prosze o sprawdzenie loga delsim dialer

**Posty:** 40 · przez **Niewierny** 07 Maj 2007, 20:34

Kod: Zaznacz wszystko
Logfile of HijackThis v1.99.1 Scan saved at 20:01:02, on 07-05-07 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\tune.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\System32\wuauclt.exe C:\Documents and Settings\Niewierny\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: Windows Tune service - Unknown owner - C:\WINDOWS\tune.exe

[/quote]

**Posty:** 18165 · przez **wojtas** 07 Maj 2007, 20:36

masz jakis problem z kompem?

**Posty:** 40 · przez **Niewierny** 07 Maj 2007, 20:39

__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Niewierny\Cookies\niewierny@247realmedia[1].txt
Risk: Medium

Name: TrackingCookie.Adocean
Path: C:\Documents and Settings\Niewierny\Cookies\niewierny@ad.adocean[2].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\Niewierny\Cookies\niewierny@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Adocean
Path: C:\Documents and Settings\Niewierny\Cookies\niewierny@gde.adocean[1].txt
Risk: Medium

Name: TrackingCookie.Gemius
Path: C:\Documents and Settings\Niewierny\Cookies\niewierny@hit.gemius[2].txt
Risk: Medium

Name: TrackingCookie.Webtrends
Path: C:\Documents and Settings\Niewierny\Cookies\niewierny@m.webtrends[2].txt
Risk: Medium

Name: TrackingCookie.Msn
Path: C:\Documents and Settings\Niewierny\Cookies\niewierny@search.msn[1].txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: C:\Documents and Settings\Niewierny\Cookies\niewierny@tradedoubler[2].txt
Risk: Medium

Name: Adware.Generic
Path: HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
Risk: Medium

Name: Dialer.Agent.b
Path: C:\Documents and Settings\LocalService\Ustawienia lokalne\Temporary Internet Files\Content.IE5\S56N896N\kum[1].exe
Risk: High

Name: TrackingCookie.Gemius
Path: C:\Documents and Settings\Niewierny\Cookies\niewierny@hit.gemius[1].txt
Risk: Medium

Name: Dialer.Agent.b
Path: C:\i1m3v5h2k2c1.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\Program Files\Common Files\delsim\del.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0002216.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0002217.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003218.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003219.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003230.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003231.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003242.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003243.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003325.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003330.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003334.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003335.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003349.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003350.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003363.exe
Risk: High

Name: Dialer.Agent.b
Path: C:\System Volume Information\_restore{93664170-FCF1-49CE-BA42-0CA6FE76FF08}\RP5\A0003364.exe
Risk: High

[ Dodano: Dzisiaj o 20:42 ]
tak mam problem z Delsim dialerem

formatowałem juz 2 razy kompa i zaraz po włączeniu neta no moze nie tak zaraz ale wraca i wtedy wyskakuje mi okienko connect ale daje anuluj niestety po któtkim czasie zostaje bez neta i musze restarta robić

**Posty:** 18165 · przez **wojtas** 07 Maj 2007, 20:44

Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach)
Start do awaryjnego ( F8 ) przy starcie komputera.

C:\Program Files\Common Files\delsim\del.exe
C:\i1m3v5h2k2c1.exe
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

Odpalasz hijackthis i zaznaczasz ptaszkami powyższe wpisy i dajesz Fix checked.
Pogrubione pliki usuwasz ręcznie z dysku

ten plik:"

C:\WINDOWS\tune.exe

skasnujesz na tych stronach i dajesz raporty:

http://virusscan.jotti.org/
http://www.virustotal.com/

potem nowe logi z Hijack This oraz Silent runners oraz te raporty

**Posty:** 40 · przez **Niewierny** 07 Maj 2007, 21:19

Logfile of HijackThis v1.99.1
Scan saved at 20:59:08, on 07-05-07
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Niewierny\Pulpit\HijackThis.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\WINDOWS\System32\ctfmon.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Windows Tune service - Unknown owner - C:\WINDOWS\tune.exe

po usunięciu tych plików w trybie awaryjnym dalej miałem w dodaj usuń prog Delsim dialer usunołem go
jescze nie skanowałem kompa i tego prog co mi pisałeś
jutro to dokończymy bo musze uciekać do pracy narazie dzięki
pozdrawiam

**Posty:** 18165 · przez **wojtas** 07 Maj 2007, 21:40

Niewierny ok to czekamy na raporty i logi

**Posty:** 40 · przez **Niewierny** 08 Maj 2007, 15:57

witam

powiem wam ze problem nie zniknoł dalej mam te same iobjawy zaraz poskanuje i wyśle loga i raporty

zastanawiam sie czy to niejest wina modemu przez który się łącze
powiem tak miałem przeprowadzkę wcześniej miałem stałe łącze i nigdy niemiałem problemu z wieusami
po przeprowadce i podłączeniu się do neta z telewizjk kablowej w dniu kiedy instalowali mi internet pojawił się ten wirus
robiłem juz dwuktotnie formata i problem sie dalej pojawia

więc się tak zastanawiam co moze być tego przyczyną ??

program ten instaluje mi nowe połączenie sieciowe DEL nawet jak je usune to i tak potrafi mnie rozłączyć

[ Dodano: Dzisiaj o 16:01 ]
właśnie NOD32 pokazał mi alert C:\windows\tune.vexe

usunołem ten plik

[ Dodano: Dzisiaj o 16:13 ]
i znowu dwa kolejne alerty noda

C:\Windowc\system32\ocv.exe
C:\windows\system32\buk.exe

**Posty:** 18165 · przez **wojtas** 08 Maj 2007, 16:16

daj wszystko o co prosilem + log z comboscana

http://www.techsupportforum.com/sectools/Deckard/comboscan.exe

**Posty:** 40 · przez **Niewierny** 08 Maj 2007, 16:22

Logfile of HijackThis v1.99.1
Scan saved at 16:02:16, on 07-05-08
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Niewierny\Pulpit\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Windows Tune service - Unknown owner - C:\WINDOWS\tune.exe (file missing)

to jest login z teraz
jezeli chodzi o skanowanie tego TUNE.EXE to niemam juz tego pliku nod mi go wykrył
a ten link co teraz mi podałeś niedziała

**Posty:** 8694 · przez **Red** 08 Maj 2007, 16:33

Niewierny napisał(a):a ten link co teraz mi podałeś niedziała

ten działa:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

i proszę umieszczac logi w tagach tak jak na początku

**Posty:** 40 · przez **Niewierny** 08 Maj 2007, 16:35

est log Deckard's System Scanner v20070426.43
Run by Niewierny on 2007-05-08 at 16:16:55
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enable...success.

-- Last 1 Restore Point(s) --
1: 2007-05-08 14:16:58 UTC - RP1 - Punkt kontrolny systemu

Backed up registry hives.

Performed disk cleanup.

-- HijackThis (run as Niewierny.exe) -------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 16:18:06, on 07-05-08
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Gadu-Gadu\gg.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Documents and Settings\Niewierny\Ustawienia lokalne\Temporary Internet Files\Content.IE5\C1ZDN54H\dss[1].exe
C:\DOCUME~1\NIEWIE~1\Pulpit\Niewierny.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Windows Tune service - Unknown owner - C:\WINDOWS\tune.exe (file missing)

-- HijackThis Fixed Entries (C:\DOCUME~1\NIEWIE~1\Pulpit\backups\) -------------

backup-20070507-205828-567 O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
backup-20070507-205828-650 O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)

-- File Associations -----------------------------------------------------------

.cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL %1,%*
.cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser %1,%*

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R2 aslm75 - c:\windows\system32\drivers\aslm75.sys

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

S2 Windows Tune service - "c:\windows\tune.exe" (file missing)

