Wirus nmdfgds0.dll

[exekonrad]

Witam. Wlasnie avast wykryl u mnie tego wirusa. Czytalem na forum i probowalem go usunac, juz nawet doszedlem do jego przyczyny, jednak nie dalo rady nic z tym robic. Przeskanowalem kompa Hijackthis. Ponizej wrzucam loga. Prosze napiszcie mi co moge zrobic zeby go usunac!

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:45:31, on 2009-07-10
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\MSTMON_Q.EXE
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\RtkBtMnt.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Documents and Settings\Admininistratorr\Dane aplikacji\U3\087663191FC1B96C\LaunchPad.exe
G:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [BEWINTERNET-PLSessionManager] C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [KONICA MINOLTA PagePro 1350WStatusDisplay] C:\WINDOWS\system32\MSTMON_Q.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://217.117.128.162/activex/AxisCamControl.cab
O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A41} (SignActivX Control) - https://www.pekaobiznes24.pl/sme/static/components/SignActivXPEKAO.cab
O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} (SignActivX Control) - https://www.bph.pl/sezam/components/SignActivX.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe

--
End of file - 5270 bytes


Jest jeszcze jeden problem. Drugi komputer na ktorym staram sie to naprawic, rowniez odnajduje rozne pokrewne wirusy. PROSZE O SZYBKA POMOC!

[wojtas]

Pobierz OTL i daj z niego loga

[exekonrad]

