256 --a------ C:\WINDOWS\winhlp32.exe
2007-03-02 19:14:39 256768 --a------ C:\WINDOWS\winhelp.exe
2007-03-02 19:14:39 9216 --a------ C:\WINDOWS\system32\winfax.dll
2007-03-02 19:14:38 938496 --a------ C:\WINDOWS\system32\winbrand.dll
2007-03-02 19:14:38 13312 --a------ C:\WINDOWS\system32\win87em.dll
2007-03-02 19:14:38 102400 --a------ C:\WINDOWS\system32\win32spl.dll
2007-03-02 19:14:38 1839616 --a------ C:\WINDOWS\system32\win32k.sys
2007-03-02 19:14:38 18432 --a------ C:\WINDOWS\system32\win.com
2007-03-02 19:14:38 9216 --a------ C:\WINDOWS\system32\wifeman.dll
2007-03-02 19:14:38 145408 --a------ C:\WINDOWS\system32\wiavusd.dll
2007-03-02 19:14:38 111104 --a------ C:\WINDOWS\system32\wiavideo.dll
2007-03-02 19:14:37 594432 --a------ C:\WINDOWS\system32\wiashext.dll
2007-03-02 19:14:37 334336 --a------ C:\WINDOWS\system32\wiaservc.dll
2007-03-02 19:14:37 75776 --a------ C:\WINDOWS\system32\wiascr.dll
2007-03-02 19:14:37 124928 --a------ C:\WINDOWS\system32\wiadss.dll
2007-03-02 19:14:37 465920 --a------ C:\WINDOWS\system32\wiadefui.dll
2007-03-02 19:14:37 438784 --a------ C:\WINDOWS\system32\wiaacmgr.exe
2007-03-02 19:14:37 66560 --a------ C:\WINDOWS\system32\wextract.exe
2007-03-02 19:14:37 136192 --a------ C:\WINDOWS\system32\webvw.dll
2007-03-02 19:14:37 40960 --a------ C:\WINDOWS\system32\webhits.dll
2007-03-02 19:14:36 281600 --a------ C:\WINDOWS\system32\webcheck.dll
2007-03-02 19:14:36 49152 --a------ C:\WINDOWS\system32\wdigest.dll
2007-03-02 19:14:33 208896 --a------ C:\WINDOWS\system32\wavemsp.dll
2007-03-02 19:14:33 17664 --a------ C:\WINDOWS\system32\watchdog.sys
2007-03-02 19:14:33 34560 --a------ C:\WINDOWS\system32\drivers\wanarp.sys
2007-03-02 19:14:32 22016 --a------ C:\WINDOWS\system32\w32topl.dll
2007-03-02 19:14:32 51712 --a------ C:\WINDOWS\system32\w32tm.exe
2007-03-02 19:14:32 177664 --a------ C:\WINDOWS\system32\w32time.dll
2007-03-02 19:14:32 295424 --a------ C:\WINDOWS\system32\vssvc.exe
2007-03-02 19:14:32 430592 --a------ C:\WINDOWS\system32\vssapi.dll
2007-03-02 19:14:32 34304 --a------ C:\WINDOWS\system32\vssadmin.exe
2007-03-02 19:14:32 16896 --a------ C:\WINDOWS\system32\vss_ps.dll
2007-03-02 19:14:32 4608 --a------ C:\WINDOWS\system32\vjoy.dll
2007-03-02 19:14:32 53376 --a------ C:\WINDOWS\system32\drivers\volsnap.sys
2007-03-02 19:14:32 79744 --a------ C:\WINDOWS\system32\drivers\videoprt.sys
2007-03-02 19:14:31 9344 --a------ C:\WINDOWS\system32\vga.dll
2007-03-02 19:14:31 20535 --a------ C:\WINDOWS\system32\vfpodbc.dll
2007-03-02 19:14:31 18944 --a------ C:\WINDOWS\system32\version.dll
2007-03-02 19:14:31 102912 --a------ C:\WINDOWS\system32\verifier.exe
2007-03-02 19:14:31 13312 --a------ C:\WINDOWS\system32\verifier.dll
2007-03-02 19:14:31 9104 --a------ C:\WINDOWS\system32\ver.dll
2007-03-02 19:14:31 51712 --a------ C:\WINDOWS\system32\vdmredir.dll
2007-03-02 19:14:31 26112 --a------ C:\WINDOWS\system32\vdmdbg.dll
2007-03-02 19:14:31 7680 --a------ C:\WINDOWS\system32\vcdex.dll
2007-03-02 19:14:31 417792 --a------ C:\WINDOWS\system32\vbscript.dll
2007-03-02 19:14:31 30749 --a------ C:\WINDOWS\system32\vbajet32.dll
2007-03-02 19:14:31 219648 --a------ C:\WINDOWS\system32\uxtheme.dll
2007-03-02 19:14:31 20992 --a------ C:\WINDOWS\system32\drivers\vga.sys
2007-03-02 19:14:30 50176 --a------ C:\WINDOWS\system32\utilman.exe
2007-03-02 19:14:30 26112 --a------ C:\WINDOWS\system32\utildll.dll
2007-03-02 19:14:30 406528 --a------ C:\WINDOWS\system32\usp10.dll
2007-03-02 19:14:30 25088 --a------ C:\WINDOWS\system32\userinit.exe
2007-03-02 19:14:30 731136 --a------ C:\WINDOWS\system32\userenv.dll
2007-03-02 19:14:30 578048 --a------ C:\WINDOWS\system32\user32.dll
2007-03-02 19:14:30 47872 --a------ C:\WINDOWS\system32\user.exe
2007-03-02 19:14:30 16896 --a------ C:\WINDOWS\system32\usbmon.dll
2007-03-02 19:14:30 12672 --a------ C:\WINDOWS\system32\drivers\usb8023.sys
2007-03-02 19:14:29 37888 --a------ C:\WINDOWS\system32\url.dll
2007-03-02 19:14:29 17920 --a------ C:\WINDOWS\system32\ureg.dll
2007-03-02 19:14:29 18432 --a------ C:\WINDOWS\system32\ups.exe
2007-03-02 19:14:29 240128 --a------ C:\WINDOWS\system32\upnpui.dll
2007-03-02 19:14:29 185344 --a------ C:\WINDOWS\system32\upnphost.dll
2007-03-02 19:14:29 16896 --a------ C:\WINDOWS\system32\upnpcont.exe
2007-03-02 19:14:29 132608 --a------ C:\WINDOWS\system32\upnp.dll
2007-03-02 19:14:29 316416 --a------ C:\WINDOWS\system32\untfs.dll
2007-03-02 19:14:29 4096 --a------ C:\WINDOWS\system32\unlodctr.exe
2007-03-02 19:14:29 13824 --a------ C:\WINDOWS\system32\uniplat.dll
2007-03-02 19:14:29 78848 --a------ C:\WINDOWS\system32\unimdmat.dll
2007-03-02 19:14:28 25600 --a------ C:\WINDOWS\twunk_32.exe
2007-03-02 19:14:28 49680 --a------ C:\WINDOWS\twunk_16.exe
2007-03-02 19:14:28 50688 --a------ C:\WINDOWS\twain_32.dll
2007-03-02 19:14:28 94864 --a------ C:\WINDOWS\twain.dll
2007-03-02 19:14:28 13312 --a------ C:\WINDOWS\system32\umdmxfrm.dll
2007-03-02 19:14:28 36864 --a------ C:\WINDOWS\system32\umandlg.dll
2007-03-02 19:14:28 311808 --a------ C:\WINDOWS\system32\ulib.dll
2007-03-02 19:14:28 82432 --a------ C:\WINDOWS\system32\ufat.dll
2007-03-02 19:14:28 25600 --a------ C:\WINDOWS\system32\udhisapi.dll
2007-03-02 19:14:28 177856 --a------ C:\WINDOWS\system32\typelib.dll
2007-03-02 19:14:28 101376 --a------ C:\WINDOWS\system32\txflog.dll
2007-03-02 19:14:28 68096 --a------ C:\WINDOWS\system32\osuninst.dll
2007-03-02 19:14:28 66176 --a------ C:\WINDOWS\system32\drivers\udfs.sys
2007-03-02 19:14:27 12168 --a------ C:\WINDOWS\system32\tsddd.dll
2007-03-02 19:14:27 15360 --a------ C:\WINDOWS\system32\tsd32.dll
2007-03-02 19:14:26 52224 --a------ C:\WINDOWS\system32\tsappcmp.dll
2007-03-02 19:14:26 90624 --a------ C:\WINDOWS\system32\trkwks.dll
2007-03-02 19:14:26 11264 --a------ C:\WINDOWS\system32\tree.com
2007-03-02 19:14:26 31232 --a------ C:\WINDOWS\system32\traffic.dll
2007-03-02 19:14:26 32256 --a------ C:\WINDOWS\system32\tracert6.exe
2007-03-02 19:14:26 13312 --a------ C:\WINDOWS\system32\tracert.exe
2007-03-02 19:14:26 13888 --a------ C:\WINDOWS\system32\toolhelp.dll
2007-03-02 19:14:25 391168 --a------ C:\WINDOWS\system32\themeui.dll
2007-03-02 19:14:25 17920 --a------ C:\WINDOWS\system32\tftp.exe
2007-03-02 19:14:25 358912 --a------ C:\WINDOWS\system32\termmgr.dll
2007-03-02 19:14:25 78336 --a------ C:\WINDOWS\system32\telnet.exe
2007-03-02 19:14:24 19456 --a------ C:\WINDOWS\system32\tcpsvcs.exe
2007-03-02 19:14:24 47104 --a------ C:\WINDOWS\system32\tcpmonui.dll
2007-03-02 19:14:24 46592 --a------ C:\WINDOWS\system32\tcpmon.dll
2007-03-02 19:14:24 14848 --a------ C:\WINDOWS\system32\tcpmib.dll
2007-03-02 19:14:24 13312 --a------ C:\WINDOWS\system32\tcmsetup.exe
2007-03-02 19:14:24 143360 --a------ C:\WINDOWS\system32\taskmgr.exe
2007-03-02 19:14:24 15872 --a------ C:\WINDOWS\system32\taskman.exe
2007-03-02 19:14:24 87040 --a------ C:\WINDOWS\system32\tapiui.dll
2007-03-02 19:14:24 5632 --a------ C:\WINDOWS\system32\tapiperf.dll
2007-03-02 19:14:24 181760 --a------ C:\WINDOWS\system32\tapi32.dll
2007-03-02 19:14:24 860160 --a------ C:\WINDOWS\system32\tapi3.dll
2007-03-02 19:14:24 19200 --a------ C:\WINDOWS\system32\tapi.dll
2007-03-02 19:14:24 18560 --a------ C:\WINDOWS\system32\drivers\tdi.sys
2007-03-02 19:14:24 225664 --a------ C:\WINDOWS\system32\drivers\tcpip6.sys
2007-03-02 19:14:24 359808 --a------ C:\WINDOWS\system32\drivers\tcpip.sys
2007-03-02 19:14:24 14976 --a------ C:\WINDOWS\system32\drivers\tape.sys
2007-03-02 19:14:23 118272 --a------ C:\WINDOWS\system32\t2embed.dll
2007-03-02 19:14:23 3072 --a------ C:\WINDOWS\system32\systray.exe
2007-03-02 19:14:23 1005056 --a------ C:\WINDOWS\system32\syssetup.dll
2007-03-02 19:14:23 107520 --a------ C:\WINDOWS\system32\sysocmgr.exe
2007-03-02 19:14:23 37888 --a------ C:\WINDOWS\system32\syskey.exe
2007-03-02 19:14:23 15872 --a------ C:\WINDOWS\system32\sysinv.dll
2007-03-02 19:14:23 19216 --a------ C:\WINDOWS\system32\sysedit.exe
2007-03-02 19:14:22 197120 --a------ C:\WINDOWS\system32\syncui.dll
2007-03-02 19:14:22 57856 --a------ C:\WINDOWS\system32\synceng.dll
2007-03-02 19:14:22 51200 --a------ C:\WINDOWS\system32\syncapp.exe
2007-03-02 19:14:22 139264 --a------ C:\WINDOWS\system32\swprv.dll
2007-03-02 19:14:22 6144 --a------ C:\WINDOWS\system32\svcpack.dll
2007-03-02 19:14:22 14336 --a------ C:\WINDOWS\system32\svchost.exe
2007-03-02 19:14:21 9216 --a------ C:\WINDOWS\system32\subst.exe
2007-03-02 19:14:21 246814 --a------ C:\WINDOWS\system32\strmdll.dll
2007-03-02 19:14:21 4208 --a------ C:\WINDOWS\system32\storage.dll
2007-03-02 19:14:21 122368 --a------ C:\WINDOWS\system32\stobject.dll
2007-03-02 19:14:21 14848 --a------ C:\WINDOWS\system32\stimon.exe
2007-03-02 19:14:21 138240 --a------ C:\WINDOWS\system32\sti_ci.dll
2007-03-02 19:14:21 68096 --a------ C:\WINDOWS\system32\sti.dll
2007-03-02 19:14:21 684032 --a------ C:\WINDOWS\system32\sstext3d.scr
2007-03-02 19:14:21 14336 --a------ C:\WINDOWS\system32\ssstars.scr
2007-03-02 19:14:21 610304 --a------ C:\WINDOWS\system32\sspipes.scr
2007-03-02 19:14:21 47104 --a------ C:\WINDOWS\system32\ssmypics.scr
2007-03-02 19:14:20 18944 --a------ C:\WINDOWS\system32\ssmyst.scr
2007-03-02 19:14:20 20992 --a------ C:\WINDOWS\system32\ssmarque.scr
2007-03-02 19:14:20 393216 --a------ C:\WINDOWS\system32\ssflwbox.scr
2007-03-02 19:14:20 71680 --a------ C:\WINDOWS\system32\ssdpsrv.dll
2007-03-02 19:14:20 34816 --a------ C:\WINDOWS\system32\ssdpapi.dll
2007-03-02 19:14:20 19968 --a------ C:\WINDOWS\system32\ssbezier.scr
2007-03-02 19:14:20 708608 --a------ C:\WINDOWS\system32\ss3dfo.scr
2007-03-02 19:14:20 96768 --a------ C:\WINDOWS\system32\srvsvc.dll
2007-03-02 19:14:20 332928 --a------ C:\WINDOWS\system32\drivers\srv.sys
2007-03-02 19:14:19 49179 --a------ C:\WINDOWS\system32\sqlwoa.dll
2007-03-02 19:14:19 24603 --a------ C:\WINDOWS\system32\sqlwid.dll
2007-03-02 19:14:19 180800 --a------ C:\WINDOWS\system32\sqlunirl.dll
2007-03-02 19:14:19 9728 --a------ C:\WINDOWS\system32\sprestrt.exe
2007-03-02 19:14:18 74752 --a------ C:\WINDOWS\system32\spoolss.dll
2007-03-02 19:14:12 25088 --a------ C:\WINDOWS\system32\sort.exe
2007-03-02 19:14:11 5632 --a------ C:\WINDOWS\system32\softpub.dll
2007-03-02 19:14:11 184320 --a------ C:\WINDOWS\system32\snmpsnap.dll
2007-03-02 19:14:11 18944 --a------ C:\WINDOWS\system32\snmpapi.dll
2007-03-02 19:14:11 50688 --a------ C:\WINDOWS\system32\smss.exe
2007-03-02 19:14:11 93184 --a------ C:\WINDOWS\system32\smlogsvc.exe
2007-03-02 19:14:11 370688 --a------ C:\WINDOWS\system32\smlogcfg.dll
2007-03-02 19:14:10 16384 --a------ C:\WINDOWS\system32\slbrccsp.dll
2007-03-02 19:14:10 98304 --a------ C:\WINDOWS\system32\slbiop.dll
2007-03-02 19:14:10 306176 --a------ C:\WINDOWS\system32\slbcsp.dll
2007-03-02 19:14:10 25600 --a------ C:\WINDOWS\system32\slayerxp.dll
2007-03-02 19:14:10 14592 --a------ C:\WINDOWS\system32\drivers\smclib.sys
2007-03-02 19:14:09 26112 --a------ C:\WINDOWS\system32\skeys.exe
2007-03-02 19:14:09 5632 --a------ C:\WINDOWS\system32\skdll.dll
2007-03-02 19:14:09 13824 --a------ C:\WINDOWS\system32\sisbkup.dll
2007-03-02 19:14:09 71168 --a------ C:\WINDOWS\system32\sigverif.exe
2007-03-02 19:14:09 13824 --a------ C:\WINDOWS\system32\sigtab.dll
2007-03-02 19:14:09 20480 --a------ C:\WINDOWS\system32\shutdown.exe
2007-03-02 19:14:09 28160 --a------ C:\WINDOWS\system32\shscrap.dll
2007-03-02 19:14:08 78848 --a------ C:\WINDOWS\system32\shrpubw.exe
2007-03-02 19:14:08 42496 --a------ C:\WINDOWS\system32\shmgrate.exe
2007-03-02 19:14:08 440320 --a------ C:\WINDOWS\system32\shimgvw.dll
2007-03-02 19:14:08 65536 --a------ C:\WINDOWS\system32\shimeng.dll
2007-03-02 19:14:08 68096 --a------ C:\WINDOWS\system32\shgina.dll
2007-03-02 19:14:08 25088 --a------ C:\WINDOWS\system32\shfolder.dll
2007-03-02 19:14:07 5120 --a------ C:\WINDOWS\system32\shell.dll
2007-03-02 19:14:07 572416 --a------ C:\WINDOWS\system32\shdoclc.dll
2007-03-02 19:14:07 882 --a------ C:\WINDOWS\system32\share.exe
2007-03-02 19:14:06 23552 --a------ C:\WINDOWS\system32\sfmapi.dll
2007-03-02 19:14:06 1548288 --a------ C:\WINDOWS\system32\sfcfiles.dll
2007-03-02 19:14:06 142336 --a------ C:\WINDOWS\system32\sfc_os.dll
2007-03-02 19:14:06 10240 --a------ C:\WINDOWS\system32\sfc.exe
2007-03-02 19:14:06 5120 --a------ C:\WINDOWS\system32\sfc.dll
2007-03-02 19:14:06 12067 --a------ C:\WINDOWS\system32\setver.exe
2007-03-02 19:14:06 421376 --a------ C:\WINDOWS\system32\setupdll.dll
2007-03-02 19:14:06 1003520 --a------ C:\WINDOWS\system32\setupapi.dll
2007-03-02 19:14:05 23040 --a------ C:\WINDOWS\system32\setup.exe
2007-03-02 19:14:05 32768 --a------ C:\WINDOWS\system32\sethc.exe
2007-03-02 19:14:05 14848 --a------ C:\WINDOWS\system32\serwvdrv.dll
2007-03-02 19:14:05 14848 --a------ C:\WINDOWS\system32\serialui.dll
2007-03-02 19:14:05 13824 --a------ C:\WINDOWS\system32\senscfg.dll
2007-03-02 19:14:05 6656 --a------ C:\WINDOWS\system32\sensapi.dll
2007-03-02 19:14:05 38912 --a------ C:\WINDOWS\system32\sens.dll
2007-03-02 19:14:05 55296 --a------ C:\WINDOWS\system32\sendmail.dll
2007-03-02 19:14:05 29696 --a------ C:\WINDOWS\system32\sendcmsg.dll
2007-03-02 19:14:05 5632 --a------ C:\WINDOWS\system32\security.dll
2007-03-02 19:14:05 55808 --a------ C:\WINDOWS\system32\secur32.dll
2007-03-02 19:14:05 18944 --a------ C:\WINDOWS\system32\seclogon.dll
2007-03-02 19:14:05 130048 --a------ C:\WINDOWS\system32\sdpblb.dll
2007-03-02 19:14:05 27440 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
2007-03-02 19:14:04 78848 --a------ C:\WINDOWS\system32\sdbinst.exe
2007-03-02 19:14:04 151552 --a------ C:\WINDOWS\system32\scrrun.dll
2007-03-02 19:14:04 159744 --a------ C:\WINDOWS\system32\scrobj.dll
2007-03-02 19:14:04 9216 --a------ C:\WINDOWS\system32\scrnsave.scr
2007-03-02 19:14:04 57856 --a------ C:\WINDOWS\system32\scripto.dll
2007-03-02 19:14:04 26624 --a------ C:\WINDOWS\system32\scredir.dll
2007-03-02 19:14:04 22016 --a------ C:\WINDOWS\system32\sclgntfy.dll
2007-03-02 19:14:

