Rkit/bubnix.s -- infekcja

**Posty:** 6 · przez **michalix** 05 Maj 2010, 22:19

Witam. Dzis znow się wkradł jakiś wirus do kompa

Logi:
OTL: http://wklej.org/id/328854/
Extras: http://wklej.org/id/328856/
Attach: http://wklej.org/id/328858/
DDS: http://wklej.org/id/328859/

OTL: w O1Hosts usunelem chinskie znaczki bo sie ladowaly dlugo ...

Gmer jutro, bo ddzis nie da rady przeskanoawć.

**Posty:** 18165 · przez **wojtas** 05 Maj 2010, 22:57

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
FF - prefs.js..browser.search.defaultenginename: "Winamp Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50-ff-shoutcast-chromesbox-en-us&query="
FF - prefs.js..browser.search.order.1: "Yahoo"
FF - prefs.js..browser.search.order.2: "Yahoo"
@Alternate Data Stream - 487 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF
@Alternate Data Stream - 170 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:8927A071
@Alternate Data Stream - 144 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:436DEE1E
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:671329E4
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:0CE7F3C9
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:888AFB86

:Files
C:\Documents and Settings\x\Ustawienia lokalne\Temp\svchost.exe
C:\WINDOWS\System32\drivers\lbrtfdc.sys
C:\WINDOWS\System32\dllcache\lbrtfdc.sys
C:\WINDOWS\System32\drivers\changer.sys
C:\WINDOWS\System32\dllcache\changer.sys
C:\Documents and Settings\x\Dane aplikacji\qvjsge.dat

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]
[resethosts]
[emptyflash]
[clearallrestorepoints]

Kliknij w Run Fix. I potwierdź reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia komputera + log z Gmera

**Posty:** 6 · przez **michalix** 06 Maj 2010, 18:08

Raport: http://wklej.org/id/329267/
OTL: http://wklej.org/id/329272/
Extras: http://wklej.org/id/329273/

I obiecany GMer:

Kod: Zaznacz wszystko: GMER 1.0.15.15281 - http://www.gmer.net Rootkit scan 2010-05-06 17:46:28 Windows 5.1.2600 Dodatek Service Pack 3 Running: 3dvml3fd.exe; Driver: C:\DOCUME~1\x\USTAWI~1\Temp\uwtyypow.sys ---- System - GMER 1.0.15 ---- SSDT F7AA9696 ZwCreateKey SSDT F7AA968C ZwCreateThread SSDT F7AA969B ZwDeleteKey SSDT F7AA96A5 ZwDeleteValueKey SSDT F7AA96AA ZwLoadKey SSDT F7AA9678 ZwOpenProcess SSDT F7AA967D ZwOpenThread SSDT F7AA96B4 ZwReplaceKey SSDT F7AA96AF ZwRestoreKey SSDT F7AA96A0 ZwSetValueKey SSDT F7AA9687 ZwTerminateProcess ---- Kernel code sections - GMER 1.0.15 ---- ? C:\WINDOWS\system32\drivers\mtjgbux.sys Urządzenie podłączone do komputera nie działa. PAGE Ntfs.sys F710CE55 4 Bytes CALL 8A24A111 .text C:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xF5C47000, 0x1C5D58, 0xE8000020] init C:\WINDOWS\system32\drivers\skfilt.sys entry point in "init" section [0xA1AE9430] ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\Mozilla Firefox\firefox.exe[2128] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 004013F0 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) .text C:\Program Files\Winamp\winamp.exe[2216] USER32.dll!SetScrollInfo 7E369056 7 Bytes JMP 0412A68D C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2216] USER32.dll!GetScrollInfo 7E37DFE2 7 Bytes JMP 0412A615 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2216] USER32.dll!ShowScrollBar 7E37F2F2 5 Bytes JMP 0412A711 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2216] USER32.dll!GetScrollPos 7E37F704 5 Bytes JMP 0412A63D C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2216] USER32.dll!SetScrollPos 7E37F750 5 Bytes JMP 0412A6B8 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2216] USER32.dll!GetScrollRange 7E37F787 5 Bytes JMP 0412A662 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2216] USER32.dll!SetScrollRange 7E37F99B 5 Bytes JMP 0412A6E3 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2216] USER32.dll!EnableScrollBar 7E3B8005 7 Bytes JMP 0412A5ED C:\Program Files\Winamp\Plugins\gen_jumpex.dll ---- Devices - GMER 1.0.15 ---- Device \FileSystem\Ntfs \Ntfs 8A37C9A0 ---- Services - GMER 1.0.15 ---- Service (*** hidden *** ) [BOOT] mtjgbux <-- ROOTKIT !!! ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1 Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7A 0x5E 0x2E 0x7A ... Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xBA 0x31 0xB6 0xEC ... Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xE1 0x6B 0xB2 0xEF ... Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x21 0xE6 0xE1 0x81 ... Reg HKLM\SYSTEM\ControlSet002\Services\mtjgbux@Type 1 Reg HKLM\SYSTEM\ControlSet002\Services\mtjgbux@Start 0 Reg HKLM\SYSTEM\ControlSet002\Services\mtjgbux@ErrorControl 0 Reg HKLM\SYSTEM\ControlSet002\Services\mtjgbux@Group Boot Bus Extender Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7A 0x5E 0x2E 0x7A ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xBA 0x31 0xB6 0xEC ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xE1 0x6B 0xB2 0xEF ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x21 0xE6 0xE1 0x81 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\mtjgbux@Type 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\mtjgbux@Start 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\mtjgbux@ErrorControl 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\mtjgbux@Group Boot Bus Extender Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7A 0x5E 0x2E 0x7A ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xBA 0x31 0xB6 0xEC ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xE1 0x6B 0xB2 0xEF ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x21 0xE6 0xE1 0x81 ... ---- EOF - GMER 1.0.15 ----

