OTL:
- Kod: Zaznacz wszystko
OTL logfile created on: 2010-01-09 19:30:44 - Run 2
OTL by OldTimer - Version 3.1.22.0 Folder = E:\hijackthis
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
510,00 Mb Total Physical Memory | 99,00 Mb Available Physical Memory | 19,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 63,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 15,04 Gb Total Space | 8,93 Gb Free Space | 59,38% Space Free | Partition Type: NTFS
Drive D: | 40,04 Gb Total Space | 12,48 Gb Free Space | 31,17% Space Free | Partition Type: NTFS
Drive E: | 40,04 Gb Total Space | 18,78 Gb Free Space | 46,91% Space Free | Partition Type: NTFS
Drive F: | 40,04 Gb Total Space | 24,34 Gb Free Space | 60,79% Space Free | Partition Type: NTFS
Drive G: | 13,88 Gb Total Space | 5,72 Gb Free Space | 41,18% Space Free | Partition Type: NTFS
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: CZESIEK
Current User Name: XP
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010-01-09 19:24:00 | 00,543,232 | ---- | M] (OldTimer Tools) -- E:\hijackthis\OTL.exe
PRC - [2010-01-09 19:16:20 | 00,396,288 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
PRC - [2010-01-09 00:31:04 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-11-25 00:51:40 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009-11-25 00:51:35 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-11-25 00:51:21 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009-11-25 00:48:48 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-11-25 00:43:56 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009-10-09 12:11:12 | 25,623,336 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2009-10-09 12:11:12 | 00,078,008 | R--- | M] (Skype Technologies) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe
PRC - [2009-08-31 17:07:34 | 11,391,592 | ---- | M] (GG Network S.A.) -- C:\Program Files\Nowe Gadu-Gadu\gg.exe
PRC - [2009-08-31 15:56:26 | 00,077,824 | ---- | M] () -- C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe
PRC - [2008-05-17 13:36:34 | 01,503,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-12-05 02:41:00 | 00,155,716 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2007-09-05 10:20:12 | 00,036,352 | ---- | M] (VisualTaskTips.com) -- C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe
PRC - [2006-08-04 13:59:16 | 00,062,976 | ---- | M] (Alexander Avdonin) -- C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
PRC - [2005-04-10 17:04:27 | 01,163,264 | ---- | M] () -- C:\Program Files\DC++\DCPlusPlus.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010-01-09 19:24:00 | 00,543,232 | ---- | M] (OldTimer Tools) -- E:\hijackthis\OTL.exe
MOD - [2009-11-25 00:50:32 | 00,139,264 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll
MOD - [2007-09-05 10:20:04 | 00,007,680 | ---- | M] () -- C:\Program Files\Utilities\VisualTaskTips\VttHooks.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2009-11-25 00:51:35 | 00,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009-11-25 00:51:21 | 00,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009-11-25 00:48:48 | 00,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009-11-25 00:43:56 | 00,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2007-12-05 02:41:00 | 00,155,716 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2010-01-02 14:04:03 | 00,013,824 | ---- | M] (LoteSoft Co.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\splitcam.sys -- (SPLITCAM)
DRV - [2009-11-25 00:50:59 | 00,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2009-11-25 00:50:12 | 00,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2009-11-25 00:50:00 | 00,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009-11-25 00:49:07 | 00,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009-11-25 00:48:57 | 00,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2009-11-25 00:47:54 | 00,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2008-05-17 13:49:14 | 00,016,896 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\VIBUS.sys -- (VIBUS)
DRV - [2008-05-17 13:49:14 | 00,009,216 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\VIDEX32.sys -- (VIDEX32)
DRV - [2008-04-13 21:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2008-03-31 15:12:16 | 00,073,728 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2008-01-24 22:36:16 | 04,127,488 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2007-12-05 02:41:00 | 07,435,392 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2007-11-21 00:09:22 | 00,104,320 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2003-07-02 03:42:00 | 00,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
DRV - [2001-08-23 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie_rsearch.html
