Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Wszystko odnośnie systemów z rodziny Microsoft

Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Postprzez Aselfer 17 Sie 2009, 22:56

reklama
Witam . Mam windows xp i 2 pytania.
1) Zawsze gdy otwieram partycje np. E: to otwiera się ona w nowym oknie co jest trochę wkurzające. Jak zrobić żeby nie wyskakiwała w nowym oknie?
2) Mój komputer zaczął wolniej chodzić. Ściągam dużo filmów itp. i to pewnie jest tego przyczyną. Co mogę zrobić żeby działał szybciej ? Nagrałem dzisiaj wszystkie filmy itp. z kompa i potem usunąłem ale nadal chodzi tak samo.

Z góry dziękuję za odpowiedzi :)
Awatar użytkownika
Aselfer
~user
 
Posty: 800
Dołączenie: 05 Lip 2009, 21:28
Miejscowość: Biała Podlaska
Pochwały: 9



Windows xp dwa pytania.

Postprzez MichuPower 17 Sie 2009, 23:04

Aselfer napisał(a):Zawsze gdy otwieram partycje np. E: to otwiera się ona w nowym oknie co jest trochę wkurzające. Jak zrobić żeby nie wyskakiwała w nowym oknie?

Nie wiem czy dobrze zrozumiałem.
Chyba, że chodzi Ci o otwieranie partycji z widoku Mojego Komputera.
Jeśli tak to klikasz Narzędzia (u góry) >> Opcje folderów >> Ogólne i w Przeglądanie folderów zaznaczasz Otwórz każdy folder w osobnym oknie.
Aselfer napisał(a):Mój komputer zaczął wolniej chodzić

Zasyfiony komp?
Niepotrzebnie włączone aplikacje?
MichuPower = MaxPower
Awatar użytkownika
MichuPower
~user
 
Posty: 1868
Dołączenie: 02 Wrz 2008, 18:51
Miejscowość: Radomsko
Pochwały: 202



Windows xp dwa pytania.

Postprzez vel.Syntium 18 Sie 2009, 09:41

Aselfer napisał(a):2) Mój komputer zaczął wolniej chodzić. Ściągam dużo filmów itp. i to pewnie jest tego przyczyną. Co mogę zrobić żeby działał szybciej ? Nagrałem dzisiaj wszystkie filmy itp. z kompa i potem usunąłem ale nadal chodzi tak samo.

Wykonaj Optymalizację >> optymalizacja-windowsa-xp-vt89133.html

Autor postu otrzymał pochwałę
.:Skąd ludzi mają taką cechę, najpierw zrobią świństwo, później milczą podglądając efekt:.
Awatar użytkownika
vel.Syntium
~user
 
Posty: 137
Dołączenie: 21 Lut 2009, 21:01
Miejscowość: Kielce
Pochwały: 16



Windows xp dwa pytania.

Postprzez Aselfer 18 Sie 2009, 10:30

Co do tych partycji : o to chodzi że otwierają sie w osobnym oknie ale nie foldery tylko partycje. foldery w tym samym.
Zaraz się biorę za optymalizację dzięki :)
Awatar użytkownika
Aselfer
~user
 
Posty: 800
Dołączenie: 05 Lip 2009, 21:28
Miejscowość: Biała Podlaska
Pochwały: 9



Windows xp dwa pytania.

Postprzez MichuPower 18 Sie 2009, 10:42

Aselfer napisał(a):Co do tych partycji : o to chodzi że otwierają sie w osobnym oknie ale nie foldery tylko partycje. foldery w tym samym.


Z tego, co czytam na necie - większość takich problemów powodowały infekcje autorun.inf.
Jednak po wyczyszczeniu kompa - ten efekt zostaje.
Więc - wklej do notatnika:
Kod: Zaznacz wszystko
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\Folder\shell]

[HKEY_CLASSES_ROOT\Folder\shell\explore]
"BrowserFlags"=dword:00000022
"ExplorerFlags"=dword:00000021

[HKEY_CLASSES_ROOT\Folder\shell\explore\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\
  65,00,20,00,2f,00,65,00,2c,00,2f,00,69,00,64,00,6c,00,69,00,73,00,74,00,2c,\
  00,25,00,49,00,2c,00,25,00,4c,00,00,00

[HKEY_CLASSES_ROOT\Folder\shell\explore\ddeexec]
@="[ExploreFolder(\"%l\", %I, %S)]"
"NoActivateHandler"=""

[HKEY_CLASSES_ROOT\Folder\shell\explore\ddeexec\application]
@="Folders"

[HKEY_CLASSES_ROOT\Folder\shell\explore\ddeexec\ifexec]
@="[]"

[HKEY_CLASSES_ROOT\Folder\shell\explore\ddeexec\topic]
@="AppProperties"

[HKEY_CLASSES_ROOT\Folder\shell\open]
"BrowserFlags"=dword:00000010
"ExplorerFlags"=dword:00000012

[HKEY_CLASSES_ROOT\Folder\shell\open\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\
  65,00,20,00,2f,00,69,00,64,00,6c,00,69,00,73,00,74,00,2c,00,25,00,49,00,2c,\
  00,25,00,4c,00,00,00

[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec]
@="[ViewFolder(\"%l\", %I, %S)]"
"NoActivateHandler"=""

[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec\application]
@="Folders"

[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec\ifexec]
@="[]"

[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec\topic]
@="AppProperties"

[-HKEY_CLASSES_ROOT\Directory\shell\explore]

[-HKEY_CLASSES_ROOT\Directory\shell\open]

[-HKEY_CLASSES_ROOT\Drive\shell\open]

[HKEY_CLASSES_ROOT\Drive\shell]
@="none"

[HKEY_CLASSES_ROOT\Directory\shell]
@="none"

[HKEY_CLASSES_ROOT\Folder\shell]
@=-


Potem >>> Plik >>> Zapisz jako >>> Ustaw rozszerzenie na Wszystkie pliki >>> Zapisz jako FIX.REG
Klikasz dwukrotnie na powstały plik i dodajesz go do rejestru. Potem restart kompa i zdaj relację czy pomogło.
Jeśli tak, będziemy działać dalej.
MichuPower = MaxPower
Awatar użytkownika
MichuPower
~user
 
Posty: 1868
Dołączenie: 02 Wrz 2008, 18:51
Miejscowość: Radomsko
Pochwały: 202



Windows xp dwa pytania.

