Problem z internetem - strasznie wolny

**Posty:** 154 · przez **Darkman0** 08 Sty 2011, 15:54

Witam. Od niedawna mam internet, lecz kilka dni po jego załatwieniu prędkość przesyłu danych gwałtownie spadła. Próbowałem korzystać z takich programów jak "Przyspiesz komputer" itp., lecz to nic nie dawało. Proszę o radę, co mógłbym zrobić, by przyspieszyć internet (bo dużo pobieram, a jak zwykle pobiera mi się 4kB na sekundę, to można wpaść w szał...)
Dodaję załącznik - screen z menedżera zadań z uruchomionymi procesami.

**Posty:** 18165 · przez **wojtas** 08 Sty 2011, 16:02

zobaczymy

Proszę zastosować się do obowiązkowych zasad w dziale bezpieczeństwo, wstaw odpowiednie 3 logi

Darkman0 napisał(a):programów jak "Przyspiesz komputer

nie stosuj takich progsów, to nic nie da ;D

**Posty:** 4459 · przez **jarski185** 08 Sty 2011, 16:05

Darkman0 napisał(a):programów jak "Przyspiesz komputer"

Wszystkie usuń za pomocą revo uninstaller.
Napisz jaki masz internet, w jaki sposób pobierasz. Otwórz wiersz poleceń.

Kod: Zaznacz wszystko: Wiersz polecenia uruchamiamy wpisując w menu Uruchom komendę cmd.

wpisz netstat -b i daj screen w wynikiem.
ps. Screeny jak chcesz dawać to na up.programosy.pl i przeklej link.

**Posty:** 154 · przez **Darkman0** 08 Sty 2011, 16:24

Na razie pierwszy: (RSIT)