-- Files created between 2007-04-08 and 2007-05-08 -----------------------------

2007-05-07 21:03:15 0 d--h----- C:\Program Files\Common Files\delsim
2007-05-07 16:05:56 16384 --a------ C:\WINDOWS\System32\mbi.exe
2007-05-06 19:36:24 0 d-------- C:\WINDOWS
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\WinSxS
2007-05-06 19:36:24 0 dr------- C:\WINDOWS\Web
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\twain_32
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\system32
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\wins
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\wbem
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\usmt
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\spool
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\ShellExt
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\Setup
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\ras
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\oobe
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\npp
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\mui
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\inetsrv
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\IME
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\icsxml
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\ias
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\export
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\drivers
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\drivers\etc
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\drivers\disdn
2007-05-06 19:36:24 0 dr-hs--c- C:\WINDOWS\System32\dllcache
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\dhcp
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\config
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\3com_dmi
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\3076
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\2052
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1054
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1045
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1042
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1041
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1037
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1033
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1031
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1028
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1025
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\system
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\security
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Resources
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\repair
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\mui
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\msapps
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\msagent
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Media
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\java
2007-05-06 19:36:24 0 d--h----- C:\WINDOWS\inf
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\ime
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Help
2007-05-06 19:36:24 0 dr--s---- C:\WINDOWS\Fonts
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Driver Cache
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Debug
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Cursors
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Connection Wizard
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Config
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\AppPatch
2007-05-06 19:36:24 0 d-------- C:\WINDOWS\addins
2007-05-06 18:54:52 0 d-------- C:\Program Files\MyWay
2007-05-06 18:52:02 77824 --a------ C:\WINDOWS\System32\mplaw7.dll <Not Verified; Ligos Corporation; MPL Audio Library>
2007-05-06 18:52:02 65536 --a------ C:\WINDOWS\System32\mplapx.dll <Not Verified; Ligos Corporation; MPL Audio Library>
2007-05-06 18:52:02 65536 --a------ C:\WINDOWS\System32\mplam6.dll <Not Verified; Ligos Corporation; MPL Audio Library>
2007-05-06 18:52:02 77824 --a------ C:\WINDOWS\System32\mplaa6.dll <Not Verified; Ligos Corporation; MPL Audio Library>
2007-05-06 18:51:59 1415680 --a------ C:\WINDOWS\System32\WMV9VCM.dll <Not Verified; Microsoft Corporation; Windows Media Video 9 VCM>
2007-05-06 18:51:58 217088 --a------ C:\WINDOWS\System32\xvidvfw.dll
2007-05-06 18:51:58 1138688 --a------ C:\WINDOWS\System32\xvidcore.dll
2007-05-06 18:51:58 200704 --a------ C:\WINDOWS\System32\ssldivx.dll <Not Verified; The OpenSSL Project, http://www.openssl.org/; The OpenSSL Toolkit>
2007-05-06 18:51:57 3596288 --a------ C:\WINDOWS\System32\qt-dx331.dll
2007-05-06 18:51:57 1044480 --a------ C:\WINDOWS\System32\libdivx.dll <Not Verified; The OpenSSL Project, http://www.openssl.org/; The OpenSSL Toolkit>
2007-05-06 18:51:57 196608 --a------ C:\WINDOWS\System32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2007-05-06 18:51:57 73728 --a------ C:\WINDOWS\System32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2007-05-06 18:51:57 635486 --a------ C:\WINDOWS\System32\divx.dll <Not Verified; DivX, Inc.; DivX®>
2007-05-06 18:51:56 5120 --a------ C:\WINDOWS\System32\ff_vfw.dll
2007-05-06 18:51:54 19968 --a------ C:\WINDOWS\System32\cpuinf32.dll
2007-05-06 18:51:53 0 d-------- C:\Program Files\K-Lite Codec Pack
2007-05-06 18:48:49 0 d-------- C:\Program Files\SlimBrowser
2007-05-06 18:46:37 0 d-------- C:\Program Files\Gadu-Gadu
2007-05-06 18:45:02 0 d-------- C:\Program Files\Winamp
2007-05-06 18:43:42 0 d-------- C:\WINDOWS\RegisteredPackages
2007-05-06 18:43:20 0 d-------- C:\Program Files\Common Files\ODBC
2007-05-06 18:43:14 0 d-------- C:\Program Files\Common Files\SpeechEngines
2007-05-06 18:43:13 0 dr------- C:\Program Files
2007-05-06 18:43:03 1769472 --a------ C:\WINDOWS\System32\dxdiagn.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2007-05-06 18:43:03 1703936 --a------ C:\WINDOWS\System32\d3d9.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2007-05-06 18:42:04 0 d-------- C:\Program Files\Common Files\Adobe
2007-05-06 18:41:34 0 d-------- C:\WINDOWS\System32\CatRoot2
2007-05-06 18:41:34 0 d-------- C:\WINDOWS\System32\CatRoot
2007-05-06 18:41:08 0 d-------- C:\Documents and Settings
2007-05-06 18:39:39 990 --a------ C:\WINDOWS\unins000.dat
2007-05-06 18:38:09 0 d-------- C:\WINDOWS\pss
2007-05-06 18:35:40 0 d---s---- C:\WINDOWS\System32\Microsoft
2007-05-06 18:34:53 0 d-------- C:\Program Files\Common Files\HP
2007-05-06 18:33:02 0 d-------- C:\Program Files\Hewlett-Packard
2007-05-06 18:31:45 0 d-------- C:\Program Files\Common Files\Hewlett-Packard
2007-05-06 18:29:01 57344 --a------ C:\WINDOWS\System32\HPZisn12.dll <Not Verified; HP; HP SNMP Windows>
2007-05-06 18:29:01 94208 --a------ C:\WINDOWS\System32\HPZipt12.dll <Not Verified; HP; HP SNMP Windows>
2007-05-06 18:29:01 204800 --a------ C:\WINDOWS\System32\HPZipr12.dll <Not Verified; HP; HP PmlRtl>
2007-05-06 18:29:01 69632 --a------ C:\WINDOWS\System32\HPZipm12.exe <Not Verified; HP; HP PML>
2007-05-06 18:29:01 61440 --a------ C:\WINDOWS\System32\HPZinw12.exe <Not Verified; HP; HP Dot4Net Windows>
2007-05-06 18:29:01 278584 --a------ C:\WINDOWS\System32\HPZidr12.dll <Not Verified; HP; HP Dot4Rtl>
2007-05-06 18:25:05 0 d-------- C:\Program Files\HP
2007-05-06 18:24:30 0 d-------- C:\WUTemp
2007-05-06 18:24:08 21124 -----n--- C:\WINDOWS\hpomdl07.dat
2007-05-06 18:24:08 113574 --a------ C:\WINDOWS\hpoins07.dat
2007-05-06 18:22:13 0 d-------- C:\WINDOWS\nview
2007-05-06 18:16:17 0 d-------- C:\WINDOWS\ShellNew
2007-05-06 18:12:05 458752 --a------ C:\WINDOWS\system\COMCTL32.DLL <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(R) Operating System>
2007-05-06 18:11:47 6272 --a------ C:\WINDOWS\System32\drivers\ASLM75.SYS
2007-05-06 18:11:36 0 d-------- C:\Program Files\ASUS
2007-05-06 18:09:36 7298 --a------ C:\WINDOWS\System32\drivers\WBHWDOCT.sys <Not Verified; Winbond Electronics Corp.; Winbond Hardware Doctor>
2007-05-06 18:09:18 0 d-------- C:\Program Files\Winbond
2007-05-06 18:09:13 299520 --a------ C:\WINDOWS\uninst.exe <Not Verified; InstallShield Corporation, Inc.; InstallShield unInstaller>
2007-05-06 18:08:06 38160 --a------ C:\WINDOWS\System32\LMRTREND.dll <Not Verified; Microsoft Corporation; Microsoft® Windows(TM) Operating System>
2007-05-06 18:08:05 181760 --a------ C:\WINDOWS\System32\ir50_qcx.dll <Not Verified; Intel Corporation.; Intel Indeo® video 5.03 Quick Compressor>
2007-05-06 18:08:05 198144 --a------ C:\WINDOWS\System32\ir50_qc.dll <Not Verified; Intel Corporation.; Intel Indeo® video 5.03 Quick Compressor>
2007-05-06 18:08:05 733696 --a------ C:\WINDOWS\System32\ir50_32.dll <Not Verified; Intel Corporation; Intel Indeo® video 5.04>
2007-05-06 18:08:05 338432 --a------ C:\WINDOWS\System32\ir41_qcx.dll <Not Verified; Intel Corporation.; Intel Indeo® Video Interactive Quick Compressor>
2007-05-06 18:08:05 120320 --a------ C:\WINDOWS\System32\ir41_qc.dll <Not Verified; Intel Corporation.; Intel Indeo® Video Interactive Quick Compressor>
2007-05-06 18:08:03 182032 --a------ C:\WINDOWS\System32\dxtmsft3.dll <Not Verified; Microsoft Corporation; Microsoft® Windows(TM) Operating System>
2007-05-06 18:08:01 63488 --a------ C:\WINDOWS\System32\unam4ie.exe <Not Verified; Microsoft Corporation; DirectShow>
2007-05-06 18:07:59 10240 --a------ C:\WINDOWS\System32\vidx16.dll
2007-05-06 18:07:59 194320 --a------ C:\WINDOWS\System32\qcut.dll <Not Verified; Microsoft Corporation; DirectShow>
2007-05-06 18:07:57 4608 --a------ C:\WINDOWS\System32\w95inf32.dll <Not Verified; Microsoft Corporation; Microsoft® Plus! for Windows® 95>
2007-05-06 18:07:57 2272 --a------ C:\WINDOWS\System32\w95inf16.dll <Not Verified; Microsoft Corporation; Microsoft® Plus! for Windows® 95>
2007-05-06 18:07:56 73728 -----n--- C:\WINDOWS\system\CMedia.dll
2007-05-06 18:07:45 0 d-------- C:\Program Files\PCI Audio Applications
2007-05-06 18:07:43 1540096 --a------ C:\WINDOWS\NewMixer.exe <Not Verified; C-Media Electronic Inc. (www.cmedia.com.tw); Mixer>
2007-05-06 18:07:26 0 d-------- C:\Program Files\C-Media
2007-05-06 18:07:09 0 d-------- C:\WINDOWS\SiSAGP
2007-05-06 18:07:04 304640 --a------ C:\WINDOWS\IsUn0415.exe <Not Verified; InstallShield Software Corporation; InstallShield(R) unInstaller>
2007-05-06 18:06:47 0 d-------- C:\WINDOWS\System32\ReinstallBackups
2007-05-06 18:06:37 306688 --a------ C:\WINDOWS\IsUninst.exe <Not Verified; InstallShield Software Corporation; InstallShield® unInstaller>
2007-05-06 18:06:18 5824 --a------ C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
2007-05-06 18:02:17 0 d-------- C:\WINDOWS\System32\NtmsData
2007-05-06 18:01:49 0 d--hs---- C:\WINDOWS\Installer
2007-05-06 18:00:30 0 d--hs---- C:\System Volume Information
2007-05-06 18:00:22 0 d-------- C:\WINDOWS\Prefetch
2007-05-06 17:56:15 0 d-------- C:\WINDOWS\System32\xircom
2007-05-06 17:56:15 0 d-------- C:\Program Files\microsoft frontpage
2007-05-06 17:55:50 0 -rahs---- C:\MSDOS.SYS
2007-05-06 17:55:50 0 -rahs---- C:\IO.SYS
2007-05-06 17:55:50 0 --a------ C:\CONFIG.SYS
2007-05-06 17:55:50 0 --a------ C:\AUTOEXEC.BAT
2007-05-06 17:54:29 0 dr------- C:\WINDOWS\Offline Web Pages
2007-05-06 17:54:29 0 d---s---- C:\WINDOWS\Downloaded Program Files
2007-05-06 17:53:56 0 d-------- C:\WINDOWS\System32\DirectX
2007-05-06 17:53:20 0 d---s---- C:\WINDOWS\Tasks
2007-05-06 17:53:18 0 d-------- C:\Program Files\Common Files\MSSoap
2007-05-06 17:53:11 0 d-------- C:\WINDOWS\srchasst
2007-05-06 17:50:15 0 d-------- C:\WINDOWS\System32\Macromed
2007-05-06 17:50:14 0 d-------- C:\Program Files\Movie Maker
2007-05-06 17:50:10 0 d-------- C:\WINDOWS\System32\Restore
2007-05-06 17:50:10 0 d-------- C:\WINDOWS\PCHealth
2007-05-06 17:49:22 21856 --a------ C:\WINDOWS\System32\emptyregdb.dat
2007-05-06 17:49:07 0 d-------- C:\WINDOWS\Registration
2007-05-06 17:48:59 0 d--h----- C:\Program Files\WindowsUpdate
2007-05-06 17:48:59 0 d-------- C:\Program Files\Usługi online
2007-05-06 17:48:52 0 d-------- C:\Program Files\Messenger
2007-05-06 17:48:48 0 d-------- C:\Program Files\MSN Gaming Zone
2007-05-06 17:48:17 0 d-------- C:\Program Files\Windows NT
2007-05-06 17:48:14 0 d-------- C:\WINDOWS\System32\MsDtc
2007-05-06 17:48:14 0 d-------- C:\WINDOWS\System32\Com

-- Find3M Report ---------------------------------------------------------------

2007-05-08 15:32:53 16896 --a------ C:\WINDOWS\System32\tftp.exe
2007-05-08 15:32:53 42496 --a------ C:\WINDOWS\System32\ftp.exe
2007-05-07 19:58:54 355830 --a------ C:\WINDOWS\System32\perfh015.dat
2007-05-07 19:58:54 49712 --a------ C:\WINDOWS\System32\perfc015.dat
2007-05-07 15:12:41 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\Real
2007-05-06 19:37:07 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\Macromedia
2007-05-06 18:56:10 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\SlimBrowser
2007-05-06 18:53:23 133632 --a------ C:\WINDOWS\System32\sfc_os.dll <Not Verified; Microsoft Corporation; System operacyjny Microsoft® Windows®>
2007-05-06 18:41:50 62 --ahs---- C:\Documents and Settings\Niewierny\Dane aplikacji\desktop.ini
2007-05-06 18:39:02 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\HP
2007-05-06 18:01:45 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\Identities

-- Registry Dump ---------------------------------------------------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"
"nod32kui"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Digital Imaging Monitor.lnk]
"path"="C:\\Documents and Settings\\All Users\\Menu Start\\Programy\\Autostart\\HP Digital Imaging Monitor.lnk"
"backup"="C:\\WINDOWS\\pss\\HP Digital Imaging Monitor.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\HP\\DIGITA~1\\bin\\hpqtra08.exe "
"item"="HP Digital Imaging Monitor"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C-Media Mixer]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NewMixer"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\NewMixer.exe /startup"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0

-- End of Deckard's System Scanner: finished at 2007-05-08 at 16:19:29 ---------

**Posty:** 8694 · przez **Red** 08 Maj 2007, 16:37

Red napisał(a):i proszę umieszczac logi w tagach tak jak na początku

nie łam zasad na forum,umieszczaj logi w tagach ,tak tu u nas jest.Zrobiłes na początku w tagach i tak rób teraz...... z tymi nowymi logami.

**Posty:** 40 · przez **Niewierny** 08 Maj 2007, 16:38

Kod: Zaznacz wszystko
Logfile of HijackThis v1.99.1 Scan saved at 16:18:06, on 07-05-08 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\System32\ctfmon.exe C:\Documents and Settings\Niewierny\Ustawienia lokalne\Temporary Internet Files\Content.IE5\C1ZDN54H\dss[1].exe C:\DOCUME~1\NIEWIE~1\Pulpit\Niewierny.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: Windows Tune service - Unknown owner - C:\WINDOWS\tune.exe (file missing)

[ Dodano: Dzisiaj o 16:39 ]
ok sorki RED
już będą ok

[ Dodano: Dzisiaj o 16:40 ]
czy te poprzednie tez mam jescze raz puścić tak jak mają być ??

**Posty:** 8694 · przez **Red** 08 Maj 2007, 16:41

tak ,poprzednie daj rownież w tagi

**Posty:** 40 · przez **Niewierny** 08 Maj 2007, 16:41

Kod: Zaznacz wszystko
Deckard's System Scanner v20070426.43 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Professional (build 2600) SP 1.0 Architecture: X86; Language: Polish CPU 0: Intel(R) Pentium(R) 4 CPU 1.70GHz Percentage of Memory in Use: 40% Physical Memory (total/avail): 511.53 MiB / 303.13 MiB Pagefile Memory (total/avail): 1250.62 MiB / 1033.39 MiB Virtual Memory (total/avail): 2047.88 MiB / 1953.57 MiB A: is Removable (No Media) C: is Fixed (NTFS) - 9.77 GiB total, 6.23 GiB free. D: is Fixed (NTFS) - 31.49 GiB total, 0.56 GiB free. E: is Fixed (NTFS) - 19.53 GiB total, 7.9 GiB free. F: is Fixed (NTFS) - 19.53 GiB total, 3.66 GiB free. G: is Fixed (NTFS) - 7.06 GiB total, 0.98 GiB free. H: is CDROM (No Media) I: is CDROM (No Media) -- Security Center ------------------------------------------------------------- AUState says computer is in an unknown state. Windows Internal Firewall is enabled. -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\Niewierny\Dane aplikacji CLIENTNAME=Console CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=DOM-DWLJQI16RKU ComSpec=C:\WINDOWS\system32\cmd.exe HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Niewierny LOGONSERVER=\\DOM-DWLJQI16RKU NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Internet Explorer; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 1 Stepping 2, GenuineIntel PROCESSOR_LEVEL=15 PROCESSOR_REVISION=0102 ProgramFiles=C:\Program Files PROMPT=$P$G SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp TMP=C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp USERDOMAIN=DOM-DWLJQI16RKU USERNAME=Niewierny USERPROFILE=C:\Documents and Settings\Niewierny windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- Niewierny [I](admin)[/I] -- Add/Remove Programs --------------------------------------------------------- --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player 9 ActiveX --> C:\WINDOWS\System32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock Adobe Reader 7.0 - Polish --> MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A70000000000} Archiwizator WinRAR --> C:\Program Files\WinRAR\uninstall.exe ASUS Probe V2.17.02 --> C:\WINDOWS\uninst.exe -f"C:\Program Files\ASUS\Probe\DeIsL1.isu" -c"C:\Program Files\ASUS\Probe\probunis.dll" AsusUpdate --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\ASUS\AsusUpdate\Uninst.isu" Delsim Dialer --> C:\Program Files\Common Files\delsim\del.exe -u Gadu-Gadu 7.0 --> C:\Program Files\Gadu-Gadu\Setup.exe HijackThis 1.99.1 --> C:\Documents and Settings\Niewierny\Pulpit\HijackThis.exe /uninstall HP Extended Capabilities 5.3 --> C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat HP Image Zone Express --> MsiExec.exe /X{FE64AE29-0883-4C70-8388-DC026019C900} HP Imaging Device Functions 5.3 --> C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat HP PSC & OfficeJet 5.3.B --> "C:\Program Files\HP\Digital Imaging\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}\setup\hpzscr01.exe" -datfile hposcr07.dat HP Software Update --> MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D} HP Solution Center & Imaging Support Tools 5.3 --> C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat K-Lite Mega Codec Pack 1.61 --> "C:\Program Files\K-Lite Codec Pack\unins000.exe" Microsoft DirectX Transform optional components --> RUNDLL32.EXE ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\DXTXTRA.INF,UNINSTALL.NT,12 Microsoft Office XP Professional --> MsiExec.exe /I{90110415-6000-11D3-8CFE-0050048383C9} My Search Bar --> rundll32 C:\PROGRA~1\MyWay\myBar\1.bin\mybar.dll,O Niezbędnik CD --> C:\WINDOWS\unins000.exe NOD32 antivirus system --> C:\Program Files\Eset\Setup\setup.exe /UNINSTALL NVIDIA Windows 2000/XP Display Drivers --> rundll32.exe C:\WINDOWS\System32\nvinstnt.dll,NvUninstallNT4 nv4_disp.inf PCI Audio Applications --> C:\Program Files\PCI Audio Applications\Bin\Uninstall.exe PCI Audio Driver --> cmuninst.exe Poprawka systemu Windows XP - KB822603 --> C:\WINDOWS\$NtUninstallKB822603$\spuninst\spuninst.exe Voice Editor --> C:\WINDOWS\uninst.exe -f"C:\Program Files\Winbond\Voice Editor\DeIsL1.isu" -c"C:\Program Files\Winbond\Voice Editor\_ISREG32.DLL" Winamp (remove only) --> "C:\Program Files\Winamp\UninstWA.exe" -- End of Deckard's System Scanner: finished at 2007-05-08 at 16:19:29 ---------

