- Kod: Zaznacz wszystko
Deckard's System Scanner v20071014.68
Run by Wuch on 2007-08-01 13:13:22
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Successfully created a Deckard's System Scanner Restore Point.
-- Last 5 Restore Point(s) --
16: 2007-08-01 11:13:25 UTC - RP126 - Deckard's System Scanner Restore Point
15: 2007-08-01 10:35:10 UTC - RP125 - Punkt kontrolny systemu
14: 2007-07-30 17:28:51 UTC - RP124 - Installed Adobe Photoshop CS2
13: 2007-07-30 15:15:29 UTC - RP123 - Punkt kontrolny systemu
12: 2007-07-29 08:31:26 UTC - RP122 - Punkt kontrolny systemu
-- First Restore Point --
1: 2007-12-17 16:07:04 UTC - RP111 - Punkt kontrolny systemu
Backed up registry hives.
Performed disk cleanup.
-- HijackThis (run as Wuch.exe) ------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:14:06, on 2007-08-01
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\TPSrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Marvell\61xx\svc\mvraidsvc.exe
C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\PsCtrls.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\PavFnSvr.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\pavsrv51.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\AntiSpam\pskmssvc.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\AVENGINE.EXE
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\panda security\panda internet security 2008\firewall\PSHOST.EXE
C:\Program Files\Panda Security\Panda Internet Security 2008\PsImSvc.exe
C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\PavBckPT.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Wuch\Pulpit\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Wuch.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Internet Security 2008\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Security\Panda Internet Security 2008\Inicio.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Marvell RAID Event Agent (Marvell RAID) - Unknown owner - C:\Program Files\Marvell\61xx\svc\mvraidsvc.exe
O23 - Service: MRU Web Service (MRUWebService) - Apache Software Foundation - C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Security\Panda Internet Security 2008\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Security\Panda Internet Security 2008\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Security\Panda Internet Security 2008\pavsrv51.exe
O23 - Service: Panda Antispam Engine (pmshellsrv) - Panda Software International - C:\Program Files\Panda Security\Panda Internet Security 2008\AntiSpam\pskmssvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\program files\panda security\panda internet security 2008\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Panda Security\Panda Internet Security 2008\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software International - C:\Program Files\Panda Security\Panda Internet Security 2008\TPSrv.exe
--
End of file - 8483 bytes
-- File Associations -----------------------------------------------------------
[COLOR=red].cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*[/COLOR]
[COLOR=red].cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1",%*[/COLOR]
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R0 mv61xx - c:\windows\system32\drivers\mv61xx.sys <Not Verified; Marvell Semiconductor, Inc.; Marvell Thor and Odin>
R3 AvFlt (Antivirus Filter Driver) - c:\windows\system32\drivers\av5flt.sys (file missing)
R3 PavSRK.sys - c:\windows\system32\pavsrk.sys (file missing)
R3 PavTPK.sys - c:\windows\system32\pavtpk.sys (file missing)
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 Marvell RAID (Marvell RAID Event Agent) - c:\program files\marvell\61xx\svc\mvraidsvc.exe <Not Verified; ; mvraidsvc Application>
