prosze o sprawdzenie loga

**Posty:** 120 · przez **karolkamyk** 02 Lip 2006, 12:56

Siema. Moj problem jest taki ze komp strasznie muli, włączyłem dzisiaj skanowanie w NOD32, po godzinie wykryło 59 trojanów!! http://img111.imageshack.us/my.php?image=nod321ua.jpg

Oto log:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 12:50:49, on 2006-07-02 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\Program Files\D-Tools\daemon.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe D:\Program Files\Winamp\winampa.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\Eset\nod32kui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\ivo\UniSpiker-2.2\uni_spiker-2.2.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\BitComet\BitComet.exe C:\WINDOWS\system32\svchost.exe D:\Program Files\Opera\Opera.exe C:\Documents and Settings\user\Moje dokumenty\karol.kaminski@neostrada.pl\hijackthis_199\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://szukaj.wp.pl R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: (no name) - {EA0D26BD-9029-431A-86E0-83152D67828A} - (no file) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WinampAgent] d:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [GTRipple] C:\Program Files\GTDesktop\Plugins\GTRipple.exe O4 - Startup: Copy this shortcut to autostart folder.lnk = ? O4 - Startup: PowerReg Scheduler V3.exe O4 - Startup: UniSpiker-2.2.lnk = C:\Program Files\ivo\UniSpiker-2.2\uni_spiker-2.2.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: GT Ripple (2).lnk = C:\Program Files\GTDesktop\Plugins\GTRipple.exe O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) - http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar1.google.com/data/pl/big/1.1.62-big/GoogleNav.cab O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/Zango/ie/bridge-c18.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{BF65D6F0-950D-4485-8D35-49ADD46C0AD9}: NameServer = 194.204.152.34 217.98.63.164 O20 - Winlogon Notify: msctl32.dll - C:\WINDOWS\ O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

przez **jeff** 02 Lip 2006, 13:05

wszystkie czynności wykonujesz w trybie awaryjnym z wyłączonym przywracaniem systemu

R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O3 - Toolbar: (no name) - {EA0D26BD-9029-431A-86E0-83152D67828A} - (no file)
O4 - Startup: PowerReg Scheduler V3.exe
O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) - http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab
O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/Zango/ie/bridge-c18.cab
O20 - Winlogon Notify: msctl32.dll - C:\WINDOWS\

najpierw kasujesz wpisy w Hijacku, potem ręcznie pogrubione pliki/foldery. Po zabiegach nowy log

opróżnij folder Temp >> screen

Autor postu otrzymał pochwałę

**Posty:** 120 · przez **karolkamyk** 02 Lip 2006, 13:51

Zrobilem jak powiedzialeś, ale nigdzie niemoge znależć Temp>>screen znalazlem 2 foldery Temp ale w zadnym niema czyegos takiego jak temp a tu nowy log:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 13:49:54, on 2006-07-02 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\Program Files\D-Tools\daemon.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe D:\Program Files\Winamp\winampa.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\Eset\nod32kui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\GTDesktop\Plugins\GTRipple.exe C:\Program Files\Wallpaper Calendar\Wallpaper calendar.exe C:\Program Files\ivo\UniSpiker-2.2\uni_spiker-2.2.exe D:\Program Files\Opera\Opera.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\user\Moje dokumenty\karol.kaminski@neostrada.pl\hijackthis_199\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://szukaj.wp.pl R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: (no name) - {EA0D26BD-9029-431A-86E0-83152D67828A} - (no file) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WinampAgent] d:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [GTRipple] C:\Program Files\GTDesktop\Plugins\GTRipple.exe O4 - Startup: Copy this shortcut to autostart folder.lnk = ? O4 - Startup: UniSpiker-2.2.lnk = C:\Program Files\ivo\UniSpiker-2.2\uni_spiker-2.2.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: GT Ripple (2).lnk = C:\Program Files\GTDesktop\Plugins\GTRipple.exe O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar1.google.com/data/pl/big/1.1.62-big/GoogleNav.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{BF65D6F0-950D-4485-8D35-49ADD46C0AD9}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

**Posty:** 5151 · przez **JarekMk** 02 Lip 2006, 13:56

Wpisz w uruchom %temp% i wywal wsio a później temp i to samo.
pzdr!

