Nie moge wejść na dysk c:

[kamionek202]

Witam
Kiedy chce wejsc na dysk c wyskakuje mi okno wyszukiwarki jedyna mozliwosc jest tylko gdy nacisne prawym klawiszem i dam opcje otworz wtedy mozna wjesc na dysk czy ktos moze wie co moglo to spowodowac i jak to naprawic??

Dodano 10.09.2008 13:16:57:
raport z sdfixa

Kod: Zaznacz wszystko

[b]SDFix: Version 1.223 [/b]
Run by Wˆa˜ciciel on 2008-09-09 at 21:25

Microsoft Windows XP [Wersja 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]:

No Trojan Files Found






Removing Temp Files

[b]ADS Check [/b]:



                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-09 21:32:17
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:0000006d

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"="C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE:*:Disabled:Internet Explorer"
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Program Files\\Real\\RealPlayer\\realplay.exe:*:Disabled:RealPlayer"
"C:\\Program Files\\DC++\\DCPlusPlus.exe"="C:\\Program Files\\DC++\\DCPlusPlus.exe:*:Enabled:DC++"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Onet.pl - Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[b]Remaining Files [/b]:



[b]Files with Hidden Attributes [/b]:

Wed 10 Jan 2007           309 A.SHR --- "C:\BOOT.BAK"
Wed  3 May 2006       163,328 ..SHR --- "C:\WINDOWS\system32\flvDX.dll"
Wed 21 Feb 2007        31,232 ..SHR --- "C:\WINDOWS\system32\msfDX.dll"
Mon 17 Dec 2007        27,648 ..SH. --- "C:\WINDOWS\system32\Smab0.dll"
Thu  8 Dec 2005         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 10 Jan 2007             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"

[b]Finished![/b]


Dodano 10.09.2008 13:17:33:
Log z Combofixa

Kod: Zaznacz wszystko

ComboFix 08-09-05.12 - Właściciel 2008-09-09 21:37:40.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1033.18.200 [GMT 2:00]
Running from: E:\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((   Files Created from 2008-08-09 to 2008-09-09  )))))))))))))))))))))))))))))))
.

