Windows 7 black screen

**Posty:** 201 · przez **cieszko8** 20 Sty 2011, 09:01

I clicked on the user I wanted to log in as and then a black screen appeared and my desktop never appeared, it just stayed as a black screen. I can only access Task Manager through CTRL-ALT-DELETE.

I've attempted to log off and reboot, but even if I try to log on as another user, only a black screen appears.

Tak sie stalo po ponownym urochomieniu laptopa. I nic teraz nie moge zrobic

**Posty:** 2742 · przez **Thunderas** 20 Sty 2011, 12:27

jaka wersja systemu? i czy oryginalny oraz aktywowany?
czy w menagerze zadań masz proces explorer.exe?
jesli nie to tam jest by uruchomic proces i go odpal.
jesli się pojawi to będziemy szukać powodu.
\\możliwe wirusy lub inne robactwa

**Posty:** 8001 · przez **Okocza** 20 Sty 2011, 17:54

cieszko8, poproszę log z OTL zgodnie z zasadami działu bezpieczeństwo.

**Posty:** 201 · przez **cieszko8** 20 Sty 2011, 18:22

windows 7 ultimate aktywowany .Nie mam explorer.exe i probowalem wpisac explorer.exe ale nie dziala.

Okocza pozniej podrzuce Log z OTL prosze o pomoc

Dodano 20.01.2011 17:29:33:

Kod: Zaznacz wszystko: OTL logfile created on: 20/01/2011 9:25:04 AM - Run 1 OTL by OldTimer - Version 3.2.20.2 Folder = C:\Users\Bartek\Desktop Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy 3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 71.00% Memory free 6.00 Gb Paging File | 5.00 Gb Available in Paging File | 85.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 58.59 Gb Total Space | 27.04 Gb Free Space | 46.14% Space Free | Partition Type: NTFS Drive D: | 174.29 Gb Total Space | 73.09 Gb Free Space | 41.94% Space Free | Partition Type: NTFS Computer Name: BARTEK-PC | User Name: Bartek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011/01/20 09:24:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Bartek\Desktop\OTL_3.2.20.2(dobreprogramy.pl).exe PRC - [2010/12/10 20:43:32 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010/12/10 20:43:32 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe PRC - [2010/01/13 14:45:58 | 001,552,736 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winamp.exe PRC - [2009/07/13 17:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011/01/20 09:24:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Bartek\Desktop\OTL_3.2.20.2(dobreprogramy.pl).exe MOD - [2009/07/13 17:16:15 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll MOD - [2009/07/13 17:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll MOD - [2009/07/13 17:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll MOD - [2009/07/13 17:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll MOD - [2009/07/13 17:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll MOD - [2009/07/13 17:15:35 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll MOD - [2009/07/13 17:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll MOD - [2009/07/13 17:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll MOD - [2009/07/13 17:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll MOD - [2009/07/13 17:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011/01/02 00:22:27 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2010/10/16 00:40:40 | 000,037,664 | ---- | M] (Apple Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device) SRV - [2009/12/10 12:34:26 | 000,697,104 | ---- | M] (IObit) [Disabled | Stopped] -- C:\Program Files\IObit\Advanced Spyware Remover\ASRsrv.exe -- (ASRservice) SRV - [2009/07/13 17:16:21 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wwansvc.dll -- (WwanSvc) SRV - [2009/07/13 17:16:19 | 000,348,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc) SRV - [2009/07/13 17:16:17 | 000,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbiosrvc.dll -- (WbioSrvc) SRV - [2009/07/13 17:16:17 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\umpo.dll -- (Power) SRV - [2009/07/13 17:16:16 | 000,037,376 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\themeservice.dll -- (Themes) SRV - [2009/07/13 17:16:15 | 000,053,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sppuinotify.dll -- (sppuinotify) SRV - [2009/07/13 17:16:13 | 000,043,520 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\System32\RpcEpMap.dll -- (RpcEptMapper) SRV - [2009/07/13 17:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/13 17:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009/07/13 17:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpsvc.dll -- (PNRPsvc) SRV - [2009/07/13 17:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpsvc.dll -- (p2pimsvc) SRV - [2009/07/13 17:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\provsvc.dll -- (HomeGroupProvider) SRV - [2009/07/13 17:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpauto.dll -- (PNRPAutoReg) SRV - [2009/07/13 17:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009/07/13 17:15:36 | 000,194,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ListSvc.dll -- (HomeGroupListener) SRV - [2009/07/13 17:15:21 | 000,797,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache) SRV - [2009/07/13 17:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dhcpcore.dll -- (Dhcp) SRV - [2009/07/13 17:15:10 | 000,218,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\defragsvc.dll -- (defragsvc) SRV - [2009/07/13 17:14:59 | 000,076,800 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\bdesvc.dll -- (BDESVC) SRV - [2009/07/13 17:14:58 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AxInstSv.dll -- (AxInstSV) ActiveX Installer (AxInstSV) SRV - [2009/07/13 17:14:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\appidsvc.dll -- (AppIDSvc) SRV - [2009/07/13 17:14:29 | 003,179,520 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\sppsvc.exe -- (sppsvc) SRV - [2007/05/31 15:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007/05/31 15:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) SRV - [2005/04/15 13:15:30 | 000,491,520 | ---- | M] () [Disabled | Stopped] -- C:\Windows\System32\lxcgcoms.exe -- (lxcg_device) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2010/03/11 19:30:58 | 000,685,816 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd) DRV - [2010/02/26 19:34:18 | 000,025,656 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\hpdskflt.sys -- (hpdskflt) DRV - [2010/02/26 19:33:56 | 000,033,848 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Accelerometer.sys -- (Accelerometer) DRV - [2009/07/13 17:26:21 | 000,015,952 | ---- | M] (CMD Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\cmdide.sys -- (cmdide) DRV - [2009/07/13 17:26:17 | 000,297,552 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\adpahci.sys -- (adpahci) DRV - [2009/07/13 17:26:15 | 000,422,976 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\adp94xx.sys -- (adp94xx) DRV - [2009/07/13 17:26:15 | 000,159,312 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdsbs.sys -- (amdsbs) DRV - [2009/07/13 17:26:15 | 000,146,512 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\adpu320.sys -- (adpu320) DRV - [2009/07/13 17:26:15 | 000,086,608 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\arcsas.sys -- (arcsas) DRV - [2009/07/13 17:26:15 | 000,079,952 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdsata.sys -- (amdsata) DRV - [2009/07/13 17:26:15 | 000,076,368 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\arc.sys -- (arc) DRV - [2009/07/13 17:26:15 | 000,023,616 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\amdxata.sys -- (amdxata) DRV - [2009/07/13 17:26:15 | 000,014,400 | ---- | M] (Acer Laboratories Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\aliide.sys -- (aliide) DRV - [2009/07/13 17:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\nvstor.sys -- (nvstor) DRV - [2009/07/13 17:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\nvraid.sys -- (nvraid) DRV - [2009/07/13 17:20:44 | 000,044,624 | ---- | M] (IBM Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\nfrd960.sys -- (nfrd960) DRV - [2009/07/13 17:20:37 | 000,089,168 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_sas.sys -- (LSI_SAS) DRV - [2009/07/13 17:20:36 | 000,332,352 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\iaStorV.sys -- (iaStorV) DRV - [2009/07/13 17:20:36 | 000,235,584 | ---- | M] (LSI Corporation, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\MegaSR.sys -- (MegaSR) DRV - [2009/07/13 17:20:36 | 000,133,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\ksecpkg.sys -- (KSecPkg) DRV - [2009/07/13 17:20:36 | 000,096,848 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_scsi.sys -- (LSI_SCSI) DRV - [2009/07/13 17:20:36 | 000,095,824 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_fc.sys -- (LSI_FC) DRV - [2009/07/13 17:20:36 | 000,054,864 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_sas2.sys -- (LSI_SAS2) DRV - [2009/07/13 17:20:36 | 000,041,040 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\iirsp.sys -- (iirsp) DRV - [2009/07/13 17:20:36 | 000,030,800 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\megasas.sys -- (megasas) DRV - [2009/07/13 