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-20\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-789336058-790525478-1417001333-1002\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-21-789336058-790525478-1417001333-1002\S-1-5-21-789336058-790525478-1417001333-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-789336058-790525478-1417001333-1002\S-1-5-21-789336058-790525478-1417001333-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.startup.homepage: "pejaslumsattack.pl"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 48
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-01-09 00:31:14 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-01-09 00:31:13 | 00,000,000 | ---D | M]
[2009-10-19 18:37:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\XP\Dane aplikacji\Mozilla\Extensions
[2010-01-09 19:24:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\XP\Dane aplikacji\Mozilla\Firefox\Profiles\0ccc3rbb.default\extensions
[2009-10-22 14:29:03 | 00,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\XP\Dane aplikacji\Mozilla\Firefox\Profiles\0ccc3rbb.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010-01-09 19:24:17 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009-12-05 22:43:18 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-12-05 22:43:18 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-12-05 22:43:18 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-12-05 22:43:18 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-12-05 22:43:18 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-12-05 22:43:18 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
O1 HOSTS File: (742 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKU\.DEFAULT..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKU\.DEFAULT..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (Alexander Avdonin)
O4 - HKU\.DEFAULT..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com)
O4 - HKU\S-1-5-18..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKU\S-1-5-18..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (Alexander Avdonin)
O4 - HKU\S-1-5-18..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com)
O4 - HKU\S-1-5-20..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKU\S-1-5-20..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (Alexander Avdonin)
O4 - HKU\S-1-5-20..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com)
O4 - HKU\S-1-5-21-789336058-790525478-1417001333-1002..\Run: [eyeBeam SIP Client] File not found
O4 - HKU\S-1-5-21-789336058-790525478-1417001333-1002..\Run: [Nowe Gadu-Gadu] C:\Program Files\Nowe Gadu-Gadu\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-789336058-790525478-1417001333-1002..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKU\S-1-5-21-789336058-790525478-1417001333-1002..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (Alexander Avdonin)
O4 - HKU\S-1-5-21-789336058-790525478-1417001333-1002..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com)
O4 - Startup: C:\Documents and Settings\Gość\Menu Start\Programy\Autostart\Magnifier.lnk = C:\WINDOWS\system32\magnify.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\XP\Menu Start\Programy\Autostart\DCPlusPlus.lnk = C:\Program Files\DC++\DCPlusPlus.exe ()
O4 - Startup: C:\Documents and Settings\XP\Menu Start\Programy\Autostart\siszyd32.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O15 - HKU\.DEFAULT\..Trusted Domains: google.com ([mail] https in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-18\..Trusted Domains: google.com ([mail] https in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-20\..Trusted Domains: google.com ([mail] https in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\..Trusted Domains: google.com ([mail] https in Trusted sites)
O15 - HKU\S-1-5-21-789336058-790525478-1417001333-1002\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 94.246.128.5 94.246.128.26 194.6.246.23
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - File not found
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O27 - HKLM IFEO\notepad.exe: Debugger - C:\WINDOWS\system32\Notepad2.exe ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-10-18 17:43:24 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2010-01-09 19:16:20 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010-01-09 15:35:45 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\XP\Recent
[2010-01-07 08:09:16 | 00,048,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010-01-07 08:09:16 | 00,027,408 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010-01-07 08:09:16 | 00,023,120 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010-01-07 08:09:14 | 00,114,768 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010-01-07 08:09:14 | 00,097,480 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\AvastSS.scr
[2010-01-07 08:09:14 | 00,020,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010-01-07 08:09:13 | 00,094,160 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010-01-07 08:09:13 | 00,093,424 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010-01-07 08:08:59 | 01,280,480 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2009-12-24 14:28:34 | 00,000,000 | ---D | C] -- C:\Program Files\WinISD
