Internet działa normalnie przez powiedzmy minutę, a później pojawia się 10 sekundowy lag i tak w kółko. Strasznie uciążliwe w grach.
- Kod: Zaznacz wszystko
OTL logfile created on: 2009-10-27 18:11:04 - Run 3
OTL by OldTimer - Version 3.0.7.1 Folder = C:\Śmieci
64bit-Windows Server 2003 Service Pack 1 (Version = 5.2.3790) - Type = NTWorkstation
Internet Explorer (Version = 6.0.3790.1830)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 3,21 Gb Available Physical Memory | 80,17% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files (x86)
Drive C: | 195,31 Gb Total Space | 9,49 Gb Free Space | 4,86% Space Free | Partition Type: NTFS
Drive D: | 195,31 Gb Total Space | 132,37 Gb Free Space | 67,77% Space Free | Partition Type: NTFS
Drive E: | 75,13 Gb Total Space | 65,30 Gb Free Space | 86,91% Space Free | Partition Type: NTFS
Drive F: | 627,06 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 11,45 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive H: | 3,90 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
I: Drive not present or media not loaded
Computer Name: WYMIATACZ
Current User Name: Administrator
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2007-01-30 11:54:36 | 16,116,224 | R--- | M] (Realtek Semiconductor Corp.) -- D:\WINDOWS\RTHDCPL.EXE
PRC - [2009-07-07 13:19:14 | 00,114,688 | ---- | M] () -- D:\Program Files (x86)\blueconnect\blueconnect.exe
PRC - [2008-11-17 18:56:14 | 00,307,712 | ---- | M] (Mozilla Corporation) -- C:\Programy\Firefox\firefox.exe
PRC - [2009-07-16 15:35:45 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Śmieci\OTL.exe
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV:[b]64bit:[/b] - [2007-11-07 08:11:22 | 04,466,688 | ---- | M] (Microsoft Corporation) -- D:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90 [Disabled | Stopped])
SRV - [2007-10-23 21:33:00 | 00,045,576 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2008-05-16 00:06:57 | 00,017,272 | ---- | M] (ALWIL Software) -- C:\Programy\Avast\aswUpdSv.exe -- (aswUpdSv [Disabled | Stopped])
SRV - [2008-05-16 00:19:24 | 00,144,760 | ---- | M] (ALWIL Software) -- C:\Programy\Avast\ashServ.exe -- (avast! Antivirus [Disabled | Stopped])
SRV - [2008-05-16 00:19:00 | 00,247,160 | ---- | M] (ALWIL Software) -- C:\Programy\Avast\ashMaiSv.exe -- (avast! Mail Scanner [Disabled | Stopped])
SRV - [2008-05-16 00:16:59 | 00,349,560 | ---- | M] (ALWIL Software) -- C:\Programy\Avast\ashWebSv.exe -- (avast! Web Scanner [Disabled | Stopped])
SRV - [2007-07-24 14:17:08 | 00,229,376 | ---- | M] (Apple Inc.) -- D:\Program Files (x86)\Bonjour\mDNSResponder.exe -- (Bonjour Service [Disabled | Stopped])
SRV - [2007-10-24 00:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2007-10-23 21:33:04 | 00,093,696 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64 [On_Demand | Stopped])
SRV - [2007-10-09 14:06:28 | 00,036,864 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])
SRV - [2008-11-20 20:18:52 | 00,136,120 | ---- | M] (Google) -- D:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [Disabled | Stopped])
SRV - [2005-03-25 13:00:00 | 00,077,824 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2007-03-11 20:24:50 | 00,217,088 | ---- | M] (Hewlett-Packard Co.) -- C:\Programy\HP\Digital Imaging\bin\hpqcxs08.dll -- (hpqcxs08 [Disabled | Stopped])
SRV - [2007-03-11 21:02:52 | 00,131,072 | ---- | M] (Hewlett-Packard Co.) -- C:\Programy\HP\Digital Imaging\bin\hpqddsvc.dll -- (hpqddsvc [Disabled | Stopped])
SRV - [2005-03-25 13:00:00 | 00,162,816 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\SysWOW64\iasrecst.dll -- (IASJet [On_Demand | Running])
SRV - [2007-10-10 21:08:40 | 00,921,600 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped])
SRV - [2008-02-19 12:10:24 | 00,504,104 | ---- | M] (Apple Inc.) -- D:\Program Files (x86)\iPod\bin\iPodService.exe -- (iPod Service [Disabled | Stopped])
SRV - [2009-08-06 21:10:08 | 00,045,568 | RHS- | M] () -- D:\Documents and Settings\Administrator\iTuneHelper32.exe -- (iTunesHelper32 Service Manager [Disabled | Stopped])
SRV - [2006-10-26 23:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- C:\Programy\Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [On_Demand | Stopped])
SRV - [2009-07-20 10:51:52 | 00,935,208 | ---- | M] (Nero AG) -- D:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0 [Disabled | Stopped])
SRV - [2005-03-25 13:00:00 | 00,419,328 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\SysWow64\netlogon.dll -- (Netlogon [On_Demand | Stopped])
