system się nie wyłącza. (log)

[Mika_28]

Witam. Nie radzę sobie z problemem. Komp mi się nie wyłącza., Włączam zamknięcie systemu komputer zamyka parę programów, a potem powraca do normalnej pracy. Dopiero 2 zamknięcie wyłącza komp.
Robiłem skan na wirusy Nodem nic nie wykrył. Może coś w logach będzie widać.

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 11:25:30, on 2007-04-29
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Kalendarz XP\Kalendarz.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Opera\Opera.exe
C:\Documents and Settings\Nitrino\Pulpit\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: IE 4.x-6.x BHO for Download Master - {9961627E-4059-41B4-8E0E-A7D6B3854ADF} - C:\PROGRA~1\DOWNLO~1\dmiehlp.dll
O3 - Toolbar: DM Bar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} - C:\Program Files\Download Master\dmbar.dll
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Çŕęŕ÷ŕňü ÂŃĹ ďđč ďîěîůč Download Master - C:\Program Files\Download Master\dmieall.htm
O8 - Extra context menu item: Çŕęŕ÷ŕňü ďđč ďîěîůč Download Master - C:\Program Files\Download Master\dmie.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra 'Tools' menuitem: &Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe[/quote]

[Lukesh]

Co prawda po to dales loga, ale ze ja sie na tym nie znam - opisze inna metode, a do logow zajrzy ktos inny, bo moze cos rzeczywiscie siedzi. Wydaje mi sie jednak, ze wystarczy powylaczac zbedne programy w autostarcie

Start >> uruchom >> msconfig >> uruchamianie >> zostaw 'zaptaszkowane' tylko te, ktore chcesz, zeby uruchamialy sie z systemem, reszte - wywal.

[prog]

@Lukesh

W autostarcie jest ok, jedynie skype'a i gadulca można wyłączyć

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray

Co do loga - zaraz sprawdzę.

[Mika_28]

Co prawda po to dales loga, ale ze ja sie na tym nie znam - opisze inna metode, a do logow zajrzy ktos inny, bo moze cos rzeczywiscie siedzi. Wydaje mi sie jednak, ze wystarczy powylaczac zbedne programy w autostarcie

Start >> uruchom >> msconfig >> uruchamianie >> zostaw 'zaptaszkowane' tylko te, ktore chcesz, zeby uruchamialy sie z systemem, reszte - wywal.

Oczywiście dziękuje za chęci, ale, po co piszesz, jeśli ci tylko się wydaje?
BTW. Autostart mam skonfigurowany i wszystko, co jest zbyteczne mam wyłączone.

[prog]

Nie pokoi mnie ten Download Master, najlepiej go wywal przez dodaj/usuń programy, a jak nie pójdzie to wywal ręcznie:
C:\Program Files\Download Master
Po tym daj jeszcze log z comboscana i silentrunners.

[Mika_28]

Dowland Master to narzędzie do pobierania plików jest czysty. Używa kilka portów, ale ciągnie jak odkurzacz prędkość podbija dwukrotnie. Wole go zostawić. Niemam obaw co do niego.

Kod: Zaznacz wszystko

"Silent Runners.vbs", revision R50, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"Skype" = ""C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized" ["Skype Technologies S.A."]
"Gadu-Gadu" = ""C:\Program Files\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu S.A."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"ZoneAlarm Client" = ""C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"" ["Zone Labs, LLC"]
"nod32kui" = ""C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE" ["Eset "]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "AcroIEHlprObj Class"
                   \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty string]
{22BF413B-C6D2-4d91-82A9-A0F997BA588C}\(Default) = "Skype add-on (mastermind)"
  -> {HKLM...CLSID} = "Skype add-on (mastermind)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL" ["Skype Technologies S.A."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
  -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
                   \InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
  -> {HKLM...CLSID} = "HyperTerminal Icon Ext"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{D9872D13-7651-4471-9EEE-F0A00218BEBB}" = "Multiscan"
  -> {HKLM...CLSID} = "ZLAVShExt Class"
                   \InProcServer32\(Default) = "C:\Program Files\Zone Labs\ZoneAlarm\zlavscan.dll" ["Zone Labs, LLC"]
"{B089FE88-FB52-11D3-BDF1-0050DA34150D}" = "NOD32 Context Menu Shell Extension"
  -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"
  -> {HKLM...CLSID} = "Rozszerzenie ikon plików programu Outlook"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office\OLKFSTUB.DLL" [MS]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"
  -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
ZLAVShExt\(Default) = "{D9872D13-7651-4471-9EEE-F0A00218BEBB}"
  -> {HKLM...CLSID} = "ZLAVShExt Class"
                   \InProcServer32\(Default) = "C:\Program Files\Zone Labs\ZoneAlarm\zlavscan.dll" ["Zone Labs, LLC"]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"
  -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
ZLAVShExt\(Default) = "{D9872D13-7651-4471-9EEE-F0A00218BEBB}"
  -> {HKLM...CLSID} = "ZLAVShExt Class"
                   \InProcServer32\(Default) = "C:\Program Files\Zone Labs\ZoneAlarm\zlavscan.dll" ["Zone Labs, LLC"]


Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Devices: Allow undock without having to log on}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\WINDOWS\ACD Tapeta.bmp"


Startup items in "Nitrino" & "All Users" startup folders:
---------------------------------------------------------

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
"Kalendarz XP" -> shortcut to: "C:\Program Files\Kalendarz XP\Kalendarz.exe" [null data]
"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l" [MS]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
C:\WINDOWS\system32\imon.dll ["Eset "], 01 - 05, 17
%SystemRoot%\system32\mswsock.dll [MS], 06 - 08, 11 - 16
%SystemRoot%\system32\rsvpsp.dll [MS], 09 - 10


Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{77BF5300-1474-4EC7-9980-D32B190E9B07}\
"ButtonText" = "Skype"
"CLSIDExtension" = "{77BF5300-1474-4EC7-9980-D32B190E9B07}"
  -> {HKLM...CLSID} = "Skype add-on (button)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL" ["Skype Technologies S.A."]

{8DAE90AD-4583-4977-9DD4-4360F7A45C74}\

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

NOD32 Kernel Service, NOD32krn, ""C:\Program Files\Eset\nod32krn.exe"" ["Eset "]
TrueVector Internet Monitor, vsmon, "C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service" ["Zone Labs, LLC"]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
  DLL launch points, use the -supp parameter or answer "No" at the
  first message box and "Yes" at the second message box.
---------- (total run time: 43 seconds, including 3 seconds for message boxes)

Edit... Log z Silent Runners poprawiony.

