Profilaktyczne sprawdzenie loga z hijack this

[hnebdg]

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:30:57, on 2010-06-19
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
D:\Steam\Steam.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
D:\Program Files\Ventrilo\Ventrilo.exe
C:\WINDOWS\system32\msiexec.exe
D:\Program Files\HIJACK\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.optimus.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - D:\PROGRA~1\FlashFXP\IEFlash.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: FlashCapture - {753BBC4B-CC73-4fb8-A5B5-CA09C804C1DD} - D:\Program Files\Flash Capture\fciext.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.optimus.pl
O15 - Trusted Zone: http://jimmy-portfolio.hostei.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1257257280968
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15109/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\AV Vcs 6.0 DIAMOND\Nowy folder\SASWINLO.DLL
O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 5977 bytes
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:30:57, on 2010-06-19
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
D:\Steam\Steam.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
D:\Program Files\Ventrilo\Ventrilo.exe
C:\WINDOWS\system32\msiexec.exe
D:\Program Files\HIJACK\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.optimus.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - D:\PROGRA~1\FlashFXP\IEFlash.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: FlashCapture - {753BBC4B-CC73-4fb8-A5B5-CA09C804C1DD} - D:\Program Files\Flash Capture\fciext.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.optimus.pl
O15 - Trusted Zone: http://jimmy-portfolio.hostei.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1257257280968
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15109/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\AV Vcs 6.0 DIAMOND\Nowy folder\SASWINLO.DLL
O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 5977 bytes


[NieWiem]

Jasne, z pewnością w tym starociu cokolwiek zobaczę.

OTL + Gmer poproszę.

[hnebdg]

Kod: Zaznacz wszystko

OTL logfile created on: 2010-06-19 12:44:57 - Run 2
OTL by OldTimer - Version 3.2.6.0     Folder = C:\Documents and Settings\Patryk\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

1 023,00 Mb Total Physical Memory | 488,00 Mb Available Physical Memory | 48,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 3,58 Gb Free Space | 9,17% Space Free | Partition Type: NTFS
Drive D: | 72,27 Gb Total Space | 45,16 Gb Free Space | 62,49% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PATRYK-4DD148D1
Current User Name: Patryk
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2010-06-19 12:43:06 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Patryk\Pulpit\OTL.exe
PRC - [2010-05-11 17:38:20 | 006,644,736 | ---- | M] (Creative Team S.A.) -- D:\Program Files\WapSter\WapSter AQQ\AQQ.exe
PRC - [2010-05-07 11:58:23 | 001,238,352 | ---- | M] (Valve Corporation) -- D:\Steam\Steam.exe
PRC - [2010-04-28 13:45:50 | 000,835,952 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2010-04-07 21:08:52 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2010-04-07 21:08:30 | 002,145,000 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-05-15 11:33:30 | 000,204,800 | ---- | M] (A4Tech Co.,Ltd.) -- C:\Program Files\A4Tech\Mouse\Amoumain.exe
PRC - [2007-05-11 03:09:48 | 001,050,120 | ---- | M] (O&O Software GmbH) -- C:\WINDOWS\system32\oodag.exe
PRC - [2006-03-03 22:03:10 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2010-06-19 12:43:06 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Patryk\Pulpit\OTL.exe
MOD - [2008-04-14 19:16:32 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2007-05-15 11:31:52 | 000,036,864 | ---- | M] (A4Tech Co.,Ltd.) -- C:\WINDOWS\system32\Amhooker.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2010-04-07 21:13:20 | 000,033,560 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EHttpSrv)
SRV - [2010-04-07 21:08:52 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2010-03-18 17:47:22 | 000,035,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)
SRV - [2010-03-18 14:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2007-05-11 03:09:48 | 001,050,120 | ---- | M] (O&O Software GmbH) [Auto | Running] -- C:\WINDOWS\system32\oodag.exe -- (O&O Defrag)
SRV - [2006-03-03 22:03:10 | 000,069,632 | ---- | M] (HP) [Unknown | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2010-05-29 21:58:42 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-04-07 21:09:48 | 000,095,872 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2010-04-07 21:08:36 | 000,114,984 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2010-04-07 21:05:12 | 000,140,216 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009-11-09 05:21:18 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2009-09-06 05:37:24 | 000,028,944 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Documents and Settings\Patryk\Moje dokumenty\TrackMania\ \xqz ring0 by dedi\xqz ring0 by dedi\injectDLL.sys -- (injectDLL)
DRV - [2008-05-02 11:58:14 | 000,020,864 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2008-05-02 11:58:12 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2007-05-14 23:41:46 | 000,014,336 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Amusbprt.sys -- (Amusbprt)
DRV - [2007-05-14 23:38:22 | 000,009,216 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Amfilter.sys -- (Amfilter)
DRV - [2006-11-04 00:45:48 | 000,178,913 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\V0260Vid.sys -- (V0260VID)
DRV - [2006-05-03 18:50:42 | 001,540,608 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.optimus.pl/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.6.6.117
FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.5.4
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100211.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.736

