z plikami video

[Pan W.]

Witam!
Mam problem z plikami video, czy to film, czy to przykładowo rozmowa przez skype z użyciem kamerki użycie procesora rośnie do 100% i koniec Pozostaje reset... Korzystałem z Visty, więc nie wiedziałem o tym w XP... Próbowałem już z różnymi kodekami i programami do oglądania owych filmów... Najbardziej mi zależy na skype Bo gdy uruchomię kamerkę, bądź będę chciał zobaczyć obraz z kamerki nadawcy, to się dzieje to samo - procesor 100% i the end... Ale takie filmiki jak na youtube, czy google video działają Nie mam już pomysłów i proszę o radę
Oczywiście chodzi o XP.

Pozdrawiam

[Mike]

w menadzerze urządzeń, który proces tak pochłania procka

Wrzuć tutaj logi z HJ i Silenta

[Pan W.]

99% procesora zajmuje taskmgr.exe i explorer.exe (tak na zmianę, raz ten 99%, potem drugi... ) Lecz po zakończeniu procesu odtwarzacza wszystko wraca do normy

Logfile of HijackThis v1.99.1
Scan saved at 20:27:24, on 2007-02-02
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\AutoConnect\AutoConnect.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Skype\Plugins\Plugins\E12C95FCBD1240FEAE314D89676CA6F8\LieDetector.exe
C:\DOCUME~1\Adrian\USTAWI~1\Temp\Rar$EX00.765\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [NETIANET] C:\Documents and Settings\Adrian\Ustawienia lokalne\Temporary Internet Files\Content.IE5\66CFEMTL\netianet[1].exe
O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - Global Startup: DSLMON.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://www.magiccam.pl/ip/rtsp/RtspVaPgDec.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.2.100.cab
O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE3BD323-DB0A-4B3C-BCCA-723359F4F62F}: NameServer = 213.241.79.37 83.238.255.76
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

"Silent Runners.vbs", revision R50, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"Gadu-Gadu" = ""C:\Program Files\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu S.A."]
"DAEMON Tools" = ""C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033" ["DT Soft Ltd."]
"NETIANET" = "C:\Documents and Settings\Adrian\Ustawienia lokalne\Temporary Internet Files\Content.IE5\66CFEMTL\netianet[1].exe" [file not found]
"AutoConnect" = "C:\Program Files\AutoConnect\AutoConnect.exe" ["http://autoconnect.prv.pl"]
"PeerGuardian" = "C:\Program Files\PeerGuardian2\pg2.exe" ["Methlabs"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"SoundMan" = "SOUNDMAN.EXE" ["Avance Logic, Inc."]
"HPDJ Taskbar Utility" = "C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" ["HP"]
"ISUSPM Startup" = "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup" ["InstallShield Software Corporation"]
"ISUSScheduler" = ""C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start" ["InstallShield Software Corporation"]
"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS]
"nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"]
"KernelFaultCheck" = "C:\WINDOWS\system32\dumprep 0 -k"
"NvMediaCenter" = "RunDLL32.exe NvMCTray.dll,NvTaskbarInit" [MS]
"avast!" = ""C:\Program Files\Alwil Software\Avast4\ashDisp.exe"" [null data]
"WinampAgent" = "C:\Program Files\Winamp\winampa.exe" [null data]
"Share-to-Web Namespace Daemon" = "C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" ["Hewlett-Packard"]
"BearShare" = ""C:\Program Files\BearShare\BearShare.exe" /pause" ["Free Peers, Inc."]

HKLM\Software\Microsoft\Active Setup\Installed Components\
>{26923b43-4d38-484f-9b9e-de460746276c}\(Default) = "Internet Explorer"
\StubPath = "C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigIE" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
-> {HKLM...CLSID} = "Adobe PDF Reader Link Helper"
\InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
-> {HKLM...CLSID} = "SSVHelper Class"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll" ["Sun Microsystems, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
-> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
-> {HKLM...CLSID} = "HyperTerminal Icon Ext"
\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" [file not found]
"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
-> {HKLM...CLSID} = "DesktopContext Class"
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
-> {HKLM...CLSID} = "Desktop Explorer"
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
-> {HKLM...CLSID} = "nView Desktop Context Menu"
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
-> {HKLM...CLSID} = "NVIDIA CPL Extension"
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{472083B0-C522-11CF-8763-00608CC02F24}" = "avast"
-> {HKLM...CLSID} = "avast"
\InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]
"{A4DF5659-0801-4A60-9607-1C48695EFDA9}" = "Folder przesyłania Share-to-Web"
-> {HKLM...CLSID} = "Folder przesyłania Share-to-Web"
\InProcServer32\(Default) = "C:\Program Files\Hewlett-Packard\HP Share-to-Web\HPGS2WNS.DLL" ["Hewlett-Packard"]

HKLM\Software\Classes\Folder\shellex\ColumnHandlers\
{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info"
-> {HKLM...CLSID} = "PDF Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}"
-> {HKLM...CLSID} = "avast"
\InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
WinUHA\(Default) = "{095177B8-8097-4D32-9081-A8949C47020E}"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\PROGRA~1\WinUHA\shellwinuha.dll" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}"
-> {HKLM...CLSID} = "avast"
\InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]
FineReader8\(Default) = "{F7091C74-EBB1-49D7-94C7-FE4886CCC18D}"
-> {HKLM...CLSID} = "FineReader8ExplorerContextMenuHandler"
\InProcServer32\(Default) = "C:\Program Files\ABBYY FineReader 8.0 Professional Edition\FECMenu.dll" ["ABBYY Software"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
WinUHA\(Default) = "{095177B8-8097-4D32-9081-A8949C47020E}"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\PROGRA~1\WinUHA\shellwinuha.dll" [null data]


Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

"NoSMBalloonTip" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"NoSaveSettings" = (REG_DWORD) hex:0x00000000
{User Configuration|Administrative Templates|Desktop|
Don't save settings at exit}

"NoRecentDocsHistory" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"CDRAutoRun" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoLowDiskSpaceChecks" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"MemCheckBoxInRunDlg" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoClose" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoAutoTrayNotify" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoResolveTrack" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoResolveSearch" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"LinkResolveIgnoreLinkInfo" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"NoStartBanner" = (REG_BINARY) hex:01 00 00 00
{Remove "Click here to begin" from Start button}

"NoWelcomeScreen" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"NoRecentDocsNetHood" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"NoDesktopCleanupWizard" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"NoSharedDocuments" = (REG_DWORD) hex:0x00000001
{User Configuration|Administrative Templates|Windows Components|Windows Explorer|
Remove Shared Documents from My Computer}

"NoThemesTab" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

"NoRemoteRecursiveEvents" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"NoStrCmpLogical" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"NoClose" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"NoDispAppearancePage" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoColorChoice" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoDispBackgroundPage" = (REG_DWORD) hex:0x00000000
{User Configuration|Administrative Templates|Control Panel|Display|
Hide Desktop tab}

"NoDispCPL" = (REG_DWORD) hex:0x00000000
{User Configuration|Administrative Templates|Control Panel|Display|
Remove Display in Control Panel}

"NoDispSettingsPage" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoDispScrSavPage" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoVisualStyleChoice" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoSizeChoice" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions\

"NoUpdateCheck" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Devices: Allow undock without having to log on}

"RunStartupScriptSync" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"SynchronousMachineGroupPolicy" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"SynchronousUserGroupPolicy" = (REG_DWORD) hex:0x00000000
{unrecognized setting}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]


Startup items in "Adrian" & "All Users" startup folders:
--------------------------------------------------------

C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart
"DSLMON" -> shortcut to: "C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe" [null data]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 15
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}"
-> {HKCU...CLSID} = "Java Plug-in 1.5.0_10"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll" ["Sun Microsystems, Inc."]
-> {HKLM...CLSID} = "Java Plug-in 1.5.0_10"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll" ["Sun Microsystems, Inc."]

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

avast! Antivirus, avast! Antivirus, ""C:\Program Files\Alwil Software\Avast4\ashServ.exe"" [null data]
avast! iAVS4 Control Service, aswUpdSv, ""C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"" [null data]
avast! Mail Scanner, avast! Mail Scanner, ""C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service" ["ALWIL Software"]
avast! Web Scanner, avast! Web Scanner, ""C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service" ["ALWIL Software"]
NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"]
Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
hpzsnt09\Driver = "hpzsnt09.dll" ["HP"]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
DLL launch points, use the -supp parameter or answer "No" at the
first message box and "Yes" at the second message box.
---------- (total run time: 52 seconds, including 11 seconds for message boxes)

[wojtas]

wloz do napedu plyte instalatora WINXP i

ctrl + alt + delete >>procesy -> ubij explorer.exe >> nowe zadanie >> cmd >> "expand X:\i386\explorer.ex_ Y:\Windows\explorer.exe "

X-litera naperu
Y-litera systemowego dysku

[Pan W.]

Niestety nie pomogło

[reckomar]

\BearShare.exe

Masz go włączonego jak ci zamula? .. oj potrafi on zamulić,potrafi.
Jaki masz zestaw kodeków ? ... Podaj wszystko co instalowałeś.
W ustawieniach skypa masz wszystko ok? .. np w ustawieniach audio masz ustawione na katre dźwiekową ,czy na domyślne urządzenie windows? itp

[Pan W.]

Masz go włączonego jak ci zamula?

Nie

Jaki masz zestaw kodeków ?

Chyba nic, sam allplayer Jak nie działały to usuwałem... Mam jeszcze jakiś real alternative do rmvb ale dalej zamula

W ustawieniach skypa masz wszystko ok? .. np w ustawieniach audio masz ustawione na katre dźwiekową ,czy na domyślne urządzenie windows?

W obu przypadkach to samo...

EDIT:

Dziś zainstalowałem windowsa, potem sterowniki od graficznej, DX, allplayera i dalej to samo

[michal_michael]

Jaki masz zestaw kodeków ?

Chyba nic, sam allplayer

Więc może spróbuj zainstalować: http://www.programosy.pl/program,kazaa-lite-codec-pack.html

[Pan W.]

Niestety nie pomogło

[snajper$]

Dziś zainstalowałem windowsa

Więc jest to konflikt sprzętowy dokupywałeś ostatnio jakąś część do kompa

[Pan W.]

K. graficzną, ram i zasilacz
Z tego co znalazłem na googlach, często nowi posiadacze GF Gigabyte 7600GS (AGP) mnieli takie problemy Tylko brak rozwiązania

[snajper$]

Zastosuj się do tego http://www.forum.programosy.pl/zanim-poprosisz-o-pomoc-w-tym-dziale-gt-przeczytaj-vt60745.html
i podaj konfig kompa moc i firmę zasilacza i temperatury z programu everest

[Pan W.]

Tylko pytanie po co
Temperaturki: (komp chodzi od rana...)