17:20:36 | 000,013,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\hwpolicy.sys -- (hwpolicy) DRV - [2009/07/13 17:20:28 | 000,453,712 | ---- | M] (Emulex) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\elxstor.sys -- (elxstor) DRV - [2009/07/13 17:20:28 | 000,070,720 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\djsvs.sys -- (aic78xx) DRV - [2009/07/13 17:20:28 | 000,067,152 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\HpSAMD.sys -- (HpSAMD) DRV - [2009/07/13 17:20:28 | 000,046,160 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\fsdepends.sys -- (FsDepends) DRV - [2009/07/13 17:19:11 | 000,141,904 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vsmraid.sys -- (vsmraid) DRV - [2009/07/13 17:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus) DRV - [2009/07/13 17:19:10 | 000,159,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vhdmp.sys -- (vhdmp) DRV - [2009/07/13 17:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt) DRV - [2009/07/13 17:19:10 | 000,032,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vdrvroot.sys -- (vdrvroot) DRV - [2009/07/13 17:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc) DRV - [2009/07/13 17:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\wimmount.sys -- (WIMMount) DRV - [2009/07/13 17:19:10 | 000,016,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\viaide.sys -- (viaide) DRV - [2009/07/13 17:19:04 | 001,383,488 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\ql2300.sys -- (ql2300) DRV - [2009/07/13 17:19:04 | 000,173,648 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\rdyboost.sys -- (rdyboost) DRV - [2009/07/13 17:19:04 | 000,106,064 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\ql40xx.sys -- (ql40xx) DRV - [2009/07/13 17:19:04 | 000,077,888 | ---- | M] (Silicon Integrated Systems) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\sisraid4.sys -- (SiSRaid4) DRV - [2009/07/13 17:19:04 | 000,043,088 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pcw.sys -- (pcw) DRV - [2009/07/13 17:19:04 | 000,040,016 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\SiSRaid2.sys -- (SiSRaid2) DRV - [2009/07/13 17:19:04 | 000,021,072 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\stexstor.sys -- (stexstor) DRV - [2009/07/13 17:17:54 | 000,369,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\cng.sys -- (CNG) DRV - [2009/07/13 16:57:25 | 000,272,128 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\Brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2009/07/13 16:02:41 | 000,018,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rdpbus.sys -- (rdpbus) DRV - [2009/07/13 16:01:41 | 000,007,168 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPREFMP.sys -- (RDPREFMP) DRV - [2009/07/13 15:55:00 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\agilevpn.sys -- (RasAgileVpn) WAN Miniport (IKEv2) DRV - [2009/07/13 15:53:51 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\wfplwf.sys -- (WfpLwf) DRV - [2009/07/13 15:52:44 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ndiscap.sys -- (NdisCap) DRV - [2009/07/13 15:52:02 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifibus.sys -- (vwifibus) DRV - [2009/07/13 15:52:00 | 000,163,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\1394ohci.sys -- (1394ohci) DRV - [2009/07/13 15:51:35 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\umpass.sys -- (UmPass) DRV - [2009/07/13 15:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009/07/13 15:51:08 | 000,004,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mshidkmdf.sys -- (mshidkmdf) DRV - [2009/07/13 15:46:55 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\MTConfig.sys -- (MTConfig) DRV - [2009/07/13 15:45:26 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CompositeBus.sys -- (CompositeBus) DRV - [2009/07/13 15:36:52 | 000,050,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\appid.sys -- (AppID) DRV - [2009/07/13 15:33:50 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | Unknown | Stopped] -- C:\Windows\System32\drivers\scfilter.sys -- (scfilter) DRV - [2009/07/13 15:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap) DRV - [2009/07/13 15:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID) DRV - [2009/07/13 15:24:05 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\discache.sys -- (discache) DRV - [2009/07/13 15:16:36 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\acpipmi.sys -- (AcpiPmi) DRV - [2009/07/13 15:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdppm.sys -- (AmdPPM) DRV - [2009/07/13 14:54:14 | 000,026,624 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2009/07/13 14:53:33 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BrUsbMdm.sys -- (BrUsbMdm) DRV - [2009/07/13 14:53:33 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BrUsbSer.sys -- (BrUsbSer) DRV - [2009/07/13 14:53:32 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BrSerWdm.sys -- (BrSerWdm) DRV - [2009/07/13 14:53:28 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\BrFiltLo.sys -- (BrFiltLo) DRV - [2009/07/13 14:53:28 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\BrFiltUp.sys -- (BrFiltUp) DRV - [2009/07/13 14:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2009/07/13 14:02:52 | 000,139,776 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rt86win7.sys -- (RTL8167) DRV - [2009/07/13 14:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32) Intel(R) DRV - [2009/07/13 14:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\b57nd60x.sys -- (b57nd60x) DRV - [2009/07/13 14:02:48 | 003,100,160 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\evbdx.sys -- (ebdrv) DRV - [2009/07/13 14:02:48 | 000,430,080 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\bxvbdx.sys -- (b06bdrv) DRV - [2009/06/10 13:19:30 | 004,756,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\igdkmd32.sys -- (igfx) DRV - [2003/02/11 13:25:14 | 000,009,216 | ---- | M] (Primax Electronics Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pelusblf.sys -- (pelusblf) DRV - [2003/01/10 13:55:32 | 000,016,384 | ---- | M] (Primax Electronics Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PELMOUSE.SYS -- (pelmouse) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ca.msn.com/?lang=en-ca&OCID=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 70 49 3A 00 22 B6 CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.onet.pl" FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.1 FF - prefs.js..extensions.enabledItems: {38800006-44D2-47FC-8CB5-AD60F31D2F26}:1.9.1 FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:2.0 FF - prefs.js..network.proxy.no_proxies_on: "*.local" FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/03/01 19:13:29 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/12/10 20:43:33 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/12/10 20:43:33 | 000,000,000 | ---D | M] [2010/03/01 01:23:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bartek\AppData\Roaming\Mozilla\Extensions [2011/01/20 01:17:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\0q4ivfga.default\extensions [2010/07/09 23:26:24 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\0q4ivfga.