Kod: Zaznacz wszystko: Logfile of random's system information tool 1.08 (written by random/random) Run by Wojciech at 2011-01-08 15:05:48 Microsoft Windows XP Professional Dodatek Service Pack 3 System drive C: has 3 GB (6%) free of 53 GB Total RAM: 2047 MB (78% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:06:41, on 2011-01-08 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOW\System32\smss.exe C:\WINDOW\system32\winlogon.exe C:\WINDOW\system32\services.exe C:\WINDOW\system32\lsass.exe C:\WINDOW\system32\svchost.exe C:\WINDOW\System32\svchost.exe C:\Program Files\Sygate\SPF\smc.exe D:\Program Files\Alwil Software\Avast5\afwServ.exe D:\Program Files\Alwil Software\Avast5\AvastSvc.exe C:\WINDOW\Explorer.EXE C:\WINDOW\system32\spoolsv.exe C:\WINDOW\system32\RUNDLL32.EXE C:\Program Files\D-Tools\daemon.exe D:\Program Files\QuickTime\QTTask.exe D:\Program Files\Alwil Software\Avast5\avastUI.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOW\system32\FsUsbExService.Exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOW\system32\nvsvc32.exe C:\WINDOW\system32\wuauclt.exe C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Wojciech\Moje dokumenty\Downloads\RSIT.exe C:\Program Files\trend micro\Wojciech.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=101764&l=dis R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOW\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOW\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -lock O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [avast5] "D:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOW\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOW\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOW\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOW\System32\CTFMON.EXE (User 'Default user') O10 - Unknown file in Winsock LSP: c:\window\system32\nwprovau.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOW\system32\browseui.dll O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOW\system32\browseui.dll O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Firewall - AVAST Software - D:\Program Files\Alwil Software\Avast5\afwServ.exe O23 - Service: FsUsbExService - Teruten - C:\WINDOW\system32\FsUsbExService.Exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOW\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe -- End of file - 4749 bytes ======Scheduled tasks folder====== C:\WINDOW\tasks\Ad-Aware Update (Weekly).job C:\WINDOW\tasks\AppleSoftwareUpdate.job C:\WINDOW\tasks\GoogleUpdateTaskUserS-1-5-21-448539723-838170752-725345543-1003Core.job C:\WINDOW\tasks\GoogleUpdateTaskUserS-1-5-21-448539723-838170752-725345543-1003UA.job C:\WINDOW\tasks\SLOW-PCfighter-Wojciech-Startup.job C:\WINDOW\tasks\WGASetup.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-24 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-11-24 79648] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"=C:\WINDOW\system32\NvCpl.dll [2007-11-06 8523776] "NvMediaCenter"=C:\WINDOW\system32\NvMcTray.dll [2007-11-06 81920] "DAEMON Tools-1033"=C:\Program Files\D-Tools\daemon.exe [2004-08-22 81920] "SkyTel"=C:\WINDOW\SkyTel.EXE [2006-05-16 2879488] "RTHDCPL"=C:\WINDOW\RTHDCPL.EXE [2006-09-12 16264192] "SmcService"=C:\PROGRA~1\Sygate\SPF\smc.exe [2004-10-15 2577632] "QuickTime Task"=D:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888] "NPSStartup"= [] "avast5"=D:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-12-24 3396624] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-04-02 102400] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] C:\WINDOW\system32\ctfmon.exe [2011-01-08 24064] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe [2008-03-20 2127296] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552] Ad-Aware Update (Weekly).job AppleSoftwareUpdate.job GoogleUpdateTaskUserS-1-5-21-448539723-838170752-725345543-1003Core.job GoogleUpdateTaskUserS-1-5-21-448539723-838170752-725345543-1003UA.job SA.DAT SLOW-PCfighter-Wojciech-Startup.job WGASetup.job [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"=1 "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Axesstel\AxessManager\AxessManager.exe"="C:\Program Files\Axesstel\AxessManager\AxessManager.exe:*:Enabled:AxessManager Application" "C:\Users\Wojciech\Moje dokumenty\VideoConverterSetup.exe"="C:\Users\Wojciech\Moje dokumenty\VideoConverterSetup.exe:*:Enabled:InstallerCore™" "C:\Users\Wojciech\Moje dokumenty\VideoToMp3Setup.exe"="C:\Users\Wojciech\Moje dokumenty\VideoToMp3Setup.exe:*:Enabled:InstallerCore™" "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA" "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "C:\Program Files\Metin2\metin2.bin"="C:\Program Files\Metin2\metin2.bin:*:Enabled:metin2" "C:\Program Files\Metin2\metin2client.bin"="C:\Program Files\Metin2\metin2client.bin:*:Enabled:metin2client" "C:\WINDOW\system32\dpvsetup.exe"="C:\WINDOW\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" "C:\WINDOW\system32\rundll32.exe"="C:\WINDOW\system32\rundll32.exe:*:Enabled:Uruchamia plik DLL jako aplikację" "C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server" "C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server" "D:\Program Files\Ubisoft\Heroes of Might and Magic III - Zlota Edycja\Heroes3.exe"="D:\Program Files\Ubisoft\Heroes of Might and Magic III - Zlota Edycja\Heroes3.exe:*:Enabled:Heroes of Might and Magic® III (CDP)" "C:\WINDOW\system32\dplaysvr.exe"="C:\WINDOW\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" ======List of files/folders created in the last 1 months====== 2011-01-08 14:35:56 ----DC---- C:\rsit 2011-01-08 14:35:56 ----DC---- C:\Program Files\trend micro 2011-01-08 14:12:10 ----AC---- C:\WINDOW\system32\ctfmon.exe.backup 2011-01-08 14:00:20 ----DC---- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\Fighters 2011-01-08 13:52:07 ----DC---- C:\Program Files\Fighters 2011-01-06 16:44:21 ----DC---- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\Canneverbe Limited 2011-01-06 16:44:20 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\Canneverbe Limited 2011-01-06 16:42:53 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\OpenCandy 2011-01-06 16:42:52 ----DC---- C:\Program Files\CDBurnerXP 2011-01-02 21:52:02 ----AC---- C:\cmd.txt 2011-01-02 21:50:20 ----DC---- C:\Program Files\MP4 Converter 2011-01-02 21:32:34 ----DC---- C:\Mp3 Output 2011-01-02 21:22:31 ----DC---- C:\32788R22FWJFW 2011-01-02 16:27:41 ----DC---- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\MSN6 2011-01-02 16:27:40 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\MSN6 2011-01-02 15:41:45 ----AC---- C:\WINDOW\ModemLog_Modem standardowy 56 000 bps.txt 2011-01-01 23:10:16 ----AC---- C:\WINDOW\system32\drivers\aswSP.sys 2011-01-01 23:10:16 ----AC---- C:\WINDOW\system32\drivers\aswFsBlk.sys 2011-01-01 23:10:15 ----AC---- C:\WINDOW\system32\drivers\aswSnx.sys 2011-01-01 23:10:14 ----AC---- C:\WINDOW\system32\drivers\aswFW.sys 2011-01-01 23:09:53 ----AC---- C:\WINDOW\system32\drivers\aswNdis2.sys 2011-01-01 23:09:52 ----AC---- C:\WINDOW\system32\drivers\aswTdi.sys 2011-01-01 23:09:52 ----AC---- C:\WINDOW\system32\drivers\aswRdr.sys 2011-01-01 23:09:52 ----AC---- C:\WINDOW\system32\drivers\aswmon2.sys 2011-01-01 23:09:52 ----AC---- C:\WINDOW\system32\drivers\aswmon.sys 2011-01-01 23:09:51 ----AC---- C:\WINDOW\system32\drivers\aavmker4.sys 2011-01-01 23:09:38 ----AC---- C:\WINDOW\system32\drivers\aswNdis.sys 2011-01-01 23:09:37 ----AC---- C:\WINDOW\system32\aswBoot.exe 2011-01-01 15:45:40 ----DC---- C:\Avast 2010-12-29 16:50:14 ----AC---- C:\WINDOW\system32\drivers\ss_bwhnt.sys 2010-12-29 16:50:14 ----AC---- C:\WINDOW\system32\drivers\ss_bwh.sys 2010-12-29 16:50:14 ----AC---- C:\WINDOW\system32\drivers\ss_bmdm.sys 2010-12-29 16:50:14 ----AC---- C:\WINDOW\system32\drivers\ss_bmdfl.sys 2010-12-29 16:50:14 ----AC---- C:\WINDOW\system32\drivers\ss_bcmnt.sys 2010-12-29 16:50:14 ----AC---- C:\WINDOW\system32\drivers\ss_bcm.sys 2010-12-29 16:50:14 ----AC---- C:\WINDOW\system32\drivers\ss_bbus.sys 2010-12-29 16:49:44 ----DC---- C:\Program Files\MarkAny 2010-12-29 16:44:31 ----DC---- C:\WINDOW\system32\appmgmt 2010-12-29 16:42:58 ----DC---- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\PC Suite 2010-12-29 16:42:57 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\PC Suite 2010-12-29 16:36:55 ----AC---- C:\WINDOW\system32\nmwcdcls.dll 2010-12-29 16:36:46 ----AC---- C:\WINDOW\system32\drivers\pccsmcfd.sys 2010-12-29 16:36:05 ----DC---- C:\Program Files\DIFX 2010-12-29 16:35:59 ----AC---- C:\WINDOW\system32\FsUsbExService.Exe 2010-12-29 16:35:59 ----AC---- C:\WINDOW\system32\FsUsbExDisk.Sys 2010-12-29 16:35:59 ----AC---- C:\WINDOW\system32\FsUsbExDevice.Dll 2010-12-29 16:35:20 ----DC---- C:\Program Files\PC Connectivity Solution 2010-12-24 18:20:50 ----DC---- C:\WINDOW\RegisteredPackages 2010-12-23 00:40:32 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\Opera 2010-12-22 21:18:55 ----DC---- C:\Program Files\Common Files\3DO Shared 2010-12-22 17:07:00 ----SDC---- C:\ComboFix 2010-12-22 17:06:59 ----AC---- C:\WINDOW\system32\CF20566.exe 2010-12-22 16:41:22 ----DC---- C:\Program Files\Opera22 2010-12-20 20:31:33 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\Apple Computer 2010-12-20 20:25:33 ----DC---- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\Apple Computer 2010-12-20 20:24:59 ----DC---- C:\Program Files\Apple Software Update 2010-12-20 20:24:59 ----DC---- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\Apple 2010-12-19 21:39:27 ----DC---- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\QuickTime 2010-12-19 21:29:10 ----DC---- C:\WINDOW\Crime Scene Investigation 2010-12-16 20:43:08 ----AC---- C:\WINDOW\system32\javaws.exe 2010-12-16 20:43:08 ----AC---- C:\WINDOW\system32\javaw.exe 2010-12-16 20:43:08 ----AC---- C:\WINDOW\system32\java.exe 2010-12-16 09:26:09 ----HDC---- C:\WINDOW\$NtUninstallKB2296199$ 2010-12-16 09:26:05 ----HDC---- C:\WINDOW\$NtUninstallKB2443105$ 2010-12-16 09:25:41 ----HDC---- C:\WINDOW\$NtUninstallKB2440591$ 2010-12-16 09:25:36 ----HDC---- C:\WINDOW\$NtUninstallKB2443685$ 2010-12-16 09:25:33 ----HDC---- C:\WINDOW\$NtUninstallKB2436673$ 2010-12-16 09:25:29 ----HDC---- C:\WINDOW\$NtUninstallKB2467659$ 2010-12-16 09:24:14 ----HDC---- C:\WINDOW\$NtUninstallKB2423089$ 2010-12-12 18:29:06 ----SHDC---- C:\RECYCLER 2010-12-12 18:18:35 ----AC---- C:\WINDOW\system32\drivers\wg6n.sys 2010-12-12 18:18:34 ----AC---- C:\WINDOW\system32\drivers\wg5n.sys 2010-12-12 18:18:34 ----AC---- C:\WINDOW\system32\drivers\wg4n.sys 2010-12-12 18:18:34 ----AC---- C:\WINDOW\system32\drivers\wg3n.sys 2010-12-12 18:18:33 ----AC---- C:\WINDOW\system32\drivers\wpsdrvnt.sys 2010-12-12 18:18:33 ----AC---- C:\WINDOW\system32\drivers\Teefer.sys 2010-12-12 18:18:30 ----AC---- C:\WINDOW\system32\SSSensor.dll 2010-12-12 18:18:26 ----DC---- C:\Program Files\Sygate 2010-12-12 18:18:13 ----DC---- C:\Program Files\Common Files\Wise Installation Wizard 2010-12-09 21:51:12 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\dvdcss ======List of files/folders modified in the last 1 months====== 2011-01-08 15:04:34 ----DC---- C:\WINDOW\temp 2011-01-08 15:04:15 ----DC---- C:\WINDOW 2011-01-08 15:02:37 ----AC---- C:\WINDOW\SchedLgU.Txt 2011-01-08 15:02:35 ----DC---- C:\WINDOW\system32\CatRoot2 2011-01-08 14:54:22 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\BitTorrent 2011-01-08 14:40:06 ----DC---- C:\WINDOW\Prefetch 2011-01-08 14:35:56 ----RDC---- C:\Program Files 2011-01-08 14:14:53 ----DC---- C:\WINDOW\system32 2011-01-08 14:14:48 ----DC---- C:\WINDOW\system32\dllcache 2011-01-08 14:14:48 ----AC---- C:\WINDOW\system32\ctfmon.exe 2011-01-08 14:00:25 ----SDC---- C:\WINDOW\Tasks 2011-01-08 14:00:19 ----SHDC---- C:\WINDOW\Installer 2011-01-08 14:00:10 ----DC---- C:\Config.Msi 2011-01-08 13:46:41 ----DC---- C:\Program Files\Przyspiesz Komputer 2011-01-06 21:04:54 ----HDC---- C:\Program Files\InstallShield Installation Information 2011-01-06 20:13:56 ----AC---- C:\WINDOW\system32\PerfStringBackup.INI 2011-01-06 20:12:44 ----DC---- C:\WINDOW\network diagnostic 2011-01-06 16:43:46 ----DC---- C:\WINDOW\system32\drivers 2011-01-06 15:48:53 ----AC---- C:\WINDOW\imsins.BAK 2011-01-06 15:48:49 ----DC---- C:\WINDOW\system32\inetsrv 2011-01-04 06:08:51 ----DC---- C:\WINDOW\security 2011-01-02 18:18:41 ----SDC---- C:\Documents and Settings\Wojciech\Dane aplikacji\Microsoft 2011-01-02 15:41:04 ----DC---- C:\Program Files\Common Files\Services 2011-01-02 15:36:12 ----DC---- C:\WINDOW\Help 2011-01-02 15:30:33 ----AC---- C:\WINDOW\system.ini 2011-01-02 15:14:55 ----DC---- C:\WINDOW\Minidump 2011-01-01 23:12:05 ----DC---- C:\WINDOW\system32\CatRoot 2011-01-01 23:10:07 ----HDC---- C:\WINDOW\inf 2011-01-01 23:09:45 ----DC---- C:\WINDOW\WinSxS 2011-01-01 15:08:35 ----DC---- C:\Program Files\Common Files 2011-01-01 15:07:38 ----DC---- C:\Program Files\Lavasoft 2011-01-01 15:07:38 ----DC---- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\Lavasoft 2011-01-01 15:07:25 ----DC---- C:\WINDOW\system32\DRVSTORE 2010-12-29 16:50:23 ----DC---- C:\Program Files\Samsung 2010-12-29 16:49:57 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\Samsung 2010-12-29 16:36:20 ----DC---- C:\WINDOW\system32\Samsung_USB_Drivers 2010-12-25 18:58:08 ----DC---- C:\Program Files\Metin2 2010-12-25 17:08:09 ----DC---- C:\Program Files\Windows Media Player 2010-12-22 17:10:56 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\vlc 2010-12-22 17:07:24 ----DC---- C:\Qoobox 2010-12-21 10:29:43 ----DC---- C:\Program Files\Gadu-Gadu 2010-12-20 20:26:05 ----DC---- C:\Program Files\Internet Explorer 2010-12-19 21:35:17 ----RSDC---- C:\WINDOW\Fonts 2010-12-16 20:43:06 ----DC---- C:\Program Files\Java 2010-12-16 16:56:15 ----AC---- C:\WINDOW\OEWABLog.txt 2010-12-16 16:56:03 ----RDC---- C:\Users 2010-12-16 09:25:49 ----DC---- C:\WINDOW\ie8updates 2010-12-16 09:25:46 ----HDC---- C:\WINDOW\$hf_mig$ 2010-12-16 09:24:22 ----AC---- C:\WINDOW\system32\MRT.exe 2010-12-16 09:24:16 ----DC---- C:\Program Files\Outlook Express 2010-12-13 20:12:32 ----DC---- C:\Documents and Settings\Wojciech\Dane aplikacji\DivX 2010-12-11 10:30:05 ----DC---- C:\Program Files\Mozilla Firefox 3.1 Beta 2 ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 aswNdis;avast! Firewall NDIS Filter Service; C:\WINDOW\system32\DRIVERS\aswNdis.sys [2010-12-24 12112] R0 aswNdis2;avast! Firewall Core Firewall Service; C:\WINDOW\system32\drivers\aswNdis2.sys [2010-12-24 189776] R0 d347bus;d347bus; C:\WINDOW\system32\DRIVERS\d347bus.sys [2004-08-22 155136] R0 d347prt;d347prt; C:\WINDOW\System32\Drivers\d347prt.sys [2004-08-22 5248] R0 PxHelp20;PxHelp20; C:\WINDOW\System32\Drivers\PxHelp20.sys [2010-07-12 45648] R0 Teefer;Teefer for NT; C:\WINDOW\SYSTEM32\Drivers\Teefer.sys [2004-10-15 60496] R0 viaagp1;VIA AGP Filter; C:\WINDOW\System32\DRIVERS\viaagp1.sys [2003-07-01 27904] R0 videX32;videX32; C:\WINDOW\System32\DRIVERS\videX32.sys [2006-02-23 9728] R0 xfilt;VIA SATA IDE Hot-plug Driver; C:\WINDOW\System32\DRIVERS\xfilt.sys [2006-02-23 11264] R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOW\system32\drivers\Aavmker4.sys [2010-12-24 29264] R1 aswFW;avast! TDI Firewall driver; C:\WINDOW\system32\drivers\aswFW.sys [2010-12-24 99792] R1 aswRdr;aswRdr; C:\WINDOW\system32\drivers\aswRdr.sys [2010-12-24 23632] R1 aswSnx;aswSnx; C:\WINDOW\system32\drivers\aswSnx.sys [2010-12-24 357456] R1 aswSP;aswSP; C:\WINDOW\system32\drivers\aswSP.sys [2010-12-24 293584] R1 aswTdi;avast! Network Shield Support; C:\WINDOW\system32\drivers\aswTdi.sys [2010-12-24 47440] R1 intelppm;Sterownik procesora Intel; C:\WINDOW\system32\DRIVERS\intelppm.sys [2008-04-14 40448] R1 Tcpip6;Sterownik protokołu IPv6 Microsoft; C:\WINDOW\system32\DRIVERS\tcpip6.sys [2010-02-11 226880] R1 wpsdrvnt;wpsdrvnt; \??\C:\WINDOW\system32\drivers\wpsdrvnt.sys [] R2 aswFsBlk;aswFsBlk; C:\WINDOW\system32\drivers\aswFsBlk.sys [2010-12-24 17744] R2 aswMon2;aswMon2; C:\WINDOW\system32\drivers\aswMon2.sys [2010-12-24 100176] R2 atksgt;atksgt; C:\WINDOW\system32\DRIVERS\atksgt.sys [2010-11-07 271360] R2 lirsgt;lirsgt; C:\WINDOW\system32\DRIVERS\lirsgt.sys [2010-11-07 18048] R2 NwlnkIpx;Protokół transportowy zgodny z NWLink IPX/SPX/NetBIOS; C:\WINDOW\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320] R2 NwlnkNb;System NetBIOS NWLink; C:\WINDOW\system32\DRIVERS\nwlnknb.sys [2001-08-17 63232] R2 NwlnkSpx;Protokół NWLink SPX/SPXII; C:\WINDOW\system32\DRIVERS\nwlnkspx.sys [2001-08-17 55936] R2 wg3n;SyGate for NT, wg3n; C:\WINDOW\SYSTEM32\Drivers\wg3n.sys [2004-10-15 14568] R2 wg4n;SyGate for NT, wg4n; C:\WINDOW\SYSTEM32\Drivers\wg4n.sys [2004-10-15 14568] R2 wg5n;SyGate for NT, wg5n; C:\WINDOW\SYSTEM32\Drivers\wg5n.sys [2004-10-15 14568] R2 wg6n;SyGate for NT, wg6n; C:\WINDOW\SYSTEM32\Drivers\wg6n.sys [2004-10-15 14568] R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOW\System32\DRIVERS\fetnd5bv.sys [2006-03-15 43008] R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOW\system32\FsUsbExDisk.SYS [] R3 HDAudBus;Sterownik magistrali Microsoft UAA dla High Definition Audio; C:\WINDOW\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 hidusb;Sterownik Microsoft klasy HID; C:\WINDOW\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOW\system32\drivers\RtkHDAud.sys [2006-09-12 4381184] R3 mouhid;Sterownik myszy HID; C:\WINDOW\System32\DRIVERS\mouhid.sys [2001-10-26 12160] R3 nv;nv; C:\WINDOW\System32\DRIVERS\nv4_mini.sys [2007-11-06 7429088] R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOW\System32\Drivers\RootMdm.sys [2001-08-17 5888] R3 tunmp;Sterownik karty Microsoft Tun Miniport; C:\WINDOW\system32\DRIVERS\tunmp.sys [2008-04-13 12288] R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOW\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] S0 Lbd;Lbd; C:\WINDOW\system32\DRIVERS\Lbd.sys [] S3 ASFWHide;ASFWHide; \??\C:\DOCUME~1\Wojciech\USTAWI~1\Temp\ASFWHide [] S3 Axtmvflt;Axesstel USB Filter Service; C:\WINDOW\system32\DRIVERS\Axtmvflt.sys [2009-04-21 3456] S3 Axtmvprt;Axesstel Diagnostic Port; C:\WINDOW\System32\Drivers\Axtmvprt.sys [2009-04-21 38784] S3 catchme;catchme; \??\C:\DOCUME~1\Wojciech\USTAWI~1\Temp\catchme.sys [] S3 EagleNT;EagleNT; \??\C:\WINDOW\system32\drivers\EagleNT.sys [] S3 FETNDIS;Sterownik NT karty VIA PCI 10/100Mb Fast Ethernet; C:\WINDOW\System32\DRIVERS\fetnd5.sys [] S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOW\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632] S3 rtl8139;Sterownik NT karty Realtek RTL8139(A/B/C)-based PCI Fast Ethernet; C:\WINDOW\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992] S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOW\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112] S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOW\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976] S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOW\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856] S3 StarOpen;StarOpen; C:\WINDOW\system32\drivers\StarOpen.sys [2009-11-12 7168] S3 usbaudio;Sterownik audio USB (WDM); C:\WINDOW\system32\drivers\usbaudio.sys [2008-04-13 60032] S3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOW\System32\DRIVERS\usbccgp.sys [2008-04-13 32128] S3 usbstor;Sterownik magazynu masowego USB; C:\WINDOW\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S4 vsdatant;vsdatant; C:\WINDOW\system32\drivers\vsdatant.sys [] S4 WS2IFSL;Środowisko wspomagające dostawcę usług innych niż IFS - Windows Socket 2.0; C:\WINDOW\System32\drivers\ws2ifsl.sys [2001-08-17 12032] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 6to4;Usługa Pomocnik IPv6; C:\WINDOW\system32\svchost.exe [2008-04-14 14336] R2 avast! Antivirus;avast! Antivirus; D:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-12-24 40384] R2 avast! Firewall;avast! Firewall; D:\Program Files\Alwil Software\Avast5\afwServ.exe [2010-12-24 119200] R2 FsUsbExService;FsUsbExService; C:\WINDOW\system32\FsUsbExService.Exe [2009-03-31 233472] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-11-12 153376] R2 NMSAccess;NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOW\system32\nvsvc32.exe [2007-11-06 155716] R2 SmcService;Sygate Personal Firewall; C:\Program Files\Sygate\SPF\smc.exe [2004-10-15 2577632] S3 aspnet_state;Usuga stanu ASP.NET; C:\WINDOW\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOW\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOW\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 idsvc;Windows CardSpace; C:\WINDOW\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOW\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF-----------------