Kod: Zaznacz wszystko

[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1045
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\system32
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\system
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\security
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\repair
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\mui
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\Media
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\java
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\ime
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\Help
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\Config
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\addins
[2009-07-10 19:47:54 | 00,000,000 | ---D | C] -- C:\WINDOWS
[2009-07-10 19:31:12 | 00,000,083 | ---- | C] () -- C:\WINDOWS\LManager.UNI
[2009-07-10 19:31:10 | 00,000,000 | ---D | C] -- C:\Program Files\Launch Manager
[2009-07-10 19:31:09 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Setup.INI
[2009-07-10 19:29:37 | 00,754,688 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\bcmwl564.sys
[2009-07-10 19:29:37 | 00,604,928 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\bcmwl5.sys
[2009-07-10 19:29:37 | 00,549,158 | ---- | C] () -- C:\WINDOWS\System32\drivers\bcmwl5.inf
[2009-07-10 19:29:37 | 00,028,544 | ---- | C] (Inprocomm, Inc.) -- C:\WINDOWS\System32\drivers\callistx.sys
[2009-07-10 19:29:37 | 00,011,986 | ---- | C] () -- C:\WINDOWS\System32\drivers\bcm43xx64.cat
[2009-07-10 19:29:37 | 00,011,986 | ---- | C] () -- C:\WINDOWS\System32\drivers\bcm43xx.cat
[2009-07-10 19:29:37 | 00,000,000 | ---D | C] -- C:\Program Files\Broadcom
[2009-07-10 19:28:39 | 00,017,408 | ---- | C] (Dritek System Inc.) -- C:\WINDOWS\System32\drivers\DKbFltr.SYS
[2009-07-10 19:28:39 | 00,005,120 | ---- | C] (Dritek System Inc.) -- C:\WINDOWS\System32\FILTRCOI.DLL
[2009-07-10 19:28:36 | 00,199,440 | ---- | C] (Dritek System Inc.) -- C:\WINDOWS\UNINST32.EXE
[2009-07-10 19:27:25 | 02,808,832 | ---- | C] (RealTek Semicoductor Corp.) -- C:\WINDOWS\alcwzrd.exe
[2009-07-10 19:27:22 | 16,132,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.exe
[2009-07-10 19:27:22 | 09,715,200 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTLCPL.exe
[2009-07-10 19:27:22 | 04,424,192 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys
[2009-07-10 19:27:22 | 02,162,688 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\MicCal.exe
[2009-07-10 19:27:22 | 01,826,816 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SkyTel.exe
[2009-07-10 19:27:22 | 01,191,936 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlUpd.exe
[2009-07-10 19:27:22 | 00,299,008 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\ALSndMgr.cpl
[2009-07-10 19:27:22 | 00,282,624 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RTSndMgr.cpl
[2009-07-10 19:27:22 | 00,086,016 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SoundMan.exe
[2009-07-10 19:27:22 | 00,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009-07-10 19:27:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM
[2009-07-10 19:26:39 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009-07-10 19:26:39 | 00,000,000 | ---D | C] -- C:\Program Files\Realtek
[2009-07-10 19:26:33 | 00,520,192 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlExUpd.dll
[2009-07-10 19:26:33 | 00,315,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\HideWin.exe
[2009-07-10 19:24:55 | 00,215,904 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\drivers\SynTP.sys
[2009-07-10 19:24:55 | 00,196,608 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynCtrl.dll
[2009-07-10 19:24:55 | 00,163,840 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynCOM.dll
[2009-07-10 19:24:55 | 00,147,456 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynTPAPI.dll
[2009-07-10 19:24:55 | 00,110,592 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynTPCo4.dll
[2009-07-10 19:24:55 | 00,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2009-07-10 19:24:44 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2009-07-10 19:24:15 | 00,180,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxres.dll
[2009-07-10 19:22:43 | 00,188,416 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrita.lrc
[2009-07-10 19:22:43 | 00,184,320 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrfra.lrc
[2009-07-10 19:22:43 | 00,172,032 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrtrk.lrc
[2009-07-10 19:22:43 | 00,172,032 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrsve.lrc
[2009-07-10 19:22:43 | 00,172,032 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrdan.lrc
[2009-07-10 19:22:43 | 00,155,648 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrheb.lrc
[2009-07-10 19:22:43 | 00,142,104 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxtray.exe
[2009-07-10 19:22:43 | 00,138,008 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxpers.exe
[2009-07-10 19:22:43 | 00,131,072 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrjpn.lrc
[2009-07-10 19:22:43 | 00,126,976 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrkor.lrc
[2009-07-10 19:22:43 | 00,057,344 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxprd32.dll
[2009-07-10 19:22:43 | 00,024,576 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxexps.dll
[2009-07-10 19:22:42 | 05,761,728 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\drivers\igxpmp32.sys