[2009-12-22 14:05:00 | 00,000,000 | ---D | C] -- C:\Program Files\PROnetworks
[2009-12-22 14:03:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\XP\Ustawienia lokalne\Dane aplikacji\NeoSmart_Technologies
[2009-12-22 14:02:43 | 00,000,000 | ---D | C] -- C:\Program Files\NeoSmart Technologies
[2009-12-22 13:16:57 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss
[2009-12-22 12:48:11 | 00,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2009-12-22 12:36:59 | 00,000,000 | -HSD | C] -- C:\Boot
[2009-10-18 17:56:44 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2009-10-18 17:47:50 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-10-18 17:47:50 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2009-10-18 17:43:18 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010-01-09 19:38:00 | 00,000,460 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{F71A96F5-4342-4A40-902A-D4CA8E141507}.job
[2010-01-09 19:17:22 | 00,000,480 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{343863B9-200A-40BA-899C-E99131B10096}.job
[2010-01-09 15:35:56 | 04,194,304 | -H-- | M] () -- C:\Documents and Settings\XP\NTUSER.DAT
[2010-01-09 15:35:56 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\XP\ntuser.ini
[2010-01-09 15:24:44 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-01-09 15:24:34 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-01-09 00:48:06 | 06,977,216 | -H-- | M] () -- C:\Documents and Settings\XP\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-01-08 22:22:51 | 00,000,142 | ---- | M] () -- C:\WINDOWS\System32\fjhdyfhsn.bat
[2010-01-08 22:22:43 | 00,000,004 | ---- | M] () -- C:\Documents and Settings\XP\Dane aplikacji\avdrn.dat
[2010-01-08 07:45:27 | 00,000,155 | ---- | M] () -- C:\WINDOWS\winamp.ini
[2010-01-07 08:16:21 | 00,002,645 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010-01-06 15:16:44 | 00,033,792 | ---- | M] () -- C:\Documents and Settings\XP\Pulpit\Zadanie.xls
[2010-01-05 14:59:23 | 01,130,852 | ---- | M] () -- C:\Documents and Settings\XP\Moje dokumenty\20100105011(1).jpg
[2010-01-05 14:58:16 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\XP\Moje dokumenty\20100105011.jpg
[2010-01-05 14:58:12 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\XP\20100105011.jpg
[2010-01-03 13:24:30 | 00,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010-01-03 13:24:30 | 00,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2010-01-02 14:04:03 | 00,013,824 | ---- | M] (LoteSoft Co.) -- C:\WINDOWS\System32\drivers\splitcam.sys
[2009-12-28 20:23:15 | 00,124,928 | ---- | M] () -- C:\Documents and Settings\XP\Pulpit\rozliczenie.doc
[2009-12-27 15:03:22 | 00,026,112 | ---- | M] () -- C:\Documents and Settings\XP\Pulpit\dieta.doc
[2009-12-26 11:16:16 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-12-22 13:58:47 | 00,000,353 | -HS- | M] () -- C:\boot.ini
[2009-12-22 13:32:12 | 00,000,491 | ---- | M] () -- C:\WINDOWS\win.ini
[2009-12-22 13:32:12 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009-12-22 12:47:42 | 00,171,136 | RHS- | M] () -- C:\W7LDR
[2009-12-22 12:37:01 | 00,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2009-12-22 11:37:57 | 00,002,562 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2009-12-22 11:37:57 | 00,001,908 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2009-12-20 14:12:23 | 00,050,453 | ---- | M] () -- C:\Documents and Settings\XP\Pulpit\Zdjęcie001[1].jpg
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010-01-08 22:22:51 | 00,000,142 | ---- | C] () -- C:\WINDOWS\System32\fjhdyfhsn.bat
[2010-01-08 22:22:43 | 00,000,004 | ---- | C] () -- C:\Documents and Settings\XP\Dane aplikacji\avdrn.dat
[2010-01-07 08:08:59 | 00,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx
[2010-01-05 16:41:00 | 00,033,792 | ---- | C] () -- C:\Documents and Settings\XP\Pulpit\Zadanie.xls
[2010-01-05 14:58:52 | 01,130,852 | ---- | C] () -- C:\Documents and Settings\XP\Moje dokumenty\20100105011(1).jpg
[2010-01-05 14:58:16 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\XP\Moje dokumenty\20100105011.jpg
[2010-01-05 14:58:12 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\XP\20100105011.jpg
[2010-01-03 13:24:30 | 00,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2010-01-03 13:24:30 | 00,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2009-12-23 12:40:02 | 00,124,928 | ---- | C] () -- C:\Documents and Settings\XP\Pulpit\rozliczenie.doc
[2009-12-22 14:02:53 | 00,000,480 | -H-- | C] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{343863B9-200A-40BA-899C-E99131B10096}.job
[2009-12-22 12:47:42 | 00,171,136 | RHS- | C] () -- C:\W7LDR
[2009-12-22 12:37:01 | 00,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2009-12-22 12:37:00 | 00,000,211 | -H-- | C] () -- C:\Boot.BAK
[2009-12-22 12:36:59 | 00,383,562 | RHS- | C] () -- C:\bootmgr