Autor postu otrzymał pochwałę

przez **jeff** 02 Lip 2006, 14:09

pozostało

O3 - Toolbar: (no name) - {EA0D26BD-9029-431A-86E0-83152D67828A} - (no file)

na screenie masz sciezke dostepu -> wklej ją w pasek na górze i zrób pokazywanie ukrytych plików/folderów

**Posty:** 120 · przez **karolkamyk** 02 Lip 2006, 14:39

Jarek napisał(a):Wpisz w uruchom %temp% i wywal wsio a później temp i to samo.

-zrobione

detektyw napisał(a):na screenie masz sciezke dostepu -> wklej ją w pasek na górze i zrób pokazywanie ukrytych plików/folderów

-tu niezabardzo wiem co mam zrobić

a tu nowy log:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 14:36:38, on 2006-07-02 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\Program Files\D-Tools\daemon.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe D:\Program Files\Winamp\winampa.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\Eset\nod32kui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\ivo\UniSpiker-2.2\uni_spiker-2.2.exe C:\WINDOWS\system32\wscntfy.exe D:\Program Files\Opera\Opera.exe C:\Documents and Settings\user\Moje dokumenty\karol.kaminski@neostrada.pl\hijackthis_199\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://szukaj.wp.pl R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WinampAgent] d:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [GTRipple] C:\Program Files\GTDesktop\Plugins\GTRipple.exe O4 - Startup: Copy this shortcut to autostart folder.lnk = ? O4 - Startup: UniSpiker-2.2.lnk = C:\Program Files\ivo\UniSpiker-2.2\uni_spiker-2.2.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: GT Ripple (2).lnk = C:\Program Files\GTDesktop\Plugins\GTRipple.exe O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar1.google.com/data/pl/big/1.1.62-big/GoogleNav.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{BF65D6F0-950D-4485-8D35-49ADD46C0AD9}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

**Posty:** 1665 · przez **SER** 02 Lip 2006, 14:44

W logu nic nie widać

======================

Opróżnij katalog Temp i Temporary Internet Files, czyli :

Start -> Uruchom -> cmd i wpisujesz następujące komendy, każdą potwierdzając klawiszem ENTER.

RD /S /Q "C:\Documents and Settings\Nazwa twojego konta\Ustawienia lokalne\Temp"

RD /S /Q "C:\Documents and Settings\Nazwa twojego konta\Ustawienia lokalne\Temporary Internet Files"

Autor postu otrzymał pochwałę

**Posty:** 120 · przez **karolkamyk** 02 Lip 2006, 14:55

Dobra przeskanuje teraz kompa NOD-em

[ Dodano: Dzisiaj o 19:38 ]
Już jest ok ale... http://img367.imageshack.us/my.php?image=beztytuu7co.jpg jeszcze są 3 trojany...

**Posty:** 18165 · przez **wojtas** 04 Lip 2006, 11:09

daj nowego loga z hijacka

**Posty:** 5151 · przez **JarekMk** 04 Lip 2006, 11:10

Wejdź do trybu awaryjnego i oczyść kosz a następnie odszukaj te pliki i usuń

pzdr!

**Posty:** 120 · przez **karolkamyk** 05 Lip 2006, 11:07

sory ze tak puzno ale dopiero dzisiaj weszlem na kompa

oto log:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 11:03:24, on 2006-07-05 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\Explorer.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\Program Files\D-Tools\daemon.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe D:\Program Files\Winamp\winampa.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\Eset\nod32kui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\ivo\UniSpiker-2.2\uni_spiker-2.2.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\BitComet\BitComet.exe d:\Program Files\Winamp\winamp.exe D:\Program Files\Opera\Opera.exe C:\Documents and Settings\user\Moje dokumenty\karol.kaminski@neostrada.pl\hijackthis_199\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://szukaj.wp.pl R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WinampAgent] d:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [GTRipple] C:\Program Files\GTDesktop\Plugins\GTRipple.exe O4 - Startup: UniSpiker-2.2.lnk = C:\Program Files\ivo\UniSpiker-2.2\uni_spiker-2.2.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: GT Ripple (2).lnk = C:\Program Files\GTDesktop\Plugins\GTRipple.exe O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar1.google.com/data/pl/big/1.1.62-big/GoogleNav.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{BF65D6F0-950D-4485-8D35-49ADD46C0AD9}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