Zasilacz, hm... Nie pamiętam...

Z tego co doszedłem sam (z pomocą googli), to wina leży po stronie xp i gf 7600gs - Prawdopodobnie... Jeszcze jak mniałem Vistę to tam wszystko śmigało, więc sprzęt raczej wykluczam, ew. konflikt xp - gf7600gs...

[snajper$]

A jakie masz stery do grafiki zainstalowane

[Pan W.]

Dziś instalowałem 93.71, na 93.31 było tak samo...

[wojtas]

sciagnij gmera:

http://gmer.net/gmer.zip

1) Rootkit >>> zaznaczone Pokaż wszystko >>> wskazane tylko Usługi >>> Szukaj >>> Kopiuj >>> CTRL+V do posta
2) Rootkit >>> odznaczone Pokaż wszystko >>> wskazane wszystkie obiekty do skanu >>> Szukaj >>> Kopiuj >>> CTRL+V do posta

[Pan W.]

Niestety podczas szukania wyskakuje raport o błędach (ten typowy windowsowy) i program sie wyłącza...

[wojtas]

Użyj WWDC :
http://www.firewallleaktester.com/wwdc.htm
Zmień opcje z disable na enable. Uruchom ponownie komputer.
Tak powinny wyglądać porty (NetBIOS może być żółty) :
http://www.firewallleaktester.com/images_site/wwdc.jpg


i daj loga z:

http://www.techsupportforum.com/sectools/Deckard/comboscan.exe

[Pan W.]

ComboScan v20070306.20 run by Adrian on 2007-04-06 at 19:55:42
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created ComboScan Restore Point.


-- Last 5 Restore Point(s) --
8: 2007-04-06 17:55:46 UTC - RP8 - ComboScan Restore Point
7: 2007-04-06 13:21:12 UTC - RP7 - Installed Adobe Reader 8
6: 2007-04-06 11:49:43 UTC - RP6 - Zainstalowano: ABBYY FineReader 8.0 Professional Edition
5: 2007-04-06 10:43:40 UTC - RP5 - Zainstalowany program DirectX
4: 2007-04-06 10:33:32 UTC - RP4 - Zainstalowane Realtek AC'97 Audio


-- First Restore Point --
1: 2007-04-06 09:49:25 UTC - RP1 - Punkt kontrolny systemu


Performed disk cleanup.


-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of HijackThis v1.99.1
Scan saved at 2007-04-06 19:56:09
Platform: Windows XP Dodatek Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.0.2900.2180)