[wojtas]

te rozszerzenia Ci jeszcze nie dzialaja

.bat
.com
.pif
.scr

i daj caly log w tagach

[biigos]

[code][code]ComboScan v20070306.20 run by Propriétaire on 2007-03-21 at 17:53:37
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created ComboScan Restore Point.


-- Last 5 Restore Point(s) --
16: 2007-03-21 16:53:42 UTC - RP132 - ComboScan Restore Point
15: 2007-03-21 16:22:08 UTC - RP131 - Point de vérification système
14: 2007-03-15 12:13:01 UTC - RP130 - Software Distribution Service 2.0
13: 2007-03-14 18:51:54 UTC - RP129 - Point de vérification système
12: 2007-03-08 17:09:23 UTC - RP128 - Software Distribution Service 2.0


-- First Restore Point --
1: 2007-03-05 19:50:07 UTC - RP117 - Le KB922819 pour Windows XP a été installé.


Performed disk cleanup.


-- HijackThis (run as Propriétaire.exe) ----------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 17:54:00, on 21.03.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
I:\Krzysiek\programy\Gadu-Gadu\gg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
C:\WINDOWS\system32\wuauclt.exe
I:\Bartek\Programy\Anty Wirusy\comboscan.exe
I:\Bartek\Programy\ANTYWI~1\Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://analyze.hijackfree.com/analyze/?id=b609d827-654e-43ff-9329-33beb154184d
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [Gadu-Gadu] "I:\Krzysiek\programy\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O8 - Extra context menu item: Download with &FileFactory Turbo - I:\Krzysiek\FileFactory Turbo\Plugins\IE\FileFactoryIE.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


-- HijackThis Fixed Entries (I:\Bartek\Programy\ANTYWI~1\backups\) -------------

backup-20070321-174023-111 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
backup-20070321-174023-194 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
backup-20070321-174023-202 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
backup-20070321-174023-704 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
backup-20070321-174023-736 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
backup-20070321-174023-913 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
backup-20070321-174505-465 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
backup-20070321-174505-497 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
backup-20070321-174505-674 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
backup-20070321-174505-685 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
backup-20070321-174505-705 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
backup-20070321-174505-764 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
backup-20070321-174505-860 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
backup-20070321-175307-510 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

-- File Associations -----------------------------------------------------------

.bat - unable to read key
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - unable to read key
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - unable to read key
.reg - regfile - regedit.exe "%1"
.scr - unable to read key
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

1R AFS2K - C:\WINDOWS\system32\drivers\AFS2K.SYS
3R Arp1394 (Protocole client ARP 1394) - C:\WINDOWS\system32\drivers\arp1394.sys
0R d347bus - C:\WINDOWS\system32\drivers\d347bus.sys
0R d347prt - C:\WINDOWS\system32\drivers\d347prt.sys
3R HidUsb (Pilote de classe HID Microsoft) - C:\WINDOWS\system32\drivers\hidusb.sys
3S HPZid412 (IEEE-1284.4 Driver HPZid412) - C:\WINDOWS\system32\drivers\hpzid412.sys
3S HPZipr12 (Print Class Driver for IEEE-1284.4 HPZipr12) - C:\WINDOWS\system32\drivers\HPZipr12.sys
3S HPZius12 (USB to IEEE-1284.4 Translation Driver HPZius12) - C:\WINDOWS\system32\drivers\HPZius12.sys
1R intelppm (Pilote de processeur Intel) - C:\WINDOWS\system32\drivers\intelppm.sys
1R kbdhid (Pilote HID de clavier) - C:\WINDOWS\system32\drivers\kbdhid.sys
0R kl1 - C:\WINDOWS\system32\drivers\kl1.sys
1R klif - C:\WINDOWS\system32\drivers\klif.sys
3R mouhid (Pilote HID de souris) - C:\WINDOWS\system32\drivers\mouhid.sys
3R NIC1394 (Pilote réseau 1394) - C:\WINDOWS\system32\drivers\nic1394.sys
3R nv - C:\WINDOWS\system32\drivers\nv4_mini.sys
0R ohci1394 (Contrôleurs hôte IEEE 1394 compatible OHCI) - C:\WINDOWS\system32\drivers\ohci1394.sys
3R Point32 (Microsoft IntelliPoint Filter Driver) - C:\WINDOWS\system32\drivers\point32.sys
0R PxHelp20 - C:\WINDOWS\system32\drivers\PxHelp20.sys
0R SISAGP (SiS AGP Filter) - C:\WINDOWS\system32\drivers\SISAGPX.SYS
3R SISNIC (SiS PCI Fast Ethernet Adapter Driver) - C:\WINDOWS\system32\drivers\sisnic.sys
0R srescan - C:\WINDOWS\system32\ZoneLabs\srescan.sys
3R STAC97 (SigmaTel C-Major Audio) - C:\WINDOWS\system32\drivers\STAC97.sys
3R usbccgp (Pilote parent générique USB Microsoft) - C:\WINDOWS\system32\drivers\usbccgp.sys
3R usbehci (Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft) - C:\WINDOWS\system32\drivers\usbehci.sys
3R usbohci (Pilote miniport de contrôleur hôte ouvert USB Microsoft) - C:\WINDOWS\system32\drivers\usbohci.sys
3S usbprint (Classe d'imprimantes USB Microsoft) - C:\WINDOWS\system32\drivers\usbprint.sys
3R usbstor (Pilote de stockage de masse USB) - C:\WINDOWS\system32\drivers\usbstor.sys
1R vsdatant - C:\WINDOWS\system32\vsdatant.sys
3S WpdUsb - C:\WINDOWS\system32\drivers\wpdusb.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

3S aspnet_state (ASP.NET State Service) - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
2R AVP (Kaspersky Anti-Virus 6.0) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe -r
3S IDriverT (InstallDriver Table Manager) - "C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe"
3S Microsoft Office Groove Audit Service - "C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe"
2R NVSvc (NVIDIA Display Driver Service) - C:\WINDOWS\System32\nvsvc32.exe
3S odserv (Microsoft Office Diagnostics Service) - "C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE"
3S ose (Office Source Engine) - "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
3S Pml Driver HPZ12 - C:\WINDOWS\System32\HPZipm12.exe
2R UMWdf (Windows User Mode Driver Framework) - C:\WINDOWS\System32\wdfmgr.exe
2R vsmon (TrueVector Internet Monitor) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service