[ Dodano: Dzisiaj o 16:42 ]

Kod: Zaznacz wszystko
est log Deckard's System Scanner v20070426.43 Run by Niewierny on 2007-05-08 at 16:16:55 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- System Restore is disabled; attempting to re-enable...success. -- Last 1 Restore Point(s) -- 1: 2007-05-08 14:16:58 UTC - RP1 - Punkt kontrolny systemu Backed up registry hives. Performed disk cleanup. -- HijackThis (run as Niewierny.exe) ------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 16:18:06, on 07-05-08 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\System32\ctfmon.exe C:\Documents and Settings\Niewierny\Ustawienia lokalne\Temporary Internet Files\Content.IE5\C1ZDN54H\dss[1].exe C:\DOCUME~1\NIEWIE~1\Pulpit\Niewierny.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: Windows Tune service - Unknown owner - C:\WINDOWS\tune.exe (file missing) -- HijackThis Fixed Entries (C:\DOCUME~1\NIEWIE~1\Pulpit\backups\) ------------- backup-20070507-205828-567 O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing) backup-20070507-205828-650 O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing) -- File Associations ----------------------------------------------------------- [COLOR=red].cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL %1,%*[/COLOR] [COLOR=red].cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser %1,%*[/COLOR] -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R2 aslm75 - c:\windows\system32\drivers\aslm75.sys -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- S2 Windows Tune service - "c:\windows\tune.exe" (file missing) -- Files created between 2007-04-08 and 2007-05-08 ----------------------------- 2007-05-07 21:03:15 0 d--h----- C:\Program Files\Common Files\delsim 2007-05-07 16:05:56 16384 --a------ C:\WINDOWS\System32\mbi.exe 2007-05-06 19:36:24 0 d-------- C:\WINDOWS 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\WinSxS 2007-05-06 19:36:24 0 dr------- C:\WINDOWS\Web 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\twain_32 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\system32 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\wins 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\wbem 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\usmt 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\spool 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\ShellExt 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\Setup 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\ras 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\oobe 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\npp 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\mui 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\inetsrv 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\IME 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\icsxml 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\ias 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\export 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\drivers 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\drivers\etc 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\drivers\disdn 2007-05-06 19:36:24 0 dr-hs--c- C:\WINDOWS\System32\dllcache 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\dhcp 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\config 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\3com_dmi 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\3076 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\2052 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1054 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1045 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1042 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1041 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1037 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1033 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1031 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1028 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\System32\1025 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\system 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\security 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Resources 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\repair 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\mui 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\msapps 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\msagent 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Media 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\java 2007-05-06 19:36:24 0 d--h----- C:\WINDOWS\inf 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\ime 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Help 2007-05-06 19:36:24 0 dr--s---- C:\WINDOWS\Fonts 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Driver Cache 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Debug 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Cursors 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Connection Wizard 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\Config 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\AppPatch 2007-05-06 19:36:24 0 d-------- C:\WINDOWS\addins 2007-05-06 18:54:52 0 d-------- C:\Program Files\MyWay 2007-05-06 18:52:02 77824 --a------ C:\WINDOWS\System32\mplaw7.dll <Not Verified; Ligos Corporation; MPL Audio Library> 2007-05-06 18:52:02 65536 --a------ C:\WINDOWS\System32\mplapx.dll <Not Verified; Ligos Corporation; MPL Audio Library> 2007-05-06 18:52:02 65536 --a------ C:\WINDOWS\System32\mplam6.dll <Not Verified; Ligos Corporation; MPL Audio Library> 2007-05-06 18:52:02 77824 --a------ C:\WINDOWS\System32\mplaa6.dll <Not Verified; Ligos Corporation; MPL Audio Library> 2007-05-06 18:51:59 1415680 --a------ C:\WINDOWS\System32\WMV9VCM.dll <Not Verified; Microsoft Corporation; Windows Media Video 9 VCM> 2007-05-06 18:51:58 217088 --a------ C:\WINDOWS\System32\xvidvfw.dll 2007-05-06 18:51:58 1138688 --a------ C:\WINDOWS\System32\xvidcore.dll 2007-05-06 18:51:58 200704 --a------ C:\WINDOWS\System32\ssldivx.dll <Not Verified; The OpenSSL Project, http://www.openssl.org/; The OpenSSL Toolkit> 2007-05-06 18:51:57 3596288 --a------ C:\WINDOWS\System32\qt-dx331.dll 2007-05-06 18:51:57 1044480 --a------ C:\WINDOWS\System32\libdivx.dll <Not Verified; The OpenSSL Project, http://www.openssl.org/; The OpenSSL Toolkit> 2007-05-06 18:51:57 196608 --a------ C:\WINDOWS\System32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100> 2007-05-06 18:51:57 73728 --a------ C:\WINDOWS\System32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100> 2007-05-06 18:51:57 635486 --a------ C:\WINDOWS\System32\divx.dll <Not Verified; DivX, Inc.; DivX®> 2007-05-06 18:51:56 5120 --a------ C:\WINDOWS\System32\ff_vfw.dll 2007-05-06 18:51:54 19968 --a------ C:\WINDOWS\System32\cpuinf32.dll 2007-05-06 18:51:53 0 d-------- C:\Program Files\K-Lite Codec Pack 2007-05-06 18:48:49 0 d-------- C:\Program Files\SlimBrowser 2007-05-06 18:46:37 0 d-------- C:\Program Files\Gadu-Gadu 2007-05-06 18:45:02 0 d-------- C:\Program Files\Winamp 2007-05-06 18:43:42 0 d-------- C:\WINDOWS\RegisteredPackages 2007-05-06 18:43:20 0 d-------- C:\Program Files\Common Files\ODBC 2007-05-06 18:43:14 0 d-------- C:\Program Files\Common Files\SpeechEngines 2007-05-06 18:43:13 0 dr------- C:\Program Files 2007-05-06 18:43:03 1769472 --a------ C:\WINDOWS\System32\dxdiagn.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2007-05-06 18:43:03 1703936 --a------ C:\WINDOWS\System32\d3d9.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2007-05-06 18:42:04 0 d-------- C:\Program Files\Common Files\Adobe 2007-05-06 18:41:34 0 d-------- C:\WINDOWS\System32\CatRoot2 2007-05-06 18:41:34 0 d-------- C:\WINDOWS\System32\CatRoot 2007-05-06 18:41:08 0 d-------- C:\Documents and Settings 2007-05-06 18:39:39 990 --a------ C:\WINDOWS\unins000.dat 2007-05-06 18:38:09 0 d-------- C:\WINDOWS\pss 2007-05-06 18:35:40 0 d---s---- C:\WINDOWS\System32\Microsoft 2007-05-06 18:34:53 0 d-------- C:\Program Files\Common Files\HP 2007-05-06 18:33:02 0 d-------- C:\Program Files\Hewlett-Packard 2007-05-06 18:31:45 0 d-------- C:\Program Files\Common Files\Hewlett-Packard 2007-05-06 18:29:01 57344 --a------ C:\WINDOWS\System32\HPZisn12.dll <Not Verified; HP; HP SNMP Windows> 2007-05-06 18:29:01 94208 --a------ C:\WINDOWS\System32\HPZipt12.dll <Not Verified; HP; HP SNMP Windows> 2007-05-06 18:29:01 204800 --a------ C:\WINDOWS\System32\HPZipr12.dll <Not Verified; HP; HP PmlRtl> 2007-05-06 18:29:01 69632 --a------ C:\WINDOWS\System32\HPZipm12.exe <Not Verified; HP; HP PML> 2007-05-06 18:29:01 61440 --a------ C:\WINDOWS\System32\HPZinw12.exe <Not Verified; HP; HP Dot4Net Windows> 2007-05-06 18:29:01 278584 --a------ C:\WINDOWS\System32\HPZidr12.dll <Not Verified; HP; HP Dot4Rtl> 2007-05-06 18:25:05 0 d-------- C:\Program Files\HP 2007-05-06 18:24:30 0 d-------- C:\WUTemp 2007-05-06 18:24:08 21124 -----n--- C:\WINDOWS\hpomdl07.dat 2007-05-06 18:24:08 113574 --a------ C:\WINDOWS\hpoins07.dat 2007-05-06 18:22:13 0 d-------- C:\WINDOWS\nview 2007-05-06 18:16:17 0 d-------- C:\WINDOWS\ShellNew 2007-05-06 18:12:05 458752 --a------ C:\WINDOWS\system\COMCTL32.DLL <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(R) Operating System> 2007-05-06 18:11:47 6272 --a------ C:\WINDOWS\System32\drivers\ASLM75.SYS 2007-05-06 18:11:36 0 d-------- C:\Program Files\ASUS 2007-05-06 18:09:36 7298 --a------ C:\WINDOWS\System32\drivers\WBHWDOCT.sys <Not Verified; Winbond Electronics Corp.; Winbond Hardware Doctor> 2007-05-06 18:09:18 0 d-------- C:\Program Files\Winbond 2007-05-06 18:09:13 299520 --a------ C:\WINDOWS\uninst.exe <Not Verified; InstallShield Corporation, Inc.; InstallShield unInstaller> 2007-05-06 18:08:06 38160 --a------ C:\WINDOWS\System32\LMRTREND.dll <Not Verified; Microsoft Corporation; Microsoft® Windows(TM) Operating System> 2007-05-06 18:08:05 181760 --a------ C:\WINDOWS\System32\ir50_qcx.dll <Not Verified; Intel Corporation.; Intel Indeo® video 5.03 Quick Compressor> 2007-05-06 18:08:05 198144 --a------ C:\WINDOWS\System32\ir50_qc.dll <Not Verified; Intel Corporation.; Intel Indeo® video 5.03 Quick Compressor> 2007-05-06 18:08:05 733696 --a------ C:\WINDOWS\System32\ir50_32.dll <Not Verified; Intel Corporation; Intel Indeo® video 5.04> 2007-05-06 18:08:05 338432 --a------ C:\WINDOWS\System32\ir41_qcx.dll <Not Verified; Intel Corporation.; Intel Indeo® Video Interactive Quick Compressor> 2007-05-06 18:08:05 120320 --a------ C:\WINDOWS\System32\ir41_qc.dll <Not Verified; Intel Corporation.; Intel Indeo® Video Interactive Quick Compressor> 2007-05-06 18:08:03 182032 --a------ C:\WINDOWS\System32\dxtmsft3.dll <Not Verified; Microsoft Corporation; Microsoft® Windows(TM) Operating System> 2007-05-06 18:08:01 63488 --a------ C:\WINDOWS\System32\unam4ie.exe <Not Verified; Microsoft Corporation; DirectShow> 2007-05-06 18:07:59 10240 --a------ C:\WINDOWS\System32\vidx16.dll 2007-05-06 18:07:59 194320 --a------ C:\WINDOWS\System32\qcut.dll <Not Verified; Microsoft Corporation; DirectShow> 2007-05-06 18:07:57 4608 --a------ C:\WINDOWS\System32\w95inf32.dll <Not Verified; Microsoft Corporation; Microsoft® Plus! for Windows® 95> 2007-05-06 18:07:57 2272 --a------ C:\WINDOWS\System32\w95inf16.dll <Not Verified; Microsoft Corporation; Microsoft® Plus! for Windows® 95> 2007-05-06 18:07:56 73728 -----n--- C:\WINDOWS\system\CMedia.dll 2007-05-06 18:07:45 0 d-------- C:\Program Files\PCI Audio Applications 2007-05-06 18:07:43 1540096 --a------ C:\WINDOWS\NewMixer.exe <Not Verified; C-Media Electronic Inc. (www.cmedia.com.tw); Mixer> 2007-05-06 18:07:26 0 d-------- C:\Program Files\C-Media 2007-05-06 18:07:09 0 d-------- C:\WINDOWS\SiSAGP 2007-05-06 18:07:04 304640 --a------ C:\WINDOWS\IsUn0415.exe <Not Verified; InstallShield Software Corporation; InstallShield(R) unInstaller> 2007-05-06 18:06:47 0 d-------- C:\WINDOWS\System32\ReinstallBackups 2007-05-06 18:06:37 306688 --a------ C:\WINDOWS\IsUninst.exe <Not Verified; InstallShield Software Corporation; InstallShield® unInstaller> 2007-05-06 18:06:18 5824 --a------ C:\WINDOWS\System32\drivers\ASUSHWIO.SYS 2007-05-06 18:02:17 0 d-------- C:\WINDOWS\System32\NtmsData 2007-05-06 18:01:49 0 d--hs---- C:\WINDOWS\Installer 2007-05-06 18:00:30 0 d--hs---- C:\System Volume Information 2007-05-06 18:00:22 0 d-------- C:\WINDOWS\Prefetch 2007-05-06 17:56:15 0 d-------- C:\WINDOWS\System32\xircom 2007-05-06 17:56:15 0 d-------- C:\Program Files\microsoft frontpage 2007-05-06 17:55:50 0 -rahs---- C:\MSDOS.SYS 2007-05-06 17:55:50 0 -rahs---- C:\IO.SYS 2007-05-06 17:55:50 0 --a------ C:\CONFIG.SYS 2007-05-06 17:55:50 0 --a------ C:\AUTOEXEC.BAT 2007-05-06 17:54:29 0 dr------- C:\WINDOWS\Offline Web Pages 2007-05-06 17:54:29 0 d---s---- C:\WINDOWS\Downloaded Program Files 2007-05-06 17:53:56 0 d-------- C:\WINDOWS\System32\DirectX 2007-05-06 17:53:20 0 d---s---- C:\WINDOWS\Tasks 2007-05-06 17:53:18 0 d-------- C:\Program Files\Common Files\MSSoap 2007-05-06 17:53:11 0 d-------- C:\WINDOWS\srchasst 2007-05-06 17:50:15 0 d-------- C:\WINDOWS\System32\Macromed 2007-05-06 17:50:14 0 d-------- C:\Program Files\Movie Maker 2007-05-06 17:50:10 0 d-------- C:\WINDOWS\System32\Restore 2007-05-06 17:50:10 0 d-------- C:\WINDOWS\PCHealth 2007-05-06 17:49:22 21856 --a------ C:\WINDOWS\System32\emptyregdb.dat 2007-05-06 17:49:07 0 d-------- C:\WINDOWS\Registration 2007-05-06 17:48:59 0 d--h----- C:\Program Files\WindowsUpdate 2007-05-06 17:48:59 0 d-------- C:\Program Files\Usługi online 2007-05-06 17:48:52 0 d-------- C:\Program Files\Messenger 2007-05-06 17:48:48 0 d-------- C:\Program Files\MSN Gaming Zone 2007-05-06 17:48:17 0 d-------- C:\Program Files\Windows NT 2007-05-06 17:48:14 0 d-------- C:\WINDOWS\System32\MsDtc 2007-05-06 17:48:14 0 d-------- C:\WINDOWS\System32\Com -- Find3M Report --------------------------------------------------------------- 2007-05-08 15:32:53 16896 --a------ C:\WINDOWS\System32\tftp.exe 2007-05-08 15:32:53 42496 --a------ C:\WINDOWS\System32\ftp.exe 2007-05-07 19:58:54 355830 --a------ C:\WINDOWS\System32\perfh015.dat 2007-05-07 19:58:54 49712 --a------ C:\WINDOWS\System32\perfc015.dat 2007-05-07 15:12:41 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\Real 2007-05-06 19:37:07 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\Macromedia 2007-05-06 18:56:10 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\SlimBrowser 2007-05-06 18:53:23 133632 --a------ C:\WINDOWS\System32\sfc_os.dll <Not Verified; Microsoft Corporation; System operacyjny Microsoft® Windows®> 2007-05-06 18:41:50 62 --ahs---- C:\Documents and Settings\Niewierny\Dane aplikacji\desktop.ini 2007-05-06 18:39:02 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\HP 2007-05-06 18:01:45 0 d-------- C:\Documents and Settings\Niewierny\Dane aplikacji\Identities -- Registry Dump --------------------------------------------------------------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup" "nwiz"="nwiz.exe /install" "HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe" "nod32kui"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray" "MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa Authentication Packages REG_MULTI_SZ msv1_0\0\0 Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0 Notification Packages REG_MULTI_SZ scecli\0\0 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Digital Imaging Monitor.lnk] "path"="C:\\Documents and Settings\\All Users\\Menu Start\\Programy\\Autostart\\HP Digital Imaging Monitor.lnk" "backup"="C:\\WINDOWS\\pss\\HP Digital Imaging Monitor.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\HP\\DIGITA~1\\bin\\hpqtra08.exe " "item"="HP Digital Imaging Monitor" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C-Media Mixer] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NewMixer" "hkey"="HKLM" "command"="C:\\WINDOWS\\NewMixer.exe /startup" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 -- End of Deckard's System Scanner: finished at 2007-05-08 at 16:19:29 ---------