Postprzez Aselfer 18 Sie 2009, 11:50

po wprowadzeniu tego do rejestru nadal to samo.
Awatar użytkownika
Aselfer
~user
 
Posty: 800
Dołączenie: 05 Lip 2009, 21:28
Miejscowość: Biała Podlaska
Pochwały: 9



Windows xp dwa pytania.

Postprzez Okocza 18 Sie 2009, 11:53

Aselfer, łatwiej będzie wykluczyć infekcję patron jeśli dasz log z RSIT :)
eMachines E730G - Core i5-430M, 2GiB RAM, ATI Mobility Radeon HD5470, WD 320GiB; Cort Z-44,DR 0.09-0.42, Peavey Backstage
Mac OS X 10.7.2 Lion // Windows 7 Professional x64 // NIE POMAGAM NA PW/GG/E-MAIL
Image
"Moje Ego i Anima spotykają się i wymieniają przepisami na ciasteczka" - Maynard James Keenan
Awatar użytkownika
Okocza
~user
 
Posty: 8148
Dołączenie: 19 Mar 2006, 10:53
Pochwały: 404



Windows xp dwa pytania.

Postprzez MichuPower 18 Sie 2009, 11:54

Udaj się do działu Bezpieczeństwo z odpowiednimi logami.
Infekcje masz prawdopodobnie z pendrive'a.
Po wyczyszczeniu kompa jeszcze raz dodaj to do rejestru.

Dodano Dzisiaj, 12:55:
Lub jeśli Okocza, prosi to podaj tutaj ;)
MichuPower = MaxPower
Awatar użytkownika
MichuPower
~user
 
Posty: 1868
Dołączenie: 02 Wrz 2008, 18:51
Miejscowość: Radomsko
Pochwały: 202



Windows xp dwa pytania.

Postprzez Aselfer 01 Paź 2009, 19:27

Sory że dopiero piszę ale zapomniałem o tym temacie :P

Jakie logi mam tutaj dać ? xD
i jak je zdobyć?
Awatar użytkownika
Aselfer
~user
 
Posty: 800
Dołączenie: 05 Lip 2009, 21:28
Miejscowość: Biała Podlaska
Pochwały: 9



Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Postprzez MichuPower 01 Paź 2009, 19:37

MichuPower = MaxPower
Awatar użytkownika
MichuPower
~user
 
Posty: 1868
Dołączenie: 02 Wrz 2008, 18:51
Miejscowość: Radomsko
Pochwały: 202



Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Postprzez Aselfer 01 Paź 2009, 20:18

Kod: Zaznacz wszystko
Logfile of random's system information tool 1.06 (written by random/random)
Run by user at 2009-10-01 21:16:21
Microsoft Windows XP Professional Dodatek Service Pack 3
System drive C: has 14 GB (27%) free of 50 GB
Total RAM: 2047 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:16:24, on 2009-10-01
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\1.2.183.7\GoogleCrashHandler.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Xfire\Xfire.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\All Users\Dane aplikacji\ZwangiSearch\zwangi131.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlagent.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\ZwangiSearch\zwangi.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Documents and Settings\user\Pulpit\RSIT.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\Program Files\trend micro\user.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.orbitdownloader.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\user\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Usługa Google Update (gupdate1ca04cf2a930520) (gupdate1ca04cf2a930520) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: ZwangiSearch Service - Unknown owner - C:\Documents and Settings\All Users\Dane aplikacji\ZwangiSearch\zwangi131.exe

--
End of file - 7880 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-583907252-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-583907252-725345543-1003UA.job
C:\WINDOWS\tasks\PCConfidential.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-07-03 1078552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
AVG Security Toolbar - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2009-07-03 1968920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-07-15 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-12 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-12 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}]
IEPluginBHO Class - C:\Documents and Settings\user\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll [2009-05-28 42088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{A057A204-BACC-4D26-9990-79A187E2698E} - AVG Security Toolbar - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2009-07-03 1968920]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-04-06 33603584]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-07-03 1932568]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-02-07 71216]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-02-07 54832]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-06-10 86016]
"Samsung PanelMgr"=C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [2008-09-03 536576]
"AVFX Engine"=C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe [2006-06-09 24576]
"FixCamera"=C:\WINDOWS\FixCamera.exe [2007-02-10 20480]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2005-09-05 339968]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-12 148888]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2007-08-31 1037736]
"NPSStartup"= []
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-01-21 92168]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"cdoosoft"=C:\WINDOWS\system32\olhrwef.exe [2009-09-10 117488]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-07-15 39408]
"PlayNC Launcher"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ALLUpdate]
C:\Program Files\ALLPlayer\ALLUpdate.exe [2009-06-04 869888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [2009-07-15 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2009-06-30 25604904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
c:\program files\steam\steam.exe [2009-09-13 1217784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^user^Menu Start^Programy^Autostart^hamachi.lnk]
C:\PROGRA~1\Hamachi\hamachi.exe [2009-09-06 625952]