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\soundman.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AutoConnect\AutoConnect.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Opera\Opera.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Adrian\Dane aplikacji\Opera\Opera\profile\cache4\temporary_download\comboscan.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.opera.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{2CC7701D-B663-4AFE-ACE9-3EE5F47EBFDE}: NameServer = 213.241.79.37 83.238.255.76
O23 - Service: Urządzenie alarmowe (Alerter) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Usługa bramy warstwy aplikacji (ALG) - C:\WINDOWS\system32\alg.exe
O23 - Service: Zarządzanie aplikacjami (AppMgmt) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
O23 - Service: Windows Audio (AudioSrv) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: avast! Antivirus - "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
O23 - Service: avast! Mail Scanner - "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service
O23 - Service: avast! Web Scanner - "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service
O23 - Service: Usługa inteligentnego transferu w tle (BITS) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Przeglądarka komputera (Browser) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa indeksowania (CiSvc) - C:\WINDOWS\system32\cisvc.exe
O23 - Service: ClipBook (ClipSrv) - C:\WINDOWS\system32\clipsrv.exe
O23 - Service: Aplikacja systemowa modelu COM+ (COMSysApp) - C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
O23 - Service: Usługi kryptograficzne (CryptSvc) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Program uruchamiający proces serwera DCOM (DcomLaunch) - C:\WINDOWS\system32\svchost -k DcomLaunch
O23 - Service: Klient DHCP (Dhcp) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa administracyjna Menedżera dysków logicznych (dmadmin) - C:\WINDOWS\System32\dmadmin.exe /com
O23 - Service: Menedżer dysków logicznych (dmserver) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Klient DNS (Dnscache) - C:\WINDOWS\system32\svchost.exe -k NetworkService
O23 - Service: Usługa raportowania błędów (ERSvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Dziennik zdarzeń (Eventlog) - C:\WINDOWS\system32\services.exe
O23 - Service: System zdarzeń COM+ (EventSystem) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Zgodność szybkiego przełączania użytkowników (FastUserSwitchingCompatibility) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Pomoc i obsługa techniczna (helpsvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Dostęp do urządzeń interfejsu HID (HidServ) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: HTTP SSL (HTTPFilter) - C:\WINDOWS\System32\svchost.exe -k HTTPFilter
O23 - Service: Usługa COM nagrywania dysków CD IMAPI (ImapiService) - C:\WINDOWS\system32\imapi.exe
O23 - Service: Serwer (lanmanserver) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Stacja robocza (lanmanworkstation) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Pomoc TCP/IP NetBIOS (LmHosts) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Posłaniec (Messenger) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: NetMeeting Remote Desktop Sharing (mnmsrvc) - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - C:\WINDOWS\system32\msdtc.exe
O23 - Service: Instalator Windows (MSIServer) - C:\WINDOWS\system32\msiexec.exe /V
O23 - Service: DDE sieci (NetDDE) - C:\WINDOWS\system32\netdde.exe
O23 - Service: DSDM DDE sieci (NetDDEdsdm) - C:\WINDOWS\system32\netdde.exe
O23 - Service: Logowanie do sieci (Netlogon) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Połączenia sieciowe (Netman) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Rozpoznawanie lokalizacji w sieci (NLA) (Nla) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa NT LM Security Support Provider (NtLmSsp) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Magazyn wymienny (NtmsSvc) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: NVIDIA Display Driver Service (NVSvc) - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug and Play (PlugPlay) - C:\WINDOWS\system32\services.exe
O23 - Service: Usługi IPSEC (PolicyAgent) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Magazyn chroniony (ProtectedStorage) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Menedżer autopołączenia dostępu zdalnego (RasAuto) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Menedżer połączeń usługi Dostęp zdalny (RasMan) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Menedżer sesji pomocy pulpitu zdalnego (RDSessMgr) - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Routing i dostęp zdalny (RemoteAccess) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Rejestr zdalny (RemoteRegistry) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Lokalizator usługi zdalnego wywołania procedury (RPC) (RpcLocator) - C:\WINDOWS\system32\locator.exe
O23 - Service: Zdalne wywoływanie procedur (RPC) (RpcSs) - C:\WINDOWS\system32\svchost -k rpcss
O23 - Service: QoS RSVP (RSVP) - C:\WINDOWS\system32\rsvp.exe
O23 - Service: Menedżer kont zabezpieczeń (SamSs) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Karta inteligentna (SCardSvr) - C:\WINDOWS\system32\scardsvr.exe
O23 - Service: Harmonogram zadań (Schedule) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Logowanie pomocnicze (seclogon) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Zawiadomienie o zdarzeniu systemowym (SENS) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Zapora systemu Windows/Udostępnianie połączenia internetowego (SharedAccess) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Wykrywanie sprzętu powłoki (ShellHWDetection) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Bufor wydruku (Spooler) - C:\WINDOWS\system32\spoolsv.exe
O23 - Service: Usługa przywracania systemu (srservice) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa odnajdywania SSDP (SSDPSRV) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Windows Image Acquisition (WIA) (stisvc) - C:\WINDOWS\system32\svchost.exe -k imgsvc
O23 - Service: MS Software Shadow Copy Provider (SwPrv) - C:\WINDOWS\system32\dllhost.exe /Processid:{AC8F4B7D-D8C6-413A-ABC9-2792AECEE622}
O23 - Service: Dzienniki wydajności i alerty (SysmonLog) - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Telefonia (TapiSrv) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Usługi terminalowe (TermService) - C:\WINDOWS\System32\svchost -k DComLaunch
O23 - Service: Kompozycje (Themes) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Telnet (TlntSvr) - C:\WINDOWS\system32\tlntsvr.exe
O23 - Service: Klient śledzenia łączy rozproszonych (TrkWks) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Host uniwersalnego urządzenia Plug and Play (upnphost) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Zasilacz awaryjny (UPS) (UPS) - C:\WINDOWS\system32\ups.exe
O23 - Service: Kopiowanie woluminów w tle (VSS) - C:\WINDOWS\system32\vssvc.exe
O23 - Service: Usługa Czas systemu Windows (W32Time) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: WebClient - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Instrumentacja zarządzania Windows (winmgmt) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa numeru seryjnego multimediów przenośnych (WmdmPmSN) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Rozszerzenia sterownika Instrumentacji zarządzania Windows (Wmi) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Karta wydajności WMI (WmiApSrv) - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Centrum zabezpieczeń (wscsvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Aktualizacje automatyczne (wuauserv) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Konfiguracja zerowej sieci bezprzewodowej (WZCSVC) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Usługa dostarczania sieci (xmlprov) - C:\WINDOWS\System32\svchost.exe -k netsvcs


-- File Associations -----------------------------------------------------------

.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
.reg - regfile - regedit.exe "%1"
.scr - scrfile - "%1" /S
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

1R Aavmker4 (avast! Asynchronous Virus Monitor) - C:\WINDOWS\system32\drivers\aavmker4.sys
2S ADILOADER (General Purpose USB Driver (adildr.sys)) - C:\WINDOWS\system32\drivers\adildr.sys
3R adiusbaw (USB ADSL WAN Adapter) - C:\WINDOWS\system32\drivers\adiusbaw.sys
3R ALCXWDM (Service for Realtek AC97 Audio (WDM)) - C:\WINDOWS\system32\drivers\alcxwdm.sys
1R AmdK7 (Sterownik procesora AMD K7) - C:\WINDOWS\system32\drivers\amdk7.sys
2R aswMon2 (avast! Standard Shield Support) - C:\WINDOWS\system32\drivers\aswmon2.sys
3R aswRdr - C:\WINDOWS\system32\drivers\aswRdr.sys
1R aswTdi (avast! Network Shield Support) - C:\WINDOWS\system32\drivers\aswTdi.sys
3R FETNDIS (Sterownik NT karty VIA PCI 10/100Mb Fast Ethernet) - C:\WINDOWS\system32\drivers\fetnd5.sys
3S gmer - C:\WINDOWS\system32\drivers\gmer.sys
3R hidusb (Sterownik Microsoft klasy HID) - C:\WINDOWS\system32\drivers\hidusb.sys
3R ms_mpu401 (Sterownik portu MIDI UART Microsoft MPU-401) - C:\WINDOWS\system32\drivers\msmpu401.sys
3R nv - C:\WINDOWS\system32\drivers\nv4_mini.sys
3R usbehci (Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft) - C:\WINDOWS\system32\drivers\usbehci.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