**Posty:** 12734 · przez **Mikou@j** 08 Sty 2011, 16:25

Darkman0, coś pominąłeś.
Wstawiamy logi z OTL i Gmera. Poza tym umieszczamy je w tagach [code]. Wszystko jest opisane w linku od wojtasa,

**Posty:** 154 · przez **Darkman0** 08 Sty 2011, 16:56

Włączając OTL wyskakuje mi błąd "Aplikacja nie została właściwie zainicjowana (0xc000007b). Kliknij przycski OK, aby zakończyć aplikację."
Włączając GMER'a mam blue screen'a... Wygląda na to, że jeszcze jakiś wir się dostał ;/
A jeden screen uploaduje się ponad 15 minut... Dlatego jeszcze nie wysłałem linka ze screenem z Wierszem poleceń (bo blue screen przerwał wysyłanie...)

Dodano Dzisiaj, 16:45:
Proszę bardzo, screen z Wiersza Poleceń:
http://www.up.programosy.pl/view/czesc_1_1.jpg.html

Dodano Dzisiaj, 17:02:
A tutaj ostatnia część tego wiersza poleceń:
http://www.up.programosy.pl/view/czesc_6.jpg.html

Potrzebna będzie reszta screenów?

**Posty:** 18165 · przez **wojtas** 08 Sty 2011, 18:18

sciągnij wersję do OTL wersje Com i spróbuj odpalić , może w awaryjnym.

Darkman0 napisał(a):Włączając GMER'a mam blue screen'a

czytałeś ? programy emulujące napędy

**Posty:** 154 · przez **Darkman0** 08 Sty 2011, 18:50

Nom właśnie niedawno przeczytałem, odinstalowałem te emulatory i pozbyłem się SPTD. Teraz działa

Kod: Zaznacz wszystko: GMER 1.0.15.15530 - http://www.gmer.net Rootkit scan 2011-01-22 00:25:53 Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-7 WDC_WD1600JB-00GVC0 rev.08.02D08 Running: gmer.exe; Driver: C:\DOCUME~1\Wojciech\USTAWI~1\Temp\awldapoc.sys ---- System - GMER 1.0.15 ---- SSDT \??\C:\WINDOW\system32\drivers\wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) ZwAllocateVirtualMemory [0xAF203B30] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwAssignProcessToJobObject [0xB11B3610] SSDT \??\C:\WINDOW\system32\drivers\wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) ZwCreateThread [0xAF2036F0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwDebugActiveProcess [0xB11B3C10] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwDuplicateObject [0xB11B3730] SSDT \??\C:\WINDOW\system32\drivers\wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) ZwMapViewOfSection [0xAF203470] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwOpenProcess [0xB11B34B0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwOpenThread [0xB11B3570] SSDT \??\C:\WINDOW\system32\drivers\wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) ZwProtectVirtualMemory [0xAF203C50] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwQueueApcThread [0xB11B3790] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSetContextThread [0xB11B3690] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSetInformationThread [0xB11B3650] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSetSecurityObject [0xB11B37D0] SSDT \??\C:\WINDOW\system32\drivers\wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) ZwShutdownSystem [0xAF203990] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSuspendProcess [0xB11B3510] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSuspendThread [0xB11B3590] SSDT \??\C:\WINDOW\system32\drivers\wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) ZwTerminateProcess [0xAF2038D0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwTerminateThread [0xB11B35D0] SSDT \??\C:\WINDOW\system32\drivers\wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) ZwWriteVirtualMemory [0xAF203D60] ---- Kernel code sections - GMER 1.0.15 ---- .text C:\WINDOW\System32\DRIVERS\nv4_mini.sys section is writeable [0xB8040360, 0x3441C7, 0xE8000020] .text tcpip.sys!IPTransmit + 10FC AC4AAD3A 6 Bytes CALL F740EE50 Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) .text tcpip.sys!IPTransmit + 2A52 AC4AC690 6 Bytes CALL F740EE50 Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) .text tcpip.sys!IPRegisterProtocol + 930 AC4C2454 6 Bytes CALL F740EE50 Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) .text wanarp.sys AF2163FD 7 Bytes CALL F740EFA0 Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) .text C:\WINDOW\system32\DRIVERS\atksgt.sys section is writeable [0xA5265300, 0x3ACC8, 0xE8000020] .text C:\WINDOW\system32\DRIVERS\lirsgt.sys section is writeable [0xAC797300, 0x1B7E, 0xE8000020] ---- User code sections - GMER 1.0.15 ---- .text D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe[484] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 4 Bytes [C2, 04, 00, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtCreateFile + 6 7C90D0B4 4 Bytes [28, 00, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtCreateFile + B 7C90D0B9 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtMapViewOfSection + 6 7C90D524 1 Byte [28] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtMapViewOfSection + 6 7C90D524 4 Bytes [28, 03, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtMapViewOfSection + B 7C90D529 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenFile + 6 7C90D5A4 4 Bytes [68, 00, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenFile + B 7C90D5A9 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenProcess + 6 7C90D604 4 Bytes [A8, 01, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenProcess + B 7C90D609 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenProcessToken + 6 7C90D614 4 Bytes CALL 7B90EC1A .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenProcessToken + B 7C90D619 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenProcessTokenEx + 6 7C90D624 4 Bytes [A8, 02, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenProcessTokenEx + B 7C90D629 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenThread + 6 7C90D664 4 Bytes [68, 01, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenThread + B 7C90D669 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenThreadToken + 6 7C90D674 4 Bytes [68, 02, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenThreadToken + B 7C90D679 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenThreadTokenEx + 6 7C90D684 4 Bytes CALL 7B90EC8B .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtOpenThreadTokenEx + B 7C90D689 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtQueryAttributesFile + 6 7C90D714 4 Bytes [A8, 00, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtQueryAttributesFile + B 7C90D719 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtQueryFullAttributesFile + 6 7C90D7B4 4 Bytes CALL 7B90EDB9 .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtQueryFullAttributesFile + B 7C90D7B9 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtSetInformationFile + 6 7C90DC64 4 Bytes [28, 01, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtSetInformationFile + B 7C90DC69 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtSetInformationThread + 6 7C90DCB4 4 Bytes [28, 02, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtSetInformationThread + B 7C90DCB9 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 1 Byte [68] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 4 Bytes [68, 03, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] ntdll.dll!NtUnmapViewOfSection + B 7C90DF19 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtCreateFile + 6 7C90D0B4 4 Bytes [28, 00, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtCreateFile + B 7C90D0B9 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtMapViewOfSection + 6 7C90D524 1 Byte [28] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtMapViewOfSection + 6 7C90D524 4 Bytes [28, 03, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtMapViewOfSection + B 7C90D529 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenFile + 6 7C90D5A4 4 Bytes [68, 00, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenFile + B 7C90D5A9 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenProcess + 6 7C90D604 4 Bytes [A8, 01, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenProcess + B 7C90D609 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenProcessToken + 6 7C90D614 4 Bytes CALL 7B90EC1A .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenProcessToken + B 7C90D619 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenProcessTokenEx + 6 7C90D624 4 Bytes [A8, 02, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenProcessTokenEx + B 7C90D629 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenThread + 6 7C90D664 4 Bytes [68, 01, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenThread + B 7C90D669 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenThreadToken + 6 7C90D674 4 Bytes [68, 02, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenThreadToken + B 7C90D679 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenThreadTokenEx + 6 7C90D684 4 Bytes CALL 7B90EC8B .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtOpenThreadTokenEx + B 7C90D689 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtQueryAttributesFile + 6 7C90D714 4 Bytes [A8, 00, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtQueryAttributesFile + B 7C90D719 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtQueryFullAttributesFile + 6 7C90D7B4 4 Bytes CALL 7B90EDB9 .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtQueryFullAttributesFile + B 7C90D7B9 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtSetInformationFile + 6 7C90DC64 4 Bytes [28, 01, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtSetInformationFile + B 7C90DC69 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtSetInformationThread + 6 7C90DCB4 4 Bytes [28, 02, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtSetInformationThread + B 7C90DCB9 1 Byte [E2] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 1 Byte [68] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 4 Bytes [68, 03, 16, 00] .text C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] ntdll.dll!NtUnmapViewOfSection + B 7C90DF19 1 Byte [E2] ---- Kernel IAT/EAT - GMER 1.0.15 ---- IAT \SystemRoot\System32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisCloseAdapter] [F740FC70] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisOpenAdapter] [F740FBD0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisDeregisterProtocol] [F740FB10] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisRegisterProtocol] [F740F8E0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisRegisterProtocol] [F740F8E0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisOpenAdapter] [F740FBD0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisCloseAdapter] [F740FC70] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisDeregisterProtocol] [F740FB10] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\psched.sys[NDIS.SYS!NdisDeregisterProtocol] [F740FB10] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\psched.sys[NDIS.SYS!NdisRegisterProtocol] [F740F8E0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\psched.sys[NDIS.SYS!NdisOpenAdapter] [F740FBD0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\psched.sys[NDIS.SYS!NdisCloseAdapter] [F740FC70] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisRegisterProtocol] [F740F8E0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisDeregisterProtocol] [F740FB10] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisCloseAdapter] [F740FC70] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisOpenAdapter] [F740FBD0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!NdisCloseAdapter] [F740FC70] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!NdisOpenAdapter] [F740FBD0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!NdisRegisterProtocol] [F740F8E0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\wanarp.sys[NDIS.SYS!NdisDeregisterProtocol] [F740FB10] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\wanarp.sys[NDIS.SYS!NdisRegisterProtocol] [F740F8E0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\wanarp.sys[NDIS.SYS!NdisOpenAdapter] [F740FBD0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\wanarp.sys[NDIS.SYS!NdisCloseAdapter] [F740FC70] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\system32\DRIVERS\tcpip6.sys[NDIS.SYS!NdisRegisterProtocol] [F740F8E0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\system32\DRIVERS\tcpip6.sys[NDIS.SYS!NdisDeregisterProtocol] [F740FB10] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\system32\DRIVERS\tcpip6.sys[NDIS.SYS!NdisCloseAdapter] [F740FC70] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\system32\DRIVERS\tcpip6.sys[NDIS.SYS!NdisOpenAdapter] [F740FBD0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\system32\DRIVERS\nwlnkipx.sys[NDIS.SYS!NdisDeregisterProtocol] [F740FB10] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\system32\DRIVERS\nwlnkipx.sys[NDIS.SYS!NdisCloseAdapter] [F740FC70] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\system32\DRIVERS\nwlnkipx.sys[NDIS.SYS!NdisOpenAdapter] [F740FBD0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\system32\DRIVERS\nwlnkipx.sys[NDIS.SYS!NdisRegisterProtocol] [F740F8E0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisRegisterProtocol] [F740F8E0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisDeregisterProtocol] [F740FB10] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisCloseAdapter] [F740FC70] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisOpenAdapter] [F740FBD0] Teefer.sys (Teefer Driver/Sygate Technologies, Inc.) ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[1112] @ C:\WINDOW\system32\RPCRT4.dll [KERNEL32.dll!CreateNamedPipeW] 002C0010 IAT C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe[3684] @ C:\WINDOW\system32\RPCRT4.dll [KERNEL32.dll!CreateNamedPipeW] 002C0010 IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\Explorer.EXE [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\ole32.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) IAT C:\WINDOW\Explorer.EXE[3860] @ C:\WINDOW\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress] [5CFE7774] C:\WINDOW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) ---- Devices - GMER 1.0.15 ---- AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET) Device \Driver\Tcpip \Device\Ip wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) Device \Driver\Tcpip \Device\Tcp wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdir.sys (ESET Antivirus Network Redirector/ESET) Device \Driver\Tcpip \Device\Udp wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) Device \Driver\Tcpip \Device\RawIp wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) Device \Driver\Tcpip \Device\IPMULTICAST wpsdrvnt.sys (wpsdrvnt/Sygate Technologies, Inc.) AttachedDevice \FileSystem\Fastfat \Fat eamon.sys (Amon monitor/ESET) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@midimapper midimap.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.imaadpcm imaadp32.acm Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.msadpcm msadp32.acm Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.msg711 msg711.acm Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.msgsm610 msgsm32.acm Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.trspch tssoft32.acm Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.cvid iccvid.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.I420 msh263.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.iv31 ir32_32.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.iv32 ir32_32.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.iv41 ir41_32.ax Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.iyuv iyuv_32.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.mrle msrle32.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.msvc msvidc32.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.uyvy msyuv.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.yuy2 msyuv.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.yvu9 tsbyuv.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.yvyu msyuv.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@wavemapper msacm32.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@wave wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@midi wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@mixer wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@aux wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.msg723 msg723.acm Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.M263 msh263.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.M261 msh261.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.msaudio1 msaud32.acm Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.sl_anet sl_anet.acm Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.iac2 C:\WINDOW\system32\iac25_32.ax Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.iv50 ir50_32.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@msacm.l3acm C:\WINDOW\system32\l3codeca.acm Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@wave1 wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@midi1 wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@mixer1 wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@aux1 wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@wave2 wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@midi2 wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@mixer2 wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@aux2 wdmaud.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.DIVX DivX.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@vidc.yv12 DivX.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32@VIDC.FPS1 frapsvid.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP@wave rdpsnd.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP@MaxBandwidth 22201 Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP@wavemapper msacm32.drv Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP@EnableMP3Codec 1 Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP@midimapper midimap.dll Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP@mixer rdpsnd.dll ---- EOF - GMER 1.0.15 ----

