problemy z explorer.exe i usuwaniem programów

**Posty:** 54 · przez **gorczas** 03 Mar 2007, 13:55

PRoszę o sprawdzenia loga, ponieważ przy każdym uruchomieniu komputera nic nie można zrobić dopóki nie "zrestartujeię explorer.exe (ctrl+alt+dal zakończ proces i właczenie go od nowa). Poza tym przy usuwaniu niektórych programów otrzymuję błąd:

Do tego przy uruchamianiu Media Player Classic otrzymuję błąd:

HijackThis:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 12:39:42, on 2007-03-03 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\CTHELPER.EXE C:\Programy\D-Tools\daemon.exe C:\Programy\Kaspersky AVP6\avp.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\Programy\Kaspersky AVP6\avp.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Programy\Kerio\Personal Firewall\persfw.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\explorer.exe C:\Programy\Mozilla Firefox\firefox.exe C:\Programy\Office\OFFICE11\WINWORD.EXE C:\Documents and Settings\gorczas\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programy\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Programy\FlashGet\jccatch.dll O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Programy\FlashGet\getflash.dll O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Programy\FlashGet\fgiebar.dll O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programy\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [Kaspersky Anti-Virus 2006] C:\Programy\Kaspersky AVP6\avp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: install.lnk = C:\Documents and Settings\gorczas\Ustawienia lokalne\Temp\setup.exe O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Programy\FlashGet\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Programy\FlashGet\jc_all.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\Programy\Office\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll O9 - Extra button: Script Checker - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programy\Kaspersky AVP6\scieplugin.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\Office\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Programy\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Programy\FlashGet\flashget.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVP - Kaspersky Lab - C:\Programy\Kaspersky AVP6\avp.exe O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing) O23 - Service: NBService - Nero AG - C:\Programy\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Programy\Kerio\Personal Firewall\persfw.exe

Silent Runners:

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision R50, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "CTHelper" = "CTHELPER.EXE" ["Creative Technology Ltd"] "UpdReg" = "C:\WINDOWS\UpdReg.EXE" ["Creative Technology Ltd."] "Jet Detection" = ""C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"" [empty string] "NeroFilterCheck" = "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" ["Nero AG"] "DAEMON Tools-1033" = ""C:\Programy\D-Tools\daemon.exe" -lang 1033" ["DAEMON'S HOME"] "Kaspersky Anti-Virus 2006" = "C:\Programy\Kaspersky AVP6\avp.exe" ["Kaspersky Lab"] "SunJavaUpdateSched" = ""C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"" ["Sun Microsystems, Inc."] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "AcroIEHlprObj Class" \InProcServer32\(Default) = "C:\Programy\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7}\(Default) = "flashget urlcatch" -> {HKLM...CLSID} = "Flashget Catch Url Class" \InProcServer32\(Default) = "C:\Programy\FlashGet\jccatch.dll" ["www.flashget.com"] {37B85A21-692B-4205-9CAD-2626E4993404}\(Default) = "My Global Search Bar BHO" -> {HKLM...CLSID} = "My Global Search Bar BHO" \InProcServer32\(Default) = "C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL" ["My Global Search"] {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\(Default) = (no title provided) -> {HKLM...CLSID} = "Megaupload Toolbar" \InProcServer32\(Default) = "C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL" ["MegaUpload"] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...CLSID} = "SSVHelper Class" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll" ["Sun Microsystems, Inc."] {F156768E-81EF-470C-9057-481BA8380DBA}\(Default) = (no title provided) -> {HKLM...CLSID} = "FlashGet GetFlash Class" \InProcServer32\(Default) = "C:\Programy\FlashGet\getflash.dll" ["www.flashget.com"] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{00020D75-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Desktop Icon Handler" -> {HKLM...CLSID} = "Microsoft Office Outlook" \InProcServer32\(Default) = "C:\Programy\Office\OFFICE11\MLSHEXT.DLL" [MS] "{0006F045-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Custom Icon Handler" -> {HKLM...CLSID} = "Rozszerzenie ikon plików programu Outlook" \InProcServer32\(Default) = "C:\Programy\Office\OFFICE11\OLKFSTUB.DLL" [MS] "{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Programy\Office\OFFICE11\msohev.dll" [MS] "{97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2}" = "NeroCoverEd Live Icons" -> {HKLM...CLSID} = "NeroCoverEdLiveIcons Class" \InProcServer32\(Default) = "C:\Programy\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll" ["Nero AG"] "{85E0B171-04FA-11D1-B7DA-00A0C90348D6}" = "Script Checker" -> {HKLM...CLSID} = "Script Checker" \InProcServer32\(Default) = "C:\Programy\Kaspersky AVP6\scieplugin.dll" ["Kaspersky Lab"] HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ "WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" -> {HKLM...CLSID} = "WPDShServiceObj Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [MS] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ <<!>> klogon\DLLName = "C:\WINDOWS\system32\klogon.dll" ["Kaspersky Lab"] HKLM\Software\Classes\PROTOCOLS\Filter\ <<!>> text/xml\CLSID = "{807553E5-5146-11D5-A672-00B0D022E945}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL" [MS] HKLM\Software\Classes\Folder\shellex\ColumnHandlers\ {F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info" -> {HKLM...CLSID} = "PDF Shell Extension" \InProcServer32\(Default) = "C:\Programy\Acrobat 7.0\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ Cover Designer\(Default) = "{73FCA462-9BD5-4065-A73F-A8E5F6904EF7}" -> {HKLM...CLSID} = "NeroCoverEdContextMenu Class" \InProcServer32\(Default) = "C:\Programy\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll" ["Nero AG"] Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Programy\Kaspersky AVP6\shellex.dll" ["Kaspersky Lab"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Programy\Kaspersky AVP6\shellex.dll" ["Kaspersky Lab"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] Group Policies {GPedit.msc branch and setting}: ----------------------------------------------- Note: detected settings may not have any effect. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) hex:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp" Enabled Screen Saver: --------------------- HKCU\Control Panel\Desktop\ "SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS] Startup items in "gorczas" & "All Users" startup folders: --------------------------------------------------------- C:\Documents and Settings\gorczas\Menu Start\Programy\Autostart "Adobe Gamma" -> shortcut to: "C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe" ["Adobe Systems, Inc."] "install" -> shortcut to: "C:\Documents and Settings\gorczas\Ustawienia lokalne\Temp\setup.exe /TempCopy /Step=3" [MS] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 11 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ "{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}" -> {HKLM...CLSID} = "Megaupload Toolbar" \InProcServer32\(Default) = "C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL" ["MegaUpload"] "{37B85A29-692B-4205-9CAD-2626E4993404}" -> {HKLM...CLSID} = "My Global Search Bar" \InProcServer32\(Default) = "C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL" ["My Global Search"] HKLM\Software\Microsoft\Internet Explorer\Toolbar\ "{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}" = (no title provided) -> {HKLM...CLSID} = "Megaupload Toolbar" \InProcServer32\(Default) = "C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL" ["MegaUpload"] "{E0E899AB-F487-11D5-8D29-0050BA6940E3}" = "FlashGet" -> {HKLM...CLSID} = "FlashGet" \InProcServer32\(Default) = "C:\Programy\FlashGet\fgiebar.dll" ["Amaze Soft"] "{37B85A29-692B-4205-9CAD-2626E4993404}" = (no title provided) -> {HKLM...CLSID} = "My Global Search Bar" \InProcServer32\(Default) = "C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL" ["My Global Search"] Explorer Bars HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\ HKLM\Software\Classes\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D6}\(Default) = "Script Checker" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\Programy\Kaspersky AVP6\scieplugin.dll" ["Kaspersky Lab"] HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\(Default) = "&Badanie" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\Programy\Office\OFFICE11\REFIEBAR.DLL" [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Console" "CLSIDExtension" = "{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}" -> {HKLM...CLSID} = "Java Plug-in 1.5.0_11" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll" ["Sun Microsystems, Inc."] {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}\ "ButtonText" = "Script Checker" {92780B25-18CC-41C8-B9BE-3C9C571A8263}\ "ButtonText" = "Badanie" {D6E814A0-E0C5-11D4-8D29-0050BA6940E3}\ "ButtonText" = "FlashGet" "MenuText" = "FlashGet" "Exec" = "C:\Programy\FlashGet\flashget.exe" ["FlashGet.com"] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ .NET Runtime Optimization Service v2.0.50727_X86, clr_optimization_v2.0.50727_32, "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe" [MS] AVP, AVP, "C:\Programy\Kaspersky AVP6\avp.exe -r" ["Kaspersky Lab"] Kerio Personal Firewall, PersFw, ""C:\Programy\Kerio\Personal Firewall\persfw.exe"" ["Kerio Technologies"] Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"" [MS] SQL Server (SQLEXPRESS), MSSQL$SQLEXPRESS, ""C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS" [MS] Print Monitors: --------------- HKLM\System\CurrentControlSet\Control\Print\Monitors\ Microsoft Document Imaging Writer Monitor\Driver = "mdimon.dll" [MS] ---------- <<!>>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points, use the -supp parameter or answer "No" at the first message box and "Yes" at the second message box. ---------- (total run time: 70 seconds, including 14 seconds for message boxes)

Z góry dizęki za pomoc

**Posty:** 1134 · przez **MISTEJK** 03 Mar 2007, 17:00

Do usunięcia:

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL

**Posty:** 54 · przez **gorczas** 14 Mar 2007, 20:30

A teraz? Bo problem podany w pierwszym poście nadal występuje..