C:\Documents and Settings\user\Menu Start\Programy\Autostart
Xfire.lnk - C:\Program Files\Xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2009-07-03 10520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe"="C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:CyberLink PowerDVD"
"C:\Program Files\Nowe Gadu-Gadu\gg.exe"="C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dxdiag.exe"="C:\WINDOWS\system32\dxdiag.exe:*:Enabled:Narzędzie diagnostyczne Microsoft DirectX"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"E:\Call of Juarez - Więzy Krwi\CoJBiBGame_x86.exe"="E:\Call of Juarez - Więzy Krwi\CoJBiBGame_x86.exe:*:Enabled:Call of Juarez - Bound in Blood"
"E:\Prototype\prototypef.exe"="E:\Prototype\prototypef.exe:*:Enabled:Prototype(TM)"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Dyyno Receiver\DPPM.exe"="C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Dyyno Receiver\DPPM.exe:*:Enabled:Dyyno Plugin Receiver"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Uruchamia plik DLL jako aplikację"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\muserver\JoinServer\JoinServer.exe"="D:\muserver\JoinServer\JoinServer.exe:*:Enabled:JoinServer MFC ?? ????"
"D:\muserver\DataServer1\Dataserver.exe"="D:\muserver\DataServer1\Dataserver.exe:*:Enabled:Dataserver ?? ????"
"D:\muserver\DataServer2\Dataserver.exe"="D:\muserver\DataServer2\Dataserver.exe:*:Enabled:Dataserver ?? ????"
"D:\muserver\CS\CS.exe"="D:\muserver\CS\CS.exe:*:Enabled:CS"
"D:\muserver\RankingServer\DevilSqure_EventServer.exe"="D:\muserver\RankingServer\DevilSqure_EventServer.exe:*:Enabled:DevilSqure_EventServer"
"D:\muserver\ExDB\Exdb.exe"="D:\muserver\ExDB\Exdb.exe:*:Enabled:Exdb MFC ?? ????"
"D:\muserver\GameServer\GameServer.exe"="D:\muserver\GameServer\GameServer.exe:*:Enabled:GameServer"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"D:\muserver\MU2003_EVENT_SERVER\WZ_MU2003_EVENT_SERVER.exe"="D:\muserver\MU2003_EVENT_SERVER\WZ_MU2003_EVENT_SERVER.exe:*:Enabled:WZ_MU2003_EVENT_SERVER"
"E:\Terminator Salvation\TerminatorSalvation.exe"="E:\Terminator Salvation\TerminatorSalvation.exe:*:Enabled:Terminator Salvation"
"D:\Overlord II\Overlord2.exe"="D:\Overlord II\Overlord2.exe:*:Enabled:Overlord II"
"D:\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe"="D:\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe:*:Enabled:Jedi Academy MultiPlayer"
"D:\KotF Jedi Academy Expansion Pack\GameData\jamp.exe"="D:\KotF Jedi Academy Expansion Pack\GameData\jamp.exe:*:Enabled:Jedi Academy MultiPlayer"
"D:\Damnation\Binaries\DamnGame.exe"="D:\Damnation\Binaries\DamnGame.exe:*:Enabled:Damnation"
"D:\World of Warcraft\Launcher.exe"="D:\World of Warcraft\Launcher.exe:*:Disabled:Blizzard Launcher"
"D:\Assassin's Creed\AssassinsCreed_Dx9.exe"="D:\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"D:\Assassin's Creed\AssassinsCreed_Dx10.exe"="D:\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"D:\Assassin's Creed\AssassinsCreed_Launcher.exe"="D:\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"D:\CS 1.6 NON STEAM Digital Zone\hl.exe"="D:\CS 1.6 NON STEAM Digital Zone\hl.exe:*:Enabled:Half-Life Launcher"
"E:\Śmieci\sa\Samsung Java - Uploader.exe"="E:\Śmieci\sa\Samsung Java - Uploader.exe:*:Enabled:Samsung Java - Uploader"
"D:\Dark Sector\DS.exe"="D:\Dark Sector\DS.exe:*:Enabled:Dark Sector"
"D:\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe"="D:\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe:*:Enabled:Batman: Arkham Asylum"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Steam\steamapps\common\dawn of war 2\DOW2.exe"="C:\Program Files\Steam\steamapps\common\dawn of war 2\DOW2.exe:*:Enabled:DOW2"
"D:\Prince of Persia\Prince of Persia.exe"="D:\Prince of Persia\Prince of Persia.exe:*:Enabled:Prince of Persia Dx"
"D:\Prince of Persia\PrinceOfPersia_Launcher.exe"="D:\Prince of Persia\PrinceOfPersia_Launcher.exe:*:Enabled:Prince of Persia Update"
"C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe"="C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"D:\GTA IV\Grand Theft Auto IV\LaunchGTAIV.exe"="D:\GTA IV\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"D:\GTA IV\Grand Theft Auto IV\GTAIV.exe"="D:\GTA IV\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV"
"D:\Call of Duty 4 - Modern Warfare\iw3mp.exe"="D:\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM)"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0da64230-6ed6-11de-bf4f-002354733d5c}]
shell\AutoRun\command - H:\oiwj.exe
shell\open\command - H:\oiwj.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0da64231-6ed6-11de-bf4f-002354733d5c}]
shell\AutoRun\command - H:\sfkn.exe
shell\open\command - H:\sfkn.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0e747f05-7f40-11de-bf77-002354733d5c}]
shell\AutoRun\command - H:\ikj0.exe
shell\open\command - H:\ikj0.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15014091-67c7-11de-9dbb-806d6172696f}]
shell\AutoRun\command - C:\sfkn.exe
shell\open\command - C:\sfkn.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15014092-67c7-11de-9dbb-806d6172696f}]
shell\AutoRun\command - D:\sfkn.exe
shell\open\command - D:\sfkn.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15014093-67c7-11de-9dbb-806d6172696f}]
shell\AutoRun\command - E:\sfkn.exe
shell\open\command - E:\sfkn.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{37d97512-a9af-11de-bfe0-002354733d5c}]
shell\AutoRun\command - H:\sfkn.exe
shell\open\command - H:\sfkn.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{592e0e6a-6c94-11de-bf3d-002354733d5c}]
shell\AutoRun\command - H:\sfkn.exe
shell\open\command - H:\sfkn.exe