[ Dodano: Dzisiaj o 16:43 ]
to sa wszystkie logi teraz czekam na wasze wskazówki

[ Dodano: Dzisiaj o 16:46 ]

Kod: Zaznacz wszystko
Directories/Files moved to C:\Deckard\System Scanner\backup 2007-05-06 18:39:44 47122 --a-----t C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\DIO30.tmp 2007-05-06 18:38:00 47122 --a-----t C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\DIOB.tmp 2007-05-07 20:22:44 0 d-------- C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\ewido_quarantine 2007-05-07 20:05:42 0 d-------- C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\ewido_signatures 2007-05-06 18:43:58 14337 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpodvd09.log 2007-05-06 18:31:56 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_AiOSW_LOG.txt 2007-05-06 18:31:46 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_AiO_Scan_LOG.txt 2007-05-06 18:33:26 182 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_BufferChm.log 2007-05-06 18:32:38 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_CP_Package_Variety1.log 2007-05-06 18:32:43 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_CP_Package_Variety2.log 2007-05-06 18:32:48 182 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_CP_Package_Variety3.log 2007-05-06 18:33:35 452 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_CustomerResearchQFolder.log 2007-05-06 18:34:02 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_Destinations.log 2007-05-06 18:33:45 452 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_DeviceManagementQFolder.log 2007-05-06 18:34:42 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_DocProc.log 2007-05-06 18:32:54 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_eSupportQFolder.log 2007-05-06 18:32:08 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_Fax.log 2007-05-06 18:32:59 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_hpproductassistant.log 2007-05-06 18:33:08 308 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_HPSoftwareUpdate.log 2007-05-06 18:34:57 182 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_ImageZoneExpress.log 2007-05-06 18:33:38 182 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_Mars.log 2007-05-06 18:32:32 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_NewCopy.log 2007-05-06 18:28:55 218 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_PortMonitor.log 2007-05-06 18:32:26 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_Readme_LOG.txt 2007-05-06 18:32:24 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_Scan.log 2007-05-06 18:34:46 182 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_ScannerCopy.log 2007-05-06 18:33:19 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_SolutionCenter.log 2007-05-06 18:34:13 452 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_Status.log 2007-05-06 18:34:08 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_TrayApp.log 2007-05-06 18:33:55 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_Unload.log 2007-05-06 18:33:11 272 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpoMSI_WebReg.log 2007-05-06 18:30:12 5653 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpopdi00.log 2007-05-06 18:30:12 205 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpopdi000.log 2007-05-06 18:31:41 1332 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzarp000.log 2007-05-06 18:33:31 1300 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzarp001.log 2007-05-06 18:33:31 6120 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzarp002.log 2007-05-06 18:33:40 1256 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzarp003.log 2007-05-06 18:34:49 1292 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzarp004.log 2007-05-06 18:34:59 6120 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzarp005.log 2007-05-06 18:24:38 833 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcdl000.log 2007-05-06 18:38:14 1383 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcdl001.log 2007-05-06 18:38:21 1393 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcdl002.log 2007-05-06 18:38:23 1389 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcdl003.log 2007-05-06 18:38:25 1379 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcdl004.log 2007-05-06 18:24:55 6129 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzchk000.log 2007-05-06 18:30:03 596 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi00.log 2007-05-06 18:30:04 596 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi01.log 2007-05-06 18:30:05 596 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi02.log 2007-05-06 18:30:07 596 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi03.log 2007-05-06 18:30:07 596 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi04.log 2007-05-06 18:30:07 596 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi05.log 2007-05-06 18:30:07 596 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi06.log 2007-05-06 18:30:08 596 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi07.log 2007-05-06 18:30:09 1052 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi08.log 2007-05-06 18:30:09 678 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcoi09.log 2007-05-06 18:30:09 1295 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzcon00.log 2007-05-06 18:31:27 9877 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzdui000.log 2007-05-06 18:35:05 557 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzfwx000.log 2007-05-06 18:27:25 851 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzgat000.log 2007-05-06 18:28:55 1341 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi000.log 2007-05-06 18:32:48 6388 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi001.log 2007-05-06 18:32:49 1822 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi002.log 2007-05-06 18:33:26 4732 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi003.log 2007-05-06 18:33:28 1474 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi004.log 2007-05-06 18:33:38 2382 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi005.log 2007-05-06 18:33:39 894 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi006.log 2007-05-06 18:34:46 5771 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi007.log 2007-05-06 18:34:47 1474 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi008.log 2007-05-06 18:34:57 1573 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi009.log 2007-05-06 18:34:59 894 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi010.log 2007-05-06 18:35:08 1367 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi011.log 2007-05-06 18:35:09 778 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi012.log 2007-05-06 18:38:14 1468 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi013.log 2007-05-06 18:38:21 1304 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi014.log 2007-05-06 18:38:23 1294 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi015.log 2007-05-06 18:38:25 1052 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzmsi016.log 2007-05-06 18:24:39 475 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpznop000.log 2007-05-06 18:24:54 651 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpznop001.log 2007-05-06 18:24:55 755 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpznop002.log 2007-05-06 18:24:55 737 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpznop003.log 2007-05-06 18:25:01 475 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpznop004.log 2007-05-06 18:25:04 475 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpznop005.log 2007-05-06 18:31:28 475 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpznop006.log 2007-05-06 18:31:28 733 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpznop007.log 2007-05-06 18:38:07 737 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpznop008.log 2007-05-06 18:24:55 4956 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzopt000.log 2007-05-06 18:30:08 1685 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpin00.log 2007-05-06 18:28:20 10864 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpnp000.log 2007-05-06 18:29:15 508 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpnp001.log 2007-05-06 18:31:28 3506 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpnp002.log 2007-05-06 18:35:06 3516 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpnp003.log 2007-05-06 18:25:09 831 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzprl000.log 2007-05-06 18:28:17 1197 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzprl001.log 2007-05-06 18:28:46 2957 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzprl002.log 2007-05-06 18:29:14 817 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzprl003.log 2007-05-06 18:31:39 943 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzprl004.log 2007-05-06 18:33:31 1189 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzprl005.log 2007-05-06 18:33:40 1151 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzprl006.log 2007-05-06 18:34:48 1170 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzprl007.log 2007-05-06 18:35:03 1618 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzprl008.log 2007-05-06 18:24:28 704 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc000.log 2007-05-06 18:24:56 707 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc001.log 2007-05-06 18:24:57 705 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc002.log 2007-05-06 18:24:57 707 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc003.log 2007-05-06 18:24:58 711 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc004.log 2007-05-06 18:24:58 703 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc005.log 2007-05-06 18:24:59 703 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc006.log 2007-05-06 18:24:59 721 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc007.log 2007-05-06 18:24:59 701 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc008.log 2007-05-06 18:25:00 723 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc009.log 2007-05-06 18:25:00 703 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsc010.log 2007-05-06 18:38:32 2977 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzpsl000.log 2007-05-06 18:25:13 1091 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzrcv000.log 2007-05-06 18:32:52 1246 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzrcv001.log 2007-05-06 18:34:59 882 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzrcv002.log 2007-05-06 18:24:15 490 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzrei000.log 2007-05-06 18:35:31 18946 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzset000.log 2007-05-06 18:32:50 610 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzset001.log 2007-05-06 18:33:32 610 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzset002.log 2007-05-06 18:33:41 610 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzset003.log 2007-05-06 18:34:50 610 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzset004.log 2007-05-06 18:38:29 2189 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzset005.log 2007-05-06 18:38:06 2635 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzset006.log 2007-05-06 18:24:37 74529 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzshl000.log 2007-05-06 18:25:04 895 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzshl001.log 2007-05-06 18:28:20 550 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzshl002.log 2007-05-06 18:31:41 580 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzshl003.log 2007-05-06 18:27:25 1920 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzsui000.log 2007-05-06 18:24:56 509 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzwis000.log 2007-05-06 18:35:03 528 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzwis001.log 2007-05-06 18:25:02 573 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzwrp000.log 2007-05-06 18:28:14 574 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzwrp001.log 2007-05-06 18:29:09 537 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzwrp002.log 2007-05-06 18:38:09 790 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzwrp003.log 2007-05-06 18:24:26 1770 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpzwup000.log 2007-05-06 18:38:23 182 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpz_MSI.psc1500Trb_install.log 2007-05-06 18:38:21 182 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpz_MSI.psc1500_Help_install.log 2007-05-06 18:38:14 218 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\hpz_MSI.psc1500_install.log 2007-05-06 18:37:49 1342 --a-----t C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\MAR2.tmp 2007-05-06 18:37:49 1285 --a-----t C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\MAR3.tmp 2007-05-06 18:25:13 17 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\mdfix012.log 2007-05-06 18:33:37 312 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\MsiExe000.log 2007-05-06 22:22:25 0 d-------- C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\msohtml1 2007-05-06 18:15:30 44280 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\offcln10.log 2007-05-06 18:20:00 3194 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\Office XP Professional Setup(0001).txt 2007-05-06 18:19:58 9547762 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\Office XP Professional Setup(0001)_Task(0001).txt 2007-05-06 18:38:11 118 --a-----t C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\STSE.tmp 2007-05-08 16:03:19 393216 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\update.tmp 2007-05-06 18:45:32 283 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\wahtmltmp00.htm 2007-05-06 18:32:23 806 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\_add_ds.log 2007-05-06 18:11:39 0 d-------- C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\_ISTMP1.DIR 2007-05-07 15:08:55 16384 --a------ C:\DOCUME~1\NIEWIE~1\USTAWI~1\Temp\~DFAC8D.tmp 2007-05-06 18:29:01 588 --a------ C:\WINDOWS\temp\CIO_NDCS.log 2007-05-06 19:11:10 0 --a------ C:\WINDOWS\temp\exp6.tmp 2007-05-07 19:52:22 0 --a------ C:\WINDOWS\temp\expC.tmp 2007-05-06 18:29:58 596 --a------ C:\WINDOWS\temp\hpzcoi00.log 2007-05-06 18:29:59 596 --a------ C:\WINDOWS\temp\hpzcoi01.log 2007-05-06 18:30:01 924 --a------ C:\WINDOWS\temp\hpzcoi02.log 2007-05-06 18:30:01 678 --a------ C:\WINDOWS\temp\hpzcoi03.log 2007-05-06 18:29:38 204 --a------ C:\WINDOWS\temp\servic000.log 2007-05-06 18:29:46 102 --a------ C:\WINDOWS\temp\servic001.log 2007-05-06 18:12:16 0 d-------- C:\WINDOWS\temp\_ISTMP0.DIR 2007-05-06 18:29:04 0 d-------- C:\WINDOWS\temp\_ISTMP1.DIR 2006-07-11 09:41:36 345656 --a------ C:\WINDOWS\Downloaded Program Files\ewidoOnlineScan.dll <Verified; Anti-Malware Development a.s.; ewido anti-spyware> -*- End of Logfile -*-