SRV - [2006-10-26 18:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- D:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped])
SRV - [2006-10-26 12:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- D:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2009-08-11 15:38:45 | 00,075,064 | ---- | M] () -- D:\WINDOWS\SysWow64\PnkBstrA.exe -- (PnkBstrA [Disabled | Stopped])
SRV - [2009-08-18 19:30:27 | 00,189,784 | ---- | M] () -- D:\WINDOWS\SysWow64\PnkBstrB.exe -- (PnkBstrB [Disabled | Stopped])
SRV - [2007-05-28 17:57:54 | 00,275,968 | ---- | M] (Rocket Division Software) -- C:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE [Disabled | Stopped])
SRV - [2009-07-07 20:29:35 | 00,019,456 | RHS- | M] () -- D:\Documents and Settings\Administrator\sysdiag32.exe -- (sysdiag32 [Disabled | Stopped])
SRV - [2005-03-25 13:00:00 | 00,039,424 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\SysWow64\wdfmgr.exe -- (UMWdf [Auto | Running])
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2006-11-08 13:49:54 | 00,012,600 | ---- | M] () -- D:\Program Files (x86)\U-ABIT\abitEQ\ABIT-IO64.sys -- (ABIT-IO [On_Demand | Stopped])
DRV - [1999-09-10 11:06:00 | 00,025,244 | ---- | M] (Adaptec) -- D:\WINDOWS\SysWow64\drivers\ASPI32.SYS -- (ASPI32 [System | Stopped])
DRV - [2008-08-08 06:04:10 | 00,007,888 | ---- | M] (C. Ghisler & Co.) -- C:\Programy\totalcmd\cglptnt.sys -- (cglptnt [On_Demand | Stopped])
DRV - [2006-11-08 15:35:40 | 00,033,280 | ---- | M] (Hewlett-Packard) -- D:\WINDOWS\SysWow64\HPZipr12.dll -- (HPZipr12 [On_Demand | Stopped])
DRV - [2008-07-28 16:22:52 | 00,255,424 | ---- | M] (MagicISO, Inc.) -- D:\WINDOWS\SysWow64\DRIVERS\mcdbus.sys -- (mcdbus [On_Demand | Running])
DRV - [2005-03-25 13:00:00 | 00,033,792 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\SysWow64\mnmdd.dll -- (mnmdd [System | Running])
DRV - [2002-09-17 12:55:06 | 00,003,548 | ---- | M] () -- D:\Program Files (x86)\U-ABIT\BlackBox\WinFlash.sys -- (Winflash [On_Demand | Stopped])
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2995033608-323674235-1367725696-500\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.microsoft.com/isapi/redir.dll?Prd=ie&Pver=5.0&Ar=ie5update&O1=b1
IE - HKU\S-1-5-21-2995033608-323674235-1367725696-500\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = D:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-2995033608-323674235-1367725696-500\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-2995033608-323674235-1367725696-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
IE - HKU\S-1-5-21-2995033608-323674235-1367725696-500\S-1-5-21-2995033608-323674235-1367725696-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "http://kopalniawiedzy.pl/|http://bash.org.pl/latest/"
FF - prefs.js..extensions.enabledItems: {59c81df5-4b7a-477b-912d-4e0fdf64e5f2}:0.9.83
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05
FF - prefs.js..extensions.enabledItems: {4217f6d7-406e-4b66-856d-d1a373e4f41a}:2.6.42
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 7
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: {5B52016C-D097-4aec-BE61-9F129D8FDDBA}:2.0
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.4
FF - prefs.js..network.proxy.backup.ftp: ""
FF - prefs.js..network.proxy.backup.ftp_port: 0
FF - prefs.js..network.proxy.backup.gopher: ""
FF - prefs.js..network.proxy.backup.gopher_port: 0
FF - prefs.js..network.proxy.backup.socks: ""
FF - prefs.js..network.proxy.backup.socks_port: 0
FF - prefs.js..network.proxy.backup.ssl: ""
FF - prefs.js..network.proxy.backup.ssl_port: 0
FF - prefs.js..network.proxy.http: "localhost"
FF - prefs.js..network.proxy.http_port: 9666
FF - prefs.js..network.proxy.socks: "localhost"
FF - prefs.js..network.proxy.socks_port: 9050
FF - prefs.js..network.proxy.socks_remote_dns: true
FF - prefs.js..network.proxy.ssl: "localhost"
FF - prefs.js..network.proxy.ssl_port: 9666
FF - HKLM\software\mozilla\Minefield 3.0a8pre\extensions\\Components: C:\Programy\Minefield\components [2008-07-02 12:23:54 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Minefield 3.0a8pre\extensions\\Plugins: C:\Programy\Minefield\plugins [2009-10-05 17:21:57 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.4\extensions\\Components: C:\Programy\Firefox\components [2008-12-07 12:29:54 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.4\extensions\\Plugins: C:\Programy\Firefox\plugins [2009-10-05 17:21:57 | 00,000,000 | ---D | M]
[2008-07-04 14:04:25 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\mozilla\Extensions