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-05-03 23:22:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-05-04 15:34:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010-06-19 10:24:01 | 000,000,000 | ---D | M]

[2009-12-06 10:18:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Mozilla\Extensions
[2010-06-17 20:41:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Mozilla\Firefox\Profiles\wwul6phw.default\extensions
[2009-12-06 18:27:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Patryk\Dane aplikacji\Mozilla\Firefox\Profiles\wwul6phw.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-03-19 23:30:23 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Patryk\Dane aplikacji\Mozilla\Firefox\Profiles\wwul6phw.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010-05-17 19:30:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Mozilla\Firefox\Profiles\wwul6phw.default\extensions\firebug@software.joehewitt.com
[2010-05-26 18:38:25 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-05-04 15:34:48 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-02-21 13:50:28 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
[2010-05-04 15:34:28 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009-12-22 05:48:34 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-12-22 05:48:34 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-12-22 05:48:34 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-12-22 05:48:34 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-12-22 05:48:34 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-12-22 05:48:34 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2004-08-04 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found
O2 - BHO: (FlashFXP Helper for Internet Explorer) - {E5A1691B-D188-4419-AD02-90002030B8EE} - D:\Program Files\FlashFXP\IEFlash.dll (IniCom Networks, Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found
O4 - HKLM..\Run: [Cmaudio]  File not found
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co.,Ltd.)
O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: FlashCapture - {753BBC4B-CC73-4fb8-A5B5-CA09C804C1DD} - D:\Program Files\Flash Capture\fciext.dll File not found
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: hostei.com ([jimmy-portfolio] http in Trusted sites)
O15 - HKCU\..Trusted Domains: hostei.com ([jimmy-portfolio] https in Trusted sites)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1257257280968 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15109/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 94.101.16.8
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - D:\Program Files\AV Vcs 6.0 DIAMOND\Nowy folder\SASWINLO.DLL - D:\Program Files\AV Vcs 6.0 DIAMOND\Nowy folder\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Patryk\Moje dokumenty\Moje obrazy\bike.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Patryk\Moje dokumenty\Moje obrazy\bike.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Program Files\AV Vcs 6.0 DIAMOND\Nowy folder\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-10-28 17:23:36 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O34 - HKLM BootExecute: (OODBS) - C:\WINDOWS\System32\OODBS.exe (O&O Software GmbH)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010-06-19 12:43:05 | 000,572,416 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Patryk\Pulpit\OTL.exe
[2010-06-19 10:24:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2010-06-19 10:23:58 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010-06-19 10:23:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2010-06-19 09:54:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Pulpit\portfolio
[2010-06-18 12:59:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Pulpit\PORTFOLIO v1
[2010-06-18 07:43:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Pulpit\AV_Voice_Changer_Diamond_v6.0.10_Retail
[2010-06-17 18:53:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Moje dokumenty\Fruity Loops
[2010-06-14 16:25:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Dane aplikacji\SUPERAntiSpyware.com
[2010-06-14 16:25:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\SUPERAntiSpyware.com
[2010-06-13 13:16:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\EXP
[2010-06-09 08:27:20 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
[2010-06-04 18:28:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Moje dokumenty\VirtualDJ
[2010-06-04 18:22:41 | 000,254,976 | ---- | C] (MpegTV) -- C:\WINDOWS\System32\xaudio.dll
[2010-06-04 16:52:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Dane aplikacji\Sawer
[2010-06-04 16:51:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Dane aplikacji\Juce VST Host
[2010-06-04 16:51:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Dane aplikacji\Hardcore
[2010-06-04 16:33:12 | 000,225,280 | ---- | C] (Propellerhead Software AB) -- C:\WINDOWS\System32\rewire.dll
[2010-06-04 16:33:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Moje dokumenty\Image-Line
[2010-06-04 16:32:51 | 001,554,944 | ---- | C] (HMS http://hp.vector.co.jp/authors/VA012897/) -- C:\WINDOWS\System32\vorbis.acm
[2010-06-04 16:32:03 | 000,000,000 | ---D | C] -- C:\Program Files\VstPlugins
[2010-06-04 16:32:01 | 000,000,000 | ---D | C] -- C:\Program Files\Image-Line
[2010-06-04 16:32:00 | 000,000,000 | ---D | C] -- C:\Program Files\Outsim
[2010-06-03 19:52:06 | 000,000,000 | ---D | C] -- C:\vcs5BGEffects
[2010-05-29 21:58:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Dane aplikacji\DAEMON Tools Lite
[2010-05-29 21:58:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010-05-29 21:45:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Pulpit\Desktop
[2010-05-28 17:22:04 | 000,098,304 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2010-05-25 21:26:38 | 000,000,000 | ---D | C] -- C:\Program Files\Selteco
[2010-05-25 15:50:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Ustawienia lokalne\Dane aplikacji\AskToolbar
[2010-05-24 21:41:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Patryk\Pulpit\P-R
[2010-05-22 22:29:14 | 002,380,800 | ---- | C] (mIRC Co. Ltd.) -- C:\Documents and Settings\Patryk\Pulpit\mIRC - English.exe
[2010-05-21 14:18:17 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_0.dll
[2010-05-21 14:18:17 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_0.dll
[2010-05-21 14:18:09 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_29.dll
[2010-05-21 14:18:09 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll
[2010-05-21 14:18:08 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_27.dll
[2010-05-21 14:18:08 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_26.dll
[2010-05-21 14:18:08 | 000,061,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput9_1_0.dll
[2010-05-21 14:18:07 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_25.dll
[2010-05-21 14:18:05 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_24.dll