[ Dodano: Dzisiaj o 16:47 ]
przyznam nie zapeszając ze narazie nic mi się zsystemem nie dzieje chociaż dalej mam te pliki delsim dialera

[ Dodano: Dzisiaj o 17:54 ]
2 razy restartowałem system od jakiś 30 min nic sie nie dzieje możliwe ze sie pozbyłem robala
ale jeżeli coś znajdziecie co było by nie tak
to czekam na wasze wskazówki
jeżeli by sie zaczeło znowu coś dziać to zaraz dam wam znac
pozdrawiam

respect4all

**Posty:** 18165 · przez **wojtas** 08 Maj 2007, 18:01

start -> uruchom -> services.msc -> zatrzymaj i wyłącz usługe Windows Tune service

skasuj ten wpis w hiajcku:

O23 - Service: Windows Tune service - Unknown owner - C:\WINDOWS\tune.exe (file missing)

sciagnij: ATF_Cleaner

http://www.atribune.org/ccount/click.php?id=1
zaznacz
Windows Temp
Temporary internet files
i wcisnij EMPTY SELECTED

Pobierz i uruchom narzędzie : The Avenger
http://swandog46.geekstogo.com/avenger.zip
Zaznacz opcję Input script manually i kliknij na Lupkę z prawej strony. W okienku, które się otworzy wklejasz:

Files to delete:

C:\WINDOWS\System32\mbi.exe
C:\Windows\system32\ocv.exe
C:\windows\system32\buk.exe

Folders to delete:

C:\Program Files\Common Files\delsim

Klikasz Done, a następnie zielone światełko i zgadzasz się na restart klikając OK.

Kasujesz ręcznie z dysku plik: C:\Avenger\backup.zip i wklejasz na forum raport: C:\avenger.txt + log z combofixa:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

**Posty:** 40 · przez **Niewierny** 08 Maj 2007, 18:46

Kod: Zaznacz wszystko
Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\awkuesto ******************* Script file located at: \??\C:\Program Files\yaelaem^.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: File C:\WINDOWS\System32\mbi.exe deleted successfully. File C:\Windows\system32\ocv.exe not found! Deletion of file C:\Windows\system32\ocv.exe failed! Could not process line: C:\Windows\system32\ocv.exe Status: 0xc0000034 File C:\windows\system32\buk.exe not found! Deletion of file C:\windows\system32\buk.exe failed! Could not process line: C:\windows\system32\buk.exe Status: 0xc0000034 Folder C:\Program Files\Common Files\delsim not found! Deletion of folder C:\Program Files\Common Files\delsim failed! Could not process line: C:\Program Files\Common Files\delsim Status: 0xc0000034 Completed script processing. ******************* Finished! Terminate.

[ Dodano: Dzisiaj o 18:48 ]