[code]
ComboScan v20070306.20 run by Nitrino on 2007-04-29 at 23:48:33
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis (run as Nitrino.exe) ---------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 23:48:35, on 2007-04-29
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Opera\Opera.exe
C:\Documents and Settings\Nitrino\Pulpit\comboscan.exe
C:\DOCUME~1\Nitrino\Pulpit\Nitrino.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: (no name) - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


-- Files created between 2007-03-29 and 2007-04-29 -----------------------------

2019-04-09 23:05:58 298104 --a------ C:\WINDOWS\system32\imon.dll
2019-04-09 23:05:58 15424 --a------ C:\WINDOWS\system32\drivers\nod32drv.sys
2019-04-09 23:05:58 512096 --a------ C:\WINDOWS\system32\drivers\amon.sys
2019-04-09 22:51:24 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1>
2007-04-26 20:02:47 464 --a------ C:\WINDOWS\system32\vorbisenc.dll<VORBIS~1.DLL>
2007-04-26 20:02:47 464 --a------ C:\WINDOWS\system32\vorbis.dll
2007-04-26 20:02:47 464 --a------ C:\WINDOWS\system32\OggDS.dll
2007-04-26 20:02:47 464 --a------ C:\WINDOWS\system32\ogg.dll
2007-04-26 20:02:46 464 --a------ C:\WINDOWS\system32\WMV9VCM.dll
2007-04-26 20:02:46 464 --a------ C:\WINDOWS\system32\mplvpx.dll
2007-04-26 20:02:46 464 --a------ C:\WINDOWS\system32\cpuinf32.dll
2007-04-26 20:02:45 464 --a------ C:\WINDOWS\system32\DivX.dll
2007-04-26 20:02:44 464 --a------ C:\WINDOWS\system32\xvidcore.dll
2007-04-26 19:00:39 0 d-------- C:\Program Files\MarBit
2007-04-25 20:29:42 0 d-------- C:\Program Files\ACD Systems<ACDSYS~1>
2007-04-25 20:28:45 0 d-------- C:\Program Files\ACDSee 8 Photo Manager_PL<ACDSEE~1>
2007-04-16 23:15:08 0 d-------- C:\WINDOWS\system32\appmgmt
2007-04-16 19:45:38 0 d-------- C:\WINDOWS\pss
2007-04-15 10:23:55 5632 --a------ C:\WINDOWS\system32\ptpusb.dll
2007-04-15 10:23:54 159232 --a------ C:\WINDOWS\system32\ptpusd.dll
2007-04-15 10:23:53 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-04-15 10:22:55 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-04-14 12:28:50 0 d-------- C:\Program Files\IKEA HomePlanner<IKEAHO~1>
2007-04-14 12:28:33 0 d--h----- C:\WINDOWS\PIF
2007-04-13 22:05:34 0 d-------- C:\Program Files\Tycoon
2007-04-13 22:01:34 0 d-------- C:\Program Files\Cosmopolitan<COSMOP~1>
2007-04-13 21:52:29 0 d-------- C:\Program Files\Creative Zone<CREATI~1>
2007-04-11 12:03:32 12800 --a------ C:\WINDOWS\system32\WING32.DLL
2007-04-11 12:03:30 0 d-------- C:\Program Files\YDP
2007-04-11 12:03:30 0 d-------- C:\Program Files\Common Files\GraphBoard 1.00<GRAPHB~1.00>
2007-04-11 12:03:27 299008 --a------ C:\WINDOWS\uninst.exe
2007-04-10 21:46:59 0 d-------- C:\WINDOWS\Bus Driver<BUSDRI~1>
2007-04-10 11:49:11 0 d-------- C:\Program Files\uTorrent
2007-04-10 09:42:29 0 d-------- C:\Program Files\PITy
2007-04-10 09:25:14 0 d-------- C:\Program Files\AusLogics Disk Defrag<AUSLOG~1>
2007-04-10 08:52:01 0 d-------- C:\Downloads<DOWNLO~1>
2007-04-10 01:06:11 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~2>
2007-04-09 23:56:45 0 d-------- C:\Program Files\CyberLink<CYBERL~1>
2007-04-09 23:56:44 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-04-09 23:53:36 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2007-04-09 23:45:41 0 d-------- C:\WINDOWS\ShellNew
2007-04-09 23:14:08 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1>
2007-04-09 23:14:05 0 d--h----- C:\WINDOWS\$hf_mig$
2007-04-09 22:20:37 0 d-------- C:\WINDOWS\Prefetch
2007-04-09 22:20:30 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-04-09 22:13:33 0 d-------- C:\WINDOWS
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\WinSxS
2007-04-09 22:13:33 0 dr------- C:\WINDOWS\Web
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\twain_32
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\wins
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\wbem
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\usmt
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\spool
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\ShellExt
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\Setup
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\ras
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\oobe
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\npp
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\mui
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\inetsrv
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\IME
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\icsxml
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\ias
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\export
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\drivers
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\drivers\etc
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\drivers\disdn
2007-04-09 22:13:33 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\dhcp
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\config
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\3com_dmi
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\3076
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\2052
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\1054
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\1045
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\1042
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\1041
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\1037
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\1033
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\1031
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\1028
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system32\1025
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\system
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\security
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\Resources<RESOUR~1>
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\repair
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\mui
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\msapps
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\msagent
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\Media
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\java
2007-04-09 22:13:33 0 d--h----- C:\WINDOWS\inf
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\ime
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\Help
