Spoczynkowe zużycie procesora bliskie 100%

**Posty:** 214 · przez **muzzy17** 27 Wrz 2011, 21:06

Problem jak w temacie, komp świeżo po formacie, w procent zużycia procesora w spoczynku wacha sie w granicach 80-100%.
Próbowałem na dwóch zasilaczach o innej mocy i problem ciagle wystepuje. Skanowane było kasperskim i programem od adaware.
Oto logi;

Kod: Zaznacz wszystko: GMER 1.0.15.15641 - http://www.gmer.net Rootkit scan 2011-09-27 21:06:09 Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4 WDC_WD600BB-00CAA1 rev.17.07W17 Running: z9lthl49.exe; Driver: C:\DOCUME~1\Domowy\USTAWI~1\Temp\pxrdqpog.sys ---- Kernel code sections - GMER 1.0.15 ---- .text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xF6BA3380, 0x346307, 0xE8000020] ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\Mozilla Firefox\firefox.exe[512] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\Program Files\Mozilla Firefox\firefox.exe[512] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\Program Files\Mozilla Firefox\firefox.exe[512] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\Program Files\Mozilla Firefox\firefox.exe[512] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\Program Files\Mozilla Firefox\firefox.exe[512] ntdll.dll!LdrLoadDll 7C9163A3 5 Bytes JMP 00401410 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) .text C:\WINDOWS\system32\winlogon.exe[580] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\system32\winlogon.exe[580] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\system32\winlogon.exe[580] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\system32\winlogon.exe[580] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\WINDOWS\system32\services.exe[624] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\system32\services.exe[624] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\system32\services.exe[624] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\system32\services.exe[624] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\WINDOWS\system32\lsass.exe[636] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FF91B38 .text C:\WINDOWS\system32\lsass.exe[636] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FF91B8C .text C:\WINDOWS\system32\lsass.exe[636] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FF91B99 .text C:\WINDOWS\system32\lsass.exe[636] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FF91B85 .text C:\WINDOWS\system32\svchost.exe[792] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\system32\svchost.exe[792] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\system32\svchost.exe[792] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\system32\svchost.exe[792] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\WINDOWS\System32\svchost.exe[904] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\System32\svchost.exe[904] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\System32\svchost.exe[904] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\System32\svchost.exe[904] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\WINDOWS\System32\alg.exe[1100] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\System32\alg.exe[1100] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\System32\alg.exe[1100] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\System32\alg.exe[1100] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\WINDOWS\system32\spoolsv.exe[1352] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\system32\spoolsv.exe[1352] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\system32\spoolsv.exe[1352] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\system32\spoolsv.exe[1352] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .reloc C:\WINDOWS\Explorer.EXE[1404] C:\WINDOWS\Explorer.EXE section is executable [0x010FB000, 0xA800, 0xE2000060] .reloc C:\WINDOWS\Explorer.EXE[1404] C:\WINDOWS\Explorer.EXE entry point in ".reloc" section [0x010FE800] .text C:\WINDOWS\Explorer.EXE[1404] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\Explorer.EXE[1404] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\Explorer.EXE[1404] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\Explorer.EXE[1404] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\WINDOWS\system32\wscntfy.exe[1528] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\system32\wscntfy.exe[1528] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\system32\wscntfy.exe[1528] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\system32\wscntfy.exe[1528] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\WINDOWS\system32\ctfmon.exe[1580] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\system32\ctfmon.exe[1580] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\system32\ctfmon.exe[1580] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\system32\ctfmon.exe[1580] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\WINDOWS\System32\svchost.exe[1772] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\System32\svchost.exe[1772] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\System32\svchost.exe[1772] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\System32\svchost.exe[1772] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\WINDOWS\system32\nvsvc32.exe[1860] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\WINDOWS\system32\nvsvc32.exe[1860] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\WINDOWS\system32\nvsvc32.exe[1860] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\WINDOWS\system32\nvsvc32.exe[1860] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2016] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2016] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2016] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2016] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2016] USER32.dll!SetWindowLongA 7E37C29D 5 Bytes JMP 106AA800 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2016] USER32.dll!SetWindowLongW 7E37C2BB 5 Bytes JMP 106AA792 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2016] USER32.dll!GetWindowInfo 7E37C49C 5 Bytes JMP 104B229C C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2016] USER32.dll!TrackPopupMenu 7E3B531E 5 Bytes JMP 104B2861 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) .text C:\Documents and Settings\Domowy\Pulpit\z9lthl49.exe[2336] ntdll.dll!NtCreateFile 7C90D090 5 Bytes CALL 7FFA1B38 .text C:\Documents and Settings\Domowy\Pulpit\z9lthl49.exe[2336] ntdll.dll!NtCreateProcess 7C90D130 5 Bytes CALL 7FFA1B8C .text C:\Documents and Settings\Domowy\Pulpit\z9lthl49.exe[2336] ntdll.dll!NtCreateProcessEx 7C90D140 5 Bytes CALL 7FFA1B99 .text C:\Documents and Settings\Domowy\Pulpit\z9lthl49.exe[2336] ntdll.dll!NtOpenFile 7C90D580 5 Bytes CALL 7FFA1B85 ---- EOF - GMER 1.0.15 ----

Zaraz OTL.
Prosiłbym bardzo o pomoc.

Dodano 27.09.2011 20:40:03:

Kod: Zaznacz wszystko: OTL logfile created on: 2011-09-27 21:33:59 - Run 1 OTL by OldTimer - Version 3.2.29.1 Folder = C:\Documents and Settings\Domowy\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 767,48 Mb Total Physical Memory | 406,78 Mb Available Physical Memory | 53,00% Memory free 1,83 Gb Paging File | 1,56 Gb Available in Paging File | 85,11% Paging File free Paging file location(s): C:\pagefile.sys 1152 2304 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 9,77 Gb Total Space | 5,03 Gb Free Space | 51,46% Space Free | Partition Type: NTFS Drive D: | 46,12 Gb Total Space | 38,23 Gb Free Space | 82,89% Space Free | Partition Type: NTFS Computer Name: KLAUDIA | User Name: Domowy | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-09-27 20:55:22 | 000,590,336 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Domowy\Pulpit\OTL.exe PRC - [2011-09-03 08:37:45 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2008-04-14 22:51:18 | 001,042,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-09-27 20:18:28 | 000,075,776 | RHS- | M] () -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Temp\dsoqq0.dll MOD - [2011-09-07 10:09:59 | 006,277,280 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MOD - [2011-09-03 08:37:45 | 001,846,232 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2011-08-29 10:00:00 | 003,578,880 | ---- | M] () -- C:\Program Files\K-Lite Codec Pack\ffdshow\ffdshow.ax MOD - [2007-12-05 01:41:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2008-05-02 08:48:55 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112) DRV - [2008-04-14 02:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-04-14 00:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2006-08-18 07:52:00 | 004,017,536 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2004-07-16 08:19:52 | 000,070,400 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp) DRV - [2001-08-18 00:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1482476501-515967899-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://klit.startnow.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.3.0&install_country=PL&install_date=20110920&user_guid=26F46D3E6240496CABFA324F21B3B06E&machine_id=3febfa36d66879aa9149cb790e63f81e&browser=IE&os=win&os_version=5.1-x86-SP3 IE - HKU\S-1-5-21-1482476501-515967899-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = about:blank IE - HKU\S-1-5-21-1482476501-515967899-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.selectedEngine: "Yahoo" FF - prefs.js..browser.startup.homepage: "http://klit.startnow.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.3.0&install_country=PL&install_date=20110920&user_guid=26F46D3E6240496CABFA324F21B3B06E&machine_id=3febfa36d66879aa9149cb790e63f81e&browser=FF&os=win&os_version=5.1-x86-SP3" FF - prefs.js..keyword.URL: "http://klit.startnow.com/s/?src=addrbar&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.3.0&install_country=PL&install_date=20110920&user_guid=26F46D3E6240496CABFA324F21B3B06E&machine_id=3febfa36d66879aa9149cb790e63f81e&browser=FF&os=win&os_version=5.1-x86-SP3&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-09-07 10:05:34 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-09-07 10:05:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Domowy\Dane aplikacji\Mozilla\Extensions [2011-09-27 20:42:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Domowy\Dane aplikacji\Mozilla\Firefox\Profiles\uccigzvu.default\extensions [2011-09-20 23:17:40 | 000,001,390 | ---- | M] () -- C:\Documents and Settings\Domowy\Dane aplikacji\Mozilla\Firefox\Profiles\uccigzvu.default\searchplugins\yahoo-zugo.xml [2011-09-07 10:05:34 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions () (No name found) -- C:\DOCUMENTS AND SETTINGS\DOMOWY\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\UCCIGZVU.DEFAULT\EXTENSIONS\IPLEXTOALL@ALLPLAYER.ORG.XPI [2011-09-03 08:37:46 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-09-03 01:51:04 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-09-03 01:51:04 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-09-03 01:51:04 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-09-03 01:51:04 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-09-03 01:51:04 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-09-03 01:51:04 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2011-09-27 20:18:23 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 NtKrnlpa.info O1 - Hosts: 127.0.0.1 localhost O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKU\S-1-5-21-1482476501-515967899-1177238915-1003..\Run: [dso32] C:\Documents and Settings\Domowy\Ustawienia lokalne\Temp\dsoqq.exe () O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-19..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-20..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1482476501-515967899-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C0BCB1A6-A5CD-4D05-BA66-E0AC8307CCA5}: DhcpNameServer = 194.204.152.34 194.204.159.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-08-29 14:39:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-09-27 21:34:43 | 000,000,053 | RHS- | M] () - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2011-09-27 21:34:43 | 000,000,053 | RHS- | M] () - D:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{7115451a-d248-11e0-a751-806d6172696f}\Shell\AutoRun\command - "" = C:\rxf.exe -- [2010-07-01 16:49:20 | 000,127,488 | RHS- | M] () O33 - MountPoints2\{7115451a-d248-11e0-a751-806d6172696f}\Shell\open\Command - "" = C:\rxf.exe -- [2010-07-01 16:49:20 | 000,127,488 | RHS- | M] () O33 - MountPoints2\{7115451b-d248-11e0-a751-806d6172696f}\Shell\AutoRun\command - "" = D:\rxf.exe -- [2010-07-01 16:49:20 | 000,127,488 | RHS- | M] () O33 - MountPoints2\{7115451b-d248-11e0-a751-806d6172696f}\Shell\open\Command - "" = D:\rxf.exe -- [2010-07-01 16:49:20 | 000,127,488 | RHS- | M] () O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-09-27 20:55:21 | 000,590,336 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Domowy\Pulpit\OTL.exe [2011-09-27 20:51:56 | 000,428,088 | ---- | C] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys [2011-09-27 20:51:37 | 000,592,952 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Domowy\Pulpit\SPTDinst-v179-x86.exe [2011-09-27 20:14:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\HiJackThis [2011-09-27 20:14:26 | 000,000,000 | ---D | C] -- C:\Program Files\hijack [2011-09-27 19:31:54 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent [2011-09-27 19:31:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Dane aplikacji\uTorrent [2011-09-27 19:31:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\uTorrent [2011-09-27 19:30:55 | 000,641,400 | ---- | C] (BitTorrent, Inc.) -- C:\Documents and Settings\Domowy\Pulpit\utorrent.exe [2011-09-27 09:15:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Thinstall [2011-09-27 09:13:14 | 050,287,763 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Domowy\Pulpit\Portable POWERPOINT 2003 PL.exe [2011-09-27 09:02:30 | 063,360,496 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Domowy\Pulpit\PowerPointViewer.exe [2011-09-20 23:55:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\GhostMaster [2011-09-20 23:54:57 | 000,000,000 | ---D | C] -- C:\Program Files\directx [2011-09-20 23:18:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Media Player Classic [2011-09-20 23:17:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\K-Lite Codec Pack [2011-09-20 23:17:14 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2011-09-20 23:17:13 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2011-09-20 23:17:05 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [2011-09-20 23:09:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ALLPlayer [2011-09-19 22:08:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2011-09-19 22:07:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Xvid [2011-09-19 22:07:46 | 000,000,000 | ---D | C] -- C:\Program Files\Xvid [2011-09-19 20:19:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Gadu-Gadu [2011-09-19 20:17:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\Gadu-Gadu [2011-09-19 20:14:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Gadu-Gadu [2011-09-19 20:14:16 | 000,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu [2011-09-07 12:51:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Moje dokumenty\Pobieranie [2011-09-07 10:10:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Macromedia [2011-09-07 10:10:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Adobe [2011-09-07 10:09:59 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2011-09-07 10:05:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Dane aplikacji\Mozilla [2011-09-07 10:05:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Mozilla [2011-09-07 10:05:33 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2011-09-07 07:00:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2011-09-03 20:13:35 | 000,000,000 | ---D | C] -- C:\Program Files\NAPI-PROJEKT [2011-09-03 20:13:34 | 000,000,000 | ---D | C] -- C:\Program Files\ALLPlayer [2011-09-03 19:51:45 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp Detect [2011-09-03 19:51:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\Detektor Winampa [2011-09-03 19:51:35 | 002,095,600 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll [2011-09-03 19:51:35 | 000,698,864 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll [2011-09-03 19:51:35 | 000,571,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll [2011-09-03 19:51:35 | 000,440,816 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll [2011-09-03 19:51:35 | 000,219,632 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll [2011-09-03 19:51:35 | 000,133,616 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll [2011-09-03 19:51:35 | 000,126,448 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsi64.exe [2011-09-03 19:51:35 | 000,123,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpyi64.exe [2011-09-03 19:51:35 | 000,100,848 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll [2011-09-03 19:51:35 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe [2011-09-03 19:51:35 | 000,068,592 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe [2011-09-03 19:51:35 | 000,068,080 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe [2011-09-03 19:51:35 | 000,059,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwma.dll [2011-09-03 19:51:35 | 000,009,200 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys [2011-09-03 19:51:35 | 000,009,072 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys [2011-09-03 19:51:34 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp [2011-09-03 19:51:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Winamp [2011-09-03 19:50:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\WinRAR [2011-09-03 19:50:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\WinRAR [2011-09-03 19:50:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\WinRAR [2011-09-03 19:50:56 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2011-08-29 16:25:18 | 005,773,568 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nv4_disp.dll [2011-08-29 16:25:03 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys [2011-08-29 16:25:03 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll [2011-08-29 16:25:03 | 000,002,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msmpu401.sys [2011-08-29 16:25:02 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax [2011-08-29 16:25:02 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys [2011-08-29 16:25:01 | 000,010,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\gameenum.sys [2011-08-29 16:24:42 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll [2011-08-29 16:24:36 | 000,020,992 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\drivers\RTL8139.sys [2011-08-29 16:24:32 | 000,086,016 | ---- | C] (Conexant) -- C:\WINDOWS\System32\mdmxsdk.dll [2011-08-29 16:24:32 | 000,032,285 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\HSFCISP2.dll [2011-08-29 16:23:42 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moja muzyka [2011-08-29 16:23:21 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer [2011-08-29 16:23:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC [2011-08-29 16:23:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines [2011-08-29 16:23:16 | 000,000,000 | R--D | C] -- C:\Program Files [2011-08-29 16:23:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared [2011-08-29 16:23:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files [2011-08-29 16:23:07 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll [2011-08-29 16:23:07 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll [2011-08-29 16:23:07 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll [2011-08-29 16:23:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll [2011-08-29 16:23:04 | 000,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll [2011-08-29 16:23:04 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll [2011-08-29 16:23:04 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll [2011-08-29 16:23:04 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll [2011-08-29 16:23:04 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll [2011-08-29 16:23:04 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll [2011-08-29 16:23:04 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll [2011-08-29 16:23:02 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll [2011-08-29 16:23:02 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll [2011-08-29 16:23:02 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll [2011-08-29 16:23:02 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll [2011-08-29 16:23:02 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll [2011-08-29 16:22:57 | 000,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll [2011-08-29 16:22:57 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll [2011-08-29 16:22:57 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll [2011-08-29 16:22:57 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll [2011-08-29 16:22:57 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll [2011-08-29 16:22:57 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll [2011-08-29 16:22:57 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll [2011-08-29 16:22:57 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll [2011-08-29 16:22:57 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL [2011-08-29 16:22:57 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll [2011-08-29 16:22:57 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll [2011-08-29 16:22:56 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll [2011-08-29 16:22:56 | 000,085,532 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll [2011-08-29 16:22:56 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll [2011-08-29 16:22:56 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll [2011-08-29 16:22:55 | 000,127,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL [2011-08-29 16:22:55 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll [2011-08-29 16:22:55 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL [2011-08-29 16:22:55 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL [2011-08-29 16:22:55 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL [2011-08-29 16:22:55 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV [2011-08-29 16:22:55 | 000,009,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL [2011-08-29 16:22:55 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL [2011-08-29 16:22:55 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV [2011-08-29 16:22:55 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV [2011-08-29 16:22:55 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV [2011-08-29 16:22:55 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV [2011-08-29 16:22:55 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV [2011-08-29 16:22:54 | 000,109,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL [2011-08-29 16:22:54 | 000,073,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV [2011-08-29 16:22:54 | 000,070,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL [2011-08-29 16:22:54 | 000,033,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL [2011-08-29 16:22:54 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV [2011-08-29 16:22:54 | 000,025,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV [2011-08-29 16:22:54 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE [2011-08-29 16:22:54 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL [2011-08-29 16:22:54 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV [2011-08-29 16:22:54 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK [2011-08-29 16:22:53 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WINSPOOL.DRV [2011-08-29 16:22:53 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll [2011-08-29 16:22:53 | 000,069,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL [2011-08-29 16:22:53 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll [2011-08-29 16:22:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start [2011-08-29 16:22:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty [2011-08-29 16:22:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart [2011-08-29 16:22:44 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Szablony [2011-08-29 16:22:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Ulubione [2011-08-29 16:22:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Pulpit [2011-08-29 16:21:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2 [2011-08-29 16:21:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot [2011-08-29 16:21:09 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft [2011-08-29 16:21:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji [2011-08-29 16:20:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings [2011-08-29 16:20:43 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2011-08-29 16:16:16 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files [2011-08-29 16:16:16 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts [2011-08-29 16:16:16 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web [2011-08-29 16:16:16 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\system [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\security [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl-pl [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Offline Web Pages [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\NLDRV [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\java [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1045 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028 [2011-08-29 16:16:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025 [2011-08-29 15:44:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles [2011-08-29 15:30:36 | 000,303,104 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrstr.dll [2011-08-29 15:30:36 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrstr.dll [2011-08-29 15:30:36 | 000,225,280 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrszhc.dll [2011-08-29 15:30:36 | 000,167,936 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrszht.dll [2011-08-29 15:30:36 | 000,163,840 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrszhc.dll [2011-08-29 15:30:36 | 000,126,976 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrszht.dll [2011-08-29 15:30:35 | 000,319,488 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsptb.dll [2011-08-29 15:30:35 | 000,315,392 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsru.dll [2011-08-29 15:30:35 | 000,303,104 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrssl.dll [2011-08-29 15:30:35 | 000,299,008 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrssk.dll [2011-08-29 15:30:35 | 000,294,912 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrssv.dll [2011-08-29 15:30:35 | 000,270,336 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsru.dll [2011-08-29 15:30:35 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssl.dll [2011-08-29 15:30:35 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssk.dll [2011-08-29 15:30:35 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsth.dll [2011-08-29 15:30:35 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssv.dll [2011-08-29 15:30:34 | 000,323,584 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrspt.dll [2011-08-29 15:30:34 | 000,319,488 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsnl.dll [2011-08-29 15:30:34 | 000,299,008 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsno.dll [2011-08-29 15:30:34 | 000,294,912 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrspl.dll [2011-08-29 15:30:34 | 000,274,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrspt.dll [2011-08-29 15:30:34 | 000,274,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsnl.dll [2011-08-29 15:30:34 | 000,266,240 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsptb.dll [2011-08-29 15:30:34 | 000,266,240 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsja.dll [2011-08-29 15:30:34 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsko.dll [2011-08-29 15:30:34 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrspl.dll [2011-08-29 15:30:34 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsno.dll [2011-08-29 15:30:34 | 000,212,992 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsja.dll [2011-08-29 15:30:34 | 000,196,608 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsko.dll [2011-08-29 15:30:33 | 000,327,680 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsfr.dll [2011-08-29 15:30:33 | 000,327,680 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrshe.dll [2011-08-29 15:30:33 | 000,323,584 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsit.dll [2011-08-29 15:30:33 | 000,315,392 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrshu.dll [2011-08-29 15:30:33 | 000,303,104 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsfi.dll [2011-08-29 15:30:33 | 000,282,624 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsfr.dll [2011-08-29 15:30:33 | 000,278,528 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrshe.dll [2011-08-29 15:30:33 | 000,278,528 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsit.dll [2011-08-29 15:30:33 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrshu.dll [2011-08-29 15:30:33 | 000,249,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsfi.dll [2011-08-29 15:30:32 | 001,073,152 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcpluir.dll [2011-08-29 15:30:32 | 000,761,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcplui.exe [2011-08-29 15:30:32 | 000,413,696 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcpl.cpl [2011-08-29 15:30:32 | 000,364,544 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvudisp.exe [2011-08-29 15:30:32 | 000,335,872 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrses.dll [2011-08-29 15:30:32 | 000,335,872 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsel.dll [2011-08-29 15:30:32 | 000,327,680 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsesm.dll [2011-08-29 15:30:32 | 000,327,680 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsar.dll [2011-08-29 15:30:32 | 000,311,296 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsde.dll [2011-08-29 15:30:32 | 000,307,200 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvexpbar.dll [2011-08-29 15:30:32 | 000,294,912 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsda.dll [2011-08-29 15:30:32 | 000,286,720 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrseng.dll [2011-08-29 15:30:32 | 000,286,720 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrscs.dll [2011-08-29 15:30:32 | 000,282,624 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsar.dll [2011-08-29 15:30:32 | 000,282,624 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrses.dll [2011-08-29 15:30:32 | 000,282,624 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsel.dll [2011-08-29 15:30:32 | 000,278,528 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsde.dll [2011-08-29 15:30:32 | 000,274,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsesm.dll [2011-08-29 15:30:32 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsda.dll [2011-08-29 15:30:32 | 000,249,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrscs.dll [2011-08-29 15:30:32 | 000,245,760 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrseng.dll [2011-08-29 15:30:32 | 000,155,648 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcolor.exe [2011-08-29 15:30:32 | 000,045,056 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmccsrs.dll [2011-08-29 15:28:07 | 000,364,544 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\NVUNINST.EXE [2011-08-29 15:28:00 | 002,519,040 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwssr.dll [2011-08-29 15:28:00 | 002,498,560 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwss.dll [2011-08-29 15:28:00 | 000,081,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwddi.dll [2011-08-29 15:27:58 | 003,715,072 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvvitvsr.dll [2011-08-29 15:27:58 | 003,710,976 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvvitvs.dll [2011-08-29 15:27:57 | 006,901,760 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvoglnt.dll [2011-08-29 15:27:57 | 002,854,912 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmoblsr.dll [2011-08-29 15:27:57 | 001,228,800 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmobls.dll [2011-08-29 15:27:57 | 000,458,752 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmccssr.dll [2011-08-29 15:27:57 | 000,081,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmctray.dll [2011-08-29 15:27:56 | 005,611,520 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispsr.dll [2011-08-29 15:27:56 | 003,420,160 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvgames.dll [2011-08-29 15:27:56 | 003,334,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvgamesr.dll [2011-08-29 15:27:56 | 000,229,376 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmccs.dll [2011-08-29 15:27:56 | 000,188,416 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmccss.dll [2011-08-29 15:27:55 | 008,523,776 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcpl.dll [2011-08-29 15:27:55 | 006,549,504 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdisps.dll [2011-08-29 15:27:55 | 001,089,536 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuda.dll [2011-08-29 15:27:55 | 000,385,024 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvapi.dll [2011-08-29 15:27:55 | 000,035,328 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcodins.dll [2011-08-29 15:27:55 | 000,035,328 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcod.dll [2011-08-29 15:27:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Nvidia Omega Drivers v2.169.21 [2011-08-29 15:27:34 | 000,000,000 | ---D | C] -- C:\Program Files\Nvidia Omega Drivers [2011-08-29 15:18:32 | 000,070,400 | ---- | C] (Realtek Semiconductor Corporation ) -- C:\WINDOWS\System32\drivers\Rtlnicxp.sys [2011-08-29 15:18:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\OPTIONS [2011-08-29 15:17:49 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2011-08-29 15:17:25 | 004,017,536 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\alcxwdm.sys [2011-08-29 15:17:20 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek Sound Manager [2011-08-29 15:17:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Realtek Sound Manager [2011-08-29 15:17:20 | 000,000,000 | ---D | C] -- C:\Program Files\AvRack [2011-08-29 15:17:12 | 010,539,008 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RTLCPL.exe [2011-08-29 15:17:12 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek AC97 [2011-08-29 15:17:10 | 018,804,736 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\alsndmgr.cpl [2011-08-29 15:17:10 | 000,585,728 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe [2011-08-29 15:17:09 | 000,323,584 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\alcupd.exe [2011-08-29 15:17:09 | 000,225,280 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\Alcrmv.exe [2011-08-29 15:17:09 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information [2011-08-29 15:15:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\nvidia icons [2011-08-29 15:15:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview [2011-08-29 15:15:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups [2011-08-29 15:15:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield [2011-08-29 15:14:57 | 000,000,000 | ---D | C] -- C:\NVIDIA [2011-08-29 14:49:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Identities [2011-08-29 14:49:17 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Domowy\Moje dokumenty\Moje obrazy [2011-08-29 14:49:17 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Domowy\Moje dokumenty\Moja muzyka [2011-08-29 14:49:17 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information [2011-08-29 14:49:07 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Dane aplikacji\Microsoft [2011-08-29 14:49:07 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Microsoft [2011-08-29 14:49:07 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Domowy\SendTo [2011-08-29 14:49:07 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Domowy\Recent [2011-08-29 14:49:07 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji [2011-08-29 14:49:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Domowy\Ulubione [2011-08-29 14:49:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Domowy\Moje dokumenty [2011-08-29 14:49:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Domowy\Menu Start [2011-08-29 14:49:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\Autostart [2011-08-29 14:49:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\Akcesoria [2011-08-29 14:49:07 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Domowy\Cookies [2011-08-29 14:49:07 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Domowy\Szablony [2011-08-29 14:49:07 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Domowy\PrintHood [2011-08-29 14:49:07 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Domowy\NetHood [2011-08-29 14:49:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Pulpit [2011-08-29 14:49:06 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Domowy\Ustawienia lokalne [2011-08-29 14:41:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution [2011-08-29 14:41:57 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft [2011-08-29 14:41:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2011-08-29 14:41:56 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2011-08-29 14:41:56 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [2011-08-29 14:41:45 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2011-08-29 14:41:45 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2011-08-29 14:40:10 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieakeng.dll [2011-08-29 14:40:09 | 002,455,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dat [2011-08-29 14:40:09 | 001,036,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll.mui [2011-08-29 14:40:09 | 000,671,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll [2011-08-29 14:40:09 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll [2011-08-29 14:40:09 | 000,384,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedkcs32.dll [2011-08-29 14:40:09 | 000,383,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dll [2011-08-29 14:40:09 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2011-08-29 14:40:09 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieaksie.dll [2011-08-29 14:40:09 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieakui.dll [2011-08-29 14:40:09 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\url.dll [2011-08-29 14:40:09 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\occache.dll [2011-08-29 14:40:09 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pngfilt.dll [2011-08-29 14:40:09 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iernonce.dll [2011-08-29 14:40:09 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieudinit.exe [2011-08-29 14:40:08 | 001,831,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcpl.cpl [2011-08-29 14:40:08 | 001,159,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll [2011-08-29 14:40:08 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll [2011-08-29 14:40:08 | 000,632,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iexplore.exe [2011-08-29 14:40:08 | 000,459,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2011-08-29 14:40:08 | 000,347,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxtmsft.dll [2011-08-29 14:40:08 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\webcheck.dll [2011-08-29 14:40:08 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msrating.dll [2011-08-29 14:40:08 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\extmgr.dll [2011-08-29 14:40:08 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\advpack.dll [2011-08-29 14:40:08 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsproxy.dll [2011-08-29 14:40:07 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxtrans.dll [2011-08-29 14:40:07 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ie4uinit.exe [2011-08-29 14:40:07 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icardie.dll [2011-08-29 14:40:07 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2011-08-29 14:40:06 | 006,066,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2011-08-29 14:39:57 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$ [2011-08-29 14:39:53 | 000,016,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll [2011-08-29 14:39:15 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll [2011-08-29 14:39:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dllcache [2011-08-29 14:38:28 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM [2011-08-29 14:38:06 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate [2011-08-29 14:38:02 | 000,000,000 | ---D | C] -- C:\Program Files\Usługi online [2011-08-29 14:37:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX [2011-08-29 14:37:39 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll [2011-08-29 14:37:28 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll [2011-08-29 14:37:27 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll [2011-08-29 14:37:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services [2011-08-29 14:37:24 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll [2011-08-29 14:37:24 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks [2011-08-29 14:37:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap [2011-08-29 14:37:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst [2011-08-29 14:37:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed [2011-08-29 14:37:18 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll [2011-08-29 14:37:18 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll [2011-08-29 14:37:17 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll [2011-08-29 14:37:17 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe [2011-08-29 14:37:17 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll [2011-08-29 14:37:17 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll [2011-08-29 14:37:17 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll [2011-08-29 14:37:17 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll [2011-08-29 14:37:17 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll [2011-08-29 14:37:13 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker [2011-08-29 14:36:59 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll [2011-08-29 14:36:59 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll [2011-08-29 14:36:59 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll [2011-08-29 14:36:59 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll [2011-08-29 14:36:55 | 000,240,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll [2011-08-29 14:36:55 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltMc.exe [2011-08-29 14:36:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore [2011-08-29 14:36:54 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll [2011-08-29 14:36:54 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll [2011-08-29 14:36:54 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll [2011-08-29 14:36:54 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll [2011-08-29 14:36:54 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll [2011-08-29 14:36:52 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting [2011-08-29 14:36:51 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll [2011-08-29 14:36:51 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll [2011-08-29 14:36:51 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll [2011-08-29 14:36:49 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe [2011-08-29 14:36:49 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express [2011-08-29 14:36:48 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll [2011-08-29 14:36:48 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll [2011-08-29 14:36:48 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll [2011-08-29 14:36:48 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll [2011-08-29 14:36:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System [2011-08-29 14:36:43 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer [2011-08-29 14:36:41 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje obrazy [2011-08-29 14:36:05 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Gry [2011-08-29 14:35:53 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications [2011-08-29 14:35:46 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Narzędzia administracyjne [2011-08-29 14:35:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration [2011-08-29 14:35:25 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2 [2011-08-29 14:35:24 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player [2011-08-29 14:35:22 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger [2011-08-29 14:35:20 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe [2011-08-29 14:35:20 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone [2011-08-29 14:35:12 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll [2011-08-29 14:35:12 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe [2011-08-29 14:35:12 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll [2011-08-29 14:35:12 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll [2011-08-29 14:35:12 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll [2011-08-29 14:35:11 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe [2011-08-29 14:35:06 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll [2011-08-29 14:35:06 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe [2011-08-29 14:35:06 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe [2011-08-29 14:35:06 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe [2011-08-29 14:35:06 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe [2011-08-29 14:35:05 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe [2011-08-29 14:35:05 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe [2011-08-29 14:35:05 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe [2011-08-29 14:35:05 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe [2011-08-29 14:35:05 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe [2011-08-29 14:35:05 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe [2011-08-29 14:35:05 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe [2011-08-29 14:35:05 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe [2011-08-29 14:35:05 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe [2011-08-29 14:35:05 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe [2011-08-29 14:35:05 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe [2011-08-29 14:35:05 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe [2011-08-29 14:35:05 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll [2011-08-29 14:35:04 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe [2011-08-29 14:35:04 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe [2011-08-29 14:35:04 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll [2011-08-29 14:34:59 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe [2011-08-29 14:34:59 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe [2011-08-29 14:34:59 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe [2011-08-29 14:34:59 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl [2011-08-29 14:34:58 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe [2011-08-29 14:34:58 | 000,351,744 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll [2011-08-29 14:34:58 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe [2011-08-29 14:34:58 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT [2011-08-29 14:34:57 | 000,545,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe [2011-08-29 14:34:57 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll [2011-08-29 14:34:57 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll [2011-08-29 14:34:57 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll [2011-08-29 14:34:56 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll [2011-08-29 14:34:56 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe [2011-08-29 14:34:56 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe [2011-08-29 14:34:55 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll [2011-08-29 14:34:55 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll [2011-08-29 14:34:55 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll [2011-08-29 14:34:55 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe [2011-08-29 14:34:55 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll [2011-08-29 14:34:55 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe [2011-08-29 14:34:55 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll [2011-08-29 14:34:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc [2011-08-29 14:34:54 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll [2011-08-29 14:34:54 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll [2011-08-29 14:34:54 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll [2011-08-29 14:34:54 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll [2011-08-29 14:34:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll [2011-08-29 14:34:53 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll [2011-08-29 14:34:53 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll [2011-08-29 14:34:53 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll [2011-08-29 14:34:53 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll [2011-08-29 14:34:53 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll [2011-08-29 14:34:53 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll [2011-08-29 14:34:53 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe [2011-08-29 14:34:53 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll [2011-08-29 14:34:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com [2011-08-29 14:34:52 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll [2011-08-29 14:34:52 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll [2011-08-29 14:34:47 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll [2011-08-29 14:34:47 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll [2011-08-29 14:34:46 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll [2011-08-29 14:34:46 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll [2011-08-29 14:34:40 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo [2011-08-29 14:32:52 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Akcesoria [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-09-27 21:35:58 | 000,000,053 | RHS- | M] () -- C:\autorun.inf [2011-09-27 21:33:21 | 000,014,336 | ---- | M] () -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-09-27 20:55:22 | 000,590,336 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Domowy\Pulpit\OTL.exe [2011-09-27 20:54:16 | 000,312,832 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\z9lthl49.exe [2011-09-27 20:51:37 | 000,592,952 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Domowy\Pulpit\SPTDinst-v179-x86.exe [2011-09-27 20:36:29 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2011-09-27 20:18:23 | 000,000,742 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2011-09-27 20:18:22 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-09-27 20:18:17 | 804,835,328 | -HS- | M] () -- C:\hiberfil.sys [2011-09-27 20:16:20 | 000,002,531 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\HiJackThis.lnk [2011-09-27 20:13:53 | 001,402,880 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\HijackThis.msi [2011-09-27 19:31:54 | 000,000,630 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\µTorrent.lnk [2011-09-27 19:31:07 | 000,641,400 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Domowy\Pulpit\utorrent.exe [2011-09-27 09:32:52 | 000,027,331 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\300px-Leaf_1_web.jpg [2011-09-27 09:32:22 | 000,008,369 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Drosera_rotundifolia_leaf1.jpg [2011-09-27 09:32:14 | 000,005,988 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Robinia_spines_kz.jpg [2011-09-27 09:32:12 | 000,008,120 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Bryophyllum_daigremontianum_nahaufnahme1.jpg [2011-09-27 09:32:02 | 000,013,673 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Lightmatter_cactus.jpg [2011-09-27 09:30:54 | 000,038,304 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\300px-Leavessnipedale.jpg [2011-09-27 09:14:22 | 050,287,763 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Domowy\Pulpit\Portable POWERPOINT 2003 PL.exe [2011-09-27 09:04:00 | 063,360,496 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Domowy\Pulpit\PowerPointViewer.exe [2011-09-27 08:04:51 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-09-21 00:11:59 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\Napi-projekt.lnk [2011-09-21 00:11:59 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\ALLPlayer V4.7.lnk [2011-09-20 23:55:42 | 000,000,436 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom grę GhostMaster.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Video.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Pictures.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Passwords.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\New Folder.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Music.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Documents.lnk [2011-09-20 23:38:00 | 000,000,136 | RHS- | M] () -- C:\Documents and Settings\Domowy\autorun.inf [2011-09-07 10:09:59 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2011-09-07 10:05:35 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2011-09-03 19:52:12 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Winamp.lnk [2011-08-30 19:59:53 | 000,065,536 | RHS- | M] () -- C:\Documents and Settings\Domowy\diefioj.scr [2011-08-30 19:59:53 | 000,065,536 | RHS- | M] () -- C:\Documents and Settings\Domowy\diefioj.exe [2011-08-29 16:31:07 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF [2011-08-29 15:43:41 | 000,004,299 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2011-08-29 15:27:34 | 000,481,792 | ---- | M] () -- C:\WINDOWS\Nvidia Omega Drivers v2.169.21 Uninstall.exe [2011-08-29 14:48:34 | 000,355,486 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-08-29 14:48:34 | 000,311,604 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-08-29 14:48:34 | 000,049,492 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-08-29 14:48:34 | 000,039,992 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011-08-29 14:41:49 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD [2011-08-29 14:41:36 | 000,093,480 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-08-29 14:40:46 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf [2011-08-29 14:39:35 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2011-08-29 14:39:35 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2011-08-29 14:39:35 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2011-08-29 14:39:35 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2011-08-29 14:39:35 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2011-08-29 14:39:27 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2011-08-29 14:39:27 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2011-08-29 14:39:26 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2011-08-29 14:39:16 | 000,004,293 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI [2011-08-29 14:36:03 | 000,021,856 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat [2011-08-29 10:00:00 | 000,074,752 | ---- | M] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-08-29 10:00:00 | 000,000,038 | ---- | M] () -- C:\WINDOWS\avisplitter.ini [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-09-27 20:54:16 | 000,312,832 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\z9lthl49.exe [2011-09-27 20:14:27 | 000,002,531 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\HiJackThis.lnk [2011-09-27 20:13:50 | 001,402,880 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\HijackThis.msi [2011-09-27 19:31:54 | 000,000,630 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\µTorrent.lnk [2011-09-27 09:32:49 | 000,027,331 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\300px-Leaf_1_web.jpg [2011-09-27 09:32:18 | 000,008,369 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Drosera_rotundifolia_leaf1.jpg [2011-09-27 09:32:14 | 000,005,988 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Robinia_spines_kz.jpg [2011-09-27 09:32:09 | 000,008,120 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Bryophyllum_daigremontianum_nahaufnahme1.jpg [2011-09-27 09:31:58 | 000,013,673 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Lightmatter_cactus.jpg [2011-09-27 09:30:53 | 000,038,304 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\300px-Leavessnipedale.jpg [2011-09-21 07:45:46 | 000,127,488 | RHS- | C] () -- C:\rxf.exe [2011-09-21 07:45:46 | 000,000,053 | RHS- | C] () -- C:\autorun.inf [2011-09-20 23:55:42 | 000,000,436 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom grę GhostMaster.lnk [2011-09-20 23:40:21 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\vorbisfile.dll [2011-09-20 23:40:17 | 000,974,848 | R--- | C] () -- C:\WINDOWS\System32\vorbis.dll [2011-09-20 23:40:17 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ogg.dll [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Video.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Pictures.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Passwords.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\New Folder.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Music.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Documents.lnk [2011-09-20 23:38:00 | 000,000,136 | RHS- | C] () -- C:\Documents and Settings\Domowy\autorun.inf [2011-09-20 23:17:21 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-09-20 23:17:16 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-09-20 23:17:14 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml [2011-09-20 23:17:12 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-09-20 23:09:44 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\Napi-projekt.lnk [2011-09-20 23:09:44 | 000,000,694 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\ALLPlayer V4.7.lnk [2011-09-20 23:09:21 | 000,797,184 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.ax [2011-09-20 23:09:21 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2011-09-20 23:06:03 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-09-20 23:06:03 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-09-20 23:06:02 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\xvid.ax [2011-09-07 10:05:35 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk [2011-09-07 10:05:35 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2011-09-03 19:52:12 | 000,000,654 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Winamp.lnk [2011-08-30 20:29:49 | 000,014,336 | ---- | C] () -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-08-30 19:59:53 | 000,065,536 | RHS- | C] () -- C:\Documents and Settings\Domowy\diefioj.scr [2011-08-30 19:59:53 | 000,065,536 | RHS- | C] () -- C:\Documents and Settings\Domowy\diefioj.exe [2011-08-29 16:31:07 | 000,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF [2011-08-29 16:24:31 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfS2.cty [2011-08-29 16:23:20 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-08-29 16:22:54 | 000,001,734 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT [2011-08-29 16:20:43 | 000,093,480 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-08-29 16:19:58 | 000,000,211 | -HS- | C] () -- C:\boot.ini [2011-08-29 16:19:54 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf [2011-08-29 15:44:36 | 804,835,328 | -HS- | C] () -- C:\hiberfil.sys [2011-08-29 15:43:31 | 000,159,458 | ---- | C] () -- C:\WINDOWS\System32\nvapps.nvb [2011-08-29 15:30:36 | 000,004,299 | ---- | C] () -- C:\WINDOWS\System32\nvapps.xml [2011-08-29 15:30:32 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2011-08-29 15:30:32 | 001,634,304 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe [2011-08-29 15:30:32 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2011-08-29 15:30:32 | 001,347,584 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe [2011-08-29 15:30:32 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2011-08-29 15:30:32 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2011-08-29 15:30:32 | 000,450,560 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe [2011-08-29 15:30:32 | 000,434,176 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe [2011-08-29 15:30:32 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\nvtuicpl.cpl [2011-08-29 15:30:32 | 000,017,737 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu [2011-08-29 15:27:57 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2011-08-29 15:27:34 | 000,481,792 | ---- | C] () -- C:\WINDOWS\Nvidia Omega Drivers v2.169.21 Uninstall.exe [2011-08-29 15:17:39 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2011-08-29 15:17:20 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2011-08-29 15:17:12 | 000,141,016 | ---- | C] () -- C:\WINDOWS\System32\alsndmgr.wav [2011-08-29 15:17:10 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2011-08-29 15:15:39 | 000,220,312 | ---- | C] () -- C:\WINDOWS\System32\nvdsptha.chm [2011-08-29 15:15:39 | 000,219,669 | ---- | C] () -- C:\WINDOWS\System32\nvdspchs.chm [2011-08-29 15:15:39 | 000,217,076 | ---- | C] () -- C:\WINDOWS\System32\nvdspsky.chm [2011-08-29 15:15:39 | 000,213,493 | ---- | C] () -- C:\WINDOWS\System32\nvdspcht.chm [2011-08-29 15:15:39 | 000,210,720 | ---- | C] () -- C:\WINDOWS\System32\nvdsptrk.chm [2011-08-29 15:15:39 | 000,206,105 | ---- | C] () -- C:\WINDOWS\System32\nvdspslv.chm [2011-08-29 15:15:39 | 000,195,910 | ---- | C] () -- C:\WINDOWS\System32\nvdspsve.chm [2011-08-29 15:15:39 | 000,139,792 | ---- | C] () -- C:\WINDOWS\System32\nv3dcht.chm [2011-08-29 15:15:39 | 000,137,045 | ---- | C] () -- C:\WINDOWS\System32\nv3dtha.chm [2011-08-29 15:15:39 | 000,134,133 | ---- | C] () -- C:\WINDOWS\System32\nv3dchs.chm [2011-08-29 15:15:39 | 000,133,761 | ---- | C] () -- C:\WINDOWS\System32\nv3dtrk.chm [2011-08-29 15:15:39 | 000,129,499 | ---- | C] () -- C:\WINDOWS\System32\nv3dsky.chm [2011-08-29 15:15:39 | 000,128,913 | ---- | C] () -- C:\WINDOWS\System32\nv3dslv.chm [2011-08-29 15:15:39 | 000,128,148 | ---- | C] () -- C:\WINDOWS\System32\nvcpltha.chm [2011-08-29 15:15:39 | 000,126,892 | ---- | C] () -- C:\WINDOWS\System32\nvcpltrk.chm [2011-08-29 15:15:39 | 000,126,105 | ---- | C] () -- C:\WINDOWS\System32\nvcplsky.chm [2011-08-29 15:15:39 | 000,124,964 | ---- | C] () -- C:\WINDOWS\System32\nvcplslv.chm [2011-08-29 15:15:39 | 000,124,817 | ---- | C] () -- C:\WINDOWS\System32\nvcplcht.chm [2011-08-29 15:15:39 | 000,124,229 | ---- | C] () -- C:\WINDOWS\System32\nvcplchs.chm [2011-08-29 15:15:39 | 000,122,675 | ---- | C] () -- C:\WINDOWS\System32\nvcplsve.chm [2011-08-29 15:15:39 | 000,118,734 | ---- | C] () -- C:\WINDOWS\System32\nv3dsve.chm [2011-08-29 15:15:39 | 000,059,261 | ---- | C] () -- C:\WINDOWS\System32\nvmobcht.chm [2011-08-29 15:15:39 | 000,059,225 | ---- | C] () -- C:\WINDOWS\System32\nvmobtha.chm [2011-08-29 15:15:39 | 000,058,607 | ---- | C] () -- C:\WINDOWS\System32\nvmobchs.chm [2011-08-29 15:15:39 | 000,057,545 | ---- | C] () -- C:\WINDOWS\System32\nvmobsky.chm [2011-08-29 15:15:39 | 000,057,450 | ---- | C] () -- C:\WINDOWS\System32\nvmobtrk.chm [2011-08-29 15:15:39 | 000,057,380 | ---- | C] () -- C:\WINDOWS\System32\nvmobslv.chm [2011-08-29 15:15:39 | 000,055,693 | ---- | C] () -- C:\WINDOWS\System32\nvmobsve.chm [2011-08-29 15:15:38 | 000,251,599 | ---- | C] () -- C:\WINDOWS\System32\nvdspjpn.chm [2011-08-29 15:15:38 | 000,224,281 | ---- | C] () -- C:\WINDOWS\System32\nvdspkor.chm [2011-08-29 15:15:38 | 000,214,210 | ---- | C] () -- C:\WINDOWS\System32\nvdsprus.chm [2011-08-29 15:15:38 | 000,205,816 | ---- | C] () -- C:\WINDOWS\System32\nvdspplk.chm [2011-08-29 15:15:38 | 000,194,380 | ---- | C] () -- C:\WINDOWS\System32\nvdspptg.chm [2011-08-29 15:15:38 | 000,189,364 | ---- | C] () -- C:\WINDOWS\System32\nvdspnld.chm [2011-08-29 15:15:38 | 000,189,104 | ---- | C] () -- C:\WINDOWS\System32\nvdspptb.chm [2011-08-29 15:15:38 | 000,189,041 | ---- | C] () -- C:\WINDOWS\System32\nvdspnor.chm [2011-08-29 15:15:38 | 000,144,421 | ---- | C] () -- C:\WINDOWS\System32\nv3djpn.chm [2011-08-29 15:15:38 | 000,132,251 | ---- | C] () -- C:\WINDOWS\System32\nv3dkor.chm [2011-08-29 15:15:38 | 000,130,245 | ---- | C] () -- C:\WINDOWS\System32\nv3dplk.chm [2011-08-29 15:15:38 | 000,129,704 | ---- | C] () -- C:\WINDOWS\System32\nvcpljpn.chm [2011-08-29 15:15:38 | 000,129,550 | ---- | C] () -- C:\WINDOWS\System32\nv3dptg.chm [2011-08-29 15:15:38 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\nv3drus.chm [2011-08-29 15:15:38 | 000,125,181 | ---- | C] () -- C:\WINDOWS\System32\nvcplrus.chm [2011-08-29 15:15:38 | 000,124,741 | ---- | C] () -- C:\WINDOWS\System32\nvcplkor.chm [2011-08-29 15:15:38 | 000,124,078 | ---- | C] () -- C:\WINDOWS\System32\nvcplptb.chm [2011-08-29 15:15:38 | 000,124,044 | ---- | C] () -- C:\WINDOWS\System32\nvcplptg.chm [2011-08-29 15:15:38 | 000,124,019 | ---- | C] () -- C:\WINDOWS\System32\nvcplplk.chm [2011-08-29 15:15:38 | 000,122,809 | ---- | C] () -- C:\WINDOWS\System32\nvcplnld.chm [2011-08-29 15:15:38 | 000,120,026 | ---- | C] () -- C:\WINDOWS\System32\nvcplnor.chm [2011-08-29 15:15:38 | 000,119,706 | ---- | C] () -- C:\WINDOWS\System32\nv3dnor.chm [2011-08-29 15:15:38 | 000,118,410 | ---- | C] () -- C:\WINDOWS\System32\nv3dptb.chm [2011-08-29 15:15:38 | 000,118,401 | ---- | C] () -- C:\WINDOWS\System32\nv3dnld.chm [2011-08-29 15:15:38 | 000,060,357 | ---- | C] () -- C:\WINDOWS\System32\nvmobjpn.chm [2011-08-29 15:15:38 | 000,059,061 | ---- | C] () -- C:\WINDOWS\System32\nvmobkor.chm [2011-08-29 15:15:38 | 000,057,376 | ---- | C] () -- C:\WINDOWS\System32\nvmobplk.chm [2011-08-29 15:15:38 | 000,057,339 | ---- | C] () -- C:\WINDOWS\System32\nvmobrus.chm [2011-08-29 15:15:38 | 000,055,946 | ---- | C] () -- C:\WINDOWS\System32\nvmobptb.chm [2011-08-29 15:15:38 | 000,055,845 | ---- | C] () -- C:\WINDOWS\System32\nvmobptg.chm [2011-08-29 15:15:38 | 000,055,525 | ---- | C] () -- C:\WINDOWS\System32\nvmobnor.chm [2011-08-29 15:15:38 | 000,055,475 | ---- | C] () -- C:\WINDOWS\System32\nvmobnld.chm [2011-08-29 15:15:37 | 000,207,116 | ---- | C] () -- C:\WINDOWS\System32\nvdspheb.chm [2011-08-29 15:15:37 | 000,203,902 | ---- | C] () -- C:\WINDOWS\System32\nvdsphun.chm [2011-08-29 15:15:37 | 000,201,378 | ---- | C] () -- C:\WINDOWS\System32\nvdspita.chm [2011-08-29 15:15:37 | 000,197,555 | ---- | C] () -- C:\WINDOWS\System32\nvdspesm.chm [2011-08-29 15:15:37 | 000,195,677 | ---- | C] () -- C:\WINDOWS\System32\nvdspfin.chm [2011-08-29 15:15:37 | 000,189,184 | ---- | C] () -- C:\WINDOWS\System32\nvdspfra.chm [2011-08-29 15:15:37 | 000,132,088 | ---- | C] () -- C:\WINDOWS\System32\nv3dheb.chm [2011-08-29 15:15:37 | 000,131,070 | ---- | C] () -- C:\WINDOWS\System32\nv3dhun.chm [2011-08-29 15:15:37 | 000,126,196 | ---- | C] () -- C:\WINDOWS\System32\nvcplheb.chm [2011-08-29 15:15:37 | 000,125,552 | ---- | C] () -- C:\WINDOWS\System32\nvcplhun.chm [2011-08-29 15:15:37 | 000,124,544 | ---- | C] () -- C:\WINDOWS\System32\nvcplfin.chm [2011-08-29 15:15:37 | 000,124,278 | ---- | C] () -- C:\WINDOWS\System32\nv3dfin.chm [2011-08-29 15:15:37 | 000,124,148 | ---- | C] () -- C:\WINDOWS\System32\nvcplita.chm [2011-08-29 15:15:37 | 000,124,138 | ---- | C] () -- C:\WINDOWS\System32\nvcplesm.chm [2011-08-29 15:15:37 | 000,122,227 | ---- | C] () -- C:\WINDOWS\System32\nvcplfra.chm [2011-08-29 15:15:37 | 000,121,053 | ---- | C] () -- C:\WINDOWS\System32\nv3dita.chm [2011-08-29 15:15:37 | 000,119,315 | ---- | C] () -- C:\WINDOWS\System32\nv3dfra.chm [2011-08-29 15:15:37 | 000,118,608 | ---- | C] () -- C:\WINDOWS\System32\nv3desm.chm [2011-08-29 15:15:37 | 000,058,340 | ---- | C] () -- C:\WINDOWS\System32\nvmobheb.chm [2011-08-29 15:15:37 | 000,057,512 | ---- | C] () -- C:\WINDOWS\System32\nvmobhun.chm [2011-08-29 15:15:37 | 000,056,934 | ---- | C] () -- C:\WINDOWS\System32\nvmobfin.chm [2011-08-29 15:15:37 | 000,056,175 | ---- | C] () -- C:\WINDOWS\System32\nvmobita.chm [2011-08-29 15:15:37 | 000,056,087 | ---- | C] () -- C:\WINDOWS\System32\nvmobfra.chm [2011-08-29 15:15:37 | 000,055,992 | ---- | C] () -- C:\WINDOWS\System32\nvmobesm.chm [2011-08-29 15:15:36 | 000,220,768 | ---- | C] () -- C:\WINDOWS\System32\nvdspell.chm [2011-08-29 15:15:36 | 000,196,421 | ---- | C] () -- C:\WINDOWS\System32\nvdspesn.chm [2011-08-29 15:15:36 | 000,182,024 | ---- | C] () -- C:\WINDOWS\System32\nvdspeng.chm [2011-08-29 15:15:36 | 000,131,422 | ---- | C] () -- C:\WINDOWS\System32\nv3dell.chm [2011-08-29 15:15:36 | 000,126,670 | ---- | C] () -- C:\WINDOWS\System32\nvcplell.chm [2011-08-29 15:15:36 | 000,124,084 | ---- | C] () -- C:\WINDOWS\System32\nvcplesn.chm [2011-08-29 15:15:36 | 000,121,758 | ---- | C] () -- C:\WINDOWS\System32\nvcpleng.chm [2011-08-29 15:15:36 | 000,117,909 | ---- | C] () -- C:\WINDOWS\System32\nv3desn.chm [2011-08-29 15:15:36 | 000,117,083 | ---- | C] () -- C:\WINDOWS\System32\nv3deng.chm [2011-08-29 15:15:36 | 000,059,100 | ---- | C] () -- C:\WINDOWS\System32\nvmobell.chm [2011-08-29 15:15:36 | 000,055,669 | ---- | C] () -- C:\WINDOWS\System32\nvmobesn.chm [2011-08-29 15:15:36 | 000,055,103 | ---- | C] () -- C:\WINDOWS\System32\nvmobeng.chm [2011-08-29 15:15:35 | 000,219,156 | ---- | C] () -- C:\WINDOWS\System32\nvdspcsy.chm [2011-08-29 15:15:35 | 000,200,405 | ---- | C] () -- C:\WINDOWS\System32\nvdspara.chm [2011-08-29 15:15:35 | 000,197,544 | ---- | C] () -- C:\WINDOWS\System32\nvdspdeu.chm [2011-08-29 15:15:35 | 000,188,707 | ---- | C] () -- C:\WINDOWS\System32\nvdspdan.chm [2011-08-29 15:15:35 | 000,181,895 | ---- | C] () -- C:\WINDOWS\System32\nvdsp.chm [2011-08-29 15:15:35 | 000,128,958 | ---- | C] () -- C:\WINDOWS\System32\nv3dcsy.chm [2011-08-29 15:15:35 | 000,128,544 | ---- | C] () -- C:\WINDOWS\System32\nv3dara.chm [2011-08-29 15:15:35 | 000,125,735 | ---- | C] () -- C:\WINDOWS\System32\nvcplara.chm [2011-08-29 15:15:35 | 000,124,590 | ---- | C] () -- C:\WINDOWS\System32\nvcpldeu.chm [2011-08-29 15:15:35 | 000,124,067 | ---- | C] () -- C:\WINDOWS\System32\nvcplcsy.chm [2011-08-29 15:15:35 | 000,123,526 | ---- | C] () -- C:\WINDOWS\System32\nv3ddeu.chm [2011-08-29 15:15:35 | 000,121,529 | ---- | C] () -- C:\WINDOWS\System32\nvcpl.chm [2011-08-29 15:15:35 | 000,120,933 | ---- | C] () -- C:\WINDOWS\System32\nvcpldan.chm [2011-08-29 15:15:35 | 000,118,926 | ---- | C] () -- C:\WINDOWS\System32\nv3ddan.chm [2011-08-29 15:15:35 | 000,116,384 | ---- | C] () -- C:\WINDOWS\System32\nv3d.chm [2011-08-29 15:15:35 | 000,057,387 | ---- | C] () -- C:\WINDOWS\System32\nvmobcsy.chm [2011-08-29 15:15:35 | 000,057,328 | ---- | C] () -- C:\WINDOWS\System32\nvmobara.chm [2011-08-29 15:15:35 | 000,056,087 | ---- | C] () -- C:\WINDOWS\System32\nvmobdeu.chm [2011-08-29 15:15:35 | 000,055,622 | ---- | C] () -- C:\WINDOWS\System32\nvmobdan.chm [2011-08-29 15:15:35 | 000,054,988 | ---- | C] () -- C:\WINDOWS\System32\nvmob.chm [2011-08-29 14:49:32 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\Domowy\Menu Start\Programy\Internet Explorer.lnk [2011-08-29 14:49:23 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\Domowy\Menu Start\Programy\Outlook Express.lnk [2011-08-29 14:49:07 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\Domowy\Menu Start\Programy\Pomoc zdalna.lnk [2011-08-29 14:49:07 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\Domowy\Menu Start\Programy\Windows Media Player.lnk [2011-08-29 14:41:49 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2011-08-29 14:40:46 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-08-29 14:39:45 | 000,050,105 | ---- | C] () -- C:\WINDOWS\activ.exe [2011-08-29 14:39:35 | 000,002,596 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT [2011-08-29 14:39:35 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2011-08-29 14:39:35 | 000,000,000 | RHS- | C] () -- C:\IO.SYS [2011-08-29 14:39:35 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS [2011-08-29 14:39:35 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT [2011-08-29 14:39:27 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb [2011-08-29 14:39:27 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb [2011-08-29 14:39:25 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx [2011-08-29 14:38:05 | 000,000,786 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Windows Movie Maker.lnk [2011-08-29 14:37:37 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp [2011-08-29 14:37:37 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp [2011-08-29 14:36:05 | 000,000,643 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Windows Messenger.lnk [2011-08-29 14:36:03 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2011-08-29 14:35:08 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Pod mikroskopem.bmp [2011-08-29 14:35:08 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Stiuk z Santa Fe.bmp [2011-08-29 14:35:08 | 000,026,680 | ---- | C] () -- C:\WINDOWS\Wachlarze.bmp [2011-08-29 14:35:08 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rododendron.bmp [2011-08-29 14:35:08 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Indiański pled.bmp [2011-08-29 14:35:07 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Bąbelki.bmp [2011-08-29 14:35:07 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Nefryt.bmp [2011-08-29 14:35:07 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Na rybkach.bmp [2011-08-29 14:35:07 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Kawa.bmp [2011-08-29 14:35:07 | 000,016,730 | ---- | C] () -- C:\WINDOWS\Puch.bmp [2011-08-29 14:35:07 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Niebieska koronka 16.bmp [2011-08-29 14:35:05 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h [2011-08-29 14:35:05 | 000,001,225 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd [2011-08-29 14:35:04 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h [2011-08-29 14:35:00 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc [2008-05-03 09:24:01 | 000,000,082 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2008-04-14 23:16:20 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2006-12-31 08:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2001-10-26 18:15:16 | 000,355,486 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2001-10-26 18:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2001-10-26 18:15:16 | 000,049,492 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2001-10-26 18:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2001-08-23 15:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001-08-23 15:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001-08-17 23:30:24 | 000,311,604 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001-08-17 23:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001-08-17 23:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001-08-17 23:30:22 | 000,039,992 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001-08-17 23:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001-07-22 00:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001-07-22 00:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001-07-22 00:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2011-09-19 20:19:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Domowy\Dane aplikacji\Gadu-Gadu [2011-09-27 09:15:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Domowy\Dane aplikacji\Thinstall [2011-09-27 20:41:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Domowy\Dane aplikacji\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-09-27 21:33:59 - Run 1 OTL by OldTimer - Version 3.2.29.1 Folder = C:\Documents and Settings\Domowy\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 767,48 Mb Total Physical Memory | 406,78 Mb Available Physical Memory | 53,00% Memory free 1,83 Gb Paging File | 1,56 Gb Available in Paging File | 85,11% Paging File free Paging file location(s): C:\pagefile.sys 1152 2304 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 9,77 Gb Total Space | 5,03 Gb Free Space | 51,46% Space Free | Partition Type: NTFS Drive D: | 46,12 Gb Total Space | 38,23 Gb Free Space | 82,89% Space Free | Partition Type: NTFS Computer Name: KLAUDIA | User Name: Domowy | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l [HKEY_USERS\S-1-5-21-1482476501-515967899-1177238915-1003\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Winamp\winamp.exe" = C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp -- (Nullsoft, Inc.) "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{2A42871B-A6C5-44EA-BBE0-4E701F610BB4}" = GhostMaster "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis "{94FB906A-CF42-4128-A509-D353026A607E}" = REALTEK Gigabit and Fast Ethernet NIC Driver "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "ALLPlayer_is1" = ALLPlayer V4.X "Gadu-Gadu" = Gadu-Gadu 7.7 "KLiteCodecPack_is1" = K-Lite Codec Pack 7.7.0 (Full) "Mozilla Firefox 6.0.2 (x86 pl)" = Mozilla Firefox 6.0.2 (x86 pl) "NVIDIA Drivers" = NVIDIA Drivers "Nvidia Omega Drivers for Windows XP/2kv2.169.21" = Nvidia Omega Drivers v2.169.21 Setup Files "uTorrent" = µTorrent "Winamp" = Winamp "WinRAR archiver" = WinRAR 4.01 (32-bitowy) "Xvid Video Codec 1.3.2" = Xvid Video Codec [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1482476501-515967899-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ System Events ] Error - 2011-09-27 14:23:31 | Computer Name = KLAUDIA | Source = SideBySide | ID = 16842784 Description = Nie można odnaleźć zestawu zależnego Microsoft.VC90.CRT; ostatni błąd: Odnośny zestaw nie jest zainstalowany w tym systemie. Error - 2011-09-27 14:23:31 | Computer Name = KLAUDIA | Source = SideBySide | ID = 16842811 Description = Resolve Partial Assembly nie powiodło się dla Microsoft.VC90.CRT. Odpowiedni komunikat o błędzie: Odnośny zestaw nie jest zainstalowany w tym systemie. . Error - 2011-09-27 14:23:31 | Computer Name = KLAUDIA | Source = SideBySide | ID = 16842811 Description = Generate Activation Context nie powiodło się dla C:\Program Files\Winamp\System\aacdec.w5s. Odpowiedni komunikat o błędzie: Operacja ukończona pomyślnie. . Error - 2011-09-27 14:38:05 | Computer Name = KLAUDIA | Source = Service Control Manager | ID = 7034 Description = Usługa Updater Service for StartNow Toolbar niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2011-09-27 14:40:39 | Computer Name = KLAUDIA | Source = SideBySide | ID = 16842784 Description = Nie można odnaleźć zestawu zależnego Microsoft.VC90.CRT; ostatni błąd: Odnośny zestaw nie jest zainstalowany w tym systemie. Error - 2011-09-27 14:40:39 | Computer Name = KLAUDIA | Source = SideBySide | ID = 16842811 Description = Resolve Partial Assembly nie powiodło się dla Microsoft.VC90.CRT. Odpowiedni komunikat o błędzie: Odnośny zestaw nie jest zainstalowany w tym systemie. . Error - 2011-09-27 14:40:39 | Computer Name = KLAUDIA | Source = SideBySide | ID = 16842811 Description = Generate Activation Context nie powiodło się dla C:\Program Files\Winamp\System\aacdec.w5s. Odpowiedni komunikat o błędzie: Operacja ukończona pomyślnie. . Error - 2011-09-27 14:40:39 | Computer Name = KLAUDIA | Source = SideBySide | ID = 16842784 Description = Nie można odnaleźć zestawu zależnego Microsoft.VC90.CRT; ostatni błąd: Odnośny zestaw nie jest zainstalowany w tym systemie. Error - 2011-09-27 14:40:39 | Computer Name = KLAUDIA | Source = SideBySide | ID = 16842811 Description = Resolve Partial Assembly nie powiodło się dla Microsoft.VC90.CRT. Odpowiedni komunikat o błędzie: Odnośny zestaw nie jest zainstalowany w tym systemie. . Error - 2011-09-27 14:40:39 | Computer Name = KLAUDIA | Source = SideBySide | ID = 16842811 Description = Generate Activation Context nie powiodło się dla C:\Program Files\Winamp\System\aacdec.w5s. Odpowiedni komunikat o błędzie: Operacja ukończona pomyślnie. . < End of report >