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 19:19:18, on 2007-03-14 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programy\BlueSoleil\BTNtService.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Programy\Kerio\Personal Firewall\persfw.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\CTHELPER.EXE C:\Programy\D-Tools\daemon.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe C:\Program Files\Winwall\Winwall.exe C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe C:\Programy\Nero\Nero 7\Core\nero.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe C:\Programy\Mozilla Firefox\firefox.exe C:\Programy\Tlen.pl\tlen.exe D:\Moje dokumenty\Przemek\Instalki\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programy\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Programy\FlashGet\jccatch.dll O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Programy\FlashGet\getflash.dll O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Programy\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programy\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe O4 - HKLM\..\Run: [NvMixerTray] C:\Program Files\NVIDIA Corporation\NvMixer\NvMixerTray.exe O4 - Startup: Winwall Autostart.lnk = C:\Program Files\Winwall\Winwall.exe O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Programy\FlashGet\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Programy\FlashGet\jc_all.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\Programy\Office\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Script Checker - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programy\Kaspersky AVP6\scieplugin.dll (file missing) O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\Office\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Programy\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Programy\FlashGet\flashget.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVP - Unknown owner - C:\Programy\Kaspersky AVP6\avp.exe (file missing) O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programy\BlueSoleil\BTNtService.exe O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing) O23 - Service: NBService - Nero AG - C:\Programy\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Programy\Kerio\Personal Firewall\persfw.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision R50, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "CTHelper" = "CTHELPER.EXE" ["Creative Technology Ltd"] "UpdReg" = "C:\WINDOWS\UpdReg.EXE" ["Creative Technology Ltd."] "Jet Detection" = ""C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"" [empty string] "NeroFilterCheck" = "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" ["Nero AG"] "DAEMON Tools-1033" = ""C:\Programy\D-Tools\daemon.exe" -lang 1033" ["DAEMON'S HOME"] "SunJavaUpdateSched" = ""C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"" ["Sun Microsystems, Inc."] "QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime" ["Apple Computer, Inc."] "(Default)" = "(empty string)" [file not found] "StatusClient" = "C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto" ["Hewlett-Packard"] "TomcatStartup" = "C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe" ["Hewlett-Packard"] "NvMixerTray" = "C:\Program Files\NVIDIA Corporation\NvMixer\NvMixerTray.exe" ["NVIDIA Corporation"] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "AcroIEHlprObj Class" \InProcServer32\(Default) = "C:\Programy\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7}\(Default) = "flashget urlcatch" -> {HKLM...CLSID} = "Flashget Catch Url Class" \InProcServer32\(Default) = "C:\Programy\FlashGet\jccatch.dll" ["www.flashget.com"] {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\(Default) = (no title provided) -> {HKLM...CLSID} = "Megaupload Toolbar" \InProcServer32\(Default) = "C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL" ["MegaUpload"] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...CLSID} = "SSVHelper Class" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll" ["Sun Microsystems, Inc."] {F156768E-81EF-470C-9057-481BA8380DBA}\(Default) = (no title provided) -> {HKLM...CLSID} = "FlashGet GetFlash Class" \InProcServer32\(Default) = "C:\Programy\FlashGet\getflash.dll" ["www.flashget.com"] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{00020D75-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Desktop Icon Handler" -> {HKLM...CLSID} = "Microsoft Office Outlook" \InProcServer32\(Default) = "C:\Programy\Office\OFFICE11\MLSHEXT.DLL" [MS] "{0006F045-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Custom Icon Handler" -> {HKLM...CLSID} = "Rozszerzenie ikon plików programu Outlook" \InProcServer32\(Default) = "C:\Programy\Office\OFFICE11\OLKFSTUB.DLL" [MS] "{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Programy\Office\OFFICE11\msohev.dll" [MS] "{97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2}" = "NeroCoverEd Live Icons" -> {HKLM...CLSID} = "NeroCoverEdLiveIcons Class" \InProcServer32\(Default) = "C:\Programy\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll" ["Nero AG"] "{85E0B171-04FA-11D1-B7DA-00A0C90348D6}" = "Script Checker" -> {HKLM...CLSID} = "Script Checker" \InProcServer32\(Default) = "C:\Programy\Kaspersky AVP6\scieplugin.dll" [file not found] HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ "WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" -> {HKLM...CLSID} = "WPDShServiceObj Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [MS] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ <<!>> AtiExtEvent\DLLName = "Ati2evxx.dll" ["ATI Technologies Inc."] <<!>> klogon\DLLName = "C:\WINDOWS\system32\klogon.dll" ["Kaspersky Lab"] HKLM\Software\Classes\PROTOCOLS\Filter\ <<!>> text/xml\CLSID = "{807553E5-5146-11D5-A672-00B0D022E945}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL" [MS] HKLM\Software\Classes\Folder\shellex\ColumnHandlers\ {F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info" -> {HKLM...CLSID} = "PDF Shell Extension" \InProcServer32\(Default) = "C:\Programy\Acrobat 7.0\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ Cover Designer\(Default) = "{73FCA462-9BD5-4065-A73F-A8E5F6904EF7}" -> {HKLM...CLSID} = "NeroCoverEdContextMenu Class" \InProcServer32\(Default) = "C:\Programy\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll" ["Nero AG"] Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Programy\Kaspersky AVP6\shellex.dll" [file not found] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Programy\Kaspersky AVP6\shellex.dll" [file not found] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] Group Policies {GPedit.msc branch and setting}: ----------------------------------------------- Note: detected settings may not have any effect. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) hex:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\gorczas\Dane aplikacji\Winwall\Winwall.bmp" Startup items in "gorczas" & "All Users" startup folders: --------------------------------------------------------- C:\Documents and Settings\gorczas\Menu Start\Programy\Autostart "Winwall Autostart" -> shortcut to: "C:\Program Files\Winwall\Winwall.exe" [null data] Enabled Scheduled Tasks: ------------------------ "AppleSoftwareUpdate" -> launches: "C:\Program Files\Apple Software Update\SoftwareUpdate.exe -Task" ["Apple Computer, Inc."] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 15 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ "{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}" -> {HKLM...CLSID} = "Megaupload Toolbar" \InProcServer32\(Default) = "C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL" ["MegaUpload"] "{37B85A29-692B-4205-9CAD-2626E4993404}" -> {HKLM...CLSID} = "My Global Search Bar" \InProcServer32\(Default) = "C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL" [file not found] HKLM\Software\Microsoft\Internet Explorer\Toolbar\ "{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}" = (no title provided) -> {HKLM...CLSID} = "Megaupload Toolbar" \InProcServer32\(Default) = "C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL" ["MegaUpload"] "{E0E899AB-F487-11D5-8D29-0050BA6940E3}" = "FlashGet" -> {HKLM...CLSID} = "FlashGet" \InProcServer32\(Default) = "C:\Programy\FlashGet\fgiebar.dll" ["Amaze Soft"] Explorer Bars HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\ HKLM\Software\Classes\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D6}\(Default) = "Script Checker" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\Programy\Kaspersky AVP6\scieplugin.dll" [file not found] HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\(Default) = "&Badanie" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\Programy\Office\OFFICE11\REFIEBAR.DLL" [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Console" "CLSIDExtension" = "{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}" -> {HKCU...CLSID} = "Java Plug-in 1.5.0_11" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll" ["Sun Microsystems, Inc."] -> {HKLM...CLSID} = "Java Plug-in 1.5.0_11" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll" ["Sun Microsystems, Inc."] {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}\ "ButtonText" = "Script Checker" {92780B25-18CC-41C8-B9BE-3C9C571A8263}\ "ButtonText" = "Badanie" {D6E814A0-E0C5-11D4-8D29-0050BA6940E3}\ "ButtonText" = "FlashGet" "MenuText" = "FlashGet" "Exec" = "C:\Programy\FlashGet\flashget.exe" ["FlashGet.com"] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ .NET Runtime Optimization Service v2.0.50727_X86, clr_optimization_v2.0.50727_32, "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe" [MS] Ati HotKey Poller, Ati HotKey Poller, "C:\WINDOWS\system32\Ati2evxx.exe" ["ATI Technologies Inc."] BlueSoleil Hid Service, BlueSoleil Hid Service, "C:\Programy\BlueSoleil\BTNtService.exe" [null data] Kerio Personal Firewall, PersFw, ""C:\Programy\Kerio\Personal Firewall\persfw.exe"" ["Kerio Technologies"] Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"" [MS] NMIndexingService, NMIndexingService, ""C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"" ["Nero AG"] SQL Server (SQLEXPRESS), MSSQL$SQLEXPRESS, ""C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS" [MS] Print Monitors: --------------- HKLM\System\CurrentControlSet\Control\Print\Monitors\ HP Master Monitor\Driver = "HPBMMON.DLL" ["Hewlett-Packard"] Microsoft Document Imaging Writer Monitor\Driver = "mdimon.dll" [MS] ---------- <<!>>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + The search for DESKTOP.INI DLL launch points on all local fixed drives took 24 seconds. ---------- (total run time: 84 seconds)

**Posty:** 18165 · przez **wojtas** 14 Mar 2007, 20:41

wklej do notatnika:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{37B85A29-692B-4205-9CAD-2626E4993404}"=-

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

wloz do napedu plyte instalatora WINXP

ctrl + alt + delete >>procesy -> ubij explorer.exe >> nowe zadanie >> cmd >> "expand X:\i386\explorer.ex_ Y:\Windows\explorer.exe "

X-litera naperu
Y-litera systemowego dysku

**Posty:** 54 · przez **gorczas** 14 Mar 2007, 21:10

Niestety..