-- Files created between 2007-02-21 and 2007-03-21 -----------------------------

2007-03-21 17:42:16 0 d-------- C:\WINDOWS\pss
2007-03-19 22:03:51 0 d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau<VOISIN~1>
2007-03-19 22:03:51 0 d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression<VOISIN~2>
2007-03-19 22:03:51 0 d--h----- C:\Documents and Settings\Administrateur\Modèles<MODLES~1>
2007-03-19 22:03:51 0 d-------- C:\Documents and Settings\Administrateur\Mes documents<MESDOC~1>
2007-03-19 22:03:51 0 dr------- C:\Documents and Settings\Administrateur\Menu Démarrer<MENUDM~1>
2007-03-19 22:03:51 0 d-------- C:\Documents and Settings\Administrateur\Favoris
2007-03-19 22:03:51 0 d-------- C:\Documents and Settings\Administrateur\Bureau
2007-03-19 22:03:51 0 d-------- C:\Documents and Settings\Administrateur\Application Data\Sun
2007-03-19 22:03:50 524288 --ah----- C:\Documents and Settings\Administrateur\NTUSER.DAT
2007-03-11 19:57:21 0 d-------- C:\Program Files\MegauploadToolbar<MEGAUP~1>
2007-03-11 19:57:21 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\MegauploadToolbar<MEGAUP~1>
2007-03-06 21:14:57 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\ArcSoft
2007-03-06 20:37:30 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-03-06 20:37:05 0 d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer<APPLEC~1>
2007-03-06 20:33:53 245408 --a------ C:\WINDOWS\system32\unicows.dll
2007-03-06 20:33:53 1645320 --a------ C:\WINDOWS\system32\gdiplus.dll
2007-03-06 20:33:53 0 d-------- C:\Program Files\Fichiers communs\ArcSoft
2007-03-06 20:33:52 348160 --a------ C:\WINDOWS\system32\msvcr71.dll
2007-03-06 20:33:52 499712 -ra------ C:\WINDOWS\system32\msvcp71.dll
2007-03-06 20:31:17 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\AdobeUM
2007-03-06 20:30:54 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\Adobe
2007-03-06 20:30:41 0 d-------- C:\Program Files\Fichiers communs\Adobe
2007-03-05 21:10:30 32592 --a------ C:\WINDOWS\system32\msonpmon.dll
2007-03-05 21:07:10 0 d-------- C:\Program Files\Microsoft Works<MIF2B0~1>
2007-03-05 21:06:56 0 d-------- C:\Program Files\MSBuild
2007-03-05 21:06:24 0 d-------- C:\Program Files\Fichiers communs\DESIGNER
2007-03-05 21:05:19 0 d-------- C:\Program Files\Microsoft.NET<MICROS~1.NET>
2007-03-05 21:01:32 0 d-------- C:\WINDOWS\SHELLNEW
2007-03-05 21:00:35 0 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help<MICROS~2>
2007-03-05 20:59:01 0 dr-h----- C:\MSOCache
2007-03-05 20:57:45 0 d-------- C:\Documents and Settings\LocalService\Menu Démarrer<MENUDM~1>
2007-03-05 20:55:11 0 d-------- C:\WINDOWS\Prefetch
2007-03-05 20:12:20 221184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-03-05 20:10:31 0 d-------- C:\WINDOWS\peernet
2007-03-05 20:10:30 0 d-------- C:\WINDOWS\provisioning<PROVIS~1>
2007-03-05 20:08:15 0 d-------- C:\WINDOWS\ServicePackFiles<SERVIC~1>
2007-03-05 19:58:08 0 d-------- C:\WINDOWS\EHome
2007-03-05 19:49:39 11776 -----n--- C:\WINDOWS\system32\spnpinst.exe
2007-03-05 19:49:38 4569 -----n--- C:\WINDOWS\system32\secupd.dat
2007-03-05 19:38:04 0 d---s---- C:\Documents and Settings\Propriétaire\UserData
2007-03-05 19:34:15 5248 --a------ C:\WINDOWS\system32\drivers\d347prt.sys
2007-03-05 19:34:15 155136 --a------ C:\WINDOWS\system32\drivers\d347bus.sys
2007-03-05 19:34:12 0 d-------- C:\Program Files\D-Tools
2007-03-05 19:33:57 0 d-------- C:\WINDOWS\Downloaded Installations<DOWNLO~2>
2007-03-05 19:18:25 57344 -ra------ C:\WINDOWS\system32\HPZisn12.dll
2007-03-05 19:18:25 94208 -ra------ C:\WINDOWS\system32\HPZipt12.dll
2007-03-05 19:18:25 61699 -ra------ C:\WINDOWS\system32\HPZinw12.exe
2007-03-05 19:18:24 196608 -ra------ C:\WINDOWS\system32\HPZipr12.dll
2007-03-05 19:18:24 65795 -ra------ C:\WINDOWS\system32\HPZipm12.exe
2007-03-05 19:18:24 266296 -ra------ C:\WINDOWS\system32\HPZidr12.dll
2007-03-05 19:18:24 16496 -ra------ C:\WINDOWS\system32\drivers\HPZipr12.sys
2007-03-05 19:18:20 51056 -ra------ C:\WINDOWS\system32\drivers\hpzid412.sys
2007-03-05 19:17:33 262144 -ra------ C:\WINDOWS\system32\HPZc3212.dll
2007-03-05 19:17:33 21488 -ra------ C:\WINDOWS\system32\drivers\HPZius12.sys
2007-03-05 19:17:29 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-03-05 19:16:33 483328 -ra------ C:\WINDOWS\system32\hphmon05.exe
2007-03-05 19:16:22 6353 -ra------ C:\WINDOWS\system32\hphmon05.dat
2007-03-05 19:12:10 4308 -----n--- C:\WINDOWS\hphmdl01.dat
2007-03-05 19:12:10 17325 --a------ C:\WINDOWS\HPHins01.dat
2007-03-05 19:10:50 0 d-------- C:\WINDOWS\system32\NtmsData
2007-03-05 18:57:32 82380 --a------ C:\WINDOWS\system32\drivers\AFS2K.SYS
2007-03-05 18:53:32 0 d-------- C:\Program Files\Hewlett-Packard<HEWLET~1>
2007-03-05 18:09:28 1168 --a------ C:\WINDOWS\mozver.dat
2007-03-04 13:27:32 332800 --a------ C:\WINDOWS\system32\ipnathlp.dll
2007-03-04 13:27:31 614912 --a------ C:\WINDOWS\system32\h323msp.dll
2007-03-04 13:16:41 0 d-------- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage<WINDOW~1>
2007-03-04 13:16:00 262144 --a------ C:\Documents and Settings\All Users\ntuser.dat
2007-03-04 12:03:57 1097728 --a------ C:\WINDOWS\system32\esent.dll
2007-03-04 11:50:01 0 d-------- C:\WINDOWS\system32\bits
2007-03-04 11:48:51 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1>
2007-03-04 11:48:48 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-03-04 11:48:46 0 d--h----- C:\WINDOWS\$hf_mig$
2007-03-03 14:55:15 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe
2007-03-03 14:55:15 129784 -----n--- C:\WINDOWS\system32\pxafs.dll
2007-03-03 14:55:15 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-03-03 14:55:15 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-03-03 14:55:15 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-03-03 14:54:09 0 d-------- C:\Program Files\Winamp
2007-03-03 14:08:24 351232 --a------ C:\WINDOWS\system32\winhttp.dll
2007-03-03 14:08:24 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-03-03 14:08:24 7168 -----n--- C:\WINDOWS\system32\bitsprx3.dll
2007-03-03 14:08:24 8192 -----n--- C:\WINDOWS\system32\bitsprx2.dll
2007-03-03 14:06:18 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-03-03 14:02:28 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1>
2007-03-03 14:01:18 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-03-03 14:01:13 173536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-03-03 14:01:13 41240 --a------ C:\WINDOWS\system32\wups.dll
2007-03-03 14:01:13 128792 --a------ C:\WINDOWS\system32\wucltui.dll
2007-03-03 14:01:13 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-03-03 14:01:13 175896 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-03-03 14:01:13 467224 --a------ C:\WINDOWS\system32\wuapi.dll
2007-03-03 13:58:04 0 d-------- C:\Documents and Settings\Propriétaire\Gadu-Gadu<GADU-G~1>
2007-03-03 13:49:03 12288 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2007-03-03 13:49:03 23680 --a------ C:\WINDOWS\system32\drivers\mouclass.sys
2007-03-03 13:48:57 54400 --a------ C:\WINDOWS\system32\drivers\i8042prt.sys
2007-03-03 13:48:41 0 d-------- C:\Program Files\Microsoft IntelliPoint<MICROS~3>
2007-03-03 13:48:07 14848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys
2007-03-03 13:48:07 25216 --a------ C:\WINDOWS\system32\drivers\kbdclass.sys
2007-03-03 13:47:54 21504 --a------ C:\WINDOWS\system32\hidserv.dll
2007-03-03 13:47:49 0 d-------- C:\Program Files\Microsoft IntelliType Pro<MICROS~2>
2007-03-03 13:47:45 9600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2007-03-03 13:47:41 31616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2007-03-03 11:33:26 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\Opera
2007-03-03 11:33:16 0 d-------- C:\Program Files\Opera
2007-03-03 11:30:11 0 d-------- C:\Program Files\a-squared HiJackFree<A-SQUA~1>
2007-03-03 11:19:21 0 d-------- C:\Documents and Settings\Propriétaire\Application Data\Lavasoft
2007-03-03 11:18:45 0 d-------- C:\Program Files\Lavasoft
2007-03-03 11:08:42 4212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2007-03-03 11:08:10 0 d-------- C:\WINDOWS\system32\ZoneLabs
2007-03-03 11:07:31 0 d-------- C:\WINDOWS\Internet Logs<INTERN~1>
2007-03-03 11:02:27 0 d-------- C:\Program Files\Kaspersky Lab<KASPER~1>
2007-03-03 11:02:27 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab<KASPER~1>
2007-03-03 11:02:26 383776 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-03-03 11:02:26 5229088 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-03-03 10:54:32 0 d-------- C:\Documents and Settings\All Users\Application Data\Adobe