Kod: Zaznacz wszystko
"Niewierny" - 2007-05-08 18:31:36 Dodatek Service Pack. 1 ComboFix 07-05.08.3.V - Running from: "C:\Program Files\SlimBrowser\" ((((((((((((((((((((((((((((((( Files Created from 2007-04-08 to 2007-05-08 )))))))))))))))))))))))))))))))))) 2007-05-08 18:05 <DIR> d-------- C:\DOCUME~1\NIEWIE~1\DANEAP~1\ABBYY 2007-05-08 18:04 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\ABBYY 2007-05-08 18:02 <DIR> d-------- C:\Program Files\ABBYY FineReader 7.0 Professional Edition 2007-05-08 17:51 <DIR> d-------- C:\Program Files\English Translator 3 2007-05-08 17:29 0 --a------ C:\WINDOWS\system32\oth.exe 2007-05-08 17:24 <DIR> d-------- C:\DOCUME~1\NIEWIE~1\DANEAP~1\Media Player Classic 2007-05-08 17:18 89,184 --a------ C:\WINDOWS\system32\drivers\imagedrv.sys 2007-05-08 17:18 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe 2007-05-08 17:18 <DIR> d-------- C:\DOCUME~1\NIEWIE~1\DANEAP~1\Ahead 2007-05-08 17:11 1,994,752 --------- C:\WINDOWS\UNNeroVision.exe 2007-05-08 17:10 569,344 --a------ C:\WINDOWS\system32\imagr5.dll 2007-05-08 17:10 544,768 --a------ C:\WINDOWS\system32\imagx5.dll 2007-05-08 17:10 38,912 --a------ C:\WINDOWS\system32\picn20.dll 2007-05-08 17:10 283,920 --a------ C:\WINDOWS\system32\ImagXpr5.dll 2007-05-08 17:10 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-05-08 17:10 <DIR> d-------- C:\Program Files\Common Files\Ahead 2007-05-08 17:10 <DIR> d-------- C:\Program Files\Ahead 2007-05-08 17:10 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Ahead 2007-05-08 17:08 997,888 --a------ C:\WINDOWS\system32\wmvdmoe2.dll 2007-05-08 17:08 892,416 --a------ C:\WINDOWS\system32\wmspdmoe.dll 2007-05-08 17:08 486,536 --a------ C:\WINDOWS\system32\wmspdmod.dll 2007-05-08 17:08 384,512 --a------ C:\WINDOWS\system32\mp4sdmod.dll 2007-05-08 17:08 316,040 --a------ C:\WINDOWS\system32\mp43dmod.dll 2007-05-08 17:08 143,360 --a------ C:\WINDOWS\system32\wmidx.dll 2007-05-08 17:08 1,111,040 --a------ C:\WINDOWS\system32\wmsdmoe2.dll 2007-05-08 17:07 122,880 --a------ C:\WINDOWS\UnGins.exe 2007-05-08 17:07 <DIR> d-------- C:\Program Files\Soulseek 2007-05-08 17:07 <DIR> d-------- C:\Program Files\3aLab 2007-05-08 16:16 <DIR> d-------- C:\Deckard 2007-05-06 19:36 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache 2007-05-06 19:36 <DIR> dr--s---- C:\WINDOWS\Fonts 2007-05-06 19:36 <DIR> dr------- C:\WINDOWS\Web 2007-05-06 19:36 <DIR> d--h----- C:\WINDOWS\inf 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\WinSxS 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\twain_32 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\wins 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\wbem 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\usmt 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\spool 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\ShellExt 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\Setup 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\ras 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\oobe 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\npp 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\mui 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\inetsrv 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\IME 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\icsxml 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\ias 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\export 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\drivers\etc 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\drivers 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\dhcp 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\config 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\3com_dmi 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\3076 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\2052 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\1054 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\1045 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\1042 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\1041 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\1037 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\1033 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\1031 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\1028 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32\1025 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system32 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\system 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\security 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\Resources 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\repair 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\mui 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\msapps 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\msagent 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\Media 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\ime 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\Help 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\Driver Cache 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\Debug 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\Cursors 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\Connection Wizard 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\Config 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\AppPatch 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS\addins 2007-05-06 19:36 <DIR> d-------- C:\WINDOWS 2007-05-06 19:30 <DIR> d---s---- C:\DOCUME~1\NIEWIE~1\UserData 2007-05-06 19:09 512,096 --a------ C:\WINDOWS\system32\drivers\amon.sys 2007-05-06 19:09 298,104 --a------ C:\WINDOWS\system32\imon.dll 2007-05-06 19:09 15,424 --a------ C:\WINDOWS\system32\drivers\nod32drv.sys 2007-05-06 18:54 <DIR> d-------- C:\Program Files\MyWay 2007-05-06 18:54 <DIR> d-------- C:\DOCUME~1\NIEWIE~1\DANEAP~1\SlimBrowser 2007-05-06 18:52 77,824 --a------ C:\WINDOWS\system32\mplaw7.dll 2007-05-06 18:52 77,824 --a------ C:\WINDOWS\system32\mplaa6.dll 2007-05-06 18:52 65,536 --a------ C:\WINDOWS\system32\mplapx.dll 2007-05-06 18:52 65,536 --a------ C:\WINDOWS\system32\mplam6.dll 2007-05-06 18:52 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Apple Computer 2007-05-06 18:51 73,728 --a------ C:\WINDOWS\system32\dpl100.dll 2007-05-06 18:51 635,486 --a------ C:\WINDOWS\system32\divx.dll 2007-05-06 18:51 5,120 --a------ C:\WINDOWS\system32\ff_vfw.dll 2007-05-06 18:51 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll 2007-05-06 18:51 217,088 --a------ C:\WINDOWS\system32\xvidvfw.dll 2007-05-06 18:51 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll 2007-05-06 18:51 196,608 --a------ C:\WINDOWS\system32\dtu100.dll 2007-05-06 18:51 19,968 --a------ C:\WINDOWS\system32\cpuinf32.dll 2007-05-06 18:51 1,415,680 --a------ C:\WINDOWS\system32\WMV9VCM.dll 2007-05-06 18:51 1,138,688 --a------ C:\WINDOWS\system32\xvidcore.dll 2007-05-06 18:51 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll 2007-05-06 18:51 <DIR> d-------- C:\Program Files\K-Lite Codec Pack 2007-05-06 18:51 <DIR> d-------- C:\DOCUME~1\NIEWIE~1\DANEAP~1\Real 2007-05-06 18:51 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Real 2007-05-06 18:48 <DIR> d-------- C:\Program Files\SlimBrowser 2007-05-06 18:46 <DIR> d-------- C:\Program Files\Gadu-Gadu 2007-05-06 18:46 <DIR> d-------- C:\DOCUME~1\NIEWIE~1\Gadu-Gadu 2007-05-06 18:45 57,856 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-05-06 18:45 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-05-06 18:45 20,640 --------- C:\WINDOWS\system32\drivers\PxHelp20.sys 2007-05-06 18:45 151,552 --------- C:\WINDOWS\system32\pxwma.dll 2007-05-06 18:45 109,568 --------- C:\WINDOWS\system32\pxinsi64.exe 2007-05-06 18:45 108,544 --------- C:\WINDOWS\system32\pxcpyi64.exe 2007-05-06 18:45 <DIR> d-------- C:\Program Files\Winamp 2007-05-06 18:44 70,144 --a------ C:\WINDOWS\system32\usbui.dll 2007-05-06 18:44 23,070 --a------ C:\WINDOWS\system32\drivers\RTL8139.sys 2007-05-06 18:43 98,816 --a------ C:\WINDOWS\system32\dmstyle.dll 2007-05-06 18:43 974,848 --a------ C:\WINDOWS\system32\dxdiag.exe 2007-05-06 18:43 83,968 --a------ C:\WINDOWS\system32\drivers\nabtsfec.sys 2007-05-06 18:43 80,896 --a------ C:\WINDOWS\system32\dpvsetup.exe 2007-05-06 18:43 8,192 --a------ C:\WINDOWS\system32\d3d8thk.dll 2007-05-06 18:43 797,184 --a------ C:\WINDOWS\system32\d3dim700.dll 2007-05-06 18:43 79,360 --a------ C:\WINDOWS\system32\dpwsockx.dll 2007-05-06 18:43 77,824 --a------ C:\WINDOWS\system32\dpmodemx.dll 2007-05-06 18:43 76,800 --a------ C:\WINDOWS\system32\dmscript.dll 2007-05-06 18:43 733,184 --a------ C:\WINDOWS\system32\qedwipes.dll 2007-05-06 18:43 723,968 --a------ C:\WINDOWS\system32\dpnet.dll 2007-05-06 18:43 7,424 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys 2007-05-06 18:43 68,096 --a------ C:\WINDOWS\system32\dpnhupnp.dll 2007-05-06 18:43 64,512 --a------ C:\WINDOWS\system32\amstream.dll 2007-05-06 18:43 62,672 --a------ C:\WINDOWS\system32\dxdllreg.exe 2007-05-06 18:43 602,624 --a------ C:\WINDOWS\system32\dx7vb.dll 2007-05-06 18:43 58,368 --a------ C:\WINDOWS\system32\dmcompos.dll 2007-05-06 18:43 52,096 --a------ C:\WINDOWS\system32\drivers\msdv.sys 2007-05-06 18:43 5,504 --a------ C:\WINDOWS\system32\drivers\mstee.sys 2007-05-06 18:43 5,248 --a------ C:\WINDOWS\system32\drivers\mspclock.sys 2007-05-06 18:43 491,520 --a------ C:\WINDOWS\system32\dsdmoprp.dll 2007-05-06 18:43 48,512 --a------ C:\WINDOWS\system32\drivers\stream.sys 2007-05-06 18:43 470,528 --a------ C:\WINDOWS\system32\qdvd.dll 2007-05-06 18:43 47,104 --a------ C:\WINDOWS\system32\wstdecod.dll 2007-05-06 18:43 4,608 --a------ C:\WINDOWS\system32\drivers\mspqm.sys 2007-05-06 18:43 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-05-06 18:43 4,096 --a------ C:\WINDOWS\system32\drivers\swenum.sys 2007-05-06 18:43 381,952 --a------ C:\WINDOWS\system32\dsound.dll 2007-05-06 18:43 381,952 --a------ C:\WINDOWS\system32\dpvoice.dll 2007-05-06 18:43 354,816 --a------ C:\WINDOWS\system32\psisdecd.dll 2007-05-06 18:43 34,304 --a------ C:\WINDOWS\system32\mciqtz32.dll 2007-05-06 18:43 33,280 --a------ C:\WINDOWS\system32\dmloader.dll 2007-05-06 18:43 324,096 --a------ C:\WINDOWS\system32\mswebdvd.dll 2007-05-06 18:43 32,768 --a------ C:\WINDOWS\system32\dpnhpast.dll 2007-05-06 18:43 316,928 --a------ C:\WINDOWS\system32\qdv.dll 2007-05-06 18:43 3,072 --a------ C:\WINDOWS\system32\dpnlobby.dll 2007-05-06 18:43 3,072 --a------ C:\WINDOWS\system32\dpnaddr.dll 2007-05-06 18:43 292,864 --a------ C:\WINDOWS\system32\ddraw.dll 2007-05-06 18:43 28,160 --a------ C:\WINDOWS\system32\dplaysvr.exe 2007-05-06 18:43 27,136 --a------ C:\WINDOWS\system32\dmband.dll 2007-05-06 18:43 257,024 --a------ C:\WINDOWS\system32\qcap.dll 2007-05-06 18:43 241,664 --a------ C:\WINDOWS\system32\qasf.dll 2007-05-06 18:43 24,064 --a------ C:\WINDOWS\system32\ddrawex.dll 2007-05-06 18:43 230,400 --a------ C:\WINDOWS\system32\dplayx.dll 2007-05-06 18:43 19,968 --a------ C:\WINDOWS\system32\dpvacm.dll 2007-05-06 18:43 186,880 --a------ C:\WINDOWS\system32\dsdmo.dll 2007-05-06 18:43 181,248 --a------ C:\WINDOWS\system32\dmime.dll 2007-05-06 18:43 18,944 --a------ C:\WINDOWS\system32\encapi.dll 2007-05-06 18:43 18,688 --a------ C:\WINDOWS\system32\drivers\wstcodec.sys 2007-05-06 18:43 18,432 --a------ C:\WINDOWS\system32\dswave.dll 2007-05-06 18:43 16,896 --a------ C:\WINDOWS\system32\msyuv.dll 2007-05-06 18:43 16,896 --a------ C:\WINDOWS\system32\dpnsvr.exe 2007-05-06 18:43 16,384 --a------ C:\WINDOWS\system32\drivers\ccdecode.sys 2007-05-06 18:43 15,104 --a------ C:\WINDOWS\system32\drivers\mpe.sys 2007-05-06 18:43 14,976 --a------ C:\WINDOWS\system32\drivers\streamip.sys 2007-05-06 18:43 132,608 --a------ C:\WINDOWS\system32\devenum.dll 2007-05-06 18:43 130,304 --a------ C:\WINDOWS\system32\drivers\ks.sys 2007-05-06 18:43 13,312 --a------ C:\WINDOWS\system32\msdmo.dll 2007-05-06 18:43 122,880 --a------ C:\WINDOWS\system32\dmusic.dll 2007-05-06 18:43 112,128 --a------ C:\WINDOWS\system32\dpvvox.dll 2007-05-06 18:43 11,392 --a------ C:\WINDOWS\system32\drivers\bdasup.sys 2007-05-06 18:43 100,864 --a------ C:\WINDOWS\system32\dmsynth.dll 2007-05-06 18:43 10,880 --a------ C:\WINDOWS\system32\drivers\slip.sys 2007-05-06 18:43 10,496 --a------ C:\WINDOWS\system32\drivers\dxapi.sys 2007-05-06 18:43 10,112 --a------ C:\WINDOWS\system32\drivers\ndisip.sys 2007-05-06 18:43 1,962,496 --a------ C:\WINDOWS\system32\quartz.dll 2007-05-06 18:43 1,798,144 --a------ C:\WINDOWS\system32\qedit.dll 2007-05-06 18:43 1,769,472 --a------ C:\WINDOWS\system32\dxdiagn.dll 2007-05-06 18:43 1,703,936 --a------ C:\WINDOWS\system32\d3d9.dll 2007-05-06 18:43 1,294,336 --a------ C:\WINDOWS\system32\dsound3d.dll 2007-05-06 18:43 1,230,336 --a------ C:\WINDOWS\system32\msvidctl.dll 2007-05-06 18:43 1,201,152 --a------ C:\WINDOWS\system32\d3d8.dll 2007-05-06 18:43 1,189,888 --a------ C:\WINDOWS\system32\dx8vb.dll 2007-05-06 18:43 <DIR> dr------- C:\Program Files 2007-05-06 18:43 <DIR> d-------- C:\WINDOWS\RegisteredPackages 2007-05-06 18:43 <DIR> d-------- C:\Program Files\Common Files\SpeechEngines 2007-05-06 18:43 <DIR> d-------- C:\Program Files\Common Files\ODBC 2007-05-06 18:42 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-05-06 18:42 9,168 --a------ C:\WINDOWS\system\VER.DLL 2007-05-06 18:42 85,532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-05-06 18:42 83,456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-05-06 18:42 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-05-06 18:42 70,096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-05-06 18:42 7,168 --a------ C:\WINDOWS\system32\kbdcz.dll 2007-05-06 18:42 69,712 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2007-05-06 18:42 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-05-06 18:42 6,656 --a------ C:\WINDOWS\system32\kbdycl.dll 2007-05-06 18:42 6,656 --a------ C:\WINDOWS\system32\kbdsl1.dll 2007-05-06 18:42 6,656 --a------ C:\WINDOWS\system32\kbdsl.dll 2007-05-06 18:42 6,656 --a------ C:\WINDOWS\system32\kbdhu.dll 2007-05-06 18:42 6,656 --a------ C:\WINDOWS\system32\kbdcz2.dll 2007-05-06 18:42 6,656 --a------ C:\WINDOWS\system32\kbdcz1.dll 2007-05-06 18:42 6,656 --a------ C:\WINDOWS\system32\kbdcr.dll 2007-05-06 18:42 6,656 --a------ C:\WINDOWS\system32\KBDAL.DLL 2007-05-06 18:42 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-05-06 18:42 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-05-06 18:42 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-05-06 18:42 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-05-06 18:42 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-05-06 18:42 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-05-06 18:42 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-05-06 18:42 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-05-06 18:42 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-05-06 18:42 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-05-06 18:42 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-05-06 18:42 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-05-06 18:42 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-05-06 18:42 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-05-06 18:42 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-05-06 18:42 5,632 --a------ C:\WINDOWS\system32\kbdro.dll 2007-05-06 18:42 5,632 --a------ C:\WINDOWS\system32\kbdhu1.dll 2007-05-06 18:42 5,120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-05-06 18:42 33,376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-05-06 18:42 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-05-06 18:42 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-05-06 18:42 19,200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-05-06 18:42 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-05-06 18:42 13,312 --a------ C:\WINDOWS\system32\irclass.dll 2007-05-06 18:42 127,008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-05-06 18:42 109,488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-05-06 18:42 103,424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-05-06 18:42 10,496 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-05-06 18:41 72,192 --a------ C:\WINDOWS\system32\storprop.dll 2007-05-06 18:41 67,072 --a------ C:\WINDOWS\NOTEPAD.EXE 2007-05-06 18:41 6,656 --a------ C:\WINDOWS\system32\batt.dll 2007-05-06 18:41 15,360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-05-06 18:41 <DIR> dr-h----- C:\DOCUME~1\DEFAUL~1\Ustawienia lokalne 2007-05-06 18:41 <DIR> dr-h----- C:\DOCUME~1\DEFAUL~1\Dane aplikacji 2007-05-06 18:41 <DIR> dr-h----- C:\DOCUME~1\ALLUSE~1\Dane aplikacji 2007-05-06 18:41 <DIR> dr------- C:\DOCUME~1\DEFAUL~1\Menu Start 2007-05-06 18:41 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Menu Start 2007-05-06 18:41 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Dokumenty 2007-05-06 18:41 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Szablony 2007-05-06 18:41 <DIR> d--h----- C:\DOCUME~1\ALLUSE~1\Szablony 2007-05-06 18:41 <DIR> d-------- C:\WINDOWS\system32\CatRoot2 2007-05-06 18:41 <DIR> d-------- C:\WINDOWS\system32\CatRoot 2007-05-06 18:41 <DIR> d-------- C:\Documents and Settings 2007-05-06 18:41 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Ulubione 2007-05-06 18:41 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Pulpit 2007-05-06 18:41 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Moje dokumenty 2007-05-06 18:41 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Ulubione 2007-05-06 18:41 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Pulpit 2007-05-06 18:39 990 --a------ C:\WINDOWS\unins000.dat 2007-05-06 18:38 <DIR> d-------- C:\WINDOWS\pss 2007-05-06 18:37 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\HP 2007-05-06 18:34 <DIR> d-------- C:\Program Files\Common Files\HP 2007-05-06 18:33 <DIR> d-------- C:\Program Files\Hewlett-Packard 2007-05-06 18:31 <DIR> d-------- C:\Program Files\Common Files\Hewlett-Packard 2007-05-06 18:30 51,120 -ra------ C:\WINDOWS\system32\drivers\HPZid412.sys 2007-05-06 18:30 16,496 -ra------ C:\WINDOWS\system32\drivers\HPZipr12.sys 2007-05-06 18:29 94,208 --a------ C:\WINDOWS\system32\HPZipt12.dll 2007-05-06 18:29 69,632 --a------ C:\WINDOWS\system32\HPZipm12.exe 2007-05-06 18:29 61,440 --a------ C:\WINDOWS\system32\HPZinw12.exe 2007-05-06 18:29 57,344 --a------ C:\WINDOWS\system32\HPZisn12.dll 2007-05-06 18:29 278,584 --a------ C:\WINDOWS\system32\HPZidr12.dll 2007-05-06 18:29 21,744 -ra------ C:\WINDOWS\system32\drivers\HPZius12.sys 2007-05-06 18:29 204,800 --a------ C:\WINDOWS\system32\HPZipr12.dll 2007-05-06 18:29 14,208 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2007-05-06 18:25 <DIR> d-------- C:\Program Files\HP 2007-05-06 18:24 28,160 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2007-05-06 18:24 24,960 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-05-06 18:24 21,124 --------- C:\WINDOWS\hpomdl07.dat 2007-05-06 18:24 182,880 --a------ C:\WINDOWS\system32\iuengine.dll 2007-05-06 18:24 113,574 --a------ C:\WINDOWS\hpoins07.dat 2007-05-06 18:24 <DIR> d-------- C:\WUTemp 2007-05-06 18:24 <DIR> d-------- C:\DOCUME~1\NIEWIE~1\DANEAP~1\HP 2007-05-06 18:22 98,304 -ra------ C:\WINDOWS\system32\nvwrsko.dll 2007-05-06 18:22 81,920 -ra------ C:\WINDOWS\system32\nvwrszht.dll 2007-05-06 18:22 81,920 -ra------ C:\WINDOWS\system32\nvwrszhc.dll 2007-05-06 18:22 770,117 -ra------ C:\WINDOWS\system32\nview.dll 2007-05-06 18:22 65,536 -ra------ C:\WINDOWS\system32\nvsvc32.exe 2007-05-06 18:22 49,152 -ra------ C:\WINDOWS\system32\nvmctray.dll 2007-05-06 18:22 454,727 -ra------ C:\WINDOWS\system32\nvshell.dll 2007-05-06 18:22 4,239,360 -ra------ C:\WINDOWS\system32\nvcpl.dll 2007-05-06 18:22 372,736 -ra------ C:\WINDOWS\system32\nviewimg.dll 2007-05-06 18:22 315,392 -ra------ C:\WINDOWS\system32\nwiz.exe 2007-05-06 18:22 307,200 -ra------ C:\WINDOWS\system32\nvrsar.dll 2007-05-06 18:22 3,514,368 -ra------ C:\WINDOWS\system32\nvoglnt.dll 2007-05-06 18:22 294,912 -ra------ C:\WINDOWS\system32\nvrshe.dll 2007-05-06 18:22 