2008-09-09 21:40 . 2008-09-09 21:40   53,248   --a------   C:\Temp\catchme.dll
2008-09-09 21:21 . 2008-09-09 21:21   <DIR>   d--------   C:\WINDOWS\ERUNT
2008-09-09 21:14 . 2008-09-09 21:33   <DIR>   d--------   C:\SDFix
2008-09-09 20:22 . 2008-09-09 20:29   <DIR>   d--------   C:\Program Files\Spyware Doctor
2008-09-09 20:22 . 2008-09-09 20:32   <DIR>   d--------   C:\Program Files\SkanerOnline
2008-09-09 20:22 . 2008-09-09 20:22   <DIR>   d--------   C:\Documents and Settings\Właściciel\Application Data\PC Tools
2008-09-09 20:22 . 2008-09-09 21:33   <DIR>   d-a------   C:\Documents and Settings\All Users\Application Data\TEMP
2008-09-09 20:22 . 2008-08-25 11:36   81,288   --a------   C:\WINDOWS\system32\drivers\iksyssec.sys
2008-09-09 20:22 . 2008-08-25 11:36   66,952   --a------   C:\WINDOWS\system32\drivers\iksysflt.sys
2008-09-09 20:22 . 2008-08-25 11:36   40,840   --a------   C:\WINDOWS\system32\drivers\ikfilesec.sys
2008-09-09 20:22 . 2008-06-02 15:19   29,576   --a------   C:\WINDOWS\system32\drivers\kcom.sys
2008-09-09 20:11 . 2008-09-09 20:12   <DIR>   d--------   C:\Temp\iss9F.tmp
2008-09-09 19:47 . 2008-09-09 19:48   <DIR>   d--------   C:\Temp\iss7.tmp
2008-09-09 19:46 . 2008-09-09 20:41   <DIR>   d--------   C:\Temp\~nsu.tmp
2008-09-04 15:26 . 2008-09-09 21:28   <DIR>   d--------   C:\Temp\WER7061.dir00
2008-09-04 15:09 . 2008-09-04 15:09   1,024   --a------   C:\WINDOWS\system32\gncontent.cch
2008-09-04 10:34 . 2008-09-04 10:35   <DIR>   d--------   C:\Temp\iss1E.tmp
2008-09-04 10:34 . 2008-09-04 10:34   <DIR>   d--------   C:\Temp\Creative
2008-09-04 10:34 . 2008-09-04 10:34   <DIR>   d--------   C:\Program Files\Audible
2008-09-04 10:34 . 2008-09-04 10:34   755,320   --a------   C:\WINDOWS\system32\awrdscdc.ax
2008-09-04 10:32 . 2008-09-04 10:32   <DIR>   d--------   C:\Temp\iss11.tmp
2008-09-04 10:31 . 2008-09-09 21:28   <DIR>   d--------   C:\Temp\AutoUpdate
2008-08-27 08:14 . 2008-09-09 21:28   <DIR>   d--------   C:\Temp\WER5556.dir00
2008-08-25 22:52 . 2008-08-25 22:52   <DIR>   d--------   C:\WINDOWS\Matura 2008 Język Niemiecki
2008-08-25 22:33 . 2008-08-25 22:33   <DIR>   d--------   C:\angielski_tmp
2008-08-20 08:35 . 2008-09-09 21:28   <DIR>   d--------   C:\Temp\Word8.0
2008-08-20 08:35 . 2008-08-20 08:35   <DIR>   d--------   C:\Temp\VBE
2008-08-17 21:32 . 2008-09-09 21:40   <DIR>   d--------   C:\Temp\CDSPlayerWmpSkin
2008-08-17 21:32 . 2005-11-10 11:41   55,168   ---------   C:\WINDOWS\system32\drivers\sdcplh.sys
2008-08-17 20:42 . 2008-08-17 20:42   23,392   --a------   C:\WINDOWS\system32\nscompat.tlb
2008-08-17 20:42 . 2008-08-17 20:42   16,832   --a------   C:\WINDOWS\system32\amcompat.tlb
2008-08-17 13:37 . 2008-09-09 21:40   <DIR>   d--------   C:\Temp\pft2A~tmp
2008-08-17 13:24 . 2008-08-17 13:24   271,360   --a------   C:\WINDOWS\system32\drivers\atksgt.sys
2008-08-17 13:24 . 2008-08-17 13:24   18,048   --a------   C:\WINDOWS\system32\drivers\lirsgt.sys
2008-08-17 13:19 . 2008-08-17 13:41   <DIR>   d--------   C:\Temp\ispB.tmp
2008-08-17 13:11 . 2008-08-17 13:15   <DIR>   d--------   C:\Program Files\Edgard