2007-03-03 10:52:17 0 d-------- C:\WINDOWS\Cache
2007-03-03 10:51:17 1010 --a------ C:\tmpFile.dat
2007-03-03 10:51:15 0 d-------- C:\Documentation en ligne<DOCUME~2>
2007-03-03 10:50:53 204800 --a------ C:\WINDOWS\system32\IVIresizeW7.dll<IV828C~1.DLL>
2007-03-03 10:50:53 188416 --a------ C:\WINDOWS\system32\IVIresizePX.dll<IV760B~1.DLL>
2007-03-03 10:50:53 192512 --a------ C:\WINDOWS\system32\IVIresizeP6.dll<IVIRES~4.DLL>
2007-03-03 10:50:53 192512 --a------ C:\WINDOWS\system32\IVIresizeM6.dll<IVIRES~3.DLL>
2007-03-03 10:50:53 200704 --a------ C:\WINDOWS\system32\IVIresizeA6.dll<IVIRES~2.DLL>
2007-03-03 10:50:53 20480 --a------ C:\WINDOWS\system32\IVIresize.dll<IVIRES~1.DLL>
2007-03-03 10:50:50 0 d-------- C:\Program Files\InterVideo<INTERV~1>
2007-03-03 10:49:52 0 d-------- C:\$CTJTMP
2007-03-03 10:48:01 53248 -----n--- C:\WINDOWS\system32\vbalicom6.dll<VBALIC~1.DLL>
2007-03-03 10:48:01 32768 -----n--- C:\WINDOWS\system32\ssubtmr6.dll
2007-03-03 10:48:01 1392671 --a------ C:\WINDOWS\system32\msvbvm60.dll
2007-03-03 10:48:01 0 d-------- C:\SigmaTel
2007-03-03 10:48:01 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-03-03 10:47:57 32768 -ra------ C:\WINDOWS\system32\drivers\sisnic.sys
2007-03-03 10:47:54 0 d-------- C:\Program Files\Fichiers communs\InstallShield<INSTAL~1>
2007-03-03 10:47:52 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-03-03 10:47:50 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-03-03 10:47:50 52864 --a------ C:\WINDOWS\system32\drivers\dmusic.sys
2007-03-03 10:47:49 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-03-03 10:47:48 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-03-03 10:47:47 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-03-03 10:47:46 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-03-03 10:47:45 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-03-03 10:47:28 192512 -ra------ C:\WINDOWS\system32\stac97co.dll
2007-03-03 10:47:28 262096 -ra------ C:\WINDOWS\system32\drivers\STAC97.sys
2007-03-03 10:47:28 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-03-03 10:47:28 0 d-------- C:\Program Files\Sigmatel
2007-03-03 10:47:10 155648 -ra------ C:\WINDOWS\system32\nvwrszht.dll
2007-03-03 10:47:10 151552 -ra------ C:\WINDOWS\system32\nvwrszhc.dll
2007-03-03 10:47:10 278528 -ra------ C:\WINDOWS\system32\nvwrstr.dll
2007-03-03 10:47:10 110592 -ra------ C:\WINDOWS\system32\nvrszht.dll
2007-03-03 10:47:10 200704 -ra------ C:\WINDOWS\system32\nvrszhc.dll
2007-03-03 10:47:10 225280 -ra------ C:\WINDOWS\system32\nvrstr.dll
2007-03-03 10:47:09 274432 -ra------ C:\WINDOWS\system32\nvwrssv.dll
2007-03-03 10:47:09 278528 -ra------ C:\WINDOWS\system32\nvwrssl.dll
2007-03-03 10:47:09 274432 -ra------ C:\WINDOWS\system32\nvwrssk.dll
2007-03-03 10:47:09 290816 -ra------ C:\WINDOWS\system32\nvwrsru.dll
2007-03-03 10:47:09 225280 -ra------ C:\WINDOWS\system32\nvrssv.dll
2007-03-03 10:47:09 225280 -ra------ C:\WINDOWS\system32\nvrssl.dll
2007-03-03 10:47:09 225280 -ra------ C:\WINDOWS\system32\nvrssk.dll
2007-03-03 10:47:08 294912 -ra------ C:\WINDOWS\system32\nvwrsptb.dll
2007-03-03 10:47:08 299008 -ra------ C:\WINDOWS\system32\nvwrspt.dll
2007-03-03 10:47:08 274432 -ra------ C:\WINDOWS\system32\nvwrspl.dll
2007-03-03 10:47:08 237568 -ra------ C:\WINDOWS\system32\nvrsru.dll
2007-03-03 10:47:08 237568 -ra------ C:\WINDOWS\system32\nvrsptb.dll
2007-03-03 10:47:08 237568 -ra------ C:\WINDOWS\system32\nvrspt.dll
2007-03-03 10:47:08 225280 -ra------ C:\WINDOWS\system32\nvrspl.dll
2007-03-03 10:47:07 274432 -ra------ C:\WINDOWS\system32\nvwrsno.dll
2007-03-03 10:47:07 294912 -ra------ C:\WINDOWS\system32\nvwrsnl.dll
2007-03-03 10:47:07 184320 -ra------ C:\WINDOWS\system32\nvwrsko.dll
2007-03-03 10:47:07 225280 -ra------ C:\WINDOWS\system32\nvrsno.dll
2007-03-03 10:47:07 241664 -ra------ C:\WINDOWS\system32\nvrsnl.dll
2007-03-03 10:47:07 233472 -ra------ C:\WINDOWS\system32\nvrsko.dll
2007-03-03 10:47:06 196608 -ra------ C:\WINDOWS\system32\nvwrsja.dll
2007-03-03 10:47:06 299008 -ra------ C:\WINDOWS\system32\nvwrsit.dll
2007-03-03 10:47:06 290816 -ra------ C:\WINDOWS\system32\nvwrshu.dll
2007-03-03 10:47:06 237568 -ra------ C:\WINDOWS\system32\nvrsja.dll
2007-03-03 10:47:06 249856 -ra------ C:\WINDOWS\system32\nvrsit.dll
2007-03-03 10:47:06 225280 -ra------ C:\WINDOWS\system32\nvrshu.dll
2007-03-03 10:47:05 258048 -ra------ C:\WINDOWS\system32\nvwrshe.dll
2007-03-03 10:47:05 299008 -ra------ C:\WINDOWS\system32\nvwrsfr.dll
2007-03-03 10:47:05 278528 -ra------ C:\WINDOWS\system32\nvwrsfi.dll
2007-03-03 10:47:05 303104 -ra------ C:\WINDOWS\system32\nvwrsesm.dll
2007-03-03 10:47:05 282624 -ra------ C:\WINDOWS\system32\nvrshe.dll
2007-03-03 10:47:05 249856 -ra------ C:\WINDOWS\system32\nvrsfr.dll
2007-03-03 10:47:05 217088 -ra------ C:\WINDOWS\system32\nvrsfi.dll
2007-03-03 10:47:04 311296 -ra------ C:\WINDOWS\system32\nvwrses.dll
2007-03-03 10:47:04 262144 -ra------ C:\WINDOWS\system32\nvwrseng.dll
2007-03-03 10:47:04 311296 -ra------ C:\WINDOWS\system32\nvwrsel.dll
2007-03-03 10:47:04 241664 -ra------ C:\WINDOWS\system32\nvrsesm.dll
2007-03-03 10:47:04 249856 -ra------ C:\WINDOWS\system32\nvrses.dll
2007-03-03 10:47:04 217088 -ra------ C:\WINDOWS\system32\nvrseng.dll
2007-03-03 10:47:04 249856 -ra------ C:\WINDOWS\system32\nvrsel.dll
2007-03-03 10:47:03 282624 -ra------ C:\WINDOWS\system32\nvwrsde.dll
2007-03-03 10:47:03 274432 -ra------ C:\WINDOWS\system32\nvwrsda.dll
2007-03-03 10:47:03 262144 -ra------ C:\WINDOWS\system32\nvwrscs.dll
2007-03-03 10:47:03 245760 -ra------ C:\WINDOWS\system32\nvrsde.dll
2007-03-03 10:47:03 225280 -ra------ C:\WINDOWS\system32\nvrsda.dll
2007-03-03 10:47:03 217088 -ra------ C:\WINDOWS\system32\nvrscs.dll
2007-03-03 10:47:02 917504 -ra------ C:\WINDOWS\system32\nwiz.exe
2007-03-03 10:47:02 258048 -ra------ C:\WINDOWS\system32\nvwrsar.dll
2007-03-03 10:47:02 1019904 -ra------ C:\WINDOWS\system32\nvwimg.dll
2007-03-03 10:47:02 1646592 -ra------ C:\WINDOWS\system32\nvwdmcpl.dll
2007-03-03 10:47:02 462848 -ra------ C:\WINDOWS\system32\nvshell.dll
2007-03-03 10:47:02 290816 -ra------ C:\WINDOWS\system32\nvrsar.dll
2007-03-03 10:47:02 1437696 -ra------ C:\WINDOWS\system32\nview.dll
2007-03-03 10:47:01 172032 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-03-03 10:47:01 1339392 -ra------ C:\WINDOWS\system32\nvdspsch.exe
2007-03-03 10:47:01 442368 -ra------ C:\WINDOWS\system32\nvappbar.exe
2007-03-03 10:47:01 352256 -ra------ C:\WINDOWS\system32\keystone.exe
2007-03-03 10:47:01 0 d-------- C:\WINDOWS\nview
2007-03-03 10:47:00 81920 -ra------ C:\WINDOWS\system32\nvwddi.dll
2007-03-03 10:47:00 266240 -ra------ C:\WINDOWS\system32\nvnt4cpl.dll
2007-03-03 10:47:00 86016 -ra------ C:\WINDOWS\system32\nvmctray.dll
2007-03-03 10:46:59 5193728 -ra------ C:\WINDOWS\system32\nvoglnt.dll
2007-03-03 10:46:59 4493312 -ra------ C:\WINDOWS\system32\nvcpl.dll
2007-03-03 10:46:58 114755 -ra------ C:\WINDOWS\system32\nvsvc32.exe
2007-03-03 10:46:58 32256 -ra------ C:\WINDOWS\system32\nvcodins.dll
2007-03-03 10:46:58 32256 -ra------ C:\WINDOWS\system32\nvcod.dll
2007-03-03 10:46:58 3772032 -ra------ C:\WINDOWS\system32\nv4_disp.dll
2007-03-03 10:46:58 2627328 -ra------ C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-03-03 10:46:57 40320 -ra------ C:\WINDOWS\system32\drivers\intelppm.sys
2007-03-03 10:46:45 0 d-------- C:\WINDOWS\system32\ReinstallBackups<REINST~1>
2007-03-03 10:46:45 36992 -ra------ C:\WINDOWS\system32\drivers\SISAGPX.SYS
2007-03-03 10:46:11 518 --a------ C:\pnpID.dat
2007-03-03 10:45:01 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2>
2007-03-03 10:44:38 51200 --a------ C:\WINDOWS\system32\wstdecod.dll
2007-03-03 10:44:38 363520 --a------ C:\WINDOWS\system32\psisdecd.dll
2007-03-03 10:44:38 19328 --a------ C:\WINDOWS\system32\drivers\wstcodec.sys
2007-03-03 10:44:38 15360 --a------ C:\WINDOWS\system32\drivers\streamip.sys
2007-03-03 10:44:38 11136 --a------ C:\WINDOWS\system32\drivers\slip.sys
2007-03-03 10:44:38 10880 --a------ C:\WINDOWS\system32\drivers\ndisip.sys
2007-03-03 10:44:37 733696 --a------ C:\WINDOWS\system32\qedwipes.dll
2007-03-03 10:44:37 563200 --a------ C:\WINDOWS\system32\qedit.dll
2007-03-03 10:44:37 17408 --a------ C:\WINDOWS\system32\msyuv.dll
2007-03-03 10:44:37 204800 --a------ C:\WINDOWS\system32\mswebdvd.dll
2007-03-03 10:44:37 1433600 --a------ C:\WINDOWS\system32\msvidctl.dll