**Posty:** 18165 · przez **wojtas** 06 Maj 2010, 18:37

mamy rookita...

Pobierz i uruchom narzędzie
The Avenger
Wklej do okienka programu

Drivers to unload:
mtjgbux

Files to delete:
C:\WINDOWS\system32\drivers\mtjgbux.sys
C:\WINDOWS\System32\drivers\lbrtfdc.sys
C:\WINDOWS\System32\dllcache\lbrtfdc.sys
C:\WINDOWS\System32\drivers\changer.sys
C:\WINDOWS\System32\dllcache\changer.sys

Klikasz Execute,

wklejasz na forum raport: C:\avenger.txt + log z OTL + Gmer

**Posty:** 6 · przez **michalix** 06 Maj 2010, 19:51

Avenger:

Kod: Zaznacz wszystko: Logfile of The Avenger Version 2.0, (c) by Swandog46 http://swandog46.geekstogo.com Platform: Windows XP ******************* Script file opened successfully. Script file read successfully. Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: Rootkit scan active. No rootkits found! Driver "mtjgbux" deleted successfully. File "C:\WINDOWS\system32\drivers\mtjgbux.sys" deleted successfully. File "C:\WINDOWS\System32\drivers\lbrtfdc.sys" deleted successfully. File "C:\WINDOWS\System32\dllcache\lbrtfdc.sys" deleted successfully. File "C:\WINDOWS\System32\drivers\changer.sys" deleted successfully. File "C:\WINDOWS\System32\dllcache\changer.sys" deleted successfully. Completed script processing. ******************* Finished! Terminate. Logfile of The Avenger Version 2.0, (c) by Swandog46 http://swandog46.geekstogo.com Platform: Windows XP ******************* Script file opened successfully. Script file read successfully. Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: Rootkit scan active. Hidden driver "apln" found! Could not open driver apln for rootkit scan. Error:c0000034 (STATUS_OBJECT_NAME_NOT_FOUND) --> the object does not exist Rootkit scan completed. Error: registry key "\Registry\Machine\System\CurrentControlSet\Services\mtjgbux" not found! Deletion of driver "mtjgbux" failed! Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND) --> the object does not exist Error: file "C:\WINDOWS\system32\drivers\mtjgbux.sys" not found! Deletion of file "C:\WINDOWS\system32\drivers\mtjgbux.sys" failed! Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND) --> the object does not exist Error: file "C:\WINDOWS\System32\drivers\lbrtfdc.sys" not found! Deletion of file "C:\WINDOWS\System32\drivers\lbrtfdc.sys" failed! Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND) --> the object does not exist Error: file "C:\WINDOWS\System32\dllcache\lbrtfdc.sys" not found! Deletion of file "C:\WINDOWS\System32\dllcache\lbrtfdc.sys" failed! Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND) --> the object does not exist Error: file "C:\WINDOWS\System32\drivers\changer.sys" not found! Deletion of file "C:\WINDOWS\System32\drivers\changer.sys" failed! Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND) --> the object does not exist Error: file "C:\WINDOWS\System32\dllcache\changer.sys" not found! Deletion of file "C:\WINDOWS\System32\dllcache\changer.sys" failed! Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND) --> the object does not exist Completed script processing. ******************* Finished! Terminate.

