Prosze o sprawdzenie loga(zawies kompa i błąd w zdarzeniach)

**Posty:** 1287 · przez **Achitas** 31 Maj 2009, 14:04

Kod: Zaznacz wszystko: Logfile of random's system information tool 1.06 (written by random/random) Run by Kaczor Donald at 2009-05-31 14:03:33 Microsoft Windows XP Professional Dodatek Service Pack 2 System drive C: has 242 MB (2%) free of 10 GB Total RAM: 1023 MB (55% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:03:49, on 2009-05-31 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\VIAudioi\SBADeck\ADeck.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe E:\GG\Gadu-Gadu\gg.exe C:\Program Files\Messenger\msmsgs.exe D:\RocketDock\RocketDock.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\SAGEM WiFi manager\WLANUTL.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Mozilla Firefox\firefox.exe E:\download\RSIT.exe C:\Program Files\trend micro\Kaczor Donald.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL (file missing) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: &Tłumaczenie - {2F7DB8D7-9BE7-4666-901E-F380555BCAC7} - D:\Russkij Translator\Russkij Translator\InternetTranslatorRusPol.dll O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "E:\GG\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [RocketDock] "D:\RocketDock\RocketDock.exe" O4 - HKCU\..\Run: [Steam] "E:\Steam\Steam.exe" -silent O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Thoosje Sidebar .lnk = C:\Program Files\Thoosje Sidebar V2.0\Thoosje Sidebar .exe O4 - Global Startup: BlueSoleil.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = ? O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {94C70A96-012C-4171-98FC-C1971511F20D} - D:\Russkij Translator\Russkij Translator\InternetTranslatorRusPol.dll O9 - Extra 'Tools' menuitem: @D:\Russkij Translator\Russkij Translator\InternetTranslatorRusPol.dll,-103 - {94C70A96-012C-4171-98FC-C1971511F20D} - D:\Russkij Translator\Russkij Translator\InternetTranslatorRusPol.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 7473 bytes ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-11-04 54248] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{37B85A21-692B-4205-9CAD-2626E4993404}] My Global Search Bar BHO - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL [2009-05-09 225280] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-04-12 35840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-04-12 73728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416] {2F7DB8D7-9BE7-4666-901E-F380555BCAC7} - &Tłumaczenie - D:\Russkij Translator\Russkij Translator\InternetTranslatorRusPol.dll [2008-02-07 364544] {37B85A29-692B-4205-9CAD-2626E4993404} - My Global Search Bar - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL [2009-05-09 225280] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "AudioDeck"=C:\Program Files\VIAudioi\SBADeck\ADeck.exe [2004-09-30 7957504] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-04-12 148888] "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152] "GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016] "ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-06-16 221184] "ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920] "StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440] "egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2008-08-18 1447168] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360] "Gadu-Gadu"=E:\GG\Gadu-Gadu\gg.exe [2007-04-17 2113536] "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-04 1667584] "RocketDock"=D:\RocketDock\RocketDock.exe [2007-09-02 495616] "Steam"=E:\Steam\Steam.exe -silent [] "EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe -silent [] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart BlueSoleil.lnk - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk - C:\Program Files\SAGEM WiFi manager\WLANUTL.exe C:\Documents and Settings\Kaczor Donald\Menu Start\Programy\Autostart Thoosje Sidebar .lnk - C:\Program Files\Thoosje Sidebar V2.0\Thoosje Sidebar .exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] C:\WINDOWS\system32\Ati2evxx.dll [2008-03-12 126976] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=95000000 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "E:\GG\Gadu-Gadu\gg.exe"="E:\GG\Gadu-Gadu\gg.exe:*:Disabled:Gadu-Gadu - program główny" "C:\Program Files\Java\jre6\launch4j-tmp\JDownloader.exe"="C:\Program Files\Java\jre6\launch4j-tmp\JDownloader.exe:*:Disabled:Java(TM) Platform SE binary" "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe" "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove" "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "E:\Stranglehold\Binaries\Retail-Stranglehold.exe"="E:\Stranglehold\Binaries\Retail-Stranglehold.exe:*:Disabled:Stranglehold" "C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe"="C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine.exe" "C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Disabled:Xfire" "C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil" "E:\Pro Evolution Soccer 2009\pes2009.exe"="E:\Pro Evolution Soccer 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009" "C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Disabled:SopCast Main Application" "C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Disabled:SopCast Adver" "C:\Program Files\TVUPlayer\TVUPlayer.exe"="C:\Program Files\TVUPlayer\TVUPlayer.exe:*:Disabled:TVUPlayer Component" "D:\Butterfly Oasis Screensaver\BearShare.exe"="D:\Butterfly Oasis Screensaver\BearShare.exe:*:Disabled:BearShare" "G:\System\KillingFloor.exe"="G:\System\KillingFloor.exe:*:Enabled:KillingFloor" "C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Disabled:EA Download Manager" "E:\Steam\steamapps\common\killingfloor\System\KillingFloor.exe"="E:\Steam\steamapps\common\killingfloor\System\KillingFloor.exe:*:Enabled:KillingFloor" "E:\Frontlines-Fuel of war-\Binaries\FFOW.exe"="E:\Frontlines-Fuel of war-\Binaries\FFOW.exe:*:Enabled:Frontlines Game" "E:\Turok\Binaries\TurokGame.exe"="E:\Turok\Binaries\TurokGame.exe:*:Disabled:Turok" "C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Disabled:Java(TM) Platform SE binary" "E:\UT3\Binaries\UT3.exe"="E:\UT3\Binaries\UT3.exe:*:Disabled:UT3" "E:\Turning Point Fall of Liberty Multi 5\Binaries\LTCG-TPGame.exe"="E:\Turning Point Fall of Liberty Multi 5\Binaries\LTCG-TPGame.exe:*:Disabled:Turning Point: Fall of Liberty" "C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Disabled:Java(TM) Platform SE binary" "E:\Pure.Multi-3.Full-Rip\Pure\Pure.exe"="E:\Pure.Multi-3.Full-Rip\Pure\Pure.exe:*:Disabled:Pure" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e3fc19a5-2757-11de-94c5-0013d31541c8}] shell\AutoRun\command - G:\Autorun.exe ======List of files/folders created in the last 1 months====== 2009-05-31 14:03:34 ----D---- C:\Program Files\trend micro 2009-05-31 14:03:33 ----D---- C:\rsit 2009-05-30 10:34:54 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\ATI 2009-05-30 10:22:45 ----D---- C:\Program Files\Common Files\ATI Technologies 2009-05-30 10:22:16 ----N---- C:\WINDOWS\system32\ati2sgag.exe 2009-05-30 10:22:06 ----RA---- C:\WINDOWS\system32\atiiiexx.dll 2009-05-30 10:22:04 ----RA---- C:\WINDOWS\system32\ATIDEMGX.dll 2009-05-30 10:21:33 ----D---- C:\Program Files\ATI Technologies 2009-05-29 17:59:27 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Disney Interactive Studios 2009-05-28 16:16:29 ----D---- C:\Program Files\DIFX 2009-05-28 16:16:25 ----D---- C:\WINDOWS\system32\ReinstallBackups 2009-05-28 16:16:11 ----DC---- C:\WINDOWS\system32\DRVSTORE 2009-05-27 17:43:27 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\2K Sports 2009-05-26 18:36:19 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Touchstone 2009-05-26 18:09:26 ----D---- C:\WINDOWS\A5B5A16D277A476B8F621029A2F23072.TMP 2009-05-26 18:08:32 ----A---- C:\WINDOWS\disney.ini 2009-05-25 16:55:49 ----D---- C:\WINDOWS\AC54E5443E42443CA91DA00A6974C592.TMP 2009-05-25 15:24:05 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite 2009-05-25 15:23:45 ----D---- C:\Program Files\DAEMON Tools Lite 2009-05-25 15:22:04 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\DAEMON Tools Lite 2009-05-25 14:23:27 ----D---- C:\totalcmd 2009-05-25 14:23:27 ----A---- C:\WINDOWS\wincmd.ini 2009-05-24 20:39:48 ----D---- C:\Program Files\3GP Player 2009-05-24 20:17:48 ----A---- C:\WINDOWS\system32\unrar.dll 2009-05-24 20:17:36 ----A---- C:\WINDOWS\system32\yv12vfw.dll 2009-05-24 20:17:35 ----A---- C:\WINDOWS\system32\xvidvfw.dll 2009-05-24 20:17:35 ----A---- C:\WINDOWS\system32\xvidcore.dll 2009-05-24 20:17:34 ----A---- C:\WINDOWS\system32\qt-dx331.dll 2009-05-24 20:17:34 ----A---- C:\WINDOWS\system32\dpl100.dll 2009-05-24 20:17:25 ----A---- C:\WINDOWS\system32\divx.dll 2009-05-24 20:17:20 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest 2009-05-24 20:17:20 ----A---- C:\WINDOWS\system32\ff_vfw.dll 2009-05-24 20:17:16 ----D---- C:\Program Files\K-Lite Codec Pack 2009-05-24 17:27:04 ----D---- C:\Program Files\InstallShield