[ Dodano: Dzisiaj o 10:19 ]

Jarek napisał(a):Wejdź do trybu awaryjnego i oczyść kosz

kosz wyczyściłem już dawno odrazu jak usunalem to co mi ser napisal

Jarek napisał(a): odszukaj te pliki i usuń
pzdr!

jakie pliki??

**Posty:** 8694 · przez **Red** 05 Lip 2006, 15:42

rootkit sie przyplatał >>>prosze sciagnac:
http://www.europe.f-secure.com/exclude/blacklight/blbeta.exe
odpalic ,przeskanowac system ,usunac to co znajdzie ...restart kompa i sprawdz czy cos jeszcze znajduje antywirus

**Posty:** 120 · przez **karolkamyk** 06 Lip 2006, 11:55

nic nie znalazł ten program zara kompa przeskanuje

[ Dodano: Dzisiaj o 13:08 ]
http://img139.imageshack.us/my.php?image=nod32ugy4ak.jpg to jest wynik skanowania - 2 trojany

**Posty:** 8694 · przez **Red** 06 Lip 2006, 17:58

karolkamyk napisał(a):nic nie znalazł ten program zara kompa przeskanuje

**Posty:** 120 · przez **karolkamyk** 06 Lip 2006, 21:47

to co mam zrobić?? :cry:

**Posty:** 8694 · przez **Red** 06 Lip 2006, 21:50

dac jeszcze jeden log z programu:

http://www.sysinternals.com/Files/RootkitRevealer.zip

**Posty:** 120 · przez **karolkamyk** 08 Lip 2006, 13:50

skonczyl ten program skanowac ale jak ten log z tamtąd skopjowac??

[ Dodano: Dzisiaj o 12:52 ]
acha juz wiem oto log:

Kod: Zaznacz wszystko: HKLM\SOFTWARE\Zone Labs\ZoneAlarm\BlockCount 2006-07-08 13:17 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Zone Labs\ZoneAlarm\IncomingCount 2006-07-08 13:17 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SYSTEM\ControlSet001\Services\d347prt\Cfg\0Jf40 2006-07-08 09:05 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\d347prt\Cfg\0Jf41 2006-06-08 17:28 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\d347prt\Cfg\0Jf42 2006-06-08 17:28 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\d347prt\Cfg\0Jf43 2006-05-10 22:20 0 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FHZ.jpeg 2006-07-06 20:37 1.65 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FIN.jpeg 2006-07-06 20:37 2.42 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FIS.jpeg 2006-07-06 20:37 2.99 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FJ7.jpeg 2006-07-06 20:37 3.20 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FJH.jpeg 2006-07-06 20:37 1.30 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FKX.jpeg 2006-07-06 20:39 199.89 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FKY.gif 2006-07-06 20:38 6.90 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FKZ.jpg 2006-07-06 20:39 5.83 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FL0.jpg 2006-07-06 20:39 6.41 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FL1.jpg 2006-07-06 20:39 5.57 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FL2.jpg 2006-07-06 20:39 7.36 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FL4.gif 2006-07-06 20:39 43 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FL5.jpg 2006-07-06 20:39 8.07 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FL6.jpg 2006-07-06 20:39 12.71 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FL7.jpg 2006-07-06 20:39 34.52 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FL8.jpg 2006-07-06 20:39 6.32 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FL9.jpg 2006-07-06 20:39 6.60 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLA.jpg 2006-07-06 20:39 6.95 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLB.jpg 2006-07-06 20:39 7.77 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLC.jpg 2006-07-06 20:39 5.95 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLD.jpg 2006-07-06 20:39 6.31 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLE.jpg 2006-07-06 20:39 8.83 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLF.jpg 2006-07-06 20:39 18.83 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLG.gif 2006-07-06 20:39 43 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLH.html 2006-07-06 20:39 5.72 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLI.jpg 2006-07-06 20:39 17.08 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLJ.jpg 2006-07-06 20:39 16.02 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLK.jpeg 2006-07-06 20:39 18.83 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLL.html 2006-07-06 20:39 8.21 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLM.gif 2006-07-06 20:39 51.20 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLN.jpg 2006-07-06 20:39 15.11 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLO.jpg 2006-07-06 20:39 7.51 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLP.jpg 2006-07-06 20:39 7.17 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLQ.jpg 2006-07-06 20:39 27.84 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLR.gif 2006-07-06 20:39 17.43 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLS.gif 2006-07-06 20:39 43 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLT.jpg 2006-07-06 20:39 9.50 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLU.gif 2006-07-06 20:39 18.23 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLV.jpg 2006-07-06 20:39 6.24 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLW.jpg 2006-07-06 20:39 6.23 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLX.jpeg 2006-07-06 20:40 1.69 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLY.html 2006-07-06 20:40 7.68 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FLZ.gif 2006-07-06 20:40 43 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM0.jpeg 2006-07-06 20:40 10.88 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM1.gif 2006-07-06 20:40 88.95 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM2.gif 2006-07-06 20:40 302 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM3.html 2006-07-06 20:40 7.67 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM4.gif 2006-07-06 20:40 53 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM5.gif 2006-07-06 20:40 3.02 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM6.jpeg 2006-07-06 20:40 1.73 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM7.gif 2006-07-06 20:40 3.93 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM8.gif 2006-07-06 20:40 15.67 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FM9.gif 2006-07-06 20:40 3.05 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMA.jpeg 2006-07-06 20:40 4.62 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMB.jpeg 2006-07-06 20:40 1.69 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMC.jpg 2006-07-06 20:40 11.25 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMD.gif 2006-07-06 20:40 3.50 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FME.gif 2006-07-06 20:40 6.16 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMF.gif 2006-07-06 20:40 5.77 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMG.jpg 2006-07-06 20:40 21.16 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMH.jpeg 2006-07-06 20:40 1.78 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMI.gif 2006-07-06 20:40 3.36 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMJ.gif 2006-07-06 20:40 43 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMK.gif 2006-07-06 20:40 4.67 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FML.jpeg 2006-07-06 20:40 83.03 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMM.gif 2006-07-06 20:40 43 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMN.jpg 2006-07-06 20:40 25.01 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMO.html 2006-07-06 20:40 8.53 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMP.jpeg 2006-07-06 20:40 1.80 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMQ.gif 2006-07-06 20:40 1.33 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMR.jpeg 2006-07-06 20:40 87.32 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMU.gif 2006-07-06 20:41 15.34 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMV.jpeg 2006-07-06 20:41 2.92 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMW.jpeg 2006-07-06 20:41 2.41 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMX.html 2006-07-06 20:41 9.24 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMY.jpeg 2006-07-06 20:41 3.51 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FMZ.gif 2006-07-06 20:41 162 bytes Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FN1.jpeg 2006-07-06 20:41 1.90 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FN2.jpeg 2006-07-06 20:41 3.07 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FN8.jpg 2006-07-06 20:41 72.09 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FN9.jpg 2006-07-06 20:41 55.32 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01FNA.jpg 2006-07-06 20:41 43.52 KB Visible in Windows API, MFT, but not in directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01GD8.gif 2006-07-06 21:43 434 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HDD.htm 2006-07-08 13:15 3.03 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HDU.js 2006-07-08 13:19 65 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HDV.html 2006-07-08 13:19 16.80 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HDW.js 2006-07-08 13:19 585 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HDX.html 2006-07-08 13:19 9.37 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HDY.js 2006-07-08 13:19 584 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HDZ.gif 2006-07-08 13:19 57 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE0.js 2006-07-08 13:19 65 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE1.htm 2006-07-08 13:21 3.03 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE2.htm 2006-07-08 13:21 7.99 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE3.htm 2006-07-08 13:21 255 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE4.js 2006-07-08 13:21 42.73 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE5.css 2006-07-08 13:21 3.19 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE6.gif 2006-07-08 13:22 807 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE7.gif 2006-07-08 13:22 84 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE8.htm 2006-07-08 13:22 5.40 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HE9.gif 2006-07-08 13:22 227 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEA.gif 2006-07-08 13:22 2.02 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEB.gif 2006-07-08 13:22 305 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEC.gif 2006-07-08 13:22 369 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HED.gif 2006-07-08 13:22 170 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEE.gif 2006-07-08 13:22 965 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEF.gif 2006-07-08 13:22 43 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEG.gif 2006-07-08 13:22 300 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEH.swf 2006-07-08 13:22 18.88 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEI.ico 2006-07-08 13:22 894 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEJ.css 2006-07-08 13:22 8.76 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEK.js 2006-07-08 13:22 15.07 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEL.swf 2006-07-08 13:22 10.86 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEM.gif 2006-07-08 13:22 289 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEN.gif 2006-07-08 13:22 233 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEO.gif 2006-07-08 13:22 232 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEP.gif 2006-07-08 13:22 219 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEQ.gif 2006-07-08 13:22 209 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HER.gif 2006-07-08 13:22 237 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HES.gif 2006-07-08 13:22 146 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HET.gif 2006-07-08 13:22 236 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEU.gif 2006-07-08 13:22 222 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEV.gif 2006-07-08 13:22 223 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEW.htm 2006-07-08 13:22 26 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEX.gif 2006-07-08 13:22 211 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEY.htm 2006-07-08 13:22 4.08 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HEZ.gif 2006-07-08 13:22 8.34 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HF0.gif 2006-07-08 13:23 224 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HF1.gif 2006-07-08 13:23 333 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HF2.jpg 2006-07-08 13:23 662 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HF3.htm 2006-07-08 13:23 3.96 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HF4.gif 2006-07-08 13:23 210 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HF5.gif 2006-07-08 13:23 929 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HF6.gif 2006-07-08 13:23 344 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HF8.gif 2006-07-08 13:23 677 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HF9.gif 2006-07-08 13:23 525 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFA.gif 2006-07-08 13:23 336 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFB.gif 2006-07-08 13:23 135 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFC.gif 2006-07-08 13:23 190 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFD.gif 2006-07-08 13:23 1.67 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFE.gif 2006-07-08 13:23 529 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFF.gif 2006-07-08 13:23 507 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFG.htm 2006-07-08 13:23 7.97 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFH.gif 2006-07-08 13:23 214 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFI.gif 2006-07-08 13:23 663 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFK.gif 2006-07-08 13:24 459 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFL.gif 2006-07-08 13:24 1.13 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFM.gif 2006-07-08 13:24 133 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFN.gif 2006-07-08 13:24 122 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFO.gif 2006-07-08 13:24 325 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFP.htm 2006-07-08 13:24 26 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFR.js 2006-07-08 13:25 5.18 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFS.gif 2006-07-08 13:25 425 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFT.gif 2006-07-08 13:25 650 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFU.gif 2006-07-08 13:25 174 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFV.gif 2006-07-08 13:25 336 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFW.jpg 2006-07-08 13:25 8.31 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFX.gif 2006-07-08 13:25 171 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFY.gif 2006-07-08 13:25 2.64 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HFZ.gif 2006-07-08 13:25 920 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG0.gif 2006-07-08 13:25 243 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG1.gif 2006-07-08 13:25 236 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG2.gif 2006-07-08 13:25 424 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG3.gif 2006-07-08 13:25 4.98 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG4.gif 2006-07-08 13:25 444 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG5.gif 2006-07-08 13:25 468 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG6.gif 2006-07-08 13:25 238 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG7.gif 2006-07-08 13:25 455 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG8.gif 2006-07-08 13:25 159 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HG9.gif 2006-07-08 13:25 155 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGA.gif 2006-07-08 13:25 174 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGB.gif 2006-07-08 13:25 934 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGC.gif 2006-07-08 13:25 790 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGD.gif 2006-07-08 13:25 172 