Blue screen przy przeszukiwaniu dysku d

**Posty:** 95 · przez **Pl4tin3** 22 Paź 2008, 19:13

Witam,

Mam problem, otóż gdy np skanuje dysk D albo coś na nim robię że musi trochę "pomysleć" to wyskakuje Blue screen, nie zrobiłem jeszcze screena z tym blue screenem ale mam za to z Event Viewera co sie dzieje.

Może mi ktoś powiedzieć co dokładnie jest przyczyną tego błędu i jak go rozwiązać ? Byłbym bardzo wdzięczny.

Pozdro,

**Posty:** 7956 · przez **Magik** 22 Paź 2008, 19:15

wklej na poczatek logi z combofixa i Hijacka by wykluczyc syf

**Posty:** 95 · przez **Pl4tin3** 22 Paź 2008, 19:32

Hijackthis

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:29:10, on 2008-10-22 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe D:\gry\steam\steam.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Tibia\Tibia.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TibiaBot NG\loader.exe C:\Program Files\TibiaBot NG\loader.exe C:\WINDOWS\system32\mmc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Winamp\winamp.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\CCleaner\CCleaner.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [Steam] "d:\gry\steam\steam.exe" -silent O8 - Extra context menu item: Dodaj do listy blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{1975B402-0703-43DD-A370-FCCA23519F54}: NameServer = 194.204.159.1 217.98.63.164 O17 - HKLM\System\CS2\Services\Tcpip\..\{1975B402-0703-43DD-A370-FCCA23519F54}: NameServer = 194.204.159.1 217.98.63.164 O17 - HKLM\System\CS3\Services\Tcpip\..\{1975B402-0703-43DD-A370-FCCA23519F54}: NameServer = 194.204.159.1 217.98.63.164 O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Kaspersky Internet Security (avp) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NMSAccessU - Unknown owner - C:\Documents and Settings\Pawel\Local Settings\temp\{7F325BEB-52D2-4CF3-A1E4-087E7B089B47}\NMSAccessU.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 6064 bytes