262,229 -ra------ C:\WINDOWS\system32\keystone.exe 2007-05-06 18:22 258,048 -ra------ C:\WINDOWS\system32\nvrseng.dll 2007-05-06 18:22 253,952 -ra------ C:\WINDOWS\system32\nvrsit.dll 2007-05-06 18:22 253,952 -ra------ C:\WINDOWS\system32\nvrsfr.dll 2007-05-06 18:22 253,952 -ra------ C:\WINDOWS\system32\nvrsde.dll 2007-05-06 18:22 249,856 -ra------ C:\WINDOWS\system32\nvrsru.dll 2007-05-06 18:22 249,856 -ra------ C:\WINDOWS\system32\nvrsptb.dll 2007-05-06 18:22 249,856 -ra------ C:\WINDOWS\system32\nvrsnl.dll 2007-05-06 18:22 245,760 -ra------ C:\WINDOWS\system32\nvrstr.dll 2007-05-06 18:22 245,760 -ra------ C:\WINDOWS\system32\nvrssv.dll 2007-05-06 18:22 245,760 -ra------ C:\WINDOWS\system32\nvrsda.dll 2007-05-06 18:22 241,664 -ra------ C:\WINDOWS\system32\nvrssl.dll 2007-05-06 18:22 241,664 -ra------ C:\WINDOWS\system32\nvrsno.dll 2007-05-06 18:22 241,664 -ra------ C:\WINDOWS\system32\nvrses.dll 2007-05-06 18:22 237,568 -ra------ C:\WINDOWS\system32\nvrsfi.dll 2007-05-06 18:22 237,568 -ra------ C:\WINDOWS\system32\nvrsel.dll 2007-05-06 18:22 237,568 -ra------ C:\WINDOWS\system32\nvrscs.dll 2007-05-06 18:22 233,472 -ra------ C:\WINDOWS\system32\nvrssk.dll 2007-05-06 18:22 233,472 -ra------ C:\WINDOWS\system32\nvrspt.dll 2007-05-06 18:22 229,376 -ra------ C:\WINDOWS\system32\nvrspl.dll 2007-05-06 18:22 229,376 -ra------ C:\WINDOWS\system32\nvrshu.dll 2007-05-06 18:22 221,184 -ra------ C:\WINDOWS\system32\nvrsja.dll 2007-05-06 18:22 217,088 -ra------ C:\WINDOWS\system32\nvrsko.dll 2007-05-06 18:22 208,896 -ra------ C:\WINDOWS\system32\nvrszht.dll 2007-05-06 18:22 208,896 -ra------ C:\WINDOWS\system32\nvrszhc.dll 2007-05-06 18:22 2,683,114 -ra------ C:\WINDOWS\system32\nv4_disp.dll 2007-05-06 18:22 176,128 -ra------ C:\WINDOWS\system32\nvwrsel.dll 2007-05-06 18:22 172,032 -ra------ C:\WINDOWS\system32\nvwrsru.dll 2007-05-06 18:22 167,936 -ra------ C:\WINDOWS\system32\nvwrsptb.dll 2007-05-06 18:22 167,936 -ra------ C:\WINDOWS\system32\nvwrspt.dll 2007-05-06 18:22 167,936 -ra------ C:\WINDOWS\system32\nvwrsit.dll 2007-05-06 18:22 167,936 -ra------ C:\WINDOWS\system32\nvwrses.dll 2007-05-06 18:22 167,936 -ra------ C:\WINDOWS\system32\nvwrsde.dll 2007-05-06 18:22 163,840 -ra------ C:\WINDOWS\system32\nvwrssk.dll 2007-05-06 18:22 163,840 -ra------ C:\WINDOWS\system32\nvwrsnl.dll 2007-05-06 18:22 163,840 -ra------ C:\WINDOWS\system32\nvwrshu.dll 2007-05-06 18:22 163,840 -ra------ C:\WINDOWS\system32\nvwrsfr.dll 2007-05-06 18:22 159,744 -ra------ C:\WINDOWS\system32\nvwrstr.dll 2007-05-06 18:22 159,744 -ra------ C:\WINDOWS\system32\nvwrspl.dll 2007-05-06 18:22 159,744 -ra------ C:\WINDOWS\system32\nvwrsfi.dll 2007-05-06 18:22 155,648 -ra------ C:\WINDOWS\system32\nvwrssv.dll 2007-05-06 18:22 155,648 -ra------ C:\WINDOWS\system32\nvwrsda.dll 2007-05-06 18:22 151,552 -ra------ C:\WINDOWS\system32\nvwrssl.dll 2007-05-06 18:22 151,552 -ra------ C:\WINDOWS\system32\nvwrsno.dll 2007-05-06 18:22 151,552 -ra------ C:\WINDOWS\system32\nvwrscs.dll 2007-05-06 18:22 143,360 -ra------ C:\WINDOWS\system32\nvwrseng.dll 2007-05-06 18:22 139,264 -ra------ C:\WINDOWS\system32\nvwrsar.dll 2007-05-06 18:22 135,168 -ra------ C:\WINDOWS\system32\nvwrshe.dll 2007-05-06 18:22 118,784 -ra------ C:\WINDOWS\system32\nvinstnt.dll 2007-05-06 18:22 106,496 -ra------ C:\WINDOWS\system32\nvwrsja.dll 2007-05-06 18:22 1,306,624 -ra------ C:\WINDOWS\system32\dmcpl.exe 2007-05-06 18:22 1,177,658 -ra------ C:\WINDOWS\system32\drivers\nv4_mini.sys 2007-05-06 18:22 <DIR> d-------- C:\WINDOWS\nview 2007-05-06 18:21 <DIR> d--hs---- C:\RECYCLER 2007-05-06 18:16 <DIR> d-------- C:\WINDOWS\ShellNew 2007-05-06 18:12 996,872 --a------ C:\WINDOWS\system\CP3240MT.DLL 2007-05-06 18:12 458,752 --a------ C:\WINDOWS\system\COMCTL32.DLL 2007-05-06 18:12 29,952 --a------ C:\WINDOWS\system\BORLNDMM.DLL 2007-05-06 18:11 6,272 --a------ C:\WINDOWS\system32\drivers\ASLM75.SYS 2007-05-06 18:11 <DIR> d-------- C:\Program Files\ASUS 2007-05-06 18:09 7,298 --a------ C:\WINDOWS\system32\drivers\WBHWDOCT.sys 2007-05-06 18:09 299,520 --a------ C:\WINDOWS\uninst.exe 2007-05-06 18:09 <DIR> d-------- C:\Program Files\Winbond 2007-05-06 18:08 9,856 --a------ C:\WINDOWS\system32\drivers\gameenum.sys 2007-05-06 18:08 77,440 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-05-06 18:08 733,696 --a------ C:\WINDOWS\system32\ir50_32.dll 2007-05-06 18:08 63,488 --a------ C:\WINDOWS\system32\unam4ie.exe 2007-05-06 18:08 57,856 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2007-05-06 18:08 56,832 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2007-05-06 18:08 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-05-06 18:08 50,048 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-05-06 18:08 5,888 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-05-06 18:08 38,160 --a------ C:\WINDOWS\system32\LMRTREND.dll 2007-05-06 18:08 338,432 --a------ C:\WINDOWS\system32\ir41_qcx.dll 2007-05-06 18:08 2,816 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-05-06 18:08 198,144 --a------ C:\WINDOWS\system32\ir50_qc.dll 2007-05-06 18:08 182,032 --a------ C:\WINDOWS\system32\dxtmsft3.dll 2007-05-06 18:08 181,760 --a------ C:\WINDOWS\system32\ir50_qcx.dll 2007-05-06 18:08 159,360 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-05-06 18:08 142,208 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-05-06 18:08 134,272 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2007-05-06 18:08 120,320 --a------ C:\WINDOWS\system32\ir41_qc.dll 2007-05-06 18:07 765,952 --a------ C:\WINDOWS\system\crlds3d.dll 2007-05-06 18:07 73,728 --------- C:\WINDOWS\system\CMedia.dll 2007-05-06 18:07 712,704 --a------ C:\WINDOWS\system32\Audio3D.dll 2007-05-06 18:07 712,704 --a------ C:\WINDOWS\system32\a3d.dll 2007-05-06 18:07 4,608 --a------ C:\WINDOWS\system32\w95inf32.dll 2007-05-06 18:07 379,150 --a------ C:\WINDOWS\system32\drivers\cmaudio.sys 2007-05-06 18:07 32,768 --a------ C:\WINDOWS\system32\cmnprop.dll 2007-05-06 18:07 304,640 --a------ C:\WINDOWS\IsUn0415.exe 2007-05-06 18:07 27,136 --a------ C:\WINDOWS\system32\drivers\SISAGP.SYS 2007-05-06 18:07 2,272 --a------ C:\WINDOWS\system32\w95inf16.dll 2007-05-06 18:07 194,320 --a------ C:\WINDOWS\system32\qcut.dll 2007-05-06 18:07 135,168 --a------ C:\WINDOWS\cmuninst.exe 2007-05-06 18:07 135,168 --a------ C:\WINDOWS\cmuninst.dat 2007-05-06 18:07 10,240 --a------ C:\WINDOWS\system32\vidx16.dll 2007-05-06 18:07 1,540,096 --a------ C:\WINDOWS\NewMixer.exe 2007-05-06 18:07 1,495,040 --a------ C:\WINDOWS\mixer.exe 2007-05-06 18:07 <DIR> d-------- C:\WINDOWS\SiSAGP 2007-05-06 18:07 <DIR> d-------- C:\Program Files\PCI Audio Applications 2007-05-06 18:07 <DIR> d-------- C:\Program Files\C-Media 2007-05-06 18:06 5,824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS 2007-05-06 18:06 4,608 -ra------ C:\WINDOWS\system32\drivers\siside.sys 2007-05-06 18:06 306,688 --a------ C:\WINDOWS\IsUninst.exe 2007-05-06 18:06 <DIR> d-------- C:\WINDOWS\system32\ReinstallBackups 2007-05-06 18:06 <DIR> d-------- C:\DOCUME~1\NIEWIE~1\WINDOWS 2007-05-06 18:02 <DIR> d-------- C:\WINDOWS\system32\NtmsData 2007-05-06 18:01 1,310,720 --ah----- C:\DOCUME~1\NIEWIE~1\NTUSER.DAT 2007-05-06 18:01 <DIR> dr-h----- C:\DOCUME~1\NIEWIE~1\Dane aplikacji 2007-05-06 18:01 <DIR> dr------- C:\DOCUME~1\NIEWIE~1\Ulubione 2007-05-06 18:01 <DIR> dr------- C:\DOCUME~1\NIEWIE~1\Menu Start 2007-05-06 18:01 <DIR> d--hs---- C:\WINDOWS\Installer 2007-05-06 18:01 <DIR> d--h----- C:\DOCUME~1\NIEWIE~1\Ustawienia lokalne 2007-05-06 18:01 <DIR> d--h----- C:\DOCUME~1\NIEWIE~1\Szablony 2007-05-06 18:01 <DIR> d-------- C:\DOCUME~1\NIEWIE~1\Pulpit 2007-05-06 18:00 229,376 --ah----- C:\DOCUME~1\NETWOR~1\NTUSER.DAT 2007-05-06 18:00 229,376 --ah----- C:\DOCUME~1\LOCALS~1\NTUSER.DAT 2007-05-06 18:00 <DIR> d--hs---- C:\System Volume Information 2007-05-06 18:00 <DIR> d--h----- C:\DOCUME~1\NETWOR~1\Ustawienia lokalne 2007-05-06 18:00 <DIR> d--h----- C:\DOCUME~1\LOCALS~1\Ustawienia lokalne 2007-05-06 18:00 <DIR> d-------- C:\WINDOWS\Prefetch 2007-05-06 18:00 <DIR> d-------- C:\DOCUME~1\NETWOR~1\Dane aplikacji 2007-05-06 18:00 <DIR> d-------- C:\DOCUME~1\LOCALS~1\Dane aplikacji 2007-05-06 17:56 <DIR> d-------- C:\WINDOWS\system32\xircom 2007-05-06 17:56 <DIR> d-------- C:\Program Files\microsoft frontpage 2007-05-06 17:55 229,376 ---h----- C:\DOCUME~1\DEFAUL~1\NTUSER.DAT 2007-05-06 17:55 112,128 --a------ C:\WINDOWS\system32\mapi32.dll 2007-05-06 17:55 0 -rahs---- C:\MSDOS.SYS 2007-05-06 17:55 0 -rahs---- C:\IO.SYS 2007-05-06 17:55 0 --a------ C:\CONFIG.SYS 2007-05-06 17:55 0 --a------ C:\AUTOEXEC.BAT 2007-05-06 17:54 <DIR> dr------- C:\WINDOWS\Offline Web Pages 2007-05-06 17:54 <DIR> d--hs---- C:\DOCUME~1\ALLUSE~1\DRM 2007-05-06 17:54 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files 2007-05-06 17:53 81,920 --a------ C:\WINDOWS\system32\isign32.dll 2007-05-06 17:53 69,632 --a------ C:\WINDOWS\system32\icwdial.dll 2007-05-06 17:53 67,584 --a------ C:\WINDOWS\system32\acctres.dll 2007-05-06 17:53 61,440 --a------ C:\WINDOWS\system32\icwphbk.dll 2007-05-06 17:53 49,152 --a------ C:\WINDOWS\system32\inetres.dll 2007-05-06 17:53 40,960 --a------ C:\WINDOWS\system32\safrslv.dll 2007-05-06 17:53 39,424 --a------ C:\WINDOWS\system32\safrcdlg.dll 2007-05-06 17:53 33,792 --a------ C:\WINDOWS\system32\racpldlg.dll 2007-05-06 17:53 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2007-05-06 17:53 28,672 --a------ C:\WINDOWS\system32\isrdbg32.dll 2007-05-06 17:53 270,336 --a------ C:\WINDOWS\system32\inetcfg.dll 2007-05-06 17:53 26,624 --a------ C:\WINDOWS\system32\safrdm.dll 2007-05-06 17:53 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2007-05-06 17:53 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2007-05-06 17:53 11,264 --a------ C:\WINDOWS\system32\atrace.dll 2007-05-06 17:53 <DIR> d---s---- C:\WINDOWS\Tasks 2007-05-06 17:53 <DIR> d-------- C:\WINDOWS\system32\DirectX 2007-05-06 17:53 <DIR> d-------- C:\WINDOWS\srchasst 2007-05-06 17:53 <DIR> d-------- C:\Program Files\Common Files\MSSoap 2007-05-06 17:50 9,728 --a------ C:\WINDOWS\system32\mstinit.exe 2007-05-06 17:50 81,408 --a------ C:\WINDOWS\system32\msoert2.dll 2007-05-06 17:50 73,728 --a------ C:\WINDOWS\system32\ils.dll 2007-05-06 17:50 69,248 --a------ C:\WINDOWS\system32\drivers\sr.sys 2007-05-06 17:50 65,536 --a------ C:\WINDOWS\system32\msconf.dll 2007-05-06 17:50 63,488 --a------ C:\WINDOWS\system32\srclient.dll 2007-05-06 17:50 587,776 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-05-06 17:50 32,256 --a------ C:\WINDOWS\system32\mnmdd.dll 2007-05-06 17:50 253,952 --a------ C:\WINDOWS\system32\mstask.dll 2007-05-06 17:50 24,576 --a------ C:\WINDOWS\system32\nmmkcert.dll 2007-05-06 17:50 228,864 --a------ C:\WINDOWS\system32\msoeacct.dll 2007-05-06 17:50 227,328 --a------ C:\WINDOWS\system32\srrstr.dll 2007-05-06 17:50 221,696 --a------ C:\WINDOWS\system32\qmgr.dll 2007-05-06 17:50 17,408 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2007-05-06 17:50 160,256 --a------ C:\WINDOWS\system32\schedsvc.dll 2007-05-06 17:50 159,232 --a------ C:\WINDOWS\system32\srsvc.dll 2007-05-06 17:50 <DIR> d-------- C:\WINDOWS\system32\Restore 2007-05-06 17:50 <DIR> d-------- C:\WINDOWS\system32\Macromed 2007-05-06 17:50 <DIR> d-------- C:\WINDOWS\PCHealth 2007-05-06 17:50 <DIR> d-------- C:\Program Files\Movie Maker 2007-05-06 17:49 21,856 --a------ C:\WINDOWS\system32\emptyregdb.dat 2007-05-06 17:49 <DIR> d-------- C:\WINDOWS\Registration 2007-05-06 17:48 99,328 --a------ C:\WINDOWS\system32\clipbrd.exe 2007-05-06 17:48 9,728 --a------ C:\WINDOWS\system32\xolehlp.dll 2007-05-06 17:48 9,728 --a------ C:\WINDOWS\system32\reset.exe 2007-05-06 17:48 9,216 --a------ C:\WINDOWS\system32\wuauserv.dll 2007-05-06 17:48 9,216 --a------ C:\WINDOWS\system32\icaapi.dll 2007-05-06 17:48 89,088 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2007-05-06 17:48 869,376 --a------ C:\WINDOWS\system32\msdtctm.dll 2007-05-06 17:48 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll 2007-05-06 17:48 83,968 --a------ C:\WINDOWS\system32\mtxoci.dll 2007-05-06 17:48 82,432 --a------ C:\WINDOWS\system32\comrepl.dll 2007-05-06 17:48 80,896 --a------ C:\WINDOWS\system32\charmap.exe 2007-05-06 17:48 75,912 --a------ C:\WINDOWS\system32\rdpwsx.dll 2007-05-06 17:48 73,216 --a------ C:\WINDOWS\system32\avwav.dll 2007-05-06 17:48 61,952 --a------ C:\WINDOWS\system32\rdshost.exe 2007-05-06 17:48 605,696 --a------ C:\WINDOWS\system32\getuname.dll 2007-05-06 17:48 6,144 --a------ C:\WINDOWS\system32\msdtc.exe 2007-05-06 17:48 598,016 --a------ C:\WINDOWS\system32\mstscax.dll 2007-05-06 17:48 582,656 --a------ C:\WINDOWS\system32\catsrvut.dll 2007-05-06 17:48 57,856 --a------ C:\WINDOWS\system32\licwmi.dll 2007-05-06 17:48 57,344 --a------ C:\WINDOWS\system32\sol.exe 2007-05-06 17:48 56,832 --a------ C:\WINDOWS\system32\remotepg.dll 2007-05-06 17:48 56,832 --a------ C:\WINDOWS\system32\colbact.dll 2007-05-06 17:48 55,808 --a------ C:\WINDOWS\system32\freecell.exe 2007-05-06 17:48 54,784 --a------ C:\WINDOWS\system32\msdtclog.dll 2007-05-06 17:48 54,272 --a------ C:\WINDOWS\system32\stclient.dll 2007-05-06 17:48 534,016 --a------ C:\WINDOWS\system32\spider.exe 2007-05-06 17:48 53,248 --a------ C:\WINDOWS\system32\servdeps.dll 2007-05-06 17:48 5,632 --a------ C:\WINDOWS\system32\write.exe 2007-05-06 17:48 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2007-05-06 17:48 495,616 --a------ C:\WINDOWS\system32\comuid.dll 2007-05-06 17:48 494,592 --a------ C:\WINDOWS\system32\hypertrm.dll 2007-05-06 17:48 468,480 --a------ C:\WINDOWS\system32\clbcatq.dll 2007-05-06 17:48 44,544 --a------ C:\WINDOWS\system32\hticons.dll 2007-05-06 17:48 44,032 --a------ C:\WINDOWS\system32\rdpclip.exe 2007-05-06 17:48 40,960 --a------ C:\WINDOWS\system32\tscupgrd.exe 2007-05-06 17:48 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2007-05-06 17:48 4,096 --a------ C:\WINDOWS\system32\mtxex.dll 2007-05-06 17:48 390,144 --a------ C:\WINDOWS\system32\mstsc.exe 2007-05-06 17:48 38,024 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2007-05-06 17:48 359,936 --a------ C:\WINDOWS\system32\msdtcprx.dll 2007-05-06 17:48 35,328 --a------ C:\WINDOWS\system32\winchat.exe 2007-05-06 17:48 342,016 --a------ C:\WINDOWS\system32\mspaint.exe 2007-05-06 17:48 33,792 --a------ C:\WINDOWS\system32\regini.exe 2007-05-06 17:48 32,768 --a------ C:\WINDOWS\system32\cfgbkend.dll 2007-05-06 17:48 25,600 --a------ C:\WINDOWS\system32\comaddin.dll 2007-05-06 17:48 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2007-05-06 17:48 231,424 --a------ C:\WINDOWS\system32\avtapi.dll 2007-05-06 17:48 22,528 --a------ C:\WINDOWS\system32\qwinsta.exe 2007-05-06 17:48 22,528 --a------ C:\WINDOWS\system32\msg.exe 2007-05-06 17:48 215,040 --a------ C:\WINDOWS\system32\catsrv.dll 2007-05-06 17:48 201,216 --a------ C:\WINDOWS\system32\termsrv.dll 2007-05-06 17:48 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll 2007-05-06 17:48 20,232 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2007-05-06 17:48 19,456 --a------ C:\WINDOWS\system32\qprocess.exe 2007-05-06 17:48 189,440 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-05-06 17:48 183,296 --a------ C:\WINDOWS\system32\accwiz.exe 2007-05-06 17:48 182,400 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys 2007-05-06 17:48 177,152 --a------ C:\WINDOWS\system32\cmprops.dll 2007-05-06 17:48 17,920 --a------ C:\WINDOWS\system32\tsshutdn.exe 2007-05-06 17:48 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe 2007-05-06 17:48 16,896 --a------ C:\WINDOWS\system32\mmfutil.dll 2007-05-06 17:48 16,384 --a------ C:\WINDOWS\system32\tskill.exe 2007-05-06 17:48 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe 2007-05-06 17:48 16,384 --a------ C:\WINDOWS\system32\avmeter.dll 2007-05-06 17:48 151,040 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2007-05-06 17:48 15,872 --a------ C:\WINDOWS\system32\logoff.exe 2007-05-06 17:48 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll 2007-05-06 17:48 15,360 --a------ C:\WINDOWS\system32\tsdiscon.exe 2007-05-06 17:48 15,360 --a------ C:\WINDOWS\system32\tscon.exe 2007-05-06 17:48 15,360 --a------ C:\WINDOWS\system32\shadow.exe 2007-05-06 17:48 147,456 --a------ C:\WINDOWS\system32\comsnap.dll 2007-05-06 17:48 142,336 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-05-06 17:48 14,848 --a------ C:\WINDOWS\system32\rdpsnd.dll 2007-05-06 17:48 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe 2007-05-06 17:48 135,680 --a------ C:\WINDOWS\system32\rdchost.dll 2007-05-06 17:48 130,048 --a------ C:\WINDOWS\system32\sessmgr.exe 2007-05-06 17:48 128,000 --a------ C:\WINDOWS\system32\mshearts.exe 2007-05-06 17:48 125,440 --a------ C:\WINDOWS\system32\sndrec32.exe 2007-05-06 17:48 12,288 --a------ C:\WINDOWS\system32\rdsaddin.exe 2007-05-06 17:48 119,808 --a------ C:\WINDOWS\system32\winmine.exe 2007-05-06 17:48 118,272 --a------ C:\WINDOWS\system32\mplay32.exe 2007-05-06 17:48 115,976 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2007-05-06 17:48 115,200 --a------ C:\WINDOWS\system32\calc.exe 2007-05-06 17:48 11,144 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2007-05-06 17:48 100,864 --a------ C:\WINDOWS\system32\clbcatex.dll 2007-05-06 17:48 1,225 --a------ C:\WINDOWS\system32\usrlogon.cmd 2007-05-06 17:48 1,172,992 --a------ C:\WINDOWS\system32\comsvcs.dll 2007-05-06 17:48 <DIR> d--h----- C:\Program Files\WindowsUpdate 2007-05-06 17:48 <DIR> d-------- C:\WINDOWS\system32\MsDtc 2007-05-06 17:48 <DIR> d-------- C:\WINDOWS\system32\Com 2007-05-06 17:48 <DIR> d-------- C:\Program Files\Windows NT 2007-05-06 17:48 <DIR> d-------- C:\Program Files\Usugi online 2007-05-06 17:48 <DIR> d-------- C:\Program Files\MSN Gaming Zone 2007-05-06 17:48 <DIR> d-------- C:\Program Files\Messenger (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-05-08 13:32:53 42,496 ----a-w C:\WINDOWS\system32\ftp.exe 2007-05-08 13:32:53 16,896 ----a-w C:\WINDOWS\system32\tftp.exe 2007-05-07 17:58:54 49,712 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-05-07 17:58:54 355,830 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-05-06 16:53:23 133,632 ----a-w C:\WINDOWS\system32\sfc_os.dll 2007-05-06 15:54:13 -------- d-----w C:\Program Files\Usługi online (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}"="C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup" "nwiz"="nwiz.exe /install" "HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe" "nod32kui"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE" "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe" "FineReader7NewsReaderPro"="C:\\Program Files\\ABBYY FineReader 7.0 Professional Edition\\AbbyyNewsReader.exe" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa Authentication Packages msv1_0\0\0 Security Packages kerberos\0msv1_0\0schannel\0wdigest\0\0 Notification Packages scecli\0\0 HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\c:^documents and settings^all users^menu start^programy^autostart^adobe reader speed launch.lnk C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\c:^documents and settings^all users^menu start^programy^autostart^hp digital imaging monitor.lnk C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\c:^documents and settings^all users^menu start^programy^autostart^microsoft office.lnk C:\PROGRA~1\MICROS~2\Office10\OSA.EXE -b -l HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c-media mixer C:\WINDOWS\NewMixer.exe /startup HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msmsgs "C:\Program Files\Messenger\msmsgs.exe" /background [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService DnsCache\0\0 rpcss RpcSs\0\0 imgsvc StiSvc\0\0 termsvcs TermService\0\0 HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost ******************************************************************** catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-05-08 18:32:37 Windows 5.1.2600 Dodatek Service Pack. 1 NTFS scanning hidden processes ... scanning hidden services ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 ******************************************************************** Completion time: 2007-05-08 18:32:39 C:\ComboFix-quarantined-files.txt ... 2007-05-08 18:32

