właśnie takie coś odkrył mi dzisiaj skaner online eset nod. Chyba to usunął, ponieważ kolejny raz przeskanowałem i nie odnalazł już nic.
Zrobiłem skan OTL`em, jeśli ma ktoś chwilę niech sprawdzi czy jest ok.
OTL
- Kod: Zaznacz wszystko
OTL logfile created on: 2010-07-16 18:41:14 - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\Dominika P\Desktop
Windows Vista Business Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18928)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 59,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 29,54 Gb Total Space | 6,98 Gb Free Space | 23,62% Space Free | Partition Type: NTFS
Drive D: | 80,29 Gb Total Space | 30,90 Gb Free Space | 38,49% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: DOMINIKAP-PC
Current User Name: Dominika P
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010-07-16 18:39:22 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Dominika P\Desktop\OTL.exe
PRC - [2010-07-15 23:19:05 | 000,346,624 | ---- | M] () -- C:\Program Files\Philips\Philips Songbird\extensions\philips-autoplay@philips.com\application\PhilipsSongbirdLauncher.exe
PRC - [2010-05-18 12:37:32 | 000,322,352 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2010-04-19 12:37:32 | 000,267,432 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010-03-02 10:28:31 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010-02-24 09:28:09 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010-01-14 21:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008-10-29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-01-19 00:38:40 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2008-01-19 00:33:06 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2006-12-15 15:04:26 | 000,176,128 | ---- | M] (S3 Graphics Co., Ltd.) -- C:\Windows\System32\s3trayp.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010-07-16 18:39:22 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Dominika P\Desktop\OTL.exe
MOD - [2008-01-19 00:33:02 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
MOD - [2008-01-19 00:26:36 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2010-04-19 12:37:32 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010-02-24 09:28:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2008-01-19 00:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\UIUSYS.SYS -- (UIUSys)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2010-03-01 09:05:24 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2010-02-16 23:19:57 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-02-16 13:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010-02-14 21:17:13 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2010-02-14 21:17:12 | 000,986,624 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_DPV.sys -- (HSF_DPV)
DRV - [2010-02-14 21:17:12 | 000,659,968 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_CNXT.sys -- (winachsf)
DRV - [2010-02-14 21:17:12 | 000,206,848 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSXHWAZL.sys -- (HSXHWAZL)
DRV - [2010-02-14 21:15:45 | 000,140,800 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2010-02-14 21:12:03 | 000,155,136 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CHDART.sys -- (HdAudAddService)
DRV - [2009-09-05 15:25:36 | 001,183,744 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009-05-11 09:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2008-03-04 03:32:00 | 000,188,416 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService)
DRV - [2008-01-19 00:41:26 | 000,020,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2007-02-05 14:53:42 | 000,842,752 | ---- | M] (S3 Graphics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VTGKModeDX32.sys -- (S3GIGP)
DRV - [2007-01-05 22:59:42 | 000,035,920 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2007-01-05 22:59:34 | 000,086,096 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) NVIDIA nForce(tm)
DRV - [2006-11-02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006-11-02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006-11-02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006-11-02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006-11-02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006-11-02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006-11-02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006-11-02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006-11-02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006-11-02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006-11-02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006-11-02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006-11-02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006-11-02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006-11-02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006-11-02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006-11-02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006-11-02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006-11-02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006-11-02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006-11-02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006-11-02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006-11-02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006-11-02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006-11-02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006-11-02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006-11-02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006-11-02 11:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2006-11-02 11:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2006-11-02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006-11-02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006-11-02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006-11-02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006-11-02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006-11-02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006-11-02 09:41:49 | 000,200,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VSTAZL3.SYS -- (HSFHWAZL)
DRV - [2006-11-02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006-11-02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1690691451-1432913457-3708035564-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://wyborcza.biz/biznes/0,0.html?p=005
IE - HKU\S-1-5-21-1690691451-1432913457-3708035564-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1690691451-1432913457-3708035564-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.startup.homepage: "www.google.pl"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.1
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-06-29 12:27:45 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-07-04 16:42:51 | 000,000,000 | ---D | M]
[2010-07-14 20:28:57 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\mozilla\Extensions
[2010-07-14 20:28:57 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\mozilla\Extensions\songbird@songbirdnest.com
[2010-06-04 11:52:27 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\mozilla\Firefox\Profiles\wrp0ws01.default\extensions
[2010-05-04 12:36:37 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Dominika P\AppData\Roaming\mozilla\Firefox\Profiles\wrp0ws01.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010-07-16 13:34:34 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\mozilla\Firefox\Profiles\xr0sp8du.default\extensions
[2010-06-24 11:58:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Dominika P\AppData\Roaming\mozilla\Firefox\Profiles\xr0sp8du.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-07-11 01:41:12 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Dominika P\AppData\Roaming\mozilla\Firefox\Profiles\xr0sp8du.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010-04-25 23:36:48 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-01-16 03:08:36 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-01-16 03:08:36 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-01-16 03:08:36 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-01-16 03:08:36 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-01-16 03:08:36 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-01-16 03:08:36 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [S3Trayp] C:\Windows\System32\s3trayp.exe (S3 Graphics Co., Ltd.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1690691451-1432913457-3708035564-1000..\Run: [PhilipsSongbirdLauncher] C:\Program Files\Philips\Philips Songbird\extensions\philips-autoplay@philips.com\application\PhilipsSongbirdLauncher.exe ()
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 91.90.160.4 91.90.160.5
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-1690691451-1432913457-3708035564-1000 Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img28.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img28.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2063-01-01 01:00:00 | 001,418,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01001.dll
[2063-01-01 01:00:00 | 000,140,800 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\System32\drivers\Apfiltr.sys
[2063-01-01 01:00:00 | 000,100,030 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\System32\Vxdif.dll
[2010-07-16 18:39:15 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Dominika P\Desktop\OTL.exe
[2010-07-16 13:37:35 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010-07-15 23:19:01 | 000,109,360 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
[2010-07-15 23:16:29 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2010-07-15 23:16:28 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2010-07-15 23:16:28 | 001,695,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2010-07-14 20:57:26 | 000,000,000 | ---D | C] -- C:\Users\Dominika P\AppData\Roaming\Philips
[2010-07-14 20:28:45 | 000,000,000 | ---D | C] -- C:\Users\Dominika P\AppData\Roaming\Philips-Songbird
[2010-07-14 20:28:45 | 000,000,000 | ---D | C] -- C:\Users\Dominika P\AppData\Local\Philips-Songbird
[2010-07-14 19:31:35 | 000,000,000 | ---D | C] -- C:\Program Files\Philips
[2010-07-12 22:13:53 | 000,000,000 | ---D | C] -- C:\Users\Dominika P\Documents\GomPlayer
[2010-07-12 22:13:52 | 000,000,000 | ---D | C] -- C:\Users\Dominika P\AppData\Roaming\GRETECH
[2010-07-12 22:09:56 | 000,000,000 | ---D | C] -- C:\Program Files\GRETECH