[2008-07-04 14:04:25 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009-09-05 16:29:23 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\mozilla\Firefox\Profiles\gzl7957j.default\extensions
[2009-07-09 23:09:04 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\mozilla\Firefox\Profiles\gzl7957j.default\extensions\{4217f6d7-406e-4b66-856d-d1a373e4f41a}
[2008-07-29 09:04:12 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\mozilla\Firefox\Profiles\gzl7957j.default\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}
[2009-09-05 16:27:21 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\mozilla\Firefox\Profiles\gzl7957j.default\extensions\{5B52016C-D097-4aec-BE61-9F129D8FDDBA}
[2009-03-23 16:26:58 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\mozilla\Firefox\Profiles\gzl7957j.default\extensions\{C20C76E7-E8F7-4109-8498-CF3B2CA4E570}
[2009-09-05 16:29:22 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\mozilla\Firefox\Profiles\gzl7957j.default\extensions\firefox@tvunetworks.com
Hosts file not found
O2:[b]64bit:[/b] - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Programy\SnagIt\DLLx64\SnagItBHO64.dll (TechSmith Corporation)
O2 - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Programy\SnagIt\SnagItBHO.dll (TechSmith Corporation)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Programy\HP\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Programy\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programy\Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (SnagIt) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Programy\SnagIt\SnagItIEAddin.dll (TechSmith Corporation)
O3 - HKU\S-1-5-21-2995033608-323674235-1367725696-500\..\Toolbar\WebBrowser: (no name) - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\SysNative\NvCpl.DLL File not found
O4:[b]64bit:[/b] - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\SysNative\NvMcTray.DLL File not found
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDCPL] D:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [DataCardMonitor] D:\Program Files (x86)\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [GrooveMonitor] C:\Programy\Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [tscuninstall] D:\WINDOWS\SysWow64\tscupgrd.exe File not found
O4 - HKU\S-1-5-18..\RunOnce: [tscuninstall] D:\WINDOWS\SysWow64\tscupgrd.exe File not found
O4 - HKU\S-1-5-19..\RunOnce: [tscuninstall] D:\WINDOWS\SysWow64\tscupgrd.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [tscuninstall] D:\WINDOWS\SysWow64\tscupgrd.exe File not found
O4 - Startup: D:\Documents and Settings\Administrator\Start Menu\Programs\Startup\Psi.lnk = C:\Programy\Psi\psi.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2995033608-323674235-1367725696-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2995033608-323674235-1367725696-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Programy\Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - D:\WINDOWS\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Programy\Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files (x86)\Java\jre1.6.0_05\bin\npjpi160_05.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programy\Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programy\Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - D:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - D:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O15:[b]64bit:[/b] - ..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-21-2995033608-323674235-1367725696-500\..Trusted Domains: com.pl ([mks] http in Trusted sites)
O15 - HKU\S-1-5-21-2995033608-323674235-1367725696-500\..Trusted Domains: com.pl ([www.mks] https in Trusted sites)
O15 - HKU\S-1-5-21-2995033608-323674235-1367725696-500\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O18:[b]64bit:[/b] - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\SysNative\mshtml.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\SysNative\mshtml.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\SysNative\mshtml.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\SysNative\mshtml.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - D:\WINDOWS\SysNative\mshtml.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\SysNative\mshtml.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - D:\WINDOWS\SysNative\wiascr.dll File not found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programy\Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - D:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - D:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18:[b]64bit:[/b] - Protocol\Filter: - application/octet-stream - File not found