**Posty:** 154 · przez **Darkman0** 20 Sty 2011, 01:32

Dobrze, to z góry przepraszam Was, że tak późno. Po prostu nie miałem ostatnio czasu. Odinstalowałem Avasta, zainstalowałem sobie NOD'a no i komp lepiej chodzi (ale net pozostaje wolny...).
Po skanie i usunięciu kilku wirusów OTL uruchomił mi się bezproblemowo, więc dodaję niezbędne logi:

Kod: Zaznacz wszystko: OTL logfile created on: 2011-01-19 21:13:08 - Run 1 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\Wojciech\Moje dokumenty\Downloads Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = ) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 60,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 77,00% Paging File free Paging file location(s): c:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOW | %ProgramFiles% = C:\Program Files Drive C: | 51,37 Gb Total Space | 4,74 Gb Free Space | 9,23% Space Free | Partition Type: NTFS Drive D: | 97,67 Gb Total Space | 40,90 Gb Free Space | 41,88% Space Free | Partition Type: NTFS Computer Name: DARKMAN | User Name: Wojciech | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-01-08 18:46:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Wojciech\Moje dokumenty\Downloads\OTL (1).exe PRC - [2011-01-08 04:35:52 | 000,991,800 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe PRC - [2010-12-02 21:37:46 | 000,397,176 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\BitTorrent\bittorrent.exe PRC - [2010-04-07 21:08:52 | 000,810,120 | ---- | M] (ESET) -- D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2010-04-07 21:08:30 | 002,145,000 | ---- | M] (ESET) -- D:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2008-04-14 18:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOW\explorer.exe PRC - [2006-05-16 21:46:18 | 000,032,256 | ---- | M] (Adobe Systems Incorporated) -- D:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe PRC - [2004-10-15 19:40:56 | 002,577,632 | ---- | M] (Sygate Technologies, Inc.) -- C:\Program Files\Sygate\SPF\Smc.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-01-08 18:46:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Wojciech\Moje dokumenty\Downloads\OTL (1).exe MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOW\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2006-05-03 21:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOW\system32\framedyn.dll MOD - [2004-10-15 18:32:10 | 000,083,096 | ---- | M] (Sygate Technologies, Inc.) -- C:\WINDOW\system32\SSSensor.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-04-07 21:13:20 | 000,033,560 | ---- | M] (ESET) [On_Demand | Stopped] -- D:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv) SRV - [2010-04-07 21:08:52 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn) SRV - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2004-10-15 19:40:56 | 002,577,632 | ---- | M] (Sygate Technologies, Inc.) [Auto | Running] -- C:\Program Files\Sygate\SPF\Smc.exe -- (SmcService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [File_System | Boot | Stopped] -- C:\WINDOW\System32\DRIVERS\Lbd.sys -- (Lbd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOW\System32\DRIVERS\fetnd5.sys -- (FETNDIS) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOW\System32\drivers\EagleNT.sys -- (EagleNT) DRV - [2010-11-07 00:10:20 | 000,271,360 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOW\system32\drivers\atksgt.sys -- (atksgt) DRV - [2010-11-07 00:10:20 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOW\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2010-04-07 21:09:48 | 000,095,872 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOW\system32\drivers\epfwtdir.sys -- (epfwtdir) DRV - [2010-04-07 21:08:36 | 000,114,984 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOW\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2010-04-07 21:05:12 | 000,140,216 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOW\system32\drivers\eamon.sys -- (eamon) DRV - [2010-02-11 13:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOW\system32\drivers\tcpip6.sys -- (Tcpip6) DRV - [2009-12-30 11:20:54 | 000,027,064 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\WINDOW\system32\drivers\revoflt.sys -- (Revoflt) DRV - [2009-11-12 13:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOW\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009-04-21 08:22:17 | 000,038,784 | R--- | M] (Axesstel) [Kernel | On_Demand | Stopped] -- C:\WINDOW\system32\drivers\Axtmvprt.sys -- (Axtmvprt) DRV - [2009-04-21 08:21:42 | 000,003,456 | R--- | M] (Axesstel) [Kernel | On_Demand | Stopped] -- C:\WINDOW\system32\drivers\Axtmvflt.sys -- (Axtmvflt) DRV - [2009-03-31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOW\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2009-03-20 10:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOW\system32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2009-03-20 10:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOW\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM) DRV - [2009-03-20 10:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOW\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) DRV - [2008-04-13 19:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOW\system32\drivers\nwlnkipx.sys -- (NwlnkIpx) DRV - [2008-04-13 19:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOW\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-04-13 19:45:12 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOW\system32\drivers\usbaudio.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2008-04-13 17:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOW\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2007-11-06 10:30:00 | 007,429,088 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOW\system32\drivers\nv4_mini.sys -- (nv) DRV - [2007-09-17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOW\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2006-09-12 12:27:00 | 004,381,184 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOW\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2006-02-23 04:39:06 | 000,011,264 | R--- | M] (VIA Technologies,Inc) [Kernel | Boot | Running] -- C:\WINDOW\System32\DRIVERS\xfilt.sys -- (xfilt) DRV - [2006-02-23 04:38:32 | 000,009,728 | R--- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOW\System32\DRIVERS\videX32.sys -- (videX32) DRV - [2004-10-15 18:32:44 | 000,014,568 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOW\SYSTEM32\Drivers\wg6n.sys -- (wg6n) DRV - [2004-10-15 18:32:42 | 000,014,568 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOW\SYSTEM32\Drivers\wg5n.sys -- (wg5n) DRV - [2004-10-15 18:32:40 | 000,014,568 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOW\SYSTEM32\Drivers\wg4n.sys -- (wg4n) DRV - [2004-10-15 18:32:38 | 000,014,568 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOW\SYSTEM32\Drivers\wg3n.sys -- (wg3n) DRV - [2004-10-15 18:18:46 | 000,021,075 | ---- | M] (Sygate Technologies, Inc.) [Kernel | System | Running] -- C:\WINDOW\system32\drivers\wpsdrvnt.sys -- (wpsdrvnt) DRV - [2004-10-15 18:17:02 | 000,060,496 | ---- | M] (Sygate Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOW\SYSTEM32\Drivers\Teefer.sys -- (Teefer) DRV - [2004-08-03 21:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOW\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2003-07-01 21:42:00 | 000,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOW\System32\DRIVERS\viaagp1.sys -- (viaagp1) DRV - [2001-08-17 21:54:18 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOW\system32\drivers\nwlnknb.sys -- (NwlnkNb) DRV - [2001-08-17 21:54:18 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOW\system32\drivers\nwlnkspx.sys -- (NwlnkSpx) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-448539723-838170752-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOW\system32\blank.htm IE - HKU\S-1-5-21-448539723-838170752-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=101764&l=dis IE - HKU\S-1-5-21-448539723-838170752-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-448539723-838170752-725345543-1007\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOW\system32\blank.htm IE - HKU\S-1-5-21-448539723-838170752-725345543-1007\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.poomoc.pl/" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox 3.1 Beta 2\components [2010-12-22 13:34:16 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox 3.1 Beta 2\plugins [2011-01-18 00:44:50 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: D:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011-01-11 20:11:12 | 000,000,000 | ---D | M] [2010-12-01 20:41:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Wojciech\Dane aplikacji\Mozilla\Extensions [2011-01-11 18:31:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Wojciech\Dane aplikacji\Mozilla\Firefox\Profiles\vj7bwa6j.default\extensions [2010-12-04 01:20:01 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Wojciech\Dane aplikacji\Mozilla\Firefox\Profiles\vj7bwa6j.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-12-24 00:54:56 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Wojciech\Dane aplikacji\Mozilla\Firefox\Profiles\vj7bwa6j.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-12-08 17:54:34 | 000,000,000 | ---D | M] (DriverAgent Plugin for Firefox and Opera) -- C:\Documents and Settings\Wojciech\Dane aplikacji\Mozilla\Firefox\Profiles\vj7bwa6j.default\extensions\{F8CC37C3-CBEB-4A00-8CBF-26A88693F0C5}(2) [2010-11-30 22:16:25 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2010-12-16 20:43:10 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX 3.1 BETA 2\EXTENSIONS\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} O1 HOSTS File: ([2010-12-08 14:55:39 | 000,000,027 | ---- | M]) - C:\WINDOW\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O4 - HKLM..\Run: [egui] D:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOW\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [SkyTel] C:\WINDOW\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SmcService] C:\Program Files\Sygate\SPF\Smc.exe (Sygate Technologies, Inc.) O4 - HKU\.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOW\system32\ctfmon.exe (Gerhard Schlager) O4 - HKU\S-1-5-18..\Run: [CTFMON.EXE] C:\WINDOW\system32\ctfmon.exe (Gerhard Schlager) O4 - HKU\S-1-5-19..\Run: [CTFMON.EXE] C:\WINDOW\system32\ctfmon.exe (Gerhard Schlager) O4 - HKU\S-1-5-20..\Run: [CTFMON.EXE] C:\WINDOW\system32\ctfmon.exe (Gerhard Schlager) O4 - HKU\S-1-5-21-448539723-838170752-725345543-1007..\Run: [CTFMON.EXE] C:\WINDOW\system32\ctfmon.exe (Gerhard Schlager) O4 - Startup: C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-448539723-838170752-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-448539723-838170752-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-448539723-838170752-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-448539723-838170752-725345543-1007\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-448539723-838170752-725345543-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOW\system32\nwprovau.dll (Microsoft Corporation) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOW\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{34658ce6-c880-11df-ba75-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{34658ce6-c880-11df-ba75-806d6172696f}\Shell\AutoRun\command - "" = F:\Bin\assetup.exe -- File not found O33 - MountPoints2\E\Shell - "" = AutoRun O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\_AUTORUN\AUTORUN.EXE -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-01-18 20:20:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\AdobeUM [2011-01-18 20:18:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\StoneLoops [2011-01-18 20:17:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\StoneLoops! [2011-01-18 20:17:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\Saqqarah [2011-01-18 20:17:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\MagicMatch [2011-01-18 17:47:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Pulpit\BBB [2011-01-18 17:36:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Adobe [2011-01-18 01:56:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Moje dokumenty\Two Worlds Saves [2011-01-18 01:56:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Reality Pump [2011-01-18 01:47:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\NVIDIA Corporation [2011-01-18 01:47:10 | 000,000,000 | ---D | C] -- C:\WINDOW\System32\AGEIA [2011-01-18 01:47:09 | 000,000,000 | ---D | C] -- C:\Program Files\AGEIA Technologies [2011-01-18 00:45:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\FSW2 [2011-01-18 00:44:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Autostart [2011-01-18 00:44:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\Adobe [2011-01-18 00:42:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\THQ [2011-01-18 00:32:48 | 000,000,000 | ---D | C] -- C:\Program Files\RapidTyping [2011-01-18 00:32:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\RapidTyping [2011-01-18 00:32:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Menu Start\Programy\StoneLoops [2011-01-18 00:32:22 | 000,000,000 | ---D | C] -- C:\My Games [2011-01-17 02:03:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Moje dokumenty\GTA San Andreas User Files [2011-01-12 22:08:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\WinRAR [2011-01-12 22:08:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Menu Start\Programy\WinRAR [2011-01-12 22:08:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\WinRAR [2011-01-11 20:40:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\ESET [2011-01-11 20:11:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\ESET [2011-01-11 20:11:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\ESET [2011-01-10 20:57:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\Media Player Classic [2011-01-09 19:30:05 | 000,048,640 | ---- | C] (Prolific Technology Inc.) -- C:\WINDOW\System32\drivers\ser2pl.sys [2011-01-09 19:29:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\PL-2303 USB-Serial Driver [2011-01-08 18:36:26 | 000,000,000 | ---D | C] -- C:\Aa [2011-01-08 18:35:38 | 000,000,000 | -H-D | C] -- C:\Output [2011-01-08 16:52:43 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Wojciech\Recent [2011-01-08 16:19:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\VS Revo Group [2011-01-08 16:19:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Revo Uninstaller Pro [2011-01-08 16:19:08 | 000,027,064 | ---- | C] (VS Revo Group) -- C:\WINDOW\System32\drivers\revoflt.sys [2011-01-08 16:19:07 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group [2011-01-08 14:35:56 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro [2011-01-08 14:14:48 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOW\System32\dllcache\ctfmon.exe.backup [2011-01-06 22:17:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Pulpit\DOOM2 [2011-01-06 22:16:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Pulpit\DUKEATOM [2011-01-06 21:21:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Pulpit\A-Ball [2011-01-06 21:04:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Ubisoft [2011-01-06 16:44:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\Canneverbe Limited [2011-01-06 16:44:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\Canneverbe Limited [2011-01-06 16:43:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\OpenCandy [2011-01-06 16:42:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\OpenCandy [2011-01-06 16:42:52 | 000,000,000 | ---D | C] -- C:\Program Files\CDBurnerXP [2011-01-06 15:48:49 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Gry [2011-01-05 07:19:29 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Aktówka (2) [2011-01-02 21:50:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\MP4 Converter [2011-01-02 21:50:20 | 000,000,000 | ---D | C] -- C:\Program Files\MP4 Converter [2011-01-02 21:45:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Convert AVI to MP4 [2011-01-02 21:32:34 | 000,000,000 | ---D | C] -- C:\Mp3 Output [2011-01-02 21:22:31 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW [2011-01-02 16:27:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\MSN6 [2011-01-02 16:27:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\MSN6 [2011-01-01 15:45:40 | 000,000,000 | ---D | C] -- C:\Avast [2011-01-01 15:06:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Pulpit\DO FORMATU [2010-12-29 17:18:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Moje dokumenty\NPS [2010-12-29 17:09:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Moje dokumenty\Komórka [2010-12-29 17:08:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Moje dokumenty\My Art [2010-12-29 16:50:14 | 000,121,856 | ---- | C] (MCCI Corporation) -- C:\WINDOW\System32\drivers\ss_bmdm.sys [2010-12-29 16:50:14 | 000,090,112 | ---- | C] (MCCI) -- C:\WINDOW\System32\drivers\ss_bbus.sys [2010-12-29 16:50:14 | 000,014,976 | ---- | C] (MCCI Corporation) -- C:\WINDOW\System32\drivers\ss_bmdfl.sys [2010-12-29 16:50:14 | 000,012,160 | ---- | C] (MCCI Corporation) -- C:\WINDOW\System32\drivers\ss_bwhnt.sys [2010-12-29 16:50:14 | 000,012,160 | ---- | C] (MCCI Corporation) -- C:\WINDOW\System32\drivers\ss_bwh.sys [2010-12-29 16:50:14 | 000,012,160 | ---- | C] (MCCI Corporation) -- C:\WINDOW\System32\drivers\ss_bcmnt.sys [2010-12-29 16:50:14 | 000,012,160 | ---- | C] (MCCI Corporation) -- C:\WINDOW\System32\drivers\ss_bcm.sys [2010-12-29 16:44:31 | 000,000,000 | ---D | C] -- C:\WINDOW\System32\appmgmt [2010-12-29 16:42:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\PC Suite [2010-12-29 16:42:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\PC Suite [2010-12-29 16:36:55 | 000,090,624 | ---- | C] (Nokia) -- C:\WINDOW\System32\nmwcdcls.dll [2010-12-29 16:36:46 | 000,021,632 | ---- | C] (Nokia) -- C:\WINDOW\System32\drivers\pccsmcfd.sys [2010-12-29 16:36:05 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX [2010-12-29 16:35:59 | 000,233,472 | ---- | C] (Teruten) -- C:\WINDOW\System32\FsUsbExService.Exe [2010-12-29 16:35:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Moje dokumenty\My NPS Files [2010-12-28 01:23:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Moje dokumenty\Downloads [2010-12-24 18:20:50 | 000,000,000 | ---D | C] -- C:\WINDOW\RegisteredPackages [2010-12-24 18:20:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Encyklopedia Gier 2006 [2010-12-23 00:40:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\Opera [2010-12-23 00:40:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojciech\Dane aplikacji\Opera [2010-12-22 21:23:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\3DO [2010-12-22 21:18:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\3DO Shared [2010-12-22 17:06:59 | 000,396,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOW\System32\CF20566.exe [2010-12-21 14:07:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Apple [1 C:\WINDOW\*.tmp files -> C:\WINDOW\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-01-19 20:23:00 | 000,001,144 | ---- | M] () -- C:\WINDOW\tasks\GoogleUpdateTaskUserS-1-5-21-448539723-838170752-725345543-1003UA.job [2011-01-19 20:23:00 | 000,001,092 | ---- | M] () -- C:\WINDOW\tasks\GoogleUpdateTaskUserS-1-5-21-448539723-838170752-725345543-1003Core.job [2011-01-19 19:36:00 | 000,000,472 | ---- | M] () -- C:\WINDOW\tasks\Ad-Aware Update (Weekly).job [2011-01-19 17:39:29 | 000,002,197 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOW\Pulpit\FSW Ten Hammers.lnk [2011-01-19 10:58:30 | 000,000,006 | -H-- | M] () -- C:\WINDOW\tasks\SA.DAT [2011-01-19 10:58:28 | 000,002,048 | --S- | M] () -- C:\WINDOW\bootstat.dat [2011-01-19 10:58:27 | 2146,750,464 | -HS- | M] () -- C:\hiberfil.sys [2011-01-18 20:16:39 | 003,932,160 | ---- | M] () -- C:\Documents and Settings\Wojciech\ntuser.dat [2011-01-18 14:07:02 | 000,000,284 | ---- | M] () -- C:\WINDOW\tasks\AppleSoftwareUpdate.job [2011-01-18 01:47:46 | 000,316,640 | ---- | M] () -- C:\WINDOW\WMSysPr9.prx [2011-01-18 00:44:51 | 000,001,657 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk [2011-01-18 00:44:51 | 000,001,654 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOW\Pulpit\Adobe Reader 7.0.lnk [2011-01-18 00:32:31 | 000,001,576 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Więcej Gier.lnk [2011-01-18 00:32:31 | 000,000,717 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Graj w StoneLoops!.lnk [2011-01-18 00:26:52 | 000,002,206 | ---- | M] () -- C:\WINDOW\System32\wpa.dbl [2011-01-18 00:12:29 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Wojciech\ntuser.ini [2011-01-18 00:12:24 | 003,762,364 | -H-- | M] () -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\IconCache.db [2011-01-15 22:18:47 | 000,274,775 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\list3.jpg [2011-01-13 18:27:05 | 000,002,395 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Google Chrome.lnk [2011-01-12 22:58:52 | 003,932,214 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (15).bmp [2011-01-11 20:06:30 | 000,002,596 | ---- | M] () -- C:\WINDOW\System32\CONFIG.NT [2011-01-09 22:41:18 | 000,016,336 | ---- | M] () -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2011-01-08 19:28:15 | 003,932,214 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (14).bmp [2011-01-08 18:29:50 | 000,107,808 | ---- | M] () -- C:\WINDOW\System32\FNTCACHE.DAT [2011-01-08 18:28:12 | 000,035,328 | ---- | M] () -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-01-08 16:19:09 | 000,000,889 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Revo Uninstaller Pro.lnk [2011-01-08 15:18:40 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 6.jpg [2011-01-08 15:17:34 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 5.jpg [2011-01-08 15:15:41 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 3.jpg [2011-01-08 15:14:48 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 4.jpg [2011-01-08 15:12:42 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 2.jpg [2011-01-08 15:11:51 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 1.jpg [2011-01-08 14:33:23 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Menedżer.bmp [2011-01-08 14:14:48 | 000,024,064 | ---- | M] (Gerhard Schlager) -- C:\WINDOW\System32\dllcache\ctfmon.exe [2011-01-08 14:14:48 | 000,024,064 | ---- | M] (Gerhard Schlager) -- C:\WINDOW\System32\ctfmon.exe [2011-01-08 12:01:48 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (13).bmp [2011-01-08 02:21:16 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (12).bmp [2011-01-06 22:23:06 | 000,000,249 | ---- | M] () -- C:\DM.CFG [2011-01-06 22:21:57 | 000,000,791 | ---- | M] () -- C:\DEFAULT.CFG [2011-01-06 21:06:26 | 000,001,050 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Heroes of Might and Magic III - Złota Edycja.lnk [2011-01-06 20:13:57 | 000,004,635 | ---- | M] () -- C:\WINDOW\imsins.BAK [2011-01-06 20:13:56 | 001,166,142 | ---- | M] () -- C:\WINDOW\System32\PerfStringBackup.INI [2011-01-06 20:13:56 | 000,517,692 | ---- | M] () -- C:\WINDOW\System32\perfh015.dat [2011-01-06 20:13:56 | 000,457,668 | ---- | M] () -- C:\WINDOW\System32\perfh009.dat [2011-01-06 20:13:56 | 000,098,806 | ---- | M] () -- C:\WINDOW\System32\perfc015.dat [2011-01-06 20:13:56 | 000,078,580 | ---- | M] () -- C:\WINDOW\System32\perfc009.dat [2011-01-06 16:43:46 | 000,001,644 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\CDBurnerXP.lnk [2011-01-05 07:19:40 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (11).bmp [2011-01-04 22:40:17 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (10).bmp [2011-01-03 17:02:44 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (9).bmp [2011-01-02 21:50:22 | 000,000,674 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\MP4 Converter.lnk [2011-01-02 15:30:33 | 000,001,843 | ---- | M] () -- C:\WINDOW\System32\AUTOEXEC.NT [2011-01-02 15:30:33 | 000,000,246 | ---- | M] () -- C:\WINDOW\system.ini [2010-12-29 16:35:47 | 000,002,528 | ---- | M] () -- C:\Documents and Settings\Wojciech\Dane aplikacji\$_hpcst$.hpc [2010-12-24 18:20:36 | 000,000,666 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Encyklopedia Gier 2006.lnk [2010-12-22 21:23:21 | 000,000,770 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Heroes of Might and Magic® IV.lnk [2010-12-22 17:06:51 | 000,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOW\System32\CF20566.exe [2010-12-21 00:01:19 | 002,359,350 | ---- | M] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (8).bmp [1 C:\WINDOW\*.tmp files -> C:\WINDOW\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-18 00:44:51 | 000,001,657 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOW\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk [2011-01-18 00:44:51 | 000,001,654 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOW\Pulpit\Adobe Reader 7.0.lnk [2011-01-18 00:43:57 | 000,002,197 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOW\Pulpit\FSW Ten Hammers.lnk [2011-01-18 00:32:31 | 000,001,576 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Więcej Gier.lnk [2011-01-18 00:32:31 | 000,000,717 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Graj w StoneLoops!.lnk [2011-01-15 22:18:47 | 000,274,775 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\list3.jpg [2011-01-12 22:58:25 | 003,932,214 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (15).bmp [2011-01-12 22:25:50 | 001,060,864 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\vorbis.dll [2011-01-12 22:25:50 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\vorbisFile.dll [2011-01-10 21:35:12 | 