[2009-07-10 19:22:42 | 01,717,504 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxpdv32.dll
[2009-07-10 19:22:42 | 01,576,960 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\ig4dev32.dll
[2009-07-10 19:22:42 | 00,527,128 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxcfg.exe
[2009-07-10 19:22:42 | 00,252,696 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxsrvc.exe
[2009-07-10 19:22:42 | 00,180,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrptg.lrc
[2009-07-10 19:22:42 | 00,176,128 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrcsy.lrc
[2009-07-10 19:22:42 | 00,172,032 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrnor.lrc
[2009-07-10 19:22:42 | 00,170,776 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxzoom.exe
[2009-07-10 19:22:42 | 00,166,680 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxext.exe
[2009-07-10 19:22:42 | 00,163,840 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrtha.lrc
[2009-07-10 19:22:42 | 00,159,744 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrara.lrc
[2009-07-10 19:22:42 | 00,150,528 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxpgd32.dll
[2009-07-10 19:22:42 | 00,102,400 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\hccutils.dll
[2009-07-10 19:22:42 | 00,047,616 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxsrvc.dll
[2009-07-10 19:22:41 | 03,293,184 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxress.dll
[2009-07-10 19:22:41 | 02,681,344 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxpdx32.dll
[2009-07-10 19:22:41 | 02,383,872 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\ig4icd32.dll
[2009-07-10 19:22:41 | 00,910,464 | ---- | C] () -- C:\WINDOWS\System32\igmedkrn.dll
[2009-07-10 19:22:41 | 00,204,800 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxpph.dll
[2009-07-10 19:22:41 | 00,204,800 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxdev.dll
[2009-07-10 19:22:41 | 00,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4837.dll
[2009-07-10 19:22:41 | 00,192,512 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrell.lrc
[2009-07-10 19:22:41 | 00,192,512 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrdeu.lrc
[2009-07-10 19:22:41 | 00,188,416 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrnld.lrc
[2009-07-10 19:22:41 | 00,188,416 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxresp.lrc
[2009-07-10 19:22:41 | 00,180,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrrus.lrc
[2009-07-10 19:22:41 | 00,180,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrptb.lrc
[2009-07-10 19:22:41 | 00,180,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrplk.lrc
[2009-07-10 19:22:41 | 00,180,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrhun.lrc
[2009-07-10 19:22:41 | 00,176,128 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrsky.lrc
[2009-07-10 19:22:41 | 00,176,128 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrfin.lrc
[2009-07-10 19:22:41 | 00,172,032 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrslv.lrc
[2009-07-10 19:22:41 | 00,172,032 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrenu.lrc
[2009-07-10 19:22:41 | 00,162,584 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\hkcmd.exe
[2009-07-10 19:22:41 | 00,135,168 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxdo.dll
[2009-07-10 19:22:41 | 00,122,880 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxcpl.cpl
[2009-07-10 19:22:41 | 00,110,592 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrcht.lrc
[2009-07-10 19:22:41 | 00,110,592 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrchs.lrc
[2009-07-10 19:22:41 | 00,026,320 | ---- | C] () -- C:\WINDOWS\System32\igxpxs32.vp
[2009-07-10 19:22:41 | 00,002,096 | ---- | C] () -- C:\WINDOWS\System32\igxpxk32.vp
[2009-07-10 19:22:38 | 00,400,152 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\igxpun.exe
[2009-07-10 19:22:38 | 00,319,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\difxapi.dll
[2009-07-10 19:22:38 | 00,121,232 | ---- | C] () -- C:\WINDOWS\System32\IScrNBR.bmp
[2009-07-10 19:22:38 | 00,121,232 | ---- | C] () -- C:\WINDOWS\System32\IScrNB.bmp
[2009-07-10 19:22:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang
[2009-07-10 19:15:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2009-07-10 19:14:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2009-07-10 19:14:59 | 00,000,000 | ---D | C] -- C:\Program Files\Intel
[2009-07-10 19:14:52 | 00,000,000 | ---D | C] -- C:\Intel
[2009-07-10 19:09:32 | 00,019,455 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wVchNTxx.sys
[2009-07-10 19:09:31 | 00,702,845 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\i81xdnt5.dll
[2009-07-10 19:09:31 | 00,161,020 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\i81xnt5.sys
[2009-07-10 19:09:31 | 00,033,599 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wATV04nt.sys
[2009-07-10 19:09:31 | 00,029,311 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wATV01nt.sys
[2009-07-10 19:09:31 | 00,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wATV10nt.sys
[2009-07-10 19:09:31 | 00,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv04nt5.dll
[2009-07-10 19:09:31 | 00,023,615 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wCh7xxNT.sys
[2009-07-10 19:09:31 | 00,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wATV06nt.sys
[2009-07-10 19:09:31 | 00,021,183 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv01nt5.dll