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGE.htm 2006-07-08 13:25 10.35 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGF.gif 2006-07-08 13:25 143 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGG.gif 2006-07-08 13:25 170 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGH.gif 2006-07-08 13:25 171 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGI.gif 2006-07-08 13:25 346 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGJ.gif 2006-07-08 13:25 812 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGK.gif 2006-07-08 13:25 55 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGL.gif 2006-07-08 13:25 807 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGM.gif 2006-07-08 13:25 279 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGN.gif 2006-07-08 13:25 444 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGO.gif 2006-07-08 13:25 459 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGP.gif 2006-07-08 13:25 171 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGQ.gif 2006-07-08 13:25 140 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGR.gif 2006-07-08 13:25 171 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGS.gif 2006-07-08 13:25 174 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGT.gif 2006-07-08 13:25 696 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGU.gif 2006-07-08 13:25 811 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGV.gif 2006-07-08 13:25 172 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGW.gif 2006-07-08 13:25 172 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGX.gif 2006-07-08 13:25 316 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGY.gif 2006-07-08 13:25 176 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HGZ.gif 2006-07-08 13:25 122 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH0.gif 2006-07-08 13:25 170 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH1.gif 2006-07-08 13:25 248 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH2.gif 2006-07-08 13:25 159 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH3.gif 2006-07-08 13:25 1.01 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH4.gif 2006-07-08 13:25 690 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH5.gif 2006-07-08 13:25 236 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH6.gif 2006-07-08 13:25 485 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH7.gif 2006-07-08 13:25 323 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH8.gif 2006-07-08 13:25 695 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HH9.gif 2006-07-08 13:25 807 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHA.gif 2006-07-08 13:25 170 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHB.gif 2006-07-08 13:25 498 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHC.swf 2006-07-08 13:27 1.73 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHD.gif 2006-07-08 13:27 465 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHE.js 2006-07-08 13:27 539 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHF.gif 2006-07-08 13:27 180 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHG.jpg 2006-07-08 13:27 12.68 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHH.gif 2006-07-08 13:27 149 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHI.gif 2006-07-08 13:27 790 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHJ.htm 2006-07-08 13:27 286 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHK.gif 2006-07-08 13:27 574 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHL.gif 2006-07-08 13:27 808 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHM.gif 2006-07-08 13:27 146 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHN.jpg 2006-07-08 13:27 557 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHO.gif 2006-07-08 13:27 262 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHP.htm 2006-07-08 13:27 1.39 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHQ.js 2006-07-08 13:27 1.02 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHR.jpg 2006-07-08 13:27 546 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHS.gif 2006-07-08 13:27 696 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHT.gif 2006-07-08 13:27 452 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHU.png 2006-07-08 13:27 2.87 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHV.htm 2006-07-08 13:27 1.34 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHW.gif 2006-07-08 13:27 152 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHX.gif 2006-07-08 13:27 570 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHY.gif 2006-07-08 13:27 807 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HHZ.gif 2006-07-08 13:27 806 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI0.gif 2006-07-08 13:27 43 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI1.gif 2006-07-08 13:27 168 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI2.js 2006-07-08 13:27 64 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI3.gif 2006-07-08 13:27 574 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI4.htm 2006-07-08 13:27 5.06 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI5.css 2006-07-08 13:27 7.71 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI6.gif 2006-07-08 13:27 498 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI7.gif 2006-07-08 13:27 97 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI8.gif 2006-07-08 13:27 323 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HI9.htm 2006-07-08 13:28 26 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIA.gif 2006-07-08 13:28 111 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIB.htm 2006-07-08 13:28 8.99 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIC.gif 2006-07-08 13:28 3.40 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HID.gif 2006-07-08 13:28 587 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIE.gif 2006-07-08 13:28 146 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIF.gif 2006-07-08 13:29 159 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIG.gif 2006-07-08 13:29 894 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIH.jpg 2006-07-08 13:29 3.59 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HII.gif 2006-07-08 13:29 667 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIJ.gif 2006-07-08 13:29 1.44 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIK.htm 2006-07-08 13:29 21.35 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIL.gif 2006-07-08 13:29 289 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIM.htm 2006-07-08 13:30 6.01 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIP.gif 2006-07-08 13:31 140 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIQ.jpg 2006-07-08 13:31 2.35 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIR.gif 2006-07-08 13:31 140 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIS.gif 2006-07-08 13:31 215 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIT.gif 2006-07-08 13:31 140 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIU.htm 2006-07-08 13:31 9.72 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIV.jpg 2006-07-08 13:31 2.33 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIW.htm 2006-07-08 13:32 736 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HIX.swf 2006-07-08 13:32 616 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ0.jpg 2006-07-08 13:32 66.73 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ1.gif 2006-07-08 