2007-04-09 22:13:33 0 dr--s---- C:\WINDOWS\Fonts
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1>
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\Debug
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\Cursors
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1>
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\Config
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\AppPatch
2007-04-09 22:13:33 0 d-------- C:\WINDOWS\addins
2007-04-09 21:55:46 12800 -----n--- C:\WINDOWS\system32\spiisupd.exe
2007-04-09 21:55:46 40832 -----n--- C:\WINDOWS\system32\drivers\irbus.sys
2007-04-09 21:55:46 9728 -----n--- C:\WINDOWS\system32\comsdupd.exe
2007-04-09 21:55:46 32768 -----n--- C:\WINDOWS\system32\asr_pfu.exe
2007-04-09 21:55:41 327040 -----n--- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2007-04-09 21:55:41 34735 -----n--- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2007-04-09 21:55:41 29455 -----n--- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2007-04-09 21:55:41 36463 -----n--- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2007-04-09 21:55:41 21343 -----n--- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2007-04-09 21:55:41 26367 -----n--- C:\WINDOWS\system32\drivers\ati1snxx.sys
2007-04-09 21:55:41 63663 -----n--- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2007-04-09 21:55:41 30671 -----n--- C:\WINDOWS\system32\drivers\ati1raxx.sys
2007-04-09 21:55:41 12047 -----n--- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2007-04-09 21:55:41 11615 -----n--- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2007-04-09 21:55:41 56623 -----n--- C:\WINDOWS\system32\drivers\ati1btxx.sys
2007-04-09 21:55:41 41472 -----n--- C:\WINDOWS\system32\drivers\amdk7.sys
2007-04-09 21:55:41 43008 -----n--- C:\WINDOWS\system32\drivers\amdagp.sys
2007-04-09 21:55:41 42752 -----n--- C:\WINDOWS\system32\drivers\alim1541.sys
2007-04-09 21:55:41 44928 -----n--- C:\WINDOWS\system32\drivers\agpcpq.sys
2007-04-09 21:55:41 42368 -----n--- C:\WINDOWS\system32\drivers\agp440.sys
2007-04-09 21:55:41 3775 -----n--- C:\WINDOWS\system32\drivers\adv11nt5.dll
2007-04-09 21:55:41 3711 -----n--- C:\WINDOWS\system32\drivers\adv09nt5.dll
2007-04-09 21:55:41 3135 -----n--- C:\WINDOWS\system32\drivers\adv08nt5.dll
2007-04-09 21:55:41 3647 -----n--- C:\WINDOWS\system32\drivers\adv07nt5.dll
2007-04-09 21:55:41 3615 -----n--- C:\WINDOWS\system32\drivers\adv05nt5.dll
2007-04-09 21:55:41 3967 -----n--- C:\WINDOWS\system32\drivers\adv02nt5.dll
2007-04-09 21:55:41 4255 -----n--- C:\WINDOWS\system32\drivers\adv01nt5.dll
2007-04-09 21:55:40 17024 -----n--- C:\WINDOWS\system32\drivers\bthenum.sys
2007-04-09 21:55:40 17279 -----n--- C:\WINDOWS\system32\drivers\atv10nt5.dll
2007-04-09 21:55:40 14143 -----n--- C:\WINDOWS\system32\drivers\atv06nt5.dll
2007-04-09 21:55:40 25471 -----n--- C:\WINDOWS\system32\drivers\atv04nt5.dll
2007-04-09 21:55:40 11359 -----n--- C:\WINDOWS\system32\drivers\atv02nt5.dll
2007-04-09 21:55:40 21183 -----n--- C:\WINDOWS\system32\drivers\atv01nt5.dll
2007-04-09 21:55:40 63488 -----n--- C:\WINDOWS\system32\drivers\atinxsxx.sys
2007-04-09 21:55:40 31744 -----n--- C:\WINDOWS\system32\drivers\atinxbxx.sys
2007-04-09 21:55:40 73216 -----n--- C:\WINDOWS\system32\drivers\atintuxx.sys
2007-04-09 21:55:40 13824 -----n--- C:\WINDOWS\system32\drivers\atinttxx.sys
2007-04-09 21:55:40 28672 -----n--- C:\WINDOWS\system32\drivers\atinsnxx.sys
2007-04-09 21:55:40 104960 -----n--- C:\WINDOWS\system32\drivers\atinrvxx.sys
2007-04-09 21:55:40 52224 -----n--- C:\WINDOWS\system32\drivers\atinraxx.sys
2007-04-09 21:55:40 14336 -----n--- C:\WINDOWS\system32\drivers\atinpdxx.sys
2007-04-09 21:55:40 13824 -----n--- C:\WINDOWS\system32\drivers\atinmdxx.sys
2007-04-09 21:55:40 57856 -----n--- C:\WINDOWS\system32\drivers\atinbtxx.sys
2007-04-09 21:55:40 701440 -----n--- C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-04-09 21:55:39 685056 -----n--- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2007-04-09 21:55:39 220032 -----n--- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2007-04-09 21:55:39 15104 -----n--- C:\WINDOWS\system32\drivers\hidir.sys
2007-04-09 21:55:39 25728 -----n--- C:\WINDOWS\system32\drivers\hidbth.sys
2007-04-09 21:55:39 46464 -----n--- C:\WINDOWS\system32\drivers\gagp30kx.sys
2007-04-09 21:55:39 128896 -----n--- C:\WINDOWS\system32\drivers\fltmgr.sys
2007-04-09 21:55:39 15423 -----n--- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2007-04-09 21:55:39 18944 -----n--- C:\WINDOWS\system32\drivers\bthusb.sys
2007-04-09 21:55:39 35456 -----n--- C:\WINDOWS\system32\drivers\bthprint.sys
2007-04-09 21:55:39 275200 -----n--- C:\WINDOWS\system32\drivers\bthport.sys
2007-04-09 21:55:39 100992 -----n--- C:\WINDOWS\system32\drivers\bthpan.sys
2007-04-09 21:55:39 38016 -----n--- C:\WINDOWS\system32\drivers\bthmodem.sys
2007-04-09 21:55:38 1897408 -----n--- C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-04-09 21:55:38 180360 -----n--- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2007-04-09 21:55:38 12672 -----n--- C:\WINDOWS\system32\drivers\mutohpen.sys
2007-04-09 21:55:38 452736 -----n--- C:\WINDOWS\system32\drivers\mtxparhm.sys
2007-04-09 21:55:38 1309184 -----n--- C:\WINDOWS\system32\drivers\mtlstrm.sys
2007-04-09 21:55:38 126686 -----n--- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2007-04-09 21:55:38 15488 -----n--- C:\WINDOWS\system32\drivers\mssmbios.sys
2007-04-09 21:55:38 11868 -----n--- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2007-04-09 21:55:38 29056 -----n--- C:\WINDOWS\system32\drivers\ip6fw.sys
2007-04-09 21:55:38 40320 -----n--- C:\WINDOWS\system32\drivers\intelppm.sys
2007-04-09 21:55:38 262784 -----n--- C:\WINDOWS\system32\drivers\http.sys
2007-04-09 21:55:38 1041536 -----n--- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2007-04-09 21:55:37 11295 -----n--- C:\WINDOWS\system32\drivers\wadv08nt.sys
2007-04-09 21:55:37 11807 -----n--- C:\WINDOWS\system32\drivers\wadv07nt.sys
2007-04-09 21:55:37 13568 -----n--- C:\WINDOWS\system32\drivers\wacompen.sys
2007-04-09 21:55:37 11325 -----n--- C:\WINDOWS\system32\drivers\vchnt5.dll
2007-04-09 21:55:37 78464 -----n--- C:\WINDOWS\system32\drivers\usbvideo.sys
2007-04-09 21:55:37 26624 -----n--- C:\WINDOWS\system32\drivers\usbehci.sys
2007-04-09 21:55:37 12672 -----n--- C:\WINDOWS\system32\drivers\usb8023x.sys
2007-04-09 21:55:37 44672 -----n--- C:\WINDOWS\system32\drivers\uagp35.sys
2007-04-09 21:55:37 12416 -----n--- C:\WINDOWS\system32\drivers\tunmp.sys