======List of files/folders created in the last 1 months======

2009-10-01 20:45:03 ----D---- C:\Program Files\trend micro
2009-10-01 20:44:59 ----D---- C:\rsit
2009-10-01 15:37:43 ----D---- C:\Program Files\VS Revo Group
2009-09-29 19:20:13 ----D---- C:\Documents and Settings\user\Dane aplikacji\Thinstall
2009-09-29 19:09:08 ----D---- C:\Program Files\WinAVI MP4 Converter
2009-09-29 18:54:00 ----A---- C:\WINDOWS\system32\pthreadGC2.dll
2009-09-29 18:53:59 ----D---- C:\Program Files\AoA MP4 Converter
2009-09-28 15:04:52 ----D---- C:\Program Files\Rockstar Games
2009-09-27 22:45:10 ----D---- C:\Program Files\SystemRequirementsLab
2009-09-26 00:20:28 ----A---- C:\WINDOWS\system32\xfcodec.dll
2009-09-24 21:07:32 ----D---- C:\Documents and Settings\user\Dane aplikacji\gtk-2.0
2009-09-24 16:51:43 ----D---- C:\Program Files\VID_0E8F&PID_0003
2009-09-19 18:28:05 ----D---- C:\Program Files\Logitech
2009-09-19 18:23:45 ----D---- C:\Program Files\Common Files\Logitech
2009-09-13 14:00:00 ----D---- C:\Program Files\Steam
2009-09-12 13:06:33 ----A---- C:\WINDOWS\system32\pbsvc.exe
2009-09-11 16:13:16 ----D---- C:\Documents and Settings\user\Dane aplikacji\Toribash
2009-09-10 18:00:52 ----D---- C:\Program Files\Rainmeter
2009-09-08 18:59:22 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-09-08 18:59:21 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2009-09-08 18:59:16 ----A---- C:\WINDOWS\game.ini
2009-09-07 16:38:11 ----D---- C:\WINDOWS\system32\xlive
2009-09-07 16:38:11 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2009-09-07 16:35:02 ----D---- C:\Program Files\MSBuild
2009-09-07 16:33:17 ----D---- C:\WINDOWS\system32\XPSViewer
2009-09-07 16:33:16 ----D---- C:\WINDOWS\system32\en-us
2009-09-07 16:32:52 ----D---- C:\Program Files\Reference Assemblies
2009-09-07 16:32:34 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-09-06 12:08:29 ----D---- C:\Program Files\Hamachi
2009-09-02 16:30:53 ----RSH---- C:\sfkn.exe

======List of files/folders modified in the last 1 months======

2009-10-01 20:57:01 ----D---- C:\WINDOWS\Temp
2009-10-01 20:47:11 ----D---- C:\WINDOWS\Prefetch
2009-10-01 20:45:03 ----RD---- C:\Program Files
2009-10-01 20:27:29 ----D---- C:\WINDOWS\system32
2009-10-01 20:19:13 ----RSH---- C:\WINDOWS\system32\nmdfgds0.dll
2009-10-01 20:10:12 ----D---- C:\Documents and Settings\user\Dane aplikacji\Skype
2009-10-01 18:59:59 ----HD---- C:\$AVG8.VAULT$
2009-10-01 17:40:41 ----D---- C:\Documents and Settings\user\Dane aplikacji\skypePM
2009-10-01 17:35:22 ----D---- C:\WINDOWS
2009-10-01 17:35:14 ----SD---- C:\WINDOWS\Tasks
2009-10-01 17:07:04 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-01 15:58:56 ----D---- C:\WINDOWS\system32\DirectX
2009-10-01 15:58:55 ----HD---- C:\WINDOWS\inf
2009-10-01 15:58:49 ----RSD---- C:\WINDOWS\assembly
2009-10-01 15:58:41 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-01 15:57:38 ----SHD---- C:\WINDOWS\Installer
2009-10-01 15:57:38 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-01 14:10:25 ----D---- C:\Program Files\Xfire
2009-09-29 21:08:53 ----D---- C:\Documents and Settings\user\Dane aplikacji\Xfire
2009-09-29 16:01:22 ----D---- C:\Program Files\Mozilla Firefox
2009-09-28 18:59:52 ----D---- C:\WINDOWS\pss
2009-09-28 18:10:15 ----D---- C:\Documents and Settings\user\Dane aplikacji\Hamachi
2009-09-28 18:09:45 ----D---- C:\WINDOWS\Minidump
2009-09-28 15:31:41 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2009-09-28 15:31:38 ----D---- C:\WINDOWS\system32\CatRoot
2009-09-24 13:49:33 ----D---- C:\Program Files\ZwangiSearch
2009-09-24 12:07:31 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\ZwangiSearch
2009-09-23 19:09:34 ----D---- C:\Documents and Settings\user\Dane aplikacji\GetRightToGo
2009-09-20 20:39:40 ----D---- C:\Program Files\Winamp
2009-09-19 18:23:45 ----D---- C:\Program Files\Common Files
2009-09-19 11:23:04 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-09-19 11:22:28 ----D---- C:\Program Files\AGEIA Technologies
2009-09-16 17:31:50 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-09-16 17:31:50 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-09-13 22:34:03 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-09-12 12:55:24 ----D---- C:\Program Files\Activision
2009-09-12 08:35:21 ----RSH---- C:\WINDOWS\system32\nmdfgds1.dll
2009-09-11 22:15:47 ----A---- C:\WINDOWS\avisplitter.ini
2009-09-10 18:01:09 ----D---- C:\WINDOWS\WinSxS
2009-09-10 14:52:26 ----RSH---- C:\WINDOWS\system32\olhrwef.exe
2009-09-08 18:59:38 ----D---- C:\WINDOWS\system32\drivers
2009-09-08 18:59:21 ----D---- C:\WINDOWS\system32\LogFiles
2009-09-08 14:03:48 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-09-07 21:14:16 ----D---- C:\WINDOWS\Microsoft.NET
2009-09-07 16:46:00 ----SD---- C:\Documents and Settings\user\Dane aplikacji\Microsoft
2009-09-07 16:41:46 ----RSD---- C:\WINDOWS\Fonts
2009-09-07 16:39:48 ----D---- C:\Program Files\Internet Explorer
2009-09-07 16:38:11 ----SD---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
2009-09-07 16:32:41 ----D---- C:\WINDOWS\system32\spool
2009-09-05 13:06:37 ----D---- C:\Program Files\Unlocker
2009-09-03 15:58:34 ----A---- C:\WINDOWS\win.ini
2009-09-03 14:46:31 ----D---- C:\Program Files\Nowe Gadu-Gadu