[2009-07-10 19:09:31 | 00,019,551 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wATV02NT.sys
[2009-07-10 19:09:31 | 00,017,279 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv10nt5.dll
[2009-07-10 19:09:31 | 00,015,423 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\Ch7xxNT5.dll
[2009-07-10 19:09:31 | 00,014,143 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv06nt5.dll
[2009-07-10 19:09:31 | 00,012,415 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wADV01nt.sys
[2009-07-10 19:09:31 | 00,012,127 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wADV02NT.sys
[2009-07-10 19:09:31 | 00,012,063 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wSiINTxx.sys
[2009-07-10 19:09:31 | 00,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wADV11nt.sys
[2009-07-10 19:09:31 | 00,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wADV09NT.sys
[2009-07-10 19:09:31 | 00,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wADV07nt.sys
[2009-07-10 19:09:31 | 00,011,775 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wADV05NT.sys
[2009-07-10 19:09:31 | 00,011,359 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv02nt5.dll
[2009-07-10 19:09:31 | 00,011,325 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\Vchnt5.dll
[2009-07-10 19:09:31 | 00,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wADV08NT.sys
[2009-07-10 19:09:31 | 00,004,255 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv01nt5.dll
[2009-07-10 19:09:31 | 00,003,967 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv02nt5.dll
[2009-07-10 19:09:31 | 00,003,901 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\SiInt5.dll
[2009-07-10 19:09:31 | 00,003,775 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv11nt5.dll
[2009-07-10 19:09:31 | 00,003,711 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv09nt5.dll
[2009-07-10 19:09:31 | 00,003,647 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv07nt5.dll
[2009-07-10 19:09:31 | 00,003,615 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv05nt5.dll
[2009-07-10 19:09:31 | 00,003,135 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv08nt5.dll
[2009-07-10 19:08:01 | 00,004,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\loop.sys
[2009-07-10 19:01:55 | 00,000,767 | ---- | C] () -- C:\Documents and Settings\Salon\Pulpit\EVEREST Home Edition.lnk
[2009-07-10 19:01:53 | 00,000,000 | ---D | C] -- C:\Program Files\Lavalys
[2009-07-10 18:41:53 | 03,743,110 | -H-- | C] () -- C:\Documents and Settings\Salon\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-07-10 18:41:47 | 00,023,152 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2009-07-10 18:41:47 | 00,001,709 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Antivirus.lnk
[2009-07-10 18:41:46 | 00,051,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2009-07-10 18:41:46 | 00,026,944 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2009-07-10 18:41:45 | 00,097,480 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\AvastSS.scr
[2009-07-10 18:41:44 | 00,114,768 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2009-07-10 18:41:44 | 00,094,032 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2009-07-10 18:41:44 | 00,093,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2009-07-10 18:41:44 | 00,020,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2009-07-10 18:41:26 | 01,256,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2009-07-10 18:41:26 | 01,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71.dll
[2009-07-10 18:41:26 | 00,499,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVCP71.dll
[2009-07-10 18:41:26 | 00,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx
[2009-07-10 18:41:26 | 00,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVCR71.dll
[2009-07-10 18:41:24 | 00,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2009-07-10 18:41:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Salon\Dane aplikacji\U3
[2009-07-10 18:40:50 | 00,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS
[2009-07-10 18:28:47 | 00,107,217 | RHS- | C] () -- C:\p.exe
[2009-07-10 18:28:47 | 00,000,049 | RHS- | C] () -- C:\autorun.inf
[2009-07-10 18:15:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Salon\Dane aplikacji\Identities
[2009-07-10 18:15:25 | 00,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2009-07-10 18:15:21 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Salon\Moje dokumenty\Moje obrazy
[2009-07-10 18:15:21 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Salon\Moje dokumenty\Moja muzyka
[2009-07-10 18:15:17 | 00,000,000 | --SD | C] -- C:\Documents and Settings\Salon\Dane aplikacji\Microsoft
[2009-07-10 18:15:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Salon\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-07-10 18:14:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2009-07-10 18:13:58 | 00,000,006 | -H-- | C] () -- C:\WINDOWS\tasks\SA.DAT
[2009-07-10 18:13:58 | 00,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2009-07-10 18:13:58 | 00,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2009-07-10 18:13:42 | 00,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2009-07-10 18:12:46 | 00,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009-07-10 18:09:09 | 00,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tzchange.exe
[2009-07-10 18:07:23 | 00,062,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rspndr.sys
[2009-07-10 18:07:23 | 00,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rspndr.exe