2007-04-09 21:55:37 6016 -----n--- C:\WINDOWS\system32\drivers\smbali.sys
2007-04-09 21:55:37 13240 -----n--- C:\WINDOWS\system32\drivers\slwdmsup.sys
2007-04-09 21:55:37 95424 -----n--- C:\WINDOWS\system32\drivers\slnthal.sys
2007-04-09 21:55:37 404990 -----n--- C:\WINDOWS\system32\drivers\slntamr.sys
2007-04-09 21:55:37 129535 -----n--- C:\WINDOWS\system32\drivers\slnt7554.sys
2007-04-09 21:55:37 41088 -----n--- C:\WINDOWS\system32\drivers\sisagp.sys
2007-04-09 21:55:37 3901 -----n--- C:\WINDOWS\system32\drivers\siint5.dll
2007-04-09 21:55:37 10240 -----n--- C:\WINDOWS\system32\drivers\sffp_sd.sys
2007-04-09 21:55:37 11136 -----n--- C:\WINDOWS\system32\drivers\sffdisk.sys
2007-04-09 21:55:37 67584 -----n--- C:\WINDOWS\system32\drivers\sdbus.sys
2007-04-09 21:55:37 166912 -----n--- C:\WINDOWS\system32\drivers\s3gnbm.sys
2007-04-09 21:55:37 30080 -----n--- C:\WINDOWS\system32\drivers\rndismpx.sys
2007-04-09 21:55:37 59648 -----n--- C:\WINDOWS\system32\drivers\rfcomm.sys
2007-04-09 21:55:37 13776 -----n--- C:\WINDOWS\system32\drivers\recagent.sys
2007-04-09 21:55:36 25471 -----n--- C:\WINDOWS\system32\drivers\watv10nt.sys
2007-04-09 21:55:36 22271 -----n--- C:\WINDOWS\system32\drivers\watv06nt.sys
2007-04-09 21:55:36 11935 -----n--- C:\WINDOWS\system32\drivers\wadv11nt.sys
2007-04-09 21:55:36 11871 -----n--- C:\WINDOWS\system32\drivers\wadv09nt.sys
2007-04-09 21:55:36 870784 -----n--- C:\WINDOWS\system32\ati3d1ag.dll
2007-04-09 21:55:36 201728 -----n--- C:\WINDOWS\system32\ati2dvag.dll
2007-04-09 21:55:36 377984 -----n--- C:\WINDOWS\system32\ati2dvaa.dll
2007-04-09 21:55:36 229376 -----n--- C:\WINDOWS\system32\ati2cqag.dll
2007-04-09 21:55:35 13824 -----n--- C:\WINDOWS\system32\cmsetacl.dll
2007-04-09 21:55:35 50688 -----n--- C:\WINDOWS\system32\btpanui.dll
2007-04-09 21:55:35 30208 -----n--- C:\WINDOWS\system32\bthserv.dll
2007-04-09 21:55:35 20992 -----n--- C:\WINDOWS\system32\bthci.dll
2007-04-09 21:55:35 71680 -----n--- C:\WINDOWS\system32\blastcln.exe
2007-04-09 21:55:35 7168 -----n--- C:\WINDOWS\system32\bitsprx3.dll
2007-04-09 21:55:35 8192 -----n--- C:\WINDOWS\system32\bitsprx2.dll
2007-04-09 21:55:35 14336 -----n--- C:\WINDOWS\system32\auditusr.exe
2007-04-09 21:55:35 516768 -----n--- C:\WINDOWS\system32\ativvaxx.dll
2007-04-09 21:55:35 32768 -----n--- C:\WINDOWS\system32\ativtmxx.dll
2007-04-09 21:55:35 1888992 -----n--- C:\WINDOWS\system32\ati3duag.dll
2007-04-09 21:55:34 32285 -----n--- C:\WINDOWS\system32\hsfcisp2.dll
2007-04-09 21:55:34 7168 -----n--- C:\WINDOWS\system32\hccoin.dll
2007-04-09 21:55:34 60416 -----n--- C:\WINDOWS\system32\fwcfg.dll
2007-04-09 21:55:34 193024 -----n--- C:\WINDOWS\system32\fsquirt.exe
2007-04-09 21:55:34 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-04-09 21:55:34 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-04-09 21:55:34 186368 -----n--- C:\WINDOWS\system32\encdec.dll
2007-04-09 21:55:34 20480 -----n--- C:\WINDOWS\system32\encapi.dll
2007-04-09 21:55:34 2113536 -----n--- C:\WINDOWS\system32\dxdiagn.dll
2007-04-09 21:55:34 4096 -----n--- C:\WINDOWS\system32\dsprpres.dll
2007-04-09 21:55:34 1689088 -----n--- C:\WINDOWS\system32\d3d9.dll
2007-04-09 21:55:33 81920 -----n--- C:\WINDOWS\system32\ieencode.dll
2007-04-09 21:55:33 24576 -----n--- C:\WINDOWS\system32\httpapi.dll
2007-04-09 21:55:32 134656 -----n--- C:\WINDOWS\system32\mssap.dll
2007-04-09 21:55:32 52736 -----n--- C:\WINDOWS\system32\mspmsnsv.dll
2007-04-09 21:55:32 539136 -----n--- C:\WINDOWS\system32\msftedit.dll
2007-04-09 21:55:32 118784 -----n--- C:\WINDOWS\system32\msdadiag.dll
2007-04-09 21:55:32 384512 -----n--- C:\WINDOWS\system32\mp4sdmod.dll
2007-04-09 21:55:32 310272 -----n--- C:\WINDOWS\system32\mp43dmod.dll
2007-04-09 21:55:32 86016 -----n--- C:\WINDOWS\system32\mdmxsdk.dll
2007-04-09 21:55:32 7168 -----n--- C:\WINDOWS\system32\kbdukx.dll
2007-04-09 21:55:32 7680 -----n--- C:\WINDOWS\system32\kbdsmsno.dll
2007-04-09 21:55:32 7680 -----n--- C:\WINDOWS\system32\kbdsmsfi.dll
2007-04-09 21:55:32 7168 -----n--- C:\WINDOWS\system32\kbdno1.dll
2007-04-09 21:55:32 6144 -----n--- C:\WINDOWS\system32\kbdmlt48.dll
2007-04-09 21:55:32 6144 -----n--- C:\WINDOWS\system32\kbdmlt47.dll
2007-04-09 21:55:32 5632 -----n--- C:\WINDOWS\system32\kbdmaori.dll
2007-04-09 21:55:32 6656 -----n--- C:\WINDOWS\system32\kbdinmal.dll
2007-04-09 21:55:32 6656 -----n--- C:\WINDOWS\system32\kbdinben.dll
2007-04-09 21:55:32 6144 -----n--- C:\WINDOWS\system32\kbdinbe1.dll
2007-04-09 21:55:32 7168 -----n--- C:\WINDOWS\system32\kbdfi1.dll
2007-04-09 21:55:31 427008 -----n--- C:\WINDOWS\system32\xpob2res.dll
2007-04-09 21:55:31 88064 -----n--- C:\WINDOWS\system32\p2pnetsh.dll
2007-04-09 21:55:31 312320 -----n--- C:\WINDOWS\system32\p2pgraph.dll
2007-04-09 21:55:31 86016 -----n--- C:\WINDOWS\system32\p2pgasvc.dll
2007-04-09 21:55:31 116224 -----n--- C:\WINDOWS\system32\p2p.dll
2007-04-09 21:55:31 4274816 -----n--- C:\WINDOWS\system32\nv4_disp.dll
2007-04-09 21:55:31 1737856 -----n--- C:\WINDOWS\system32\mtxparhd.dll
2007-04-09 21:55:30 8192 -----n--- C:\WINDOWS\system32\smbinst.exe
2007-04-09 21:55:30 73796 -----n--- C:\WINDOWS\system32\slserv.exe
2007-04-09 21:55:30 32866 -----n--- C:\WINDOWS\system32\slrundll.exe
2007-04-09 21:55:30 188508 -----n--- C:\WINDOWS\system32\slgen.dll
2007-04-09 21:55:30 286792 -----n--- C:\WINDOWS\system32\slextspk.dll
2007-04-09 21:55:30 73832 -----n--- C:\WINDOWS\system32\slcoinst.dll
2007-04-09 21:55:30 29184 -----n--- C:\WINDOWS\system32\sdhcinst.dll
2007-04-09 21:55:30 159232 -----n--- C:\WINDOWS\system32\sbeio.dll
2007-04-09 21:55:30 270848 -----n--- C:\WINDOWS\system32\sbe.dll
2007-04-09 21:55:30 397056 -----n--- C:\WINDOWS\system32\s3gnb.dll
2007-04-09 21:55:30 49152 -----n--- C:\WINDOWS\system32\powercfg.exe
2007-04-09 21:55:30 48640 -----n--- C:\WINDOWS\system32\pnrpnsp.dll
2007-04-09 21:55:30 526848 -----n--- C:\WINDOWS\system32\p2psvc.dll
2007-04-09 21:55:29 2953216 -----n--- C:\WINDOWS\system32\xpsp2res.dll
2007-04-09 21:55:29 194560 -----n--- C:\WINDOWS\system32\xpsp1res.dll
2007-04-09 21:55:29 17408 -----n--- C:\WINDOWS\system32\winshfhc.dll
2007-04-09 21:55:29 351232 -----n--- C:\WINDOWS\system32\winhttp.dll
2007-04-09 21:55:29 937984 -----n--- C:\WINDOWS\system32\winbrand.dll
2007-04-09 21:55:29 15872 -----n--- C:\WINDOWS\system32\w3ssl.dll
2007-04-09 21:55:29 44032 -----n--- C:\WINDOWS\system32\twext.dll
2007-04-09 21:55:29 75776 -----n--- C:\WINDOWS\system32\strmfilt.dll