2007-03-03 10:44:37 14336 --a------ C:\WINDOWS\system32\msdmo.dll
2007-03-03 10:44:37 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-03-03 10:44:37 4352 --a------ C:\WINDOWS\system32\drivers\swenum.sys
2007-03-03 10:44:37 48640 --a------ C:\WINDOWS\system32\drivers\stream.sys
2007-03-03 10:44:37 85376 --a------ C:\WINDOWS\system32\drivers\nabtsfec.sys
2007-03-03 10:44:37 5504 --a------ C:\WINDOWS\system32\drivers\mstee.sys
2007-03-03 10:44:37 4992 --a------ C:\WINDOWS\system32\drivers\mspqm.sys
2007-03-03 10:44:37 5376 --a------ C:\WINDOWS\system32\drivers\mspclock.sys
2007-03-03 10:44:37 7552 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys
2007-03-03 10:44:37 51328 --a------ C:\WINDOWS\system32\drivers\msdv.sys
2007-03-03 10:44:37 15360 --a------ C:\WINDOWS\system32\drivers\mpe.sys
2007-03-03 10:44:37 140928 --a------ C:\WINDOWS\system32\drivers\ks.sys
2007-03-03 10:44:37 17024 --a------ C:\WINDOWS\system32\drivers\ccdecode.sys
2007-03-03 10:44:37 11776 --a------ C:\WINDOWS\system32\drivers\bdasup.sys
2007-03-03 10:44:36 1293312 --a------ C:\WINDOWS\system32\quartz.dll
2007-03-03 10:44:36 386048 --a------ C:\WINDOWS\system32\qdvd.dll
2007-03-03 10:44:36 279040 --a------ C:\WINDOWS\system32\qdv.dll
2007-03-03 10:44:36 192512 --a------ C:\WINDOWS\system32\qcap.dll
2007-03-03 10:44:36 35328 --a------ C:\WINDOWS\system32\mciqtz32.dll
2007-03-03 10:44:36 20480 --a------ C:\WINDOWS\system32\encapi.dll
2007-03-03 10:44:36 19456 --a------ C:\WINDOWS\system32\dswave.dll
2007-03-03 10:44:36 104448 --a------ C:\WINDOWS\system32\dmusic.dll
2007-03-03 10:44:36 103424 --a------ C:\WINDOWS\system32\dmsynth.dll
2007-03-03 10:44:36 105984 --a------ C:\WINDOWS\system32\dmstyle.dll
2007-03-03 10:44:36 35840 --a------ C:\WINDOWS\system32\dmloader.dll
2007-03-03 10:44:36 181248 --a------ C:\WINDOWS\system32\dmime.dll
2007-03-03 10:44:36 61440 --a------ C:\WINDOWS\system32\dmcompos.dll
2007-03-03 10:44:36 28672 --a------ C:\WINDOWS\system32\dmband.dll
2007-03-03 10:44:36 59904 --a------ C:\WINDOWS\system32\devenum.dll
2007-03-03 10:44:36 70656 --a------ C:\WINDOWS\system32\amstream.dll
2007-03-03 10:44:35 44544 --a------ C:\WINDOWS\system32\dxdllreg.exe
2007-03-03 10:44:35 2113536 --a------ C:\WINDOWS\system32\dxdiagn.dll
2007-03-03 10:44:35 1298432 --a------ C:\WINDOWS\system32\dxdiag.exe
2007-03-03 10:44:35 1227264 --a------ C:\WINDOWS\system32\dx8vb.dll
2007-03-03 10:44:35 619008 --a------ C:\WINDOWS\system32\dx7vb.dll
2007-03-03 10:44:35 1294336 --a------ C:\WINDOWS\system32\dsound3d.dll
2007-03-03 10:44:35 367616 --a------ C:\WINDOWS\system32\dsound.dll
2007-03-03 10:44:35 72192 --a------ C:\WINDOWS\system32\dsdmoprp.dll
2007-03-03 10:44:35 181760 --a------ C:\WINDOWS\system32\dsdmo.dll
2007-03-03 10:44:35 57856 --a------ C:\WINDOWS\system32\dpwsockx.dll
2007-03-03 10:44:35 116736 --a------ C:\WINDOWS\system32\dpvvox.dll
2007-03-03 10:44:35 83456 --a------ C:\WINDOWS\system32\dpvsetup.exe
2007-03-03 10:44:35 213504 --a------ C:\WINDOWS\system32\dpvoice.dll
2007-03-03 10:44:35 21504 --a------ C:\WINDOWS\system32\dpvacm.dll
2007-03-03 10:44:35 18432 --a------ C:\WINDOWS\system32\dpnsvr.exe
2007-03-03 10:44:35 3584 --a------ C:\WINDOWS\system32\dpnlobby.dll
2007-03-03 10:44:35 60928 --a------ C:\WINDOWS\system32\dpnhupnp.dll
2007-03-03 10:44:35 35328 --a------ C:\WINDOWS\system32\dpnhpast.dll
2007-03-03 10:44:35 375296 --a------ C:\WINDOWS\system32\dpnet.dll
2007-03-03 10:44:35 3584 --a------ C:\WINDOWS\system32\dpnaddr.dll
2007-03-03 10:44:35 24064 --a------ C:\WINDOWS\system32\dpmodemx.dll
2007-03-03 10:44:35 229888 --a------ C:\WINDOWS\system32\dplayx.dll
2007-03-03 10:44:35 30208 --a------ C:\WINDOWS\system32\dplaysvr.exe
2007-03-03 10:44:35 82432 --a------ C:\WINDOWS\system32\dmscript.dll
2007-03-03 10:44:35 27136 --a------ C:\WINDOWS\system32\ddrawex.dll
2007-03-03 10:44:35 266240 --a------ C:\WINDOWS\system32\ddraw.dll
2007-03-03 10:44:35 825344 --a------ C:\WINDOWS\system32\d3dim700.dll
2007-03-03 10:44:35 1689088 --a------ C:\WINDOWS\system32\d3d9.dll
2007-03-03 10:44:35 8192 --a------ C:\WINDOWS\system32\d3d8thk.dll
2007-03-03 10:44:35 1179648 --a------ C:\WINDOWS\system32\d3d8.dll
2007-03-02 19:15:33 41984 --a------ C:\WINDOWS\system32\osuninst.exe
2007-03-02 19:15:32 18944 --a------ C:\WINDOWS\vmmreg32.dll
2007-03-02 19:15:32 18176 --a------ C:\WINDOWS\system32\vga64k.dll
2007-03-02 19:15:32 51456 --a------ C:\WINDOWS\system32\vga256.dll
2007-03-02 19:15:32 209408 --a------ C:\WINDOWS\system32\drivers\update.sys
2007-03-02 19:15:23 15360 --a------ C:\WINDOWS\system32\pentnt.exe
2007-03-02 19:15:23 20511 --a------ C:\WINDOWS\system32\odtext32.dll
2007-03-02 19:15:23 20510 --a------ C:\WINDOWS\system32\odpdx32.dll
2007-03-02 19:15:23 20510 --a------ C:\WINDOWS\system32\odfox32.dll
2007-03-02 19:15:23 20510 --a------ C:\WINDOWS\system32\odexl32.dll
2007-03-02 19:15:23 20511 --a------ C:\WINDOWS\system32\oddbse32.dll
2007-03-02 19:15:20 348189 --a------ C:\WINDOWS\system32\msxbde40.dll
2007-03-02 19:15:20 253952 --a------ C:\WINDOWS\system32\msvcrt20.dll
2007-03-02 19:15:20 258077 --a------ C:\WINDOWS\system32\mstext40.dll
2007-03-02 19:15:19 552989 --a------ C:\WINDOWS\system32\msrepl40.dll
2007-03-02 19:15:19 28746 --a------ C:\WINDOWS\system32\msrecr40.dll
2007-03-02 19:15:19 421919 --a------ C:\WINDOWS\system32\msrd2x40.dll
2007-03-02 19:15:19 73802 --a------ C:\WINDOWS\system32\msrclr40.dll
2007-03-02 19:15:19 7168 --a------ C:\WINDOWS\system32\msr2cenu.dll
2007-03-02 19:15:19 69632 --a------ C:\WINDOWS\system32\msr2c.dll
2007-03-02 19:15:19 348189 --a------ C:\WINDOWS\system32\mspbde40.dll
2007-03-02 19:15:19 213023 --a------ C:\WINDOWS\system32\msltus40.dll
2007-03-02 19:15:19 319517 --a------ C:\WINDOWS\system32\msexcl40.dll
2007-03-02 19:15:19 512029 --a------ C:\WINDOWS\system32\msexch40.dll
2007-03-02 19:15:18 52736 --a------ C:\WINDOWS\system32\migpwd.exe
2007-03-02 19:15:18 26624 --a------ C:\WINDOWS\system32\lnkstub.exe
2007-03-02 19:15:18 4224 --a------ C:\WINDOWS\system32\drivers\mnmdd.sys
2007-03-02 19:15:16 92608 --a------ C:\WINDOWS\system32\krnl386.exe
2007-03-02 19:15:15 24576 --a------ C:\WINDOWS\system32\dbmsvinn.dLL
2007-03-02 19:15:15 590336 --a------ C:\WINDOWS\system32\d3dramp.dll
2007-03-02 19:15:15 27136 --a------ C:\WINDOWS\system32\ctl3d32.dll
2007-03-02 19:15:12 60928 --a------ C:\WINDOWS\system32\wmerrFRA.dll
2007-03-02 19:15:12 322810 --a------ C:\WINDOWS\system32\perfi00C.dat
2007-03-02 19:15:12 445016 --a------ C:\WINDOWS\system32\perfh00C.dat
2007-03-02 19:15:12 34108 --a------ C:\WINDOWS\system32\perfd00C.dat
2007-03-02 19:15:12 63614 --a------ C:\WINDOWS\system32\perfc00C.dat
2007-03-02 19:15:12 57344 --a------ C:\WINDOWS\system32\mfc42loc.dll
2007-03-02 19:15:12 45568 --a------ C:\WINDOWS\system32\mfc40loc.dll
2007-03-02 19:15:11 57392 --a------ C:\WINDOWS\system32\wshfr.dll
2007-03-02 19:15:11 24624 --a------ C:\WINDOWS\system32\vbsfr.dll
2007-03-02 19:15:11 24626 --a------ C:\WINDOWS\system32\scrrnfr.dll
2007-03-02 19:15:11 24624 --a------ C:\WINDOWS\system32\scofr.dll
2007-03-02 19:15:11 28719 --a------ C:\WINDOWS\system32\jsfr.dll
2007-03-02 19:15:07 197632 --a------ C:\WINDOWS\system32\xpsp1res.dll
2007-03-02 19:15:06 71102 --a------ C:\WINDOWS\system32\edit.com
2007-03-02 19:15:01 195584 --a------ C:\WINDOWS\system32\msutb.dll
2007-03-02 19:15:01 25600 --a------ C:\WINDOWS\system32\mslbui.dll
2007-03-02 19:15:01 159232 --a------ C:\WINDOWS\system32\msimtf.dll
2007-03-02 19:15:01 69120 --a------ C:\WINDOWS\system32\msctfp.dll
2007-03-02 19:15:01 15360 --a------ C:\WINDOWS\system32\ctfmon.exe
2007-03-02 19:15:00 294400 --a------ C:\WINDOWS\system32\msctf.dll
2007-03-02 19:14:48 177784 --a------ C:\WINDOWS\system32\xenroll.dll
2007-03-02 19:14:48 30720 --a------ C:\WINDOWS\system32\xcopy.exe
2007-03-02 19:14:48 91648 --a------ C:\WINDOWS\system32\xactsrv.dll
2007-03-02 19:14:47 378880 --a------ C:\WINDOWS\system32\wzcdlg.dll
2007-03-02 19:14:47 32256 --a------ C:\WINDOWS\system32\wupdmgr.exe
2007-03-02 19:14:47 18432 --a------ C:\WINDOWS\system32\wtsapi32.dll
2007-03-02 19:14:47 25088 --a------ C:\WINDOWS\system32\wsock32.dll
2007-03-02 19:14:47 42496 --a------ C:\WINDOWS\system32\wsnmp32.dll
2007-03-02 19:14:47 19968 --a------ C:\WINDOWS\system32\wshtcpip.dll
2007-03-02 19:14:47 11776 --a------ C:\WINDOWS\system32\wshrm.dll
2007-03-02 19:14:47 7168 --a------ C:\WINDOWS\system32\wshnetbs.dll
2007-03-02 19:14:47 11776 --a------ C:\WINDOWS\system32\wshisn.dll