R2 MRUWebService (MRU Web Service) - "c:\program files\marvell\61xx\apache2\bin\apache.exe" -k runservice <Not Verified; Apache Software Foundation; Apache HTTP Server>
S3 NBService - c:\program files\nero\nero 7\nero backitup\nbservice.exe
-- Device Manager: Disabled ----------------------------------------------------
Class GUID: {4D36E96F-E325-11CE-BFC1-08002BE10318}
Description: Mysz Microsoft PS/2
Device ID: ACPI\PNP0F03\4&1400782C&0
Manufacturer: Microsoft
Name: Mysz Microsoft PS/2
PNP Device ID: ACPI\PNP0F03\4&1400782C&0
Service: i8042prt
-- Files created between 2007-07-01 and 2007-08-01 -----------------------------
2008-07-11 14:06:21 0 d-------- C:\Program Files\vixy.net
2008-07-06 21:23:42 0 d-------- C:\Program Files\Common Files\Adobe
2008-06-22 08:12:09 0 d-------- C:\Program Files\Red Kawa
2008-06-15 14:59:02 0 d-------- C:\Program Files\Any Video Converter
2008-06-08 20:16:45 0 d-------- C:\Documents and Settings\Wuch\Application Data
2008-06-08 20:16:45 0 d-------- C:\Documents and Settings\Wuch\Application Data\Microsoft
2008-06-03 21:59:07 0 d-------- C:\Program Files\Azureus
2008-05-16 18:48:54 0 d-------- C:\WINDOWS\system32\URTTEMP
2008-05-16 18:47:16 669184 --a------ C:\WINDOWS\system32\pbsvc.exe
2008-05-16 18:36:15 0 d-------- C:\Program Files\Electronic Arts
2008-05-15 20:08:09 383238 --a------ C:\WINDOWS\system32\libmp3lame-0.dll
2008-05-10 19:09:02 0 d-------- C:\WINDOWS\Prefetch
2008-05-10 18:33:31 0 d-------- C:\WINDOWS\system32\pl
2008-05-10 18:33:31 0 d-------- C:\WINDOWS\l2schemas
2008-05-09 09:37:24 892928 --a------ C:\WINDOWS\system32\iconv.dll <Not Verified; Free Software Foundation; libiconv: character set conversion library>
2008-05-09 09:37:07 404992 --a------ C:\WINDOWS\system32\libmplayer.dll
2008-05-09 09:37:05 126976 --a------ C:\WINDOWS\system32\libmpeg2_ff.dll
2008-05-09 09:37:05 3142656 --a------ C:\WINDOWS\system32\libavcodec.dll
2008-05-09 09:36:51 23552 --a------ C:\WINDOWS\system32\ff_wmv9.dll
2008-05-09 09:36:51 56832 --a------ C:\WINDOWS\system32\ff_unrar.dll
2008-05-09 09:36:50 102912 --a------ C:\WINDOWS\system32\ff_tremor.dll
2008-05-09 09:36:46 135168 --a------ C:\WINDOWS\system32\ff_samplerate.dll
2008-05-09 09:36:42 118784 --a------ C:\WINDOWS\system32\ff_realaac.dll
2008-05-09 09:36:41 143360 --a------ C:\WINDOWS\system32\ff_libmad.dll
2008-05-09 09:36:40 397312 --a------ C:\WINDOWS\system32\ff_libfaad2.dll
2008-05-09 09:36:39 172032 --a------ C:\WINDOWS\system32\ff_libdts.dll
2008-05-09 09:36:38 51712 --a------ C:\WINDOWS\system32\ff_liba52.dll
2008-05-09 09:36:37 237568 --a------ C:\WINDOWS\system32\OggDS.dll <Not Verified; ; Ogg DirectShow(tm) Filter Collection>
2008-05-09 09:36:36 921600 --a------ C:\WINDOWS\system32\vorbisenc.dll
2008-05-09 09:36:32 188416 --a------ C:\WINDOWS\system32\vorbis.dll
2008-05-09 09:36:31 45056 --a------ C:\WINDOWS\system32\ogg.dll
2008-05-09 09:36:29 1415680 --a------ C:\WINDOWS\system32\WMV9VCM.dll <Not Verified; Microsoft Corporation; Windows Media Video 9 VCM>
2008-05-09 09:36:22 245760 --a------ C:\WINDOWS\system32\mplvpx.dll <Not Verified; Ligos Corporation; MPL Video Library>
2008-05-09 09:36:20 9216 --a------ C:\WINDOWS\system32\cpuinf32.dll
2008-05-09 09:36:05 141312 --a------ C:\WINDOWS\system32\mp4.dll
2008-05-09 09:36:05 108032 --a------ C:\WINDOWS\system32\avi.dll
2008-05-09 09:36:04 148992 --a------ C:\WINDOWS\system32\mkx.dll
2008-05-09 09:36:03 159744 --a------ C:\WINDOWS\system32\mmfinfo.dll
2008-05-09 09:36:02 120832 --a------ C:\WINDOWS\system32\ogm.dll
2008-05-09 09:36:01 163840 --a------ C:\WINDOWS\system32\ts.dll
2008-05-09 09:36:00 79360 --a------ C:\WINDOWS\system32\mkzlib.dll
2008-05-09 09:35:59 23552 --a------ C:\WINDOWS\system32\mkunicode.dll
2008-05-09 09:35:37 0 d-------- C:\Program Files\QT Lite
2008-04-29 20:12:58 0 d-------- C:\Program Files\Sony Ericsson