2007-04-09 21:55:28 233472 -----n--- C:\WINDOWS\system32\wmpdxm.dll
2007-04-09 21:55:28 114688 -----n--- C:\WINDOWS\system32\wmpasf.dll
2007-04-09 21:55:28 151552 -----n--- C:\WINDOWS\system32\wmidx.dll
2007-04-09 21:55:28 190976 -----n--- C:\WINDOWS\system32\wmerror.dll
2007-04-09 21:55:27 466200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-04-09 21:55:27 108032 -----n--- C:\WINDOWS\system32\wshbth.dll
2007-04-09 21:55:27 81408 -----n--- C:\WINDOWS\system32\wscsvc.dll
2007-04-09 21:55:27 13824 -----n--- C:\WINDOWS\system32\wscntfy.exe
2007-04-09 21:55:27 1001472 -----n--- C:\WINDOWS\system32\wmvdmoe2.dll
2007-04-09 21:55:27 896512 -----n--- C:\WINDOWS\system32\wmspdmoe.dll
2007-04-09 21:55:27 484864 -----n--- C:\WINDOWS\system32\wmspdmod.dll
2007-04-09 21:55:27 1119744 -----n--- C:\WINDOWS\system32\wmsdmoe2.dll
2007-04-09 21:55:26 50176 -----n--- C:\WINDOWS\system32\xmlprovi.dll
2007-04-09 21:55:26 129536 -----n--- C:\WINDOWS\system32\xmlprov.dll
2007-04-09 21:55:26 173536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-04-09 21:55:26 41240 --a------ C:\WINDOWS\system32\wups.dll
2007-04-09 21:55:26 128280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-04-09 21:55:26 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-04-09 21:55:26 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-04-09 21:55:26 32866 -----n--- C:\WINDOWS\slrundll.exe
2007-04-09 21:55:23 0 d-------- C:\WINDOWS\peernet
2007-04-09 21:55:22 0 d-------- C:\WINDOWS\provisioning<PROVIS~1>
2007-04-09 21:52:57 0 d-------- C:\WINDOWS\ServicePackFiles<SERVIC~1>
2007-04-09 21:48:35 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-04-09 21:46:02 0 d-------- C:\WINDOWS\EHome
2007-04-09 21:39:29 0 d-------- C:\WINDOWS\Profiles
2007-04-09 21:39:27 0 d-------- C:\WINDOWS\system32\Adobe
2007-04-09 21:39:27 0 d-------- C:\Program Files\Common Files\Adobe
2007-04-09 21:37:22 36224 --a------ C:\WINDOWS\system32\drivers\isapnp.sys
2007-04-09 21:37:21 0 d-------- C:\WINDOWS\system32\ReinstallBackups<REINST~1>
2007-04-09 21:37:05 3279 --a------ C:\WINDOWS\system32\drivers\VIAPFD.SYS
2007-04-09 21:37:03 306688 --a------ C:\WINDOWS\IsUninst.exe
2007-04-09 21:30:21 59264 -ra------ C:\WINDOWS\system32\drivers\viaudio.sys
2007-04-09 21:30:20 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-04-09 21:30:20 48640 --a------ C:\WINDOWS\system32\drivers\stream.sys
2007-04-09 21:30:20 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-04-09 21:30:19 140928 --a------ C:\WINDOWS\system32\drivers\ks.sys
2007-04-09 21:30:19 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-04-09 21:30:11 208947 --a------ C:\WINDOWS\system32\UnAudioNT.dll<UNAUDI~1.DLL>
2007-04-09 21:30:11 0 d-------- C:\Program Files\VIA Technologies, INC<VIATEC~1>
2007-04-09 21:30:05 307200 --a------ C:\WINDOWS\IsUn0415.exe
2007-04-09 21:20:47 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-04-09 21:20:46 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-04-09 21:20:45 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-04-09 21:20:43 4992 --a------ C:\WINDOWS\system32\drivers\mspqm.sys
2007-04-09 21:20:42 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-04-09 21:20:41 52864 --a------ C:\WINDOWS\system32\drivers\dmusic.sys
2007-04-09 21:20:39 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-04-09 21:20:38 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-04-09 21:20:37 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-04-09 21:20:36 7552 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys
2007-04-09 21:20:34 5376 --a------ C:\WINDOWS\system32\drivers\mspclock.sys
2007-04-09 21:20:30 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-04-09 21:20:13 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-04-09 21:20:05 1738496 --a------ C:\WINDOWS\system32\nv4.dll
2007-04-09 21:20:05 731648 --a------ C:\WINDOWS\system32\drivers\nv4.sys
2007-04-09 21:19:54 42240 --a------ C:\WINDOWS\system32\drivers\viaagp.sys
2007-04-09 21:19:46 10624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2007-04-09 21:19:39 2944 --a------ C:\WINDOWS\system32\drivers\msmpu401.sys
2007-04-09 21:19:33 20992 --a------ C:\WINDOWS\system32\drivers\rtl8139.sys
2007-04-09 21:19:28 77312 --a------ C:\WINDOWS\system32\usbui.dll
2007-04-09 21:18:26 0 d-------- C:\Program Files\Common Files\ODBC
2007-04-09 21:18:24 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2007-04-09 21:18:23 0 dr------- C:\Program Files<PROGRA~1>
2007-04-09 21:18:21 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-04-09 21:18:21 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-04-09 21:18:21 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-04-09 21:18:19 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-04-09 21:18:19 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-04-09 21:18:18 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-04-09 21:18:18 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-04-09 21:18:18 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-04-09 21:18:18 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-04-09 21:18:18 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-04-09 21:18:18 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-04-09 21:18:18 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-04-09 21:18:17 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-04-09 21:18:17 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-04-09 21:18:16 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-04-09 21:18:16 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-04-09 21:18:16 6144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-04-09 21:18:14 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2007-04-09 21:18:14 6656 --a------ C:\WINDOWS\system32\kbdsl.dll
2007-04-09 21:18:14 5632 --a------ C:\WINDOWS\system32\kbdro.dll
2007-04-09 21:18:14 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll
2007-04-09 21:18:14 6656 --a------ C:\WINDOWS\system32\kbdhu.dll
2007-04-09 21:18:14 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll
2007-04-09 21:18:14 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll
2007-04-09 21:18:14 7168 --a------ C:\WINDOWS\system32\kbdcz.dll
2007-04-09 21:18:14 6656 --a------ C:\WINDOWS\system32\kbdcr.dll
2007-04-09 21:18:14 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL
2007-04-09 21:18:13 6656 --a------ C:\WINDOWS\system32\kbdycl.dll
2007-04-09 21:18:13 13312 --a------ C:\WINDOWS\system32\irclass.dll