OTL:

Kod: Zaznacz wszystko: OTL logfile created on: 2010-05-06 19:20:19 - Run 9 OTL by OldTimer - Version 3.2.4.1 Folder = C:\Documents and Settings\x\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 51,00% Memory free 3,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 1,48 Gb Free Space | 7,57% Space Free | Partition Type: NTFS Drive D: | 54,99 Gb Total Space | 42,44 Gb Free Space | 77,17% Space Free | Partition Type: NTFS Drive E: | 3,41 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Drive F: | 465,76 Gb Total Space | 428,44 Gb Free Space | 91,99% Space Free | Partition Type: NTFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MICHALIX Current User Name: MichaliX Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-05-05 21:48:11 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\x\Pulpit\OTL.exe PRC - [2010-04-28 13:34:29 | 001,238,352 | ---- | M] (Valve Corporation) -- F:\Steam\steam.exe PRC - [2010-03-30 11:16:16 | 001,820,040 | ---- | M] (LogMeIn Inc.) -- F:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe PRC - [2010-03-30 11:16:12 | 001,107,336 | ---- | M] (LogMeIn Inc.) -- F:\Program Files\LogMeIn Hamachi\hamachi-2.exe PRC - [2010-03-12 00:14:00 | 011,792,992 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2009-08-31 15:35:42 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2009-06-14 15:50:39 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2009-04-14 14:32:18 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe PRC - [2009-03-12 16:28:53 | 000,603,904 | ---- | M] (TuneUp Software) -- C:\WINDOWS\system32\TUProgSt.exe PRC - [2009-03-05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2008-08-27 19:19:20 | 000,233,588 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe PRC - [2008-04-30 04:27:50 | 000,417,792 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-05-15 11:33:30 | 000,204,800 | ---- | M] (A4Tech Co.,Ltd.) -- C:\Program Files\A4Tech\Mouse\Amoumain.exe PRC - [2007-04-10 14:01:48 | 000,337,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WgaTray.exe PRC - [2006-12-03 01:14:03 | 000,310,784 | ---- | M] (http://autoconnect.prv.pl) -- C:\Program Files\AutoConnect\AutoConnect.exe PRC - [2006-01-17 06:38:10 | 000,135,168 | ---- | M] () -- C:\Program Files\RAM Idle LE\RAM_XP.exe PRC - [2005-05-17 12:48:32 | 000,077,824 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-05-05 21:48:11 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\x\Pulpit\OTL.exe MOD - [2008-04-14 19:16:32 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx MOD - [2007-05-15 11:31:52 | 000,036,864 | ---- | M] (A4Tech Co.,Ltd.) -- C:\WINDOWS\system32\Amhooker.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2010-03-30 11:16:12 | 001,107,336 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- F:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2010-01-05 18:12:22 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\MT6Licensing.exe -- (Creative Media Toolbox 6 Licensing Service) SRV - [2010-01-05 18:02:33 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2009-08-31 15:35:42 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-06-14 15:50:39 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-03-12 16:28:53 | 000,603,904 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\WINDOWS\system32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc) SRV - [2009-03-12 16:28:52 | 000,360,192 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - [2008-12-11 14:31:36 | 000,027,904 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp) SRV - [2008-04-30 04:27:50 | 000,417,792 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2010-02-03 15:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2009-12-12 14:15:57 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009-06-14 15:50:39 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009-04-27 17:34:06 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2009-02-26 00:58:57 | 003,565,568 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2009-02-13 12:35:05 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008-04-13 21:45:12 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2008-02-12 04:50:56 | 001,670,016 | R--- | M] (Creative) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\skfilt.sys -- (skfilt) DRV - [2007-05-14 23:41:46 | 000,014,336 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Amusbprt.sys -- (Amusbprt) DRV - [2007-05-14 23:38:22 | 000,009,216 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Amfilter.sys -- (Amfilter) DRV - [2006-09-24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan) DRV - [2006-07-05 14:46:06 | 000,063,352 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01a.sys -- (sfdrv01a) StarForce Protection Environment Driver (version 1.x.a) DRV - [2006-07-05 13:50:52 | 000,683,791 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\torususb.sys -- (TaurusUsb) DRV - [2006-06-14 16:56:56 | 000,013,680 