**Posty:** 18165 · przez **wojtas** 14 Mar 2007, 21:17

a sprobuj:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{37B85A29-692B-4205-9CAD-2626E4993404}"=-

**Posty:** 54 · przez **gorczas** 14 Mar 2007, 21:26

Teraz wszystko poszło OK, ale nadal występują te same problemy..

**Posty:** 18165 · przez **wojtas** 14 Mar 2007, 21:30

robiles to:??

wloz do napedu plyte instalatora WINXP

ctrl + alt + delete >>procesy -> ubij explorer.exe >> nowe zadanie >> cmd >> "expand X:\i386\explorer.ex_ Y:\Windows\explorer.exe "

X-litera naperu
Y-litera systemowego dysku

**Posty:** 54 · przez **gorczas** 14 Mar 2007, 21:31

Tak. Rozszerzyło się o kilkanaście procent bodajże..

**Posty:** 18165 · przez **wojtas** 14 Mar 2007, 21:34

podaj loga jeszcze:

http://www.techsupportforum.com/sectools/Deckard/comboscan.exe

**Posty:** 54 · przez **gorczas** 14 Mar 2007, 21:54

Proszę bardzo

ComboScan.txt

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by gorczas on 2007-03-14 at 20:44:30 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- System Restore is disabled; attempting to re-enable...success. -- Last 1 Restore Point(s) -- 1: 2007-03-14 19:44:35 UTC - RP1 - Punkt kontrolny systemu Performed disk cleanup. -- HijackThis (run as gorczas.exe) --------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 20:45:54, on 2007-03-14 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\CTHELPER.EXE C:\Programy\D-Tools\daemon.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe C:\Programy\BlueSoleil\BTNtService.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe C:\Programy\Kerio\Personal Firewall\persfw.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\explorer.exe C:\Documents and Settings\gorczas\Pulpit\comboscan.exe C:\PROGRA~1\HIJACK~1\gorczas.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programy\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Programy\FlashGet\jccatch.dll O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Programy\FlashGet\getflash.dll O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Programy\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programy\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe O4 - HKLM\..\Run: [NvMixerTray] C:\Program Files\NVIDIA Corporation\NvMixer\NvMixerTray.exe O4 - Startup: Winwall Autostart.lnk = C:\Program Files\Winwall\Winwall.exe O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Programy\FlashGet\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Programy\FlashGet\jc_all.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\Programy\Office\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Script Checker - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programy\Kaspersky AVP6\scieplugin.dll (file missing) O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\Office\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Programy\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Programy\FlashGet\flashget.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVP - Unknown owner - C:\Programy\Kaspersky AVP6\avp.exe (file missing) O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programy\BlueSoleil\BTNtService.exe O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing) O23 - Service: NBService - Nero AG - C:\Programy\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Programy\Kerio\Personal Firewall\persfw.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- File Associations ----------------------------------------------------------- .bat - batfile - "%1" %* .chm - chm.file - "C:\WINDOWS\hh.exe" %1 .cmd - cmdfile - "%1" %* .com - comfile - "%1" %* .exe - exefile - "%1" %* .hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1 .inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1 .ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1 .js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %* .lnk - lnkfile - {00021401-0000-0000-C000-000000000046} .pif - piffile - "%1" %* .reg - regfile - regedit.exe "%1" .scr - scrfile - "%1" /S .txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1 .vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %* -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- 1R AmdK7 (Sterownik procesora AMD K7) - C:\WINDOWS\system32\drivers\amdk7.sys 3R ati2mtag - C:\WINDOWS\system32\drivers\ati2mtag.sys 3R BlueletAudio (Bluetooth Audio Service) - C:\WINDOWS\system32\drivers\blueletaudio.sys 3R BlueletSCOAudio (Bluetooth SCO Audio Service) - C:\WINDOWS\system32\drivers\BlueletSCOAudio.sys 3R BT (Bluetooth PAN Network Adapter) - C:\WINDOWS\system32\drivers\BtNetDrv.sys 3R Btcsrusb (Bluetooth USB For Bluetooth Service) - C:\WINDOWS\system32\drivers\btcusb.sys 3R BTHidEnum (Bluetooth HID Enumerator) - C:\WINDOWS\system32\drivers\vbtenum.sys 0R BTHidMgr (Bluetooth HID Manager Service) - C:\WINDOWS\system32\drivers\BTHidMgr.sys 3R Cap7134 (AVerMedia, AVerTV WDM Video Capture (Silicon)) - C:\WINDOWS\system32\drivers\Cap7134.sys 3S CCDECODE (Dekoder napisów) - C:\WINDOWS\system32\drivers\CCDECODE.sys 3R ctac32k (Creative AC3 Software Decoder) - C:\WINDOWS\system32\drivers\CTAC32K.SYS 3R ctaud2k (Creative Audio Driver (WDM)) - C:\WINDOWS\system32\drivers\ctaud2k.sys 3S ctdvda2k (Creative DVD-Audio Device Driver) - C:\WINDOWS\system32\drivers\ctdvda2k.sys (not found) 3S ctljystk (Port gier dla karty Creative SB Live!) - C:\WINDOWS\system32\drivers\ctljystk.sys 3R ctprxy2k (Creative Proxy Driver) - C:\WINDOWS\system32\drivers\CTPRXY2K.SYS 3R ctsfm2k (Creative SoundFont Management Device Driver) - C:\WINDOWS\system32\drivers\CTSFM2K.SYS 0R d347bus - C:\WINDOWS\system32\drivers\d347bus.sys 0R d347prt - C:\WINDOWS\system32\drivers\d347prt.sys 3R dot4 (Sterownik MS IEEE-1284.4) - C:\WINDOWS\system32\drivers\Dot4.sys 3R Dot4Print (Sterownik klasy drukowania dla IEEE-1284.4) - C:\WINDOWS\system32\drivers\Dot4Prt.sys 3R dot4usb (MS Dot4USB Filter Dot4USB Filter) - C:\WINDOWS\system32\drivers\Dot4usb.sys 3R emupia (E-mu Plug-in Architecture Driver) - C:\WINDOWS\system32\drivers\EMUPIA2K.SYS 3S FETNDIS (Sterownik NT karty VIA PCI 10/100Mb Fast Ethernet) - C:\WINDOWS\system32\drivers\fetnd5.sys 3R FETNDISB (VIA Rhine Family Fast Ethernet Adapter Driver Service) - C:\WINDOWS\system32\drivers\fetnd5b.sys 1R fwdrv (Kerio Personal Firewall Driver) - C:\WINDOWS\system32\drivers\FWDRV.SYS 3R ha10kx2k (Creative Hardware Abstract Layer Driver) - C:\WINDOWS\system32\drivers\ha10kx2k.sys 3S hap16v2k (Creative P16V HAL Driver) - C:\WINDOWS\system32\drivers\HAP16V2K.SYS 3R hidusb (Sterownik Microsoft klasy HID) - C:\WINDOWS\system32\drivers\hidusb.sys 3R mouhid (Sterownik myszy HID) - C:\WINDOWS\system32\drivers\mouhid.sys 3S MSTEE (Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming) - C:\WINDOWS\system32\drivers\MSTEE.sys 3S NABTSFEC (Koder-dekoder NABTS/FEC VBI) - C:\WINDOWS\system32\drivers\NABTSFEC.sys 3S NdisIP (Połączenie TV/wideo firmy Microsoft) - C:\WINDOWS\system32\drivers\NdisIP.sys 3S NTSIM - C:\WINDOWS\system32\ntsim.sys 0R nvatabus - C:\WINDOWS\system32\drivers\nvatabus.sys 3R nvax (Service for NVIDIA(R) nForce(TM) Audio Enumerator) - C:\WINDOWS\system32\drivers\nvax.sys 3R nvnforce (Service for NVIDIA(R) nForce(TM) Audio) - C:\WINDOWS\system32\drivers\nvapu.sys 0R nv_agp (NVIDIA nForce AGP Bus Filter) - C:\WINDOWS\system32\drivers\nv_agp.SYS 3R ossrv (Creative OS Services Driver) - C:\WINDOWS\system32\drivers\ctoss2k.sys 3R PhTVTune (Cap7134 TVTuner) - C:\WINDOWS\system32\drivers\PhTVTune.sys 3R ROOTMODEM (Microsoft Legacy Modem Driver) - C:\WINDOWS\system32\drivers\rootmdm.sys 3S SLIP (BDA Slip De-Framer) - C:\WINDOWS\system32\drivers\SLIP.sys 3S streamip (BDA IPSink) - C:\WINDOWS\system32\drivers\StreamIP.sys 3R usbehci (Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft) - C:\WINDOWS\system32\drivers\usbehci.sys 3R usbohci (Sterownik Miniport otwartego kontrolera hosta USB Microsoft) - C:\WINDOWS\system32\drivers\usbohci.sys 3S USBSTOR (Sterownik magazynu masowego USB) - C:\WINDOWS\system32\drivers\USBSTOR.SYS 3R VComm (Virtual Serial port driver) - C:\WINDOWS\system32\drivers\VComm.sys 3R VcommMgr (Bluetooth VComm Manager Service) - C:\WINDOWS\system32\drivers\VcommMgr.sys 