2007-04-09 21:18:13 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-04-09 21:18:12 24661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-04-09 21:18:12 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-04-09 21:18:12 85532 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-04-09 21:18:12 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-04-09 21:18:12 8704 --a------ C:\WINDOWS\system32\batt.dll
2007-04-09 21:18:12 9168 --a------ C:\WINDOWS\system\VER.DLL
2007-04-09 21:18:11 19200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-04-09 21:18:11 5120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-04-09 21:18:11 24064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-04-09 21:18:11 83456 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-04-09 21:18:11 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-04-09 21:18:11 69552 --a------ C:\WINDOWS\system\mmsystem.dll
2007-04-09 21:18:11 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-04-09 21:18:11 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-04-09 21:18:10 15360 --a------ C:\WINDOWS\TASKMAN.EXE
2007-04-09 21:18:10 75776 --a------ C:\WINDOWS\system32\storprop.dll
2007-04-09 21:18:10 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-04-09 21:18:10 70096 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-04-09 21:18:10 70144 --a------ C:\WINDOWS\notepad.exe
2007-04-09 21:17:52 0 d-------- C:\WINDOWS\system32\CatRoot2
2007-04-09 21:17:52 0 d-------- C:\WINDOWS\system32\CatRoot
2007-04-09 21:17:33 0 d-------- C:\Documents and Settings<DOCUME~1>
2007-04-09 21:00:36 0 d-------- C:\Program Files\Common Files\Skype
2007-04-09 21:00:12 0 d-------- C:\Program Files\Skype
2007-04-09 20:58:15 4212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2007-04-09 20:58:06 75512 --a------ C:\WINDOWS\zllsputility.exe<ZLLSPU~1.EXE>
2007-04-09 20:58:05 11264 --a------ C:\WINDOWS\system32\SpOrder.dll
2007-04-09 20:57:57 1087216 --a------ C:\WINDOWS\system32\zpeng24.dll
2007-04-09 20:57:57 0 d-------- C:\WINDOWS\system32\ZoneLabs
2007-04-09 20:57:26 0 d-------- C:\WINDOWS\Internet Logs<INTERN~1>
2007-04-09 20:55:39 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1>
2007-04-09 20:54:26 0 d-------- C:\Program Files\Download Master<DOWNLO~1>
2007-04-09 20:44:08 0 d-------- C:\Program Files\VideoLAN
2007-04-09 20:43:16 0 d-------- C:\Program Files\Lavalys
2007-04-09 20:42:37 0 d-------- C:\Program Files\Common Files\ACD Systems<ACDSYS~1>
2007-04-09 20:41:14 0 d-------- C:\WINDOWS\Downloaded Installations<DOWNLO~2>
2007-04-09 20:40:04 0 d-------- C:\Program Files\Kalendarz XP<KALEND~1>
2007-04-09 20:39:13 0 --a------ C:\WINDOWS\nsreg.dat
2007-04-09 20:39:02 4100 --a------ C:\WINDOWS\mozver.dat
2007-04-09 20:39:01 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~1>
2007-04-09 20:36:08 0 d-------- C:\Program Files\Opera
2007-04-09 20:34:51 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1>
2007-04-09 20:32:41 0 d--hs---- C:\System Volume Information<SYSTEM~1>
2007-04-09 20:28:40 0 d-------- C:\WINDOWS\system32\xircom
2007-04-09 20:28:39 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1>
2007-04-09 20:28:14 0 -rahs---- C:\MSDOS.SYS
2007-04-09 20:28:14 0 -rahs---- C:\IO.SYS
2007-04-09 20:28:14 0 --a------ C:\CONFIG.SYS
2007-04-09 20:28:14 0 --a------ C:\AUTOEXEC.BAT
2007-04-09 20:28:01 112128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-04-09 20:27:02 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1>
2007-04-09 20:27:02 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1>
2007-04-09 20:26:37 0 d-------- C:\WINDOWS\srchasst
2007-04-09 20:26:30 0 d-------- C:\WINDOWS\system32\Macromed
2007-04-09 20:26:30 0 d-------- C:\WINDOWS\system32\DirectX
2007-04-09 20:26:20 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-04-09 20:26:20 382464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-04-09 20:26:19 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2007-04-09 20:26:05 45568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-04-09 20:26:05 29696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-04-09 20:26:05 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-04-09 20:26:05 43520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-04-09 20:26:05 11264 --a------ C:\WINDOWS\system32\atrace.dll
2007-04-09 20:25:56 171008 --a------ C:\WINDOWS\system32\srsvc.dll
2007-04-09 20:25:56 240128 --a------ C:\WINDOWS\system32\srrstr.dll
2007-04-09 20:25:56 0 d-------- C:\WINDOWS\system32\Restore
2007-04-09 20:25:55 67584 --a------ C:\WINDOWS\system32\srclient.dll
2007-04-09 20:25:55 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-04-09 20:25:54 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-04-09 20:25:54 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-04-09 20:25:54 69632 --a------ C:\WINDOWS\system32\msconf.dll
2007-04-09 20:25:54 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-04-09 20:25:54 34560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-04-09 20:25:54 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-04-09 20:25:54 81920 --a------ C:\WINDOWS\system32\ils.dll
2007-04-09 20:25:51 105984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-04-09 20:25:51 252928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-04-09 20:25:51 67584 --a------ C:\WINDOWS\system32\acctres.dll
2007-04-09 20:25:51 0 d-------- C:\WINDOWS\PCHEALTH
2007-04-09 20:25:49 49664 --a------ C:\WINDOWS\system32\inetres.dll
2007-04-09 20:25:49 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-04-09 20:25:46 0 d---s---- C:\WINDOWS\Tasks
2007-04-09 20:25:46 192000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-04-09 20:25:46 12288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-04-09 20:25:45 278528 --a------ C:\WINDOWS\system32\mstask.dll
2007-04-09 20:25:45 86016 --a------ C:\WINDOWS\system32\isign32.dll
2007-04-09 20:25:45 278528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-04-09 20:25:45 65536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-04-09 20:25:45 73728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-04-09 20:25:45 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-04-09 20:25:43 0 d-------- C:\Program Files\Common Files\MSSoap
2007-04-09 20:25:04 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2007-04-09 20:24:50 0 d-------- C:\WINDOWS\Registration<REGIST~1>
2007-04-09 20:24:43 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~2>
2007-04-09 20:24:43 0 d-------- C:\Program Files\Usługi online<USUGIO~1>