2008-04-27 10:37:10 0 d-------- C:\Program Files\IrfanView
2008-04-26 20:06:26 164352 --a------ C:\WINDOWS\system32\unrar.dll
2008-04-26 20:06:25 217088 --a------ C:\WINDOWS\system32\yv12vfw.dll <Not Verified; www.helixcommunity.org; Helix YV12 YUV Codec>
2008-04-26 20:06:24 159839 --a------ C:\WINDOWS\system32\xvidvfw.dll
2008-04-26 20:06:24 765952 --a------ C:\WINDOWS\system32\xvidcore.dll
2008-04-26 20:06:24 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-04-26 20:06:24 81920 --a------ C:\WINDOWS\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2008-04-26 20:06:24 682496 --a------ C:\WINDOWS\system32\divx.dll <Not Verified; DivX, Inc.; DivX®>
2008-04-26 20:06:22 7680 --a------ C:\WINDOWS\system32\ff_vfw.dll
2008-04-26 20:06:20 0 d-------- C:\Program Files\K-Lite Codec Pack
2008-04-23 19:23:17 0 d-------- C:\Documents and Settings\Wuch\.thumbnails
2008-04-22 20:04:37 0 d-------- C:\WINDOWS\system32\AGEIA
2008-04-22 20:04:36 0 d-------- C:\Program Files\AGEIA Technologies
2008-04-22 20:04:31 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-04-22 19:47:15 0 d-------- C:\Program Files\THQ
2008-04-22 10:08:49 0 d-------- C:\Downloads
2008-04-17 19:08:24 0 d-------- C:\Netgear
2008-04-16 16:45:26 0 d-------- C:\Program Files\Lavalys
2008-04-12 18:07:47 0 d-------- C:\WINDOWS\system32\LogFiles
2008-04-12 14:14:56 0 d-------- C:\WINDOWS\system32\pl-pl
2008-04-12 14:12:35 0 d-------- C:\WINDOWS\network diagnostic
2008-04-11 19:11:21 0 d-------- C:\Program Files\Activision
2008-04-11 19:09:57 0 d--hs---- C:\WINDOWS\ftpcache
2008-04-11 16:53:06 261 --a------ C:\WINDOWS\system32\PavCPL.dat
2008-04-11 16:53:03 308556 --a------ C:\WINDOWS\system32\drivers\APPFCONT.DAT
2008-04-11 16:52:34 446464 --a------ C:\WINDOWS\system32\HHActiveX.dll <Not Verified; eHelp Corporation.; RoboHELP HTML 9.2>
2008-04-11 16:52:03 0 d-------- C:\WINDOWS\system32\PAV
2008-04-11 16:51:58 0 d-------- C:\Program Files\Panda Security
2008-04-11 16:50:48 0 d-------- C:\Program Files\Common Files\Panda Software
2008-04-10 15:43:15 0 d-------- C:\Program Files\Mozilla Thunderbird
2008-04-09 22:18:00 0 d-------- C:\Program Files\MSXML 4.0
2008-04-09 18:24:52 2547 --a------ C:\WINDOWS\mozver.dat
2008-04-09 17:15:57 0 d-------- C:\Program Files\Common Files\Futuremark Shared
2008-04-09 17:15:24 0 d-------- C:\WINDOWS\Sun
2008-04-09 17:14:46 0 d-------- C:\Program Files\Java
2008-04-09 17:13:58 0 d-------- C:\Program Files\Common Files\Java
2008-04-09 16:16:39 0 d-------- C:\WINDOWS\system32\Futuremark
2008-04-09 16:16:39 3972 -----n--- C:\WINDOWS\system32\drivers\PciBus.sys
2008-04-09 16:16:10 0 d-------- C:\Program Files\Futuremark
2008-04-09 16:10:35 0 d-------- C:\Program Files\EA GAMES
2008-04-08 21:45:39 139536 --a------ C:\WINDOWS\system32\javaee.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-04-08 21:45:39 46352 --a------ C:\WINDOWS\setdebug.exe <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-04-08 21:45:38 6550 --a------ C:\WINDOWS\jautoexp.dat
2008-04-08 21:45:35 113 --a------ C:\WINDOWS\system32\zonedon.reg
2008-04-08 21:45:35 113 --a------ C:\WINDOWS\system32\zonedoff.reg
2008-04-08 21:29:44 0 d-------- C:\WINDOWS\provisioning
2008-04-08 21:29:44 0 d-------- C:\WINDOWS\peernet
2008-04-08 21:28:51 0 d-------- C:\WINDOWS\ServicePackFiles
2008-04-08 21:26:58 0 d-------- C:\WINDOWS\EHome
2008-04-08 20:54:56 0 d-------- C:\Program Files\LightScribeTemplateLabeler
2008-04-08 20:46:54 0 d-------- C:\WINDOWS
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\WinSxS
2008-04-08 20:46:54 0 dr------- C:\WINDOWS\Web
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\twain_32
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\wins
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\wbem