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010-06-19 12:43:06 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Patryk\Pulpit\OTL.exe
[2010-06-19 12:30:51 | 000,002,395 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\HiJackThis.lnk
[2010-06-19 12:25:40 | 001,402,880 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\HiJackThis.msi
[2010-06-19 12:19:57 | 000,002,797 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\Flash-1_html_code.htm
[2010-06-19 12:19:57 | 000,000,666 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\Flash-1.swf
[2010-06-19 09:45:05 | 001,987,621 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\portfolio.rar
[2010-06-19 09:41:54 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-06-19 09:41:51 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-06-19 09:41:49 | 1073,270,784 | -HS- | M] () -- C:\hiberfil.sys
[2010-06-19 09:41:42 | 002,954,251 | ---- | M] () -- C:\WINDOWS\System32\oodbs.lor
[2010-06-18 17:49:57 | 007,340,032 | -H-- | M] () -- C:\Documents and Settings\Patryk\NTUSER.DAT
[2010-06-18 17:49:57 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Patryk\ntuser.ini
[2010-06-18 16:07:58 | 000,032,709 | ---- | M] () -- C:\Documents and Settings\Patryk\.recently-used.xbel
[2010-06-18 15:16:00 | 000,000,067 | ---- | M] () -- C:\Documents and Settings\Patryk\.gtk-bookmarks
[2010-06-18 11:39:06 | 000,052,763 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\lol.jpg
[2010-06-18 07:40:21 | 011,736,141 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\AV_Voice_Changer_Diamond_v6.0.10_Retail.rar
[2010-06-17 22:35:13 | 001,216,854 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\elo.jpg
[2010-06-17 21:04:49 | 000,000,873 | ---- | M] () -- C:\Documents and Settings\Patryk\Moje dokumenty\soisk.bat
[2010-06-17 15:18:57 | 039,215,616 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\eav_nt32_plk.msi
[2010-06-13 21:51:59 | 000,000,657 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-06-13 21:51:59 | 000,000,254 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-06-13 21:51:59 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2010-06-13 13:07:30 | 000,063,947 | ---- | M] () -- C:\Documents and Settings\Patryk\Moje dokumenty\nuta.mp3
[2010-06-13 13:05:03 | 010,584,058 | ---- | M] () -- C:\Documents and Settings\Patryk\Moje dokumenty\dadasdas.wav
[2010-06-13 10:42:15 | 000,000,332 | ---- | M] () -- C:\WINDOWS\System\cmicnfg.ini
[2010-06-11 14:33:06 | 003,374,566 | ---- | M] () -- C:\Documents and Settings\Patryk\Moje dokumenty\beat2.mp3
[2010-06-10 16:24:06 | 003,657,560 | ---- | M] () -- C:\Documents and Settings\Patryk\Moje dokumenty\Fokus - Alterego (rmx by hnE).mp3
[2010-06-09 22:23:04 | 000,790,487 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\portfolio.psd
[2010-06-09 12:13:22 | 000,325,112 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-06-09 10:49:06 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010-06-09 10:41:34 | 001,216,618 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-06-09 10:41:34 | 000,558,022 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-06-09 10:41:34 | 000,495,958 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-06-09 10:41:34 | 000,105,118 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-06-09 10:41:34 | 000,084,442 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-06-08 17:41:16 | 000,000,670 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\FL Studio 9.lnk
[2010-06-07 16:44:42 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-06-05 13:10:08 | 005,654,021 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\ds.psd
[2010-06-05 13:05:34 | 001,301,695 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\ds.png
[2010-06-05 10:44:55 | 000,095,272 | ---- | M] () -- C:\Documents and Settings\Patryk\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2010-06-04 10:02:22 | 006,950,896 | -H-- | M] () -- C:\Documents and Settings\Patryk\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-05-29 22:17:16 | 000,000,787 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Tony Hawk's American Wasteland.lnk
[2010-05-29 21:58:42 | 000,691,696 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2010-05-28 17:22:04 | 000,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2010-05-24 22:30:23 | 000,000,545 | ---- | M] () -- C:\Documents and Settings\Patryk\Pulpit\d.m3u