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-07-03 325640]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-07-03 27656]
R1 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-07-03 108552]
R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; \??\C:\Program Files\CyberLink\PowerDVD\000.fcl []
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-06 25280]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 monfilt;monfilt; C:\WINDOWS\system32\drivers\monfilt.sys [2008-02-14 1389056]
R3 mouhid;Sterownik myszy HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-06-10 8087712]
R3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2007-08-21 21760]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-07-01 108800]
R3 usbaudio;Sterownik audio USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Urządzenie wideo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-03-27 1086208]
S2 DgiVecp;DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys []
S2 SSPORT;SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys []
S3 AVPsys;AVPsys; \??\C:\WINDOWS\system32\drivers\cdaudio.sys []
S3 axkdqvqk;axkdqvqk; C:\WINDOWS\system32\drivers\axkdqvqk.sys []
S3 CCDECODE;Dekoder napisów; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\WINDOWS\system32\DRIVERS\CtClsFlt.sys []
S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;Koder-dekoder NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Połączenie TV/wideo firmy Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2006-01-04 8410880]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2008-02-22 87936]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2008-02-22 14976]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2008-02-22 114304]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbprint;Klasa PRINTER USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Kodery-dekodery teletekstu w standardzie światowym; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2009-07-03 908056]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-07-03 298264]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2009-05-11 233472]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-12 152984]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MSSQLSERVER;MSSQLSERVER; C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe [2000-08-06 7442493]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-06-10 168004]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-10-01 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-10-01 190144]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2007-02-07 173616]
R2 SQLSERVERAGENT;SQLSERVERAGENT; C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlagent.exe [2000-08-06 303170]
R2 ZwangiSearch Service;ZwangiSearch Service; C:\Documents and Settings\All Users\Dane aplikacji\ZwangiSearch\zwangi131.exe [2009-09-22 54760]
S2 gupdate1ca04cf2a930520;Usługa Google Update (gupdate1ca04cf2a930520); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-15 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-15 190448]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2000-08-06 65602]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Awatar użytkownika
Aselfer
~user
 
Posty: 800
Dołączenie: 05 Lip 2009, 21:28
Miejscowość: Biała Podlaska
Pochwały: 9



Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Postprzez Okocza 01 Paź 2009, 20:24

sformatuj wszystkie pendrive i pamięci przenośne innego typu.

Kod: Zaznacz wszystko
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe


fix w hj

otwórz notatnik i wklej:

Kod: Zaznacz wszystko
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cdoosoft"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0da64230-6ed6-11de-bf4f-002354733d5c}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0da64231-6ed6-11de-bf4f-002354733d5c}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0e747f05-7f40-11de-bf77-002354733d5c}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15014091-67c7-11de-9dbb-806d6172696f}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15014092-67c7-11de-9dbb-806d6172696f}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15014093-67c7-11de-9dbb-806d6172696f}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{37d97512-a9af-11de-bfe0-002354733d5c}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{592e0e6a-6c94-11de-bf3d-002354733d5c}]

zapisz jako fix.reg i odpal - dodaj do rejestru.

Pobierz narzędzie the avenger i wklej w białe pole:

Kod: Zaznacz wszystko
Files To Delete:

C:\WINDOWS\system32\olhrwef.exe
C:\WINDOWS\system32\nmdfgds0.dll


kliknij przycisk execute.

daj log z rsit po tych czynnościach.

Autor postu otrzymał pochwałę
eMachines E730G - Core i5-430M, 2GiB RAM, ATI Mobility Radeon HD5470, WD 320GiB; Cort Z-44,DR 0.09-0.42, Peavey Backstage
Mac OS X 10.7.2 Lion // Windows 7 Professional x64 // NIE POMAGAM NA PW/GG/E-MAIL
Image
"Moje Ego i Anima spotykają się i wymieniają przepisami na ciasteczka" - Maynard James Keenan
Awatar użytkownika
Okocza
~user
 
Posty: 8148
Dołączenie: 19 Mar 2006, 10:53
Pochwały: 404



Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Postprzez Aselfer 02 Paź 2009, 16:11

sformatowałem pendrive, ale nie czaje tego punktu :
Okocza napisał(a):sformatuj wszystkie pendrive i pamięci przenośne innego typu.

Kod: Zaznacz wszystko
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe


fix w hj

Awatar użytkownika
Aselfer
~user
 
Posty: 800
Dołączenie: 05 Lip 2009, 21:28
Miejscowość: Biała Podlaska
Pochwały: 9



Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Postprzez MichuPower 02 Paź 2009, 16:16

Aselfer napisał(a):ale nie czaje tego punktu :

hijackthis-silent-runners-regulamin-tego-dzialu-vt9452.html -> post Magika.
Usuwanie szkodliwych wpisów -> Pkt 3/4/5/6.
@down:
Okocza napisał(a):daj log z rsit po tych czynnościach.