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2060-08-18 17:02   1,496,064   ----a-w   C:\WINDOWS\system32\CC3250MT.DLL
2060-08-18 16:40   909,824   ----a-w   C:\WINDOWS\system32\cp3245mt.dll
2060-08-18 16:40   24,064   ----a-w   C:\WINDOWS\system32\borlndmm.dll
2008-09-09 18:08   ---------   d-----w   C:\Program Files\Creative
2008-09-09 17:46   ---------   d-----w   C:\Program Files\7-Zip
2008-09-04 08:35   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
2008-09-04 08:33   ---------   d-----w   C:\Documents and Settings\Właściciel\Application Data\Creative
2008-08-25 20:52   ---------   d-----w   C:\Program Files\Matura 2008 Język Niemiecki
2008-08-18 20:47   ---------   d-----w   C:\Program Files\Skype
2008-08-18 20:47   ---------   d-----w   C:\Program Files\PWN
2008-08-18 20:47   ---------   d-----w   C:\Program Files\Common Files\Wise Installation Wizard
2008-08-18 20:47   ---------   d-----w   C:\Program Files\AGEIA Technologies
2008-08-17 18:39   ---------   d-----w   C:\Program Files\Windows Media Connect 2
2008-08-17 11:41   ---------   d-----w   C:\Program Files\Common Files\Adobe
2008-03-19 18:42   338   ----a-w   C:\Program Files\Neostrada
2005-11-02 08:44   457   ----a-w   C:\Program Files\Skrót do Ahead.lnk
2005-10-26 12:25   251   ----a-w   C:\Program Files\wt3d.ini
2006-05-03 10:06   163,328   --sh--r   C:\WINDOWS\system32\flvDX.dll
2007-02-21 11:47   31,232   --sh--r   C:\WINDOWS\system32\msfDX.dll
2007-12-17 13:43   27,648   --sh--w   C:\WINDOWS\system32\Smab0.dll
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-08-24 94208]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-08-24 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-08-24 114688]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 64512]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-08-01 729177]
"avast!"="C:\Program Files\Alwil Software\Avast4\ashDisp.exe" [2008-07-19 78008]
"ISTray"="C:\Program Files\Spyware Doctor\pctsTray.exe" [2008-08-25 1168264]
"SoundMan"="SOUNDMAN.EXE" [2005-08-17 C:\WINDOWS\SOUNDMAN.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.ffds"= ffdshow.ax
"VIDC.I420"= i420vfw.dll
"vidc.yv12"= yv12vfw.dll
"msacm.ac3filter"= ac3filter.acm

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"TapiSrv"=3 (0x3)
"ERSvc"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
S3 7236dd20-b9b6-423c-87df-1bca117be7a9;7236dd20-b9b6-423c-87df-1bca117be7a9;D:\Player\cds300.dll [ ]
S3 USB28xxBGA;PCTV 100e/150e Device;C:\WINDOWS\system32\DRIVERS\emBDA.sys [2007-01-29 361728]
S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [2007-01-29 39680]

*Newly Created Service* - PROCEXP90
.
- - - - ORPHANS REMOVED - - - -

HKU-Default-Run-SSS6_Suite - C:\Program Files\Steganos Security Suite 6\sss.exe
HKU-Default-Run-SSS6_SAFE - C:\Program Files\Steganos Security Suite 6\safe.exe
HKU-Default-Run-SSS6_SPM - C:\Program Files\Steganos Security Suite 6\spm.exe
Notify-WgaLogon - (no file)


.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Właściciel\Application Data\Mozilla\Firefox\Profiles\ru6ghnm0.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - http://www.google.pl
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-09 21:40:23
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-09-09 21:41:31
ComboFix-quarantined-files.txt  2008-09-09 19:41:25

Pre-Run: 59,301,851,136 bytes free
Post-Run: 59,340,234,752 bajtów wolnych

133   --- E O F ---   2008-04-13 19:28:27

Dodano 10.09.2008 13:18:09:
HijackThis

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:07:11, on 2008-09-09
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\ctfmon.exe
E:\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [SSS6_Suite] "C:\Program Files\Steganos Security Suite 6\sss.exe" /booting (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\Run: [SSS6_SAFE] "C:\Program Files\Steganos Security Suite 6\safe.exe" /booting (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\Run: [SSS6_SPM] "C:\Program Files\Steganos Security Suite 6\spm.exe" /booting (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [SSS6_Suite] "C:\Program Files\Steganos Security Suite 6\sss.exe" /booting (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.pcf.pl/
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O18 - Protocol: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} - D:\Player\__CDS2.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 5130 bytes

[ziumekk]

Mam ten sam problem a oto log z otl

Kod: Zaznacz wszystko

OTL logfile created on: 2009-07-14 13:52:01 - Run 1
OTL by OldTimer - Version 3.0.7.1     Folder = C:\Documents and Settings\Jona xD\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

447,23 Mb Total Physical Memory | 145,73 Mb Available Physical Memory | 32,58% Memory free
2,33 Gb Paging File | 1,89 Gb Available in Paging File | 80,99% Paging File free
Paging file location(s): [Binary data over 100 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 25,03 Gb Total Space | 19,02 Gb Free Space | 75,99% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 23,51 Gb Total Space | 22,18 Gb Free Space | 94,33% Space Free | Partition Type: NTFS
I: Drive not present or media not loaded
Drive J: | 25,99 Gb Total Space | 25,93 Gb Free Space | 99,75% Space Free | Partition Type: NTFS