2007-03-02 19:14:47 65536 --a------ C:\WINDOWS\system32\wshext.dll
2007-03-02 19:14:47 28672 --a------ C:\WINDOWS\system32\wshcon.dll
2007-03-02 19:14:47 9216 --a------ C:\WINDOWS\system32\wshatm.dll
2007-03-02 19:14:47 114688 --a------ C:\WINDOWS\system32\wscript.exe
2007-03-02 19:14:47 19968 --a------ C:\WINDOWS\system32\ws2help.dll
2007-03-02 19:14:47 32768 --a------ C:\WINDOWS\system32\wpnpinst.exe
2007-03-02 19:14:47 32256 --a------ C:\WINDOWS\system32\wpabaln.exe
2007-03-02 19:14:47 10608 --a------ C:\WINDOWS\system32\wowexec.exe
2007-03-02 19:14:47 12032 --a------ C:\WINDOWS\system32\drivers\ws2ifsl.sys
2007-03-02 19:14:46 2736 --a------ C:\WINDOWS\system32\wowdeb.exe
2007-03-02 19:14:46 265216 --a------ C:\WINDOWS\system32\wow32.dll
2007-03-02 19:14:46 446464 --a------ C:\WINDOWS\system32\wmvdmoe.dll
2007-03-02 19:14:46 1677312 --a------ C:\WINDOWS\system32\wmvcore2.dll
2007-03-02 19:14:45 311327 --a------ C:\WINDOWS\system32\wmv8dmod.dll
2007-03-02 19:14:45 303616 --a------ C:\WINDOWS\system32\wmstream.dll
2007-03-02 19:14:45 115200 --a------ C:\WINDOWS\system32\wmsdmoe.dll
2007-03-02 19:14:45 20480 --a------ C:\WINDOWS\system32\wmpui.dll
2007-03-02 19:14:45 77824 --a------ C:\WINDOWS\system32\wmpstub.exe
2007-03-02 19:14:45 86016 --a------ C:\WINDOWS\system32\wmpshell.dll
2007-03-02 19:14:44 3424256 --a------ C:\WINDOWS\system32\wmploc.dll
2007-03-02 19:14:44 20480 --a------ C:\WINDOWS\system32\wmpcore.dll
2007-03-02 19:14:44 20480 --a------ C:\WINDOWS\system32\wmpcd.dll
2007-03-02 19:14:42 19456 --a------ C:\WINDOWS\system32\wmiprop.dll
2007-03-02 19:14:42 4352 --a------ C:\WINDOWS\system32\drivers\wmilib.sys
2007-03-02 19:14:41 5632 --a------ C:\WINDOWS\system32\wmi.dll
2007-03-02 19:14:41 94208 --a------ C:\WINDOWS\system32\wlnotify.dll
2007-03-02 19:14:41 172544 --a------ C:\WINDOWS\system32\wldap32.dll
2007-03-02 19:14:41 132096 --a------ C:\WINDOWS\system32\wkssvc.dll
2007-03-02 19:14:41 5632 --a------ C:\WINDOWS\system32\winver.exe
2007-03-02 19:14:41 176640 --a------ C:\WINDOWS\system32\wintrust.dll
2007-03-02 19:14:41 21504 --a------ C:\WINDOWS\system32\winstrm.dll
2007-03-02 19:14:41 53760 --a------ C:\WINDOWS\system32\winsta.dll
2007-03-02 19:14:41 292352 --a------ C:\WINDOWS\system32\winsrv.dll
2007-03-02 19:14:41 2112 --a------ C:\WINDOWS\system32\winspool.exe
2007-03-02 19:14:40 2864 --a------ C:\WINDOWS\system32\winsock.dll
2007-03-02 19:14:40 100352 --a------ C:\WINDOWS\system32\winscard.dll
2007-03-02 19:14:40 16896 --a------ C:\WINDOWS\system32\winrnr.dll
2007-03-02 19:14:40 773632 --a------ C:\WINDOWS\system32\winntbbu.dll
2007-03-02 19:14:40 5120 --a------ C:\WINDOWS\system32\winnls.dll
2007-03-02 19:14:40 11776 --a------ C:\WINDOWS\system32\winmsd.exe
2007-03-02 19:14:40 180736 --a------ C:\WINDOWS\system32\winmm.dll
2007-03-02 19:14:40 506368 --a------ C:\WINDOWS\system32\winlogon.exe
2007-03-02 19:14:40 8192 --a------ C:\WINDOWS\system32\winhlp32.exe
2007-03-02 19:14:39 288256 --a------ C:\WINDOWS\winhlp32.exe
2007-03-02 19:14:39 256768 --a------ C:\WINDOWS\winhelp.exe
2007-03-02 19:14:39 9216 --a------ C:\WINDOWS\system32\winfax.dll
2007-03-02 19:14:38 938496 --a------ C:\WINDOWS\system32\winbrand.dll
2007-03-02 19:14:38 13312 --a------ C:\WINDOWS\system32\win87em.dll
2007-03-02 19:14:38 102400 --a------ C:\WINDOWS\system32\win32spl.dll
2007-03-02 19:14:38 1839616 --a------ C:\WINDOWS\system32\win32k.sys
2007-03-02 19:14:38 18432 --a------ C:\WINDOWS\system32\win.com
2007-03-02 19:14:38 9216 --a------ C:\WINDOWS\system32\wifeman.dll
2007-03-02 19:14:38 145408 --a------ C:\WINDOWS\system32\wiavusd.dll
2007-03-02 19:14:38 111104 --a------ C:\WINDOWS\system32\wiavideo.dll
2007-03-02 19:14:37 594432 --a------ C:\WINDOWS\system32\wiashext.dll
2007-03-02 19:14:37 334336 --a------ C:\WINDOWS\system32\wiaservc.dll
2007-03-02 19:14:37 75776 --a------ C:\WINDOWS\system32\wiascr.dll
2007-03-02 19:14:37 124928 --a------ C:\WINDOWS\system32\wiadss.dll
2007-03-02 19:14:37 465920 --a------ C:\WINDOWS\system32\wiadefui.dll
2007-03-02 19:14:37 438784 --a------ C:\WINDOWS\system32\wiaacmgr.exe
2007-03-02 19:14:37 66560 --a------ C:\WINDOWS\system32\wextract.exe
2007-03-02 19:14:37 136192 --a------ C:\WINDOWS\system32\webvw.dll
2007-03-02 19:14:37 40960 --a------ C:\WINDOWS\system32\webhits.dll
2007-03-02 19:14:36 281600 --a------ C:\WINDOWS\system32\webcheck.dll
2007-03-02 19:14:36 49152 --a------ C:\WINDOWS\system32\wdigest.dll
2007-03-02 19:14:33 208896 --a------ C:\WINDOWS\system32\wavemsp.dll
2007-03-02 19:14:33 17664 --a------ C:\WINDOWS\system32\watchdog.sys
2007-03-02 19:14:33 34560 --a------ C:\WINDOWS\system32\drivers\wanarp.sys
2007-03-02 19:14:32 22016 --a------ C:\WINDOWS\system32\w32topl.dll
2007-03-02 19:14:32 51712 --a------ C:\WINDOWS\system32\w32tm.exe
2007-03-02 19:14:32 177664 --a------ C:\WINDOWS\system32\w32time.dll
2007-03-02 19:14:32 295424 --a------ C:\WINDOWS\system32\vssvc.exe
2007-03-02 19:14:32 430592 --a------ C:\WINDOWS\system32\vssapi.dll
2007-03-02 19:14:32 34304 --a------ C:\WINDOWS\system32\vssadmin.exe
2007-03-02 19:14:32 16896 --a------ C:\WINDOWS\system32\vss_ps.dll
2007-03-02 19:14:32 4608 --a------ C:\WINDOWS\system32\vjoy.dll
2007-03-02 19:14:32 53376 --a------ C:\WINDOWS\system32\drivers\volsnap.sys
2007-03-02 19:14:32 79744 --a------ C:\WINDOWS\system32\drivers\videoprt.sys
2007-03-02 19:14:31 9344 --a------ C:\WINDOWS\system32\vga.dll
2007-03-02 19:14:31 20535 --a------ C:\WINDOWS\system32\vfpodbc.dll
2007-03-02 19:14:31 18944 --a------ C:\WINDOWS\system32\version.dll
2007-03-02 19:14:31 102912 --a------ C:\WINDOWS\system32\verifier.exe
2007-03-02 19:14:31 13312 --a------ C:\WINDOWS\system32\verifier.dll
2007-03-02 19:14:31 9104 --a------ C:\WINDOWS\system32\ver.dll
2007-03-02 19:14:31 51712 --a------ C:\WINDOWS\system32\vdmredir.dll
2007-03-02 19:14:31 26112 --a------ C:\WINDOWS\system32\vdmdbg.dll
2007-03-02 19:14:31 7680 --a------ C:\WINDOWS\system32\vcdex.dll
2007-03-02 19:14:31 417792 --a------ C:\WINDOWS\system32\vbscript.dll
2007-03-02 19:14:31 30749 --a------ C:\WINDOWS\system32\vbajet32.dll
2007-03-02 19:14:31 219648 --a------ C:\WINDOWS\system32\uxtheme.dll
2007-03-02 19:14:31 20992 --a------ C:\WINDOWS\system32\drivers\vga.sys
2007-03-02 19:14:30 50176 --a------ C:\WINDOWS\system32\utilman.exe
2007-03-02 19:14:30 26112 --a------ C:\WINDOWS\system32\utildll.dll
2007-03-02 19:14:30 406528 --a------ C:\WINDOWS\system32\usp10.dll
2007-03-02 19:14:30 25088 --a------ C:\WINDOWS\system32\userinit.exe
2007-03-02 19:14:30 731136 --a------ C:\WINDOWS\system32\userenv.dll
2007-03-02 19:14:30 578048 --a------ C:\WINDOWS\system32\user32.dll
2007-03-02 19:14:30 47872 --a------ C:\WINDOWS\system32\user.exe
2007-03-02 19:14:30 16896 --a------ C:\WINDOWS\system32\usbmon.dll
2007-03-02 19:14:30 12672 --a------ C:\WINDOWS\system32\drivers\usb8023.sys
2007-03-02 19:14:29 37888 --a------ C:\WINDOWS\system32\url.dll
2007-03-02 19:14:29 17920 --a------ C:\WINDOWS\system32\ureg.dll
2007-03-02 19:14:29 18432 --a------ C:\WINDOWS\system32\ups.exe
2007-03-02 19:14:29 240128 --a------ C:\WINDOWS\system32\upnpui.dll
2007-03-02 19:14:29 185344 --a------ C:\WINDOWS\system32\upnphost.dll
2007-03-02 19:14:29 16896 --a------ C:\WINDOWS\system32\upnpcont.exe
2007-03-02 19:14:29 132608 --a------ C:\WINDOWS\system32\upnp.dll
2007-03-02 19:14:29 316416 --a------ C:\WINDOWS\system32\untfs.dll
2007-03-02 19:14:29 4096 --a------ C:\WINDOWS\system32\unlodctr.exe
2007-03-02 19:14:29 13824 --a------ C:\WINDOWS\system32\uniplat.dll
2007-03-02 19:14:29 78848 --a------ C:\WINDOWS\system32\unimdmat.dll
2007-03-02 19:14:28 25600 --a------ C:\WINDOWS\twunk_32.exe
2007-03-02 19:14:28 49680 --a------ C:\WINDOWS\twunk_16.exe
2007-03-02 19:14:28 50688 --a------ C:\WINDOWS\twain_32.dll
2007-03-02 19:14:28 94864 --a------ C:\WINDOWS\twain.dll
2007-03-02 19:14:28 13312 --a------ C:\WINDOWS\system32\umdmxfrm.dll
2007-03-02 19:14:28 36864 --a------ C:\WINDOWS\system32\umandlg.dll
2007-03-02 19:14:28 311808 --a------ C:\WINDOWS\system32\ulib.dll
2007-03-02 19:14:28 82432 --a------ C:\WINDOWS\system32\ufat.dll
2007-03-02 19:14:28 25600 --a------ C:\WINDOWS\system32\udhisapi.dll
2007-03-02 19:14:28 177856 --a------ C:\WINDOWS\system32\typelib.dll
2007-03-02 19:14:28 101376 --a------ C:\WINDOWS\system32\txflog.dll
2007-03-02 19:14:28 68096 --a------ C:\WINDOWS\system32\osuninst.dll
2007-03-02 19:14:28 66176 --a------ C:\WINDOWS\system32\drivers\udfs.sys