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x) DRV - [2006-05-12 14:17:10 | 000,030,189 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem) DRV - [2006-02-17 21:34:24 | 000,083,344 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510obex.sys -- (k510obex) DRV - [2006-02-17 21:34:22 | 000,085,408 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510mgmt.sys -- (k510mgmt) Sony Ericsson K510 USB WMC Device Management Drivers (WDM) DRV - [2006-02-17 21:34:17 | 000,094,064 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510mdm.sys -- (k510mdm) DRV - [2006-02-17 21:34:15 | 000,008,336 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510mdfl.sys -- (k510mdfl) DRV - [2006-02-17 21:34:10 | 000,058,288 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510bus.sys -- (k510bus) Sony Ericsson K510 Driver driver (WDM) DRV - [2005-05-18 11:50:30 | 002,319,680 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2005-05-06 10:12:36 | 000,021,632 | ---- | M] (AMD, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\amdtools.sys -- (amdtools) DRV - [2005-03-22 04:03:04 | 000,032,910 | R--- | M] (USB Com port.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser120.sys -- (SER120) DRV - [2005-03-09 15:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2004-09-09 19:15:42 | 000,007,680 | ---- | M] (ABIT Computer Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\Drivers\ABIT-IO.sys -- (ABIT-IO) DRV - [2004-06-02 12:40:46 | 000,079,360 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvatabus.sys -- (nvatabus) DRV - [2004-05-16 16:00:54 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2004-05-16 16:00:52 | 000,033,280 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2004-04-01 17:40:00 | 000,021,760 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nv_agp.sys -- (nv_agp) DRV - [2003-08-12 14:51:00 | 000,060,255 | ---- | M] (STMicroelectronics ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\stmatm.sys -- (Stmatm) DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1123561945-1960408961-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wrzuta.pl/ IE - HKU\S-1-5-21-1123561945-1960408961-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.order.2: "" FF - prefs.js..browser.search.param.yahoo-fr: "megaup" FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "megaup" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "www.google.pl" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.1 FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:3.3.17 FF - prefs.js..extensions.enabledItems: fdm_ffext@freedownloadmanager.org:1.3.4 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {12e4c684-c03e-4e4d-85bc-0c065e7a9489}:5.23.2.10 FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&oe=UTF-8&q=" FF - prefs.js..network.proxy.type: 4 FF - HKLM\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2009-04-14 14:32:28 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-04-03 00:27:01 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-04-02 23:53:33 | 000,000,000 | ---D | M] [2008-09-16 14:51:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Extensions [2010-05-05 21:54:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\qhuy2cwx.michalix\extensions [2010-03-12 21:44:36 | 000,000,000 | ---D | M] (Vista-aero) -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\qhuy2cwx.michalix\extensions\{07b2a769-ed19-4483-87ce-c643914c81bb} [2010-04-30 15:03:16 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\qhuy2cwx.michalix\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-04-24 21:23:13 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\qhuy2cwx.michalix\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2010-04-08 16:32:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\qhuy2cwx.michalix\extensions\firebug@software.joehewitt.com [2010-04-09 13:45:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\qhuy2cwx.michalix\extensions\mozrepl@hyperstruct.net [2010-04-24 21:23:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\qhuy2cwx.michalix\extensions\SQLiteManager@mrinalkant.blogspot.com [2010-03-12 21:44:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\qhuy2cwx.michalix\extensions\{07b2a769-ed19-4483-87ce-c643914c81bb}\chrome\mozapps\extensions [2009-10-30 20:02:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\yaaljlrk.default\extensions [2009-10-09 20:36:03 | 000,000,000 | ---D | M] (Flagfox) -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\yaaljlrk.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2009-06-09 07:58:48 | 000,000,000 | ---D | M] (SHOUTcast Radio Toolbar) -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\yaaljlrk.default\extensions\{12e4c684-c03e-4e4d-85bc-0c065e7a9489} [2009-09-14 20:47:02 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\yaaljlrk.