2R aswUpdSv (avast! iAVS4 Control Service) - "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
2R avast! Antivirus - "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
3R avast! Mail Scanner - "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service
3R avast! Web Scanner - "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service
2R NVSvc (NVIDIA Display Driver Service) - C:\WINDOWS\system32\nvsvc32.exe


-- Files created between 2007-03-06 and 2007-04-06 -----------------------------

2007-04-06 18:02:19 80 --a------ C:\WINDOWS\gmer_uninstall.cmd<GMER_U~1.CMD>
2007-04-06 15:11:59 0 d-------- C:\Dev-Cpp
2007-04-06 14:54:30 0 d-------- C:\WINDOWS\system32\ReinstallBackups<REINST~1>
2007-04-06 14:17:15 0 d-------- C:\USDownloader<USDOWN~1>
2007-04-06 14:01:49 0 d-------- C:\Program Files\Common Files\Adobe
2007-04-06 13:50:40 0 d-------- C:\Program Files\ABBYY FineReader 8.0 Professional Edition<ABBYYF~1.0PR>
2007-04-06 13:48:13 0 d-------- C:\temp
2007-04-06 13:37:21 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-04-06 13:37:19 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-04-06 13:37:18 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-04-06 13:37:17 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-04-06 13:37:15 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-04-06 13:37:13 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-04-06 13:37:12 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-04-06 13:37:10 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-04-06 13:37:08 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-04-06 13:37:06 171776 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-04-06 13:37:05 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-04-06 13:37:00 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-04-06 13:36:13 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-04-06 13:35:53 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-04-06 13:35:53 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-04-06 13:35:53 2944 --a------ C:\WINDOWS\system32\drivers\msmpu401.sys
2007-04-06 13:35:52 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-04-06 13:35:50 10624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2007-04-06 13:35:28 77312 --a------ C:\WINDOWS\system32\usbui.dll
2007-04-06 13:35:25 27165 --a------ C:\WINDOWS\system32\drivers\fetnd5.sys
2007-04-06 13:34:15 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1>
2007-04-06 13:34:14 0 d-------- C:\Program Files\Common Files\ODBC
2007-04-06 13:34:11 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2007-04-06 13:34:10 0 dr------- C:\Program Files<PROGRA~1>
2007-04-06 13:34:07 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-04-06 13:34:07 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-04-06 13:34:07 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-04-06 13:34:05 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-04-06 13:34:05 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-04-06 13:34:03 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-04-06 13:34:03 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-04-06 13:34:03 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-04-06 13:34:03 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-04-06 13:34:03 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-04-06 13:34:03 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-04-06 13:34:03 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-04-06 13:34:02 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-04-06 13:34:02 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-04-06 13:34:02 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-04-06 13:34:02 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-04-06 13:34:02 6144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-04-06 13:33:58 6656 --a------ C:\WINDOWS\system32\kbdycl.dll
2007-04-06 13:33:58 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2007-04-06 13:33:58 6656 --a------ C:\WINDOWS\system32\kbdsl.dll
2007-04-06 13:33:58 5632 --a------ C:\WINDOWS\system32\kbdro.dll
2007-04-06 13:33:58 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll
2007-04-06 13:33:58 6656 --a------ C:\WINDOWS\system32\kbdhu.dll
2007-04-06 13:33:58 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll
2007-04-06 13:33:58 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll
2007-04-06 13:33:58 7168 --a------ C:\WINDOWS\system32\kbdcz.dll
2007-04-06 13:33:58 6656 --a------ C:\WINDOWS\system32\kbdcr.dll
2007-04-06 13:33:58 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL
2007-04-06 13:33:57 24661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-04-06 13:33:57 13312 --a------ C:\WINDOWS\system32\irclass.dll
2007-04-06 13:33:57 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-04-06 13:33:57 85532 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-04-06 13:33:57 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-04-06 13:33:56 9168 --a------ C:\WINDOWS\system\VER.DLL
2007-04-06 13:33:56 19200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-04-06 13:33:56 5120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-04-06 13:33:56 24064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-04-06 13:33:56 83456 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-04-06 13:33:56 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-04-06 13:33:55 15360 --a------ C:\WINDOWS\TASKMAN.EXE
2007-04-06 13:33:55 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-04-06 13:33:55 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-04-06 13:33:55 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-04-06 13:33:55 70096 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-04-06 13:33:54 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-04-06 13:33:54 8704 --a------ C:\WINDOWS\system32\batt.dll
2007-04-06 13:33:54 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2007-04-06 13:33:53 75776 --a------ C:\WINDOWS\system32\storprop.dll
2007-04-06 13:33:53 70144 --a------ C:\WINDOWS\NOTEPAD.EXE
2007-04-06 13:33:31 0 d-------- C:\WINDOWS\system32\CatRoot2
2007-04-06 13:33:31 0 d-------- C:\WINDOWS\system32\CatRoot
2007-04-06 13:33:08 0 d-------- C:\Documents and Settings<DOCUME~1>
2007-04-06 13:33:07 0 d--hs---- C:\System Volume Information<SYSTEM~1>
2007-04-06 13:28:33 0 d-------- C:\WINDOWS
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\WinSxS
2007-04-06 13:28:33 0 dr------- C:\WINDOWS\Web
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\twain_32
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\wins
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\wbem
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\usmt
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\spool
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\ShellExt
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\Setup
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\ras
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\oobe
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\npp
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\mui
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\inetsrv
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\IME
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\icsxml
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\ias
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\export
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\drivers
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\drivers\etc
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\drivers\disdn
2007-04-06 13:28:33 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\dhcp
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\config
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\3com_dmi
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\3076
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\2052
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\1054
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\1045
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\1042