13:32 86 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ2.jpg 2006-07-08 13:32 17.93 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ3.js 2006-07-08 13:32 4.23 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ4.jpg 2006-07-08 13:32 6.48 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ5.jpg 2006-07-08 13:32 2.34 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ6.jpg 2006-07-08 13:32 5.44 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ7.jpg 2006-07-08 13:32 4.46 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ8.jpg 2006-07-08 13:32 2.68 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJ9.jpg 2006-07-08 13:32 6.68 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJA.jpg 2006-07-08 13:32 4.14 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJB.gif 2006-07-08 13:32 1.44 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJC.jpg 2006-07-08 13:32 4.18 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJD.jpg 2006-07-08 13:32 4.45 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJE.jpg 2006-07-08 13:32 1.77 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJF.jpg 2006-07-08 13:32 4.94 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJG.jpg 2006-07-08 13:32 19.14 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJH.jpg 2006-07-08 13:32 2.22 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJI.jpg 2006-07-08 13:32 533 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJJ.jpg 2006-07-08 13:32 5.59 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJK.jpg 2006-07-08 13:32 6.68 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJL.jpg 2006-07-08 13:32 5.47 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJM.css 2006-07-08 13:32 6.21 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJN.jpg 2006-07-08 13:32 5.61 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJO.jpg 2006-07-08 13:32 2.53 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJP.jpg 2006-07-08 13:32 11.07 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJQ.css 2006-07-08 13:32 1 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJR.jpg 2006-07-08 13:32 4.27 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJS.jpg 2006-07-08 13:32 7.34 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJT.jpg 2006-07-08 13:32 2.17 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJU.jpg 2006-07-08 13:32 4.60 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJV.jpg 2006-07-08 13:32 7.95 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJW.jpg 2006-07-08 13:32 2.25 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJX.jpg 2006-07-08 13:32 4.84 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJY.jpg 2006-07-08 13:32 4.65 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HJZ.jpg 2006-07-08 13:32 18.41 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK0.jpg 2006-07-08 13:32 38.70 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK1.js 2006-07-08 13:32 117 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK2.jpg 2006-07-08 13:32 5.60 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK3.GIF 2006-07-08 13:32 54 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK4.js 2006-07-08 13:32 17.69 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK5.jpg 2006-07-08 13:32 2.23 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK6.jpg 2006-07-08 13:32 5.14 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK7.jpg 2006-07-08 13:32 4.59 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK8.jpg 2006-07-08 13:32 20.77 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HK9.gif 2006-07-08 13:32 35 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKA.css 2006-07-08 13:32 6.84 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKB.gif 2006-07-08 13:32 86 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKC.jpg 2006-07-08 13:32 5.56 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKD.jpg 2006-07-08 13:32 595 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKE.jpg 2006-07-08 13:32 5.05 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKF.jpg 2006-07-08 13:32 5.19 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKG.htm 2006-07-08 13:32 26.57 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKH.jpg 2006-07-08 13:32 34.17 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKI.jpg 2006-07-08 13:32 4.04 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKJ.htm 2006-07-08 13:33 8.08 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKL.gif 2006-07-08 13:33 71 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKM.htm 2006-07-08 13:33 21.54 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKN.gif 2006-07-08 13:33 458 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKO.gif 2006-07-08 13:33 307 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKP.gif 2006-07-08 13:33 668 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKQ.gif 2006-07-08 13:33 344 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKR.gif 2006-07-08 13:33 1.15 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKS.htm 2006-07-08 13:34 26 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKT.gif 2006-07-08 13:34 140 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKU.htm 2006-07-08 13:34 9.07 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKV.gif 2006-07-08 13:34 640 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKW.gif 2006-07-08 13:34 6.68 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKX.gif 2006-07-08 13:35 170 bytes Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKY.htm 2006-07-08 13:35 9.22 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HKZ.htm 2006-07-08 13:36 9.64 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HL0.gif 2006-07-08 13:36 1.28 KB Hidden from Windows API. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HL1.gif 2006-07-08 13:36 151 bytes Visible in directory index, but not Windows API or MFT. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HL2.gif 2006-07-08 13:36 151 bytes Visible in directory index, but not Windows API or MFT. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HL3.gif 2006-07-08 13:36 158 bytes Visible in directory index, but not Windows API or MFT. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HL4.gif 2006-07-08 13:36 161 bytes Visible in directory index, but not Windows API or MFT. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HL5.gif 2006-07-08 13:36 154 bytes Visible in directory index, but not Windows API or MFT. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\cache4\opr01HL6.htm 2006-07-08 13:37 7.99 KB Visible in directory index, but not Windows API or MFT. C:\Documents and Settings\user\Dane aplikacji\Opera\Opera\profile\images\en.prizee.com.ico 2006-07-08 13:32 2.19 KB Hidden from Windows API. C:\Documents and Settings\user\Ustawienia lokalne\Temp\hsperfdata_user\1024 2006-07-08 13:21 64.00 KB Hidden from Windows API. C:\System Volume Information\_restore{5F39D426-5BE8-4505-B7CB-2CDD624C1947}\RP3\A0003234.lnk 2006-07-06 15:10 783 bytes Visible in directory index, but not Windows API or MFT. C:\System Volume Information\_restore{5F39D426-5BE8-4505-B7CB-2CDD624C1947}\RP3\A0003235.lnk 2006-06-24 13:36 267 bytes Visible in directory index, but not Windows API or MFT. C:\System Volume Information\_restore{5F39D426-5BE8-4505-B7CB-2CDD624C1947}\RP3\A0003236.lnk 2006-07-06 19:38 612 bytes Visible in directory index, but not Windows API or MFT.