2007-03-02 19:14:27 12168 --a------ C:\WINDOWS\system32\tsddd.dll
2007-03-02 19:14:27 15360 --a------ C:\WINDOWS\system32\tsd32.dll
2007-03-02 19:14:26 52224 --a------ C:\WINDOWS\system32\tsappcmp.dll
2007-03-02 19:14:26 90624 --a------ C:\WINDOWS\system32\trkwks.dll
2007-03-02 19:14:26 11264 --a------ C:\WINDOWS\system32\tree.com
2007-03-02 19:14:26 31232 --a------ C:\WINDOWS\system32\traffic.dll
2007-03-02 19:14:26 32256 --a------ C:\WINDOWS\system32\tracert6.exe
2007-03-02 19:14:26 13312 --a------ C:\WINDOWS\system32\tracert.exe
2007-03-02 19:14:26 13888 --a------ C:\WINDOWS\system32\toolhelp.dll
2007-03-02 19:14:25 391168 --a------ C:\WINDOWS\system32\themeui.dll
2007-03-02 19:14:25 17920 --a------ C:\WINDOWS\system32\tftp.exe
2007-03-02 19:14:25 358912 --a------ C:\WINDOWS\system32\termmgr.dll
2007-03-02 19:14:25 78336 --a------ C:\WINDOWS\system32\telnet.exe
2007-03-02 19:14:24 19456 --a------ C:\WINDOWS\system32\tcpsvcs.exe
2007-03-02 19:14:24 47104 --a------ C:\WINDOWS\system32\tcpmonui.dll
2007-03-02 19:14:24 46592 --a------ C:\WINDOWS\system32\tcpmon.dll
2007-03-02 19:14:24 14848 --a------ C:\WINDOWS\system32\tcpmib.dll
2007-03-02 19:14:24 13312 --a------ C:\WINDOWS\system32\tcmsetup.exe
2007-03-02 19:14:24 143360 --a------ C:\WINDOWS\system32\taskmgr.exe
2007-03-02 19:14:24 15872 --a------ C:\WINDOWS\system32\taskman.exe
2007-03-02 19:14:24 87040 --a------ C:\WINDOWS\system32\tapiui.dll
2007-03-02 19:14:24 5632 --a------ C:\WINDOWS\system32\tapiperf.dll
2007-03-02 19:14:24 181760 --a------ C:\WINDOWS\system32\tapi32.dll
2007-03-02 19:14:24 860160 --a------ C:\WINDOWS\system32\tapi3.dll
2007-03-02 19:14:24 19200 --a------ C:\WINDOWS\system32\tapi.dll
2007-03-02 19:14:24 18560 --a------ C:\WINDOWS\system32\drivers\tdi.sys
2007-03-02 19:14:24 225664 --a------ C:\WINDOWS\system32\drivers\tcpip6.sys
2007-03-02 19:14:24 359808 --a------ C:\WINDOWS\system32\drivers\tcpip.sys
2007-03-02 19:14:24 14976 --a------ C:\WINDOWS\system32\drivers\tape.sys
2007-03-02 19:14:23 118272 --a------ C:\WINDOWS\system32\t2embed.dll
2007-03-02 19:14:23 3072 --a------ C:\WINDOWS\system32\systray.exe
2007-03-02 19:14:23 1005056 --a------ C:\WINDOWS\system32\syssetup.dll
2007-03-02 19:14:23 107520 --a------ C:\WINDOWS\system32\sysocmgr.exe
2007-03-02 19:14:23 37888 --a------ C:\WINDOWS\system32\syskey.exe
2007-03-02 19:14:23 15872 --a------ C:\WINDOWS\system32\sysinv.dll
2007-03-02 19:14:23 19216 --a------ C:\WINDOWS\system32\sysedit.exe
2007-03-02 19:14:22 197120 --a------ C:\WINDOWS\system32\syncui.dll
2007-03-02 19:14:22 57856 --a------ C:\WINDOWS\system32\synceng.dll
2007-03-02 19:14:22 51200 --a------ C:\WINDOWS\system32\syncapp.exe
2007-03-02 19:14:22 139264 --a------ C:\WINDOWS\system32\swprv.dll
2007-03-02 19:14:22 6144 --a------ C:\WINDOWS\system32\svcpack.dll
2007-03-02 19:14:22 14336 --a------ C:\WINDOWS\system32\svchost.exe
2007-03-02 19:14:21 9216 --a------ C:\WINDOWS\system32\subst.exe
2007-03-02 19:14:21 246814 --a------ C:\WINDOWS\system32\strmdll.dll
2007-03-02 19:14:21 4208 --a------ C:\WINDOWS\system32\storage.dll
2007-03-02 19:14:21 122368 --a------ C:\WINDOWS\system32\stobject.dll
2007-03-02 19:14:21 14848 --a------ C:\WINDOWS\system32\stimon.exe
2007-03-02 19:14:21 138240 --a------ C:\WINDOWS\system32\sti_ci.dll
2007-03-02 19:14:21 68096 --a------ C:\WINDOWS\system32\sti.dll
2007-03-02 19:14:21 684032 --a------ C:\WINDOWS\system32\sstext3d.scr
2007-03-02 19:14:21 14336 --a------ C:\WINDOWS\system32\ssstars.scr
2007-03-02 19:14:21 610304 --a------ C:\WINDOWS\system32\sspipes.scr
2007-03-02 19:14:21 47104 --a------ C:\WINDOWS\system32\ssmypics.scr
2007-03-02 19:14:20 18944 --a------ C:\WINDOWS\system32\ssmyst.scr
2007-03-02 19:14:20 20992 --a------ C:\WINDOWS\system32\ssmarque.scr
2007-03-02 19:14:20 393216 --a------ C:\WINDOWS\system32\ssflwbox.scr
2007-03-02 19:14:20 71680 --a------ C:\WINDOWS\system32\ssdpsrv.dll
2007-03-02 19:14:20 34816 --a------ C:\WINDOWS\system32\ssdpapi.dll
2007-03-02 19:14:20 19968 --a------ C:\WINDOWS\system32\ssbezier.scr
2007-03-02 19:14:20 708608 --a------ C:\WINDOWS\system32\ss3dfo.scr
2007-03-02 19:14:20 96768 --a------ C:\WINDOWS\system32\srvsvc.dll
2007-03-02 19:14:20 332928 --a------ C:\WINDOWS\system32\drivers\srv.sys
2007-03-02 19:14:19 49179 --a------ C:\WINDOWS\system32\sqlwoa.dll
2007-03-02 19:14:19 24603 --a------ C:\WINDOWS\system32\sqlwid.dll
2007-03-02 19:14:19 180800 --a------ C:\WINDOWS\system32\sqlunirl.dll
2007-03-02 19:14:19 9728 --a------ C:\WINDOWS\system32\sprestrt.exe
2007-03-02 19:14:18 74752 --a------ C:\WINDOWS\system32\spoolss.dll
2007-03-02 19:14:12 25088 --a------ C:\WINDOWS\system32\sort.exe
2007-03-02 19:14:11 5632 --a------ C:\WINDOWS\system32\softpub.dll
2007-03-02 19:14:11 184320 --a------ C:\WINDOWS\system32\snmpsnap.dll
2007-03-02 19:14:11 18944 --a------ C:\WINDOWS\system32\snmpapi.dll
2007-03-02 19:14:11 50688 --a------ C:\WINDOWS\system32\smss.exe
2007-03-02 19:14:11 93184 --a------ C:\WINDOWS\system32\smlogsvc.exe
2007-03-02 19:14:11 370688 --a------ C:\WINDOWS\system32\smlogcfg.dll
2007-03-02 19:14:10 16384 --a------ C:\WINDOWS\system32\slbrccsp.dll
2007-03-02 19:14:10 98304 --a------ C:\WINDOWS\system32\slbiop.dll
2007-03-02 19:14:10 306176 --a------ C:\WINDOWS\system32\slbcsp.dll
2007-03-02 19:14:10 25600 --a------ C:\WINDOWS\system32\slayerxp.dll
2007-03-02 19:14:10 14592 --a------ C:\WINDOWS\system32\drivers\smclib.sys
2007-03-02 19:14:09 26112 --a------ C:\WINDOWS\system32\skeys.exe
2007-03-02 19:14:09 5632 --a------ C:\WINDOWS\system32\skdll.dll
2007-03-02 19:14:09 13824 --a------ C:\WINDOWS\system32\sisbkup.dll
2007-03-02 19:14:09 71168 --a------ C:\WINDOWS\system32\sigverif.exe
2007-03-02 19:14:09 13824 --a------ C:\WINDOWS\system32\sigtab.dll
2007-03-02 19:14:09 20480 --a------ C:\WINDOWS\system32\shutdown.exe
2007-03-02 19:14:09 28160 --a------ C:\WINDOWS\system32\shscrap.dll
2007-03-02 19:14:08 78848 --a------ C:\WINDOWS\system32\shrpubw.exe
2007-03-02 19:14:08 42496 --a------ C:\WINDOWS\system32\shmgrate.exe
2007-03-02 19:14:08 440320 --a------ C:\WINDOWS\system32\shimgvw.dll
2007-03-02 19:14:08 65536 --a------ C:\WINDOWS\system32\shimeng.dll
2007-03-02 19:14:08 68096 --a------ C:\WINDOWS\system32\shgina.dll
2007-03-02 19:14:08 25088 --a------ C:\WINDOWS\system32\shfolder.dll
2007-03-02 19:14:07 5120 --a------ C:\WINDOWS\system32\shell.dll
2007-03-02 19:14:07 572416 --a------ C:\WINDOWS\system32\shdoclc.dll
2007-03-02 19:14:07 882 --a------ C:\WINDOWS\system32\share.exe
2007-03-02 19:14:06 23552 --a------ C:\WINDOWS\system32\sfmapi.dll
2007-03-02 19:14:06 1548288 --a------ C:\WINDOWS\system32\sfcfiles.dll
2007-03-02 19:14:06 142336 --a------ C:\WINDOWS\system32\sfc_os.dll
2007-03-02 19:14:06 10240 --a------ C:\WINDOWS\system32\sfc.exe
2007-03-02 19:14:06 5120 --a------ C:\WINDOWS\system32\sfc.dll
2007-03-02 19:14:06 12067 --a------ C:\WINDOWS\system32\setver.exe
2007-03-02 19:14:06 421376 --a------ C:\WINDOWS\system32\setupdll.dll
2007-03-02 19:14:06 1003520 --a------ C:\WINDOWS\system32\setupapi.dll
2007-03-02 19:14:05 23040 --a------ C:\WINDOWS\system32\setup.exe
2007-03-02 19:14:05 32768 --a------ C:\WINDOWS\system32\sethc.exe
2007-03-02 19:14:05 14848 --a------ C:\WINDOWS\system32\serwvdrv.dll
2007-03-02 19:14:05 14848 --a------ C:\WINDOWS\system32\serialui.dll
2007-03-02 19:14:05 13824 --a------ C:\WINDOWS\system32\senscfg.dll
2007-03-02 19:14:05 6656 --a------ C:\WINDOWS\system32\sensapi.dll
2007-03-02 19:14:05 38912 --a------ C:\WINDOWS\system32\sens.dll
2007-03-02 19:14:05 55296 --a------ C:\WINDOWS\system32\sendmail.dll
2007-03-02 19:14:05 29696 --a------ C:\WINDOWS\system32\sendcmsg.dll
2007-03-02 19:14:05 5632 --a------ C:\WINDOWS\system32\security.dll
2007-03-02 19:14:05 55808 --a------ C:\WINDOWS\system32\secur32.dll
2007-03-02 19:14:05 18944 --a------ C:\WINDOWS\system32\seclogon.dll
2007-03-02 19:14:05 130048 --a------ C:\WINDOWS\system32\sdpblb.dll
2007-03-02 19:14:05 27440 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
2007-03-02 19:14:04 78848 --a------ C:\WINDOWS\system32\sdbinst.exe
2007-03-02 19:14:04 151552 --a------ C:\WINDOWS\system32\scrrun.dll
2007-03-02 19:14:04 159744 --a------ C:\WINDOWS\system32\scrobj.dll
2007-03-02 19:14:04 9216 --a------ C:\WINDOWS\system32\scrnsave.scr
2007-03-02 19:14:04 57856 --a------ C:\WINDOWS\system32\scripto.dll
2007-03-02 19:14:04 26624 --a------ C:\WINDOWS\system32\scredir.dll
2007-03-02 19:14:04 22016 --a------ C:\WINDOWS\system32\sclgntfy.dll
2007-03-02 19:14:[/code]