Computer Name: DOM
Current User Name: Jona xD
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 7 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2004-07-12 21:06:00 | 00,036,864 | ---- | M] () -- C:\WINDOWS\System32\acs.exe
PRC - [2009-02-05 22:01:25 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009-02-05 22:08:40 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2006-04-03 18:04:02 | 00,020,543 | ---- | M] (Apache Software Foundation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
PRC - [2006-07-13 16:59:32 | 00,065,599 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
PRC - [2006-07-12 07:19:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe
PRC - [2009-07-13 13:40:49 | 00,604,416 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe
PRC - [2006-07-13 16:59:48 | 00,131,131 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
PRC - [2006-04-03 18:04:02 | 00,020,543 | ---- | M] (Apache Software Foundation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
PRC - [2009-02-05 22:08:26 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009-02-05 22:06:04 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2008-04-14 19:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2006-06-01 10:48:00 | 16,208,384 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE
PRC - [2009-02-05 22:08:45 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009-06-21 20:54:07 | 00,407,111 | -HS- | M] ( ) -- C:\WINDOWS\smss.cmd
PRC - [2006-06-27 14:11:54 | 00,046,718 | ---- | M] (MyPortal.pl) -- C:\Program Files\MyPortal\Speed-X\SpeedX.exe
PRC - [2009-07-13 12:39:02 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe
PRC - [2006-11-13 13:39:52 | 01,289,000 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe
PRC - [2005-05-09 20:45:00 | 02,678,784 | ---- | M] () -- C:\Program Files\PLANET WL-8310\WLANPRO.exe
PRC - [2006-11-13 13:39:34 | 00,199,464 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft ActiveSync\rapimgr.exe
PRC - [2007-09-02 13:58:52 | 00,495,616 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
PRC - [2009-06-19 03:39:20 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
PRC - [2009-06-19 03:39:20 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
PRC - [2009-07-14 13:39:30 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jona xD\Pulpit\OTL.exe
PRC - [2009-06-19 03:39:20 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
PRC - [2008-04-14 19:21:32 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe

[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2004-07-12 21:06:00 | 00,036,864 | ---- | M] () -- C:\WINDOWS\System32\acs.exe -- (ACS [Auto | Running])
SRV - [2008-07-25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2009-02-05 22:01:25 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv [Auto | Running])
SRV - [2009-02-05 22:08:40 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus [Auto | Running])
SRV - [2009-02-05 22:08:26 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Running])
SRV - [2009-02-05 22:06:04 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Running])
SRV - [2008-07-25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])
SRV - [2006-04-03 18:04:02 | 00,020,543 | ---- | M] (Apache Software Foundation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe -- (ForcewareWebInterface [Auto | Running])
SRV - [2008-04-14 19:20:44 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2008-07-29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped])
SRV - [2008-07-29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])
SRV - [2006-07-13 16:59:48 | 00,131,131 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe -- (nSvcIp [Auto | Running])
SRV - [2006-07-13 16:59:32 | 00,065,599 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe -- (nSvcLog [Auto | Running])
SRV - [2006-07-12 07:19:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running])
SRV - [2009-07-13 13:40:47 | 00,361,216 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe -- (TuneUp.Defrag [On_Demand | Stopped])
SRV - [2009-07-13 13:40:49 | 00,604,416 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc [Auto | Running])
SRV - [2009-04-27 14:21:36 | 00,028,928 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll -- (UxTuneUp [Auto | Running])
SRV - [2006-12-01 11:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2009-02-05 22:05:11 | 00,026,944 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4 [System | Running])
DRV - [2006-06-18 23:51:32 | 00,043,520 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\System32\DRIVERS\AmdK8.sys -- (AmdK8 [System | Running])
DRV - [2005-01-21 11:19:28 | 00,411,680 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\ar5211.sys -- (AR5211 [On_Demand | Running])
DRV - [2009-02-05 22:07:12 | 00,020,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\DRIVERS\aswFsBlk.sys -- (aswFsBlk [Auto | Running])
DRV - [2009-02-05 22:08:10 | 00,094,032 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2 [Auto | Running])
DRV - [2009-02-05 22:06:10 | 00,023,152 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr [On_Demand | Running])
DRV - [2009-02-05 22:07:23 | 00,114,768 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP [System | Running])
DRV - [2009-02-05 22:06:20 | 00,051,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi [System | Running])
DRV - File not found --  -- (catchme [On_Demand | Running])
DRV - [2009-03-27 01:16:28 | 00,012,672 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\System32\drivers\cpuz132_x32.sys -- (cpuz132 [On_Demand | Stopped])
DRV - [2009-04-22 14:28:08 | 00,008,704 | ---- | M] () -- C:\WINDOWS\System32\epmntdrv.sys -- (epmntdrv [On_Demand | Stopped])
DRV - [2009-04-22 14:28:06 | 00,003,072 | ---- | M] () -- C:\WINDOWS\System32\EuGdiDrv.sys -- (EuGdiDrv [On_Demand | Stopped])
DRV - [2008-04-13 20:45:29 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running])
DRV - [2008-04-13 18:36:05 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2006-06-06 06:09:26 | 04,284,928 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2009-06-19 17:04:19 | 00,015,781 | ---- | M] (Meetinghouse Data Communications) -- C:\WINDOWS\System32\DRIVERS\mdc8021x.sys -- (MDC8021X [Auto | Running])
DRV - [2006-07-12 07:19:00 | 03,934,592 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running])
DRV - [2006-06-28 11:38:56 | 00,105,088 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata [Boot | Running])
DRV - [2006-07-11 15:38:28 | 00,057,856 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\NVENETFD.sys -- (NVENETFD [On_Demand | Running])
DRV - [2006-07-11 15:38:30 | 00,020,480 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nvnetbus.sys -- (nvnetbus [On_Demand | Running])
DRV - [2006-03-02 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2008-04-13 18:39:16 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2006-11-06 18:04:56 | 00,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\wceusbsh.sys -- (wceusbsh [On_Demand | Stopped])

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKU\S-1-5-21-1060284298-790525478-839522115-1005\S-1-5-21-1060284298-790525478-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1060284298-790525478-839522115-1005\S-1-5-21-1060284298-790525478-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-07-10 13:38:51 | 00,000,000 | ---D | M]


O1 HOSTS File: (27 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Systool] C:\WINDOWS\smss.cmd ( )
O4 - HKU\S-1-5-21-1060284298-790525478-839522115-1005..\Run: [Google Update] C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe (Google Inc.)
O4 - HKU\S-1-5-21-1060284298-790525478-839522115-1005..\Run: [H/PC Connection Agent] C:\Program Files\Microsoft ActiveSync\wcescomm.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1060284298-790525478-839522115-1005..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKU\S-1-5-21-1060284298-790525478-839522115-1005..\Run: [SpeedX] C:\Program Files\MyPortal\Speed-X\SpeedX.exe (MyPortal.pl)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\PLANET WL-8310 Configuration Utility.lnk = C:\Program Files\PLANET WL-8310\WLANPRO.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Reg.lnk = C:\Program Files\PLANET WL-8310\Reg.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStrCmpLogical = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 1
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MemCheckBoxInRunDlg = 0
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAutoTrayNotify = 0
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartBanner = 01 00 00 00  [binary data]
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 1
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-21-1060284298-790525478-839522115-1005_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 213.199.225.14
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-19 16:18:32 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) -  File not found

[color=#E56717]========== Files/Folders - Created Within 7 Days ==========[/color]