O18:[b]64bit:[/b] - Protocol\Filter: - application/x-complus - File not found
O18:[b]64bit:[/b] - Protocol\Filter: - application/x-msdownload - File not found
O18:[b]64bit:[/b] - Protocol\Filter: - text/xml - D:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - D:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe File not found
O20:[b]64bit:[/b] - HKLM Winlogon: UIHost - (%SystemRoot%\system32\logonui.exe) - D:\WINDOWS\SysNative\logonui.exe File not found
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\SysWow64\Explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: System - (lsass.exe) - File not found
O20 - HKLM Winlogon: UserInit - (EXPLORER.EXE) - D:\WINDOWS\SysWow64\EXPLORER.EXE (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\Antiwpa: DllName - Reg Error: Key error. - D:\WINDOWS\SysNative\antiwpa.dll File not found
O20:[b]64bit:[/b] - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - File not found
O20:[b]64bit:[/b] - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - File not found
O20:[b]64bit:[/b] - Winlogon\Notify\cscdll: DllName - cscdll.dll - File not found
O20:[b]64bit:[/b] - Winlogon\Notify\dimsntfy: DllName - dimsntfy.dll - File not found
O20:[b]64bit:[/b] - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - File not found
O20:[b]64bit:[/b] - Winlogon\Notify\Schedule: DllName - wlnotify.dll - File not found
O20:[b]64bit:[/b] - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - File not found
O20:[b]64bit:[/b] - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - File not found
O20:[b]64bit:[/b] - Winlogon\Notify\termsrv: DllName - Reg Error: Key error. - File not found
O20:[b]64bit:[/b] - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - File not found
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - File not found
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - File not found
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - File not found
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - File not found
O21:[b]64bit:[/b] - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - D:\WINDOWS\SysNative\stobject.dll File not found
O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - File not found
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programy\Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-03-22 17:50:53 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2004-09-10 02:38:32 | 00,000,085 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2008-10-26 18:52:16 | 00,126,976 | R--- | M] (Huawei Technologies Co., Ltd.) - G:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2008-10-11 12:01:18 | 00,000,049 | R--- | M] () - G:\AUTORUN.INF -- [ CDFS ]
O32 - AutoRun File - [2008-08-05 18:02:19 | 00,398,600 | R--- | M] (Electronic Arts Inc.) - H:\Autorun.exe -- [ UDF ]
O32 - AutoRun File - [2008-08-05 17:23:19 | 00,000,043 | R--- | M] () - H:\Autorun.inf -- [ UDF ]
O32 - AutoRun File - [2008-08-05 18:02:19 | 00,398,600 | R--- | M] (Electronic Arts Inc.) - H:\autorun.exe -- [ UDF ]
O33 - MountPoints2\{2f00d6cb-8046-11de-9f3f-dbe845a98658}\Shell\AutoRun\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{2f00d6cb-8046-11de-9f3f-dbe845a98658}\Shell\open\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{3e37a8b2-6c51-11dd-b537-00f1d000f1d0}\Shell\AutoRun\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{3e37a8b2-6c51-11dd-b537-00f1d000f1d0}\Shell\open\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{6397e5db-51b5-11dd-a565-00f1d000f1d0}\Shell\AutoRun\command - "" = K:\lcw.exe -- File not found
O33 - MountPoints2\{6397e5db-51b5-11dd-a565-00f1d000f1d0}\Shell\open\Command - "" = K:\lcw.exe -- File not found
O33 - MountPoints2\{67ab6e2a-2590-11de-b33d-00f1d000f1d0}\Shell\AutoRun\command - "" = L:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{67ab6e2a-2590-11de-b33d-00f1d000f1d0}\Shell\open\command - "" = L:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{910d2e03-6eea-11de-9404-8a04afc01a34}\Shell - "" = AutoRun
O33 - MountPoints2\{910d2e03-6eea-11de-9404-8a04afc01a34}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{910d2e03-6eea-11de-9404-8a04afc01a34}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2008-10-26 18:52:16 | 00,126,976 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{910d2e04-6eea-11de-9404-8a04afc01a34}\Shell - "" = AutoRun