[2009-07-10 18:06:00 | 00,022,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2009-07-10 18:05:45 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2009-07-10 18:05:41 | 01,055,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\danim.dll
[2009-07-10 18:05:41 | 00,667,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll
[2009-07-10 18:05:41 | 00,616,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll
[2009-07-10 18:05:41 | 00,532,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll
[2009-07-10 18:05:41 | 00,474,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shlwapi.dll
[2009-07-10 18:05:41 | 00,448,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll
[2009-07-10 18:05:41 | 00,357,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxtmsft.dll
[2009-07-10 18:05:41 | 00,205,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxtrans.dll
[2009-07-10 18:05:41 | 00,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdfview.dll
[2009-07-10 18:05:41 | 00,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msrating.dll
[2009-07-10 18:05:41 | 00,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inseng.dll
[2009-07-10 18:05:41 | 00,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\extmgr.dll
[2009-07-10 18:05:41 | 00,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pngfilt.dll
[2009-07-10 18:05:41 | 00,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedw.exe
[2009-07-10 18:05:41 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsproxy.dll
[2009-07-10 18:05:40 | 03,079,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[2009-07-10 18:05:40 | 01,497,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shdocvw.dll
[2009-07-10 18:05:40 | 01,022,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browseui.dll
[2009-07-10 18:05:40 | 00,251,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iepeers.dll
[2009-07-10 18:05:24 | 00,002,645 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-07-10 18:05:24 | 00,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2009-07-10 18:05:24 | 00,000,000 | RHS- | C] () -- C:\IO.SYS
[2009-07-10 18:05:24 | 00,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2009-07-10 18:05:24 | 00,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2009-07-10 18:05:15 | 00,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2009-07-10 18:05:15 | 00,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2009-07-10 18:05:14 | 00,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2009-07-10 18:05:04 | 00,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
[2009-07-10 18:04:09 | 00,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2009-07-10 18:04:08 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2009-07-10 18:04:08 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2009-07-10 18:04:08 | 00,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2009-07-10 18:04:02 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009-07-10 18:03:57 | 00,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2009-07-10 18:03:53 | 00,000,000 | ---D | C] -- C:\Program Files\Usługi online
[2009-07-10 18:03:31 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2009-07-10 18:03:04 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll
[2009-07-10 18:03:01 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2009-07-10 18:03:01 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2009-07-10 18:02:53 | 00,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg723.acm
[2009-07-10 18:02:53 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll
[2009-07-10 18:02:51 | 00,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll
[2009-07-10 18:02:50 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2009-07-10 18:02:47 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll
[2009-07-10 18:02:47 | 00,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2009-07-10 18:02:46 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2009-07-10 18:02:41 | 00,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2009-07-10 18:02:40 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2009-07-10 18:02:36 | 00,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll
[2009-07-10 18:02:36 | 00,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuweb.dll
[2009-07-10 18:02:36 | 00,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll
[2009-07-10 18:02:36 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauserv.dll
[2009-07-10 18:02:35 | 01,134,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng.dll
[2009-07-10 18:02:35 | 00,431,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2009-07-10 18:02:35 | 00,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe
[2009-07-10 18:02:35 | 00,163,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaucpl.cpl
[2009-07-10 18:02:35 | 00,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt.exe
[2009-07-10 18:02:35 | 00,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
[2009-07-10 18:02:34 | 00,382,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgr.dll
[2009-07-10 18:02:34 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll
[2009-07-10 18:02:34 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll
[2009-07-10 18:02:34 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll
[2009-07-10 18:02:29 | 00,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll
[2009-07-10 18:02:29 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll
[2009-07-10 18:02:29 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