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2011/01/18 00:29:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011/01/18 00:29:01 | 000,000,000 | ---D | M] (DataMngr) -- C:\PROGRAM FILES\WINDOWS SEARCHQU TOOLBAR\DATAMNGR\FIREFOXEXTENSION [2010/03/01 19:13:29 | 000,000,000 | ---D | M] (RealPlayer Browser Record Plugin) -- C:\PROGRAMDATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT [2011/01/15 23:19:49 | 000,000,000 | ---D | M] (XULRunner) -- C:\USERS\BARTEK\APPDATA\LOCAL\{38800006-44D2-47FC-8CB5-AD60F31D2F26} [2010/01/13 14:46:00 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll [2010/07/23 10:04:30 | 000,001,538 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml [2010/07/23 10:04:30 | 000,000,947 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml [2010/07/23 10:04:30 | 000,000,769 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml [2010/07/23 10:04:30 | 000,001,135 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml O1 HOSTS File: ([2011/01/17 02:03:01 | 000,001,122 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 74.208.105.171 gs.apple.com O1 - Hosts: 127.0.0.1 www.8minutedating.com O1 - Hosts: 127.0.0.1 whysohardx.com O1 - Hosts: 127.0.0.1 protectyourpc-11.com O1 - Hosts: 127.0.0.1 checkserverstatux.com O1 - Hosts: 127.0.0.1 xinmin.cn O1 - Hosts: 127.0.0.1 xy95.cn O1 - Hosts: 127.0.0.1 koralda.com O1 - Hosts: 127.0.0.1 weirden.com O1 - Hosts: 127.0.0.1 nanocloudcontroller.com O1 - Hosts: 127.0.0.1 coo0lnet.net O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Searchqu Toolbar) - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\Program Files\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll () O2 - BHO: (IECatcher Class) - {B930BA63-9E5A-11D3-A288-0000E80E2EDE} - C:\Program Files\Mass Downloader\mdhelper.dll () O2 - BHO: (FlashFXP Helper for Internet Explorer) - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\Program Files\FlashFXPss\IEFlash.dll (IniCom Networks, Inc.) O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\Program Files\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll () O4 - HKLM..\Run: [Advanced Spyware Remover] C:\Program Files\IObit\Advanced Spyware Remover\ASRtray.exe (IObit) O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe (Discordia, LTD) O4 - HKLM..\Run: [DivX Download Manager] File not found O4 - HKLM..\Run: [LXCGCATS] C:\Windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.DLL () O4 - HKLM..\Run: [Mouse Suite 98 Daemon] ICO.EXE (Primax Electronics Ltd.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.) O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [Spyware Protection] File not found O4 - HKCU..\Run: [Trebevukovikerev] C:\Users\Bartek\AppData\Local\omokaxod.DLL (MPC-HC Team) O4 - HKLM..\RunOnce: [*WerKernelReporting] C:\Windows\System32\WerFault.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: + &Mass Downloader: download this file - C:\Program Files\Mass Downloader\add_url.htm () O8 - Extra context menu item: + Mass Downloader: download &All files - C:\Program Files\Mass Downloader\add_all.htm () O9 - Extra Button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe (MetaProducts corp.) O9 - Extra 'Tools' menuitem : &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe (MetaProducts corp.) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars) O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - File not found O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 192.168.1.254 O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~1\WIA6EB~1\Datamngr\datamngr.dll) - C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngr.dll (Discordia, LTD) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 13:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011/01/20 09:24:33 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Bartek\Desktop\OTL_3.2.20.2(dobreprogramy.pl).exe [2011/01/19 23:57:26 | 000,772,376 | ---- | C] (Microsoft Corporation) -- C:\Users\Bartek\Desktop\Mats_Run.IEAddon.exe [2011/01/19 22:39:44 | 001,912,872 | ---- | C] (Trend Micro Inc.) -- C:\Users\Bartek\Desktop\HousecallLauncher.exe [2011/01/19 22:37:38 | 002,255,248 | ---- | C] (Trend Micro Inc.) -- C:\Users\Bartek\Desktop\HousecallLauncher64.exe [2011/01/19 18:50:21 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\shexview [2011/01/19 18:39:02 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2011/01/18 00:29:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Fun4IM [2011/01/18 00:29:00 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Searchqu Toolbar [2011/01/18 00:29:00 | 000,000,000 | ---D | C] -- C:\Program Files\Fun4IM [2011/01/17 00:40:08 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline [2011/01/16 15:39:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Spyware Remover [2011/01/16 15:39:47 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit [2011/01/16 15:39:45 | 000,000,000 | ---D | C] -- C:\Program Files\IObit [2011/01/16 15:39:02 | 009,776,496 | ---- | C] (IObit ) -- C:\Users\Bartek\Desktop\AdvancedSpywareRemoverSetup.exe [2011/01/16 09:08:41 | 000,000,000 | ---D | C] -- C:\Program Files\WEPKR [2011/01/16 09:03:20 | 000,000,000 | ---D | C] -- C:\ProgramData\TamoSoft [2011/01/15 23:28:06 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2011/01/15 23:19:49 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Local\{38800006-44D2-47FC-8CB5-AD60F31D2F26} [2011/01/15 23:17:44 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\54E420BFB799E9D67961644DC5FCBE3F [2011/01/10 16:03:32 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Local [2011/01/10 16:03:17 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\DivX [2011/01/10 16:01:41 | 000,000,000 | ---D | C] -- C:\Program Files\DivX [2011/01/10 16:01:18 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX [2011/01/02 00:22:57 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat [2011/01/02 00:19:36 | 002,327,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2011/01/01 19:58:10 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\january 2011 [2010/12/27 20:05:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PokerStars [2010/12/27 19:57:58 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Mozilla-Cache [2010/12/27 19:57:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PartyPoker [2010/12/27 19:56:40 | 000,000,000 | ---D | C] -- C:\Programs [2010/12/26 20:52:58 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Local\PokerStars [2010/12/26 20:52:46 | 000,000,000 | ---D | C] -- C:\Program Files\PokerStars [2010/12/26 12:11:10 | 000,057,344 | ---- | C] (Primax Electronics Ltd.) -- C:\Windows\System32\ico.exe [2010/12/24 00:30:16 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\restrepo-2k10-plsub [2009/07/13 15:24:44 | 000,225,280 | ---- | C] (MPC-HC Team) -- C:\Users\Bartek\AppData\Local\omokaxod.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011/01/20 09:24:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Bartek\Desktop\OTL_3.2.20.2(dobreprogramy.pl).exe [2011/01/20 02:04:21 | 000,619,642 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011/01/20 02:04:21 | 000,107,792 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011/01/20 01:12:03 | 000,021,424 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011/01/20 01:12:03 | 000,021,424 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011/01/20 01:06:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/01/20 01:06:44 | 2361,806,848 | -HS- | M] () -- C:\hiberfil.sys [2011/01/20 01:06:44 | 232,586,312 | ---- | M] () -- C:\Windows\MEMORY.DMP [2011/01/19 23:57:27 | 000,772,376 | ---- | M] (Microsoft Corporation) -- C:\Users\Bartek\Desktop\Mats_Run.IEAddon.exe [2011/01/19 23:40:44 | 000,000,396 | RHS- | M] () -- C:\ProgramData\ntuser.pol [2011/01/19 23:16:18 | 000,000,017 | ---- | M] () -- C:\Users\Bartek\AppData\Local\resmon.resmoncfg [2011/01/19 22:49:15 | 000,001,294 | ---- | M] () -- C:\Windows\RegBootClean.CFG [2011/01/19 22:49:02 | 000,003,584 | ---- | M] () -- C:\Windows\System32\ms.dll [2011/01/19 22:49:01 | 000,102,400 | ---- | M] () -- C:\Windows\RegBootClean.exe [2011/01/19 22:40:02 | 000,000,036 | ---- | M] () -- C:\Users\Bartek\AppData\Local\housecall.guid.cache [2011/01/19 22:39:47 | 001,912,872 | ---- | M] (Trend Micro Inc.) -- C:\Users\Bartek\Desktop\HousecallLauncher.exe [2011/01/19 22:37:49 | 002,255,248 | ---- | M] (Trend Micro Inc.) -- C:\Users\Bartek\Desktop\HousecallLauncher64.exe [2011/01/19 22:26:55 | 183,539,666 | ---- | M] () -- C:\Users\Bartek\Desktop\19.1.11.rar [2011/01/19 18:50:15 | 000,056,414 | ---- | M] () -- C:\Users\Bartek\Desktop\shexview.zip [2011/01/19 01:12:11 | 000,000,288 | ---- | M] () -- C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-3477328753-396472014-821321384-1001.job [2011/01/19 00:25:39 | 000,000,120 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Mwuvozoqocefuwej.dat [2011/01/19 00:25:39 | 000,000,000 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Kpezutunagec.bin [2011/01/17 15:19:53 | 109,624,850 | ---- | M] () -- C:\Users\Bartek\Desktop\17.1.11.rar [2011/01/17 02:03:01 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe [2011/01/16 22:53:21 | 005,053,056 | ---- | M] () -- C:\Users\Bartek\Desktop\Chris Brown - Beautiful People -.mp3 [2011/01/16 15:39:48 | 000,001,056 | ---- | M] () -- C:\Users\Public\Desktop\Advanced Spyware Remover.lnk [2011/01/16 15:39:32 | 009,776,496 | ---- | M] (IObit ) -- C:\Users\Bartek\Desktop\AdvancedSpywareRemoverSetup.exe [2011/01/16 15:21:35 | 003,945,394 | ---- | M] () -- C:\Users\Bartek\Desktop\Tim Berg - Seek Bromance (Sent Radio Edit).mp3 [2011/01/16 15:20:20 | 012,534,305 | ---- | M] () -- C:\Users\Bartek\Desktop\D-Jastic - Up To No Good (Extended Mix).mp3 [2011/01/16 15:14:58 | 015,623,616 | ---- | M] () -- C:\Users\Bartek\Desktop\Lazy Rich feat. Lizzie Curious - BOOM! (Original Mix).mp3 [2011/01/16 15:13:23 | 011,663,034 | ---- | M] () -- C:\Users\Bartek\Desktop\Discovibez - Seniorita (Acid Luke & Tony Tweaker Remix).mp3 [2011/01/16 15:06:48 | 015,783,936 | ---- | M] () -- C:\Users\Bartek\Desktop\2-remady_feat._manu_l_-_save_your_heart_(laurent_wolf_remix).mp3 [2011/01/16 14:52:18 | 016,598,990 | ---- | M] () -- C:\Users\Bartek\Desktop\Javi Reina, Alex Guerrero Feat Syntheticsax Oig 2011 (DJ Sayman & DJ Layman Remix).mp3 [2011/01/16 13:07:39 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempML1868.html [2011/01/16 13:07:39 | 000,002,089 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempqL1868.html [2011/01/16 13:06:25 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempHB2216.html [2011/01/16 13:06:25 | 000,002,089 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempAj2216.html [2011/01/16 09:09:24 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempIz2272.html [2011/01/16 09:09:24 | 000,002,089 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempzv2272.html [2011/01/15 23:17:55 | 000,035,676 | ---- | M] () -- C:\Windows\System32\dll [2011/01/15 23:17:55 | 000,000,047 | ---- | M] () -- C:\Windows\NxQK1 [2011/01/15 23:17:55 | 000,000,045 | ---- | M] () -- C:\Windows\SnAF2h [2011/01/15 23:17:55 | 000,000,045 | ---- | M] () -- C:\Windows\sGVbix [2011/01/15 23:17:55 | 000,000,045 | ---- | M] () -- C:\Windows\Hvo7kUU [2011/01/15 23:17:55 | 000,000,044 | ---- | M] () -- C:\Windows\TOx3x5Y [2011/01/15 23:17:55 | 000,000,044 | ---- | M] () -- C:\Windows\k1atV [2011/01/15 23:17:55 | 000,000,044 | ---- | M] () -- C:\Windows\8xuuEFl [2011/01/15 23:17:55 | 000,000,044 | ---- | M] () -- C:\Windows\1cUWTTc4e [2011/01/15 23:17:55 | 000,000,043 | ---- | M] () -- C:\Windows\WXtYjgGvWB [2011/01/15 23:17:55 | 000,000,043 | ---- | M] () -- C:\Windows\tNbbFn [2011/01/15 23:17:55 | 000,000,043 | ---- | M] () -- C:\Windows\hkwRCVmf3P [2011/01/15 23:17:55 | 000,000,043 | ---- | M] () -- C:\Windows\GcCSso [2011/01/15 23:17:55 | 000,000,042 | ---- | M] () -- C:\Windows\gUu2n5 [2011/01/15 23:17:55 | 000,000,041 | ---- | M] () -- C:\Windows\r7WdPkmtN [2011/01/15 23:17:55 | 000,000,041 | ---- | M] () -- C:\Windows\7TtKhaDt2e [2011/01/15 23:17:55 | 000,000,041 | ---- | M] () -- C:\Windows\1euCH41Y2 [2011/01/15 23:17:55 | 000,000,040 | ---- | M] () -- C:\Windows\XJ5lf4C [2011/01/15 23:17:55 | 000,000,040 | ---- | M] () -- C:\Windows\pyxFWS2S [2011/01/15 23:17:55 | 000,000,039 | ---- | M] () -- C:\Windows\VQJPHi [2011/01/15 23:17:55 | 000,000,039 | ---- | M] () -- C:\Windows\qRgYu374 [2011/01/15 23:17:55 | 000,000,039 | ---- | M] () -- C:\Windows\oHjigD3tfi [2011/01/15 23:17:55 | 000,000,039 | ---- | M] () -- C:\Windows\Gniqh2 [2011/01/15 23:17:55 | 000,000,039 | ---- | M] () -- C:\Windows\eDFchX7Gu [2011/01/15 23:17:55 | 000,000,039 | ---- | M] () -- C:\Windows\dTU6n3qcO [2011/01/15 23:17:55 | 000,000,039 | ---- | M] () -- C:\Windows\7msMUWiACu [2011/01/15 23:17:55 | 000,000,038 | ---- | M] () -- C:\Windows\FtuUKI7tLO [2011/01/15 23:17:55 | 000,000,038 | ---- | M] () -- C:\Windows\8UHe2P [2011/01/15 23:17:55 | 000,000,038 | ---- | M] () -- C:\Windows\74eKv [2011/01/15 23:17:55 | 000,000,038 | ---- | M] () -- C:\Windows\1fQKO [2011/01/15 23:17:55 | 000,000,037 | ---- | M] () -- C:\Windows\VfboROYGFY [2011/01/15 23:17:55 | 000,000,037 | ---- | M] () -- C:\Windows\oemKQGlTS [2011/01/15 23:17:55 | 000,000,037 | ---- | M] () -- C:\Windows\eVOOvF [2011/01/15 23:17:55 | 000,000,036 | ---- | M] () -- C:\Windows\wkxxch3S [2011/01/15 23:17:55 | 000,000,036 | ---- | M] () -- C:\Windows\tfHvVM [2011/01/15 23:17:55 | 000,000,036 | ---- | M] () -- C:\Windows\l2X358N [2011/01/15 23:17:55 | 000,000,036 | ---- | M] () -- C:\Windows\2Qvsv [2011/01/15 23:17:55 | 000,000,035 | ---- | M] () -- C:\Windows\RCLHfsoVKo [2011/01/15 23:17:55 | 000,000,035 | ---- | M] () -- C:\Windows\DGweBm [2011/01/15 23:17:55 | 000,000,035 | ---- | M] () -- C:\Windows\CVkCg6GGje [2011/01/15 23:17:55 | 000,000,035 | ---- | M] () -- C:\Windows\5hJOk1N [2011/01/15 23:17:55 | 000,000,035 | ---- | M] () -- C:\Windows\3tvJyeq [2011/01/15 23:17:55 | 000,000,034 | ---- | M] () -- C:\Windows\Y4uGYpB [2011/01/15 23:17:55 | 000,000,033 | ---- | M] () -- C:\Windows\nJtf64j [2011/01/15 23:17:55 | 000,000,033 | ---- | M] () -- C:\Windows\dWmqNQboc [2011/01/15 23:17:55 | 000,000,033 | ---- | M] () -- C:\Windows\ABrHyOQF [2011/01/15 23:17:55 | 000,000,033 | ---- | M] () -- C:\Windows\1Vi1Y22E [2011/01/15 23:17:55 | 000,000,032 | ---- | M] () -- C:\Windows\SL4Gxd [2011/01/15 23:17:55 | 000,000,032 | ---- | M] () -- C:\Windows\dVgu63 [2011/01/15 23:17:55 | 000,000,032 | ---- | M] () -- C:\Windows\bnGVMejdQS [2011/01/15 23:17:55 | 000,000,032 | ---- | M] () -- C:\Windows\5pmmsMdNFo [2011/01/15 23:17:55 | 000,000,031 | ---- | M] () -- C:\Windows\WtQPnivy6 [2011/01/15 23:17:55 | 000,000,031 | ---- | M] () -- C:\Windows\sXQAwehfl [2011/01/15 23:17:55 | 000,000,031 | ---- | M] () -- C:\Windows\csaYl7Vra4 [2011/01/15 23:17:55 | 000,000,030 | ---- | M] () -- C:\Windows\Sg8JQhcb [2011/01/15 23:17:55 | 000,000,030 | ---- | M] () -- C:\Windows\hwvfAj [2011/01/15 23:17:55 | 000,000,030 | ---- | M] () -- C:\Windows\GJX5lU7 [2011/01/15 23:17:55 | 000,000,029 | ---- | M] () -- C:\Windows\uhbYm [2011/01/15 23:17:55 | 000,000,029 | ---- | M] () -- C:\Windows\pA8P1O [2011/01/15 23:17:55 | 000,000,028 | ---- | M] () -- C:\Windows\VQjKpNoC [2011/01/15 23:17:55 | 000,000,028 | ---- | M] () -- C:\Windows\Mv8FNpV2hK [2011/01/15 23:17:55 | 000,000,028 | ---- | M] () -- C:\Windows\Iul4M [2011/01/15 23:17:55 | 000,000,028 | ---- | M] () -- C:\Windows\GDfBH3qm [2011/01/15 23:17:55 | 000,000,028 | ---- | M] () -- C:\Windows\aPGWPE [2011/01/15 23:17:55 | 000,000,027 | ---- | M] () -- C:\Windows\mrq5K4P [2011/01/15 23:17:55 | 000,000,027 | ---- | M] () -- C:\Windows\4IWYB [2011/01/15 23:17:55 | 000,000,026 | ---- | M] () -- C:\Windows\mYDaRfcd [2011/01/15 23:17:55 | 000,000,026 | ---- | M] () -- C:\Windows\lnE1ok7SVo [2011/01/15 23:17:55 | 000,000,025 | ---- | M] () -- C:\Windows\T8X7Pr8 [2011/01/15 23:17:55 | 000,000,025 | ---- | M] () -- C:\Windows\OmW4hGUmrl [2011/01/15 23:17:55 | 000,000,025 | ---- | M] () -- C:\Windows\bMgNPtp6 [2011/01/15 23:17:55 | 000,000,024 | ---- | M] () -- C:\Windows\W2CS2 [2011/01/15 23:17:55 | 000,000,024 | ---- | M] () -- C:\Windows\a1PWcH [2011/01/15 23:17:55 | 000,000,024 | ---- | M] () -- C:\Windows\8nngEoL [2011/01/15 20:27:49 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempRf2548.html [2011/01/15 20:27:49 | 000,002,089 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempkq2548.html [2011/01/15 20:26:35 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempg10532.html [2011/01/15 20:26:35 | 000,002,089 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempK10532.html [2011/01/13 00:01:32 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempfI2668.html [2011/01/11 