Autor postu otrzymał pochwałę
Ostatnio edytowany przez MichuPower, 02 Paź 2009, 16:20, edytowano w sumie 1 raz
MichuPower = MaxPower
Awatar użytkownika
MichuPower
~user
 
Posty: 1868
Dołączenie: 02 Wrz 2008, 18:51
Miejscowość: Radomsko
Pochwały: 202



Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Postprzez Aselfer 02 Paź 2009, 16:17

Wielkie dzięki koledzy, pomogło :).
Awatar użytkownika
Aselfer
~user
 
Posty: 800
Dołączenie: 05 Lip 2009, 21:28
Miejscowość: Biała Podlaska
Pochwały: 9



Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Postprzez Okocza 02 Paź 2009, 16:39

Aselfer, daj log z rsit jeszcze.
eMachines E730G - Core i5-430M, 2GiB RAM, ATI Mobility Radeon HD5470, WD 320GiB; Cort Z-44,DR 0.09-0.42, Peavey Backstage
Mac OS X 10.7.2 Lion // Windows 7 Professional x64 // NIE POMAGAM NA PW/GG/E-MAIL
Image
"Moje Ego i Anima spotykają się i wymieniają przepisami na ciasteczka" - Maynard James Keenan
Awatar użytkownika
Okocza
~user
 
Posty: 8148
Dołączenie: 19 Mar 2006, 10:53
Pochwały: 404



Otwieranie dysku w osobnym oknie |dysk otwiera w nowym oknie

Postprzez Aselfer 02 Paź 2009, 18:14

I jest niestety teraz taki problem, że po ponownym uruchomieniu kompa, znowu jest tak jak było tzn w osobnym kompie.
log:
Kod: Zaznacz wszystko
Logfile of random's system information tool 1.06 (written by random/random)
Run by user at 2009-10-02 19:14:14
Microsoft Windows XP Professional Dodatek Service Pack 3
System drive C: has 14 GB (27%) free of 50 GB
Total RAM: 2047 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:14:19, on 2009-10-02
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\1.2.183.7\GoogleCrashHandler.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Xfire\Xfire.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\All Users\Dane aplikacji\ZwangiSearch\zwangi131.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlagent.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\ZwangiSearch\zwangi.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Opera\opera.exe
C:\Documents and Settings\user\Pulpit\RSIT.exe
C:\Program Files\trend micro\user.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.orbitdownloader.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\user\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Usługa Google Update (gupdate1ca04cf2a930520) (gupdate1ca04cf2a930520) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: ZwangiSearch Service - Unknown owner - C:\Documents and Settings\All Users\Dane aplikacji\ZwangiSearch\zwangi131.exe

--
End of file - 7877 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-583907252-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-583907252-725345543-1003UA.job
C:\WINDOWS\tasks\PCConfidential.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-07-03 1078552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
AVG Security Toolbar - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2009-07-03 1968920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-07-15 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-12 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-12 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}]
IEPluginBHO Class - C:\Documents and Settings\user\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll [2009-05-28 42088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{A057A204-BACC-4D26-9990-79A187E2698E} - AVG Security Toolbar - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2009-07-03 1968920]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-04-06 33603584]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-07-03 1932568]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-02-07 71216]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-02-07 54832]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-06-10 86016]
"Samsung PanelMgr"=C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [2008-09-03 536576]
"AVFX Engine"=C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe [2006-06-09 24576]
"FixCamera"=C:\WINDOWS\FixCamera.exe [2007-02-10 20480]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2005-09-05 339968]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-12 148888]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2007-08-31 1037736]
"NPSStartup"= []
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-01-21 92168]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-07-15 39408]
"PlayNC Launcher"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ALLUpdate]
C:\Program Files\ALLPlayer\ALLUpdate.exe [2009-06-04 869888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [2009-07-15 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2009-06-30 25604904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
c:\program files\steam\steam.exe [2009-09-13 1217784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^user^Menu Start^Programy^Autostart^hamachi.lnk]
C:\PROGRA~1\Hamachi\hamachi.exe [2009-09-06 625952]