O33 - MountPoints2\{910d2e04-6eea-11de-9404-8a04afc01a34}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{910d2e04-6eea-11de-9404-8a04afc01a34}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2008-10-26 18:52:16 | 00,126,976 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c256ea4a-982f-11dd-84df-00f1d000f1d0}\Shell\AutoRun\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{c256ea4a-982f-11dd-84df-00f1d000f1d0}\Shell\open\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{d7b9ea8d-6c5a-11dd-bc7a-a3827387dfcb}\Shell\AutoRun\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{d7b9ea8d-6c5a-11dd-bc7a-a3827387dfcb}\Shell\open\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{e8410d81-d2ce-11dd-8610-00f1d000f1d0}\Shell\AutoRun\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O33 - MountPoints2\{e8410d81-d2ce-11dd-8610-00f1d000f1d0}\Shell\open\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\RemovableDrive.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - D:\WINDOWS\SysWow64\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2009-10-27 18:05:07 | 00,000,000 | ---D | C] -- D:\Program Files (x86)\Trend Micro
[2009-10-25 20:06:08 | 00,000,648 | ---- | C] () -- D:\Documents and Settings\Administrator\Desktop\Shortcut to Ventrilo 2.3.0.exe.lnk
[2009-10-24 22:20:15 | 00,011,467 | ---- | C] () -- D:\Documents and Settings\Administrator\My Documents\Zeszyt1.xlsx
[2009-10-24 19:48:34 | 00,011,184 | ---- | C] () -- D:\Documents and Settings\Administrator\Desktop\13313.docx
[2009-10-23 21:32:40 | 00,035,273 | ---- | C] () -- D:\Documents and Settings\Administrator\Desktop\Kotyytok.docx
[2009-10-23 20:37:54 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\My Documents\KSIAZKA
[2009-10-20 22:41:12 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Application Data\Nero
[2009-10-20 22:33:40 | 00,002,405 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\Nero StartSmart Essentials.lnk
[2009-10-20 22:33:24 | 00,000,000 | ---D | C] -- D:\Program Files (x86)\Nero
[2009-10-20 22:33:12 | 00,000,000 | ---D | C] -- D:\Program Files (x86)\Common Files\Nero
[2009-10-20 22:33:12 | 00,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Application Data\Nero
[2009-10-20 21:26:59 | 00,000,076 | ---- | C] () -- D:\Documents and Settings\Administrator\Desktop\MS Office 2003 PL.nfo
[2009-10-20 21:26:22 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Desktop\visio 2003
[2009-10-20 21:26:03 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Desktop\onenote 2003
[2009-10-20 21:24:19 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Desktop\office 2003
[2009-10-20 21:23:22 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Desktop\frontpage 2003
[2009-10-14 21:00:55 | 00,000,000 | ---D | C] -- D:\Documents and Settings\Administrator\Local Settings\Application Data\Temporary Projects
[2009-10-08 17:46:18 | 01,421,312 | ---- | C] () -- D:\Documents and Settings\Administrator\My Documents\Twoja stara.accdb
[2009-10-05 17:36:30 | 00,561,152 | ---- | C] () -- D:\Documents and Settings\Administrator\My Documents\Baza danych1.accdb
[2009-10-05 17:21:55 | 00,000,000 | ---D | C] -- D:\Program Files (x86)\Microsoft Works
[2009-10-05 17:20:08 | 00,000,000 | ---D | C] -- D:\Program Files\Microsoft Office
[2009-08-29 19:10:52 | 00,000,246 | ---- | C] () -- D:\WINDOWS\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2009-07-13 21:49:20 | 01,589,248 | ---- | C] () -- D:\WINDOWS\SysWow64\libmysql_d.dll
[2009-06-19 17:55:13 | 00,040,195 | ---- | C] () -- D:\WINDOWS\php.ini
[2009-06-19 17:55:13 | 00,000,399 | ---- | C] () -- D:\WINDOWS\my.ini
[2009-01-07 16:55:49 | 00,043,520 | ---- | C] () -- D:\WINDOWS\SysWow64\CmdLineExt03.dll
[2008-12-18 00:53:18 | 00,034,308 | ---- | C] () -- D:\WINDOWS\SysWow64\BASSMOD.dll
[2008-12-11 21:38:34 | 00,042,320 | ---- | C] () -- D:\WINDOWS\SysWow64\xfcodec.dll
[2008-09-13 23:17:47 | 00,000,192 | ---- | C] () -- D:\WINDOWS\dvdtoaviconverter.ini
[2008-09-13 23:17:23 | 00,237,568 | ---- | C] () -- D:\WINDOWS\SysWow64\lame_enc.dll
[2008-09-13 23:17:23 | 00,110,080 | ---- | C] () -- D:\WINDOWS\SysWow64\advd.dll
[2008-09-13 23:17:23 | 00,023,040 | ---- | C] () -- D:\WINDOWS\SysWow64\auth.dll
[2008-08-20 16:02:11 | 01,101,824 | ---- | C] () -- D:\WINDOWS\SysWow64\nvwimg.dll
[2008-08-20 16:02:10 | 01,499,136 | ---- | C] () -- D:\WINDOWS\SysWow64\nview.dll
[2008-08-15 19:04:32 | 00,000,488 | ---- | C] () -- D:\WINDOWS\wcx_ftp.ini
[2008-08-15 19:01:49 | 00,002,862 | ---- | C] () -- D:\WINDOWS\wincmd.ini
[2008-07-20 16:23:38 | 00,026,112 | ---- | C] () -- D:\WINDOWS\SysWow64\ljJYQJaY.dll
[2008-07-20 16:23:38 | 00,026,112 | ---- | C] () -- D:\WINDOWS\SysWow64\iifdATKa.dll