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\usmt
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\spool
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\ShellExt
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\Setup
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\ras
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\oobe
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\npp
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\mui
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\inetsrv
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\IME
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\icsxml
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\ias
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\export
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\drivers
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\drivers\etc
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\drivers\disdn
2008-04-08 20:46:54 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\dhcp
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\config
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\3com_dmi
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\3076
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\2052
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\1054
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\1045
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\1042
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\1041
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\1037
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\1033
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\1031
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\1028
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system32\1025
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\system
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\security
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\Resources
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\repair
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\mui
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\msapps
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\msagent
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\Media
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\java
2008-04-08 20:46:54 0 d--h----- C:\WINDOWS\inf
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\ime
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\Help
2008-04-08 20:46:54 0 dr--s---- C:\WINDOWS\Fonts
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\Driver Cache
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\Debug
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\Cursors
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\Connection Wizard
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\Config
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\AppPatch
2008-04-08 20:46:54 0 d-------- C:\WINDOWS\addins
2008-04-08 20:41:39 0 d-------- C:\WINDOWS\nvidia icons
2008-04-08 20:41:23 0 d-------- C:\WINDOWS\nview
2008-04-08 20:40:59 0 d-------- C:\NVIDIA
2008-04-08 20:29:52 0 d-------- C:\WINDOWS\system32\bits
2008-04-08 20:29:33 0 d-------- C:\WINDOWS\system32\PreInstall
2008-04-08 20:29:31 0 d--h----- C:\WINDOWS\$hf_mig$
2008-04-08 20:21:47 0 d-------- C:\Program Files\MarBit
2008-04-08 20:21:27 0 d-------- C:\Program Files\Yahoo!
2008-04-08 20:21:23 0 d-------- C:\Program Files\CCleaner
2008-04-08 20:20:51 0 d-------- C:\Program Files\foobar2000
2008-04-08 20:20:02 0 d-------- C:\Program Files\Real Alternative
2008-04-08 20:19:09 0 d-------- C:\WINDOWS\system32\SoftwareDistribution
2008-04-08 20:18:12 0 d-------- C:\Program Files\Skype