Cabinet File Viewer 2009-05-24 14:30:03 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Help 2009-05-23 13:16:25 ----A---- C:\WINDOWS\system32\CmdLineExt.dll 2009-05-23 13:11:09 ----D---- C:\WINDOWS\95FC26FB19FD4A96BBB1B1062E8648F5.TMP 2009-05-22 19:10:19 ----A---- C:\WINDOWS\system32\AVERM.dll 2009-05-22 19:03:01 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Media Player Classic 2009-05-22 19:02:06 ----A---- C:\WINDOWS\system32\rmoc3260.dll 2009-05-22 19:02:06 ----A---- C:\WINDOWS\system32\pndx5032.dll 2009-05-22 19:02:06 ----A---- C:\WINDOWS\system32\pndx5016.dll 2009-05-22 19:02:06 ----A---- C:\WINDOWS\system32\pncrt.dll 2009-05-22 19:02:02 ----D---- C:\Program Files\Real Alternative 2009-05-22 19:02:02 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Real 2009-05-22 19:02:02 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Real 2009-05-22 11:21:21 ----D---- C:\ProgramData 2009-05-22 11:21:14 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts 2009-05-21 21:22:10 ----D---- C:\Program Files\Electronic Arts 2009-05-20 16:46:12 ----D---- C:\Program Files\Microsoft WSE 2009-05-13 21:52:26 ----D---- C:\Program Files\Rapid Express 2009-05-12 22:22:47 ----A---- C:\WINDOWS\NCLogConfig.ini 2009-05-09 09:00:11 ----D---- C:\Program Files\MyGlobalSearch 2009-05-08 17:46:15 ----AD---- C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2009-05-08 14:38:20 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\fizzy 2009-05-07 20:09:53 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Image Zone Express 2009-05-07 11:27:38 ----D---- C:\Program Files\Devious Codeworks 2009-05-07 11:17:35 ----D---- C:\Program Files\Image2Ico 2009-05-07 09:27:19 ----D---- C:\WINDOWS\system32\AGEIA 2009-05-07 09:27:18 ----D---- C:\Program Files\AGEIA Technologies 2009-05-07 09:27:01 ----D---- C:\Program Files\Common Files\Wise Installation Wizard 2009-05-06 15:11:02 ----D---- C:\Program Files\OpenAL 2009-05-06 15:11:01 ----A---- C:\WINDOWS\system32\wrap_oal.dll 2009-05-06 15:11:01 ----A---- C:\WINDOWS\system32\OpenAL32.dll 2009-05-05 22:16:26 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\TVU Networks 2009-05-05 18:47:35 ----D---- C:\Program Files\Thoosje Sidebar V2.0 2009-05-05 14:30:26 ----D---- C:\Program Files\EPC Title Bar Changer 2009-05-03 18:41:17 ----D---- C:\Program Files\Inno Setup 5 2009-05-02 18:18:42 ----D---- C:\Program Files\NAPI-PROJEKT ======List of files/folders modified in the last 1 months====== 2009-05-31 14:03:34 ----RD---- C:\Program Files 2009-05-31 14:03:34 ----D---- C:\WINDOWS\Temp 2009-05-31 13:49:35 ----D---- C:\Program Files\Mozilla Firefox 2009-05-31 12:25:13 ----SHD---- C:\WINDOWS\Installer 2009-05-31 12:24:25 ----HD---- C:\Config.Msi 2009-05-31 11:48:55 ----D---- C:\WINDOWS\system32\drivers 2009-05-31 11:48:52 ----D---- C:\WINDOWS\system32\CatRoot2 2009-05-31 11:48:08 ----D---- C:\WINDOWS\Prefetch 2009-05-31 11:38:08 ----D---- C:\WINDOWS\system32 2009-05-30 22:17:53 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-05-30 12:00:11 ----D---- C:\WINDOWS 2009-05-30 11:58:38 ----HD---- C:\WINDOWS\inf 2009-05-30 10:45:50 ----D---- C:\WINDOWS\system32\DirectX 2009-05-30 10:45:05 ----RSD---- C:\WINDOWS\assembly 2009-05-30 10:27:21 ----A---- C:\WINDOWS\win.ini 2009-05-30 10:23:25 ----D---- C:\WINDOWS\WinSxS 2009-05-30 10:22:45 ----D---- C:\Program Files\Common Files 2009-05-30 10:22:08 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-05-30 10:21:56 ----D---- C:\WINDOWS\system32\CatRoot 2009-05-30 10:21:48 ----HD---- C:\Program Files\InstallShield Installation Information 2009-05-30 10:18:52 ----D---- C:\Program Files\Driver Cleaner 2009-05-30 10:18:13 ----A---- C:\WINDOWS\ntbtlog.txt 2009-05-30 10:15:35 ----A---- C:\WINDOWS\WININIT.INI 2009-05-28 17:56:58 ----D---- C:\WINDOWS\Minidump 2009-05-28 16:16:08 ----RSH---- C:\boot.ini 2009-05-27 15:59:28 ----RSD---- C:\WINDOWS\Fonts 2009-05-25 16:59:52 ----D---- C:\Program Files\DAEMON Tools Toolbar 2009-05-25 16:56:29 ----D---- C:\WINDOWS\Logs 2009-05-25 15:27:31 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\DAEMON Tools 2009-05-25 15:22:55 ----D---- C:\Program Files\7-Zip 2009-05-24 14:30:03 ----D---- C:\Program Files\WinRAR 2009-05-24 11:06:27 ----SD---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Microsoft 2009-05-12 22:22:47 ----D---- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\HP 2009-05-07 10:17:44 ----D---- C:\Program Files\ATITool 2009-05-05 22:09:54 ----D---- C:\WINDOWS\Help ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AmdK8;Sterownik procesora AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520] R1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2006-11-10 24064] R1 easdrv;easdrv; C:\WINDOWS\system32\DRIVERS\easdrv.sys [2008-08-18 53256] R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2008-08-18 34312] R2 eamon;EAMON; C:\WINDOWS\system32\DRIVERS\eamon.sys [2008-08-18 39944] R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-03-13 2870784] R3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2004-10-19 20096] R3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2004-09-21 10804] R3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2004-09-21 11604] R3 hidusb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-18 9600] R3 mouhid;Sterownik myszy HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160] R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-04-14 47360] R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-08-18 5888] R3 SG762_XP;SAGEM 802.11g XG762 1211B Driver; C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys [2007-01-10 450560] R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624] R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600] R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480] R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2004-10-19 61312] R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2004-11-05 82148] R3 VIAudio;Vinyl AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys [2004-09-06 161536] R3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [2007-01-16 17664] S3 a26tdnlp;a26tdnlp; C:\WINDOWS\system32\drivers\a26tdnlp.sys [] S3 alcan5wn;SpeedTouch USB ADSL PPP Networking Driver (NDISWAN); C:\WINDOWS\system32\DRIVERS\alcan5wn.sys [2003-12-08 53600] S3 alcaudsl;SpeedTouch ADSL Modem ATM Transport; C:\WINDOWS\system32\DRIVERS\alcaudsl.sys [2003-12-08 70688] S3 Bridge;Mostek MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2004-08-03 71552] S3 BridgeMP;Miniport mostka MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2004-08-03 71552] S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2004-12-01 22488] S3 BTNetFilter;Bluetooth Network Filter; \??\C:\WINDOWS\system32\drivers\BTNetFilter.sys [] S3 CCDECODE;Dekoder napisów; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024] S3 FETNDIS;Sterownik NT karty VIA PCI 10/100Mb Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165] S3 GMSIPCI;GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS [] S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664] S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496] S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568] S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504] S3 NABTSFEC;Koder-dekoder NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376] S3 NdisIP;Połączenie TV/wideo firmy Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880] S3 nm;Sterownik monitora sieci; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2004-08-03 40320] S3 PCANDIS5;PCANDIS5 Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS [] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360] S3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616] S3 usbprint;Klasa PRINTER USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856] S3 usbscan;Sterownik skanera USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104] S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496] S3 WSTCODEC;Kodery-dekodery teletekstu w standardzie światowym; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328] S3 ZDCndis5;ZDCndis5 Protocol Driver; \??\C:\WINDOWS\system32\ZDCndis5.SYS [] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-03-12 532480] R2 BlueSoleil Hid Service;BlueSoleil Hid Service; C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe [2004-12-13 106496] R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376] R2 ekrn;Eset Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2008-08-18 468224] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-04-12 152984] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912] S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-03-12 593920] S2 NOD32FiXTemDono;Eset Nod32 Boot; C:\WINDOWS\system32\regedt32.exe [2001-10-26 3584] S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240] S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2008-08-18 19200] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-04-19 654848] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] -----------------EOF-----------------