[2008-04-29 15:26:02 | 00,000,418 | ---- | C] () -- D:\WINDOWS\ODBC.INI
[2008-04-24 21:47:27 | 00,504,242 | ---- | C] () -- D:\WINDOWS\SysWow64\PerfStringBackup.INI
[2008-04-05 22:39:17 | 00,000,010 | ---- | C] () -- D:\WINDOWS\WININIT.INI
[2008-04-05 22:25:04 | 00,000,025 | ---- | C] () -- D:\WINDOWS\cdplayer.ini
[2008-03-26 16:39:20 | 00,013,632 | ---- | C] () -- D:\WINDOWS\SysWow64\drivers\WinFlash64.sys
[2008-03-26 16:39:06 | 00,003,548 | ---- | C] () -- D:\WINDOWS\SysWow64\drivers\WinFlash.sys
[2008-03-25 17:33:09 | 00,000,023 | ---- | C] () -- D:\WINDOWS\BlendSettings.ini
[2008-03-24 00:00:48 | 00,000,150 | ---- | C] () -- D:\WINDOWS\system.ini
[2008-03-23 23:10:59 | 00,001,241 | ---- | C] () -- D:\WINDOWS\win.ini
[2008-02-29 05:14:04 | 00,223,744 | ---- | C] () -- D:\WINDOWS\SysWow64\b4fm.dll
[2005-03-25 13:00:00 | 01,290,240 | ---- | C] () -- D:\WINDOWS\SysWow64\quartz.dll
[2005-03-25 13:00:00 | 00,733,696 | ---- | C] () -- D:\WINDOWS\SysWow64\qedwipes.dll
[2005-03-25 13:00:00 | 00,512,512 | ---- | C] () -- D:\WINDOWS\SysWow64\qedit.dll
[2005-03-25 13:00:00 | 00,498,205 | ---- | C] () -- D:\WINDOWS\SysWow64\dxmasf.dll
[2005-03-25 13:00:00 | 00,396,288 | ---- | C] () -- D:\WINDOWS\SysWow64\encdec.dll
[2005-03-25 13:00:00 | 00,385,536 | ---- | C] () -- D:\WINDOWS\SysWow64\qdvd.dll
[2005-03-25 13:00:00 | 00,279,040 | ---- | C] () -- D:\WINDOWS\SysWow64\qdv.dll
[2005-03-25 13:00:00 | 00,276,992 | ---- | C] () -- D:\WINDOWS\SysWow64\sbe.dll
[2005-03-25 13:00:00 | 00,199,168 | ---- | C] () -- D:\WINDOWS\SysWow64\ir32_32.dll
[2005-03-25 13:00:00 | 00,192,512 | ---- | C] () -- D:\WINDOWS\SysWow64\qcap.dll
[2005-03-25 13:00:00 | 00,114,688 | ---- | C] () -- D:\WINDOWS\SysWow64\msencode.dll
[2005-03-25 13:00:00 | 00,082,432 | ---- | C] () -- D:\WINDOWS\SysWow64\ieencode.dll
[2005-03-25 13:00:00 | 00,072,704 | ---- | C] () -- D:\WINDOWS\SysWow64\amstream.dll
[2005-03-25 13:00:00 | 00,062,464 | ---- | C] () -- D:\WINDOWS\SysWow64\mciqtz32.dll
[2005-03-25 13:00:00 | 00,061,440 | ---- | C] () -- D:\WINDOWS\SysWow64\devenum.dll
[2005-03-25 13:00:00 | 00,016,896 | ---- | C] () -- D:\WINDOWS\SysWow64\tsd32.dll
[2005-03-25 13:00:00 | 00,014,336 | ---- | C] () -- D:\WINDOWS\SysWow64\msdmo.dll
[2005-03-25 13:00:00 | 00,004,126 | ---- | C] () -- D:\WINDOWS\SysWow64\msdxmlc.dll
[1999-01-22 17:46:58 | 00,065,536 | ---- | C] () -- D:\WINDOWS\SysWow64\MSRTEDIT.DLL
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[1 D:\WINDOWS\*.tmp files]
[2009-10-27 18:05:07 | 00,001,788 | ---- | M] () -- D:\Documents and Settings\Administrator\Desktop\HijackThis.lnk
[2009-10-27 18:05:00 | 00,001,160 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2995033608-323674235-1367725696-500UA.job
[2009-10-27 15:05:00 | 00,001,108 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2995033608-323674235-1367725696-500Core.job
[2009-10-27 14:49:56 | 00,000,006 | -H-- | M] () -- D:\WINDOWS\tasks\SA.DAT
[2009-10-27 14:49:55 | 00,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2009-10-26 19:16:09 | 00,035,273 | ---- | M] () -- D:\Documents and Settings\Administrator\Desktop\Kotyytok.docx
[2009-10-25 20:06:08 | 00,000,648 | ---- | M] () -- D:\Documents and Settings\Administrator\Desktop\Shortcut to Ventrilo 2.3.0.exe.lnk
[2009-10-25 19:32:35 | 00,054,156 | -H-- | M] () -- D:\WINDOWS\QTFont.qfn
[2009-10-24 22:49:13 | 00,011,467 | ---- | M] () -- D:\Documents and Settings\Administrator\My Documents\Zeszyt1.xlsx
[2009-10-24 22:01:10 | 00,011,184 | ---- | M] () -- D:\Documents and Settings\Administrator\Desktop\13313.docx
[2009-10-24 09:53:01 | 00,000,296 | ---- | M] () -- D:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009-10-22 16:16:25 | 02,110,788 | -H-- | M] () -- D:\Documents and Settings\Administrator\Local Settings\Application Data\IconCache.db
[2009-10-20 22:33:40 | 00,002,405 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\Nero StartSmart Essentials.lnk
[2009-10-13 23:09:27 | 00,002,344 | ---- | M] () -- D:\Documents and Settings\Administrator\Desktop\Google Chrome.lnk
[2009-10-10 18:01:23 | 00,002,862 | ---- | M] () -- D:\WINDOWS\wincmd.ini
[2009-10-10 18:00:51 | 00,000,488 | ---- | M] () -- D:\WINDOWS\wcx_ftp.ini
[2009-10-08 19:48:05 | 00,004,872 | ---- | M] () -- D:\Documents and Settings\Administrator\Local Settings\Application Data\devcpp.ini
[2009-10-08 19:48:05 | 00,000,018 | ---- | M] () -- D:\Documents and Settings\Administrator\Local Settings\Application Data\devcpp.cfg
[2009-10-08 19:15:16 | 01,421,312 | ---- | M] () -- D:\Documents and Settings\Administrator\My Documents\Twoja stara.accdb