[2009-10-18 19:34:33 | 01,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2009-10-18 19:34:33 | 01,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2009-10-18 19:34:33 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2009-10-18 19:34:33 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2009-10-18 19:28:14 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2009-10-18 19:23:50 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2009-10-18 18:24:48 | 00,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-10-18 18:23:10 | 08,676,883 | ---- | C] () -- C:\WINDOWS\System32\NCMedia2.dll
[2009-10-18 18:13:03 | 00,000,155 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2009-10-18 18:12:25 | 00,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-10-18 18:12:25 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009-10-18 18:12:23 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009-10-18 18:12:23 | 00,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-10-18 18:12:23 | 00,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-10-18 18:12:21 | 00,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-10-18 18:12:21 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-10-18 17:38:56 | 00,000,058 | ---- | C] () -- C:\WINDOWS\System32\Notepad2.ini
[2009-10-18 17:38:55 | 00,175,616 | ---- | C] () -- C:\WINDOWS\System32\mmm.dll
[2009-10-18 17:38:54 | 00,001,630 | ---- | C] () -- C:\WINDOWS\System32\metapath.ini
[2009-10-18 17:38:42 | 00,394,752 | ---- | C] () -- C:\WINDOWS\System32\cygwinb19.dll
[2008-04-14 21:50:36 | 00,056,880 | ---- | C] () -- C:\WINDOWS\System32\scvideo.dll
[2008-03-06 01:37:26 | 00,000,183 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[color=#E56717]========== LOP Check ==========[/color]
[2009-12-21 14:25:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-10-18 17:54:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-10-18 17:54:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\URSoft
[2009-10-18 17:40:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\uTorrent
[2009-10-18 17:41:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\Xentient
[2010-01-09 10:41:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Gość\Dane aplikacji\Nowe Gadu-Gadu
[2009-10-18 17:54:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Gość\Dane aplikacji\URSoft
[2009-10-18 17:40:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Gość\Dane aplikacji\uTorrent
[2009-10-18 17:41:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Gość\Dane aplikacji\Xentient
[2009-10-18 18:09:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\XP\Dane aplikacji\NCH Swift Sound
[2010-01-03 13:41:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\XP\Dane aplikacji\Nowe Gadu-Gadu
[2009-11-17 15:08:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\XP\Dane aplikacji\OpenFM
[2009-10-18 17:54:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\XP\Dane aplikacji\URSoft
[2010-01-02 12:47:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\XP\Dane aplikacji\uTorrent
[2009-10-18 17:41:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\XP\Dane aplikacji\Xentient
[2010-01-09 19:17:22 | 00,000,480 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{343863B9-200A-40BA-899C-E99131B10096}.job
[2010-01-09 19:38:00 | 00,000,460 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{F71A96F5-4342-4A40-902A-D4CA8E141507}.job
[color=#E56717]========== Purity Check ==========[/color]
< End of report >
i to 2-gie
- Kod: Zaznacz wszystko
Logfile of random's system information tool 1.06 (written by random/random)
Run by XP at 2010-01-09 19:43:55
Microsoft Windows XP Professional Dodatek Service Pack 3
System drive C: has 9 GB (59%) free of 15 GB
Total RAM: 510 MB (29% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:44:44, on 2010-01-09
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nowe Gadu-Gadu\gg.exe
C:\Program Files\DC++\DCPlusPlus.exe
C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
E:\hijackthis\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\XP.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
O4 - HKCU\..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe"
O4 - HKUS\S-1-5-20\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'Default user')
O4 - S-1-5-18 Startup: DCPlusPlus.lnk = C:\Program Files\DC++\DCPlusPlus.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: siszyd32.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: DCPlusPlus.lnk = C:\Program Files\DC++\DCPlusPlus.exe (User 'Default user')
O4 - .DEFAULT Startup: siszyd32.exe (User 'Default user')
O4 - Startup: DCPlusPlus.lnk = C:\Program Files\DC++\DCPlusPlus.exe
O4 - Startup: siszyd32.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 4892 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\User_Feed_Synchronization-{343863B9-200A-40BA-899C-E99131B10096}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{F71A96F5-4342-4A40-902A-D4CA8E141507}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll [2008-03-25 509328]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-12-05 8523776]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TaskSwitchXP"=C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe [2006-08-04 62976]