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\1041
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\1037
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\1033
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\1031
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\1028
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system32\1025
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\system
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\security
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\Resources<RESOUR~1>
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\repair
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1>
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\PeerNet
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\pchealth
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\mui
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\msapps
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\msagent
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\Media
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\java
2007-04-06 13:28:33 0 d--h----- C:\WINDOWS\inf
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\ime
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\Help
2007-04-06 13:28:33 0 dr--s---- C:\WINDOWS\Fonts
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\ehome
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1>
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\Debug
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\Cursors
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1>
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\Config
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\AppPatch
2007-04-06 13:28:33 0 d-------- C:\WINDOWS\addins
2007-04-06 12:43:55 255848 --a------ C:\WINDOWS\system32\xactengine2_6.dll<XA3066~1.DLL>
2007-04-06 12:43:54 251672 --a------ C:\WINDOWS\system32\xactengine2_5.dll<XA3C56~1.DLL>
2007-04-06 12:43:54 3426072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2007-04-06 12:43:53 68888 --a------ C:\WINDOWS\system32\xinput1_3.dll<XINPUT~4.DLL>
2007-04-06 12:43:53 237848 --a------ C:\WINDOWS\system32\xactengine2_4.dll<XA3856~1.DLL>
2007-04-06 12:43:53 15128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll<X3DAUD~2.DLL>
2007-04-06 12:43:52 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL>
2007-04-06 12:43:52 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL>
2007-04-06 12:43:52 2414360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2007-04-06 12:43:48 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-04-06 12:33:54 49152 --a------ C:\WINDOWS\system32\ChCfg.exe
2007-04-06 12:33:45 4027840 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys
2007-04-06 12:33:34 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe
2007-04-06 12:33:34 0 d-------- C:\Program Files\Realtek AC97<REALTE~1>
2007-04-06 12:33:33 147456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll
2007-04-06 12:33:33 577536 --a------ C:\WINDOWS\soundman.exe
2007-04-06 12:33:32 315392 --a------ C:\WINDOWS\alcupd.exe
2007-04-06 12:33:32 217088 --a------ C:\WINDOWS\Alcrmv.exe
2007-04-06 12:23:56 0 d-------- C:\Program Files\MarBit
2007-04-06 12:15:37 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1>
2007-04-06 12:14:30 0 d-------- C:\Program Files\Opera
2007-04-06 12:04:41 0 d-------- C:\Program Files\AutoConnect<AUTOCO~1>
2007-04-06 11:59:30 127497 --a------ C:\WINDOWS\system32\drivers\adiusbaw.sys
2007-04-06 11:59:30 1531904 --a------ C:\WINDOWS\adiras.exe
2007-04-06 11:59:28 127456 --a------ C:\WINDOWS\system32\ipdetect.exe
2007-04-06 11:59:28 155648 --a------ C:\WINDOWS\system32\adadix32.dll
2007-04-06 11:59:25 135168 --a------ C:\WINDOWS\system32\unaddrv.exe
2007-04-06 11:59:25 46167 --a------ C:\WINDOWS\system32\drivers\adildr.sys
2007-04-06 11:59:25 126976 --a------ C:\WINDOWS\system32\coclassfast.dll<COCLAS~1.DLL>
2007-04-06 11:59:25 4981 --a------ C:\WINDOWS\system32\adadix2k.dll
2007-04-06 11:59:25 46892 --a------ C:\WINDOWS\system32\adadix16.dll
2007-04-06 11:59:23 143360 --a------ C:\WINDOWS\autoclk.exe
2007-04-06 11:59:19 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-04-06 11:58:40 0 d-------- C:\Program Files\SAGEM
2007-04-06 11:57:44 23352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2007-04-06 11:57:43 43176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2007-04-06 11:57:41 31560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2007-04-06 11:57:35 94424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2007-04-06 11:57:35 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2007-04-06 11:57:19 348160 --a------ C:\WINDOWS\system32\MSVCR71.dll
2007-04-06 11:57:19 499712 --a------ C:\WINDOWS\system32\MSVCP71.dll
2007-04-06 11:57:19 1060864 --a------ C:\WINDOWS\system32\MFC71.dll
2007-04-06 11:57:19 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2007-04-06 11:57:19 689280 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-04-06 11:57:15 0 d-------- C:\Program Files\Alwil Software<ALWILS~1>
2007-04-06 11:53:15 208896 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-04-06 11:53:15 0 d-------- C:\WINDOWS\nview
2007-04-06 11:52:52 208896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-04-06 11:52:41 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2007-04-06 11:52:01 0 d-------- C:\NVIDIA
2007-04-06 11:51:17 0 d-------- C:\Program Files\Sega
2007-04-06 11:48:19 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-04-06 11:48:18 0 d-------- C:\WINDOWS\Prefetch
2007-04-06 11:44:53 0 d-------- C:\WINDOWS\system32\xircom
2007-04-06 11:44:53 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1>
2007-04-06 11:44:28 0 -rahs---- C:\MSDOS.SYS
2007-04-06 11:44:28 0 -rahs---- C:\IO.SYS
2007-04-06 11:44:28 0 --a------ C:\CONFIG.SYS
2007-04-06 11:44:28 0 --a------ C:\AUTOEXEC.BAT
2007-04-06 11:44:09 112128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-04-06 11:43:16 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1>
2007-04-06 11:43:15 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1>
2007-04-06 11:43:05 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3>
2007-04-06 11:43:00 0 d-------- C:\Program Files\Usługi online<USUGIO~1>
2007-04-06 11:42:44 0 d-------- C:\WINDOWS\system32\DirectX
2007-04-06 11:42:25 11264 --a------ C:\WINDOWS\system32\atrace.dll
2007-04-06 11:42:16 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-04-06 11:42:15 67584 --a------ C:\WINDOWS\system32\acctres.dll
2007-04-06 11:42:12 0 d---s---- C:\WINDOWS\Tasks
2007-04-06 11:42:12 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-04-06 11:42:10 0 d-------- C:\Program Files\Common Files\MSSoap
2007-04-06 11:42:07 0 d-------- C:\WINDOWS\srchasst
2007-04-06 11:42:06 0 d-------- C:\WINDOWS\system32\Macromed
2007-04-06 11:42:04 120320 --a------ C:\WINDOWS\system32\wuweb.dll
2007-04-06 11:42:04 113664 --a------ C:\WINDOWS\system32\wucltui.dll
2007-04-06 11:42:04 6656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-04-06 11:42:04 184320 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-04-06 11:42:03 36864 --a------ C:\WINDOWS\system32\wups.dll
2007-04-06 11:42:03 1134592 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-04-06 11:42:03 168960 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-04-06 11:42:03 112128 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-04-06 11:42:03 431616 --a------ C:\WINDOWS\system32\wuapi.dll
2007-04-06 11:42:03 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-04-06 11:42:03 382464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-04-06 11:42:03 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2007-04-06 11:42:03 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2007-04-06 11:41:59 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2007-04-06 11:41:55 45568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-04-06 11:41:55 29696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-04-06 11:41:55 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-04-06 11:41:55 43520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-04-06 11:41:52 171008 --a------ C:\WINDOWS\system32\srsvc.dll