00:26:29 | 005,687,674 | ---- | M] () -- C:\Users\Bartek\Desktop\Brian adams - Bryan adams - Please forgive me.mp3 [2011/01/11 00:24:28 | 004,918,095 | ---- | M] () -- C:\Users\Bartek\Desktop\bryan-adams-here-i-am.mp3 [2011/01/02 00:24:27 | 000,269,592 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011/01/01 23:49:02 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempYS2604.html [2011/01/01 23:49:02 | 000,002,089 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempbz2604.html [2010/12/30 03:43:53 | 010,346,366 | ---- | M] () -- C:\Users\Bartek\Desktop\James Blunt - Goodbye My Lover.mp3 [2010/12/27 20:05:39 | 000,001,043 | ---- | M] () -- C:\Users\Bartek\Application Data\Microsoft\Internet Explorer\Quick Launch\PokerStars.lnk [2010/12/27 20:05:39 | 000,001,019 | ---- | M] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010/12/26 12:10:14 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempFWB320.html [2010/12/26 12:10:14 | 000,002,089 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempgct320.html [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011/01/19 23:40:44 | 000,000,396 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2011/01/19 23:16:18 | 000,000,017 | ---- | C] () -- C:\Users\Bartek\AppData\Local\resmon.resmoncfg [2011/01/19 22:48:53 | 000,102,400 | ---- | C] () -- C:\Windows\RegBootClean.exe [2011/01/19 22:48:53 | 000,001,294 | ---- | C] () -- C:\Windows\RegBootClean.CFG [2011/01/19 22:40:02 | 000,000,036 | ---- | C] () -- C:\Users\Bartek\AppData\Local\housecall.guid.cache [2011/01/19 22:17:26 | 183,539,666 | ---- | C] () -- C:\Users\Bartek\Desktop\19.1.11.rar [2011/01/19 18:50:14 | 000,056,414 | ---- | C] () -- C:\Users\Bartek\Desktop\shexview.zip [2011/01/19 18:38:58 | 232,586,312 | ---- | C] () -- C:\Windows\MEMORY.DMP [2011/01/17 14:17:06 | 109,624,850 | ---- | C] () -- C:\Users\Bartek\Desktop\17.1.11.rar [2011/01/16 22:53:10 | 005,053,056 | ---- | C] () -- C:\Users\Bartek\Desktop\Chris Brown - Beautiful People -.mp3 [2011/01/16 15:39:48 | 000,001,056 | ---- | C] () -- C:\Users\Public\Desktop\Advanced Spyware Remover.lnk [2011/01/16 15:21:25 | 003,945,394 | ---- | C] () -- C:\Users\Bartek\Desktop\Tim Berg - Seek Bromance (Sent Radio Edit).mp3 [2011/01/16 15:19:55 | 012,534,305 | ---- | C] () -- C:\Users\Bartek\Desktop\D-Jastic - Up To No Good (Extended Mix).mp3 [2011/01/16 15:14:25 | 015,623,616 | ---- | C] () -- C:\Users\Bartek\Desktop\Lazy Rich feat. Lizzie Curious - BOOM! (Original Mix).mp3 [2011/01/16 15:12:57 | 011,663,034 | ---- | C] () -- C:\Users\Bartek\Desktop\Discovibez - Seniorita (Acid Luke & Tony Tweaker Remix).mp3 [2011/01/16 15:06:11 | 015,783,936 | ---- | C] () -- C:\Users\Bartek\Desktop\2-remady_feat._manu_l_-_save_your_heart_(laurent_wolf_remix).mp3 [2011/01/16 14:51:47 | 016,598,990 | ---- | C] () -- C:\Users\Bartek\Desktop\Javi Reina, Alex Guerrero Feat Syntheticsax Oig 2011 (DJ Sayman & DJ Layman Remix).mp3 [2011/01/16 13:07:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempML1868.html [2011/01/16 13:07:39 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempqL1868.html [2011/01/16 09:10:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHB2216.html [2011/01/16 09:10:55 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAj2216.html [2011/01/16 08:48:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIz2272.html [2011/01/16 08:48:05 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempzv2272.html [2011/01/16 04:24:02 | 000,000,288 | ---- | C] () -- C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-3477328753-396472014-821321384-1001.job [2011/01/15 23:19:51 | 000,000,120 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Mwuvozoqocefuwej.dat [2011/01/15 23:19:51 | 000,000,000 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Kpezutunagec.bin [2011/01/15 23:17:55 | 000,035,676 | ---- | C] () -- C:\Windows\System32\dll [2011/01/15 23:17:55 | 000,003,584 | ---- | C] () -- C:\Windows\System32\ms.dll [2011/01/15 23:17:55 | 000,000,047 | ---- | C] () -- C:\Windows\NxQK1 [2011/01/15 23:17:55 | 000,000,045 | ---- | C] () -- C:\Windows\SnAF2h [2011/01/15 23:17:55 | 000,000,045 | ---- | C] () -- C:\Windows\sGVbix [2011/01/15 23:17:55 | 000,000,045 | ---- | C] () -- C:\Windows\Hvo7kUU [2011/01/15 23:17:55 | 000,000,044 | ---- | C] () -- C:\Windows\TOx3x5Y [2011/01/15 23:17:55 | 000,000,044 | ---- | C] () -- C:\Windows\k1atV [2011/01/15 23:17:55 | 000,000,044 | ---- | C] () -- C:\Windows\8xuuEFl [2011/01/15 23:17:55 | 000,000,044 | ---- | C] () -- C:\Windows\1cUWTTc4e [2011/01/15 23:17:55 | 000,000,043 | ---- | C] () -- C:\Windows\WXtYjgGvWB [2011/01/15 23:17:55 | 000,000,043 | ---- | C] () -- C:\Windows\tNbbFn [2011/01/15 23:17:55 | 000,000,043 | ---- | C] () -- C:\Windows\hkwRCVmf3P [2011/01/15 23:17:55 | 000,000,043 | ---- | C] () -- C:\Windows\GcCSso [2011/01/15 23:17:55 | 000,000,042 | ---- | C] () -- C:\Windows\gUu2n5 [2011/01/15 23:17:55 | 000,000,041 | ---- | C] () -- C:\Windows\r7WdPkmtN [2011/01/15 23:17:55 | 000,000,041 | ---- | C] () -- C:\Windows\7TtKhaDt2e [2011/01/15 23:17:55 | 000,000,041 | ---- | C] () -- C:\Windows\1euCH41Y2 [2011/01/15 23:17:55 | 000,000,040 | ---- | C] () -- C:\Windows\XJ5lf4C [2011/01/15 23:17:55 | 000,000,040 | ---- | C] () -- C:\Windows\pyxFWS2S [2011/01/15 23:17:55 | 000,000,039 | ---- | C] () -- C:\Windows\VQJPHi [2011/01/15 23:17:55 | 000,000,039 | ---- | C] () -- C:\Windows\qRgYu374 [2011/01/15 23:17:55 | 000,000,039 | ---- | C] () -- C:\Windows\oHjigD3tfi [2011/01/15 23:17:55 | 000,000,039 | ---- | C] () -- C:\Windows\Gniqh2 [2011/01/15 23:17:55 | 000,000,039 | ---- | C] () -- C:\Windows\eDFchX7Gu [2011/01/15 23:17:55 | 000,000,039 | ---- | C] () -- C:\Windows\dTU6n3qcO [2011/01/15 23:17:55 | 000,000,039 | ---- | C] () -- C:\Windows\7msMUWiACu [2011/01/15 23:17:55 | 000,000,038 | ---- | C] () -- C:\Windows\FtuUKI7tLO [2011/01/15 23:17:55 | 000,000,038 | ---- | C] () -- C:\Windows\8UHe2P [2011/01/15 23:17:55 | 000,000,038 | ---- | C] () -- C:\Windows\74eKv [2011/01/15 23:17:55 | 000,000,038 | ---- | C] () -- C:\Windows\1fQKO [2011/01/15 23:17:55 | 000,000,037 | ---- | C] () -- C:\Windows\VfboROYGFY [2011/01/15 23:17:55 | 000,000,037 | ---- | C] () -- C:\Windows\oemKQGlTS [2011/01/15 23:17:55 | 000,000,037 | ---- | C] () -- C:\Windows\eVOOvF [2011/01/15 23:17:55 | 000,000,036 | ---- | C] () -- C:\Windows\wkxxch3S [2011/01/15 23:17:55 | 000,000,036 | ---- | C] () -- C:\Windows\tfHvVM [2011/01/15 23:17:55 | 000,000,036 | ---- | C] () -- C:\Windows\l2X358N [2011/01/15 23:17:55 | 000,000,036 | ---- | C] () -- C:\Windows\2Qvsv [2011/01/15 23:17:55 | 000,000,035 | ---- | C] () -- C:\Windows\RCLHfsoVKo [2011/01/15 23:17:55 | 000,000,035 | ---- | C] () -- C:\Windows\DGweBm [2011/01/15 23:17:55 | 000,000,035 | ---- | C] () -- C:\Windows\CVkCg6GGje [2011/01/15 23:17:55 | 000,000,035 | ---- | C] () -- C:\Windows\5hJOk1N [2011/01/15 23:17:55 | 000,000,035 | ---- | C] () -- C:\Windows\3tvJyeq [2011/01/15 23:17:55 | 000,000,034 | ---- | C] () -- C:\Windows\Y4uGYpB [2011/01/15 23:17:55 | 000,000,033 | ---- | C] () -- C:\Windows\nJtf64j [2011/01/15 23:17:55 | 000,000,033 | ---- | C] () -- C:\Windows\dWmqNQboc [2011/01/15 23:17:55 | 000,000,033 | ---- | C] () -- C:\Windows\ABrHyOQF [2011/01/15 23:17:55 | 000,000,033 | ---- | C] () -- C:\Windows\1Vi1Y22E [2011/01/15 23:17:55 | 000,000,032 | ---- | C] () -- C:\Windows\SL4Gxd [2011/01/15 23:17:55 | 000,000,032 | ---- | C] () -- C:\Windows\dVgu63 [2011/01/15 23:17:55 | 000,000,032 | ---- | C] () -- C:\Windows\bnGVMejdQS [2011/01/15 23:17:55 | 000,000,032 | ---- | C] () -- C:\Windows\5pmmsMdNFo [2011/01/15 23:17:55 | 000,000,031 | ---- | C] () -- C:\Windows\WtQPnivy6 [2011/01/15 23:17:55 | 000,000,031 | ---- | C] () -- C:\Windows\sXQAwehfl [2011/01/15 23:17:55 | 000,000,031 | ---- | C] () -- C:\Windows\csaYl7Vra4 [2011/01/15 23:17:55 | 000,000,030 | ---- | C] () -- C:\Windows\Sg8JQhcb [2011/01/15 23:17:55 | 000,000,030 | ---- | C] () -- C:\Windows\hwvfAj [2011/01/15 23:17:55 | 