Błąd który mi wyskakuje :
zawies-kompa-i-dziwny-blad-w-podgladzie-zdarzen-vt110217.html

**Posty:** 18165 · przez **wojtas** 31 Maj 2009, 20:08

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z OTListIt2

**Posty:** 1287 · przez **Achitas** 31 Maj 2009, 21:00

Kod: Zaznacz wszystko: [b]SDFix: Version 1.240 [/b] Run by Kaczor Donald on 2009-05-31 at 20:47 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-31 20:51:36 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:2df9c43f "s2"=dword:110480d0 "h0"=dword:00000002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC] "p0"="C:\Program Files\DAEMON Tools Lite\" "h0"=dword:00000001 "hdf12"=hex:8a,02,37,68,60,17,b9,11,1c,b2,f5,14,cd,6b,b8,75,48,b9,79,bf,cf,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001] "a0"=hex:20,01,00,00,c2,39,53,ef,bd,0e,2b,83,de,06,da,68,e2,c5,98,56,74,.. "hdf12"=hex:de,72,5f,81,11,9f,82,5c,19,df,18,99,1a,6f,92,9b,99,2c,db,9d,f6,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0] "hdf12"=hex:14,01,8c,67,9a,df,3f,ea,01,b2,18,ca,35,86,85,a6,36,eb,fd,86,ec,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "h0"=dword:00000000 "khjeh"=hex:2b,99,43,db,f9,cf,fc,60,f8,1a,0e,1a,95,b5,37,77,bf,23,78,dc,83,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC] "p0"="C:\Program Files\DAEMON Tools Lite\" "h0"=dword:00000001 "hdf12"=hex:8a,02,37,68,60,17,b9,11,1c,b2,f5,14,cd,6b,b8,75,48,b9,79,bf,cf,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001] "a0"=hex:20,01,00,00,c2,39,53,ef,bd,0e,2b,83,de,06,da,68,e2,c5,98,56,74,.. "hdf12"=hex:de,72,5f,81,11,9f,82,5c,19,df,18,99,1a,6f,92,9b,99,2c,db,9d,f6,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0] "hdf12"=hex:14,01,8c,67,9a,df,3f,ea,01,b2,18,ca,35,86,85,a6,36,eb,fd,86,ec,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "h0"=dword:00000000 "khjeh"=hex:2b,99,43,db,f9,cf,fc,60,f8,1a,0e,1a,95,b5,37,77,bf,23,78,dc,83,.. scanning hidden registry entries ... [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{0873DF78-C5CA-9F24-A6E5-C4CD16E1699C}] "abeimclambepcdmigcehdlepcijhdgcbdf"=hex:6a,61,69,64,63,6d,62,70,66,66,61,6e,64,6d,6d,6b,64,61,6f,62,00,.. "pagjcpccocockipppmfjbgkippfdacce"=hex:6a,61,69,64,70,6c,6d,6f,6d,65,70,68,66,65,6f,6a,6b,6f,64,69,00,.. scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "E:\\GG\\Gadu-Gadu\\gg.exe"="E:\\GG\\Gadu-Gadu\\gg.exe:*:Disabled:Gadu-Gadu - program g˘wny" "C:\\Program Files\\Java\\jre6\\launch4j-tmp\\JDownloader.exe"="C:\\Program Files\\Java\\jre6\\launch4j-tmp\\JDownloader.exe:*:Disabled:Java(TM) Platform SE binary" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe" "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove" "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote" "C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour" "E:\\Stranglehold\\Binaries\\Retail-Stranglehold.exe"="E:\\Stranglehold\\Binaries\\Retail-Stranglehold.exe:*:Disabled:Stranglehold" "C:\\Nexon\\NEXON_EU_Downloader\\NEXON_EU_Downloader_Engine.exe"="C:\\Nexon\\NEXON_EU_Downloader\\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine.exe" "C:\\Program Files\\Xfire\\Xfire.exe"="C:\\Program Files\\Xfire\\Xfire.exe:*:Disabled:Xfire" "C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:Enabled:BlueSoleil" "E:\\Pro Evolution Soccer 2009\\pes2009.exe"="E:\\Pro Evolution Soccer 2009\\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009" "C:\\Program Files\\SopCast\\SopCast.exe"="C:\\Program Files\\SopCast\\SopCast.exe:*:Disabled:SopCast Main Application" "C:\\Program Files\\SopCast\\adv\\SopAdver.exe"="C:\\Program Files\\SopCast\\adv\\SopAdver.exe:*:Disabled:SopCast Adver" "C:\\Program Files\\TVUPlayer\\TVUPlayer.exe"="C:\\Program Files\\TVUPlayer\\TVUPlayer.exe:*:Disabled:TVUPlayer Component" "D:\\Butterfly Oasis Screensaver\\BearShare.exe"="D:\\Butterfly Oasis Screensaver\\BearShare.exe:*:Disabled:BearShare" "G:\\System\\KillingFloor.exe"="G:\\System\\KillingFloor.exe:*:Enabled:KillingFloor" "C:\\Program Files\\Electronic Arts\\EADM\\Core.exe"="C:\\Program Files\\Electronic Arts\\EADM\\Core.exe:*:Disabled:EA Download Manager" "E:\\Steam\\steamapps\\common\\killingfloor\\System\\KillingFloor.exe"="E:\\Steam\\steamapps\\common\\killingfloor\\System\\KillingFloor.exe:*:Enabled:KillingFloor" "E:\\Frontlines-Fuel of war-\\Binaries\\FFOW.exe"="E:\\Frontlines-Fuel of war-\\Binaries\\FFOW.exe:*:Enabled:Frontlines Game" "E:\\Turok\\Binaries\\TurokGame.exe"="E:\\Turok\\Binaries\\TurokGame.exe:*:Disabled:Turok" "C:\\WINDOWS\\system32\\java.exe"="C:\\WINDOWS\\system32\\java.exe:*:Disabled:Java(TM) Platform SE binary" "E:\\UT3\\Binaries\\UT3.exe"="E:\\UT3\\Binaries\\UT3.exe:*:Disabled:UT3" "E:\\Turning Point Fall of Liberty Multi 5\\Binaries\\LTCG-TPGame.exe"="E:\\Turning Point Fall of Liberty Multi 5\\Binaries\\LTCG-TPGame.exe:*:Disabled:Turning Point: Fall of Liberty" "C:\\Program Files\\Java\\jre6\\bin\\javaw.exe"="C:\\Program Files\\Java\\jre6\\bin\\javaw.exe:*:Disabled:Java(TM) Platform SE binary" "E:\\Pure.Multi-3.Full-Rip\\Pure\\Pure.exe"="E:\\Pure.Multi-3.Full-Rip\\Pure\\Pure.exe:*:Disabled:Pure" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [b]Remaining Files [/b]: [b]Files with Hidden Attributes [/b]: Mon 3 Mar 2008 568 A..H. --- "C:\WINDOWS\nod32fixtemdono.reg" Mon 3 Mar 2008 5,702 A..H. --- "C:\WINDOWS\nod32restoretemdono.reg" Sun 19 Apr 2009 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak" Mon 5 Nov 2007 4,348 A..H. --- "C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Moja muzyka\Kopia zapasowa licencji\drmv1key.bak" Tue 12 Feb 2008 20 A..H. --- "C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Moja muzyka\Kopia zapasowa licencji\drmv1lic.bak" Tue 12 Feb 2008 9,655 A.SH. --- "C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Moja muzyka\Kopia zapasowa licencji\drmv2key.bak" [b]Finished![/b]