[2 C:\WINDOWS\System32\*.tmp files]
[1 C:\WINDOWS\*.tmp files]
[2009-07-14 13:39:22 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jona xD\Pulpit\OTL.exe
[2009-07-14 12:57:05 | 00,000,000 | ---D | C] -- C:\Program Files\RocketDock
[2009-07-14 12:30:52 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2009-07-14 12:20:32 | 02,190,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ntoskrnl.exe
[2009-07-14 12:20:32 | 02,067,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ntkrnlpa.exe
[2009-07-14 12:20:32 | 01,571,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\sfcfiles.dll
[2009-07-14 12:20:32 | 01,035,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\explorer.exe
[2009-07-14 12:20:32 | 01,018,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\kernel32.dll
[2009-07-14 12:20:32 | 00,927,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\mfc40u.dll
[2009-07-14 12:20:32 | 00,915,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\wininet.dll
[2009-07-14 12:20:32 | 00,822,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\comres.dll
[2009-07-14 12:20:32 | 00,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\comctl32.dll
[2009-07-14 12:20:32 | 00,580,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\user32.dll
[2009-07-14 12:20:32 | 00,510,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\winlogon.exe
[2009-07-14 12:20:32 | 00,435,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ntmssvc.dll
[2009-07-14 12:20:32 | 00,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\rpcss.dll
[2009-07-14 12:20:32 | 00,361,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\tcpip.sys
[2009-07-14 12:20:32 | 00,296,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\termsrv.dll
[2009-07-14 12:20:32 | 00,182,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ndis.sys
[2009-07-14 12:20:32 | 00,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\services.exe
[2009-07-14 12:20:32 | 00,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\imm32.dll
[2009-07-14 12:20:32 | 00,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\rasauto.dll
[2009-07-14 12:20:32 | 00,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ws2_32.dll
[2009-07-14 12:20:32 | 00,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\spoolsv.exe
[2009-07-14 12:20:32 | 00,051,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\wuauclt.exe
[2009-07-14 12:20:32 | 00,036,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ip6fw.sys
[2009-07-14 12:20:32 | 00,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\msgsvc.dll
[2009-07-14 12:20:32 | 00,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\userinit.exe
[2009-07-14 12:20:32 | 00,024,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\kbdclass.sys
[2009-07-14 12:20:32 | 00,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\lpk.dll
[2009-07-14 12:20:32 | 00,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\powrprof.dll
[2009-07-14 12:20:32 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ctfmon.exe
[2009-07-14 12:20:32 | 00,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\svchost.exe
[2009-07-14 12:20:32 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\lsass.exe
[2009-07-14 12:20:32 | 00,012,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\acpiec.sys
[2009-07-14 12:20:32 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\sfc.dll
[2009-07-14 12:20:32 | 00,004,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\beep.sys
[2009-07-14 12:20:32 | 00,002,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\null.sys
[2009-07-14 12:20:32 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dllcache\cache
[2009-07-14 12:10:04 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009-07-14 10:40:54 | 00,000,000 | ---D | C] -- C:\NVIDIA
[2009-07-13 15:59:00 | 09,073,874 | -H-- | C] () -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-07-13 14:40:40 | 00,004,696 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2009-07-13 13:40:48 | 00,604,416 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe
[2009-07-13 13:40:48 | 00,000,534 | ---- | C] () -- C:\WINDOWS\tasks\Konserwacja 1 kliknięciem.job
[2009-07-13 13:40:47 | 00,028,928 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll
[2009-07-13 13:40:46 | 00,361,216 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe
[2009-07-13 13:40:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Dane aplikacji\TuneUp Software
[2009-07-13 13:40:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software
[2009-07-13 13:40:11 | 00,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2009
[2009-07-13 13:39:35 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{55A29068-F2CE-456C-9148-C869879E2357}
[2009-07-13 12:51:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\Temp
[2009-07-13 12:51:36 | 00,001,088 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-790525478-839522115-1005Core.job