427,537,323 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Szklana Pułapka 2.rmvb [2011-01-08 19:28:07 | 003,932,214 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (14).bmp [2011-01-08 18:29:50 | 2146,750,464 | -HS- | C] () -- C:\hiberfil.sys [2011-01-08 16:19:09 | 000,000,889 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Revo Uninstaller Pro.lnk [2011-01-08 15:18:20 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 6.jpg [2011-01-08 15:16:32 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 5.jpg [2011-01-08 15:13:47 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 4.jpg [2011-01-08 15:13:47 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 3.jpg [2011-01-08 15:12:07 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 2.jpg [2011-01-08 15:11:05 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Część 1.jpg [2011-01-08 14:32:11 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Menedżer.bmp [2011-01-08 12:01:48 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (13).bmp [2011-01-08 02:21:09 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (12).bmp [2011-01-06 22:22:54 | 000,000,249 | ---- | C] () -- C:\DM.CFG [2011-01-06 22:21:27 | 000,000,791 | ---- | C] () -- C:\DEFAULT.CFG [2011-01-06 21:06:26 | 000,001,050 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Heroes of Might and Magic III - Złota Edycja.lnk [2011-01-06 16:43:46 | 000,001,644 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\CDBurnerXP.lnk [2011-01-05 07:19:33 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (11).bmp [2011-01-04 22:40:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (10).bmp [2011-01-03 17:02:36 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (9).bmp [2011-01-02 21:50:22 | 000,000,674 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\MP4 Converter.lnk [2010-12-29 16:35:59 | 000,110,592 | ---- | C] () -- C:\WINDOW\System32\FsUsbExDevice.Dll [2010-12-29 16:35:59 | 000,036,608 | ---- | C] () -- C:\WINDOW\System32\FsUsbExDisk.Sys [2010-12-29 16:35:47 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Wojciech\Dane aplikacji\$_hpcst$.hpc [2010-12-26 01:27:33 | 010,385,426 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\GTA_San_Andreas_-_Poradnik_Gry-OnLine.pdf [2010-12-24 18:20:36 | 000,000,666 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Encyklopedia Gier 2006.lnk [2010-12-22 21:23:21 | 000,000,770 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Heroes of Might and Magic® IV.lnk [2010-12-21 00:01:07 | 002,359,350 | ---- | C] () -- C:\Documents and Settings\Wojciech\Pulpit\Nowy Obraz - mapa bitowa (8).bmp [2010-12-02 15:47:32 | 000,135,672 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2010-12-01 20:37:20 | 008,676,883 | ---- | C] () -- C:\WINDOW\System32\mp3Media2.dll [2010-11-07 00:10:20 | 000,271,360 | ---- | C] () -- C:\WINDOW\System32\drivers\atksgt.sys [2010-11-07 00:10:20 | 000,018,048 | ---- | C] () -- C:\WINDOW\System32\drivers\lirsgt.sys [2010-10-30 01:20:49 | 000,003,532 | ---- | C] () -- C:\WINDOW\wincmd.ini [2010-10-23 23:59:19 | 000,007,168 | ---- | C] () -- C:\WINDOW\System32\drivers\StarOpen.sys [2010-10-23 18:34:09 | 000,000,023 | ---- | C] () -- C:\WINDOW\BlendSettings.ini [2010-10-10 00:20:25 | 000,000,106 | ---- | C] () -- C:\WINDOW\Bloodline.ini [2010-10-09 23:54:26 | 000,000,033 | ---- | C] () -- C:\WINDOW\Multimedia manager.INI [2010-10-09 23:48:16 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\LauncherAccess.dt [2010-10-09 23:31:04 | 000,143,360 | R--- | C] () -- C:\WINDOW\System32\RtlCPAPI.dll [2010-10-03 19:39:12 | 000,035,328 | ---- | C] () -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-09-25 10:00:19 | 000,021,840 | ---- | C] () -- C:\WINDOW\System32\SIntfNT.dll [2010-09-25 10:00:19 | 000,017,212 | ---- | C] () -- C:\WINDOW\System32\SIntf32.dll [2010-09-25 10:00:19 | 000,012,067 | ---- | C] () -- C:\WINDOW\System32\SIntf16.dll [2010-09-14 20:14:42 | 000,016,336 | ---- | C] () -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-09-11 22:35:11 | 000,061,440 | ---- | C] () -- C:\WINDOW\System32\vuins32.dll [2010-09-11 22:33:32 | 000,004,711 | ---- | C] () -- C:\WINDOW\Ascd_tmp.ini [2010-09-11 22:33:31 | 000,010,288 | ---- | C] () -- C:\WINDOW\System32\drivers\ASUSHWIO.SYS [2010-09-11 22:09:43 | 001,166,142 | ---- | C] () -- C:\WINDOW\System32\PerfStringBackup.INI [2010-09-11 22:09:42 | 000,004,427 | ---- | C] () -- C:\WINDOW\ODBCINST.INI [2010-09-11 22:09:15 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\desktop.ini [2010-09-11 21:29:48 | 003,762,364 | -H-- | C] () -- C:\Documents and Settings\Wojciech\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-09-11 21:23:48 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\Wojciech\Dane aplikacji\desktop.ini [2010-09-11 21:19:00 | 000,000,000 | ---- | C] () -- C:\WINDOW\control.ini [2010-09-11 21:15:04 | 000,000,037 | ---- | C] () -- C:\WINDOW\vbaddin.ini [2010-09-11 21:15:04 | 000,000,036 | ---- | C] () -- C:\WINDOW\vb.ini [2010-09-11 21:14:11 | 000,026,717 | ---- | C] () -- C:\WINDOW\System32\tslabels.ini [2010-09-11 21:14:08 | 000,003,813 | ---- | C] () -- C:\WINDOW\System32\msdtcprf.ini [2009-07-14 05:41:57 | 000,000,174 | -HS- | C] () -- C:\Program Files\desktop.ini [2008-04-30 13:55:16 | 000,071,208 | ---- | C] () -- C:\WINDOW\System32\PhysXLoader.dll [2008-04-28 11:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOW\System32\AgCPanelTraditionalChinese.dll [2008-04-28 11:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOW\System32\AgCPanelSwedish.dll [2008-04-28 11:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOW\System32\AgCPanelSpanish.dll [2008-04-28 11:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOW\System32\AgCPanelSimplifiedChinese.dll [2008-04-28 11:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOW\System32\AgCPanelPortugese.dll [2008-04-28 11:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOW\System32\AgCPanelKorean.dll [2008-04-28 11:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOW\System32\AgCPanelJapanese.dll [2008-04-28 11:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOW\System32\AgCPanelGerman.dll [2008-04-28 11:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOW\System32\AgCPanelFrench.dll [2007-11-26 20:56:28 | 000,151,415 | ---- | C] () -- C:\WINDOW\System32\xlive.dll.cat [2007-11-06 10:30:00 | 001,703,936 | ---- | C] () -- C:\WINDOW\System32\nvwdmcpl.dll [2007-11-06 10:30:00 | 001,474,560 | ---- | C] () -- C:\WINDOW\System32\nview.dll [2007-11-06 10:30:00 | 001,019,904 | ---- | C] () -- C:\WINDOW\System32\nvwimg.dll [2007-11-06 10:30:00 | 000,466,944 | ---- | C] () -- C:\WINDOW\System32\nvshell.dll [2007-11-06 10:30:00 | 000,286,720 | ---- | C] () -- C:\WINDOW\System32\nvnt4cpl.dll [2004-10-15 18:31:56 | 000,218,264 | ---- | C] () -- C:\WINDOW\System32\SetAid.dll [2004-08-03 23:44:10 | 000,270,848 | ---- | C] () -- C:\WINDOW\System32\sbe.dll [2004-08-03 23:44:04 | 000,014,336 | ---- | C] () -- C:\WINDOW\System32\msdmo.dll [2004-08-03 23:43:58 | 000,186,880 | ---- | C] () -- C:\WINDOW\System32\encdec.dll [2004-08-03 23:43:56 | 000,253,440 | ---- | C] () -- C:\WINDOW\System32\compatui.dll [2004-08-03 23:43:54 | 000,070,656 | ---- | C] () -- C:\WINDOW\System32\amstream.dll [2004-08-03 23:43:16 | 000,733,696 | ---- | C] () -- C:\WINDOW\System32\qedwipes.dll [2004-08-03 21:46:56 | 000,042,537 | ---- | C] () -- C:\WINDOW\System32\keyboard.sys [2004-08-03 21:45:34 | 000,033,936 | ---- | C] () -- C:\WINDOW\System32\ntio.sys [2004-08-03 21:45:16 | 000,035,424 | ---- | C] () -- C:\WINDOW\System32\ntio412.sys [2004-08-03 21:45:16 | 000,034,560 | ---- | C] () -- C:\WINDOW\System32\ntio404.sys [2004-08-03 21:45:14 | 000,034,560 | ---- | C] () -- C:\WINDOW\System32\ntio804.sys [2004-08-03 21:45:12 | 000,035,648 | ---- | C] () -- C:\WINDOW\System32\ntio411.sys [2004-07-17 10:46:14 | 000,053,478 | ---- | C] () -- C:\WINDOW\System32\tcpmon.ini [2004-07-17 10:34:48 | 000,355,112 | ---- | C] () -- C:\WINDOW\System32\msjetoledb40.dll [2002-07-01 15:13:30 | 000,000,243 | -HS- | C] () -- C:\Documents and Settings\Wojciech\Dane aplikacji\system16driver.dat [2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOW\System32\paqsp.dll [2001-10-26 17:29:40 | 000,010,240 | ---- | C] () -- C:\WINDOW\System32\scriptpw.dll [2001-10-26 17:29:32 | 000,199,168 | ---- | C] () -- C:\WINDOW\System32\ir32_32.dll [2001-10-26 17:28:34 | 000,094,282 | ---- | C] () -- C:\WINDOW\System32\msencode.dll [2001-10-26 17:27:02 | 000,015,360 | ---- | C] () -- C:\WINDOW\System32\tsd32.dll [2001-10-26 16:15:04 | 000,027,898 | ---- | C] () -- C:\WINDOW\System32\ntdos.sys [2001-10-26 16:14:52 | 000,004,976 | ---- | C] () -- C:\WINDOW\System32\himem.sys [2001-10-26 16:14:32 | 000,009,043 | ---- | C] () -- C:\WINDOW\System32\ansi.sys [2001-10-26 16:12:52 | 000,000,359 | ---- | C] () -- C:\WINDOW\System32\prodspec.ini [2001-10-26 15:45:26 | 000,016,024 | ---- | C] () -- C:\WINDOW\System32\rsvp.ini [2001-10-26 15:45:26 | 000,006,074 | ---- | C] () -- C:\WINDOW\System32\rasctrs.ini [2001-10-26 15:45:24 | 000,013,819 | ---- | C] () -- C:\WINDOW\System32\pschdprf.ini [2001-10-26 15:42:08 | 000,020,629 | ---- | C] () -- C:\WINDOW\System32\mqperf.ini [2001-10-26 15:42:08 | 000,002,992 | ---- | C] () -- C:\WINDOW\System32\perfci.ini [2001-10-26 15:42:08 | 000,002,890 | ---- | C] () -- C:\WINDOW\System32\perfwci.ini [2001-10-26 15:42:08 | 000,001,295 | ---- | C] () -- C:\WINDOW\System32\perffilt.ini [2001-08-17 21:31:56 | 000,042,809 | ---- | C] () -- C:\WINDOW\System32\key01.sys [2001-08-17 21:31:56 | 000,027,097 | ---- | C] () -- C:\WINDOW\System32\country.sys [2001-08-17 21:31:50 | 000,029,274 | ---- | C] () -- C:\WINDOW\System32\ntdos412.sys [2001-08-17 21:31:46 | 000,029,370 | ---- | C] () -- C:\WINDOW\System32\ntdos411.sys [2001-08-17 21:31:46 | 000,029,146 | ---- | C] () -- C:\WINDOW\System32\ntdos404.sys [2001-08-17 21:31:44 | 000,029,146 | ---- | C] () -- C:\WINDOW\System32\ntdos804.sys [2001-08-17 21:13:24 | 000,002,656 | ---- | C] () -- C:\WINDOW\System32\netware.drv [2001-08-17 19:55:06 | 001,015,477 | ---- | C] () -- C:\WINDOW\System32\esentprf.ini [2001-07-22 02:25:18 | 000,001,405 | ---- | C] () -- C:\WINDOW\msdfmap.ini [2001-07-21 23:16:20 | 000,000,519 | ---- | C] () -- C:\WINDOW\win.ini [2001-07-21 23:15:52 | 000,000,246 | ---- | C] () -- C:\WINDOW\system.ini [2001-07-21 22:15:50 | 000,013,312 | ---- | C] () -- C:\WINDOW\System32\win87em.dll [color=#E56717]========== LOP Check ==========[/color] [2011-01-11 20:06:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\Alwil Software [2011-01-06 16:44:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\Canneverbe Limited [2011-01-11 20:11:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\ESET [2010-12-29 16:42:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOW\Dane aplikacji\PC Suite [2010-12-21 10:32:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ania\Dane aplikacji\Gadu-Gadu [2010-12-22 16:41:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ania\Dane aplikacji\Opera [2010-12-29 18:34:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ania\Dane aplikacji\PC Suite [2010-12-26 12:17:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kasia Sweet\Dane aplikacji\Opera [2010-12-29 19:28:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kasia Sweet\Dane aplikacji\PC Suite [2011-01-08 16:35:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\BabylonToolbar [2011-01-19 21:14:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\BitTorrent [2011-01-06 16:44:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\Canneverbe Limited [2011-01-08 16:22:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\DNA [2011-01-19 18:15:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\FSW2 [2010-12-02 16:27:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\Gadu-Gadu [2010-11-06 23:55:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\InterTrust [2011-01-18 20:17:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\MagicMatch [2011-01-06 16:42:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\OpenCandy [2010-12-23 00:40:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\Opera [2010-12-29 16:42:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\PC Suite [2011-01-18 00:32:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\RapidTyping [2011-01-08 16:43:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\Samsung [2011-01-18 20:17:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\Saqqarah [2011-01-18 20:18:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\StoneLoops [2011-01-18 20:17:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojciech\Dane aplikacji\StoneLoops! [2011-01-19 19:36:00 | 000,000,472 | ---- | M] () -- C:\WINDOW\Tasks\Ad-Aware Update (Weekly).job [color=#E56717]========== Purity Check ==========[/color] < End of report >