Kod: Zaznacz wszystko: OTListIt logfile created on: 2009-05-31 20:57:59 - Run 1 OTListIt2 by OldTimer - Version 2.0.15.8 Folder = E:\download Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,48 Mb Total Physical Memory | 596,39 Mb Available Physical Memory | 58,27% Memory free 2,40 Gb Paging File | 2,05 Gb Available in Paging File | 85,15% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 9,77 Gb Total Space | 2,31 Gb Free Space | 23,62% Space Free | Partition Type: NTFS Drive D: | 32,37 Gb Total Space | 0,19 Gb Free Space | 0,58% Space Free | Partition Type: NTFS Drive E: | 32,38 Gb Total Space | 5,16 Gb Free Space | 15,93% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: GOSIACZK-728A85 Current User Name: Kaczor Donald Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Output = Standard File Age = 30 Days Company Name Whitelist: On [color=orange]========== Processes (SafeList) ==========[/color] PRC - [2008-03-12 23:05:18 | 00,532,480 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\Ati2evxx.exe PRC - [2008-03-12 23:05:18 | 00,532,480 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\Ati2evxx.exe PRC - [2004-08-04 00:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2004-12-13 16:58:02 | 00,106,496 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe PRC - [2006-02-28 12:42:38 | 00,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe PRC - [2008-08-18 13:25:10 | 00,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2009-04-12 14:33:04 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2004-09-30 08:44:26 | 07,957,504 | ---- | M] (VIA Technologies, Inc.) -- C:\Program Files\VIAudioi\SBADeck\ADeck.exe PRC - [2009-04-12 14:33:04 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2006-02-19 02:41:10 | 00,049,152 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe PRC - [2006-10-27 00:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2004-06-16 06:03:04 | 00,081,920 | ---- | M] (InstallShield Software Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe PRC - [2008-08-18 13:23:50 | 01,447,168 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2007-07-17 11:13:56 | 00,049,152 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe PRC - [2004-08-04 00:55:54 | 01,667,584 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2007-09-02 13:58:52 | 00,495,616 | ---- | M] () -- D:\RocketDock\RocketDock.exe PRC - [2009-04-23 15:51:38 | 00,691,656 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe PRC - [2004-12-21 11:39:40 | 01,044,480 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe PRC - [2005-01-28 01:36:00 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe PRC - [2006-02-19 04:21:22 | 00,288,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe PRC - [2007-01-16 13:42:20 | 00,950,272 | ---- | M] ( ) -- C:\Program Files\SAGEM WiFi manager\WLANUTL.exe PRC - [2007-07-17 11:13:34 | 00,049,152 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe PRC - [2009-04-23 05:15:34 | 07,424,000 | ---- | M] (OpenOffice.org) -- E:\Cold Fear\OpenOffice.org 3\program\soffice.exe PRC - [2009-04-23 05:16:44 | 07,418,368 | ---- | M] (OpenOffice.org) -- E:\Cold Fear\OpenOffice.org 3\program\soffice.bin PRC - [2006-02-19 05:24:52 | 00,239,320 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe PRC - [2004-08-04 00:44:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2009-04-12 14:09:51 | 07,172,197 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-05-31 20:42:49 | 00,501,248 | ---- | M] (OldTimer Tools) -- E:\download\OTListIt2.exe [color=orange]========== Win32 Services (SafeList) ==========[/color] SRV - [2005-09-23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2008-03-12 23:05:18 | 00,532,480 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running]) SRV - [2008-03-12 16:14:00 | 00,593,920 | ---- | M] () -- C:\WINDOWS\system32\ati2sgag.exe -- (ATI Smart [Auto | Stopped]) SRV - [2004-12-13 16:58:02 | 00,106,496 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe -- (BlueSoleil Hid Service [Auto | Running]) SRV - [2006-02-28 12:42:38 | 00,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Auto | Running]) SRV - [2005-09-23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-08-18 13:30:58 | 00,019,200 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv [On_Demand | Stopped]) SRV - [2008-08-18 13:25:10 | 00,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn [Auto | Running]) SRV - [2009-04-19 11:50:52 | 00,654,848 | ---- | M] (Macrovision Europe Ltd.) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service [On_Demand | Stopped]) SRV - [2004-08-04 00:44:08 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2009-04-12 14:33:04 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2006-10-27 00:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [On_Demand | Stopped]) SRV - [2001-10-26 21:30:00 | 00,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\regedt32.exe -- (NOD32FiXTemDono [Auto | Stopped]) SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped]) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2006-03-03 21:03:10 | 00,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12 [Unknown | Stopped]) SRV - [2005-01-28 01:36:00 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe -- (UMWdf [Auto | Running]) [color=orange]========== Driver Services (SafeList) ==========[/color] DRV - [2003-12-08 11:53:48 | 00,053,600 | ---- | M] (THOMSON) -- C:\WINDOWS\system32\DRIVERS\alcan5wn.sys -- (alcan5wn [On_Demand | Stopped]) DRV - [2003-12-08 11:53:46 | 00,070,688 | ---- | M] (THOMSON) -- C:\WINDOWS\system32\DRIVERS\alcaudsl.sys -- (alcaudsl [On_Demand | Stopped]) DRV - [2006-07-01 23:32:26 | 00,043,520 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\system32\DRIVERS\AmdK8.sys -- (AmdK8 [System | Running]) DRV - [2008-03-13 00:09:36 | 02,870,784 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running]) DRV - [2006-11-10 15:08:50 | 00,024,064 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\ATITool.sys -- (ATITool [System | Running]) DRV - [2004-10-19 11:39:26 | 00,020,096 | ---- | M] (IVT Corporation) -- C:\WINDOWS\system32\DRIVERS\blueletaudio.sys -- (BlueletAudio [On_Demand | Running]) DRV - [2004-09-21 18:15:34 | 00,010,804 | ---- | M] (IVT Corporation) -- C:\WINDOWS\system32\DRIVERS\btnetdrv.sys -- (BT [On_Demand | Running]) DRV - [2004-12-01 17:55:32 | 00,022,488 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\Drivers\btcusb.sys -- (Btcsrusb [On_Demand | Stopped]) DRV - [2004-09-21 18:18:02 | 00,011,604 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\vbtenum.sys -- (BTHidEnum [On_Demand | Running]) DRV - [2004-10-19 13:40:56 | 00,028,207 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys -- (BTHidMgr [Boot | Running]) DRV - [2004-12-16 16:32:54 | 00,013,304 | ---- | M] () -- C:\WINDOWS\system32\drivers\BTNetFilter.sys -- (BTNetFilter [On_Demand | Stopped]) DRV - [2008-08-18 13:18:26 | 00,039,944 | ---- | M] (ESET) -- C:\WINDOWS\system32\DRIVERS\eamon.sys -- (eamon [Auto | Running]) DRV - [2008-08-18 13:19:26 | 00,053,256 | ---- | M] (ESET) -- C:\WINDOWS\system32\DRIVERS\easdrv.sys -- (easdrv [System | Running]) DRV - [2008-08-18 13:27:42 | 00,034,312 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\epfwtdir.sys -- (epfwtdir [System | Running]) DRV - [2001-08-17 22:13:08 | 00,027,165 | ---- | M] (VIA Technologies, Inc. ) -- C:\WINDOWS\system32\DRIVERS\fetnd5.sys -- (FETNDIS [On_Demand | Stopped]) DRV - [2006-04-12 12:04:39 | 00,049,664 | R--- | M] (HP) -- C:\WINDOWS\system32\DRIVERS\HPZid412.sys -- (HPZid412 [On_Demand | Stopped]) DRV - [2006-04-12 12:04:39 | 00,016,496 | R--- | M] (HP) -- C:\WINDOWS\system32\DRIVERS\HPZipr12.sys -- (HPZipr12 [On_Demand | Stopped]) DRV - [2006-04-12 12:04:39 | 00,021,568 | ---- | M] (HP) -- C:\WINDOWS\system32\DRIVERS\HPZius12.sys -- (HPZius12 [On_Demand | Stopped]) DRV - [2004-08-03 22:59:52 | 00,040,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\NMnt.sys -- (nm [On_Demand | Stopped]) DRV - [2009-04-14 14:25:15 | 00,047,360 | ---- | M] (VSO Software) -- C:\WINDOWS\System32\Drivers\pcouffin.sys -- (pcouffin [On_Demand | Running]) DRV - [2001-08-18 01:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2001-08-18 01:57:36 | 00,005,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\Drivers\RootMdm.sys -- (ROOTMODEM [On_Demand | Running]) DRV - [2009-04-30 09:48:50 | 00,163,644 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [Auto | Running]) DRV - [2007-01-10 10:14:34 | 00,450,560 | ---- | M] (ZyDAS Technology Corporation) -- C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys -- (SG762_XP [On_Demand | Running]) DRV - [2009-05-25 15:22:09 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2004-08-03 23:00:06 | 00,149,376 | ---- | M] (M-Systems) -- C:\WINDOWS\system32\DRIVERS\tffsport.sys -- (tffsport [Boot | Running]) DRV - [2004-10-19 13:37:38 | 00,061,312 | ---- | M] (IVT Corporation) -- C:\WINDOWS\system32\DRIVERS\VComm.sys -- (VComm [On_Demand | Running]) DRV - [2004-11-05 11:39:08 | 00,082,148 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\Drivers\VcommMgr.sys -- (VcommMgr [On_Demand | Running]) DRV - [2004-09-06 10:01:56 | 00,161,536 | R--- | M] (VIA Technologies, Inc.) -- C:\WINDOWS\system32\drivers\vinyl97.sys -- (VIAudio [On_Demand | Running]) DRV - [2007-01-16 13:52:20 | 00,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\Drivers\ZDPSp50.sys -- (ZDPSp50 [On_Demand | Running]) [color=orange]========== Standard Registry (SafeList) ==========[/color] [color=orange]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl IE - URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-04-12 14:33:05 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 1.5\Extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009-05-22 19:02:09 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 1.5\Extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009-05-22 19:02:09 | 00,000,000 | ---D | M] [2009-05-31 16:34:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\mozilla\Firefox\Profiles\ad6f6tf8.misisko\extensions [2009-05-25 15:24:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\mozilla\Firefox\Profiles\ad6f6tf8.misisko\extensions\DTToolbar@toolbarnet.com [2009-05-31 16:34:20 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-04-12 14:09:50 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009-04-12 14:33:15 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} [2009-04-12 14:09:55 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\talkback@mozilla.org [2009-04-12 14:09:49 | 00,060,518 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jar50.dll [2009-04-12 14:09:50 | 00,049,248 