[ Dodano: Dzisiaj o 18:17 ]
Cos nie moge tego w code ani quote zrobic, wyskakuje ze za duzo charakterow... co zrobic?na serwerek? watpie.,,,

[wojtas]

log musi byc w tagach ale i tak nic nie ma w nim tylko mowie nie dzilalaj Ci rozszerzenie podane wyzej przeze mnie

[biigos]

Czyli co mam zrobic? sciagnac je ze stronki ktora wyzej podales?normalnie sciagnalem to rozszerzenie w ktorym znajdowaly sie .bat
.com
.pif
.scr i niezadzialalo...

[wojtas]

a sprobuj;

http://securityresponse.symantec.com/avcenter/UnHookExec.inf ]

kliknij prawym i zainstaluj

[biigos]

ujj teraz wogole mi sie system nei wlacza...nawet w awaryjna nie moge wejsc nic..no nic wlaczam i pokazuje sie firmy tego komputera(normalnie ona sie pokazuje i wczytuje sie bios itp...)a teraz nic... wrrr

[wojtas]

ale co sie dzieje z kompem?? a probowales ostatnia dobra konfiguracja ??

[biigos]

musialem go kilkanascie razy odpalic zeby normalnie sie uruchomil...nie moglem ostatniej dobrej konfiguracji bo zawieszal sie jeszcze przed mozliwoscia nacisniecia f8,,, teraz niby chodzi, z tym ze okienko jest zawsze, a probowalem twoja stronke wyzej...nic z tego....
Pzdr