Combofix

Kod: Zaznacz wszystko: ComboFix 08-10-21.05 - Pawel 2008-10-22 19:39:10.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1033.18.466 [GMT 2:00] Uruchomiony z: C:\Documents and Settings\Pawel\Desktop\ComboFix.exe * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . D:\install.exe . ((((((((((((((((((((((((( Pliki utworzone od 2008-09-22 do 2008-10-22 ))))))))))))))))))))))))))))))) . 2008-10-22 19:17 . 2008-10-22 19:17 <DIR> d-------- C:\Program Files\CCleaner 2008-10-14 13:41 . 2008-10-14 13:41 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Codemasters 2008-10-14 13:34 . 2008-10-14 13:34 <DIR> d-------- C:\Program Files\OpenAL . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-22 17:34 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-10-22 17:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2008-10-22 05:57 77,780 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx 2008-10-22 05:57 573,472 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat 2008-10-22 05:57 5,571,360 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat 2008-10-22 05:57 22,268 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx 2008-10-21 05:31 --------- d-----w C:\Documents and Settings\Pawel\Application Data\uTorrent 2008-10-18 21:59 --------- d-----w C:\Documents and Settings\Pawel\Application Data\Tibia 2008-10-14 11:34 444,952 ----a-w C:\WINDOWS\system32\wrap_oal.dll 2008-10-14 11:34 109,080 ----a-w C:\WINDOWS\system32\OpenAL32.dll 2008-10-14 11:06 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-10-14 10:39 --------- d-----w C:\Documents and Settings\Pawel\Application Data\FreeCall 2008-10-14 08:05 --------- d-----w C:\Program Files\TibiaBot NG 2008-10-11 12:50 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2008-10-02 14:49 --------- d-----w C:\Program Files\Tibia 2008-09-27 18:04 137,480 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys 2008-09-27 18:03 183,120 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2008-09-25 18:40 --------- d-----w C:\Program Files\Java 2008-09-13 15:46 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe 2008-09-13 15:36 22,328 ----a-w C:\Documents and Settings\Pawel\Application Data\PnkBstrK.sys 2008-09-11 21:54 --------- d-----w C:\Documents and Settings\Pawel\Application Data\Yahoo! 2008-09-11 21:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\Yahoo! Companion 2008-09-07 15:44 --------- d-----w C:\Documents and Settings\Pawel\Application Data\SPORE 2008-09-05 17:51 --------- d-----w C:\Program Files\MyPlayCity.com 2008-09-05 14:42 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-08-30 17:11 --------- d-----w C:\Program Files\Garmin GPS Plugin 2008-08-30 17:11 --------- d-----w C:\Documents and Settings\Pawel\Application Data\GARMIN 2008-08-20 00:33 892,928 ----a-w C:\WINDOWS\system32\iconv.dll 2008-08-20 00:32 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe 2008-08-18 19:30 921,600 ----a-w C:\WINDOWS\system32\vorbisenc.dll 2008-08-18 19:30 45,056 ----a-w C:\WINDOWS\system32\ogg.dll 2008-08-18 19:30 237,568 ----a-w C:\WINDOWS\system32\OggDS.dll 2008-08-18 19:30 188,416 ----a-w C:\WINDOWS\system32\vorbis.dll 2008-08-18 19:30 1,415,680 ----a-w C:\WINDOWS\system32\WMV9VCM.dll 2008-08-18 19:29 9,216 ----a-w C:\WINDOWS\system32\cpuinf32.dll 2008-08-18 19:29 391,168 ----a-w C:\WINDOWS\system32\i263_32.drv 2008-08-18 19:29 245,760 ----a-w C:\WINDOWS\system32\mplvpx.dll . ((((((((((((((((((((((((((((( snapshot@2008-07-04_23.52.46.65 ))))))))))))))))))))))))))))))))))))))))) . - 2005-05-03 10:43:28 69,632 ------r C:\WINDOWS\Alcmtr.exe + 2008-06-19 14:20:52 57,344 ----a-w C:\WINDOWS\Alcmtr.exe + 2006-07-31 09:27:30 217,088 ----a-w C:\WINDOWS\alcrmv.exe + 2006-07-31 09:19:00 315,392 ----a-w C:\WINDOWS\alcupd.exe - 2006-05-04 08:26:36 2,808,832 ------r C:\WINDOWS\alcwzrd.exe + 2008-06-19 14:42:44 2,808,832 ----a-w C:\WINDOWS\alcwzrd.exe + 2008-07-13 21:31:04 234,417 ----a-w C:\WINDOWS\EasyGifAnimator_Toolbar_Uninstaller_7171.exe + 2008-07-07 10:23:03 315,392 ----a-w C:\WINDOWS\HideWin.exe + 2008-08-16 20:35:50 53,248 ----a-r C:\WINDOWS\Installer\{05604218-C047-4AD9-BB53-FE0638166553}\ARPPRODUCTICON.exe + 2008-08-16 20:35:50 53,248 ----a-r C:\WINDOWS\Installer\{05604218-C047-4AD9-BB53-FE0638166553}\HipHop6.exe_05604218C0474AD9BB53FE0638166553.exe + 2008-08-16 20:35:50 53,248 ----a-r C:\WINDOWS\Installer\{05604218-C047-4AD9-BB53-FE0638166553}\HipHop6.exe1_05604218C0474AD9BB53FE0638166553.exe + 2008-08-16 20:35:50 131,072 ----a-r C:\WINDOWS\Installer\{05604218-C047-4AD9-BB53-FE0638166553}\NewShortcut1_132C1B2EAFE64CF0830596A182BA2811.exe + 2008-08-16 20:35:50 131,072 ----a-r C:\WINDOWS\Installer\{05604218-C047-4AD9-BB53-FE0638166553}\NewShortcut2_132C1B2EAFE64CF0830596A182BA2811.exe + 2008-08-05 18:25:34 27,136 ----a-r C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe - 2008-06-29 10:03:02 10,134 ----a-r C:\WINDOWS\Installer\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\ARPPRODUCTICON.exe + 2008-09-13 15:44:53 10,134 ----a-r C:\WINDOWS\Installer\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\ARPPRODUCTICON.exe - 2008-06-30 15:10:56 10,134 ----a-r C:\WINDOWS\Installer\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\ARPPRODUCTICON.exe + 2008-09-13 15:46:03 10,134 ----a-r C:\WINDOWS\Installer\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\ARPPRODUCTICON.exe + 2008-09-05 15:26:04 40,960 ----a-r C:\WINDOWS\Installer\{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}\ARPPRODUCTICON.exe - 2008-06-29 09:52:33 216,358 ----a-r C:\WINDOWS\Installer\{E48469CC-635E-4FD5-A122-1497C286D217}\ARPPRODUCTICON.exe + 2008-09-13 15:36:09 216,358 ----a-r C:\WINDOWS\Installer\{E48469CC-635E-4FD5-A122-1497C286D217}\ARPPRODUCTICON.exe - 2006-06-28 06:00:40 2,158,592 ------r C:\WINDOWS\MicCal.exe + 2007-06-28 14:44:14 2,165,760 ----a-w C:\WINDOWS\MicCal.exe - 2006-07-21 08:56:38 16,261,632 ------r C:\WINDOWS\RTHDCPL.exe + 2008-06-27 09:23:54 16,875,008 ----a-w C:\WINDOWS\RTHDCPL.exe - 2006-05-04 08:35:14 9,709,568 ------r C:\WINDOWS\RTLCPL.exe + 2008-06-19 14:27:46 9,715,200 ----a-w C:\WINDOWS\RTLCPL.exe - 2005-04-16 14:20:00 487,424 ------r C:\WINDOWS\RtlExUpd.dll + 2008-03-05 16:07:48 520,192 ----a-w C:\WINDOWS\RtlExUpd.dll - 2006-03-09 09:45:20 364,544 ------r C:\WINDOWS\RtlUpd.exe + 2008-04-02 07:27:26 1,196,032 ----a-w C:\WINDOWS\RtlUpd.exe - 2006-05-16 10:04:26 2,879,488 ------r C:\WINDOWS\SkyTel.exe + 2007-11-20 16:15:58 1,826,816 ----a-w C:\WINDOWS\SkyTel.exe - 2006-07-21 08:14:36 86,016 ------r C:\WINDOWS\SoundMan.exe + 2008-06-18 16:01:56 77,824 ----a-w C:\WINDOWS\SoundMan.exe + 2008-07-04 22:23:06 45,568 ----a-w C:\WINDOWS\system32\avgfwdx.dll - 2005-07-15 08:48:00 40,960 ------r C:\WINDOWS\system32\ChCfg.exe + 2006-08-01 13:02:32 49,152 ----a-w C:\WINDOWS\system32\ChCfg.exe - 2008-07-02 11:51:29 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat + 2008-10-09 08:02:35 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - 2008-07-02 11:51:29 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2008-10-09 08:02:35 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat - 2008-07-02 11:51:29 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2008-10-09 08:02:35 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2007-07-19 16:14:42 1,358,192 ----a-w C:\WINDOWS\system32\D3DCompiler_35.dll + 2007-10-12 13:14:00 1,374,232 ----a-w C:\WINDOWS\system32\D3DCompiler_36.dll + 2008-03-05 13:56:58 1,420,824 ----a-w