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jsd3250.dll [2009-04-12 14:09:49 | 00,165,992 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\xpinstal.dll [2009-04-12 14:09:53 | 00,003,710 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.png [2009-04-12 14:09:53 | 00,000,901 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.src [2009-04-12 14:09:53 | 00,001,076 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google-pl.gif [2009-04-12 14:09:53 | 00,000,786 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google-pl.src [2009-04-12 14:09:53 | 00,000,480 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.png [2009-04-12 14:09:53 | 00,001,117 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.src [2009-04-12 14:09:53 | 00,000,597 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pbi-pl.png [2009-04-12 14:09:53 | 00,001,096 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pbi-pl.src [2009-04-12 14:09:53 | 00,000,316 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.png [2009-04-12 14:09:53 | 00,000,792 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.src [2009-04-12 14:09:53 | 00,000,459 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.png [2009-04-12 14:09:53 | 00,001,093 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.src [2009-04-12 14:09:53 | 00,000,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.png [2009-04-12 14:09:53 | 00,000,974 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.src O1 HOSTS File: (686 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (My Global Search Bar BHO) - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (&Tłumaczenie) - {2F7DB8D7-9BE7-4666-901E-F380555BCAC7} - D:\Russkij Translator\Russkij Translator\InternetTranslatorRusPol.dll (Techland) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (My Global Search Bar) - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKLM..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1 (VIA Technologies, Inc.) O4 - HKLM..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice (ESET) O4 - HKLM..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" (Microsoft Corporation) O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup (InstallShield Software Corporation) O4 - HKLM..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start (InstallShield Software Corporation) O4 - HKLM..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.) O4 - HKCU..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun (DT Soft Ltd) O4 - HKCU..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent File not found O4 - HKCU..\Run: [Gadu-Gadu] "E:\GG\Gadu-Gadu\gg.exe" /tray (Gadu-Gadu S.A.) O4 - HKCU..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation) O4 - HKCU..\Run: [RocketDock] "D:\RocketDock\RocketDock.exe" () O4 - HKCU..\Run: [Steam] "E:\Steam\Steam.exe" -silent File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe (IVT Corporation) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Development Company, L.P.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = C:\Program Files\SAGEM WiFi manager\WLANUTL.exe ( ) O4 - Startup: C:\Documents and Settings\Kaczor Donald\Menu Start\Programy\Autostart\OpenOffice.org 3.1.lnk = E:\Cold Fear\OpenOffice.org 3\program\quickstart.exe () O4 - Startup: C:\Documents and Settings\Kaczor Donald\Menu Start\Programy\Autostart\Thoosje Sidebar .lnk = File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data] O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @D:\Russkij Translator\Russkij Translator\InternetTranslatorRusPol.dll,-103 - {94C70A96-012C-4171-98FC-C1971511F20D} - D:\Russkij Translator\Russkij Translator\InternetTranslatorRusPol.dll (Techland) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12) O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab (Java Plug-in 1.4.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-04-12 13:28:56 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2002-10-26 12:58:24 | 00,000,244 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-05-31 14:59:55 | 00,000,000 | ---D | M] - D:\AutoUpdate -- [ NTFS ] O32 - AutoRun File - [2009-03-13 22:05:43 | 00,000,041 | ---- | M] () - E:\AUTORUN.FCB -- [ NTFS ] O32 - AutoRun File - [2009-04-26 19:22:44 | 00,000,089 | ---- | M] () - E:\AUTORUN.INF -- [ NTFS ] O33 - MountPoints2\{48289fda-2762-11de-8012-806d6172696f}\Shell\AutoRun\command - "" = E:\setupSNK.exe -- [2004-08-04 00:44:30 | 00,028,672 | ---- | M] (Microsoft Corporation) O33 - MountPoints2\{e3fc19a5-2757-11de-94c5-0013d31541c8}\Shell - "" = AutoRun O33 - MountPoints2\{e3fc19a5-2757-11de-94c5-0013d31541c8}\Shell\AutoRun\command - "" = G:\Autorun.exe -- File not found O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\setupSNK.exe -- [2004-08-04 00:44:30 | 00,028,672 | ---- | M] (Microsoft Corporation) O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - * [2009-05-31 20:42:56 | 00,000,000 | ---D | M] [color=orange]========== Files/Folders - Created Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [6 C:\WINDOWS\*.tmp files] [2009-05-31 20:45:23 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2009-05-31 20:41:50 | 00,000,000 | ---D | C] -- C:\SDFix [2009-05-31 15:05:37 | 00,000,002 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\TempWmicBatchFile.bat [2009-05-31 15:05:18 | 00,000,690 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Menu Start\Programy\Autostart\OpenOffice.org 3.1.lnk [2009-05-31 15:04:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\OpenOffice.org [2009-05-31 14:17:38 | 00,259,370 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\okladka-640.jpg [2009-05-31 14:16:14 | 00,726,349 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\FrontlinesFuelOfWar.jpg [2009-05-31 14:03:34 | 00,000,000 | ---D | C] -- C:\Program Files\trend micro [2009-05-31 14:03:33 | 00,000,000 | ---D | C] -- C:\rsit [2009-05-31 11:48:53 | 00,149,376 | ---- | C] (M-Systems) -- C:\WINDOWS\System32\drivers\tffsport.sys [2009-05-30 18:15:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Pulpit\!!! ważne nie kasowac [2009-05-30 16:18:11 | 00,004,096 | ---- | C] () -- C:\WINDOWS\System32\crash [2009-05-30 10:34:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ATI [2009-05-30 10:22:45 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies [2009-05-30 10:22:16 | 00,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe [2009-05-30 10:22:06 | 00,012,477 | R--- | C] () -- C:\WINDOWS\atiogl.xml [2009-05-30 10:22:03 | 00,007,167 | R--- | C] () -- C:\WINDOWS\System32\atifglpf.xml [2009-05-30 10:22:01 | 03,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2009-05-30 10:22:01 | 03,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2009-05-30 10:22:01 | 00,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2009-05-30 10:22:00 | 00,168,883 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2009-05-30 10:21:33 | 00,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2009-05-29 17:59:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Disney Interactive Studios [2009-05-28 21:30:41 | 00,000,034 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\autorun.inf [2009-05-28 19:54:10 | 00,030,855 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\fuel-996.jpg [2009-05-28 19:52:34 | 00,051,257 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\45098_fuel_normal.jpg [2009-05-28 18:27:57 | 00,012,121 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Zasada działania kołowrotu.docx [2009-05-28 16:31:49 | 00,000,453 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\MUCHA_CH.PAS [2009-05-28 16:16:29 | 00,000,000 | ---D | C] -- C:\Program Files\DIFX [2009-05-28 16:16:25 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups [2009-05-28 16:16:11 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE [2009-05-27 17:43:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\2K Sports [2009-05-27 15:33:18 | 00,006,144 | -HS- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\Thumbs.db [2009-05-26 21:43:31 | 00,597,287 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\Texmod.exe [2009-05-26 18:36:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Touchstone [2009-05-26 18:09:26 | 00,000,000 | ---D | C] -- C:\WINDOWS\A5B5A16D277A476B8F621029A2F23072.TMP [2009-05-26 18:08:32 | 00,000,120 | ---- | C] () -- C:\WINDOWS\disney.ini [2009-05-25 16:55:49 | 00,000,000 | ---D | C] -- C:\WINDOWS\AC54E5443E42443CA91DA00A6974C592.TMP [2009-05-25 15:24:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2009-05-25 15:23:45 | 00,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite [2009-05-25 15:22:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\DAEMON Tools Lite [2009-05-25 14:23:27 | 00,000,545 | ---- | C] () -- C:\WINDOWS\UC.PIF [2009-05-25 14:23:27 | 00,000,545 | ---- | C] () -- C:\WINDOWS\RAR.PIF [2009-05-25 14:23:27 | 00,000,545 | ---- | C] () -- C:\WINDOWS\PKZIP.PIF [2009-05-25 14:23:27 | 00,000,545 | ---- | C] () -- C:\WINDOWS\PKUNZIP.PIF [2009-05-25 14:23:27 | 00,000,545 | ---- | C] () -- C:\WINDOWS\NOCLOSE.PIF [2009-05-25 14:23:27 | 00,000,545 | ---- | C] () -- C:\WINDOWS\LHA.PIF [2009-05-25 14:23:27 | 00,000,545 | ---- | C] () -- C:\WINDOWS\ARJ.PIF [2009-05-25 14:23:27 | 00,000,500 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-05-25 14:23:27 | 00,000,000 | ---D | C] -- C:\totalcmd [2009-05-24 20:39:48 | 00,000,000 | ---D | C] -- C:\Program Files\3GP Player [2009-05-24 20:17:48 | 00,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-05-24 20:17:37 | 00,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml [2009-05-24 20:17:36 | 00,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll [2009-05-24 20:17:35 | 00,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-05-24 20:17:35 | 00,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-05-24 20:17:34 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-05-24 20:17:34 | 00,086,016 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dpl100.dll [2009-05-24 20:17:25 | 00,684,032 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx.dll [2009-05-24 20:17:20 | 00,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-05-24 20:17:20 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-05-24 20:17:16 | 00,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [2009-05-24 17:32:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Pulpit\_ISCabVu [2009-05-24 17:27:04 | 00,000,000 | ---D | C] -- C:\Program Files\InstallShield Cabinet File Viewer [2009-05-24 14:30:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Help [2009-05-23 13:18:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\My Games [2009-05-23 13:16:25 | 00,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll [2009-05-23 13:11:09 | 00,000,000 | ---D | C] -- C:\WINDOWS\95FC26FB19FD4A96BBB1B1062E8648F5.TMP [2009-05-22 19:10:19 | 00,129,024 | ---- | C] () -- C:\WINDOWS\System32\AVERM.dll [2009-05-22 19:03:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Media Player Classic [2009-05-22 19:02:06 | 00,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll [2009-05-22 19:02:02 | 00,000,000 | ---D | C] -- C:\Program Files\Real Alternative [2009-05-22 19:02:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Real [2009-05-22 19:02:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real [2009-05-22 15:47:03 | 00,011,973 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\в каждой из них есть свои особенности.docx ** - C:\Documents and Settings\Kaczor Donald\Pulpit\? ?????? ?? ??? ???? ???? ???????????.docx [2009-05-22 11:21:21 | 00,000,000 | ---D | C] -- C:\ProgramData [2009-05-22 11:21:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts [2009-05-21 21:22:10 | 00,000,000 | ---D | C] -- C:\Program Files\Electronic Arts [2009-05-21 20:59:00 | 00,000,717 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\RAF.PAS [2009-05-20 22:08:08 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\~$zamin z metodyki.docx [2009-05-20 16:51:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Electronic Arts [2009-05-20 16:46:12 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft WSE [2009-05-17 13:28:12 | 00,008,372 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\serial2.dat [2009-05-13 21:52:26 | 00,000,000 | ---D | C] -- C:\Program Files\Rapid Express [2009-05-12 22:22:47 | 00,000,221 | ---- | C] () -- C:\WINDOWS\NCLogConfig.ini [2009-05-09 09:00:11 | 00,000,558 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\BearShare.lnk [2009-05-09 09:00:11 | 00,000,000 | ---D | C] -- C:\Program Files\MyGlobalSearch [2009-05-08 17:46:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2009-05-08 14:38:20 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\fizzy [2009-05-08 14:37:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Swords.And.Sandals.3.Solo.Ultratus-WRATH [2009-05-07 20:09:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\Image Zone Express [2009-05-07 20:09:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Moje zeskanowane obrazy [2009-05-07 16:42:31 | 00,015,077 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\64107.jpg [2009-05-07 11:27:38 | 00,000,000 | ---D | C] -- C:\Program Files\Devious Codeworks [2009-05-07 11:19:28 | 00,067,646 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Scorpion.ico [2009-05-07 11:17:35 | 00,000,000 | ---D | C] -- C:\Program Files\Image2Ico [2009-05-07 09:29:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Wolverine [2009-05-07 09:27:19 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\AGEIA [2009-05-07 09:27:18 | 00,000,000 | ---D | C] -- C:\Program Files\AGEIA Technologies [2009-05-07 09:27:01 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2009-05-06 15:12:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\SoccerChamp [2009-05-06 15:11:02 | 00,000,000 | ---D | C] -- C:\Program Files\OpenAL [2009-05-06 15:11:01 | 00,413,696 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll [2009-05-06 15:11:01 | 00,110,592 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll [2009-05-05 22:16:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TVU Networks [2009-05-05 19:14:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Eidos [2009-05-05 19:02:52 | 00,000,744 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Menu Start\Programy\Autostart\Thoosje Sidebar .lnk [2009-05-05 18:47:35 | 00,000,000 | ---D | C] -- C:\Program Files\Thoosje Sidebar V2.0 [2009-05-05 14:30:26 | 00,000,000 | ---D | C] -- C:\Program Files\EPC Title Bar Changer [2009-05-03 20:28:38 | 01,807,461 | ---- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\Festiwal Filmowy w Cannes.pptm [2009-05-03 18:41:17 | 00,000,000 | ---D | C] -- C:\Program Files\Inno Setup 5 [2009-05-03 12:25:13 | 00,000,438 | -H-- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\The Fog.avi.ini [2009-05-02 18:18:42 | 00,000,000 | ---D | C] -- C:\Program Files\NAPI-PROJEKT [2009-05-02 18:02:45 | 00,000,512 | -H-- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\The.Ruins.2008.CAM.XVID-CAMJACKERS.[sharethefiles.com].avi.ini [2009-05-02 12:57:22 | 00,000,474 | -H-- | C] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\Sierociniec.El.Orfanado.DVDRip.2008.XviD.avi.ini [2009-04-25 19:46:34 | 00,013,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\BTNetFilter.sys [2009-04-25 19:46:34 | 00,011,604 | ---- | C] () -- C:\WINDOWS\System32\drivers\vbtenum.sys [2009-04-21 19:06:11 | 00,000,021 | ---- | C] () -- C:\WINDOWS\kit.ini [2009-04-21 15:09:59 | 00,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll [2009-04-14 13:18:55 | 00,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI [2009-04-13 21:17:40 | 00,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll [2009-04-12 19:21:19 | 00,291,840 | ---- | C] () -- C:\WINDOWS\FCVAP64.dll [2009-04-12 19:21:19 | 00,086,016 | ---- | C] () -- C:\WINDOWS\EZFRD64.dll [2009-04-12 14:03:13 | 00,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll [2009-04-12 14:02:30 | 00,041,068 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll [2009-04-12 14:00:45 | 00,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll [2009-04-12 13:53:08 | 00,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2009-04-12 13:46:53 | 00,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-04-12 13:38:45 | 00,036,864 | ---- | C] () -- C:\WINDOWS\System32\UnAudioNT.dll [2008-10-07 09:13:30 | 00,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll [2008-10-07 09:13:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2008-10-07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2008-08-18 13:27:42 | 00,034,312 | ---- | C] () -- C:\WINDOWS\System32\drivers\epfwtdir.sys [2006-11-10 15:08:50 | 00,024,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATITool.sys [2004-11-24 21:25:52 | 00,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [2004-08-04 00:44:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2001-07-22 02:16:20 | 00,000,587 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-22 02:15:52 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini [2001-07-07 03:00:02 | 00,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI [color=orange]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [6 C:\WINDOWS\*.tmp files] [2009-05-31 20:54:49 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-05-31 20:54:45 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\Kaczor Donald\Ustawienia lokalne\desktop.ini [2009-05-31 20:54:44 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-05-31 20:47:48 | 00,000,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS [2009-05-31 17:37:28 | 00,004,096 | ---- | M] () -- C:\WINDOWS\System32\crash [2009-05-31 15:30:56 | 01,622,480 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-05-31 15:05:38 | 00,000,002 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\TempWmicBatchFile.bat [2009-05-31 15:05:18 | 00,000,690 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Menu Start\Programy\Autostart\OpenOffice.org 3.1.lnk [2009-05-31 14:17:41 | 00,259,370 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\okladka-640.jpg [2009-05-31 14:16:18 | 00,726,349 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\FrontlinesFuelOfWar.jpg [2009-05-31 11:20:36 | 01,807,461 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\Festiwal Filmowy w Cannes.pptm [2009-05-30 17:53:07 | 00,011,973 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\в каждой из них есть свои особенности.docx ** - C:\Documents and Settings\Kaczor Donald\Pulpit\? ?????? ?? ??? ???? ???? ???????????.docx [2009-05-30 10:27:21 | 00,000,587 | ---- | M] () -- C:\WINDOWS\win.ini [2009-05-30 10:15:35 | 00,000,010 | ---- | M] () -- C:\WINDOWS\WININIT.INI [2009-05-28 21:30:41 | 00,000,034 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\autorun.inf [2009-05-28 19:54:16 | 00,030,855 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\fuel-996.jpg [2009-05-28 19:52:34 | 00,051,257 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\45098_fuel_normal.jpg [2009-05-28 19:02:35 | 00,012,121 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Zasada działania kołowrotu.docx [2009-05-28 16:16:08 | 00,000,223 | RHS- | M] () -- C:\boot.ini [2009-05-28 12:26:34 | 00,000,453 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\MUCHA_CH.PAS [2009-05-27 20:05:48 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-05-27 15:47:29 | 00,000,120 | ---- | M] () -- C:\WINDOWS\disney.ini [2009-05-27 15:33:18 | 00,006,144 | -HS- | M] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\Thumbs.db [2009-05-25 15:22:09 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-05-25 14:26:13 | 00,000,500 | ---- | M] () -- C:\WINDOWS\wincmd.ini [2009-05-23 13:16:25 | 00,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll [2009-05-21 13:07:40 | 00,000,717 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\RAF.PAS [2009-05-20 22:08:08 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\~$zamin z metodyki.docx [2009-05-17 13:28:12 | 00,008,372 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Dane aplikacji\serial2.dat [2009-05-12 22:22:47 | 00,000,221 | ---- | M] () -- C:\WINDOWS\NCLogConfig.ini [2009-05-09 09:00:11 | 00,000,558 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\BearShare.lnk [2009-05-07 16:42:31 | 00,015,077 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\64107.jpg [2009-05-07 11:20:33 | 00,067,646 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Moje dokumenty\Scorpion.ico [2009-05-06 15:11:02 | 00,413,696 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll [2009-05-06 15:11:01 | 00,110,592 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll [2009-05-05 19:10:09 | 00,000,744 | ---- | M] () -- C:\Documents and Settings\Kaczor Donald\Menu Start\Programy\Autostart\Thoosje Sidebar .lnk [2009-05-03 13:24:28 | 00,000,438 | -H-- | M] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\The Fog.avi.ini [2009-05-02 18:24:08 | 00,000,512 | -H-- | M] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\The.Ruins.2008.CAM.XVID-CAMJACKERS.[sharethefiles.com].avi.ini [2009-05-02 15:08:23 | 00,000,474 | -H-- | M] () -- C:\Documents and Settings\Kaczor Donald\Pulpit\Sierociniec.El.Orfanado.DVDRip.2008.XviD.avi.ini [color=orange]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 145 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:436DEE1E < End of report >