"VisualTaskTips"=C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe [2007-09-05 36352]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-05-17 40448]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"Nowe Gadu-Gadu"=C:\Program Files\Nowe Gadu-Gadu\gg.exe [2009-08-31 11391592]
"eyeBeam SIP Client"= []
C:\Documents and Settings\XP\Menu Start\Programy\Autostart
DCPlusPlus.lnk - C:\Program Files\DC++\DCPlusPlus.exe
siszyd32.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-05-16 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=0
"SynchronousUserGroupPolicy"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoSMHelp"=1
"NoSMConfigurePrograms"=1
"NoInstrumentation"=1
"NoStartMenuMFUprogramsList"=1
"NoResolveTrack"=1
"NoResolveSearch"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======File associations======
.bat - edit - C:\WINDOWS\system32\Notepad2.exe %1
.cmd - edit - C:\WINDOWS\system32\Notepad2.exe %1
.inf - open - C:\WINDOWS\system32\Notepad2.exe %1
.ini - open - C:\WINDOWS\system32\Notepad2.exe %1
.js - edit - C:\WINDOWS\system32\Notepad2.exe %1
.reg - edit - C:\WINDOWS\system32\Notepad2.exe %1
.txt - open - C:\WINDOWS\system32\Notepad2.exe %1
.vbs - edit - C:\WINDOWS\system32\Notepad2.exe %1
======List of files/folders created in the last 1 months======
2010-01-09 19:43:54 ----D---- C:\rsit
2010-01-09 19:16:20 ----D---- C:\Program Files\Trend Micro
2010-01-08 22:22:51 ----A---- C:\WINDOWS\system32\fjhdyfhsn.bat
2010-01-07 08:08:59 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-12-24 14:28:34 ----D---- C:\Program Files\WinISD
2009-12-22 14:05:00 ----D---- C:\Program Files\PROnetworks
2009-12-22 14:02:43 ----D---- C:\Program Files\NeoSmart Technologies
2009-12-22 13:16:57 ----D---- C:\WINDOWS\pss
2009-12-22 12:48:11 ----SHD---- C:\$RECYCLE.BIN
2009-12-22 12:37:01 ----RASH---- C:\BOOTSECT.BAK
2009-12-22 12:37:00 ----H---- C:\Boot.BAK
2009-12-22 12:36:59 ----SHD---- C:\Boot
======List of files/folders modified in the last 1 months======
2010-01-09 19:43:53 ----D---- C:\WINDOWS\Prefetch
2010-01-09 19:32:31 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-09 19:16:20 ----D---- C:\Program Files
2010-01-09 19:14:58 ----D---- C:\WINDOWS\Temp
2010-01-09 19:14:31 ----D---- C:\Documents and Settings\XP\Dane aplikacji\Skype
2010-01-09 19:14:27 ----D---- C:\Documents and Settings\XP\Dane aplikacji\skypePM
2010-01-09 19:14:21 ----D---- C:\Program Files\Mozilla Firefox
2010-01-09 19:13:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-09 15:35:17 ----D---- C:\Program Files\DC++
2010-01-08 22:25:30 ----D---- C:\WINDOWS\system32\drivers
2010-01-08 22:22:51 ----D---- C:\WINDOWS\system32
2010-01-08 07:45:27 ----A---- C:\WINDOWS\winamp.ini
2010-01-03 13:41:21 ----D---- C:\Documents and Settings\XP\Dane aplikacji\Nowe Gadu-Gadu
2010-01-03 13:24:43 ----D---- C:\Documents and Settings\XP\Dane aplikacji\vlc
2010-01-03 13:24:30 ----D---- C:\WINDOWS
2010-01-02 14:04:21 ----HD---- C:\WINDOWS\inf
2010-01-02 14:04:18 ----D---- C:\WINDOWS\LastGood
2010-01-02 12:47:11 ----D---- C:\Documents and Settings\XP\Dane aplikacji\uTorrent
2009-12-26 12:13:11 ----A---- C:\WINDOWS\ntbtlog.txt
2009-12-26 12:13:02 ----SHD---- C:\WINDOWS\CSC
2009-12-26 11:44:04 ----D---- C:\Documents and Settings
2009-12-26 11:16:01 ----RSD---- C:\WINDOWS\Fonts
2009-12-25 14:45:58 ----SD---- C:\Documents and Settings\XP\Dane aplikacji\Microsoft
2009-12-23 19:37:58 ----SHD---- C:\WINDOWS\Installer
2009-12-22 14:02:53 ----SD---- C:\WINDOWS\Tasks
2009-12-22 14:02:51 ----RSD---- C:\WINDOWS\assembly
2009-12-22 13:58:47 ----ASH---- C:\boot.ini
2009-12-22 13:58:14 ----D---- C:\Documents and Settings\XP\Dane aplikacji\Adobe
2009-12-22 13:32:12 ----A---- C:\WINDOWS\win.ini
2009-12-22 13:32:12 ----A---- C:\WINDOWS\system.ini
2009-12-22 12:39:00 ----SHD---- C:\System Volume Information
2009-12-21 14:25:11 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-01-24 4127488]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-12-05 7435392]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-21 104320]
R3 SPLITCAM;Splitcam, WDM Camera Stream Splitter; C:\WINDOWS\system32\DRIVERS\splitcam.sys [2010-01-02 13824]
R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 CCDECODE;Dekoder napisów; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Koder-dekoder NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Połączenie TV/wideo firmy Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Kodery-dekodery teletekstu w standardzie światowym; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-05-16 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-05-16 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-12-05 155716]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