[2009-07-10 18:02:29 | 00,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll
[2009-07-10 18:02:23 | 00,128,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fltMgr.sys
[2009-07-10 18:02:23 | 00,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltMc.exe
[2009-07-10 18:02:23 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltlib.dll
[2009-07-10 18:02:22 | 00,240,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
[2009-07-10 18:02:22 | 00,171,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srsvc.dll
[2009-07-10 18:02:22 | 00,073,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sr.sys
[2009-07-10 18:02:22 | 00,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srclient.dll
[2009-07-10 18:02:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2009-07-10 18:02:21 | 00,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msh261.drv
[2009-07-10 18:02:21 | 00,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll
[2009-07-10 18:02:21 | 00,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll
[2009-07-10 18:02:21 | 00,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll
[2009-07-10 18:02:21 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmsrvc.exe
[2009-07-10 18:02:21 | 00,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll
[2009-07-10 18:02:21 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll
[2009-07-10 18:02:17 | 00,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
[2009-07-10 18:02:17 | 00,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
[2009-07-10 18:02:17 | 00,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2009-07-10 18:02:15 | 00,679,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcomm.dll
[2009-07-10 18:02:15 | 00,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll
[2009-07-10 18:02:12 | 00,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstask.dll
[2009-07-10 18:02:12 | 00,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schedsvc.dll
[2009-07-10 18:02:12 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe
[2009-07-10 18:02:12 | 00,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2009-07-10 18:02:11 | 00,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll
[2009-07-10 18:02:11 | 00,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll
[2009-07-10 18:02:11 | 00,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll
[2009-07-10 18:02:11 | 00,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll
[2009-07-10 18:02:04 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2009-07-10 18:01:59 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje obrazy
[2009-07-10 18:01:59 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2009-07-10 18:01:36 | 00,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-07-10 18:01:23 | 00,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2009-07-10 18:01:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2009-07-10 18:01:07 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moja muzyka
[2009-07-10 18:01:07 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2009-07-10 18:01:02 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
[2009-07-10 18:00:51 | 00,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2009-07-10 18:00:51 | 00,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll
[2009-07-10 18:00:50 | 00,231,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll
[2009-07-10 18:00:50 | 00,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll
[2009-07-10 18:00:50 | 00,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe
[2009-07-10 18:00:50 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll
[2009-07-10 18:00:44 | 00,065,832 | ---- | C] () -- C:\WINDOWS\Stiuk z Santa Fe.bmp
[2009-07-10 18:00:44 | 00,026,680 | ---- | C] () -- C:\WINDOWS\Wachlarze.bmp
[2009-07-10 18:00:44 | 00,017,362 | ---- | C] () -- C:\WINDOWS\Rododendron.bmp
[2009-07-10 18:00:44 | 00,009,522 | ---- | C] () -- C:\WINDOWS\Indiański pled.bmp
[2009-07-10 18:00:43 | 00,065,978 | ---- | C] () -- C:\WINDOWS\Bąbelki.bmp
[2009-07-10 18:00:43 | 00,065,954 | ---- | C] () -- C:\WINDOWS\Pod mikroskopem.bmp
[2009-07-10 18:00:43 | 00,026,582 | ---- | C] () -- C:\WINDOWS\Nefryt.bmp
[2009-07-10 18:00:43 | 00,017,336 | ---- | C] () -- C:\WINDOWS\Na rybkach.bmp
[2009-07-10 18:00:43 | 00,017,062 | ---- | C] () -- C:\WINDOWS\Kawa.bmp
[2009-07-10 18:00:43 | 00,016,730 | ---- | C] () -- C:\WINDOWS\Puch.bmp
[2009-07-10 18:00:43 | 00,001,272 | ---- | C] () -- C:\WINDOWS\Niebieska koronka 16.bmp
[2009-07-10 18:00:42 | 00,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
[2009-07-10 18:00:42 | 00,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2009-07-10 18:00:42 | 00,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2009-07-10 18:00:42 | 00,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2009-07-10 18:00:42 | 00,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2009-07-10 18:00:42 | 00,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2009-07-10 18:00:42 | 00,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2009-07-10 18:00:42 | 00,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2009-07-10 18:00:41 | 00,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
[2009-07-10 18:00:41 | 00,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
[2009-07-10 18:00:41 | 00,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe
[2009-07-10 18:00:41 | 00,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2009-07-10 18:00:40 | 00,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe
[2009-07-10 18:00:40 | 00,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe
[2009-07-10 18:00:40 | 00,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe
[2009-07-10 18:00:40 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
[2009-07-10 18:00:39 | 00,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2009-07-10 18:00:39 | 00,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
[2009-07-10 18:00:39 | 00,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe
[2009-07-10 18:00:39 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe
[2009-07-10 18:00:39 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
[2009-07-10 18:00:39 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
[2009-07-10 18:00:39 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
[2009-07-10 18:00:39 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe
[2009-07-10 18:00:39 | 00,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
[2009-07-10 18:00:39 | 00,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2009-07-10 18:00:39 | 00,001,225 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2009-07-10 18:00:38 | 00,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
[2009-07-10 18:00:38 | 00,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
[2009-07-10 18:00:38 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
[2009-07-10 18:00:38 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll
[2009-07-10 18:00:38 | 00,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2009-07-10 18:00:37 | 00,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
[2009-07-10 18:00:37 | 00,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
[2009-07-10 18:00:37 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2009-07-10 18:00:37 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
[2009-07-10 18:00:36 | 00,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
[2009-07-10 18:00:36 | 00,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
[2009-07-10 18:00:36 | 00,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
[2009-07-10 18:00:36 | 00,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll
[2009-07-10 18:00:30 | 00,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2009-07-10 18:00:29 | 00,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe
[2009-07-10 18:00:29 | 00,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl
[2009-07-10 18:00:28 | 00,351,744 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll
[2009-07-10 18:00:28 | 00,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe
[2009-07-10 18:00:28 | 00,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe
[2009-07-10 18:00:27 | 00,345,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2009-07-10 18:00:27 | 00,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe
[2009-07-10 18:00:27 | 00,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2009-07-10 18:00:26 | 00,539,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe
[2009-07-10 18:00:26 | 00,139,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rdpwd.sys
[2009-07-10 18:00:26 | 00,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll
[2009-07-10 18:00:26 | 00,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdtcp.sys
[2009-07-10 18:00:26 | 00,012,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdpipe.sys
[2009-07-10 18:00:25 | 00,655,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstscax.dll
[2009-07-10 18:00:25 | 00,408,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstsc.exe
[2009-07-10 18:00:25 | 00,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll
[2009-07-10 18:00:25 | 00,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sessmgr.exe
[2009-07-10 18:00:25 | 00,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe
[2009-07-10 18:00:25 | 00,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\remotepg.dll
[2009-07-10 18:00:25 | 00,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe
[2009-07-10 18:00:25 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe
[2009-07-10 18:00:24 | 00,296,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\termsrv.dll
[2009-07-10 18:00:24 | 00,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll
[2009-07-10 18:00:24 | 00,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2009-07-10 18:00:24 | 00,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
[2009-07-10 18:00:24 | 00,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
[2009-07-10 18:00:24 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll
[2009-07-10 18:00:24 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll
[2009-07-10 18:00:23 | 00,956,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
[2009-07-10 18:00:23 | 00,426,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
[2009-07-10 18:00:23 | 00,161,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
[2009-07-10 18:00:23 | 00,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll
[2009-07-10 18:00:23 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2009-07-10 18:00:22 | 00,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
[2009-07-10 18:00:22 | 00,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
[2009-07-10 18:00:22 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtc.exe
[2009-07-10 18:00:21 | 00,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll
[2009-07-10 18:00:21 | 00,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
[2009-07-10 18:00:21 | 00,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll
[2009-07-10 18:00:21 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2009-07-10 18:00:20 | 01,267,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll
[2009-07-10 18:00:20 | 00,625,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll
[2009-07-10 18:00:20 | 00,225,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll
[2009-07-10 18:00:19 | 00,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
[2009-07-10 18:00:19 | 00,498,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatq.dll
[2009-07-10 18:00:12 | 00,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll
[2009-07-10 18:00:12 | 00,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll
[2009-07-10 18:00:11 | 00,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll
[2009-07-10 18:00:11 | 00,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll
[2009-07-10 18:00:07 | 00,196,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rdpdr.sys
[2009-07-10 18:00:07 | 00,040,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\termdd.sys
[2009-07-10 18:00:06 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo
[2004-08-04 01:44:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004-07-17 12:36:38 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2001-07-22 01:16:20 | 00,000,477 | ---- | C] () -- C:\WINDOWS\win.ini
[2001-07-22 01:15:52 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[1 C:\WINDOWS\System32\*.tmp files]
[3 C:\WINDOWS\*.tmp files]
[2009-07-10 20:16:52 | 00,000,049 | RHS- | M] () -- C:\autorun.inf
[2009-07-10 20:16:04 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Salon\Pulpit\OTL.exe
[2009-07-10 20:09:36 | 01,181,383 | ---- | M] () -- C:\Documents and Settings\Salon\Pulpit\sarsfx.exe
[2009-07-10 19:59:05 | 00,763,990 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-07-10 19:59:05 | 00,355,724 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2009-07-10 19:59:05 | 00,311,802 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009-07-10 19:59:05 | 00,049,690 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2009-07-10 19:59:05 | 00,040,190 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009-07-10 19:55:17 | 00,000,231 | ---- | M] () -- C:\WINDOWS\system.ini
[2009-07-10 19:54:47 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-07-10 19:54:43 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-07-10 19:54:05 | 03,743,110 | -H-- | M] () -- C:\Documents and Settings\Salon\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-07-10 19:33:32 | 00,107,217 | RHS- | M] () -- C:\p.exe
[2009-07-10 19:31:12 | 00,000,083 | ---- | M] () -- C:\WINDOWS\LManager.UNI
[2009-07-10 19:31:09 | 00,000,000 | ---- | M] () -- C:\WINDOWS\Setup.INI
[2009-07-10 19:27:03 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2009-07-10 19:26:33 | 00,315,392 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\HideWin.exe
[2009-07-10 19:01:55 | 00,000,767 | ---- | M] () -- C:\Documents and Settings\Salon\Pulpit\EVEREST Home Edition.lnk
[2009-07-10 18:41:47 | 00,001,709 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Antivirus.lnk
[2009-07-10 18:41:44 | 00,002,645 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-07-10 18:15:16 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-07-10 18:13:42 | 00,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2009-07-10 18:13:30 | 00,093,480 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-07-10 18:12:50 | 00,000,792 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2009-07-10 18:05:24 | 00,000,477 | ---- | M] () -- C:\WINDOWS\win.ini
[2009-07-10 18:05:24 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2009-07-10 18:05:24 | 00,000,000 | RHS- | M] () -- C:\IO.SYS
[2009-07-10 18:05:24 | 00,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2009-07-10 18:05:24 | 00,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2009-07-10 18:05:24 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2009-07-10 18:05:15 | 00,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2009-07-10 18:05:15 | 00,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2009-07-10 18:05:15 | 00,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2009-07-10 18:05:04 | 00,004,293 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2009-07-10 18:04:08 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2009-07-10 18:04:08 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2009-07-10 18:04:02 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009-07-10 18:01:36 | 00,021,856 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-07-10 18:01:21 | 00,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2009-07-10 18:01:21 | 00,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini
[2009-07-10 17:58:53 | 00,000,211 | -HS- | M] () -- C:\boot.ini
< End of report >


Dodano Dzisiaj, 20:23:
zrobilem format jednak wirus powrocil, byc moze ze to przez pendriva.. oto log z hijackthis po formacie:

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:14:36, on 2009-07-10
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\WINDOWS\system32\igfxext.exe
C:\Program Files\Internet Explorer\iexplore.exe
G:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [BroadcomWireless] C:\Program Files\Broadcom\Wireless\Utility\WlanUtil.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\Salon\USTAWI~1\Temp\olhrwef.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

--
End of file - 2748 bytes


[wojtas]

podepnij pendriva i Daj loga z combofixa ale zainstaluj wraz z nim konsolę odzyskiwania ( instrukcja programu )