2007-04-06 11:41:52 240128 --a------ C:\WINDOWS\system32\srrstr.dll
2007-04-06 11:41:52 67584 --a------ C:\WINDOWS\system32\srclient.dll
2007-04-06 11:41:52 0 d-------- C:\WINDOWS\system32\Restore
2007-04-06 11:41:52 22528 --a------ C:\WINDOWS\system32\fltMc.exe
2007-04-06 11:41:52 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-04-06 11:41:52 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-04-06 11:41:52 124800 --a------ C:\WINDOWS\system32\drivers\fltMgr.sys
2007-04-06 11:41:51 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-04-06 11:41:51 34560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-04-06 11:41:51 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-04-06 11:41:51 81920 --a------ C:\WINDOWS\system32\ils.dll
2007-04-06 11:41:50 69632 --a------ C:\WINDOWS\system32\msconf.dll
2007-04-06 11:41:50 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-04-06 11:41:48 105984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-04-06 11:41:48 252928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-04-06 11:41:47 49664 --a------ C:\WINDOWS\system32\inetres.dll
2007-04-06 11:41:47 678400 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-04-06 11:41:45 192000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-04-06 11:41:45 12288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-04-06 11:41:45 278528 --a------ C:\WINDOWS\system32\mstask.dll
2007-04-06 11:41:44 86016 --a------ C:\WINDOWS\system32\isign32.dll
2007-04-06 11:41:44 278528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-04-06 11:41:44 65536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-04-06 11:41:44 73728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-04-06 11:41:03 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2007-04-06 11:40:46 0 d-------- C:\WINDOWS\Registration<REGIST~1>
2007-04-06 11:40:32 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-04-06 11:40:28 5632 --a------ C:\WINDOWS\system32\write.exe
2007-04-06 11:40:28 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2007-04-06 11:40:19 35328 --a------ C:\WINDOWS\system32\winchat.exe
2007-04-06 11:40:19 139264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-04-06 11:40:19 44544 --a------ C:\WINDOWS\system32\hticons.dll
2007-04-06 11:40:19 73216 --a------ C:\WINDOWS\system32\avwav.dll
2007-04-06 11:40:19 231424 --a------ C:\WINDOWS\system32\avtapi.dll
2007-04-06 11:40:19 16384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-04-06 11:40:12 605696 --a------ C:\WINDOWS\system32\getuname.dll
2007-04-06 11:40:12 80896 --a------ C:\WINDOWS\system32\charmap.exe
2007-04-06 11:40:12 115200 --a------ C:\WINDOWS\system32\calc.exe
2007-04-06 11:40:11 119808 --a------ C:\WINDOWS\system32\winmine.exe
2007-04-06 11:40:11 57344 --a------ C:\WINDOWS\system32\sol.exe
2007-04-06 11:40:11 128000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-04-06 11:40:11 55808 --a------ C:\WINDOWS\system32\freecell.exe
2007-04-06 11:40:10 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-04-06 11:40:10 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-04-06 11:40:10 16384 --a------ C:\WINDOWS\system32\tskill.exe
2007-04-06 11:40:10 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-04-06 11:40:10 15360 --a------ C:\WINDOWS\system32\tscon.exe
2007-04-06 11:40:10 15360 --a------ C:\WINDOWS\system32\shadow.exe
2007-04-06 11:40:10 16384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-04-06 11:40:10 9728 --a------ C:\WINDOWS\system32\reset.exe
2007-04-06 11:40:10 33792 --a------ C:\WINDOWS\system32\regini.exe
2007-04-06 11:40:10 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-04-06 11:40:10 22528 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-04-06 11:40:10 17408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-04-06 11:40:10 22528 --a------ C:\WINDOWS\system32\msg.exe
2007-04-06 11:40:09 15872 --a------ C:\WINDOWS\system32\logoff.exe
2007-04-06 11:40:09 15872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-04-06 11:40:08 54272 --a------ C:\WINDOWS\system32\stclient.dll
2007-04-06 11:40:08 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-04-06 11:40:08 4096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-04-06 11:40:08 20480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-04-06 11:40:08 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-04-06 11:40:08 147456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-04-06 11:40:08 82432 --a------ C:\WINDOWS\system32\comrepl.dll
2007-04-06 11:40:08 25600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-04-06 11:40:02 187904 --a------ C:\WINDOWS\system32\accwiz.exe
2007-04-06 11:40:01 132608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-04-06 11:40:01 345088 --a------ C:\WINDOWS\system32\mspaint.exe
2007-04-06 11:40:01 124928 --a------ C:\WINDOWS\system32\mplay32.exe
2007-04-06 11:40:01 349696 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-04-06 11:40:01 0 d-------- C:\Program Files\Windows NT<WINDOW~1>
2007-04-06 11:40:00 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-04-06 11:40:00 539136 --a------ C:\WINDOWS\system32\spider.exe
2007-04-06 11:40:00 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-04-06 11:40:00 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-04-06 11:40:00 139400 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-04-06 11:40:00 103424 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-04-06 11:39:59 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-04-06 11:39:59 141824 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-04-06 11:39:59 60928 --a------ C:\WINDOWS\system32\remotepg.dll
2007-04-06 11:39:59 67072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-04-06 11:39:59 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-04-06 11:39:59 147968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-04-06 11:39:59 655360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-04-06 11:39:59 408576 --a------ C:\WINDOWS\system32\mstsc.exe
2007-04-06 11:39:58 296448 --a------ C:\WINDOWS\system32\termsrv.dll
2007-04-06 11:39:58 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-04-06 11:39:58 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-04-06 11:39:58 62464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-04-06 11:39:58 20992 --a------ C:\WINDOWS\system32\qprocess.exe
2007-04-06 11:39:58 90112 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-04-06 11:39:58 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-04-06 11:39:58 0 d-------- C:\WINDOWS\system32\MsDtc
2007-04-06 11:39:58 11264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-04-06 11:39:58 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-04-06 11:39:57 11776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-04-06 11:39:57 949248 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-04-06 11:39:57 425472 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-04-06 11:39:57 58880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-04-06 11:39:57 6144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-04-06 11:39:56 0 d-------- C:\WINDOWS\system32\Com
2007-04-06 11:39:56 62464 --a------ C:\WINDOWS\system32\colbact.dll
2007-04-06 11:39:56 110080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-04-06 11:39:56 628224 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-04-06 11:39:56 85504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-04-06 11:39:56 229888 --a------ C:\WINDOWS\system32\catsrv.dll
2007-04-06 11:39:55 540160 --a------ C:\WINDOWS\system32\comuid.dll
2007-04-06 11:39:55 1251840 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-04-06 11:39:55 501248 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-04-06 11:39:49 56320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-04-06 11:39:49 17920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-04-06 11:39:49 58880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-04-06 11:39:49 187904 --a------ C:\WINDOWS\system32\cmprops.dll
2007-04-06 11:39:44 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2007-04-06 11:39:43 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys


-- Find3M Report ---------------------------------------------------------------

2007-04-06 18:51:58 0 d-------- C:\Documents and Settings\Adrian\Dane aplikacji\TMNT
2007-04-06 17:52:30 0 d---s---- C:\Documents and Settings\Adrian\Dane aplikacji\Microsoft<MICROS~1>
2007-04-06 15:38:31 0 d-------- C:\Documents and Settings\Adrian\Dane aplikacji\Dev-Cpp
2007-04-06 15:22:23 0 d-------- C:\Documents and Settings\Adrian\Dane aplikacji\Adobe
2007-04-06 13:53:19 0 d-------- C:\Documents and Settings\Adrian\Dane aplikacji\ABBYY
2007-04-06 13:47:49 0 d-------- C:\Documents and Settings\Adrian\Dane aplikacji\WinRAR
2007-04-06 13:33:45 62 --ahs---- C:\Documents and Settings\Adrian\Dane aplikacji\desktop.ini
2007-04-06 12:39:45 0 d-------- C:\Documents and Settings\Adrian\Dane aplikacji\Macromedia<MACROM~1>
2007-04-06 12:14:35 0 d-------- C:\Documents and Settings\Adrian\Dane aplikacji\Opera
2007-04-06 11:49:57 355830 --a------ C:\WINDOWS\system32\perfh015.dat
2007-04-06 11:49:57 49712 --a------ C:\WINDOWS\system32\perfc015.dat
2007-04-06 11:49:12 0 d-------- C:\Documents and Settings\Adrian\Dane aplikacji\Identities<IDENTI~1>


-- Registry Dump ---------------------------------------------------------------


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"AutoConnect"="C:\\Program Files\\AutoConnect\\AutoConnect.exe"
"Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"SoundMan"="SOUNDMAN.EXE"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"


[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0



-- End of ComboScan: finished at 2007-04-06 at 19:56:28 ------------------------

[wojtas]

niestety tu nic nie ma