2008-04-08 20:18:11 0 d-------- C:\Program Files\Common Files\Skype
2008-04-08 20:15:19 0 d-------- C:\Documents and Settings\Wuch\Gadu-Gadu
2008-04-08 20:06:10 0 d-------- C:\WINDOWS\SoftwareDistribution
2008-04-08 19:57:04 0 d-------- C:\Program Files\Alwil Software
2008-04-08 19:53:15 0 d-------- C:\Do PSP
2008-04-08 19:51:28 0 d-------- C:\Program Files\Common Files\ODBC
2008-04-08 19:51:26 0 dr------- C:\Program Files
2008-04-08 19:51:26 0 d-------- C:\Program Files\Common Files
2008-04-08 19:51:26 0 d-------- C:\Program Files\Common Files\SpeechEngines
2008-04-08 19:50:34 0 d-------- C:\WINDOWS\system32\CatRoot2
2008-04-08 19:50:34 0 d-------- C:\WINDOWS\system32\CatRoot
2008-04-08 19:50:16 0 d-------- C:\Documents and Settings
2008-04-08 19:45:07 0 d-------- C:\WINDOWS\ShellNew
2008-04-08 19:38:28 9 --a------ C:\WINDOWS\mvraidver.dat
2008-04-08 19:35:59 0 d-------- C:\Program Files\Marvell
2008-04-08 19:33:36 0 d-------- C:\WINDOWS\system32\Attansic
2008-04-08 19:33:36 0 d-------- C:\Program Files\Attansic
2008-04-08 19:33:11 0 d-------- C:\WINDOWS\system32\Lang
2008-04-08 19:32:06 49152 --a------ C:\WINDOWS\system32\ChCfg.exe
2008-04-08 19:31:49 0 d-------- C:\WINDOWS\system32\RTCOM
2008-04-08 19:31:08 0 d-------- C:\Program Files\Realtek
2008-04-08 19:31:07 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-04-08 19:31:05 520192 --a------ C:\WINDOWS\RtlExUpd.dll <Not Verified; Realtek Semiconductor Corp.; RtlExUpd Dynamic Link Library>
2008-04-08 19:31:05 315392 --a------ C:\WINDOWS\HideWin.exe <Not Verified; Realtek Semiconductor Corp.; HD Audio Hide windows program>
2008-04-08 19:31:03 0 d-------- C:\Program Files\Common Files\InstallShield
2008-04-08 19:29:54 0 d-------- C:\WINDOWS\ASUSInstAll
2008-04-08 19:24:29 0 d-------- C:\WINDOWS\system32\drivers\System32
2008-04-08 19:24:29 0 d-------- C:\WINDOWS\system32\drivers\INF
2008-04-08 19:24:19 0 d-------- C:\WINDOWS\system32\ReinstallBackups
2008-04-08 19:24:18 0 d------c- C:\WINDOWS\system32\DRVSTORE
2008-04-08 19:24:18 0 d-------- C:\Program Files\Intel
2008-04-08 19:24:07 0 d-------- C:\Intel
2008-04-08 19:23:01 10288 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2008-04-08 19:18:52 0 d-------- C:\Program Files\Common Files\LightScribe
2008-04-08 19:15:49 0 d-------- C:\Program Files\Nero
2008-04-08 19:15:48 0 d-------- C:\Program Files\Common Files\Ahead
2008-04-08 19:14:49 0 d-------- C:\WINDOWS\RegisteredPackages
2008-04-08 19:13:05 0 d---s---- C:\WINDOWS\system32\Microsoft
2008-04-08 19:12:53 0 d--h---c- C:\WINDOWS\$MSI30UninstallMSI30-KB884016$
2008-04-08 18:59:57 0 d--hs---- C:\WINDOWS\Installer
2008-04-08 18:59:46 0 d--h----- C:\Documents and Settings\Wuch\Ustawienia lokalne
2008-04-08 18:59:46 0 dr------- C:\Documents and Settings\Wuch\Ulubione
2008-04-08 18:59:46 0 d--h----- C:\Documents and Settings\Wuch\Szablony
2008-04-08 18:59:46 0 dr-h----- C:\Documents and Settings\Wuch\SendTo
2008-04-08 18:59:46 0 d-------- C:\Documents and Settings\Wuch\Pulpit
2008-04-08 18:59:46 0 d--h----- C:\Documents and Settings\Wuch\PrintHood
2008-04-08 18:59:46 4718592 --ah----- C:\Documents and Settings\Wuch\NTUSER.DAT
2008-04-08 18:59:46 0 d--h----- C:\Documents and Settings\Wuch\NetHood
2008-04-08 18:59:46 0 dr------- C:\Documents and Settings\Wuch\Moje dokumenty
2008-04-08 18:59:46 0 dr------- C:\Documents and Settings\Wuch\Menu Start
2008-04-08 18:59:46 0 dr-h----- C:\Documents and Settings\Wuch\Dane aplikacji
2008-04-08 18:59:46 0 d--hs---- C:\Documents and Settings\Wuch\Cookies
2008-04-08 18:59:14 0 d--hs---- C:\System Volume Information
2008-04-08 18:57:24 0 d-------- C:\WINDOWS\system32\xircom
2008-04-08 18:57:24 0 d-------- C:\Program Files\microsoft frontpage
2008-04-08 18:56:47 0 dr------- C:\WINDOWS\Offline Web Pages