**Posty:** 18165 · przez **wojtas** 29 Wrz 2011, 22:09

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
MOD - [2011-09-27 20:18:28 | 000,075,776 | RHS- | M] () -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Temp\dsoqq0.dll
O4 - HKU\S-1-5-21-1482476501-515967899-1177238915-1003..\Run: [dso32] C:\Documents and Settings\Domowy\Ustawienia lokalne\Temp\dsoqq.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-19..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-20..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O32 - AutoRun File - [2011-09-27 21:34:43 | 000,000,053 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011-09-27 21:34:43 | 000,000,053 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{7115451a-d248-11e0-a751-806d6172696f}\Shell\AutoRun\command - "" = C:\rxf.exe -- [2010-07-01 16:49:20 | 000,127,488 | RHS- | M] ()
O33 - MountPoints2\{7115451a-d248-11e0-a751-806d6172696f}\Shell\open\Command - "" = C:\rxf.exe -- [2010-07-01 16:49:20 | 000,127,488 | RHS- | M] ()
O33 - MountPoints2\{7115451b-d248-11e0-a751-806d6172696f}\Shell\AutoRun\command - "" = D:\rxf.exe -- [2010-07-01 16:49:20 | 000,127,488 | RHS- | M] ()
O33 - MountPoints2\{7115451b-d248-11e0-a751-806d6172696f}\Shell\open\Command - "" = D:\rxf.exe -- [2010-07-01 16:49:20 | 000,127,488 | RHS- | M] ()
[2011-09-20 23:38:00 | 000,000,136 | RHS- | M] () -- C:\Documents and Settings\Domowy\autorun.inf
[2011-08-30 19:59:53 | 000,065,536 | RHS- | M] () -- C:\Documents and Settings\Domowy\diefioj.scr
[2011-08-30 19:59:53 | 000,065,536 | RHS- | M] () -- C:\Documents and Settings\Domowy\diefioj.exe

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Przy podpiętym urządzeniu przenośnym (pendrive, telefon - to co jest podłączane do komputera) , uruchom USBFIX z opcji Listing i pokaż raport na forum.

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).