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-05-05 21:54:38 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010-02-01 18:40:00 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-02-01 18:40:00 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-02-01 18:40:00 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-02-01 18:40:01 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-02-01 18:40:01 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-02-01 18:40:01 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-05-06 17:48:58 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll () O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O4 - HKLM..\Run: [AdslTaskBar] C:\WINDOWS\System32\stmctrl.dll (STMicroelectronics ) O4 - HKLM..\Run: [AtiPTA] C:\WINDOWS\System32\atiptaxx.exe (ATI Technologies, Inc.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] F:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [RAM Idle Professional] C:\Program Files\RAM Idle LE\RAM_XP.exe () O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe (Creative Technology Ltd) O4 - HKLM..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co.,Ltd.) O4 - HKU\S-1-5-21-1123561945-1960408961-839522115-1003..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe (http://autoconnect.prv.pl) O4 - HKU\S-1-5-21-1123561945-1960408961-839522115-1003..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-1123561945-1960408961-839522115-1003..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O4 - Startup: C:\Documents and Settings\x\Menu Start\Programy\Autostart\Steam.lnk = F:\Steam\steam.exe (Valve Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1123561945-1960408961-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Pobierz plik wideo we Free Download Manager - C:\Program Files\Free Download Manager\dlfvideo.htm () O8 - Extra context menu item: Pobierz w Free Download Manager - C:\Program Files\Free Download Manager\dllink.htm () O8 - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - C:\Program Files\Free Download Manager\dlall.htm () O8 - Extra context menu item: Pobierz zaznaczone w Free Download Manager - C:\Program Files\Free Download Manager\dlselected.htm () O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1208531046183 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {AC120B1D-9411-4111-AF52-118052D85D45} http://cached.gamedesire.com/g_bin/pl/darts_2_0_0_42.cab (GameDesire Darts Games) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\atiextevent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-05-23 13:31:25 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2007-11-23 18:11:14 | 000,000,000 | R--D | M] - E:\AutoRun -- [ CDFS ] O32 - AutoRun File - [2006-09-07 07:19:37 | 000,741,376 | R--- | M] (Electronic Arts Inc.) - E:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2006-08-24 01:58:17 | 000,593,920 | R--- | M] (Electronic Arts Inc.) - E:\AutoRunGUI.dll -- [ CDFS ] O32 - AutoRun File - [2006-09-07 07:33:15 | 000,000,136 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] File not found -- C:\Documents and Settings\x\Pulpit\Britney Spears - Womanizer [2010-05-06 18:31:13 | 002,228,534 | ---- | C] ( ) -- C:\Documents and Settings\x\Pulpit\audacity-win-1.2.6.exe [2010-05-05 21:47:51 | 000,570,880 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\x\Pulpit\OTL.exe [2010-05-05 21:13:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\x\Pulpit\Ania [2010-05-02 21:39:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\x\Dane aplikacji\streamripper [2010-05-02 21:39:04 | 000,000,000 | ---D | C] -- C:\Program Files\Streamripper [2010-04-30 23:00:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\x\Pulpit\xD [2010-04-27 12:48:23 | 000,000,000 | ---D | C] -- C:\Program Files\VirtualDJ [2010-04-22 16:55:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Unity [2010-04-21 22:30:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\x\Pulpit\xDe [2010-04-17 18:39:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\x\Pulpit\Stronka [2010-04-09 13:28:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\x\Pulpit\AutoIT Skrypty [2010-04-09 13:19:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\x\Pulpit\u ciocciiccic [2010-04-08 12:29:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi [2010-04-08 12:29:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi [2010-04-07 18:40:24 | 000,000,000 | ---D | C] -- C:\Avenger [2010-04-06 22:04:40 | 000,000,000 | ---D | C] -- C:\_OTL [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] File not found -- C:\Documents and Settings\x\Pulpit\Britney Spears - Womanizer [2010-05-06 19:19:09 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-05-06 19:18:22 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-05-06 19:18:21 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-05-06 19:16:26 | 017,039,360 | ---- | M] () -- C:\Documents and Settings\x\ntuser.dat [2010-05-06 19:16:26 | 000,000,292 | -HS- | M] () -- C:\Documents and Settings\x\ntuser.ini [2010-05-06 18:52:47 | 000,724,952 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\avenger.zip [2010-05-06 