[2009-07-13 12:39:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Moje dokumenty\Downloads
[2009-07-13 12:39:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\Google
[2009-07-12 19:33:27 | 00,012,672 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\System32\drivers\cpuz132_x32.sys
[2009-07-12 19:33:26 | 00,000,000 | ---D | C] -- C:\Program Files\CPUID
[2009-07-12 12:51:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\FileMaker
[2009-07-12 12:50:21 | 00,009,719 | ---- | C] () -- C:\WINDOWS\TURBOXP.LIC
[2009-07-11 12:50:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\FLEXnet
[2009-07-11 09:24:32 | 00,002,789 | RH-- | C] () -- C:\WINDOWS\EPMBatch.ept
[2009-07-11 09:19:33 | 00,014,848 | ---- | C] () -- C:\WINDOWS\System32\EuEpmGdi.dll
[2009-07-11 09:19:32 | 01,663,488 | ---- | C] () -- C:\WINDOWS\System32\BootMan.exe
[2009-07-11 09:19:32 | 00,086,408 | ---- | C] () -- C:\WINDOWS\System32\setupempdrv03.exe
[2009-07-11 09:19:32 | 00,008,704 | ---- | C] () -- C:\WINDOWS\System32\epmntdrv.sys
[2009-07-11 09:19:32 | 00,003,072 | ---- | C] () -- C:\WINDOWS\System32\EuGdiDrv.sys
[2009-07-10 09:37:49 | 01,089,883 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ntprint.cat
[2009-07-09 21:10:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Moje dokumenty\CDBurnerXP Projects
[2009-07-09 21:10:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Dane aplikacji\Canneverbe_Limited
[2009-07-09 21:09:22 | 00,000,000 | ---D | C] -- C:\Program Files\CDBurnerXP
[2009-07-09 21:08:15 | 00,014,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg2.dll
[2009-07-09 21:05:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2009-07-09 21:05:10 | 00,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2009-07-09 21:05:08 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2009-07-09 21:04:58 | 00,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2009-07-09 21:04:03 | 00,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2009-07-09 21:04:03 | 00,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsshhdr.dll
[2009-07-09 21:04:03 | 00,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2009-07-09 21:04:03 | 00,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll
[2009-07-09 21:04:03 | 00,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2009-07-09 21:04:02 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpssvcs.dll
[2009-07-09 21:04:02 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2009-07-09 21:02:38 | 00,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2009-07-09 21:01:44 | 00,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2009-07-09 20:30:20 | 00,107,864 | ---- | C] (TechSmith Corporation) -- C:\WINDOWS\System32\tsccvid.dll
[2009-07-09 20:30:18 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\QuickTime
[2009-07-09 19:30:17 | 00,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RICHTX32.OCX
[2009-07-09 19:30:15 | 00,089,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VB5DB.DLL
[2009-07-09 09:55:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\WMTools Downloaded Files
[2009-07-08 14:22:41 | 00,008,704 | ---- | C] () -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-07-08 13:15:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\Sony
[2009-07-08 13:15:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Jona xD\Dane aplikacji\Sony
[2009-07-07 19:06:08 | 00,254,976 | ---- | C] (MpegTV) -- C:\WINDOWS\System32\xaudio.dll
[2009-07-07 19:05:31 | 00,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\WINDOWS\uninst.exe
[2009-07-01 15:32:28 | 00,000,063 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2009-06-19 17:04:18 | 00,411,680 | ---- | C] () -- C:\WINDOWS\System32\drivers\ar52119x.sys
[2009-06-19 17:04:17 | 00,651,264 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2009-06-19 17:04:17 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2009-06-19 17:03:54 | 00,411,680 | ---- | C] () -- C:\WINDOWS\System32\drivers\ar5211.sys
[2009-06-19 16:47:48 | 00,135,168 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2009-06-19 16:38:58 | 00,004,249 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009-06-19 16:38:57 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2006-07-12 07:19:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006-07-12 07:19:00 | 01,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006-07-12 07:19:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006-07-12 07:19:00 | 00,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006-07-12 07:19:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006-07-12 07:19:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-07-12 07:19:00 | 00,196,608 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2006-03-02 14:00:00 | 00,000,599 | ---- | C] () -- C:\WINDOWS\win.ini
[2006-03-02 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini

[color=#E56717]========== Files - Modified Within 7 Days ==========[/color]

[1 C:\WINDOWS\System32\drivers\*.tmp files]
[2 C:\WINDOWS\System32\*.tmp files]
[1 C:\WINDOWS\*.tmp files]
[2009-07-14 13:39:30 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jona xD\Pulpit\OTL.exe
[2009-07-14 13:17:20 | 00,073,451 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2009-07-14 13:17:13 | 00,000,534 | ---- | M] () -- C:\WINDOWS\tasks\Konserwacja 1 kliknięciem.job
[2009-07-14 13:16:50 | 09,073,874 | -H-- | M] () -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-07-14 12:56:01 | 00,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-790525478-839522115-1005Core.job
[2009-07-14 12:19:35 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009-07-14 12:19:19 | 00,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009-07-14 12:19:07 | 00,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-07-14 12:19:03 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-07-14 12:18:58 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-07-13 14:40:45 | 01,085,432 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-07-13 14:40:45 | 00,490,284 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2009-07-13 14:40:45 | 00,432,356 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009-07-13 14:40:45 | 00,083,660 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2009-07-13 14:40:45 | 00,067,312 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009-07-13 14:40:45 | 00,004,696 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2009-07-13 13:40:49 | 00,604,416 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe
[2009-07-13 13:40:47 | 00,361,216 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe
[2009-07-12 13:49:56 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2009-07-12 13:49:56 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009-07-12 13:49:56 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2009-07-12 13:49:56 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2009-07-12 13:49:56 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2009-07-12 13:49:56 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009-07-12 12:51:04 | 00,009,719 | ---- | M] () -- C:\WINDOWS\TURBOXP.LIC
[2009-07-12 12:50:23 | 00,000,599 | ---- | M] () -- C:\WINDOWS\win.ini
[2009-07-12 11:57:13 | 00,002,789 | RH-- | M] () -- C:\WINDOWS\EPMBatch.ept
[2009-07-11 13:34:54 | 01,394,608 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-07-11 12:50:32 | 00,013,104 | ---- | M] () -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-07-11 09:43:43 | 00,000,225 | -HS- | M] () -- C:\boot.ini
[2009-07-09 09:08:19 | 00,008,704 | ---- | M] () -- C:\Documents and Settings\Jona xD\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[color=#E56717]========== LOP Check ==========[/color]

[2009-07-13 13:40:14 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji
[2009-07-13 13:39:35 | 00,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{55A29068-F2CE-456C-9148-C869879E2357}
[2009-07-11 12:50:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FLEXnet
[2009-06-21 20:59:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-07-13 13:40:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software
[2009-06-19 18:09:50 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji
[2009-07-11 08:06:56 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Dorota\Dane aplikacji
[2009-06-21 12:39:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dorota\Dane aplikacji\Opera
[2009-07-03 20:55:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dorota\Dane aplikacji\Tibia
[2009-07-14 10:54:56 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Jona xD\Dane aplikacji
[2009-07-09 21:10:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Jona xD\Dane aplikacji\Canneverbe_Limited
[2009-06-30 10:34:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Jona xD\Dane aplikacji\iGO
[2009-06-28 12:28:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Jona xD\Dane aplikacji\Nowe Gadu-Gadu
[2009-07-08 13:15:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Jona xD\Dane aplikacji\Sony
[2009-07-13 13:40:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Jona xD\Dane aplikacji\TuneUp Software
[2009-07-02 16:23:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji
[2009-06-19 16:21:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji
[2006-03-02 14:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini
[2009-07-14 12:56:01 | 00,001,088 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-790525478-839522115-1005Core.job
[2009-07-14 13:17:13 | 00,000,534 | ---- | M] () -- C:\WINDOWS\Tasks\Konserwacja 1 kliknięciem.job
[2009-07-14 12:19:03 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 88 bytes -> C:\WINDOWS\System32\taskmgr.exe:SummaryInformation
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:E41EAF13
< End of report >

[marcin19]

Proponuję skanowanie kompa antywirusem, to tak na początek