000,000,030 | ---- | C] () -- C:\Windows\GJX5lU7 [2011/01/15 23:17:55 | 000,000,029 | ---- | C] () -- C:\Windows\uhbYm [2011/01/15 23:17:55 | 000,000,029 | ---- | C] () -- C:\Windows\pA8P1O [2011/01/15 23:17:55 | 000,000,028 | ---- | C] () -- C:\Windows\VQjKpNoC [2011/01/15 23:17:55 | 000,000,028 | ---- | C] () -- C:\Windows\Mv8FNpV2hK [2011/01/15 23:17:55 | 000,000,028 | ---- | C] () -- C:\Windows\Iul4M [2011/01/15 23:17:55 | 000,000,028 | ---- | C] () -- C:\Windows\GDfBH3qm [2011/01/15 23:17:55 | 000,000,028 | ---- | C] () -- C:\Windows\aPGWPE [2011/01/15 23:17:55 | 000,000,027 | ---- | C] () -- C:\Windows\mrq5K4P [2011/01/15 23:17:55 | 000,000,027 | ---- | C] () -- C:\Windows\4IWYB [2011/01/15 23:17:55 | 000,000,026 | ---- | C] () -- C:\Windows\mYDaRfcd [2011/01/15 23:17:55 | 000,000,026 | ---- | C] () -- C:\Windows\lnE1ok7SVo [2011/01/15 23:17:55 | 000,000,025 | ---- | C] () -- C:\Windows\T8X7Pr8 [2011/01/15 23:17:55 | 000,000,025 | ---- | C] () -- C:\Windows\OmW4hGUmrl [2011/01/15 23:17:55 | 000,000,025 | ---- | C] () -- C:\Windows\bMgNPtp6 [2011/01/15 23:17:55 | 000,000,024 | ---- | C] () -- C:\Windows\W2CS2 [2011/01/15 23:17:55 | 000,000,024 | ---- | C] () -- C:\Windows\a1PWcH [2011/01/15 23:17:55 | 000,000,024 | ---- | C] () -- C:\Windows\8nngEoL [2011/01/15 20:27:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRf2548.html [2011/01/15 20:27:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkq2548.html [2011/01/13 01:03:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempg10532.html [2011/01/13 01:03:09 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempK10532.html [2011/01/11 00:26:05 | 005,687,674 | ---- | C] () -- C:\Users\Bartek\Desktop\Brian adams - Bryan adams - Please forgive me.mp3 [2011/01/11 00:24:07 | 004,918,095 | ---- | C] () -- C:\Users\Bartek\Desktop\bryan-adams-here-i-am.mp3 [2011/01/02 00:24:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfI2668.html [2010/12/30 03:43:03 | 010,346,366 | ---- | C] () -- C:\Users\Bartek\Desktop\James Blunt - Goodbye My Lover.mp3 [2010/12/27 20:05:39 | 000,001,043 | ---- | C] () -- C:\Users\Bartek\Application Data\Microsoft\Internet Explorer\Quick Launch\PokerStars.lnk [2010/12/27 20:05:39 | 000,001,019 | ---- | C] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010/12/26 12:11:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYS2604.html [2010/12/26 12:11:32 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempbz2604.html [2010/12/13 05:58:53 | 000,024,576 | ---- | C] () -- C:\Windows\System32\FSRremoC.DLL [2010/12/12 17:44:38 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFWB320.html [2010/12/12 17:44:38 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgct320.html [2010/12/12 00:39:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempiUG292.html [2010/12/12 00:39:37 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGDM292.html [2010/12/11 00:21:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmi1040.html [2010/12/11 00:21:14 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHD1040.html [2010/12/10 02:34:44 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempjv1168.html [2010/12/10 02:34:44 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvN1168.html [2010/11/13 01:33:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempps2468.html [2010/11/13 01:33:30 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwM2468.html [2010/11/03 21:26:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqc2296.html [2010/11/03 21:26:00 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmr2296.html [2010/10/25 12:08:41 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll [2010/10/25 12:08:41 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2010/10/25 12:08:40 | 000,790,528 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2010/10/25 12:08:40 | 000,134,144 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2010/10/25 12:08:40 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010/10/16 21:35:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempPE3992.html [2010/10/16 21:35:08 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvD3992.html [2010/10/08 07:34:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempiq2604.html [2010/10/08 07:34:12 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempiv2604.html [2010/10/01 19:57:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRv1404.html [2010/10/01 19:57:45 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOy1404.html [2010/09/11 22:59:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIX2336.html [2010/09/11 22:59:05 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwS2336.html [2010/09/03 21:06:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempML2460.html [2010/09/03 21:06:24 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnv2460.html [2010/08/30 23:05:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZC2424.html [2010/08/30 23:05:55 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemprI2424.html [2010/08/30 23:03:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsZ2420.html [2010/08/30 23:03:25 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkU2420.html [2010/08/29 02:06:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temput2432.html [2010/08/29 02:06:42 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIr2432.html [2010/08/23 12:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempyD2484.html [2010/08/23 12:53:50 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXl2484.html [2010/08/18 21:07:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTr2404.html [2010/08/18 21:07:03 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaK2404.html [2010/08/18 19:03:59 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRO2396.html [2010/08/18 19:03:59 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTV2396.html [2010/08/15 15:34:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSs2496.html [2010/08/15 15:34:07 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempei2496.html [2010/08/08 16:14:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjL2580.html [2010/08/08 16:14:39 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOQ2580.html [2010/08/08 16:11:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempPB2632.html [2010/08/08 16:11:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempzH2632.html [2010/08/06 23:59:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temptn2816.html [2010/08/06 23:59:26 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgR2816.html [2010/07/26 11:40:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqf5824.html [2010/07/26 11:40:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgB5824.html [2010/07/25 22:11:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIm4996.html [2010/07/18 22:44:41 | 000,061,440 | ---- | C] () -- C:\Windows\System32\cygz.dll [2010/07/18 22:44:41 | 000,007,196 | ---- | C] () -- C:\Windows\System32\INI_Pro_3GP_AAC.ini [2010/07/18 22:44:41 | 000,006,490 | ---- | C] () -- C:\Windows\System32\INI_Pro_PSP.ini [2010/07/18 22:44:41 | 000,005,028 | ---- | C] () -- C:\Windows\System32\INI_Pro_3GP2_AAC.ini [2010/07/18 22:44:41 | 000,004,296 | ---- | C] () -- C:\Windows\System32\INI_Pro_Zune.ini [2010/07/18 22:44:41 | 000,003,045 | ---- | C] () -- C:\Windows\System32\INI_Pro_iPod.ini [2010/07/18 22:44:41 | 000,002,956 | ---- | C] () -- C:\Windows\System32\INI_Pro_PMP.ini [2010/07/18 22:44:41 | 000,002,910 | ---- | C] () -- C:\Windows\System32\INI_Pro_3GP_AMR.ini [2010/07/18 22:44:41 | 000,002,516 | ---- | C] () -- C:\Windows\System32\INI_Pro_PPC.ini [2010/07/18 22:44:41 | 000,002,175 | ---- | C] () -- C:\Windows\System32\INI_Pro_iPhone.ini [2010/07/18 22:44:41 | 000,001,964 | ---- | C] () -- C:\Windows\System32\INI_QT_3GPP2_QVGA_AAC.ini [2010/07/18 22:44:41 | 000,001,964 | ---- | C] () -- C:\Windows\System32\INI_QT_3GPP2_QCIF_AAC.ini [2010/07/18 22:44:41 | 000,001,878 | ---- | C] () -- C:\Windows\System32\INI_Pro_Xbox.ini [2010/07/18 22:44:41 | 