3S WSTCODEC (Kodery-dekodery teletekstu w standardzie światowym) - C:\WINDOWS\system32\drivers\WSTCODEC.SYS 3S WudfPf (Windows Driver Foundation - User-mode Driver Framework Platform Driver) - C:\WINDOWS\system32\drivers\WudfPf.sys 3S WudfRd (Windows Driver Foundation - User-mode Driver Framework Reflector) - C:\WINDOWS\system32\drivers\WudfRd.sys -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- 3S Adobe LM Service - "C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe" 3S aspnet_state (ASP.NET State Service) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe 2R Ati HotKey Poller - C:\WINDOWS\system32\Ati2evxx.exe 2S ATI Smart - C:\WINDOWS\system32\ati2sgag.exe 2S AVP - C:\Programy\Kaspersky AVP6\avp.exe -r 2R BlueSoleil Hid Service - C:\Programy\BlueSoleil\BTNtService.exe 2R clr_optimization_v2.0.50727_32 (.NET Runtime Optimization Service v2.0.50727_X86) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 2R MSSQL$SQLEXPRESS (SQL Server (SQLEXPRESS)) - "C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS 4S MSSQLServerADHelper (SQL Server Active Directory Helper) - "C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe" 4S msvsmon80 (Visual Studio 2005 Remote Debugger) - "C:\Programy\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe" /service msvsmon80 3S NBService - C:\Programy\Nero\Nero 7\Nero BackItUp\NBService.exe 3S NMIndexingService - "C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe" 3S ose (Office Source Engine) - "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" 2R PersFw (Kerio Personal Firewall) - "C:\Programy\Kerio\Personal Firewall\persfw.exe" 3S Pml Driver HPZ12 - C:\WINDOWS\system32\HPZipm12.exe 4S SQLBrowser (SQL Server Browser) - "C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe" 3S SQLWriter (SQL Server VSS Writer) - "C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe" -- Scheduled Tasks ------------------------------------------------------------- 2007-03-11 10:33:00 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job<APPLES~1.JOB> -- Files created between 2007-02-14 and 2007-03-14 ----------------------------- 2007-03-12 23:11:11 54784 --a------ C:\WINDOWS\system32\drivers\vfwwdm32.dll 2007-03-12 21:40:14 41984 -ra------ C:\WINDOWS\system32\drivers\fetnd5b.sys 2007-03-12 21:40:12 6016 -ra------ C:\WINDOWS\system32\ntsim.sys 2007-03-12 21:33:57 0 d-------- C:\Program Files\Common Files\NVIDIA Shared<NVIDIA~1> 2007-03-12 21:33:56 0 d-------- C:\Program Files\NVIDIA Corporation<NVIDIA~1> 2007-03-12 21:33:12 341462 --a------ C:\WINDOWS\system32\nvuaudio.exe 2007-03-12 21:33:11 47104 -ra------ C:\WINDOWS\system32\nvopenal.dll 2007-03-12 21:33:11 31744 -ra------ C:\WINDOWS\system32\NVCOAD.DLL 2007-03-12 21:33:11 30208 -ra------ C:\WINDOWS\system32\nvasio.dll 2007-03-12 21:33:11 7168 -ra------ C:\WINDOWS\system32\nvack.dll 2007-03-12 21:33:11 5120 -ra------ C:\WINDOWS\system32\ALut.dll 2007-03-12 21:33:10 737024 -ra------ C:\WINDOWS\system32\drivers\nvmcp.sys 2007-03-12 21:33:10 40832 -ra------ C:\WINDOWS\system32\drivers\nvax.sys 2007-03-12 21:33:10 66688 -ra------ C:\WINDOWS\system32\drivers\nvarm.sys 2007-03-12 21:33:10 320640 -ra------ C:\WINDOWS\system32\drivers\nvapu.sys 2007-03-12 21:33:06 349654 -ra------ C:\WINDOWS\system32\nvuide.exe 2007-03-12 21:33:02 291328 -ra------ C:\WINDOWS\system32\idecoi.dll 2007-03-12 21:33:02 64128 -ra------ C:\WINDOWS\system32\drivers\nvatabus.sys 2007-03-12 21:32:55 349664 -ra------ C:\WINDOWS\system32\nvusmb.exe 2007-03-12 21:32:53 349662 --a------ C:\WINDOWS\system32\NVUNINST.EXE 2007-03-12 21:32:53 349654 -ra------ C:\WINDOWS\system32\nvumctl.exe 2007-03-12 21:32:42 349658 --a------ C:\WINDOWS\system32\nvugart.exe 2007-03-12 21:32:41 29696 -ra------ C:\WINDOWS\system32\NVCOG.DLL 2007-03-12 21:32:41 21120 -ra------ C:\WINDOWS\system32\drivers\nv_agp.SYS 2007-03-11 18:15:16 222680 --a------ C:\WINDOWS\NCUNINST.EXE 2007-03-11 18:13:52 0 d-------- C:\Program Files\Hewlett-Packard<HEWLET~1> 2007-03-11 18:13:02 0 d-------- C:\Program Files\Common Files\SWF Studio<SWFSTU~1> 2007-03-10 17:43:18 0 d-------- C:\Program Files\Winwall 2007-03-10 17:05:13 221184 --a------ C:\WINDOWS\system32\wmpns.dll 2007-03-10 16:27:07 0 d-------- C:\Program Files\SopCast 2007-03-05 16:32:03 0 d-------- C:\Program Files\QuickTime<QUICKT~1> 2007-03-05 16:31:53 0 d-------- C:\Program Files\Apple Software Update<APPLES~1> 2007-03-04 16:03:25 0 d-------- C:\Program Files\Common Files\TV 2007-03-04 16:03:21 5504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys 2007-03-04 16:03:16 10880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys 2007-03-04 16:03:14 15360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys 2007-03-04 16:03:09 11136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys 2007-03-04 16:03:06 19328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS 2007-03-04 16:03:03 85376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys 2007-03-04 16:03:00 17024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys 2007-03-04 16:02:43 54784 --a------ C:\WINDOWS\system32\vfwwdm32.dll 2007-03-04 16:02:40 110592 --a------ C:\WINDOWS\system32\Prop7134.dll 2007-03-04 16:02:40 57152 --a------ C:\WINDOWS\system32\drivers\PhTVTune.sys 2007-03-04 16:02:40 407072 --a------ C:\WINDOWS\system32\drivers\Cap7134.sys 2007-03-04 16:02:40 110592 --a------ C:\WINDOWS\system32\34com.dll 2007-03-04 16:02:39 135168 --a------ C:\WINDOWS\system32\34api.dll 2007-03-04 01:52:23 845312 --a------ C:\WINDOWS\system32\Smab.dll 2007-03-04 01:52:23 70656 --a------ C:\WINDOWS\system32\i420vfw.dll 2007-03-04 01:52:23 719872 --a------ C:\WINDOWS\system32\devil.dll 2007-03-04 01:52:23 27648 --a------ C:\WINDOWS\system32\AVSredirect.dll<AVSRED~1.DLL> 2007-03-04 01:52:23 306688 --a------ C:\WINDOWS\system32\avisynth.dll 2007-03-04 01:52:23 66560 --a------ C:\WINDOWS\MOTA113.exe 2007-03-04 01:52:23 394710 --a------ C:\WINDOWS\meta4.exe 2007-03-04 01:52:22 0 d-------- C:\WINDOWS\system32\ShellDHCP<SHELLD~1> 2007-03-04 01:52:22 0 d-------- C:\Program Files\AviSynth 2.5<AVISYN~1.5> 2007-03-04 01:42:29 0 d-------- C:\Program Files\eRightSoft<ERIGHT~1> 2007-03-04 01:41:37 0 d-------- C:\Program Files\AVIcodec 2007-03-03 20:51:48 352256 --a------ C:\WINDOWS\eSellerateEngine.dll<ESELLE~1.DLL> 2007-03-03 20:51:19 0 d-------- C:\Program Files\Common Files\DeskShare Shared<DESKSH~1> 2007-03-03 18:10:54 0 d-------- C:\Program Files\SkanerOnline<SKANER~1> 2007-03-03 18:01:12 0 d-------- C:\WINDOWS\pss 2007-03-03 17:56:22 0 d-------- C:\!KillBox 2007-03-03 13:37:27 697822 -----n--- C:\WINDOWS\system32\ati2sgag.exe 2007-03-03 13:37:21 307200 -ra------ C:\WINDOWS\system32\atiiiexx.dll 2007-03-03 13:37:16 110293 -ra------ C:\WINDOWS\system32\atiicdxx.dat 2007-03-03 13:36:56 0 d-------- C:\Program Files\ATI Technologies<ATITEC~1> 2007-03-03 13:33:53 660 --a------ C:\WINDOWS\eReg.dat 2007-03-02 22:58:17 0 d-------- C:\WINDOWS\Sun 2007-03-02 22:56:07 0 d-------- C:\Program Files\Java 2007-03-02 22:53:33 0 d-------- C:\Program Files\Common Files\Java 2007-03-02 22:53:03 666 --a------ C:\WINDOWS\mozver.dat 2007-03-02 13:06:34 0 d-------- C:\Program Files\Microsoft SQL Server<MI6841~1> 2007-03-02 13:05:56 0 d-------- C:\Program Files\Microsoft Device Emulator<MI9C2B~1> 2007-03-02 13:05:45 0 d-------- C:\Program Files\Microsoft SQL Server 2005 Mobile Edition<MI40D9~1> 2007-03-02 12:58:14 0 d-------- C:\Program Files\MSBuild 2007-03-02 12:51:41 0 d-------- C:\WINDOWS\Symbols 2007-03-02 12:51:41 0 d-------- C:\Program Files\Microsoft.NET<MICROS~1.NET> 2007-03-02 12:51:41 0 d-------- C:\Program Files\HTML Help Workshop<HTMLHE~1> 2007-03-02 12:51:41 0 d-------- C:\Program Files\Common Files\Business Objects<BUSINE~1> 2007-03-02 12:51:41 0 d-------- C:\Program Files\CE Remote Tools<CEREMO~1> 2007-03-02 12:51:40 0 d-------- C:\Program Files\Common Files\Merge Modules<MERGEM~1> 2007-03-02 11:18:46 0 d-------- C:\Program Files\Microsoft Visual Studio 8<MICROS~4> 2007-03-02 11:15:40 0 dr--s---- C:\WINDOWS\assembly 2007-03-02 11:14:33 0 d-------- C:\WINDOWS\Microsoft.NET<MICROS~1.NET> 2007-03-02 07:36:13 0 d-------- C:\Downloads<DOWNLO~1> 