[2009-10-08 18:18:46 | 00,070,328 | ---- | M] () -- D:\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009-10-05 18:00:33 | 00,561,152 | ---- | M] () -- D:\Documents and Settings\Administrator\My Documents\Baza danych1.accdb
[2009-10-05 17:25:50 | 00,001,241 | ---- | M] () -- D:\WINDOWS\win.ini
[color=#E56717]========== LOP Check ==========[/color]
[2009-10-20 22:41:12 | 00,000,000 | RH-D | M] -- D:\Documents and Settings\Administrator\Application Data
[2008-05-26 16:26:56 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Ashampoo
[2008-09-13 23:10:54 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\BESTplayer
[2009-07-17 22:11:07 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Betfair
[2008-06-17 06:47:21 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Bull
[2008-04-06 19:17:51 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\DAEMON Tools
[2008-05-14 19:36:23 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Dev-Cpp
[2008-04-24 22:04:13 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Ferro Software
[2008-11-13 09:09:35 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\FMA
[2008-03-24 13:13:31 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Gadu-Gadu
[2009-04-30 22:19:11 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\GameRanger
[2009-07-15 17:25:17 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\GetRightToGo
[2009-07-30 21:38:42 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Hamachi
[2009-07-07 13:43:41 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\HCM Updater
[2009-07-31 12:39:17 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\id Software
[2009-10-26 18:43:57 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\mIRC
[2009-04-03 15:12:30 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Nowe Gadu-Gadu
[2009-07-09 23:03:03 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Opera
[2009-03-17 12:00:43 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Pro Cycling Manager 2008
[2009-05-09 09:12:11 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\ProtectDisc
[2008-04-24 19:55:01 | 00,000,000 | RH-D | M] -- D:\Documents and Settings\Administrator\Application Data\SecuROM
[2009-08-30 08:25:57 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\SPORE
[2009-02-23 14:48:09 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Sports Interactive
[2009-01-21 19:59:34 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\springlobby
[2009-01-12 22:36:52 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\springsettings
[2009-04-30 21:28:08 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Stardock
[2009-06-18 10:10:23 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Subversion
[2009-05-29 16:58:49 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\teamspeak2
[2009-08-09 15:54:39 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\TechSmith
[2009-08-07 20:27:01 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Thinstall
[2008-03-28 19:19:50 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Tibia
[2009-06-19 18:34:35 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\TortoiseSVN
[2009-05-31 14:39:43 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Ulead Systems
[2009-09-10 22:27:12 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\uTorrent
[2009-01-03 13:45:39 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Ventrilo
[2008-04-23 17:57:59 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\X-Chat 2
[2009-01-30 23:12:40 | 00,000,000 | ---D | M] -- D:\Documents and Settings\Administrator\Application Data\Xfire
[2009-10-20 22:33:12 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data
[2009-04-30 21:28:08 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\{5CB3B214-2971-41B4-93F5-3344A403F942}
[2008-05-26 16:26:37 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\ashampoo
[2009-02-25 15:14:36 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Blizzard
[2009-07-17 23:31:13 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Boss Media
[2009-07-31 12:39:10 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\id Software
[2009-05-24 11:53:16 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Last.fm
[2008-05-07 15:17:25 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\phenomedia
[2009-02-23 14:47:55 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Sports Interactive
[2009-08-22 23:06:41 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Spring