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-06-19 12:30:44 | 000,002,395 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\HiJackThis.lnk
[2010-06-19 12:25:34 | 001,402,880 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\HiJackThis.msi
[2010-06-19 12:11:40 | 000,002,797 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\Flash-1_html_code.htm
[2010-06-19 12:11:39 | 000,000,666 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\Flash-1.swf
[2010-06-19 09:45:00 | 001,987,621 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\portfolio.rar
[2010-06-18 16:07:58 | 000,032,709 | ---- | C] () -- C:\Documents and Settings\Patryk\.recently-used.xbel
[2010-06-18 15:16:00 | 000,000,067 | ---- | C] () -- C:\Documents and Settings\Patryk\.gtk-bookmarks
[2010-06-18 11:39:05 | 000,052,763 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\lol.jpg
[2010-06-17 22:35:13 | 001,216,854 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\elo.jpg
[2010-06-17 20:43:45 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-06-17 20:43:45 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010-06-17 15:17:17 | 039,215,616 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\eav_nt32_plk.msi
[2010-06-13 13:07:27 | 000,063,947 | ---- | C] () -- C:\Documents and Settings\Patryk\Moje dokumenty\nuta.mp3
[2010-06-13 13:05:03 | 010,584,058 | ---- | C] () -- C:\Documents and Settings\Patryk\Moje dokumenty\dadasdas.wav
[2010-06-10 23:15:33 | 003,374,566 | ---- | C] () -- C:\Documents and Settings\Patryk\Moje dokumenty\beat2.mp3
[2010-06-10 16:21:22 | 003,657,560 | ---- | C] () -- C:\Documents and Settings\Patryk\Moje dokumenty\Fokus - Alterego (rmx by hnE).mp3
[2010-06-09 22:23:03 | 000,790,487 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\portfolio.psd
[2010-06-05 13:05:28 | 001,301,695 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\ds.png
[2010-06-05 12:24:35 | 005,654,021 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\ds.psd
[2010-05-29 22:17:16 | 000,000,787 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Tony Hawk's American Wasteland.lnk
[2010-05-29 21:58:41 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2010-05-25 15:30:34 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\selteco.scr
[2010-05-24 22:30:23 | 000,000,545 | ---- | C] () -- C:\Documents and Settings\Patryk\Pulpit\d.m3u
[2010-05-07 18:37:29 | 000,045,936 | ---- | C] () -- C:\WINDOWS\php.ini
[2010-05-07 18:37:29 | 000,000,486 | ---- | C] () -- C:\WINDOWS\my.ini
[2010-03-06 23:33:01 | 000,000,772 | ---- | C] () -- C:\WINDOWS\wordpad.ini
[2010-01-03 15:23:04 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2009-12-15 21:02:06 | 000,000,089 | ---- | C] () -- C:\WINDOWS\System32\tcfg.ini
[2009-12-06 13:02:37 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2009-11-21 16:50:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS\oodcnt.INI
[2009-10-28 18:47:40 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI
[2009-10-28 18:47:39 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI
[2009-10-28 18:47:37 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
[2009-10-28 18:47:37 | 000,000,010 | ---- | C] () -- C:\WINDOWS\Wininit.ini
[2009-10-28 18:47:36 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll
[2007-11-14 19:42:27 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2007-11-09 13:01:59 | 000,000,164 | ---- | C] () -- C:\WINDOWS\System32\psyswin32.dll
[2004-10-04 14:05:10 | 000,000,836 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2001-07-07 04:00:02 | 000,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