18:35:59 | 000,000,630 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\Audacity.lnk [2010-05-06 18:32:46 | 002,228,534 | ---- | M] ( ) -- C:\Documents and Settings\x\Pulpit\audacity-win-1.2.6.exe [2010-05-06 17:48:58 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts [2010-05-06 17:48:46 | 001,116,474 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-05-06 17:48:46 | 000,500,730 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2010-05-06 17:48:46 | 000,441,672 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010-05-06 17:48:46 | 000,089,536 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2010-05-06 17:48:46 | 000,071,558 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010-05-06 15:47:28 | 000,293,376 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\3dvml3fd.exe [2010-05-05 21:54:59 | 000,525,824 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\dds.scr [2010-05-05 21:48:11 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\x\Pulpit\OTL.exe [2010-05-05 15:34:27 | 001,698,902 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\[cut]Lanfranchi & Marchesini - Boys & Girls (The Real Booty Babes Remix)..mp3 [2010-05-05 14:24:25 | 001,937,240 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\Remix.mp3 [2010-05-04 18:44:46 | 000,000,000 | -H-- | M] () -- C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-05-04 18:04:31 | 090,007,114 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\Mack mit Keep the HandsUp! (HandsUp).mp3 [2010-04-29 17:13:05 | 001,588,224 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\SteamInstall.msi [2010-04-27 18:27:00 | 001,106,439 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\MOV00002.3gp [2010-04-27 18:03:14 | 000,225,999 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\MOV00003.3gp [2010-04-27 17:57:52 | 000,386,074 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\MOV00001.3gp [2010-04-27 12:48:23 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\Virtual DJ.lnk [2010-04-22 14:39:37 | 000,008,571 | ---- | M] () -- C:\Documents and Settings\x\.recently-used.xbel [2010-04-21 13:41:38 | 000,000,794 | ---- | M] () -- C:\Documents and Settings\x\SciTE.session [2010-04-20 20:19:35 | 000,035,483 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\Kontakty_955181.xml [2010-04-20 16:28:23 | 000,002,451 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\Takeagift.au3 [2010-04-20 16:16:54 | 000,060,416 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCFDRTM.VER [2010-04-14 20:29:05 | 000,000,447 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\Skrót do Metin2_PRIVY.lnk [2010-04-13 14:46:50 | 002,637,174 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\Pazera_Free_Audio_Extractor.zip [2010-04-09 21:38:34 | 000,000,608 | ---- | M] () -- C:\Documents and Settings\x\Pulpit\Metin2 PL.lnk [2010-04-09 13:06:39 | 000,179,712 | ---- | M] () -- C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-04-09 13:06:39 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-04-06 22:05:11 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100407-134341.backup [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-05-06 18:52:27 | 000,724,952 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\avenger.zip [2010-05-06 18:35:59 | 000,000,630 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\Audacity.lnk [2010-05-06 15:47:23 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\3dvml3fd.exe [2010-05-05 21:54:39 | 000,525,824 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\dds.scr [2010-05-05 15:34:24 | 001,698,902 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\[cut]Lanfranchi & Marchesini - Boys & Girls (The Real Booty Babes Remix)..mp3 [2010-05-05 14:11:57 | 001,937,240 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\Remix.mp3 [2010-05-04 16:25:04 | 090,007,114 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\Mack mit Keep the HandsUp! (HandsUp).mp3 [2010-04-29 17:12:01 | 001,588,224 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\SteamInstall.msi [2010-04-29 14:01:24 | 000,225,999 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\MOV00003.3gp [2010-04-29 14:01:22 | 001,106,439 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\MOV00002.3gp [2010-04-29 14:01:21 | 000,386,074 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\MOV00001.3gp [2010-04-27 12:48:23 | 000,000,694 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\Virtual DJ.lnk [2010-04-22 14:39:37 | 000,008,571 | ---- | C] () -- C:\Documents and Settings\x\.recently-used.xbel [2010-04-20 20:19:35 | 000,035,483 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\Kontakty_955181.xml [2010-04-14 20:29:05 | 000,000,447 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\Skrót do Metin2_PRIVY.lnk [2010-04-13 14:45:27 | 002,637,174 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\Pazera_Free_Audio_Extractor.zip [2010-04-12 19:40:23 | 000,002,451 | ---- | C] () -- C:\Documents