Oraz Extras:

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-01-19 21:13:08 - Run 1 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\Wojciech\Moje dokumenty\Downloads Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = ) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 60,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 77,00% Paging File free Paging file location(s): c:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOW | %ProgramFiles% = C:\Program Files Drive C: | 51,37 Gb Total Space | 4,74 Gb Free Space | 9,23% Space Free | Partition Type: NTFS Drive D: | 97,67 Gb Total Space | 40,90 Gb Free Space | 41,88% Space Free | Partition Type: NTFS Computer Name: DARKMAN | User Name: Wojciech | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_USERS\S-1-5-21-448539723-838170752-725345543-1003\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-21-448539723-838170752-725345543-1007\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox 3.1 Beta 2\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "FirewallDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Axesstel\AxessManager\AxessManager.exe" = C:\Program Files\Axesstel\AxessManager\AxessManager.exe:*:Enabled:AxessManager Application -- (Axesstel Inc.) "C:\Users\Wojciech\Moje dokumenty\VideoConverterSetup.exe" = C:\Users\Wojciech\Moje dokumenty\VideoConverterSetup.exe:*:Enabled:InstallerCore™ -- () "C:\Users\Wojciech\Moje dokumenty\VideoToMp3Setup.exe" = C:\Users\Wojciech\Moje dokumenty\VideoToMp3Setup.exe:*:Enabled:InstallerCore™ -- () "C:\Program Files\DNA\btdna.exe" = C:\Program Files\DNA\btdna.exe:*:Enabled:DNA -- (BitTorrent, Inc.) "C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.) "C:\Program Files\Metin2\metin2.bin" = C:\Program Files\Metin2\metin2.bin:*:Enabled:metin2 -- () "C:\Program Files\Metin2\metin2client.bin" = C:\Program Files\Metin2\metin2client.bin:*:Enabled:metin2client -- () "C:\WINDOW\system32\dpvsetup.exe" = C:\WINDOW\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation) "D:\Program Files\Ubisoft\Heroes of Might and Magic III - Zlota Edycja\Heroes3.exe" = D:\Program Files\Ubisoft\Heroes of Might and Magic III - Zlota Edycja\Heroes3.exe:*:Enabled:Heroes of Might and Magic® III (CDP) -- (The 3DO Company) "C:\WINDOW\system32\dplaysvr.exe" = C:\WINDOW\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation) "D:\Program Files\THQ\FSW Ten Hammers\fsw2.exe" = D:\Program Files\THQ\FSW Ten Hammers\fsw2.exe:*:Enabled:"Full Spectrum Warrrior 2: Ten Hammers" Game -- (Pandemic Studios LLC) "D:\Program Files\Reality Pump\Two Worlds\TwoWorlds.exe" = D:\Program Files\Reality Pump\Two Worlds\TwoWorlds.exe:*:Enabled:Two Worlds -- (Reality Pump) "D:\Program Files\Reality Pump\Two Worlds\TwoWorlds_RADEON.exe" = D:\Program Files\Reality Pump\Two Worlds\TwoWorlds_RADEON.exe:*:Enabled:Two Worlds -- (Reality Pump) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{07CE253F-67EE-4BF7-9D9A-895B1977EE4B}_is1" = Deinstalacja programu Zemsta Kujona "{0C0AF2F7-AF49-46DF-B017-6931039C030E}" = Bloodline "{1C36647E-F5BD-43E9-BA64-5F274B7F7050}_is1" = Prawo Jazdy 2006 1.0 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{239643AC-81F1-4CE9-A87F-8B1E83AD7466}" = Full Spectrum Warrior Ten Hammers "{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 23 "{2AFF2951-86B1-3C53-B34D-B440F11E7D0A}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PLK "{350C97C2-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime "{5A0DDC27-88E5-3CAD-BC3D-28FFD05CA6B9}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PLK "{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8 "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053 "{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.5.0 "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{74224F8D-4A17-4816-9EDB-7BB854DE532C}" = NVIDIA PhysX v8.04.25 "{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP "{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver "{85DCB3AA-90D3-444B-880C-C72951252E55}" = ESET NOD32 Antivirus "{8B743AA0-53B2-11D2-808A-00600895FB43}" = Heroes of Might and Magic III - Złota Edycja "{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}" = Microsoft Games for Windows - LIVE Redistributable "{93656878-FF8B-4935-99BB-F3F260037C57}" = Lara Croft Tomb Raider: Angel Of Darkeness "{9981A268-8857-4830-908A-D0F043DBD9F1}" = Broken Sword III - dodatek polonizujący "{9ECE13D2-C028-44CB-8A96-A65196E7BBE7}_is1" = Convert AVI to MP4 1.3 "{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{AC599724-5755-48C1-ABE7-ABB857652930}" = PC Connectivity Solution "{AC76BA86-7AD7-1033-7B44-A70800000002}" = Adobe Reader 7.0.8 "{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer "{B52D7A21-03E5-4C0C-82FA-FD8EB4C92149}" = AxessManager "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation "{BC3A2ACD-FB46-4C6B-8B5C-CD193C9805CF}" = Fallout Tactics "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas "{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729) "{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01 "{F34D9A5F-484A-4E31-A9D3-908CB265B289}" = Sygate Personal Firewall "2006ver4.0;_is1" = Encyklopedia Gier 2006 4.0 "3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0) "6194C28A8F62DD817EA1B918E6E46E806A21B452" = Pakiet sterowników systemu Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0) "65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Pakiet sterowników systemu Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0) "Adobe Acrobat 5.0" = Adobe Acrobat 5.0 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "BitTorrent" = BitTorrent "Broken Sword - The Sleeping Dragon" = Broken Sword - The Sleeping Dragon "CSI Kryminalne Zagadki Las Vegas - Mroczne Motywy" = CSI Kryminalne Zagadki Las Vegas - Mroczne Motywy "Diablo II" = Diablo II "DivX Setup.divx.com" = DivX Setup "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "Fahrenheit_is1" = Fahrenheit "Freez FLV to MP3 Converter v1.5_is1" = Freez FLV to MP3 Converter "Gadu-Gadu" = Gadu-Gadu 7.7 "Gimnazjum klasa 2 - Planeta Nowa" = Gimnazjum klasa 2 - Planeta Nowa "Gothic III_is1" = Gothic III v1.12 "Heroes of Might and Magic IV" = Heroes of Might and Magic® IV "ie8" = Windows Internet Explorer 8 "IL-2 Sturmovik" = IL-2 Sturmovik "InstallShield_{0C0AF2F7-AF49-46DF-B017-6931039C030E}" = Bloodline "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager "InstallShield_{93656878-FF8B-4935-99BB-F3F260037C57}" = Lara Croft Tomb Raider: The Angel Of Darkness "InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer "Metin2_is1" = Metin2 "Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13) "MP4 Converter_is1" = MP4 Converter 1.0 "NVIDIA Drivers" = NVIDIA Drivers "Painkiller" = Painkiller "Painkiller - Battle Out Of Hell" = Painkiller - Battle Out Of Hell "RealAlt_is1" = Real Alternative 1.9.0 "Resident Evil 4_is1" = Resident Evil 4 1.10 "Riva FLV Encoder 2.0_is1" = Riva FLV Encoder 2.0 "SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software "SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set "Samsung Mobile Modem Device" = Samsung Mobile Modem Device Software "Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software "SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software "SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software "SAMSUNG USB Mobile Device" = SAMSUNG USB Mobile Device Software "Skoki Narciarskie 2006" = Skoki Narciarskie 2006 "StoneLoops!" = StoneLoops! 1.08 "Tomb Raider II" = Tomb Raider II "Totalcmd" = Total Commander (Remove or Repair) "Two Worlds" = Two Worlds "VLC media player" = VLC media player 1.1.5 "VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast Ethernet Adapter "WIC" = Windows Imaging Component "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = Archiwizator WinRAR "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-448539723-838170752-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{974C4B12-4D02-4879-85E0-61C95CC63E9E}" = Fallout 3 "BitTorrent" = BitTorrent "BitTorrent DNA" = DNA "Diablo II" = Diablo II "Google Chrome" = Google Chrome [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-01-15 18:00:57 | Computer Name = DARKMAN | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gta_sa.exe, wersja 0.0.0.0, moduł powodujący błąd gta_sa.exe, wersja 0.0.0.0, adres błędu 0x00093c91. Error - 2011-01-15 18:11:19 | Computer Name = DARKMAN | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gta_sa.exe, wersja 0.0.0.0, moduł powodujący błąd gta_sa.exe, wersja 0.0.0.0, adres błędu 0x003f3825. Error - 2011-01-16 09:19:28 | Computer Name = DARKMAN | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gta_sa.exe, wersja 0.0.0.0, moduł powodujący błąd gta_sa.exe, wersja 0.0.0.0, adres błędu 0x00093c91. Error - 2011-01-16 09:34:21 | Computer Name = DARKMAN | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gta_sa.exe, wersja 0.0.0.0, moduł powodujący błąd gta_sa.exe, wersja 0.0.0.0, adres błędu 0x00093c91. Error - 2011-01-16 09:38:36 | Computer Name = DARKMAN | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gta_sa.exe, wersja 0.0.0.0, moduł powodujący błąd gta_sa.exe, wersja 0.0.0.0, adres błędu 0x00093c91. Error - 2011-01-16 09:47:27 | Computer Name = DARKMAN | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gta_sa.exe, wersja 0.0.0.0, moduł powodujący błąd gta_sa.exe, wersja 0.0.0.0, adres błędu 0x00093c91. Error - 2011-01-16 09:55:34 | Computer Name = DARKMAN | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gta_sa.exe, wersja 0.0.0.0, moduł powodujący błąd gta_sa.exe, wersja 0.0.0.0, adres błędu 0x003f3825. Error - 2011-01-18 08:54:26 | Computer Name = DARKMAN | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd divx plus player.exe, wersja 10.2.1.20, moduł powodujący błąd qtcore4.dll, wersja 4.5.0.0, adres błędu 0x000e1b16. Error - 2011-01-18 12:51:13 | Computer Name = DARKMAN | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca mplayerc.exe, wersja 6.4.9.1, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-01-18 15:18:44 | Computer Name = DARKMAN | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd stoneloops.exe, wersja 0.0.0.0, moduł powodujący błąd winmm.dll, wersja 5.1.2600.5512, adres błędu 0x0000c9c0. [ System Events ] Error - 2011-01-18 08:17:04 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7038 Description = Usługa ALG nie mogła zalogować się jako NT AUTHORITY\LocalService z aktualnie skonfigurowanym hasłem z powodu następującego błędu: %%5 Aby upewnić się, że usługa jest skonfigurowana właściwie, użyj przystawki Usługi w programie Microsoft Management Console (MMC). Error - 2011-01-18 08:17:04 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Usługa bramy warstwy aplikacji z powodu następującego błędu: %%1069 Error - 2011-01-18 08:47:45 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7023 Description = Usługa Klient DNS zakończyła działanie; wystąpił następujący błąd: %%2 Error - 2011-01-18 08:47:53 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: Lbd Error - 2011-01-18 15:16:05 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7023 Description = Usługa Klient DNS zakończyła działanie; wystąpił następujący błąd: %%2 Error - 2011-01-18 15:16:13 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: Lbd Error - 2011-01-19 03:54:08 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7023 Description = Usługa Klient DNS zakończyła działanie; wystąpił następujący błąd: %%2 Error - 2011-01-19 03:54:53 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: Lbd Error - 2011-01-19 05:58:49 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7023 Description = Usługa Klient DNS zakończyła działanie; wystąpił następujący błąd: %%2 Error - 2011-01-19 05:58:54 | Computer Name = DARKMAN | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: Lbd < End of report >