2008-04-08 18:56:47 0 d---s---- C:\WINDOWS\Downloaded Program Files
2008-04-08 18:56:33 0 d-------- C:\WINDOWS\system32\DirectX
2008-04-08 18:56:02 0 d---s---- C:\WINDOWS\Tasks
2008-04-08 18:56:00 0 d-------- C:\Program Files\Common Files\MSSoap
2008-04-08 18:55:57 0 d-------- C:\WINDOWS\srchasst
2008-04-08 18:55:56 0 d-------- C:\WINDOWS\system32\Macromed
2008-04-08 18:55:55 0 d-------- C:\Program Files\Movie Maker
2008-04-08 18:55:53 0 d-------- C:\WINDOWS\PCHealth
2008-04-08 18:55:52 0 d-------- C:\WINDOWS\system32\Restore
2008-04-08 18:55:43 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat
2008-04-08 18:55:40 0 d-------- C:\WINDOWS\Registration
2008-04-08 18:55:31 0 d--h----- C:\Program Files\WindowsUpdate
2008-04-08 18:55:31 0 d-------- C:\Program Files\Usługi online
2008-04-08 18:55:29 0 d-------- C:\Program Files\Messenger
2008-04-08 18:55:26 0 d-------- C:\Program Files\MSN Gaming Zone
2008-04-08 18:55:01 0 d-------- C:\Program Files\Windows NT
2008-04-08 18:54:59 0 d-------- C:\WINDOWS\system32\MsDtc
2008-04-08 18:54:59 0 d-------- C:\WINDOWS\system32\Com
2008-03-24 19:52:00 1626112 --a------ C:\WINDOWS\system32\nwiz.exe
2008-03-24 19:52:00 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll
2008-03-24 19:52:00 1703936 --a------ C:\WINDOWS\system32\nvwdmcpl.dll
2008-03-24 19:52:00 466944 --a------ C:\WINDOWS\system32\nvshell.dll
2008-03-24 19:52:00 1482752 --a------ C:\WINDOWS\system32\nview.dll
2008-03-24 19:52:00 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe
2008-03-24 19:52:00 442368 --a------ C:\WINDOWS\system32\nvappbar.exe
2008-03-24 19:52:00 425984 --a------ C:\WINDOWS\system32\keystone.exe
2007-12-30 10:35:31 0 d-------- C:\Program Files\GRETECH
2007-12-29 23:10:09 0 d-------- C:\Program Files\BWorks
2007-12-16 22:43:50 0 d-------- C:\Program Files\Gadu-Gadu
2007-12-16 22:35:38 0 d-------- C:\Documents and Settings\Wuch\WapSter
2007-12-16 17:25:20 0 --a------ C:\WINDOWS\nsreg.dat
2007-12-16 17:25:20 0 -rahs---- C:\MSDOS.SYS
2007-12-16 17:25:20 0 -rahs---- C:\IO.SYS
2007-12-16 17:25:20 0 --a------ C:\CONFIG.SYS
2007-12-16 17:25:20 0 --a------ C:\AUTOEXEC.BAT
2007-08-01 13:14:02 0 d-------- C:\Program Files\Trend Micro
2007-07-31 23:00:28 0 dr-h----- C:\Documents and Settings\Wuch\Recent
2007-07-30 19:29:56 0 d-------- C:\Program Files\Common Files\Adobe Systems Shared
2007-07-29 20:22:55 0 d-------- C:\Program Files\MyCalendar
2007-07-29 20:12:34 303104 --a------ C:\WINDOWS\Uninstall_tkexe.exe <Not Verified; ; Uninstall>
2007-07-29 12:43:49 0 d-------- C:\Documents and Settings\Wuch\.gimp-2.4
2007-07-23 09:03:32 53248 --a------ C:\WINDOWS\system32\AgCPanelTraditionalChinese.dll
2007-07-23 09:03:32 53248 --a------ C:\WINDOWS\system32\AgCPanelSwedish.dll
2007-07-23 09:03:32 53248 --a------ C:\WINDOWS\system32\AgCPanelSpanish.dll
2007-07-23 09:03:30 53248 --a------ C:\WINDOWS\system32\AgCPanelSimplifiedChinese.dll
2007-07-23 09:03:30 53248 --a------ C:\WINDOWS\system32\AgCPanelPortugese.dll
2007-07-23 09:03:30 53248 --a------ C:\WINDOWS\system32\AgCPanelKorean.dll
2007-07-23 09:03:30 53248 --a------ C:\WINDOWS\system32\AgCPanelJapanese.dll
2007-07-23 09:03:30 53248 --a------ C:\WINDOWS\system32\AgCPanelGerman.dll
2007-07-23 09:03:30 53248 --a------ C:\WINDOWS\system32\AgCPanelFrench.dll
-- Find3M Report ---------------------------------------------------------------
2008-07-14 13:53:42 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Skype
2008-07-14 13:47:35 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\skypePM
2008-07-11 16:23:09 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Any Video Converter
2008-07-10 15:51:03 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Real
2008-06-17 19:45:10 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Mozilla