[2010-07-04 16:42:34 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010-06-29 11:46:32 | 000,000,000 | ---D | C] -- C:\Users\Dominika P\AppData\Roaming\Facebook
[2010-06-23 13:38:53 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2010-06-23 13:38:53 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2010-06-23 13:38:52 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010-07-16 18:41:29 | 002,883,584 | -HS- | M] () -- C:\Users\Dominika P\NTUSER.DAT
[2010-07-16 18:39:22 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Dominika P\Desktop\OTL.exe
[2010-07-16 18:31:24 | 000,003,648 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010-07-16 18:31:24 | 000,003,648 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010-07-16 16:51:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-07-16 12:30:55 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010-07-16 12:30:29 | 1877,131,264 | -HS- | M] () -- C:\hiberfil.sys
[2010-07-15 23:34:59 | 000,524,288 | -HS- | M] () -- C:\Users\Dominika P\NTUSER.DAT{3d4e88f1-6a70-11db-b1ba-d64300c9c793}.TMContainer00000000000000000001.regtrans-ms
[2010-07-15 23:34:59 | 000,065,536 | -HS- | M] () -- C:\Users\Dominika P\NTUSER.DAT{3d4e88f1-6a70-11db-b1ba-d64300c9c793}.TM.blf
[2010-07-15 23:34:51 | 001,511,039 | -H-- | M] () -- C:\Users\Dominika P\AppData\Local\IconCache.db
[2010-07-15 21:34:20 | 000,019,968 | ---- | M] () -- C:\Users\Dominika P\Desktop\konto ani.doc
[2010-07-15 21:33:30 | 000,034,304 | ---- | M] () -- C:\Users\Dominika P\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-07-14 19:33:51 | 001,469,036 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010-07-14 19:33:51 | 000,662,112 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2010-07-14 19:33:51 | 000,587,178 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010-07-14 19:33:51 | 000,126,908 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2010-07-14 19:33:51 | 000,101,250 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010-07-15 21:34:01 | 000,019,968 | ---- | C] () -- C:\Users\Dominika P\Desktop\konto ani.doc
[2010-02-16 23:19:56 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2010-02-15 18:46:20 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
[2010-02-14 22:18:35 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[color=#E56717]========== LOP Check ==========[/color]
[2010-05-31 19:13:38 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\Ashampoo
[2010-02-24 23:01:13 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\COWON
[2010-02-16 23:26:18 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\DAEMON Tools Lite
[2010-06-29 11:46:34 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\Facebook
[2010-02-15 19:39:59 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\Foxit
[2010-02-15 00:19:45 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\Gadu-Gadu
[2010-02-16 12:11:12 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\IObit
[2010-07-14 20:57:26 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\Philips
[2010-07-14 20:28:45 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\Philips-Songbird
[2010-07-16 18:41:09 | 000,000,000 | ---D | M] -- C:\Users\Dominika P\AppData\Roaming\uTorrent
[2010-07-15 23:35:12 | 000,032,560 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010-06-13 22:59:43 | 000,000,394 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job
[color=#E56717]========== Purity Check ==========[/color]
< End of report >
extras
- Kod: Zaznacz wszystko
OTL Extras logfile created on: 2010-07-16 18:41:14 - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\Dominika P\Desktop
Windows Vista Business Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18928)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 59,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 29,54 Gb Total Space | 6,98 Gb Free Space | 23,62% Space Free | Partition Type: NTFS
Drive D: | 80,29 Gb Total Space | 30,90 Gb Free Space | 38,49% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: DOMINIKAP-PC
Current User Name: Dominika P
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-1690691451-1432913457-3708035564-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[color=#E56717]========== Authorized Applications List ==========[/color]
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0340F8A0-54E9-4411-BC66-6D50E3DE8886}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{06A912E8-80E0-4913-A32A-9BD5F1C6A0F6}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{0CB30D67-AE15-4CF9-B5E6-CF0CA0E0297C}" = rport=138 | protocol=17 | dir=out | app=system |
"{13A20EF6-F582-424D-990F-394B8BD9FB26}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1C190C04-0370-40BF-AD65-B8A847399DA5}" = lport=138 | protocol=17 | dir=in | app=system |
"{49AA4F57-18BD-4BAA-919C-436AC88AFCAD}" = rport=137 | protocol=17 | dir=out | app=system |
"{4B34BAE3-C329-4F1E-880B-80CE4B757FAE}" = rport=445 | protocol=6 | dir=out | app=system |
"{564F270E-D6A3-4CAC-B074-F040FE02812D}" = lport=137 | protocol=17 | dir=in | app=system |