[color=#E56717]========== LOP Check ==========[/color]

[2009-11-19 16:04:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper
[2010-05-08 19:11:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Banner Maker Pro for Flash
[2010-05-29 21:58:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2009-12-25 18:16:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DriverScanner
[2010-06-19 10:23:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2009-11-07 17:48:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Farm Frenzy
[2009-11-19 16:39:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FlyWheelGames
[2010-01-16 15:48:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Fugazo
[2010-01-14 20:36:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\id Software
[2009-12-26 00:05:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound
[2010-05-08 22:40:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2010-01-19 16:56:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TrackMania
[2010-01-14 16:55:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Zylom
[2010-05-29 22:02:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\DAEMON Tools Lite
[2010-01-28 14:11:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\dBpoweramp
[2010-06-16 08:18:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Dev-Cpp
[2010-03-22 20:33:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\EurekaLog
[2010-06-16 23:23:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\FileZilla
[2009-10-29 22:26:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\FlashFXP
[2009-11-21 14:47:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Gadu-Gadu
[2010-06-18 16:07:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\gtk-2.0
[2010-06-04 16:51:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Hardcore
[2010-06-16 08:46:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\HLSW
[2010-01-14 20:37:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\id Software
[2010-06-18 13:42:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Image Zone Express
[2010-06-04 16:51:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Juce VST Host
[2010-06-10 17:02:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Mumble
[2009-12-26 10:54:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\NCH Swift Sound
[2009-10-28 10:25:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Nowe Gadu-Gadu
[2009-10-28 10:04:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Opera
[2010-05-12 10:03:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\RayV
[2010-06-04 16:52:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Sawer
[2009-12-25 18:16:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\Uniblue
[2010-06-07 07:37:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Patryk\Dane aplikacji\uTorrent

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:18DB21EC
< End of report >


[wojtas]

Brak loga z Gmera + extras.txt z OTL

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found
O4 - HKLM..\Run: [Cmaudio] File not found
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.6.6.117
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:18DB21EC

:Commands
[emptytemp]
[emptyflash]
[clearallrestorepoints]

Kliknij w Run Fix. I potwierdź reset komputera .