and Settings\x\Pulpit\Takeagift.au3 [2010-01-07 15:37:45 | 000,688,128 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll [2010-01-07 15:37:45 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll [2010-01-05 15:25:08 | 000,025,199 | R--- | C] () -- C:\WINDOWS\System32\xfisk.ini [2010-01-05 15:25:08 | 000,000,052 | R--- | C] () -- C:\WINDOWS\System32\ctzapxx.ini [2010-01-05 15:24:43 | 000,151,040 | R--- | C] () -- C:\WINDOWS\System32\KSXPPI32.dll [2009-11-08 23:07:00 | 000,000,157 | ---- | C] () -- C:\WINDOWS\SP Shell icons.ini [2009-10-24 12:35:24 | 000,000,020 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2009-08-31 16:58:07 | 000,000,281 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2009-08-31 16:35:53 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.ini [2009-05-06 07:22:02 | 000,000,092 | ---- | C] () -- C:\WINDOWS\mp3wavcon.ini [2009-05-06 07:13:53 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2009-04-17 14:49:10 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-04-08 21:11:44 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-04-08 21:11:44 | 000,383,238 | ---- | C] () -- C:\WINDOWS\System32\libmp3lame-0.dll [2009-04-02 16:41:06 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2009-03-15 19:12:31 | 000,001,729 | ---- | C] () -- C:\WINDOWS\licznik.INI [2009-03-13 19:16:31 | 000,000,024 | ---- | C] () -- C:\WINDOWS\LogonStudio.ini [2009-03-13 19:16:21 | 000,187,392 | ---- | C] () -- C:\WINDOWS\System32\JPGUtils.dll [2008-10-09 16:34:37 | 000,000,693 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini [2008-10-09 16:33:08 | 000,003,338 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2008-10-08 20:01:03 | 000,000,720 | ---- | C] () -- C:\WINDOWS\BALTIE.INI [2008-08-27 22:24:58 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\mscInlern.dll [2008-07-16 19:03:37 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\mschcloxd.dll [2008-05-13 15:09:05 | 000,009,279 | ---- | C] () -- C:\WINDOWS\AmvTransform.ini [2008-05-13 15:09:05 | 000,008,157 | ---- | C] () -- C:\WINDOWS\AmvPlayer.ini [2008-05-13 15:09:05 | 000,000,170 | ---- | C] () -- C:\WINDOWS\settings.ini [2008-04-18 15:44:02 | 000,683,791 | ---- | C] () -- C:\WINDOWS\System32\drivers\torususb.sys [2008-04-18 15:44:02 | 000,000,902 | ---- | C] () -- C:\WINDOWS\System32\setup.ini [2008-04-18 15:44:02 | 000,000,161 | ---- | C] () -- C:\WINDOWS\DSLSetup.ini [2008-03-24 22:22:40 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [2008-03-02 22:23:15 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2007-11-05 17:03:17 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2007-10-31 08:26:53 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\FXStudioDLL.dll [2007-10-31 08:26:52 | 000,235,532 | ---- | C] () -- C:\WINDOWS\System32\loadimage.dll [2007-10-31 08:26:52 | 000,131,072 | ---- | C] () -- C:\WINDOWS\System32\RapBoxDSP.dll [2007-10-31 08:26:52 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\NewWaveAnzeige.dll [2007-10-31 08:26:52 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\eJ_Tool.dll [2007-10-31 08:26:52 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\WndRgn.dll [2007-10-31 08:26:51 | 000,796,672 | ---- | C] () -- C:\WINDOWS\System32\LTRTN13n.DLL [2007-10-31 08:26:51 | 000,360,448 | ---- | C] () -- C:\WINDOWS\System32\pxd32d5.dll [2007-10-31 08:26:51 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\lttls13n.dll [2007-10-31 08:26:51 | 000,029,696 | ---- | C] () -- C:\WINDOWS\System32\pthread.dll [2007-10-31 08:26:50 | 000,708,608 | ---- | C] () -- C:\WINDOWS\System32\ltcry13n.dll [2007-10-31 08:26:49 | 000,338,944 | ---- | C] () -- C:\WINDOWS\System32\lffpx7.dll [2007-10-31 08:26:49 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\lfkodak.dll [2007-10-31 08:26:49 | 000,031,744 | ---- | C] () -- C:\WINDOWS\System32\lfvec13n.dll [2007-10-30 21:01:54 | 000,307,200 | ---- | C] () -- C:\WINDOWS\System32\fxstudio.dll [2007-10-30 21:01:54 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\animation2.dll [2007-10-30 21:00:10 | 000,280,576 | ---- | C] () -- C:\WINDOWS\System32\pxd_kom.dll [2007-10-30 21:00:01 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\fader.dll [2007-10-30 20:59:59 | 000,307,200 | ---- | C] () -- C:\WINDOWS\System32\drumpad.dll [2007-10-30 20:59:53 | 000,075,976 | ---- | C] () -- C:\WINDOWS\System32\Bassdec.dll [2007-10-11 15:34:29 | 000,001,824 | ---- | C] () -- C:\WINDOWS\TSearch.INI [2007-09-26 18:53:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\OpPrintServer.INI [2007-09-26 18:51:35 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\CNMVS6e.DLL [2007-06-22 07:51:04 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2007-06-01 08:10:33 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2007-05-23 13:59:58 | 000,000,155 | ---- | C] () -- C:\WINDOWS\winamp.ini [2007-05-23 13:50:53 | 000,000,164 | R--- | C] () -- C:\WINDOWS\avrack.ini [2007-05-23 13:50:46 | 000,156,672 | R--- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2007-05-23 13:42:34 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-05-23 13:42:33 | 000,000,122 | ---- | C] () -- C:\WINDOWS\mdm.ini [2007-05-23 13:42:28 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NSREX.INI [2007-05-07 22:26:41 | 000,009,839 | ---- | C] () -- C:\WINDOWS\System32\mswhnloxe.dll [2004-09-16 13:26:40 | 000,012,634 | ---- | C] () -- C:\WINDOWS\System32\drivers\ADFUUD.SYS [2004-09-16 13:26:40 | 000,012,634 | ---- | C] () -- C:\WINDOWS\ADFUUD.SYS [1999-01-22 18:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL [1996-04-03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys [color=#E56717]========== LOP Check ==========[/color] [2009-04-22 09:56:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Chat Republic Games [2009-02-27 16:46:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2009-10-17 12:43:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESL Wire [2009-09-05 12:30:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2010-04-02 13:01:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2008-06-08 20:33:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2009-03-17 18:03:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\newsreader_images [2010-01-03 14:43:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2009-06-09 07:58:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SHOUTcast Radio Toolbar [2009-02-07 20:16:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony [2010-05-05 15:34:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2010-02-12 17:11:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TrackMania [2009-03-12 16:11:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2007-06-18 19:39:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems [2009-03-12 16:27:26 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{55A29068-F2CE-456C-9148-C869879E2357} [2008-02-28 21:51:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{EDB36CDF-F92C-4397-8EEF-7716BA7E4655} [2009-06-22 21:39:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\GameTracker [2009-09-02 11:02:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\DAEMON Tools Lite [2009-09-02 11:03:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\DAEMON Tools Pro [2009-12-16 16:17:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\dBpoweramp [2009-12-05 11:57:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Dev-Cpp [2008-07-23 16:45:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Edytor Mapek Margonem [2009-08-31 15:42:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\FarmingSimulator2008 [2010-05-06 19:16:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Free Download Manager [2008-04-18 16:13:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Gadu-Gadu [2009-11-22 20:20:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Gadu-Gadu 10 [2009-02-09 23:09:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\GanymedeNet [2009-03-24 11:11:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\GetRightToGo [2010-04-22 14:39:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\gtk-2.0 [2009-12-04 16:27:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\HateML [2009-12-17 20:02:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\IconChanger [2007-05-23 21:54:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\InterVideo [2008-06-08 20:33:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\ipla [2008-11-04 19:10:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\JLC's Software [2009-06-16 18:47:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Nowe Gadu-Gadu [2009-09-28 14:12:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\OpenFM [2009-12-02 20:15:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Opera [2008-09-24 20:45:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Publish Providers [2009-02-12 16:14:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Sony [2010-05-02 21:39:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\streamripper [2009-12-03 19:01:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Teeworlds [2009-05-11 14:43:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Tibia [2009-03-12 16:00:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\TuneUp Software [2007-06-18 12:57:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\Ulead Systems [2009-10-04 10:24:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\x\Dane aplikacji\WoDBO [color=#E56717]========== Purity Check ==========[/color] < End of report >

A z Gmera chyba nie da rady, bo nic sie nie wyświetla żeby przeskanować ;/

**Posty:** 18165 · przez **wojtas** 06 Maj 2010, 20:02

Wykonaj czynności końcowe :

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację Windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )

Zaktualizuj zabezpieczenia:
>>> Adobe Reader 9.3 (bez Free McAfee® Security Scan Plus)
>>> Internet Explorer 8
>>> Java™ 6 Update 20

Autor postu otrzymał pochwałę