"{5D4300AA-4A81-4673-BC53-5BA5E8BC1F9F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{71D281F3-5F35-46AF-9164-49DD8742AFC2}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{7A42600E-9E79-40F0-A5D6-358F4E5C2550}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{90CA966B-BAA3-4A2A-BDDA-D06D4E269C82}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{A11CAD26-E18A-43B4-8A2A-BD38AFEA2BCE}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{B7D10D80-FDD1-4D47-AC63-724A4A5EA545}" = lport=139 | protocol=6 | dir=in | app=system |
"{BE149BC1-1EB9-4EDA-A7AD-D341C3ADDE8E}" = rport=139 | protocol=6 | dir=out | app=system |
"{E16D0C7B-3597-482D-8E70-CAFEC1C8A0CE}" = lport=445 | protocol=6 | dir=in | app=system |
"{F3ECB023-9A76-4EDC-BABC-8EC833D5A28B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{F9891687-992D-4482-A01C-5F04CB43BBA7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{7B38B8D5-7362-498F-A4D4-6AA849D7C987}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{80A13D8A-053F-4529-A46F-0935F547F6C7}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{AE056C20-7527-40B6-B930-B25833CF54B5}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{B0193C8D-0EC0-4038-8B5F-93CD44909468}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C96949C0-6BF4-4AF5-B93A-EDAE31B07094}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{D2317355-9584-4574-924A-93AB46B7A4CB}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{D2B452F4-DEDA-4C14-A8A2-15F0C5EAB62D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{DC88EEF5-6F6F-4986-84DD-5541B21F25DF}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"TCP Query User{5856C8C5-A421-42EF-97D8-17B5290D357B}C:\program files\gadu-gadu\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu\gg.exe |
"TCP Query User{58ED449C-8C14-4725-9293-ED6B2DDC49A0}C:\users\dominika p\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe" = protocol=6 | dir=in | app=c:\users\dominika p\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe |
"TCP Query User{E9759B1D-0D9C-4602-985C-E62060B167A1}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{ED5A81BB-77AC-41EC-A426-D5D79CEC1B98}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{017EEB78-7859-40B9-93F8-276035493807}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{38F94EAB-0F7A-418D-886C-49BD07D894B3}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{D979F19F-7BF7-42D0-85C7-35FF6966125C}C:\users\dominika p\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe" = protocol=17 | dir=in | app=c:\users\dominika p\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe |
"UDP Query User{F38ED8A8-4DED-4BDD-8234-213D4D141124}C:\program files\gadu-gadu\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu\gg.exe |
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{AC76BA86-7AD7-1045-7B44-A93000000001}" = Adobe Reader 9.3.3 - Polish
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic VX
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.1
"Ashampoo Burning Studio 2010_is1" = Ashampoo Burning Studio 2010
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner
"CNXT_AUDIO_HDA" = Conexant HD Audio
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_5045&SUBSYS_15091E40" = HDAUDIO Soft Data Fax Modem with SmartCP
"Easy CD-DA Extractor 11" = Easy CD-DA Extractor 11
"Exact Audio Copy" = Exact Audio Copy 0.99pb3
"Gadu-Gadu" = Gadu-Gadu 7.7
"GOM Player" = GOM Player
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.7.0 (Standard)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.6)" = Mozilla Firefox (3.6.6)
"Philips Songbird" = Philips Songbird
"Revo Uninstaller" = Revo Uninstaller 1.88
"Smart Defrag_is1" = Smart Defrag
"TweakMP9" = Windows Media Player 9 Series TweakMP PowerToy
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.16
"VIA Chrome9 HC IGP Windows Vista Display" = VIA Display Vista Driver 7.14.10.0058
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\S-1-5-21-1690691451-1432913457-3708035564-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Facebook Plug-In" = Facebook Plug-In
"Octoshape add-in for Adobe Flash Player" = Octoshape add-in for Adobe Flash Player
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2010-07-11 18:06:42 | Computer Name = DominikaP-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2010-07-12 08:53:56 | Computer Name = DominikaP-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2010-07-12 09:09:53 | Computer Name = DominikaP-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2010-07-14 15:08:27 | Computer Name = DominikaP-PC | Source = Application Hang | ID = 1002
Description = Program Philips-Songbird.exe w wersji 1.9.0.3657 zatrzymał interakcję
z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej
informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania
raportami i rozwiązaniami problemów. Identyfikator procesu: 9a4 Godzina rozpoczęcia:
01cb23864f0428df Godzina zakończenia: 71
Error - 2010-07-14 17:10:02 | Computer Name = DominikaP-PC | Source = VSS | ID = 8194
Description =
Error - 2010-07-15 14:30:39 | Computer Name = DominikaP-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd GOM.exe, wersja 2.1.26.5021, sygnatura czasowa
0x4c2055dd, moduł powodujący błąd GVF.ax, wersja 0.0.0.0, sygnatura czasowa 0x4bceafdf,
kod wyjątku 0xc0000005, przesunięcie błędu 0x0003d7fc, identyfikator procesu 0x54c,
godzina rozpoczęcia aplikacji 0x01cb244bbf17b5c8.