2007-04-09 20:24:36 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-04-09 20:24:29 5632 --a------ C:\WINDOWS\system32\write.exe
2007-04-09 20:24:29 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2007-04-09 20:24:21 139264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-04-09 20:24:21 132608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-04-09 20:24:21 124928 --a------ C:\WINDOWS\system32\mplay32.exe
2007-04-09 20:24:21 351744 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-04-09 20:24:21 44544 --a------ C:\WINDOWS\system32\hticons.dll
2007-04-09 20:24:21 73216 --a------ C:\WINDOWS\system32\avwav.dll
2007-04-09 20:24:21 16384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-04-09 20:24:21 187904 --a------ C:\WINDOWS\system32\accwiz.exe
2007-04-09 20:24:20 35328 --a------ C:\WINDOWS\system32\winchat.exe
2007-04-09 20:24:20 231424 --a------ C:\WINDOWS\system32\avtapi.dll
2007-04-09 20:24:20 0 d-------- C:\Program Files\Windows NT<WINDOW~1>
2007-04-09 20:24:19 345088 --a------ C:\WINDOWS\system32\mspaint.exe
2007-04-09 20:24:15 605696 --a------ C:\WINDOWS\system32\getuname.dll
2007-04-09 20:24:15 103424 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-04-09 20:24:14 119808 --a------ C:\WINDOWS\system32\winmine.exe
2007-04-09 20:24:14 539136 --a------ C:\WINDOWS\system32\spider.exe
2007-04-09 20:24:14 57344 --a------ C:\WINDOWS\system32\sol.exe
2007-04-09 20:24:14 80896 --a------ C:\WINDOWS\system32\charmap.exe
2007-04-09 20:24:14 115200 --a------ C:\WINDOWS\system32\calc.exe
2007-04-09 20:24:13 6656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-04-09 20:24:13 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-04-09 20:24:13 125208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-04-09 20:24:13 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-04-09 20:24:13 128000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-04-09 20:24:13 55808 --a------ C:\WINDOWS\system32\freecell.exe
2007-04-09 20:24:13 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-04-09 20:24:13 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-04-09 20:24:13 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-04-09 20:24:12 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-04-09 20:24:12 16384 --a------ C:\WINDOWS\system32\tskill.exe
2007-04-09 20:24:12 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-04-09 20:24:12 141824 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-04-09 20:24:12 9728 --a------ C:\WINDOWS\system32\reset.exe
2007-04-09 20:24:12 60928 --a------ C:\WINDOWS\system32\remotepg.dll
2007-04-09 20:24:12 67072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-04-09 20:24:12 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-04-09 20:24:12 147968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-04-09 20:24:12 655360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-04-09 20:24:12 408576 --a------ C:\WINDOWS\system32\mstsc.exe
2007-04-09 20:24:11 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-04-09 20:24:11 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-04-09 20:24:11 15360 --a------ C:\WINDOWS\system32\tscon.exe
2007-04-09 20:24:11 296448 --a------ C:\WINDOWS\system32\termsrv.dll
2007-04-09 20:24:11 15360 --a------ C:\WINDOWS\system32\shadow.exe
2007-04-09 20:24:11 16384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-04-09 20:24:11 33792 --a------ C:\WINDOWS\system32\regini.exe
2007-04-09 20:24:11 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-04-09 20:24:11 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-04-09 20:24:11 62464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-04-09 20:24:11 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-04-09 20:24:11 22528 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-04-09 20:24:11 20992 --a------ C:\WINDOWS\system32\qprocess.exe
2007-04-09 20:24:11 17408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-04-09 20:24:11 22528 --a------ C:\WINDOWS\system32\msg.exe
2007-04-09 20:24:11 15872 --a------ C:\WINDOWS\system32\logoff.exe
2007-04-09 20:24:10 11776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-04-09 20:24:10 91136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-04-09 20:24:10 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-04-09 20:24:10 956416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-04-09 20:24:10 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-04-09 20:24:10 0 d-------- C:\WINDOWS\system32\MsDtc
2007-04-09 20:24:10 11264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-04-09 20:24:10 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-04-09 20:24:10 15872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-04-09 20:24:09 58880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-04-09 20:24:09 6144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-04-09 20:24:08 54272 --a------ C:\WINDOWS\system32\stclient.dll
2007-04-09 20:24:08 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-04-09 20:24:08 4096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-04-09 20:24:08 20480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-04-09 20:24:08 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-04-09 20:24:08 97792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-04-09 20:24:08 25600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-04-09 20:24:08 0 d-------- C:\WINDOWS\system32\Com
2007-04-09 20:24:08 60416 --a------ C:\WINDOWS\system32\colbact.dll
2007-04-09 20:24:08 110080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-04-09 20:24:08 85504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-04-09 20:24:07 540160 --a------ C:\WINDOWS\system32\comuid.dll
2007-04-09 20:24:07 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-04-09 20:24:07 147456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-04-09 20:24:07 498688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-04-09 20:24:07 625152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-04-09 20:24:07 225792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-04-09 20:23:58 56320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-04-09 20:23:57 17920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-04-09 20:23:57 58880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-04-09 20:23:57 187904 --a------ C:\WINDOWS\system32\cmprops.dll
2007-04-09 20:23:54 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-04-09 20:23:54 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys


-- Find3M Report ---------------------------------------------------------------

2019-04-09 22:28:10 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Macromedia<MACROM~1>
2007-04-29 23:29:19 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Skype
2007-04-14 11:40:05 0 d---s---- C:\Documents and Settings\Nitrino\Dane aplikacji\Microsoft<MICROS~1>
2007-04-11 10:39:46 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\dvdcss
2007-04-10 12:02:37 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\uTorrent
2007-04-10 09:01:22 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Download Master<DOWNLO~1>
2007-04-10 06:50:08 355830 --a------ C:\WINDOWS\system32\perfh015.dat
2007-04-10 06:50:08 49712 --a------ C:\WINDOWS\system32\perfc015.dat
2007-04-10 01:07:01 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Mozilla
2007-04-09 23:44:21 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Microsoft Web Folders<MICROS~2>
2007-04-09 21:40:18 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\ACD Systems<ACDSYS~1>
2007-04-09 21:39:27 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\InterTrust<INTERT~1>
2007-04-09 21:39:27 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Adobe
2007-04-09 21:18:02 62 --ahs---- C:\Documents and Settings\Nitrino\Dane aplikacji\desktop.ini
2007-04-09 20:44:31 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\vlc
2007-04-09 20:39:19 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Talkback
2007-04-09 20:39:12 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Thunderbird<THUNDE~1>
2007-04-09 20:36:12 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Opera
2007-04-09 20:34:49 0 d-------- C:\Documents and Settings\Nitrino\Dane aplikacji\Identities<IDENTI~1>
2007-03-17 15:45:36 293376 --a------ C:\WINDOWS\system32\winsrv.dll
2007-03-08 17:38:47 579072 --a------ C:\WINDOWS\system32\user32.dll
2007-03-08 17:38:47 40960 --a------ C:\WINDOWS\system32\mf3216.dll
2007-03-08 17:38:47 281600 --a------ C:\WINDOWS\system32\gdi32.dll
2007-03-08 17:37:33 1843840 --a------ C:\WINDOWS\system32\win32k.sys
2007-02-05 22:19:48 185856 --a------ C:\WINDOWS\system32\upnphost.dll
2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe


-- Registry Dump ---------------------------------------------------------------


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray"

[HKEY

[wojtas]

popraw log z silent runners jest uciety

[Mika_28]

Ok. Już jest całość.

Kod: Zaznacz wszystko

"Silent Runners.vbs", revision R50, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"Skype" = ""C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized" ["Skype Technologies S.A."]
"Gadu-Gadu" = ""C:\Program Files\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu S.A."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"ZoneAlarm Client" = ""C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"" ["Zone Labs, LLC"]
"nod32kui" = ""C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE" ["Eset "]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "AcroIEHlprObj Class"
                   \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty string]
{22BF413B-C6D2-4d91-82A9-A0F997BA588C}\(Default) = "Skype add-on (mastermind)"
  -> {HKLM...CLSID} = "Skype add-on (mastermind)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL" ["Skype Technologies S.A."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
  -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
                   \InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
  -> {HKLM...CLSID} = "HyperTerminal Icon Ext"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{D9872D13-7651-4471-9EEE-F0A00218BEBB}" = "Multiscan"
  -> {HKLM...CLSID} = "ZLAVShExt Class"
                   \InProcServer32\(Default) = "C:\Program Files\Zone Labs\ZoneAlarm\zlavscan.dll" ["Zone Labs, LLC"]
"{B089FE88-FB52-11D3-BDF1-0050DA34150D}" = "NOD32 Context Menu Shell Extension"
  -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"
  -> {HKLM...CLSID} = "Rozszerzenie ikon plików programu Outlook"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office\OLKFSTUB.DLL" [MS]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"
  -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
ZLAVShExt\(Default) = "{D9872D13-7651-4471-9EEE-F0A00218BEBB}"
  -> {HKLM...CLSID} = "ZLAVShExt Class"
                   \InProcServer32\(Default) = "C:\Program Files\Zone Labs\ZoneAlarm\zlavscan.dll" ["Zone Labs, LLC"]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"
  -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
ZLAVShExt\(Default) = "{D9872D13-7651-4471-9EEE-F0A00218BEBB}"
  -> {HKLM...CLSID} = "ZLAVShExt Class"
                   \InProcServer32\(Default) = "C:\Program Files\Zone Labs\ZoneAlarm\zlavscan.dll" ["Zone Labs, LLC"]


Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Devices: Allow undock without having to log on}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\WINDOWS\ACD Tapeta.bmp"


Startup items in "Nitrino" & "All Users" startup folders:
---------------------------------------------------------

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
"Kalendarz XP" -> shortcut to: "C:\Program Files\Kalendarz XP\Kalendarz.exe" [null data]
"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l" [MS]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
C:\WINDOWS\system32\imon.dll ["Eset "], 01 - 05, 17
%SystemRoot%\system32\mswsock.dll [MS], 06 - 08, 11 - 16
%SystemRoot%\system32\rsvpsp.dll [MS], 09 - 10


Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{77BF5300-1474-4EC7-9980-D32B190E9B07}\
"ButtonText" = "Skype"
"CLSIDExtension" = "{77BF5300-1474-4EC7-9980-D32B190E9B07}"
  -> {HKLM...CLSID} = "Skype add-on (button)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL" ["Skype Technologies S.A."]

{8DAE90AD-4583-4977-9DD4-4360F7A45C74}\

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

NOD32 Kernel Service, NOD32krn, ""C:\Program Files\Eset\nod32krn.exe"" ["Eset "]
TrueVector Internet Monitor, vsmon, "C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service" ["Zone Labs, LLC"]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
  DLL launch points, use the -supp parameter or answer "No" at the
  first message box and "Yes" at the second message box.
---------- (total run time: 43 seconds, including 3 seconds for message boxes)


[wojtas]

nie ma nic w logu

[kubaluka]

Witam.Mam podobny problem i tez nie umiem sobie z nim poradzić.System nie wyłącza sie po zainstalowaniu skypa.Proszę o jakieś wskazówki.Co mam zrobić żeby sprawdzić tego loga i tu go skopiować?Przepraszam ale jestem początkujący.Pozdrawiam Kuba

[Mały22222]

kubaluka
załóż swoj temat