C:\Documents and Settings\user\Menu Start\Programy\Autostart
Xfire.lnk - C:\Program Files\Xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2009-07-03 10520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe"="C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:CyberLink PowerDVD"
"C:\Program Files\Nowe Gadu-Gadu\gg.exe"="C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dxdiag.exe"="C:\WINDOWS\system32\dxdiag.exe:*:Enabled:Narzędzie diagnostyczne Microsoft DirectX"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"E:\Call of Juarez - Więzy Krwi\CoJBiBGame_x86.exe"="E:\Call of Juarez - Więzy Krwi\CoJBiBGame_x86.exe:*:Enabled:Call of Juarez - Bound in Blood"
"E:\Prototype\prototypef.exe"="E:\Prototype\prototypef.exe:*:Enabled:Prototype(TM)"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Dyyno Receiver\DPPM.exe"="C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Dyyno Receiver\DPPM.exe:*:Enabled:Dyyno Plugin Receiver"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Uruchamia plik DLL jako aplikację"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\muserver\JoinServer\JoinServer.exe"="D:\muserver\JoinServer\JoinServer.exe:*:Enabled:JoinServer MFC ?? ????"
"D:\muserver\DataServer1\Dataserver.exe"="D:\muserver\DataServer1\Dataserver.exe:*:Enabled:Dataserver ?? ????"
"D:\muserver\DataServer2\Dataserver.exe"="D:\muserver\DataServer2\Dataserver.exe:*:Enabled:Dataserver ?? ????"
"D:\muserver\CS\CS.exe"="D:\muserver\CS\CS.exe:*:Enabled:CS"
"D:\muserver\RankingServer\DevilSqure_EventServer.exe"="D:\muserver\RankingServer\DevilSqure_EventServer.exe:*:Enabled:DevilSqure_EventServer"
"D:\muserver\ExDB\Exdb.exe"="D:\muserver\ExDB\Exdb.exe:*:Enabled:Exdb MFC ?? ????"
"D:\muserver\GameServer\GameServer.exe"="D:\muserver\GameServer\GameServer.exe:*:Enabled:GameServer"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"D:\muserver\MU2003_EVENT_SERVER\WZ_MU2003_EVENT_SERVER.exe"="D:\muserver\MU2003_EVENT_SERVER\WZ_MU2003_EVENT_SERVER.exe:*:Enabled:WZ_MU2003_EVENT_SERVER"
"E:\Terminator Salvation\TerminatorSalvation.exe"="E:\Terminator Salvation\TerminatorSalvation.exe:*:Enabled:Terminator Salvation"
"D:\Overlord II\Overlord2.exe"="D:\Overlord II\Overlord2.exe:*:Enabled:Overlord II"
"D:\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe"="D:\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe:*:Enabled:Jedi Academy MultiPlayer"
"D:\KotF Jedi Academy Expansion Pack\GameData\jamp.exe"="D:\KotF Jedi Academy Expansion Pack\GameData\jamp.exe:*:Enabled:Jedi Academy MultiPlayer"
"D:\Damnation\Binaries\DamnGame.exe"="D:\Damnation\Binaries\DamnGame.exe:*:Enabled:Damnation"
"D:\World of Warcraft\Launcher.exe"="D:\World of Warcraft\Launcher.exe:*:Disabled:Blizzard Launcher"
"D:\Assassin's Creed\AssassinsCreed_Dx9.exe"="D:\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"D:\Assassin's Creed\AssassinsCreed_Dx10.exe"="D:\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"D:\Assassin's Creed\AssassinsCreed_Launcher.exe"="D:\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"D:\CS 1.6 NON STEAM Digital Zone\hl.exe"="D:\CS 1.6 NON STEAM Digital Zone\hl.exe:*:Enabled:Half-Life Launcher"
"E:\Śmieci\sa\Samsung Java - Uploader.exe"="E:\Śmieci\sa\Samsung Java - Uploader.exe:*:Enabled:Samsung Java - Uploader"
"D:\Dark Sector\DS.exe"="D:\Dark Sector\DS.exe:*:Enabled:Dark Sector"
"D:\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe"="D:\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe:*:Enabled:Batman: Arkham Asylum"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Steam\steamapps\common\dawn of war 2\DOW2.exe"="C:\Program Files\Steam\steamapps\common\dawn of war 2\DOW2.exe:*:Enabled:DOW2"
"D:\Prince of Persia\Prince of Persia.exe"="D:\Prince of Persia\Prince of Persia.exe:*:Enabled:Prince of Persia Dx"
"D:\Prince of Persia\PrinceOfPersia_Launcher.exe"="D:\Prince of Persia\PrinceOfPersia_Launcher.exe:*:Enabled:Prince of Persia Update"
"C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe"="C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"D:\GTA IV\Grand Theft Auto IV\LaunchGTAIV.exe"="D:\GTA IV\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"D:\GTA IV\Grand Theft Auto IV\GTAIV.exe"="D:\GTA IV\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV"
"D:\Call of Duty 4 - Modern Warfare\iw3mp.exe"="D:\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM)"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2009-10-01 20:45:03 ----D---- C:\Program Files\trend micro
2009-10-01 20:44:59 ----D---- C:\rsit
2009-10-01 15:37:43 ----D---- C:\Program Files\VS Revo Group
2009-09-29 19:20:13 ----D---- C:\Documents and Settings\user\Dane aplikacji\Thinstall
2009-09-29 19:09:08 ----D---- C:\Program Files\WinAVI MP4 Converter
2009-09-29 18:54:00 ----A---- C:\WINDOWS\system32\pthreadGC2.dll
2009-09-29 18:53:59 ----D---- C:\Program Files\AoA MP4 Converter
2009-09-28 15:04:52 ----D---- C:\Program Files\Rockstar Games
2009-09-27 22:45:10 ----D---- C:\Program Files\SystemRequirementsLab
2009-09-26 00:20:28 ----A---- C:\WINDOWS\system32\xfcodec.dll
2009-09-24 21:07:32 ----D---- C:\Documents and Settings\user\Dane aplikacji\gtk-2.0
2009-09-24 16:51:43 ----D---- C:\Program Files\VID_0E8F&PID_0003
2009-09-19 18:28:05 ----D---- C:\Program Files\Logitech
2009-09-19 18:23:45 ----D---- C:\Program Files\Common Files\Logitech
2009-09-13 14:00:00 ----D---- C:\Program Files\Steam
2009-09-12 13:06:33 ----A---- C:\WINDOWS\system32\pbsvc.exe
2009-09-11 16:13:16 ----D---- C:\Documents and Settings\user\Dane aplikacji\Toribash
2009-09-10 18:00:52 ----D---- C:\Program Files\Rainmeter
2009-09-08 18:59:22 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-09-08 18:59:21 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2009-09-08 18:59:16 ----A---- C:\WINDOWS\game.ini
2009-09-07 16:38:11 ----D---- C:\WINDOWS\system32\xlive
2009-09-07 16:38:11 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2009-09-07 16:35:02 ----D---- C:\Program Files\MSBuild
2009-09-07 16:33:17 ----D---- C:\WINDOWS\system32\XPSViewer
2009-09-07 16:33:16 ----D---- C:\WINDOWS\system32\en-us
2009-09-07 16:32:52 ----D---- C:\Program Files\Reference Assemblies
2009-09-07 16:32:34 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-09-06 12:08:29 ----D---- C:\Program Files\Hamachi