000,001,814 | ---- | C] () -- C:\Windows\System32\INI_QT_3GPP_QVGA_AMR.ini [2010/07/18 22:44:41 | 000,001,814 | ---- | C] () -- C:\Windows\System32\INI_QT_3GPP_QVGA_AAC.ini [2010/07/18 22:44:41 | 000,001,814 | ---- | C] () -- C:\Windows\System32\INI_QT_3GPP_QCIF_AMR.ini [2010/07/18 22:44:41 | 000,001,814 | ---- | C] () -- C:\Windows\System32\INI_QT_3GPP_QCIF_AAC.ini [2010/07/18 22:44:41 | 000,001,739 | ---- | C] () -- C:\Windows\System32\INI_Pro_AppleTV.ini [2010/07/18 22:44:41 | 000,000,036 | ---- | C] () -- C:\Windows\System32\INI_Add_mfra.ini [2010/07/18 22:44:40 | 000,237,568 | ---- | C] () -- C:\Windows\System32\lame_enc.dll [2010/07/18 20:26:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWu2544.html [2010/07/18 12:55:26 | 000,000,563 | ---- | C] () -- C:\Users\Bartek\AppData\Roaming\AutoGK.ini [2010/07/17 21:55:21 | 000,007,168 | ---- | C] () -- C:\Users\Bartek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/07/05 18:36:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLD2500.html [2010/07/05 18:36:56 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempyZ2500.html [2010/07/04 22:21:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDv2476.html [2010/07/04 22:21:13 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZE2476.html [2010/07/03 00:41:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemprL2580.html [2010/07/03 00:41:28 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZd2580.html [2010/07/03 00:39:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCT2076.html [2010/07/03 00:39:27 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDx2076.html [2010/06/29 23:07:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIo2392.html [2010/06/29 23:07:17 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempyc2392.html [2010/06/29 23:05:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempzU5044.html [2010/06/29 23:05:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempPV5044.html [2010/06/26 00:09:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRD2816.html [2010/06/26 00:09:08 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempJn2816.html [2010/06/15 23:42:46 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAI2808.html [2010/06/15 23:42:46 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkq2808.html [2010/06/02 22:15:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempei2616.html [2010/06/02 22:15:26 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempga2616.html [2010/05/26 21:17:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempwr3392.html [2010/05/26 21:17:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMI3392.html [2010/05/26 21:15:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuD4868.html [2010/05/26 21:15:12 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplG4868.html [2010/05/26 20:46:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfC5124.html [2010/05/26 20:46:20 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKv5124.html [2010/05/22 19:25:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeV2148.html [2010/05/22 19:25:55 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFA2148.html [2010/05/17 15:39:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLt2264.html [2010/05/17 15:39:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCN2264.html [2010/05/02 03:42:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGE2088.html [2010/05/02 03:42:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRH2088.html [2010/05/01 22:06:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemphT2088.html [2010/05/01 22:06:41 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphe2088.html [2010/04/25 13:09:50 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTT3184.html [2010/04/25 13:09:50 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkn3184.html [2010/04/14 22:40:46 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYD3200.html [2010/04/14 22:40:46 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempyL3200.html [2010/04/11 00:23:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQe2456.html [2010/04/11 00:23:26 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGh2456.html [2010/04/10 21:19:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLr2340.html [2010/04/10 21:19:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempwp2340.html [2010/04/10 21:15:29 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempwq4084.html [2010/04/10 21:15:29 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempal4084.html [2010/04/06 21:58:43 | 000,000,110 | ---- | C] () -- C:\Users\Bartek\AppData\Roaming\burnaware.ini [2010/04/06 21:50:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnU5260.html [2010/04/06 21:50:43 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAd5260.html [2010/04/02 18:17:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIe2868.html [2010/04/02 18:17:40 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcL2868.html [2010/04/02 17:52:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempzP2380.html [2010/04/02 17:52:56 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjB2380.html [2010/04/02 17:40:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvj2248.html [2010/04/02 17:40:09 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOj2248.html [2010/03/30 00:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempJh4284.html [2010/03/30 00:41:32 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLe4284.html [2010/03/16 15:08:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEK2068.html [2010/03/16 15:08:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXq2068.html [2010/03/12 13:15:59 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempjo2360.html [2010/03/12 13:15:59 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxg2360.html [2010/03/07 14:06:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempjq1172.html [2010/03/07 14:06:17 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAz1172.html [2010/03/02 20:31:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNp3788.html [2010/03/02 20:31:00 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTG3788.html [2010/03/02 11:27:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTS2432.html [2010/03/02 11:27:37 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemphY2432.html [2009/07/13 15:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009/07/13 15:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009/07/13 15:24:44 | 000,090,112 | ---- | C] () -- C:\Users\Bartek\AppData\Local\stldbi.dll [2007/12/31 23:10:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZQ2072.html [2007/12/31 23:10:19 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFO2072.html [2005/04/15 13:24:38 | 001,191,936 | ---- | C] () -- C:\Windows\System32\lxcgserv.dll [2005/04/15 13:18:30 | 000,483,328 | ---- | C] () -- C:\Windows\System32\lxcglmpm.dll [2005/04/15 13:18:00 | 000,413,696 | ---- | C] () -- C:\Windows\System32\lxcgcomm.dll [2005/04/15 13:15:42 | 000,114,688 | ---- | C] () -- C:\Windows\System32\lxcgpplc.dll [2005/04/15 13:14:42 | 000,708,608 | ---- | C] () -- C:\Windows\System32\lxcgcomc.dll [2005/04/15 13:13:56 | 000,155,648 | ---- | C] () -- C:\Windows\System32\lxcgprox.dll [2005/04/15 13:06:40 | 001,134,592 | ---- | C] () -- C:\Windows\System32\lxcgusb1.dll [2005/03/14 01:45:20 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxcgvs.dll [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:A66A990E @Alternate Data Stream - 12 bytes -> C:\Windows\System32:{4B9A1497-0817-47C4-9612-D6A1C53ACF57} < End of report >

**Posty:** 8001 · przez **Okocza** 20 Sty 2011, 19:03

cieszko8, infekcja jest...

Zastosuj sobie Combofixa...

**Posty:** 201 · przez **cieszko8** 21 Sty 2011, 05:17

nie pozwoli mi go uruchomic

. Moge jedynie uruchomic winampa firefoxa jak narazie .

Dodano 22.01.2011 06:24:34:
windows probuje uruchomic combofix ale po chwili pokazuje sie niebieski obraz i pisze "IRQ not LESS or EQUAL" prosze o pomoc