C:\WINDOWS\system32\D3DCompiler_37.dll + 2007-07-19 16:14:42 444,776 ----a-w C:\WINDOWS\system32\d3dx10_35.dll + 2007-10-02 07:56:34 444,776 ----a-w C:\WINDOWS\system32\d3dx10_36.dll + 2008-02-05 21:07:36 462,864 ----a-w C:\WINDOWS\system32\d3dx10_37.dll + 2007-07-19 16:14:42 3,727,720 ----a-w C:\WINDOWS\system32\d3dx9_35.dll + 2007-10-12 13:14:00 3,734,536 ----a-w C:\WINDOWS\system32\d3dx9_36.dll + 2008-03-05 13:56:58 3,786,760 ----a-w C:\WINDOWS\system32\D3DX9_37.dll + 2008-06-18 17:52:28 161,096 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe - 2004-08-03 23:08:20 36,224 -c--a-w C:\WINDOWS\system32\dllcache\hidclass.sys + 2004-08-03 21:08:20 36,224 -c--a-w C:\WINDOWS\system32\dllcache\hidclass.sys - 2004-08-03 23:08:18 24,960 -c--a-w C:\WINDOWS\system32\dllcache\hidparse.sys + 2004-08-03 21:08:18 24,960 -c--a-w C:\WINDOWS\system32\dllcache\hidparse.sys - 2001-08-23 14:00:00 9,600 -c--a-w C:\WINDOWS\system32\dllcache\hidusb.sys + 2001-08-17 12:02:20 9,600 -c--a-w C:\WINDOWS\system32\dllcache\hidusb.sys - 2004-08-03 23:14:38 52,736 -c--a-w C:\WINDOWS\system32\dllcache\i8042prt.sys + 2004-08-03 21:14:38 52,736 -c--a-w C:\WINDOWS\system32\dllcache\i8042prt.sys - 2004-08-03 22:58:34 24,576 -c--a-w C:\WINDOWS\system32\dllcache\kbdclass.sys + 2004-08-03 20:58:34 24,576 -c--a-w C:\WINDOWS\system32\dllcache\kbdclass.sys - 2004-08-04 01:05:44 23,040 -c--a-w C:\WINDOWS\system32\dllcache\mouclass.sys + 2004-08-03 20:58:34 23,040 -c--a-w C:\WINDOWS\system32\dllcache\mouclass.sys - 2001-08-23 14:00:00 12,160 -c--a-w C:\WINDOWS\system32\dllcache\mouhid.sys + 2001-08-17 11:48:00 12,160 -c--a-w C:\WINDOWS\system32\dllcache\mouhid.sys + 2008-01-24 14:36:16 4,127,488 ----a-r C:\WINDOWS\system32\drivers\alcxwdm.sys + 2007-01-18 12:00:28 3,968 ----a-w C:\WINDOWS\system32\drivers\AvgArCln.sys + 2007-01-31 13:33:46 5,632 ----a-w C:\WINDOWS\system32\drivers\avgarkt.sys + 2008-07-04 22:23:06 23,296 ----a-w C:\WINDOWS\system32\drivers\avgfwdx.sys + 2004-08-04 01:05:44 20,992 ----a-w C:\WINDOWS\system32\drivers\dsda\hid.dll + 2004-08-03 21:08:20 36,224 ----a-w C:\WINDOWS\system32\drivers\dsda\hidclass.sys + 2004-08-03 21:08:18 24,960 ----a-w C:\WINDOWS\system32\drivers\dsda\hidparse.sys + 2001-08-17 12:02:20 9,600 ----a-w C:\WINDOWS\system32\drivers\dsda\hidusb.sys + 2008-03-13 17:02:46 26,640 ----a-w C:\WINDOWS\system32\drivers\dsda\klfltdev.sys + 2007-04-11 13:33:14 28,688 ----a-w C:\WINDOWS\system32\drivers\dsda\LUsbFilt.sys - 2004-08-03 23:08:20 36,224 ----a-w C:\WINDOWS\system32\drivers\hidclass.sys + 2004-08-03 21:08:20 36,224 ----a-w C:\WINDOWS\system32\drivers\hidclass.sys - 2004-08-03 23:08:18 24,960 ----a-w C:\WINDOWS\system32\drivers\hidparse.sys + 2004-08-03 21:08:18 24,960 ----a-w C:\WINDOWS\system32\drivers\hidparse.sys - 2001-08-23 14:00:00 9,600 ----a-w C:\WINDOWS\system32\drivers\hidusb.sys + 2001-08-17 12:02:20 9,600 ----a-w C:\WINDOWS\system32\drivers\hidusb.sys - 2004-08-03 23:14:38 52,736 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys + 2004-08-03 21:14:38 52,736 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys - 2004-08-03 22:58:34 24,576 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys + 2004-08-03 20:58:34 24,576 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys - 2008-05-29 16:59:25 88,774 ----a-w C:\WINDOWS\system32\drivers\klick.dat + 2008-07-24 11:23:22 87,855 ----a-w C:\WINDOWS\system32\drivers\klick.dat - 2008-04-18 11:53:28 187,408 ----a-w C:\WINDOWS\system32\drivers\klif.sys + 2008-09-16 13:07:40 213,008 ----a-w C:\WINDOWS\system32\drivers\klif.sys - 2008-05-29 16:59:25 96,966 ----a-w C:\WINDOWS\system32\drivers\klin.dat + 2008-08-06 17:24:25 96,976 ----a-w C:\WINDOWS\system32\drivers\klin.dat + 2007-04-11 13:32:38 63,248 ----a-w C:\WINDOWS\system32\drivers\L8042mou.Sys + 2007-04-11 13:33:06 79,376 ----a-w C:\WINDOWS\system32\drivers\LMouKE.Sys - 2004-08-04 01:05:44 23,040 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys + 2004-08-03 20:58:34 23,040 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys - 2001-08-23 14:00:00 12,160 ----a-w C:\WINDOWS\system32\drivers\mouhid.sys + 2001-08-17 11:48:00 12,160 ----a-w C:\WINDOWS\system32\drivers\mouhid.sys - 2006-07-24 08:15:04 4,353,024 ------r C:\WINDOWS\system32\drivers\RtkHDAud.Sys + 2008-06-27 09:24:56 4,742,656 ----a-w C:\WINDOWS\system32\drivers\RtkHDAud.sys + 2004-08-03 21:08:48 31,616 ----a-w C:\WINDOWS\system32\drivers\usbccgp.sys + 2004-08-03 21:08:48 26,496 ----a-w C:\WINDOWS\system32\drivers\USBSTOR.SYS - 2008-03-28 17:41:32 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll + 2008-06-12 18:36:38 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll - 2008-06-17 09:13:32 91,088 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT + 2008-09-06 07:16:22 92,680 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT + 2003-05-21 22:50:34 1,700,352 ----a-w C:\WINDOWS\system32\GdiPlus.dll - 2008-03-24 23:28:39 135,168 ----a-w C:\WINDOWS\system32\java.exe + 2008-06-09 23:21:01 135,168 ----a-w C:\WINDOWS\system32\java.exe - 2008-03-24 23:28:43 135,168 ----a-w C:\WINDOWS\system32\javaw.exe + 2008-06-09 23:21:04 135,168 ----a-w C:\WINDOWS\system32\javaw.exe - 2008-03-25 00:37:01 139,264 ----a-w C:\WINDOWS\system32\javaws.exe + 2008-06-10 00:32:34 139,264 ----a-w C:\WINDOWS\system32\javaws.exe + 2007-09-27 13:22:44 261,632 ----a-w C:\WINDOWS\system32\mcdvd_32.dll + 2002-01-05 14:48:16 974,848 ----a-w C:\WINDOWS\system32\mfc70.dll + 2008-08-04 22:34:07 8,688 ---ha-w C:\WINDOWS\system32\mlfcache.dat + 2007-09-27 13:22:44 413,760 ----a-w C:\WINDOWS\system32\mpg4c32.dll + 2002-01-05 13:40:18 487,424 ----a-w C:\WINDOWS\system32\msvcp70.dll + 2002-01-05 01:37:26 344,064 ----a-w C:\WINDOWS\system32\msvcr70.dll + 2002-02-21 16:56:34 24,576 ----a-w C:\WINDOWS\system32\msxml3a.dll + 2007-02-14 13:53:00 1,077,248 ----a-w C:\WINDOWS\system32\NMSDVDX.dll + 2007-02-14 13:52:44 1,101,824 ----a-w C:\WINDOWS\system32\NMSDVDXU.dll - 2007-12-21 01:00:00 278,528 ----a-w C:\WINDOWS\system32\pncrt.dll + 2008-07-30 03:00:00 278,528 ----a-w C:\WINDOWS\system32\pncrt.dll - 2007-12-21 01:00:00 6,656 ----a-w C:\WINDOWS\system32\pndx5016.dll + 2008-07-30 03:00:00 6,656 ----a-w C:\WINDOWS\system32\pndx5016.dll - 2007-12-21 01:00:00 5,632 ----a-w C:\WINDOWS\system32\pndx5032.dll + 2008-07-30 03:00:00 5,632 ----a-w C:\WINDOWS\system32\pndx5032.dll - 2007-04-24 15:30:28 60,273 ----a-w C:\WINDOWS\system32\pthreadGC2.dll + 2008-06-08 21:58:50 60,273 ----a-w C:\WINDOWS\system32\pthreadGC2.dll - 2007-03-07 23:51:00 547,576 ------w C:\WINDOWS\system32\px.dll + 2008-06-11 00:07:14 551,672 ------w C:\WINDOWS\system32\px.dll - 2007-03-07 23:51:00 129,784 ------w C:\WINDOWS\system32\pxafs.dll + 2008-06-11 00:07:14 129,784 ------w C:\WINDOWS\system32\pxafs.dll - 2007-03-07 23:51:00 64,760 ------w C:\WINDOWS\system32\pxcpya64.exe + 2008-06-11 00:07:14 66,296 ------w C:\WINDOWS\system32\pxcpya64.exe + 2008-06-11 00:07:16 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe - 2007-03-07 23:51:00 510,712 ------w C:\WINDOWS\system32\pxdrv.dll + 2008-06-11 00:07:16 518,904 ------w C:\WINDOWS\system32\pxdrv.dll - 2007-03-07 23:51:00 72,440 ------w C:\WINDOWS\system32\pxhpinst.exe + 2008-06-11 00:07:16 72,440 ------w C:\WINDOWS\system32\pxhpinst.exe - 2007-03-07 23:51:00 64,760 ------w C:\WINDOWS\system32\pxinsa64.exe + 2008-06-11 00:07:14 64,760 ------w C:\WINDOWS\system32\pxinsa64.exe + 2008-06-11 00:07:16 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe - 2007-03-07 23:51:00 187,128 ------w C:\WINDOWS\system32\pxmas.dll + 2008-06-11 00:07:16 187,128 ------w C:\WINDOWS\system32\pxmas.dll - 2007-03-07 23:51:00 1,628,920 ------w C:\WINDOWS\system32\pxsfs.dll + 2008-06-11 00:07:16 1,628,920 ------w C:\WINDOWS\system32\pxsfs.dll - 2007-03-07 23:51:00 379,640 ------w C:\WINDOWS\system32\pxwave.dll + 2008-06-11 00:07:16 379,640 ------w C:\WINDOWS\system32\pxwave.dll + 2005-05-03 10:43:28 69,632 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\ALCMTR.EXE + 2006-05-04 08:26:36 2,808,832 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\ALCWZRD.EXE + 2004-08-03 21:08:00 60,288 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\i386\drmk.sys + 2004-08-03 21:15:22 140,928 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\i386\ks.sys + 2004-08-03 22:56:44 4,096 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\i386\ksuser.dll + 2004-03-16 08:58:20 136,960 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\i386\portcls.sys + 2004-08-03 21:08:04 48,640 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\i386\stream.sys + 2004-08-03 22:56:58 23,552 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\i386\wdmaud.drv + 2006-06-28 06:00:40 2,158,592 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\MicCal.exe + 2006-07-21 08:18:00 270,336 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\RTCOMDLL.dll + 2006-07-21 08:56:38 16,261,632 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\RTHDCPL.EXE + 2006-07-24 08:15:04 4,353,024 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\RtkHDAud.sys + 2006-07-21 23:40:08 143,360 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\RTLCPAPI.dll + 2006-05-04 08:35:14 9,709,568 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\RTLCPL.EXE + 2006-03-09 09:45:20 364,544 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\RtlUpd.exe + 2006-05-16 10:04:26 2,879,488 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\SkyTel.exe + 2007-04-16 13:28:22 577,536 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\SOUNDMAN.EXE - 2004-08-03 23:14:38 52,736 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]017\DriverFiles\i386\i8042prt.sys + 2004-08-03 21:14:38 52,736 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]017\DriverFiles\i386\i8042prt.sys - 2004-08-03 22:58:34 24,576 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]017\DriverFiles\i386\kbdclass.sys + 2004-08-03 20:58:34 24,576 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]017\DriverFiles\i386\kbdclass.sys + 2007-04-11 13:32:30 20,496 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]017\DriverFiles\L8042Kbd.sys + 2004-08-04 01:05:44 23,040 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]018\DriverFiles\i386\mouclass.sys + 2001-08-23 14:00:00 12,160 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]018\DriverFiles\i386\mouhid.sys + 2004-08-03 21:14:38 52,736 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]019\DriverFiles\i386\i8042prt.sys + 2004-08-03 20:58:34 23,040 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]019\DriverFiles\i386\mouclass.sys + 2006-06-20 08:56:42 225,280 ----a-w C:\WINDOWS\system32\rewire.dll - 2007-12-21 01:00:00 185,688 ----a-w C:\WINDOWS\system32\rmoc3260.dll + 2008-07-30 03:00:00 185,944 ----a-w C:\WINDOWS\system32\rmoc3260.dll - 2006-07-21 08:18:00 270,336 ------r C:\WINDOWS\system32\RTCOM\RTCOMDLL.dll + 2008-06-10 12:39:58 266,240 ----a-w C:\WINDOWS\system32\RTCOM\RTCOMDLL.dll - 2006-07-21 23:40:08 143,360 ----a-w C:\WINDOWS\system32\RTCOM\RTLCPAPI.dll + 2008-03-26 16:50:50 131,072 ----a-w C:\WINDOWS\system32\RTCOM\RtlCPAPI.dll + 2006-12-08 13:20:14 10,528,768 ----a-w C:\WINDOWS\system32\RTLCPL.exe - 2007-03-07 23:51:00 