======List of files/folders modified in the last 1 months======

2009-10-02 19:12:36 ----D---- C:\WINDOWS\Prefetch
2009-10-02 19:12:35 ----RSH---- C:\WINDOWS\system32\nmdfgds0.dll
2009-10-02 19:12:35 ----D---- C:\WINDOWS\system32
2009-10-02 19:11:35 ----SD---- C:\WINDOWS\Tasks
2009-10-02 19:11:32 ----D---- C:\WINDOWS\Temp
2009-10-02 17:32:30 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-02 17:32:23 ----D---- C:\Documents and Settings\user\Dane aplikacji\Skype
2009-10-02 12:46:53 ----D---- C:\Documents and Settings\user\Dane aplikacji\skypePM
2009-10-01 22:11:31 ----D---- C:\Documents and Settings\user\Dane aplikacji\Xfire
2009-10-01 20:45:03 ----RD---- C:\Program Files
2009-10-01 20:27:29 ----HD---- C:\$AVG8.VAULT$
2009-10-01 17:35:22 ----D---- C:\WINDOWS
2009-10-01 15:58:56 ----D---- C:\WINDOWS\system32\DirectX
2009-10-01 15:58:55 ----HD---- C:\WINDOWS\inf
2009-10-01 15:58:49 ----RSD---- C:\WINDOWS\assembly
2009-10-01 15:58:41 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-01 15:57:38 ----SHD---- C:\WINDOWS\Installer
2009-10-01 15:57:38 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-01 14:10:25 ----D---- C:\Program Files\Xfire
2009-09-29 16:01:22 ----D---- C:\Program Files\Mozilla Firefox
2009-09-28 18:59:52 ----D---- C:\WINDOWS\pss
2009-09-28 18:10:15 ----D---- C:\Documents and Settings\user\Dane aplikacji\Hamachi
2009-09-28 18:09:45 ----D---- C:\WINDOWS\Minidump
2009-09-28 15:31:41 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2009-09-28 15:31:38 ----D---- C:\WINDOWS\system32\CatRoot
2009-09-24 13:49:33 ----D---- C:\Program Files\ZwangiSearch
2009-09-24 12:07:31 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\ZwangiSearch
2009-09-23 19:09:34 ----D---- C:\Documents and Settings\user\Dane aplikacji\GetRightToGo
2009-09-20 20:39:40 ----D---- C:\Program Files\Winamp
2009-09-19 18:23:45 ----D---- C:\Program Files\Common Files
2009-09-19 11:23:04 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-09-19 11:22:28 ----D---- C:\Program Files\AGEIA Technologies
2009-09-16 17:31:50 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-09-16 17:31:50 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-09-13 22:34:03 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-09-12 12:55:24 ----D---- C:\Program Files\Activision
2009-09-12 08:35:21 ----RSH---- C:\WINDOWS\system32\nmdfgds1.dll
2009-09-11 22:15:47 ----A---- C:\WINDOWS\avisplitter.ini
2009-09-10 18:01:09 ----D---- C:\WINDOWS\WinSxS
2009-09-10 14:52:26 ----RSH---- C:\WINDOWS\system32\olhrwef.exe
2009-09-10 14:52:26 ----RSH---- C:\sfkn.exe
2009-09-08 18:59:38 ----D---- C:\WINDOWS\system32\drivers
2009-09-08 18:59:21 ----D---- C:\WINDOWS\system32\LogFiles
2009-09-08 14:03:48 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-09-07 21:14:16 ----D---- C:\WINDOWS\Microsoft.NET
2009-09-07 16:46:00 ----SD---- C:\Documents and Settings\user\Dane aplikacji\Microsoft
2009-09-07 16:41:46 ----RSD---- C:\WINDOWS\Fonts
2009-09-07 16:39:48 ----D---- C:\Program Files\Internet Explorer
2009-09-07 16:38:11 ----SD---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
2009-09-07 16:32:41 ----D---- C:\WINDOWS\system32\spool
2009-09-05 13:06:37 ----D---- C:\Program Files\Unlocker
2009-09-03 15:58:34 ----A---- C:\WINDOWS\win.ini
2009-09-03 14:46:31 ----D---- C:\Program Files\Nowe Gadu-Gadu

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-07-03 325640]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-07-03 27656]
R1 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-07-03 108552]
R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; \??\C:\Program Files\CyberLink\PowerDVD\000.fcl []
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-06 25280]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 monfilt;monfilt; C:\WINDOWS\system32\drivers\monfilt.sys [2008-02-14 1389056]
R3 mouhid;Sterownik myszy HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-06-10 8087712]
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2007-08-21 21760]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-07-01 108800]
R3 usbaudio;Sterownik audio USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Urządzenie wideo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-03-27 1086208]
S2 DgiVecp;DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys []
S2 SSPORT;SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys []
S3 a73vmeo1;a73vmeo1; C:\WINDOWS\system32\drivers\a73vmeo1.sys []
S3 AVPsys;AVPsys; \??\C:\WINDOWS\system32\drivers\cdaudio.sys []
S3 CCDECODE;Dekoder napisów; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\WINDOWS\system32\DRIVERS\CtClsFlt.sys []
S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;Koder-dekoder NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Połączenie TV/wideo firmy Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2006-01-04 8410880]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2008-02-22 87936]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2008-02-22 14976]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2008-02-22 114304]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbprint;Klasa PRINTER USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 WSTCODEC;Kodery-dekodery teletekstu w standardzie światowym; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2009-07-03 908056]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-07-03 298264]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2009-05-11 233472]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-12 152984]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MSSQLSERVER;MSSQLSERVER; C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe [2000-08-06 7442493]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-06-10 168004]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-10-01 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-10-02 190144]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2007-02-07 173616]
R2 SQLSERVERAGENT;SQLSERVERAGENT; C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlagent.exe [2000-08-06 303170]
R2 ZwangiSearch Service;ZwangiSearch Service; C:\Documents and Settings\All Users\Dane aplikacji\ZwangiSearch\zwangi131.exe [2009-09-22 54760]
S2 gupdate1ca04cf2a930520;Usługa Google Update (gupdate1ca04cf2a930520); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-15 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-15 190448]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2000-08-06 65602]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Awatar użytkownika
Aselfer
~user
 
Posty: 800
Dołączenie: 05 Lip 2009, 21:28
Miejscowość: Biała Podlaska
Pochwały: 9




Powróć do System Windows

Kto jest na forum

Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 0 gości