[2009-04-30 10:20:45 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Stardock
[2008-04-16 17:09:52 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\TechSmith
[2008-12-25 20:53:28 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\TEMP
[2009-09-05 16:29:25 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\TVU Networks
[2009-05-31 14:39:30 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Ulead Systems
[2008-12-26 03:23:41 | 00,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Wru
[2008-03-24 00:00:43 | 00,000,000 | RH-D | M] -- D:\Documents and Settings\Default User\Application Data
[2008-04-16 17:25:34 | 00,000,000 | ---D | M] -- D:\Documents and Settings\LocalService\Application Data
[2008-03-23 23:16:35 | 00,000,000 | ---D | M] -- D:\Documents and Settings\NetworkService\Application Data
[2009-10-24 09:53:01 | 00,000,296 | ---- | M] () -- D:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2005-03-25 13:00:00 | 00,000,065 | RH-- | M] () -- D:\WINDOWS\Tasks\desktop.ini
[2009-10-27 15:05:00 | 00,001,108 | ---- | M] () -- D:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2995033608-323674235-1367725696-500Core.job
[2009-10-27 18:05:00 | 00,001,160 | ---- | M] () -- D:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2995033608-323674235-1367725696-500UA.job
[2009-10-27 14:49:56 | 00,000,006 | -H-- | M] () -- D:\WINDOWS\Tasks\SA.DAT
[2009-10-27 06:46:34 | 00,032,424 | ---- | M] () -- D:\WINDOWS\Tasks\SchedLgU.Txt
[color=#E56717]========== Purity Check ==========[/color]
[color=#E56717]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 498 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
< End of report >
- Kod: Zaznacz wszystko
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:12:48, on 2009-10-27
Platform: Windows 2003 SP1 (WinNT 5.02.3790)
MSIE: Internet Explorer v6.00 SP1 (6.00.3790.1830)
Boot mode: Normal
Running processes:
D:\WINDOWS\SysWOW64\svchost.exe
D:\WINDOWS\RTHDCPL.EXE
D:\Program Files (x86)\blueconnect\blueconnect.exe
D:\WINDOWS\SysWOW64\ctfmon.exe
C:\Programy\Firefox\firefox.exe
C:\Śmieci\OTL.exe
D:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
F2 - REG:system.ini: UserInit=userinit.exe,EXPLORER.EXE
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Programy\SnagIt\SnagItBHO.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Programy\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Programy\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programy\Office\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Programy\SnagIt\SnagItIEAddin.dll
O4 - HKLM\..\Run: [DataCardMonitor] D:\Program Files (x86)\blueconnect\DataCardMonitor.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programy\Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: Psi.lnk = C:\Programy\Psi\psi.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://D:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\Programy\Office\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programy\Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programy\Office\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\Office\Office12\REFIEBAR.DLL
O15 - Trusted Zone: http://mks.com.pl
O17 - HKLM\System\CCS\Services\Tcpip\..\{931A3335-FC8F-4DE4-B3C6-1D1A2ED6E431}: NameServer = 213.158.199.1 213.158.199.5
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programy\Office\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Unknown owner - D:\WINDOWS\System32\appdrvrem01.exe (file missing)
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - D:\WINDOWS\System32\dmadmin.exe (file missing)
O23 - Service: Event Log (Eventlog) - Unknown owner - D:\WINDOWS\system32\services.exe (file missing)
O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - D:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - D:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - D:\WINDOWS\system32\msdtc.exe (file missing)
O23 - Service: Net Logon (Netlogon) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - D:\WINDOWS\system32\nvsvc64.exe (file missing)
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - D:\WINDOWS\system32\services.exe (file missing)
O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - D:\WINDOWS\system32\sessmgr.exe (file missing)
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Virtual Disk Service (vds) - Unknown owner - D:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - D:\WINDOWS\System32\vssvc.exe (file missing)
O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - D:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing)
--
End of file - 5457 bytes