[ Dodano: Dzisiaj o 18:49 ]

Kod: Zaznacz wszystko
Logfile of HijackThis v1.99.1 Scan saved at 18:33, on 07-05-08 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\SlimBrowser\sbrowser.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\WINDOWS\system32\NOTEPAD.EXE C:\WINDOWS\system32\notepad.exe C:\Documents and Settings\Niewierny\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [FineReader7NewsReaderPro] C:\Program Files\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

[ Dodano: Dzisiaj o 18:50 ]
zrobione
czekam na dalsze instrukcje
narazie delsim dialer się nie pojawia

**Posty:** 18165 · przez **wojtas** 08 Maj 2007, 18:58

sciagnij gmera:

http://gmer.net/gmer.zip

W Gmerze w zakładce CMD z zaznaczoną opcją CMD.EXE wklej:

gmer -del file C:\WINDOWS\system32\oth.exe
gmer –reboot

I kliknij z prawej strony na Uruchom.

**Posty:** 40 · przez **Niewierny** 09 Maj 2007, 16:25

siemka
ten link niedziała co powyżej mi podałes

**Posty:** 18165 · przez **wojtas** 09 Maj 2007, 16:27

http://www.idg.pl/ftp/pc_12767.html :wink:

prosze o sprawdzenie loga delsim dialer

prosze o sprawdzenie loga Delsim dialer

to jest to co mi wykrył anty vir na EWIDO.net

to jest nowy log

Kto jest na forum