2007-03-01 23:47:56 18795 --a------ C:\WINDOWS\system32\drivers\kl1.sys 2007-03-01 23:47:55 13418 --a------ C:\WINDOWS\system32\klogon.dll 2007-03-01 23:47:54 26730 --a------ C:\WINDOWS\system32\fssync.dll 2007-03-01 23:47:54 965920 --ahs---- C:\WINDOWS\fidbox.dat 2007-03-01 22:50:42 0 d-------- C:\Program Files\Common Files\Skype 2007-03-01 22:50:27 0 d-------- C:\Program Files\Skype 2007-03-01 22:41:51 0 d-------- C:\Program Files\MyGlobalSearch<MYGLOB~1> 2007-03-01 22:33:45 0 d-------- C:\Program Files\Common Files\Adobe Systems Shared<ADOBES~1> 2007-03-01 22:23:40 5248 --a------ C:\WINDOWS\system32\drivers\d347prt.sys 2007-03-01 22:23:40 155136 --a------ C:\WINDOWS\system32\drivers\d347bus.sys 2007-03-01 22:23:26 0 d-------- C:\WINDOWS\Downloaded Installations<DOWNLO~2> 2007-03-01 19:30:14 17920 --a------ C:\WINDOWS\system32\mdimon.dll 2007-03-01 19:29:11 0 d-------- C:\Program Files\Microsoft Works<MICROS~3> 2007-03-01 19:28:48 0 d-------- C:\WINDOWS\SHELLNEW 2007-03-01 19:25:14 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1> 2007-03-01 18:39:19 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-03-01 18:39:14 333272 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE> 2007-03-01 18:39:10 0 d-------- C:\Program Files\Common Files\Ahead 2007-03-01 18:36:38 0 d-------- C:\Program Files\Common Files\Adobe 2007-03-01 08:14:59 0 d-------- C:\Program Files\MegauploadToolbar<MEGAUP~1> 2007-03-01 01:03:50 288 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000002-00000000-0000000A-00001102-00000002-80661102}.dat<DVCSTA~2.DAT> 2007-03-01 01:03:50 288 --a------ C:\WINDOWS\system32\DVCState-{00000002-00000000-0000000A-00001102-00000002-80661102}.dat<DVCSTA~1.DAT> 2007-02-28 22:12:14 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-02-28 22:12:02 12928 --a------ C:\WINDOWS\system32\drivers\Dot4Prt.sys 2007-02-28 22:11:55 23936 --a------ C:\WINDOWS\system32\drivers\Dot4usb.sys 2007-02-28 22:11:55 207360 --a------ C:\WINDOWS\system32\drivers\Dot4.sys 2007-02-28 22:11:39 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-02-28 22:11:23 3712 --a------ C:\WINDOWS\system32\drivers\ctljystk.sys 2007-02-28 22:11:22 10624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys 2007-02-28 22:11:12 1391104 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys 2007-02-28 22:11:12 603040 --a------ C:\WINDOWS\system32\ativvaxx.dll 2007-02-28 22:11:12 2491808 --a------ C:\WINDOWS\system32\ati3duag.dll 2007-02-28 22:11:12 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll 2007-02-28 22:11:11 247296 --a------ C:\WINDOWS\system32\ati2dvag.dll 2007-02-28 22:11:11 237568 --a------ C:\WINDOWS\system32\ati2cqag.dll 2007-02-28 22:11:04 27165 --a------ C:\WINDOWS\system32\drivers\fetnd5.sys 2007-02-28 22:10:45 77312 --a------ C:\WINDOWS\system32\usbui.dll 2007-02-28 22:09:21 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1> 2007-02-28 22:09:21 0 d-------- C:\Program Files\Common Files\ODBC 2007-02-28 22:09:17 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1> 2007-02-28 22:09:16 0 d-------- C:\Program Files<PROGRA~1> 2007-02-28 22:09:12 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-02-28 22:09:12 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-02-28 22:09:12 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-02-28 22:09:11 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-02-28 22:09:11 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-02-28 22:09:08 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-02-28 22:09:08 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-02-28 22:09:08 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-02-28 22:09:08 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-02-28 22:09:08 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-02-28 22:09:08 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-02-28 22:09:08 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-02-28 22:09:07 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-02-28 22:09:07 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-02-28 22:09:07 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-02-28 22:09:07 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-02-28 22:09:07 6144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-02-28 22:09:03 6656 --a------ C:\WINDOWS\system32\kbdycl.dll 2007-02-28 22:09:03 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll 2007-02-28 22:09:03 6656 --a------ C:\WINDOWS\system32\kbdsl.dll 2007-02-28 22:09:03 5632 --a------ C:\WINDOWS\system32\kbdro.dll 2007-02-28 22:09:03 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll 2007-02-28 22:09:03 6656 --a------ C:\WINDOWS\system32\kbdhu.dll 2007-02-28 22:09:03 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll 2007-02-28 22:09:03 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll 2007-02-28 22:09:03 7168 --a------ C:\WINDOWS\system32\kbdcz.dll 2007-02-28 22:09:03 6656 --a------ C:\WINDOWS\system32\kbdcr.dll 2007-02-28 22:09:03 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL 2007-02-28 22:09:02 13312 --a------ C:\WINDOWS\system32\irclass.dll 2007-02-28 22:09:02 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-02-28 22:09:01 24661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-02-28 22:09:01 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-02-28 22:09:01 85532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-02-28 22:09:01 9168 --a------ C:\WINDOWS\system\VER.DLL 2007-02-28 22:09:01 19200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-02-28 22:09:00 5120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-02-28 22:09:00 24064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-02-28 22:09:00 83456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-02-28 22:09:00 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-02-28 22:09:00 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-02-28 22:08:59 15360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-02-28 22:08:59 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-02-28 22:08:59 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-02-28 22:08:59 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-02-28 22:08:59 70096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-02-28 22:08:58 8704 --a------ C:\WINDOWS\system32\batt.dll 2007-02-28 22:08:58 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2007-02-28 22:08:58 70144 --a------ C:\WINDOWS\NOTEPAD.EXE 2007-02-28 22:08:57 75776 --a------ C:\WINDOWS\system32\storprop.dll 2007-02-28 22:08:34 0 d-------- C:\WINDOWS\system32\CatRoot2 2007-02-28 22:08:34 0 d-------- C:\WINDOWS\system32\CatRoot 2007-02-28 22:08:01 0 d--hs---- C:\System Volume Information<SYSTEM~1> 2007-02-28 22:08:01 0 d-------- C:\Documents and Settings<DOCUME~1> 2007-02-28 22:04:57 219606 -----n--- C:\WINDOWS\Ctregrun.exe 2007-02-28 22:04:55 267734 -----n--- C:\WINDOWS\Updreg.EXE 2007-02-28 22:04:52 84992 -----n--- C:\WINDOWS\system32\SFCVRT32.DLL 2007-02-28 22:04:52 108032 -----n--- C:\WINDOWS\system32\MFCUIA32.DLL 2007-02-28 22:04:52 149504 -----n--- C:\WINDOWS\system32\MFCANS32.DLL 2007-02-28 22:04:52 24976 -----n--- C:\WINDOWS\CTRES.DLL 2007-02-28 22:04:52 53552 -----n--- C:\WINDOWS\CTCCW.DLL 2007-02-28 22:04:51 1048576 -----n--- C:\WINDOWS\system32\SFMAN.DAT 2007-02-28 22:04:51 54784 -----n--- C:\WINDOWS\system32\INETWH32.DLL 2007-02-28 22:04:51 82432 -----n--- C:\WINDOWS\system32\CTWFLT32.DLL 2007-02-28 22:04:51 26768 -----n--- C:\WINDOWS\system32\CTL3D.DLL 2007-02-28 22:04:49 0 d-------- C:\WINDOWS\system32\Defaults 2007-02-28 22:04:37 0 d-------- C:\WINDOWS\system32\ReinstallBackups<REINST~1> 2007-02-28 22:04:35 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-02-28 22:04:33 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-02-28 22:04:31 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-02-28 22:04:30 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-02-28 22:04:28 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-02-28 22:04:26 171776 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-02-28 22:04:25 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-02-28 22:04:24 