Error - 2010-07-15 14:59:10 | Computer Name = DominikaP-PC | Source = Application Hang | ID = 1002
Description = Program ezcddax.exe w wersji 11.0.3.2 zatrzymał interakcję z systemem
Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
dotyczących tego problemu, sprawdź historię problemu w panelu sterowania raportami
i rozwiązaniami problemów. Identyfikator procesu: fe8 Godzina rozpoczęcia: 01cb244c0523910e
Godzina
zakończenia: 60000
Error - 2010-07-15 15:54:50 | Computer Name = DominikaP-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd GOM.exe, wersja 2.1.26.5021, sygnatura czasowa
0x4c2055dd, moduł powodujący błąd GVF.ax, wersja 0.0.0.0, sygnatura czasowa 0x4bceafdf,
kod wyjątku 0xc0000005, przesunięcie błędu 0x0003d7fc, identyfikator procesu 0xcc0,
godzina rozpoczęcia aplikacji 0x01cb24578d46bbe1.
Error - 2010-07-15 15:55:45 | Computer Name = DominikaP-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd GOM.exe, wersja 2.1.26.5021, sygnatura czasowa
0x4c2055dd, moduł powodujący błąd GVF.ax, wersja 0.0.0.0, sygnatura czasowa 0x4bceafdf,
kod wyjątku 0xc0000005, przesunięcie błędu 0x0003d7fc, identyfikator procesu 0xf10,
godzina rozpoczęcia aplikacji 0x01cb2457a2aa6f37.
Error - 2010-07-15 17:10:55 | Computer Name = DominikaP-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd Explorer.EXE, wersja 6.0.6001.18164, sygnatura
czasowa 0x4907e242, moduł powodujący błąd unknown, wersja 0.0.0.0, sygnatura czasowa
0x00000000, kod wyjątku 0xc0000005, przesunięcie błędu 0x085a43d0, identyfikator
procesu 0x7e4, godzina rozpoczęcia aplikacji 0x01cb24502a80303e.
[ System Events ]
Error - 2010-04-25 17:44:08 | Computer Name = DominikaP-PC | Source = HTTP | ID = 15016
Description =
Error - 2010-04-25 17:44:48 | Computer Name = DominikaP-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 2010-04-26 05:36:57 | Computer Name = DominikaP-PC | Source = HTTP | ID = 15016
Description =
Error - 2010-04-26 05:37:37 | Computer Name = DominikaP-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 2010-04-26 11:09:19 | Computer Name = DominikaP-PC | Source = HTTP | ID = 15016
Description =
Error - 2010-04-26 11:09:59 | Computer Name = DominikaP-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 2010-04-26 16:40:35 | Computer Name = DominikaP-PC | Source = HTTP | ID = 15016
Description =
Error - 2010-04-26 16:41:30 | Computer Name = DominikaP-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 2010-04-27 07:09:27 | Computer Name = DominikaP-PC | Source = HTTP | ID = 15016
Description =
Error - 2010-04-27 07:10:07 | Computer Name = DominikaP-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
< End of report >