**Posty:** 18165 · przez **wojtas** 31 Maj 2009, 22:26

Uruchom OTListIt2 i w oknie Custom Scans/Fixes wklej :

:OTLI
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O2 - BHO: (My Global Search Bar BHO) - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search)
O3 - HKLM\..\Toolbar: (My Global Search Bar) - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search)
O32 - AutoRun File - [2009-03-13 22:05:43 | 00,000,041 | ---- | M] () - E:\AUTORUN.FCB -- [ NTFS ]
O32 - AutoRun File - [2009-04-26 19:22:44 | 00,000,089 | ---- | M] () - E:\AUTORUN.INF -- [ NTFS ]

:Files
C:\Program Files\MyGlobalSearch
C:\Documents and Settings\Kaczor Donald\Pulpit\autorun.inf

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTListIt2 z opcją Run Scan. Pokazujesz nowy log OTListIt.txt oraz raport z czyszczenia kompa

**Posty:** 1287 · przez **Achitas** 01 Cze 2009, 08:55

Logi po zrobieniu Clean Up

Kod: Zaznacz wszystko: info.txt logfile of random's system information tool 1.06 2009-06-01 09:00:48 ======Uninstall list====== -->MsiExec /X{64F67489-76BB-4CDD-A236-F954BE774B35} -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf 3GP Player 2008-->"C:\Program Files\3GP Player\unins000.exe" 50 FREE MP3s +1 Free Audiobook!-->"C:\Program Files\Winamp\eMusic\Uninst-eMusic-promotion.exe" 7-Zip 4.65-->"C:\Program Files\7-Zip\Uninstall.exe" Adobe After Effects CS3 Presets-->MsiExec.exe /I{193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285} Adobe After Effects CS3-->C:\Program Files\Common Files\Adobe\Installers\5d83aea83f5009a0d267d337e3f55fe\Setup.exe Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95} Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61} Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394} Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23} Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C} Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C} Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E} Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9} Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D} Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD} Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2} Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B} Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245} Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078} Adobe MotionPicture Color Files-->MsiExec.exe /I{6B708481-748A-4EB4-97C1-CD386244FF77} Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C} Adobe Reader 6.0.2 CE-->MsiExec.exe /I{AC76BA86-7AD7-1038-7B44-CEA000000001} Adobe Setup-->MsiExec.exe /I{F1C9C7F7-0D56-40B2-A276-152762D39BCA} Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312} Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8} Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5} Adobe Video Profiles-->MsiExec.exe /I{845A8DB9-8802-4FD3-9FE3-938A6C46A2EC} Adobe XMP DVA Panels CS3-->MsiExec.exe /I{0224CACC-994D-45F8-B973-D65056EA9C2F} Adobe XMP Panels CS3-->MsiExec.exe /I{D5A31AB1-345D-47C7-A87B-036A669F6DF1} ALLPlayer V3.X-->"C:\Program Files\MarBit\ALLPlayer\unins000.exe" Archiwizator WinRAR-->C:\Program Files\WinRAR\uninstall.exe Ashampoo Burning Studio 2009-->"C:\Program Files\Ashampoo\Ashampoo Burning Studio 2009\unins000.exe" ATI AVIVO Codecs-->MsiExec.exe /I{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3} ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0 ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean BearShare-->D:\BUTTER~1\UNWISE.EXE D:\BUTTER~1\INSTALL.LOG BlueSoleil-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B9F499B8-D1F0-42FC-84BE-CC552123CCCB}\Setup.exe" -l0x9 Catalyst Control Center - Branding-->MsiExec.exe /I{6087F45E-358C-4173-8CB1-DE0AE26FFAE1} CONFLICT DENIED OPS-->"E:\CONFLICT DENIED OPS\unins000.exe" Conflict Denied Ops-->hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,58,7b,45,45,34,42,41,34,43,33,2d,36,44,45,34,2d,34,30,34,43,2d,39,42,36,39,2d,41,38,34,37,30,39,42,45,44,37,35,32,7d,00 CWK (Czasowy Wyłącznik Komputera)-->"C:\Program Files\Damian Pasternak\CWK\CWK.exe" /uninstall DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN Driver Cleaner 3-->C:\Program Files\Driver Cleaner\Uninst.exe EPC Title Bar Changer 2.1-->"C:\Program Files\EPC Title Bar Changer\unins000.exe" ESET NOD32 Antivirus-->MsiExec.exe /I{20E26A4C-07BA-4BED-9FB3-145CF0304383} Haali Media Splitter-->"C:\Program Files\Matroska Pack\haali\uninstall.exe" HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall HP Customer cenzura! Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat HP Photosmart Essential-->MsiExec.exe /X{6994491D-D491-48F1-AE1F-E179C1FFFC2F} HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E} HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat Image2Ico-->"C:\Program Files\Image2Ico\unins000.exe" Imagicon-->C:\Program Files\Devious Codeworks\Imagicon\Uninstall.exe Inno Setup wersja 5.2.3-->"C:\Program Files\Inno Setup 5\unins000.exe" Java 2 Runtime Environment, SE v1.4.0_03-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC1E4C93-C1E7-11D6-9D10-00010240CE95}\Setup.exe" Anytext Java(TM) 6 Update 12-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF} K-Lite Codec Pack 4.8.0 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe" livebox tp-->C:\Program Files\InstallShield Installation Information\{FC7DDAAE-7F2B-4270-9BFD-5A130B667E9E}\Setup.exe -runfromtemp -l0x0015 -removeonly Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe Microsoft Office Access MUI (Polish) 2007-->MsiExec.exe /X{90120000-0015-0415-0000-0000000FF1CE} Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE} Microsoft Office Excel MUI (Polish) 2007-->MsiExec.exe /X{90120000-0016-0415-0000-0000000FF1CE} Microsoft Office Groove MUI (Polish) 2007-->MsiExec.exe /X{90120000-00BA-0415-0000-0000000FF1CE} Microsoft Office InfoPath MUI (Polish) 2007-->MsiExec.exe /X{90120000-0044-0415-0000-0000000FF1CE} Microsoft Office OneNote MUI (Polish) 2007-->MsiExec.exe /X{90120000-00A1-0415-0000-0000000FF1CE} Microsoft Office Outlook MUI (Polish) 2007-->MsiExec.exe /X{90120000-001A-0415-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Polish) 2007-->MsiExec.exe /X{90120000-0018-0415-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Polish) 2007-->MsiExec.exe /X{90120000-001F-0415-0000-0000000FF1CE} Microsoft Office Proofing (Polish) 2007-->MsiExec.exe /X{90120000-002C-0415-0000-0000000FF1CE} Microsoft Office Publisher MUI (Polish) 2007-->MsiExec.exe /X{90120000-0019-0415-0000-0000000FF1CE} Microsoft Office Shared MUI (Polish) 2007-->MsiExec.exe /X{90120000-006E-0415-0000-0000000FF1CE} Microsoft Office Word MUI (Polish) 2007-->MsiExec.exe /X{90120000-001B-0415-0000-0000000FF1CE} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13} Mozilla Firefox (1.5)-->C:\Program Files\Mozilla Firefox\uninstall\uninstall.exe /ua "1.5 (pl)" NAPIPROJEKT 1.0.6.2-->"C:\Program Files\NAPI-PROJEKT\unins000.exe" Narzędzie Software Uninstall Utility firmy ATI-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe NOD32 v3.0.642 FiX1.2 by TemDono (31 days remaining forever up -->"C:\Program Files\ESET\ESET NOD32 Antivirus\unins000.exe" NVIDIA PhysX-->MsiExec.exe /X{64F67489-76BB-4CDD-A236-F954BE774B35} OpenAL-->"C:\Program Files\OpenAL\oalinst.exe" /U OpenOffice.org 3.1-->MsiExec.exe /I{9E35B051-C7EE-47CB-BA43-9A7FFD4E61DE} Pakiet sterowników systemu Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_642960B49F5985230DB9B953682A9431120601FA\amdk8.inf PC DUAL SHOCK-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BA12FD6C-169A-11D7-A6A9-00C026281E5B}\setup.exe" -l0x9 Pro Beach Soccer-->E:\Program Files\PROBEA~1\UNWISE.EXE E:\Program Files\PROBEA~1\INSTALL.LOG Quick Menu Builder 1.2-->"C:\Program Files\Mattgo27 Apps\Quick Menu Builder\uninstall.exe" RAD Video Tools-->"C:\Program Files\RADVideo\uninstall.exe" Rapid Express-->"C:\Program Files\Rapid Express\unins000.exe" Real Alternative 1.9.0-->"C:\Program Files\Real Alternative\unins000.exe" RocketDock 1.3.5-->"D:\RocketDock\unins000.exe" Russkij Translator-->D:\Russkij Translator\Russkij Translator\setup.exe -uninstall Sagem Wi-Fi 11g USB adapter (driver)-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2ED60C17-4568-4CD5-830A-03C4688B09A1}\setup.exe" -l0x15 Sagem Wi-Fi 11g USB adapter (utility)-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAFD22B6-A6C7-4134-AF4E-080BCBCD3493}\Setup.exe" -l0x15 Soccer Champ-->"E:\Soccer Champ\unins000.exe" Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3} SubEdit-Player-->"C:\Program Files\SubEdit-Player\unins000.exe" VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B} VIA Audio Driver Setup Program-->RunDll32.exe UnAudioNT.dll,UninstallAudio C:\WINDOWS\IsUninst.exe -y-f"C:\PROGRA~1\VIAudioi\SBASetup\Uninst.isu" Winamp Toolbar-->"C:\Program Files\Winamp Toolbar\uninstall.exe" Winamp-->"C:\Program Files\Winamp\UninstWA.exe" Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe" Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Player 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall XP Codec Pack-->C:\Program Files\XP Codec Pack\Uninstall.exe ======Hosts File====== 127.0.0.1 localhost ======System event log====== Computer Name: GOSIACZK-728A85 Event Code: 7000 Message: Nie można uruchomić usługi Eset Nod32 Boot z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Record Number: 5 Source Name: Service Control Manager Time Written: 20090531205021.000000+120 Event Type: błąd User: Computer Name: GOSIACZK-728A85 Event Code: 7009 Message: Limit czasu (30000 milisekund) podczas oczekiwania na połączenie się z usługą Eset Nod32 Boot. Record Number: 4 Source Name: Service Control Manager Time Written: 20090531205021.000000+120 Event Type: błąd User: Computer Name: GOSIACZK-728A85 Event Code: 108 Message: Usługa Przywracanie systemu wznowiła monitorowanie na skutek zwolnienia miejsca na dysku systemowym. Record Number: 3 Source Name: SRService Time Written: 20090531205021.000000+120 Event Type: informacje User: Computer Name: GOSIACZK-728A85 Event Code: 6005 Message: Uruchomiono usługę Dziennik zdarzeń. Record Number: 2 Source Name: EventLog Time Written: 20090531205012.000000+120 Event Type: informacje User: Computer Name: GOSIACZK-728A85 Event Code: 6009 Message: Microsoft (R) Windows (R) 5.01. 2600 Dodatek Service Pack 2 Uniprocessor Free. Record Number: 1 Source Name: EventLog Time Written: 20090531205012.000000+120 Event Type: informacje User: =====Application event log===== Computer Name: GOSIACZK-728A85 Event Code: 1800 Message: Usługa Centrum zabezpieczeń systemu Windows została uruchomiona. Record Number: 5 Source Name: SecurityCenter Time Written: 20090429204311.000000+120 Event Type: informacje User: Computer Name: GOSIACZK-728A85 Event Code: 1 Message: Record Number: 4 Source Name: Bonjour Service Time Written: 20090429204306.000000+120 Event Type: informacje User: Computer Name: GOSIACZK-728A85 Event Code: 105 Message: The service was started. Record Number: 3 Source Name: ATI Smart Time Written: 20090429204300.000000+120 Event Type: informacje User: Computer Name: GOSIACZK-728A85 Event Code: 101 Message: wuauclt (4044) Aparat bazy danych został zatrzymany. Record Number: 2 Source Name: ESENT Time Written: 20090429163833.000000+120 Event Type: informacje User: Computer Name: GOSIACZK-728A85 Event Code: 103 Message: wuaueng.dll (4044) SUS20ClientDataStore: Aparat bazy danych zatrzymał wystąpienie (0). Record Number: 1 Source Name: ESENT Time Written: 20090429163833.000000+120 Event Type: informacje User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 44 Stepping 2, AuthenticAMD "PROCESSOR_REVISION"=2c02 "NUMBER_OF_PROCESSORS"=1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP -----------------EOF-----------------

log z otlist nie zmieścił się ani w tym temacie ani w nowym więc wrzucam link do pobrania go
http://odsiebie.com/pokaz/3220597---c85c.html

**Posty:** 18165 · przez **wojtas** 01 Cze 2009, 13:00

1.Uruchom OTListIt2 z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. Wykonaj skan Dr. Web CureIt
5. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym (skasuj co znajdzie)

Malwarebytes Anti-Malware

Jeśli masz Adobe Reader to zaaktualizuj go do najnowszej wersji