39,672 ------w C:\WINDOWS\system32\vxblock.dll + 2008-06-11 00:07:14 88,824 ------w C:\WINDOWS\system32\vxblock.dll - 2007-05-31 17:29:42 18,280 ----a-w C:\WINDOWS\system32\x3daudio1_2.dll + 2007-10-22 01:37:16 17,928 ----a-w C:\WINDOWS\system32\X3DAudio1_2.dll + 2008-03-05 14:00:06 25,608 ----a-w C:\WINDOWS\system32\X3DAudio1_3.dll + 2007-10-22 01:39:54 267,272 ----a-w C:\WINDOWS\system32\xactengine2_10.dll - 2007-05-31 17:30:22 266,088 ----a-w C:\WINDOWS\system32\xactengine2_8.dll + 2007-06-20 18:46:04 266,088 ----a-w C:\WINDOWS\system32\xactengine2_8.dll + 2007-07-19 22:57:12 267,112 ----a-w C:\WINDOWS\system32\xactengine2_9.dll + 2008-03-05 14:03:20 238,088 ----a-w C:\WINDOWS\system32\xactengine3_0.dll + 2008-03-05 14:03:54 479,752 ----a-w C:\WINDOWS\system32\XAudio2_0.dll + 2008-04-27 08:33:36 765,952 ----a-w C:\WINDOWS\system32\xvidcore.dll + 2008-04-27 08:35:28 180,224 ----a-w C:\WINDOWS\system32\xvidvfw.dll + 2006-12-01 20:56:00 96,256 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll + 2006-12-01 20:54:32 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll + 2006-12-01 20:54:34 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll + 2006-12-01 20:54:32 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll + 2006-12-01 22:25:52 1,101,824 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll + 2006-12-01 22:25:56 1,093,120 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll + 2006-12-01 22:25:58 69,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll + 2006-12-01 22:26:00 57,856 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll + 2006-12-01 22:08:00 40,960 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll + 2006-12-01 22:08:00 45,056 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll + 2006-12-01 22:08:00 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll + 2006-12-01 22:08:00 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll + 2006-12-01 22:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll + 2006-12-01 22:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll + 2006-12-01 22:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll + 2006-12-01 22:08:00 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll + 2006-12-01 22:08:00 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll + 2006-12-01 22:46:44 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll + 2007-11-06 23:19:32 161,784 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll + 2007-11-06 18:23:58 224,768 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll + 2007-11-06 23:19:34 568,832 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll + 2007-11-06 23:19:34 655,872 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll + 2007-11-06 23:19:38 1,156,600 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll + 2007-11-06 23:19:38 1,162,744 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll + 2007-11-06 20:51:08 59,904 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll + 2007-11-06 20:51:08 59,904 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll + 2007-11-06 23:19:16 41,472 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90chs.dll + 2007-11-06 23:19:16 41,984 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90cht.dll + 2007-11-06 23:19:28 60,928 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90deu.dll + 2007-11-06 23:19:22 54,272 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90enu.dll + 2007-11-06 23:19:22 59,392 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esn.dll + 2007-11-06 23:19:22 59,392 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esp.dll + 2007-11-06 23:19:28 60,416 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90fra.dll + 2007-11-06 23:19:28 59,392 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90ita.dll + 2007-11-06 23:19:16 47,104 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90jpn.dll + 2007-11-06 23:19:16 46,592 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90kor.dll + 2007-11-06 23:19:22 54,272 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll . -- Migawka wyzerowana -- . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2008-03-20 2127296] "Steam"="d:\gry\steam\steam.exe" [2008-10-08 1410296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-05-02 13529088] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-05-02 86016] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-05-27 413696] "NeroCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792] "AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2008-04-25 201992] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 C:\WINDOWS\KHALMNPR.Exe] "nwiz"="nwiz.exe" [2008-05-02 C:\WINDOWS\system32\nwiz.exe] "AdslTaskBar"="stmctrl.dll" [2006-06-02 C:\WINDOWS\system32\stmctrl.dll] "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 C:\WINDOWS\KHALMNPR.Exe] "RTHDCPL"="RTHDCPL.EXE" [2008-06-27 C:\WINDOWS\RTHDCPL.exe] "SoundMan"="SOUNDMAN.EXE" [2008-06-18 C:\WINDOWS\SoundMan.exe] "AlcWzrd"="ALCWZRD.EXE" [2008-06-19 C:\WINDOWS\alcwzrd.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.I420"= i263_32.drv [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\kav\\kis7.0\\english\\setup.exe"= "C:\\Program Files\\FreeCall.com\\FreeCall\\FreeCall.exe"= "C:\\WINDOWS\\system32\\PnkBstrA.exe"= "C:\\WINDOWS\\system32\\PnkBstrB.exe"= "C:\\Program Files\\uTorrent\\uTorrent.exe"= "D:\\Gry\\Call Of Duty 4\\iw3mp.exe"= "D:\\Gry\\ Race Driver GRID\\GRID.exe"= R0 klbg;Kaspersky Lab Boot Guard Driver;C:\WINDOWS\system32\drivers\klbg.sys [2008-01-29 32784] R3 Avgfwdx;Avgfwdx;C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2008-07-05 23296] R3 KLFLTDEV;Kaspersky Lab KLFltDev;C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-03-13 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-03-25 24592] R3 Stmatm;ATM/ADSL miniport;C:\WINDOWS\system32\DRIVERS\stmatm.sys [2003-08-12 60255] R3 TaurusUsb;ADSL Modem USB Service;C:\WINDOWS\system32\DRIVERS\torususb.sys [2006-05-25 684265] S2 NMSAccessU;NMSAccessU;C:\Documents and Settings\Pawel\Local Settings\temp\{7F325BEB-52D2-4CF3-A1E4-087E7B089B47}\NMSAccessU.exe [ ] S3 Avgfwfd;AVG network filter service;C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2008-07-05 23296] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ba0b2b42-2da9-11dd-8f85-806d6172696f}] \Shell\AutoRun\command - E:\Run.exe . . ------- Skan uzupełniający ------- . FireFox -: Profile - C:\Documents and Settings\Pawel\Application Data\Mozilla\Firefox\Profiles\rxrgu077.default\ FF -: plugin - C:\Program Files\QuickTime\Plugins\npqtplugin8.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-22 19:41:20 Windows 5.1.2600 Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . Czas ukończenia: 2008-10-22 19:42:52 ComboFix-quarantined-files.txt 2008-10-22 17:42:19 ComboFix2.txt 2008-07-04 21:53:07 Przed: 8 825 929 728 bytes free Po: 9,200,988,160 bytes free WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect 377

**Posty:** 9184 · przez **MUTOPOMPKA** 22 Paź 2008, 19:49

a co do blue screena. Kodzik poproszę lub nazwę tego błędu.

Prawdopodobnie coś z partycją masz nie ten tego i wywala Ci ekranik

Sprawdź chkdsk /r partycję D: i potem powinno być ok.

**Posty:** 7956 · przez **Magik** 22 Paź 2008, 19:56

wklej do notatnika

Kod: Zaznacz wszystko: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

zapisz jako fix.reg i odpal

i poza tym co usunal combo automatycznie nic nie widac. HJT czysty

polec nastepnie j/w