[ Dodano: Dzisiaj o 12:53 ]
aha a tak puzno bo niezauwazylem tego ostatniego postu RED-a, sory

**Posty:** 8694 · przez **Red** 08 Lip 2006, 21:11

hm.....

prosze jeszcze sciagnac :
http://www.bleepingcomputer.com/files/steelwerx/regsearch.zip
i daj na wyszukanie >>>i386p.sys wklej wynik na forum

**Posty:** 120 · przez **karolkamyk** 09 Lip 2006, 12:15

Kod: Zaznacz wszystko: REGEDIT4 ; Registry Search 2.0 by Bobbi Flekman © 2005 ; Version: 2.0.1.0 ; Results at 2006-07-09 12:10:07 for strings: ; 'i386p.sys' ; Strings excluded from search: ; (None) ; Search in: ; Registry Keys Registry Values Registry Data ; HKEY_LOCAL_MACHINE HKEY_USERS [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\i386p] ; Contents of value: ; \??\c:\windows\system32\drivers\i386p.sys "ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,\ 6d,33,32,5c,64,72,69,76,65,72,73,5c,69,33,38,36,70,2e,73,79,73,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\i386p] ; Contents of value: ; \??\c:\windows\system32\drivers\i386p.sys "ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,\ 6d,33,32,5c,64,72,69,76,65,72,73,5c,69,33,38,36,70,2e,73,79,73,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i386p] ; Contents of value: ; \??\c:\windows\system32\drivers\i386p.sys "ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,\ 6d,33,32,5c,64,72,69,76,65,72,73,5c,69,33,38,36,70,2e,73,79,73,00 ; End Of The Log...

**Posty:** 8694 · przez **Red** 09 Lip 2006, 13:31

karolkamyk sprobuj wstepnie zastosowac automat do usuwania tego smiecia:
http://www.europe.f-secure.com/exclude/blacklight/blbeta.exe

jesli dalej bedzie i386p
w wyszukiwaczu to usuniemy recznie ,daj znak po zastosowaniu automatu i po ponownym przeszukaniu

prosze o sprawdzenie loga

Prosze o sprawdzenie loga

Kto jest na forum