2008-06-07 14:15:07 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Ahead
2008-06-02 18:00:49 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\teamspeak2
2008-04-18 17:57:23 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Media Player Classic
2008-04-14 17:50:25 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\SolidDocuments
2008-04-10 20:25:59 0 dr-h----- C:\Documents and Settings\Wuch\Dane aplikacji\SecuROM
2008-04-10 15:43:29 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Thunderbird
2008-04-09 18:24:54 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Macromedia
2008-04-09 17:15:54 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\InstallShield
2008-04-09 17:15:24 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Sun
2008-04-08 20:16:33 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Gadu-Gadu
2008-04-08 19:51:11 62 --ahs---- C:\Documents and Settings\Wuch\Dane aplikacji\desktop.ini
2008-04-08 18:59:55 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Identities
2007-12-30 10:35:45 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\GRETECH
2007-12-29 17:31:05 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Sony Corporation
2007-12-19 09:43:29 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Azureus
2007-12-16 22:48:27 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Tlen.pl
2007-08-01 10:11:45 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\foobar2000
2007-07-30 22:17:40 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Adobe
2007-07-30 20:19:51 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\Opera
2007-07-30 12:55:56 0 d-------- C:\Documents and Settings\Wuch\Dane aplikacji\gtk-2.0
2007-07-29 09:40:54 463748 --a------ C:\WINDOWS\system32\perfh015.dat
2007-07-29 09:40:54 81584 --a------ C:\WINDOWS\system32\perfc015.dat
2007-05-08 15:03:04 1275392 --a------ C:\WINDOWS\system32\msxml4.dll <Not Verified; Microsoft Corporation; Microsoft(R) MSXML 4.0 SP 2>
2007-05-07 20:36:48 393216 --a------ C:\WINDOWS\system32\zraidapi.dll <Not Verified; ZApps; zraidapi Dynamic Link Library>
2007-05-07 20:26:56 110592 --a------ C:\WINDOWS\system32\mv_api.dll <Not Verified; Marvell; RAID API Dynamic Link Library>
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57]
"SecurDisc"="C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe" [2007-06-25 08:47]
"InCD"="C:\Program Files\Nero\Nero 7\InCD\InCD.exe" [2007-06-25 08:47]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2008-03-24 19:52]
"nwiz"="nwiz.exe" [2008-03-24 19:52 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\System32\NvMcTray.dll" [2008-03-24 19:52]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25]
"APVXDWIN"="C:\Program Files\Panda Security\Panda Internet Security 2008\APVXDWIN.exe" [2007-07-23 18:30]
"SCANINICIO"="C:\Program Files\Panda Security\Panda Internet Security 2008\Inicio.exe" [2007-07-11 15:17]
"RTHDCPL"="RTHDCPL.EXE" [2008-03-26 16:14 C:\WINDOWS\RTHDCPL.exe]
"Alcmtr"="ALCMTR.EXE" [2005-05-03 18:43 C:\WINDOWS\Alcmtr.exe]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 19:21]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2008-03-20 12:04]
C:\Documents and Settings\Wuch\Menu Start\Programy\Autostart\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 19:16:50]
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr]
avldr.dll 2007-02-15 20:02 50736 C:\WINDOWS\system32\avldr.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
C:\WINDOWS\System32\dimsntfy.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
eapsvcs eaphost
dot3svc dot3svc
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
napagent
hkmsvc
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
-- End of Deckard's System Scanner: finished at 2007-08-01 13:15:56 ------------
wystarczy markowe 450W 