**Posty:** 214 · przez **muzzy17** 01 Paź 2011, 10:53

Kod: Zaznacz wszystko: ############################## | UsbFix 7.060 | [Listing] User: Domowy (Administrator) # KLAUDIA Updated 22/09/2011 by El Desaparecido Started at 10:51:27 | 01/10/2011 Website: http://eldesaparecido.com Suspicious file ? : http://eldesaparecido.com/support.php Contact: contact@eldesaparecido.com PC: GBT___ (AWRDACPI) (X86-based PC) # Desktop Computer CPU: Intel(R) Pentium(R) 4 CPU 2.40GHz (2411) RAM -> [ Total : 767 | Free : 491 ] BIOS: Award Modular BIOS v6.00PG BOOT: Normal boot OS: Microsoft Windows XP Professional (5.1.2600 32-Bit) # Dodatek Service Pack 3 WB: Windows Internet Explorer 7.0.5730.13 SC: Security Center Service [ Enabled ] WU: Windows Update Service [ Enabled ] FW: Windows FireWall Service [ Enabled ] C:\ (%systemdrive%) -> Fixed drive # 10 Gb (5 Mb free - 46%) [] # NTFS D:\ -> Fixed drive # 46 Gb (38 Mb free - 82%) [] # NTFS E:\ -> CD-ROM F:\ -> Removable drive # 941 Mb (90 Mb free - 10%) [Karta pam.] # FAT ################## | Listing | [29/08/2011 - 14:39:35 | A | 0] C:\AUTOEXEC.BAT [27/09/2011 - 20:36:29 | SH | 211] C:\boot.ini [22/07/2001 - 00:13:54 | RASH | 4952] C:\Bootfont.bin [29/08/2011 - 14:39:35 | A | 0] C:\CONFIG.SYS [29/08/2011 - 14:49:06 | D ] C:\Documents and Settings [01/10/2011 - 10:48:13 | ASH | 804835328] C:\hiberfil.sys [29/08/2011 - 14:39:35 | RASH | 0] C:\IO.SYS [29/08/2011 - 14:39:35 | RASH | 0] C:\MSDOS.SYS [13/04/2008 - 22:13:04 | RASH | 47564] C:\NTDETECT.COM [14/04/2008 - 00:02:00 | RASH | 251152] C:\ntldr [29/08/2011 - 15:14:57 | D ] C:\NVIDIA [01/10/2011 - 10:48:09 | ASH | 1207959552] C:\pagefile.sys [28/09/2011 - 14:08:56 | RD ] C:\Program Files [29/08/2011 - 15:17:49 | SHD ] C:\RECYCLER [29/08/2011 - 14:41:59 | SHD ] C:\System Volume Information [01/10/2011 - 10:51:29 | D ] C:\UsbFix [01/10/2011 - 10:51:30 | A | 772] C:\UsbFix.txt [30/09/2011 - 13:45:14 | D ] C:\WINDOWS [30/09/2011 - 11:33:30 | D ] C:\_OTL [20/09/2011 - 23:49:04 | D ] D:\chirurdzy [21/09/2011 - 00:03:22 | RD ] D:\gry [20/09/2011 - 22:50:32 | D ] D:\instalacje [21/09/2011 - 07:58:05 | RD ] D:\muzyika [29/08/2011 - 15:47:52 | SHD ] D:\RECYCLER [19/09/2011 - 20:00:52 | D ] D:\stary komp [29/08/2011 - 15:21:26 | SHD ] D:\System Volume Information [30/09/2011 - 11:15:06 | D ] D:\uTorrent [30/09/2011 - 11:12:28 | AD ] D:\Zdjęcia [21/09/2011 - 07:51:54 | RD ] D:\zdjęcia_wsz [14/09/2010 - 20:42:24 | SHD ] F:\nokia_unprocessed_images_ [28/09/2010 - 19:56:54 | AD ] F:\Zdjęcia [30/07/2011 - 10:30:32 | D ] F:\Rafi - 200 Ton [10/08/2010 - 10:42:14 | D ] F:\Shellerini-Goscinnie-2010 [17/02/2011 - 14:24:48 | D ] F:\Shellerini - PDG GAWROSZ (2011) [25/03/2010 - 16:47:20 | D ] F:\PIH-Kwiaty_Zla-2CD-PL-2008-FIRSTRAP [02/08/2011 - 10:51:20 | D ] F:\mp3 [02/08/2011 - 10:56:48 | D ] F:\KARAMBA [03/12/2010 - 15:59:32 | D ] F:\Kaczor-Przyjazn-Duma-Godnosc-2010 [12/08/2011 - 16:20:36 | A | 1444376] F:\sp34200.exe [12/08/2011 - 16:23:34 | A | 6590512] F:\sp36684.exe [12/08/2011 - 16:23:28 | A | 30702968] F:\sp33537.exe [12/08/2011 - 17:12:00 | D ] F:\Miuosh [21/09/2011 - 06:52:32 | RSH | 136] F:\autorun.inf [21/09/2011 - 06:52:32 | RSH | 65536] F:\diefioj.exe [30/08/2011 - 19:59:54 | RSH | 65536] F:\diefioj.scr [01/10/2011 - 10:50:34 | A | 368] F:\New Folder.lnk [01/10/2011 - 10:50:34 | A | 368] F:\Passwords.lnk [01/10/2011 - 10:50:34 | A | 368] F:\Documents.lnk [01/10/2011 - 10:50:34 | A | 368] F:\Pictures.lnk [01/10/2011 - 10:50:34 | A | 368] F:\Music.lnk [01/10/2011 - 10:50:34 | A | 368] F:\Video.lnk ################## | E.O.F |

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-1482476501-515967899-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Run\\dso32 deleted successfully. C:\Documents and Settings\Domowy\Ustawienia lokalne\Temp\dsoqq.exe moved successfully. Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\nltide_2 deleted successfully. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\nltide_2 not found. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\nltide_2 deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\nltide_2 deleted successfully. C:\autorun.inf moved successfully. D:\autorun.inf moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7115451a-d248-11e0-a751-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7115451a-d248-11e0-a751-806d6172696f}\ not found. C:\rxf.exe moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7115451a-d248-11e0-a751-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7115451a-d248-11e0-a751-806d6172696f}\ not found. File C:\rxf.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7115451b-d248-11e0-a751-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7115451b-d248-11e0-a751-806d6172696f}\ not found. D:\rxf.exe moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7115451b-d248-11e0-a751-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7115451b-d248-11e0-a751-806d6172696f}\ not found. File D:\rxf.exe not found. C:\Documents and Settings\Domowy\autorun.inf moved successfully. C:\Documents and Settings\Domowy\diefioj.scr moved successfully. C:\Documents and Settings\Domowy\diefioj.exe moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Domowy ->Temp folder emptied: 84680159 bytes ->Temporary Internet Files folder emptied: 1351429 bytes ->FireFox cache emptied: 38356989 bytes ->Flash cache emptied: 1203 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 53888 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2352022 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 37071674 bytes RecycleBin emptied: 1324940 bytes Total Files Cleaned = 158,00 mb [EMPTYFLASH] User: All Users User: Default User User: Domowy ->Flash cache emptied: 0 bytes User: LocalService User: NetworkService Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.29.1 log created on 09302011_113330 Files\Folders moved on Reboot... C:\Documents and Settings\Domowy\Ustawienia lokalne\Temp\dsoqq0.dll moved successfully. Registry entries deleted on Reboot...

Dodano 01.10.2011 10:04:55:

Kod: Zaznacz wszystko: OTL logfile created on: 2011-10-01 10:53:55 - Run 2 OTL by OldTimer - Version 3.2.29.1 Folder = C:\Documents and Settings\Domowy\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 767,48 Mb Total Physical Memory | 497,07 Mb Available Physical Memory | 64,77% Memory free 1,83 Gb Paging File | 1,61 Gb Available in Paging File | 87,68% Paging File free Paging file location(s): C:\pagefile.sys 1152 2304 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 9,77 Gb Total Space | 4,53 Gb Free Space | 46,36% Space Free | Partition Type: NTFS Drive D: | 46,12 Gb Total Space | 37,77 Gb Free Space | 81,90% Space Free | Partition Type: NTFS Drive F: | 940,78 Mb Total Space | 89,88 Mb Free Space | 9,55% Space Free | Partition Type: FAT Computer Name: KLAUDIA | User Name: Domowy | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-10-01 10:50:20 | 000,065,536 | RHS- | M] () -- C:\Documents and Settings\Domowy\puoix.exe PRC - [2011-09-27 20:55:22 | 000,590,336 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Domowy\Pulpit\OTL.exe PRC - [2011-09-21 06:52:32 | 000,065,536 | RHS- | M] () -- F:\diefioj.exe PRC - [2011-08-31 17:00:48 | 000,449,608 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe PRC - [2011-08-31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2008-04-14 22:51:18 | 001,042,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-10-01 10:50:20 | 000,065,536 | RHS- | M] () -- C:\Documents and Settings\Domowy\puoix.exe MOD - [2011-09-21 06:52:32 | 000,065,536 | RHS- | M] () -- F:\diefioj.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2011-08-31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-09-27 20:51:57 | 000,428,088 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2011-08-31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector) DRV - [2008-05-02 08:48:55 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112) DRV - [2008-04-14 02:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-04-14 00:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2006-08-18 07:52:00 | 004,017,536 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2004-07-16 08:19:52 | 000,070,400 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp) DRV - [2001-08-18 00:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1482476501-515967899-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://klit.startnow.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.3.0&install_country=PL&install_date=20110920&user_guid=26F46D3E6240496CABFA324F21B3B06E&machine_id=3febfa36d66879aa9149cb790e63f81e&browser=IE&os=win&os_version=5.1-x86-SP3 IE - HKU\S-1-5-21-1482476501-515967899-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = about:blank IE - HKU\S-1-5-21-1482476501-515967899-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.selectedEngine: "Yahoo" FF - prefs.js..browser.startup.homepage: "http://klit.startnow.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.3.0&install_country=PL&install_date=20110920&user_guid=26F46D3E6240496CABFA324F21B3B06E&machine_id=3febfa36d66879aa9149cb790e63f81e&browser=FF&os=win&os_version=5.1-x86-SP3" FF - prefs.js..keyword.URL: "http://klit.startnow.com/s/?src=addrbar&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.3.0&install_country=PL&install_date=20110920&user_guid=26F46D3E6240496CABFA324F21B3B06E&machine_id=3febfa36d66879aa9149cb790e63f81e&browser=FF&os=win&os_version=5.1-x86-SP3&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-09-07 10:05:34 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-09-07 10:05:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Domowy\Dane aplikacji\Mozilla\Extensions [2011-09-27 20:42:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Domowy\Dane aplikacji\Mozilla\Firefox\Profiles\uccigzvu.default\extensions [2011-09-20 23:17:40 | 000,001,390 | ---- | M] () -- C:\Documents and Settings\Domowy\Dane aplikacji\Mozilla\Firefox\Profiles\uccigzvu.default\searchplugins\yahoo-zugo.xml [2011-09-07 10:05:34 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions () (No name found) -- C:\DOCUMENTS AND SETTINGS\DOMOWY\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\UCCIGZVU.DEFAULT\EXTENSIONS\IPLEXTOALL@ALLPLAYER.ORG.XPI [2011-09-03 08:37:46 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-09-03 01:51:04 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-09-03 01:51:04 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-09-03 01:51:04 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-09-03 01:51:04 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-09-03 01:51:04 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-09-03 01:51:04 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2011-10-01 10:48:19 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 NtKrnlpa.info O1 - Hosts: 127.0.0.1 localhost O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKU\S-1-5-21-1482476501-515967899-1177238915-1003..\Run: [puoix] C:\Documents and Settings\Domowy\puoix.exe () O4 - HKLM..\RunOnce: [] File not found O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1482476501-515967899-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C0BCB1A6-A5CD-4D05-BA66-E0AC8307CCA5}: DhcpNameServer = 194.204.152.34 194.204.159.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-08-29 14:39:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - Unable to obtain root file information for disk F:\ O33 - MountPoints2\{06ac6582-d32f-11e0-b424-000d610bb48b}\Shell - "" = AutoRun O33 - MountPoints2\{06ac6582-d32f-11e0-b424-000d610bb48b}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL diEfIoj.eXE O33 - MountPoints2\{9481cad6-dd74-11e0-b433-000d610bb48b}\Shell\AutoRun\command - "" = F:\rxf.exe O33 - MountPoints2\{9481cad6-dd74-11e0-b433-000d610bb48b}\Shell\open\Command - "" = F:\rxf.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-09-30 13:35:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\PopCap Games [2011-09-30 13:35:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Pulpit\Plants vs. Zombies [2011-09-30 13:30:38 | 000,000,000 | ---D | C] -- C:\UsbFix [2011-09-30 13:30:33 | 001,577,515 | ---- | C] (El Desaparecido.com) -- C:\Documents and Settings\Domowy\Pulpit\UsbFix.exe [2011-09-30 11:33:30 | 000,000,000 | ---D | C] -- C:\_OTL [2011-09-28 14:09:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Malwarebytes [2011-09-28 14:09:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware [2011-09-28 14:09:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2011-09-28 14:08:56 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2011-09-28 14:08:56 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011-09-28 14:08:00 | 009,852,544 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Domowy\Pulpit\mbam-setup-1.51.2.1300.exe [2011-09-27 20:55:21 | 000,590,336 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Domowy\Pulpit\OTL.exe [2011-09-27 20:51:37 | 000,592,952 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Domowy\Pulpit\SPTDinst-v179-x86.exe [2011-09-27 20:14:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\HiJackThis [2011-09-27 20:14:26 | 000,000,000 | ---D | C] -- C:\Program Files\hijack [2011-09-27 19:31:54 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent [2011-09-27 19:31:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Dane aplikacji\uTorrent [2011-09-27 19:31:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\uTorrent [2011-09-27 19:30:55 | 000,641,400 | ---- | C] (BitTorrent, Inc.) -- C:\Documents and Settings\Domowy\Pulpit\utorrent.exe [2011-09-27 09:15:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Thinstall [2011-09-27 09:13:14 | 050,287,763 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Domowy\Pulpit\Portable POWERPOINT 2003 PL.exe [2011-09-27 09:02:30 | 063,360,496 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Domowy\Pulpit\PowerPointViewer.exe [2011-09-20 23:55:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\GhostMaster [2011-09-20 23:54:57 | 000,000,000 | ---D | C] -- C:\Program Files\directx [2011-09-20 23:18:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Media Player Classic [2011-09-20 23:17:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\K-Lite Codec Pack [2011-09-20 23:17:14 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2011-09-20 23:17:13 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2011-09-20 23:17:05 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [2011-09-20 23:09:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ALLPlayer [2011-09-19 22:08:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2011-09-19 22:07:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Xvid [2011-09-19 22:07:46 | 000,000,000 | ---D | C] -- C:\Program Files\Xvid [2011-09-19 20:19:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Gadu-Gadu [2011-09-19 20:17:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\Gadu-Gadu [2011-09-19 20:14:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Gadu-Gadu [2011-09-19 20:14:16 | 000,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu [2011-09-07 12:51:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Moje dokumenty\Pobieranie [2011-09-07 10:10:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Macromedia [2011-09-07 10:10:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Adobe [2011-09-07 10:09:59 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2011-09-07 10:05:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Dane aplikacji\Mozilla [2011-09-07 10:05:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Mozilla [2011-09-07 10:05:33 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2011-09-07 07:00:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2011-09-03 20:13:35 | 000,000,000 | ---D | C] -- C:\Program Files\NAPI-PROJEKT [2011-09-03 20:13:34 | 000,000,000 | ---D | C] -- C:\Program Files\ALLPlayer [2011-09-03 19:51:45 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp Detect [2011-09-03 19:51:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\Detektor Winampa [2011-09-03 19:51:35 | 002,095,600 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll [2011-09-03 19:51:35 | 000,698,864 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll [2011-09-03 19:51:35 | 000,571,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll [2011-09-03 19:51:35 | 000,440,816 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll [2011-09-03 19:51:35 | 000,219,632 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll [2011-09-03 19:51:35 | 000,133,616 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll [2011-09-03 19:51:35 | 000,126,448 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsi64.exe [2011-09-03 19:51:35 | 000,123,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpyi64.exe [2011-09-03 19:51:35 | 000,100,848 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll [2011-09-03 19:51:35 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe [2011-09-03 19:51:35 | 000,068,592 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe [2011-09-03 19:51:35 | 000,068,080 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe [2011-09-03 19:51:35 | 000,059,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwma.dll [2011-09-03 19:51:35 | 000,009,200 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys [2011-09-03 19:51:35 | 000,009,072 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys [2011-09-03 19:51:34 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp [2011-09-03 19:51:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\Winamp [2011-09-03 19:50:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Menu Start\Programy\WinRAR [2011-09-03 19:50:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Domowy\Dane aplikacji\WinRAR [2011-09-03 19:50:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\WinRAR [2011-09-03 19:50:56 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-10-01 10:50:20 | 000,065,536 | RHS- | M] () -- C:\Documents and Settings\Domowy\puoix.exe [2011-10-01 10:48:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-10-01 10:48:13 | 804,835,328 | -HS- | M] () -- C:\hiberfil.sys [2011-09-30 13:45:15 | 000,000,025 | ---- | M] () -- C:\WINDOWS\popcinfot.dat [2011-09-30 13:35:02 | 027,564,811 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\roslinyizombie_www.peb.pl_od_PaulC.rar [2011-09-30 13:30:33 | 001,577,515 | ---- | M] (El Desaparecido.com) -- C:\Documents and Settings\Domowy\Pulpit\UsbFix.exe [2011-09-30 11:53:04 | 000,021,841 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\download.inc.php.jpeg [2011-09-30 11:15:15 | 000,016,896 | ---- | M] () -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-09-30 10:53:56 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-09-28 14:09:02 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-09-28 14:08:01 | 009,852,544 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Domowy\Pulpit\mbam-setup-1.51.2.1300.exe [2011-09-27 20:55:22 | 000,590,336 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Domowy\Pulpit\OTL.exe [2011-09-27 20:54:16 | 000,312,832 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\z9lthl49.exe [2011-09-27 20:51:37 | 000,592,952 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Domowy\Pulpit\SPTDinst-v179-x86.exe [2011-09-27 20:36:29 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2011-09-27 20:16:20 | 000,002,531 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\HiJackThis.lnk [2011-09-27 20:13:53 | 001,402,880 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\HijackThis.msi [2011-09-27 19:31:54 | 000,000,630 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\µTorrent.lnk [2011-09-27 19:31:07 | 000,641,400 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Domowy\Pulpit\utorrent.exe [2011-09-27 09:32:52 | 000,027,331 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\300px-Leaf_1_web.jpg [2011-09-27 09:32:22 | 000,008,369 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Drosera_rotundifolia_leaf1.jpg [2011-09-27 09:32:14 | 000,005,988 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Robinia_spines_kz.jpg [2011-09-27 09:32:12 | 000,008,120 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Bryophyllum_daigremontianum_nahaufnahme1.jpg [2011-09-27 09:32:02 | 000,013,673 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Lightmatter_cactus.jpg [2011-09-27 09:30:54 | 000,038,304 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\300px-Leavessnipedale.jpg [2011-09-27 09:14:22 | 050,287,763 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Domowy\Pulpit\Portable POWERPOINT 2003 PL.exe [2011-09-27 09:04:00 | 063,360,496 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Domowy\Pulpit\PowerPointViewer.exe [2011-09-21 00:11:59 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\Napi-projekt.lnk [2011-09-21 00:11:59 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\Domowy\Pulpit\ALLPlayer V4.7.lnk [2011-09-20 23:55:42 | 000,000,436 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom grę GhostMaster.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Video.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Pictures.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Passwords.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\New Folder.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Music.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Domowy\Documents.lnk [2011-09-07 10:09:59 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2011-09-07 10:05:35 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2011-09-03 19:52:12 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Winamp.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-10-01 10:50:20 | 000,065,536 | RHS- | C] () -- C:\Documents and Settings\Domowy\puoix.exe [2011-09-30 13:45:14 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat [2011-09-30 13:34:30 | 027,564,811 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\roslinyizombie_www.peb.pl_od_PaulC.rar [2011-09-30 11:53:03 | 000,021,841 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\download.inc.php.jpeg [2011-09-28 14:09:02 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-09-27 20:54:16 | 000,312,832 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\z9lthl49.exe [2011-09-27 20:14:27 | 000,002,531 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\HiJackThis.lnk [2011-09-27 20:13:50 | 001,402,880 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\HijackThis.msi [2011-09-27 19:31:54 | 000,000,630 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\µTorrent.lnk [2011-09-27 09:32:49 | 000,027,331 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\300px-Leaf_1_web.jpg [2011-09-27 09:32:18 | 000,008,369 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Drosera_rotundifolia_leaf1.jpg [2011-09-27 09:32:14 | 000,005,988 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Robinia_spines_kz.jpg [2011-09-27 09:32:09 | 000,008,120 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Bryophyllum_daigremontianum_nahaufnahme1.jpg [2011-09-27 09:31:58 | 000,013,673 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\200px-Lightmatter_cactus.jpg [2011-09-27 09:30:53 | 000,038,304 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\300px-Leavessnipedale.jpg [2011-09-20 23:55:42 | 000,000,436 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom grę GhostMaster.lnk [2011-09-20 23:40:21 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\vorbisfile.dll [2011-09-20 23:40:17 | 000,974,848 | R--- | C] () -- C:\WINDOWS\System32\vorbis.dll [2011-09-20 23:40:17 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ogg.dll [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Video.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Pictures.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Passwords.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\New Folder.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Music.lnk [2011-09-20 23:38:01 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Domowy\Documents.lnk [2011-09-20 23:17:21 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-09-20 23:17:16 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-09-20 23:17:14 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml [2011-09-20 23:17:12 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-09-20 23:09:44 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\Napi-projekt.lnk [2011-09-20 23:09:44 | 000,000,694 | ---- | C] () -- C:\Documents and Settings\Domowy\Pulpit\ALLPlayer V4.7.lnk [2011-09-20 23:09:21 | 000,797,184 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.ax [2011-09-20 23:09:21 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2011-09-20 23:06:03 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-09-20 23:06:03 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-09-20 23:06:02 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\xvid.ax [2011-09-07 10:05:35 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk [2011-09-07 10:05:35 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2011-09-03 19:52:12 | 000,000,654 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Winamp.lnk [2011-08-30 20:29:49 | 000,016,896 | ---- | C] () -- C:\Documents and Settings\Domowy\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-08-29 16:23:20 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-08-29 16:20:43 | 000,093,480 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-08-29 15:30:32 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2011-08-29 15:30:32 | 001,634,304 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe [2011-08-29 15:30:32 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2011-08-29 15:30:32 | 001,347,584 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe [2011-08-29 15:30:32 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2011-08-29 15:30:32 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2011-08-29 15:30:32 | 000,450,560 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe [2011-08-29 15:30:32 | 000,434,176 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe [2011-08-29 15:27:57 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2011-08-29 15:27:34 | 000,481,792 | ---- | C] () -- C:\WINDOWS\Nvidia Omega Drivers v2.169.21 Uninstall.exe [2011-08-29 15:17:39 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2011-08-29 15:17:20 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2011-08-29 15:17:10 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2011-08-29 14:40:46 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-08-29 14:39:45 | 000,050,105 | ---- | C] () -- C:\WINDOWS\activ.exe [2011-08-29 14:36:03 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2008-05-03 09:24:01 | 000,000,082 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2008-04-14 23:16:20 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2008-04-14 22:51:42 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\smbinst.exe [2006-12-31 08:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2001-10-26 18:15:16 | 000,355,486 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2001-10-26 18:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2001-10-26 18:15:16 | 000,049,492 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2001-10-26 18:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2001-08-23 15:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001-08-23 15:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001-08-17 23:30:24 | 000,311,604 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001-08-17 23:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001-08-17 23:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001-08-17 23:30:22 | 000,039,992 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001-08-17 23:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001-07-22 00:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001-07-22 00:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001-07-22 00:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2011-09-30 13:35:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PopCap Games [2011-09-19 20:19:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Domowy\Dane aplikacji\Gadu-Gadu [2011-09-27 09:15:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Domowy\Dane aplikacji\Thinstall [2011-09-27 20:41:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Domowy\Dane aplikacji\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 18165 · przez **wojtas** 01 Paź 2011, 16:48

przy podpiętym urządzeniu :

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
O4 - HKU\S-1-5-21-1482476501-515967899-1177238915-1003..\Run: [puoix] C:\Documents and Settings\Domowy\puoix.exe ()
O4 - HKLM..\RunOnce: [] File not found
O33 - MountPoints2\{06ac6582-d32f-11e0-b424-000d610bb48b}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL diEfIoj.eXE
O33 - MountPoints2\{9481cad6-dd74-11e0-b433-000d610bb48b}\Shell\AutoRun\command - "" = F:\rxf.exe
O33 - MountPoints2\{9481cad6-dd74-11e0-b433-000d610bb48b}\Shell\open\Command - "" = F:\rxf.exe

:Files
autorun.inf /alldrives
RECYCLER /alldrives
diefioj.exe /alldrives
diefioj.scr /alldrives
rxf.exe /alldrives

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .
potem nowy log z USB i OTL