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2007-02-28 22:04:22 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2007-02-28 22:04:20 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2007-02-28 22:04:18 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2007-02-28 22:04:11 4096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-02-28 22:04:11 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2007-02-28 22:04:10 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2007-02-28 22:04:03 0 d-------- C:\WINDOWS\system32\Data 2007-02-28 22:04:03 20480 --a------ C:\WINDOWS\INRES.DLL 2007-02-28 22:03:56 135696 --a------ C:\WINDOWS\system32\drivers\HAP16V2K.SYS 2007-02-28 22:03:56 823456 --a------ C:\WINDOWS\system32\drivers\ha10kx2k.sys 2007-02-28 22:03:56 145504 --a------ C:\WINDOWS\system32\drivers\EMUPIA2K.SYS 2007-02-28 22:03:55 136448 --a------ C:\WINDOWS\system32\drivers\CTSFM2K.SYS 2007-02-28 22:03:55 6144 --a------ C:\WINDOWS\system32\drivers\CTPRXY2K.SYS 2007-02-28 22:03:55 113840 --a------ C:\WINDOWS\system32\drivers\ctoss2k.sys 2007-02-28 22:03:55 496800 --a------ C:\WINDOWS\system32\drivers\ctaud2k.sys 2007-02-28 22:03:55 186068 --a------ C:\WINDOWS\system32\drivers\CTAC32K.SYS 2007-02-28 22:03:55 251970 --a------ C:\WINDOWS\system32\ctstatic.dat 2007-02-28 22:03:55 189704 --a------ C:\WINDOWS\system32\ctdlang.dat 2007-02-28 22:03:55 53674 --a------ C:\WINDOWS\system32\ctdaught.dat 2007-02-28 22:03:55 115322 --a------ C:\WINDOWS\system32\ctbasicw.dat 2007-02-28 22:03:55 142968 --a------ C:\WINDOWS\system32\CTBAS2W.DAT 2007-02-28 22:03:53 270336 --a------ C:\WINDOWS\system32\SFMS32.DLL 2007-02-28 22:03:53 36864 --a------ C:\WINDOWS\system32\sfman32.dll 2007-02-28 22:03:53 214484 --a------ C:\WINDOWS\system32\REGPLIB.EXE 2007-02-28 22:03:53 110592 --a------ C:\WINDOWS\system32\PIAPROXY.DLL 2007-02-28 22:03:53 21504 -ra------ C:\WINDOWS\system32\OpenAL32.dll 2007-02-28 22:03:53 226778 --a------ C:\WINDOWS\system32\KILLAPPS.EXE 2007-02-28 22:03:53 357844 --a------ C:\WINDOWS\READREG.EXE 2007-02-28 22:03:53 361942 --a------ C:\WINDOWS\PSCONV.EXE 2007-02-28 22:03:53 226782 --a------ C:\WINDOWS\MIDIDEF.EXE 2007-02-28 22:03:53 49152 --a------ C:\WINDOWS\CTDCRES.DLL 2007-02-28 22:03:52 198110 --a------ C:\WINDOWS\system32\ENSDEF.EXE 2007-02-28 22:03:52 77824 --a------ C:\WINDOWS\system32\EAXAC3.DLL 2007-02-28 22:03:52 45056 --a------ C:\WINDOWS\system32\CTSPKHLP.DLL 2007-02-28 22:03:52 110592 --a------ C:\WINDOWS\system32\CTSCAL.DLL 2007-02-28 22:03:52 94208 --a------ C:\WINDOWS\DEVREG.DLL 2007-02-28 22:03:51 655360 --a------ C:\WINDOWS\system32\CTSBLFX.DLL 2007-02-28 22:03:51 155648 --a------ C:\WINDOWS\system32\CTOSUSER.DLL 2007-02-28 22:03:51 28672 --a------ C:\WINDOWS\system32\CTMMEP.DLL 2007-02-28 22:03:51 202202 --a------ C:\WINDOWS\system32\CTHELPER.EXE 2007-02-28 22:03:51 36864 --a------ C:\WINDOWS\system32\CTEMUPIA.DLL 2007-02-28 22:03:48 110592 --a------ C:\WINDOWS\system32\CTDPROXY.DLL 2007-02-28 22:03:48 139353 --a------ C:\WINDOWS\system32\CTDCIFCE.DLL 2007-02-28 22:03:48 372736 --a------ C:\WINDOWS\system32\CTDC0001.DLL 2007-02-28 22:03:48 356445 --a------ C:\WINDOWS\system32\CTDC0000.DLL 2007-02-28 22:03:48 495616 --a------ C:\WINDOWS\system32\CTAUDFX.DLL 2007-02-28 22:03:48 106496 --a------ C:\WINDOWS\system32\CTASIO.DLL 2007-02-28 22:03:48 57344 --a------ C:\WINDOWS\system32\CTAGENT.DLL 2007-02-28 22:03:47 126976 --a------ C:\WINDOWS\system32\COMMONFX.DLL 2007-02-28 22:03:47 53248 --a------ C:\WINDOWS\system32\AC3API.DLL 2007-02-28 22:03:47 65536 --a------ C:\WINDOWS\system32\a3d.dll 2007-02-28 22:03:00 15840 -----n--- C:\WINDOWS\system32\drivers\PFMODNT.SYS 2007-02-28 22:03:00 0 d-------- C:\Program Files\Creative 2007-02-28 22:01:38 0 d-------- C:\WINDOWS 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\WinSxS 2007-02-28 22:01:38 0 dr------- C:\WINDOWS\Web 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\twain_32 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\wins 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\wbem 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\usmt 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\spool 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\ShellExt 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\Setup 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\ras 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\oobe 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\npp 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\mui 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\inetsrv 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\IME 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\icsxml 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\ias 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\export 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\drivers 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\drivers\etc 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\drivers\disdn 2007-02-28 22:01:38 0 dr-hs--c- C:\WINDOWS\system32\dllcache 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\dhcp 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\config 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\3com_dmi 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\3076 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\2052 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\1054 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\1045 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\1042 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\1041 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\1037 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\1033 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\1031 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\1028 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system32\1025 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\system 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\security 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\Resources<RESOUR~1> 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\repair 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1> 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\PeerNet 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\pchealth 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\mui 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\msapps 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\msagent 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\Media 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\java 2007-02-28 22:01:38 0 d--h----- C:\WINDOWS\inf 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\ime 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\Help 2007-02-28 22:01:38 0 dr--s---- C:\WINDOWS\Fonts 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\ehome 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1> 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\Debug 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\Cursors 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1> 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\Config 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\AppPatch 2007-02-28 22:01:38 0 d-------- C:\WINDOWS\addins 2007-02-28 21:54:27 0 d-------- C:\Program Files\Windows Media Connect 2<WINDOW~4> 2007-02-28 21:53:24 0 d-------- C:\WINDOWS\system32\LogFiles 2007-02-28 21:53:24 0 d-------- C:\WINDOWS\system32\drivers\UMDF 2007-02-28 21:53:19 201688 --a------ C:\WINDOWS\system32\spupdsvc.exe 2007-02-28 21:45:08 70656 --a------ C:\WINDOWS\system32\yv12vfw.dll 2007-02-28 21:45:08 180224 --a------ C:\WINDOWS\system32\xvidvfw.dll 2007-02-28 21:45:08 765952 --a------ C:\WINDOWS\system32\xvidcore.dll 2007-02-28 21:45:08 1565480 --a------ C:\WINDOWS\system32\wmv9vcm.dll 2007-02-28 21:45:07 200704 --a------ C:\WINDOWS\system32\ssldivx.dll 2007-02-28 21:45:07 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll 2007-02-28 21:45:07 1044480 --a------ C:\WINDOWS\system32\libdivx.dll 2007-02-28 21:45:07 196608 --a------ C:\WINDOWS\system32\dtu100.dll 2007-02-28 21:45:07 73728 --a------ C:\WINDOWS\system32\dpl100.dll 2007-02-28 21:45:07 639066 --a------ C:\WINDOWS\system32\divx.dll 2007-02-28 21:45:06 10752 --a------ C:\WINDOWS\system32\ff_vfw.dll 2007-02-28 21:45:04 348160 --a------ C:\WINDOWS\system32\msvcr71.dll 2007-02-28 21:43:28 0 --a------ C:\WINDOWS\nsreg.dat 2007-02-28 21:31:42 102912 -----n--- C:\WINDOWS\system32\drivers\FWDRV.SYS 2007-02-28 21:31:42 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1> 2007-02-28 21:31:38 0 d-------- C:\Programy 2007-02-28 21:31:08 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1> 2007-02-28 21:26:03 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1> 2007-02-28 21:25:53 0 d-------- C:\WINDOWS\Prefetch 2007-02-28 21:21:39 0 d-------- C:\WINDOWS\system32\xircom 2007-02-28 21:21:39 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1> 2007-02-28 21:21:15 0 -rahs---- C:\MSDOS.SYS 2007-02-28 21:21:15 0 -rahs---- C:\IO.SYS 2007-02-28 21:21:15 0 --a------ C:\CONFIG.SYS 2007-02-28 21:21:15 0 --a------ C:\AUTOEXEC.BAT 2007-02-28 21:20:54 112128 --a------ C:\WINDOWS\system32\mapi32.dll 2007-02-28 21:19:39 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1> 2007-02-28 21:19:39 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1> 2007-02-28 21:19:27 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3> 2007-02-28 21:19:23 0 d-------- C:\Program Files\Usługi online<USUGIO~1> 2007-02-28 21:19:05 0 d-------- C:\WINDOWS\system32\DirectX 2007-02-28 21:18:45 11264 --a------ C:\WINDOWS\system32\atrace.dll 2007-02-28 21:18:35 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2007-02-28 21:18:33 67584 --a------ C:\WINDOWS\system32\acctres.dll 2007-02-28 21:18:30 0 d---s---- C:\WINDOWS\Tasks 2007-02-28 21:18:30 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2007-02-28 21:18:29 0 d-------- C:\Program Files\Common Files\MSSoap 2007-02-28 21:18:25 0 d-------- C:\WINDOWS\srchasst 2007-02-28 21:18:23 0 d-------- C:\WINDOWS\system32\Macromed 2007-02-28 21:18:20 120320 --a------ C:\WINDOWS\system32\wuweb.dll 2007-02-28 21:18:20 36864 --a------ C:\WINDOWS\system32\wups.dll 2007-02-28 21:18:20 113664 --a------ C:\WINDOWS\system32\wucltui.dll 2007-02-28 21:18:20 6656 --a------ C:\WINDOWS\system32\wuauserv.dll 2007-02-28 21:18:20 184320 --a------ C:\WINDOWS\system32\wuaueng1.dll 2007-02-28 21:18:20 1134592 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-02-28 21:18:20 168960 --a------ C:\WINDOWS\system32\wuauclt1.exe 2007-02-28 21:18:19 112128 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-02-28 21:18:19 431616 --a------ C:\WINDOWS\system32\wuapi.dll 2007-02-28 21:18:19 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2007-02-28 21:18:19 382464 --a------ C:\WINDOWS\system32\qmgr.dll 2007-02-28 21:18:19 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll 2007-02-28 21:18:19 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll 2007-02-28 21:18:14 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1> 2007-02-28 21:18:11 45568 --a------ C:\WINDOWS\system32\safrslv.dll 2007-02-28 21:18:11 29696 --a------ C:\WINDOWS\system32\safrdm.dll 2007-02-28 21:18:10 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2007-02-28 21:18:10 43520 --a------ C:\WINDOWS\system32\racpldlg.dll 2007-02-28 21:18:06 171008 --a------ C:\WINDOWS\system32\srsvc.dll 2007-02-28 21:18:06 240128 --a------ C:\WINDOWS\system32\srrstr.dll 2007-02-28 21:18:06 67584 --a------ C:\WINDOWS\system32\srclient.dll 2007-02-28 21:18:06 0 d-------- C:\WINDOWS\system32\Restore 2007-02-28 21:18:06 22528 --a------ C:\WINDOWS\system32\fltMc.exe 2007-02-28 21:18:06 16896 --a------ C:\WINDOWS\system32\fltlib.dll 2007-02-28 21:18:06 124800 --a------ C:\WINDOWS\system32\drivers\fltMgr.sys 2007-02-28 21:18:05 34560 --a------ C:\WINDOWS\system32\mnmdd.dll 2007-02-28 21:18:05 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2007-02-28 21:18:05 81920 --a------ C:\WINDOWS\system32\ils.dll 2007-02-28 21:18:05 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2007-02-28 21:18:04 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2007-02-28 21:18:04 69632 --a------ C:\WINDOWS\system32\msconf.dll 2007-02-28 21:18:04 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2007-02-28 21:18:01 105984 --a------ C:\WINDOWS\system32\msoert2.dll 2007-02-28 21:18:01 252928 --a------ C:\WINDOWS\system32\msoeacct.dll 2007-02-28 21:18:00 49664 --a------ C:\WINDOWS\system32\inetres.dll 2007-02-28 21:17:59 678400 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-02-28 21:17:57 192000 --a------ C:\WINDOWS\system32\schedsvc.dll 2007-02-28 21:17:57 12288 --a------ C:\WINDOWS\system32\mstinit.exe 2007-02-28 21:17:57 278528 --a------ C:\WINDOWS\system32\mstask.dll 2007-02-28 21:17:56 86016 --a------ C:\WINDOWS\system32\isign32.dll 2007-02-28 21:17:56 278528 --a------ C:\WINDOWS\system32\inetcfg.dll 2007-02-28 21:17:56 65536 --a------ C:\WINDOWS\system32\icwphbk.dll 2007-02-28 21:17:56 73728 --a------ C:\WINDOWS\system32\icwdial.dll 2007-02-28 21:17:16 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT> 2007-02-28 21:16:59 0 d-------- C:\WINDOWS\Registration<REGIST~1> 2007-02-28 21:16:44 0 d-------- C:\Program Files\Messenger<MESSEN~1> 2007-02-28 21:16:40 5632 --a------ C:\WINDOWS\system32\write.exe 2007-02-28 21:16:40 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1> 2007-02-28 21:16:31 139264 --a------ C:\WINDOWS\system32\sndvol32.exe 2007-02-28 21:16:31 44544 --a------ C:\WINDOWS\system32\hticons.dll 2007-02-28 21:16:31 73216 --a------ C:\WINDOWS\system32\avwav.dll 2007-02-28 21:16:31 231424 --a------ C:\WINDOWS\system32\avtapi.dll 2007-02-28 21:16:31 16384 --a------ C:\WINDOWS\system32\avmeter.dll 2007-02-28 21:16:30 35328 --a------ C:\WINDOWS\system32\winchat.exe 2007-02-28 21:16:24 605696 --a------ C:\WINDOWS\system32\getuname.dll 2007-02-28 21:16:24 80896 --a------ C:\WINDOWS\system32\charmap.exe 2007-02-28 21:16:23 119808 --a------ C:\WINDOWS\system32\winmine.exe 2007-02-28 21:16:23 57344 --a------ C:\WINDOWS\system32\sol.exe 2007-02-28 21:16:23 115200 --a------ C:\WINDOWS\system32\calc.exe 2007-02-28 21:16:22 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd 2007-02-28 21:16:22 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe 2007-02-28 21:16:22 16384 --a------ C:\WINDOWS\system32\tskill.exe 2007-02-28 21:16:22 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe 2007-02-28 21:16:22 15360 --a------ C:\WINDOWS\system32\tscon.exe 2007-02-28 21:16:22 9728 --a------ C:\WINDOWS\system32\reset.exe 2007-02-28 21:16:22 128000 --a------ C:\WINDOWS\system32\mshearts.exe 2007-02-28 21:16:22 55808 --a------ C:\WINDOWS\system32\freecell.exe 2007-02-28 21:16:21 15360 --a------ C:\WINDOWS\system32\shadow.exe 2007-02-28 21:16:21 16384 --a------ C:\WINDOWS\system32\rwinsta.exe 2007-02-28 21:16:21 33792 --a------ C:\WINDOWS\system32\regini.exe 2007-02-28 21:16:21 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2007-02-28 21:16:21 22528 --a------ C:\WINDOWS\system32\qwinsta.exe 2007-02-28 21:16:21 17408 --a------ C:\WINDOWS\system32\qappsrv.exe 2007-02-28 21:16:21 22528 --a------ C:\WINDOWS\system32\msg.exe 2007-02-28 21:16:21 15872 --a------ C:\WINDOWS\system32\logoff.exe 2007-02-28 21:16:21 15872 --a------ C:\WINDOWS\system32\cdmodem.dll 2007-02-28 21:16:20 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2007-02-28 21:16:20 4096 --a------ C:\WINDOWS\system32\mtxex.dll 2007-02-28 21:16:20 20480 --a------ C:\WINDOWS\system32\mtxdm.dll 2007-02-28 21:16:20 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2007-02-28 21:16:19 54272 --a------ C:\WINDOWS\system32\stclient.dll 2007-02-28 21:16:19 147456 --a------ C:\WINDOWS\system32\comsnap.dll 2007-02-28 21:16:19 82432 --a------ C:\WINDOWS\system32\comrepl.dll 2007-02-28 21:16:19 25600 --a------ C:\WINDOWS\system32\comaddin.dll 2007-02-28 21:16:13 132608 --a------ C:\WINDOWS\system32\sndrec32.exe 2007-02-28 21:16:13 124928 --a------ C:\WINDOWS\system32\mplay32.exe 2007-02-28 21:16:13 187904 --a------ C:\WINDOWS\system32\accwiz.exe 2007-02-28 21:16:12 345088 --a------ C:\WINDOWS\system32\mspaint.exe 2007-02-28 21:16:12 349696 --a------ C:\WINDOWS\system32\hypertrm.dll 2007-02-28 21:16:12 0 d-------- C:\Program Files\Windows NT<WINDOW~1> 2007-02-28 21:16:11 539136 --a------ C:\WINDOWS\system32\spider.exe 2007-02-28 21:16:11 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2007-02-28 21:16:11 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2007-02-28 21:16:11 139400 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2007-02-28 21:16:11 103424 --a------ C:\WINDOWS\system32\clipbrd.exe 2007-02-28 21:16:10 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2007-02-28 21:16:10 141824 --a------ C:\WINDOWS\system32\sessmgr.exe 2007-02-28 21:16:10 60928 --a------ C:\WINDOWS\system32\remotepg.dll 2007-02-28 21:16:10 67072 --a------ C:\WINDOWS\system32\rdshost.exe 2007-02-28 21:16:10 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2007-02-28 21:16:10 655360 --a------ C:\WINDOWS\system32\mstscax.dll 2007-02-28 21:16:10 408576 --a------ C:\WINDOWS\system32\mstsc.exe 2007-02-28 21:16:09 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2007-02-28 21:16:09 296448 --a------ C:\WINDOWS\system32\termsrv.dll 2007-02-28 21:16:09 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2007-02-28 21:16:09 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2007-02-28 21:16:09 62464 --a------ C:\WINDOWS\system32\rdpclip.exe 2007-02-28 21:16:09 147968 --a------ C:\WINDOWS\system32\rdchost.dll 2007-02-28 21:16:09 20992 --a------ C:\WINDOWS\system32\qprocess.exe 2007-02-28 21:16:09 11264 --a------ C:\WINDOWS\system32\icaapi.dll 2007-02-28 21:16:09 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2007-02-28 21:16:08 90112 --a------ C:\WINDOWS\system32\mtxoci.dll 2007-02-28 21:16:08 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2007-02-28 21:16:08 949248 --a------ C:\WINDOWS\system32\msdtctm.dll 2007-02-28 21:16:08 425472 --a------ C:\WINDOWS\system32\msdtcprx.dll 2007-02-28 21:16:08 0 d-------- C:\WINDOWS\system32\MsDtc 2007-02-28 21:16:07 11776 --a------ C:\WINDOWS\system32\xolehlp.dll 2007-02-28 21:16:07 58880 --a------ C:\WINDOWS\system32\msdtclog.dll 2007-02-28 21:16:07 6144 --a------ C:\WINDOWS\system32\msdtc.exe 2007-02-28 21:16:06 0 d-------- C:\WINDOWS\system32\Com 2007-02-28 21:16:06 62464 --a------ C:\WINDOWS\system32\colbact.dll 2007-02-28 21:16:06 110080 --a------ C:\WINDOWS\system32\clbcatex.dll 2007-02-28 21:16:06 85504 --a------ C:\WINDOWS\system32\catsrvps.dll 2007-02-28 21:16:05 1251840 --a------ C:\WINDOWS\system32\comsvcs.dll 2007-02-28 21:16:05 628224 --a------ C:\WINDOWS\system32\catsrvut.dll 2007-02-28 21:16:05 229888 --a------ C:\WINDOWS\system32\catsrv.dll 2007-02-28 21:16:04 540160 --a------ C:\WINDOWS\system32\comuid.dll 2007-02-28 21:16:04 501248 --a------ C:\WINDOWS\system32\clbcatq.dll 2007-02-28 21:15:57 56320 --a------ C:\WINDOWS\system32\servdeps.dll 2007-02-28 21:15:57 17920 --a------ C:\WINDOWS\system32\mmfutil.dll 2007-02-28 21:15:57 58880 --a------ C:\WINDOWS\system32\licwmi.dll 2007-02-28 21:15:57 187904 --a------ C:\WINDOWS\system32\cmprops.dll 2007-02-28 21:15:54 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2007-02-28 21:15:54 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys -- Find3M Report --------------------------------------------------------------- 2007-03-14 09:21:07 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\foobar2000<FOOBAR~1> 2007-03-13 19:37:57 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Tlen.pl 2007-03-13 07:48:09 497928 --a------ C:\WINDOWS\system32\perfh015.dat 2007-03-13 07:48:09 93128 --a------ C:\WINDOWS\system32\perfc015.dat 2007-03-10 17:43:18 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Winwall 2007-03-10 16:28:43 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\SopCast 2007-03-10 13:24:02 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Skype 2007-03-05 16:34:35 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Apple Computer<APPLEC~1> 2007-03-04 20:00:21 0 d---s---- C:\Documents and Settings\gorczas\Dane aplikacji\Microsoft<MICROS~1> 2007-03-02 22:58:17 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Sun 2007-03-02 18:02:35 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Adobe 2007-03-01 23:35:25 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\MegauploadToolbar<MEGAUP~1> 2007-03-01 22:48:07 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Ahead 2007-03-01 22:24:32 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Lavasoft 2007-03-01 19:25:14 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Real 2007-03-01 19:23:20 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\AdobeUM 2007-02-28 22:08:49 62 --ahs---- C:\Documents and Settings\gorczas\Dane aplikacji\desktop.ini 2007-02-28 22:01:27 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Macromedia<MACROM~1> 2007-02-28 21:46:58 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Media Player Classic<MEDIAP~1> 2007-02-28 21:43:32 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Talkback 2007-02-28 21:43:24 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Mozilla 2007-02-28 21:27:24 0 d-------- C:\Documents and Settings\gorczas\Dane aplikacji\Identities<IDENTI~1> 2007-01-22 12:00:36 719088 --a------ C:\WINDOWS\system32\SkanerOnline.dll<SKANER~1.DLL> 2007-01-19 09:40:42 266712 --a------ C:\WINDOWS\system32\SkanerOnlineUninstall.exe<SKANER~1.EXE> -- Registry Dump --------------------------------------------------------------- [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "CTHelper"="CTHELPER.EXE" "UpdReg"="C:\\WINDOWS\\UpdReg.EXE" "Jet Detection"="\"C:\\Program Files\\Creative\\SBLive\\PROGRAM\\ADGJDet.exe\"" "NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe" "DAEMON Tools-1033"="\"C:\\Programy\\D-Tools\\daemon.exe\" -lang 1033" "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\"" "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" @="" "StatusClient"="C:\\Program Files\\Hewlett-Packard\\Toolbox2.0\\Apache Tomcat 4.0\\webapps\\Toolbox\\StatusClient\\StatusClient.exe /auto" "TomcatStartup"="C:\\Program Files\\Hewlett-Packard\\Toolbox2.0\\hpbpsttp.exe" "NvMixerTray"="C:\\Program Files\\NVIDIA Corporation\\NvMixer\\NvMixerTray.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^gorczas^Menu Start^Programy^Autostart^Adobe Gamma.lnk] "path"="C:\\Documents and Settings\\gorczas\\Menu Start\\Programy\\Autostart\\Adobe Gamma.lnk" "backup"="C:\\WINDOWS\\pss\\Adobe Gamma.lnkStartup" "location"="Startup" "command"="C:\\PROGRA~1\\COMMON~1\\Adobe\\CALIBR~1\\ADOBEG~1.EXE " "item"="Adobe Gamma" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^gorczas^Menu Start^Programy^Autostart^install.lnk] "path"="C:\\Documents and Settings\\gorczas\\Menu Start\\Programy\\Autostart\\install.lnk" "backup"="C:\\WINDOWS\\pss\\install.lnkStartup" "location"="Startup" "command"="C:\\DOCUME~1\\gorczas\\USTAWI~1\\Temp\\setup.exe /TempCopy /Step=3" "item"="install" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kaspersky Anti-Virus 2006] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="avp" "hkey"="HKLM" "command"="C:\\Programy\\Kaspersky AVP6\\avp.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0 -- End of ComboScan: finished at 2007-03-14 at 20:46:19 ------------------------

Plik Supplementary.txt już nie mieści się w poście.. W nowym też się nie chce dodać..

**Posty:** 18165 · przez **wojtas** 14 Mar 2007, 22:21

tu tez nic nie ma

**Posty:** 54 · przez **gorczas** 14 Mar 2007, 22:27

A czy to możliwe, żeby te problemy były związane z tym, że na płytce z instalką XP są jakieś błędy? Bo to tak jakoś po instalacji systemu z nowej płytki zaczęło się walić..
A plik Supplementary też teraz wysłać?

**Posty:** 18165 · przez **wojtas** 14 Mar 2007, 22:28

jest to mozliwe jesli instalka ma jakies bledy

**Posty:** 54 · przez **gorczas** 14 Mar 2007, 22:30

To mogłoby pomóc jakbym zrobił tamtą akcję z kopiowaniem explorera z innej płytki z XP?

**Posty:** 18165 · przez **wojtas** 14 Mar 2007, 22:32

nie wiem ale mozesz sprobowac

nie wiadomo czy z plikiem explorer.exe jest cos nie tak na Twojej plycie

problemy z explorer.exe i usuwaniem programów

Problemy z explorer.exe i usuwaniem programów

Kto jest na forum