**Posty:** 18165 · przez **wojtas** 20 Sty 2011, 18:14

Gmer robiony w pre scanie, zobacz do tematu z Gmera co źle zrobiłeś...

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
IE - HKU\S-1-5-21-448539723-838170752-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=101764&l=dis

:Files
C:\Documents and Settings\Wojciech\Dane aplikacji\BabylonToolbar

:Commands
[emptytemp]
[emptyflash]
[clearallrestorepoints]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

1.Uruchom OTL z opcji sprzątanie.
2. wykonaj optymalizację Windowsa
3. zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )
4. Skasuj stan przywracania systemu

Zaktualizuj zabezpieczenia:
>>> Adobe Reader (bez Free McAfee® Security Scan Plus)
>>> Internet Explorer 8

**Posty:** 154 · przez **Darkman0** 22 Sty 2011, 01:40

Log z GMER'a aktualizowałem (teraz jest taki, jaki powinien być), skrypt wykonałem, uruchomiłem sprzątanie, a nie wiem które z tych procesów odznaczyć przy autostarcie :
NvCpl
SkyTel
RTHDCPL
smc
PTTask
egui
FRAPS
Adobe Reader Speed Launch
Wiem jedynie, że RTHDCPL to sterownik karty dźwiękowej Realteka, egui to proces od NOD'a, a FRAPS to program, który wyświetla obecne FPS podczas grania w gry.
Co powinienem odznaczyć?

**Posty:** 18165 · przez **wojtas** 22 Sty 2011, 14:02

smc
PTTask
FRAPS
Adobe Reader Speed Launch

to możesz

**Posty:** 98 · przez **misiama** 23 Sty 2011, 01:06

Witam, a robiłeś test szybkości łącza? Witrynka SpeedTest bywa do tego dobra. Po drugie jak się łączysz z netem? I na koniec może jeszcze czyszczenie pamięci DNS oraz zmiana ich adresów. Zawsze warto spróbować.

**Posty:** 154 · przez **Darkman0** 23 Sty 2011, 02:43

To tak. Do poleceń wojtasa się zastosowałem, wszystko zrobiłem. Zwolniło się trochę miejsca na dysku, komp chodzi troszkę szybciej, no ale net pozostaje wolny

Dodano Dzisiaj, 01:57:
Szybkość łącza sprawdzałem nieraz, lecz sprawdziłem po raz kolejny przed chwilą. Download: 0,06 Mb/s, upload: 0,03 Mb/s, ping 107 ms. Wyniki podane w bitach. No i widać, że szybkość jest raczej beznadziejna.
Dokładnie nie wiem, bo nie ja załatwiałem internet, ale łączę się poprzez router MV410R (Orange), no a dostawcą jest PTK-Centertel.
Oto link do wyników speedtestu: http://www.speedtest.net/result/1123479570.png

**Posty:** 98 · przez **misiama** 23 Sty 2011, 14:36

A jak z zasięgiem?

**Posty:** 154 · przez **Darkman0** 23 Sty 2011, 16:24

Zasięg zazwyczaj dobry, 5 lub 6 kresek na 6. Więc to nie zasięg jest problemem, mieszkam w centrum miasta.

**Posty:** 18165 · przez **wojtas** 23 Sty 2011, 22:20

odinstaluj wszystkie oprogramowanie typu antywirus, firewall i sprawdź jak działa net

**Posty:** 154 · przez **Darkman0** 25 Sty 2011, 02:30

Po odinstalowaniu:
http://www.speedtest.net/result/1126268544.png
Więc to także nie czyni różnicy...
A Wy jakie macie wyniki?

**Posty:** 18165 · przez **wojtas** 25 Sty 2011, 17:22

ja 6mb, ale to nie chodzi o to .. nie masz żadnych limitów ? że jak przekroczysz spada prędkość ?

**Posty:** 154 · przez **Darkman0** 26 Sty 2011, 13:58

Nie mam nic takiego, bo wiele nie siedziałem, a prędkość spadła...

Kto jest na forum