Problemy z aplikacjami, internetem oraz pracą komputera

**Posty:** 20 · przez **Frezz** 18 Lip 2009, 19:35

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:32:45, on 2009-07-18 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\WINDOWS\vsnp2std.exe C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\Matias4us\Pulpit\utorrent.exe C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [RegDoctor] C:\Program Files\RegDoctor\RegDoctor.exe -Quick O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [uTorrent] "C:\Documents and Settings\Matias4us\Pulpit\utorrent.exe" O4 - HKCU\..\Run: [Uniblue RegistryBooster 2009] C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe /S O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user') O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{C01858A4-8FF4-44E0-BB6A-95AF30940F7E}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: Urządzenie mobilne Apple (Apple Mobile Device) - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- End of file - 5524 bytes

Nie działają mi gry (wyświetla się błąd aplikacji), internet się rozłącza co jakiś czas, komputer wyraźnie zwolnił.

**Posty:** 18165 · przez **wojtas** 19 Lip 2009, 16:12

Pobierz OTL i daj z niego loga

**Posty:** 20 · przez **Frezz** 19 Lip 2009, 21:14

Kod: Zaznacz wszystko: OTL logfile created on: 2009-07-19 21:11:09 - Run 1 OTL by OldTimer - Version 3.0.9.2 Folder = C:\Documents and Settings\Matias4us\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 100,00% Memory free 4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,29 Gb Total Space | 16,30 Gb Free Space | 55,64% Space Free | Partition Type: NTFS Drive D: | 101,79 Gb Total Space | 64,55 Gb Free Space | 63,42% Space Free | Partition Type: NTFS Drive E: | 101,79 Gb Total Space | 76,56 Gb Free Space | 75,22% Space Free | Partition Type: NTFS Drive F: | 654,81 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DZIKISAMOCHODZI Current User Name: Matias4us Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-05-16 05:15:52 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2009-05-16 05:15:52 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2008-02-18 08:46:30 | 00,110,592 | ---- | M] (Apple, Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe PRC - [2009-07-09 21:28:34 | 00,298,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe PRC - [2007-05-15 15:55:46 | 01,550,896 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe PRC - [2008-04-14 18:51:18 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2009-07-09 21:28:34 | 00,907,032 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe PRC - [2009-07-09 21:28:34 | 00,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe PRC - [2009-07-09 21:28:34 | 00,594,712 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe PRC - [2009-07-09 21:28:34 | 00,692,504 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgcsrvx.exe PRC - [2006-09-15 10:51:54 | 00,675,840 | ---- | M] (Sonix) -- C:\WINDOWS\vsnp2std.exe PRC - [2007-05-15 15:55:46 | 01,628,208 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe PRC - [2009-07-09 21:28:35 | 01,948,440 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe PRC - [2009-07-09 14:43:16 | 00,288,048 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Matias4us\Pulpit\utorrent.exe PRC - [2009-07-13 17:42:33 | 20,396,956 | ---- | M] (Sports Interactive) -- E:\Program Files\Sports Interactive\Football Manager 2007\fm.exe PRC - [2009-07-19 18:50:16 | 00,072,192 | ---- | M] (Macrovision Europe Ltd.) -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Temp\~e5.0001 PRC - [2009-06-03 10:17:52 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2008-03-21 10:41:46 | 02,109,952 | ---- | M] () -- C:\Program Files\NAPI-PROJEKT\napisy.exe PRC - [2009-07-19 21:10:32 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Matias4us\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2008-02-18 08:46:30 | 00,110,592 | ---- | M] (Apple, Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device [Auto | Running]) SRV - [2009-05-16 05:15:52 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running]) SRV - [2009-05-15 18:35:00 | 00,593,920 | ---- | M] () -- C:\WINDOWS\System32\ati2sgag.exe -- (ATI Smart [Auto | Stopped]) SRV - [2009-07-09 21:28:34 | 00,907,032 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc [Auto | Running]) SRV - [2009-07-09 21:28:34 | 00,298,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd [Auto | Running]) SRV - [2007-07-24 12:47:08 | 00,229,376 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Disabled | Stopped]) SRV - [2008-04-14 18:50:46 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2007-05-15 15:55:46 | 01,550,896 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv [Auto | Running]) SRV - [2007-04-13 21:09:56 | 00,792,112 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService [On_Demand | Stopped]) SRV - [2007-05-08 19:47:22 | 00,271,920 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Stopped]) SRV - [2006-12-01 11:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2003-12-08 09:23:48 | 00,053,600 | ---- | M] (THOMSON) -- C:\WINDOWS\System32\DRIVERS\alcan5wn.sys -- (alcan5wn [On_Demand | Running]) DRV - [2003-12-08 09:23:46 | 00,070,688 | ---- | M] (THOMSON) -- C:\WINDOWS\System32\DRIVERS\alcaudsl.sys -- (alcaudsl [On_Demand | Running]) DRV - [2009-05-16 05:58:45 | 04,069,888 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running]) DRV - [2009-07-09 21:28:44 | 00,335,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86 [System | Running]) DRV - [2009-07-09 21:28:43 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86 [System | Running]) DRV - [2009-07-09 21:28:48 | 00,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX [System | Running]) DRV - [2009-06-17 11:43:19 | 00,015,600 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys -- (gdrv [On_Demand | Stopped]) DRV - [2008-04-13 18:06:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running]) DRV - [2007-05-15 15:55:36 | 00,118,576 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\drivers\InCDFs.sys -- (InCDfs [Disabled | Running]) DRV - [2007-05-15 15:55:36 | 00,037,040 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\drivers\InCDPass.sys -- (InCDPass [System | Running]) DRV - [2007-05-15 15:55:36 | 00,038,576 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\drivers\InCDRm.sys -- (incdrm [System | Running]) DRV - [2007-09-19 11:16:32 | 04,617,728 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running]) DRV - [2009-05-13 23:25:06 | 00,079,816 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfeavfk.sys -- (mfeavfk [On_Demand | Stopped]) DRV - [2009-05-13 23:25:06 | 00,035,272 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfebopk.sys -- (mfebopk [On_Demand | Stopped]) DRV - [2009-05-13 23:25:06 | 00,214,024 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfehidk.sys -- (mfehidk [System | Running]) DRV - [2009-05-13 23:24:34 | 00,034,248 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mferkdk.sys -- (mferkdk [On_Demand | Stopped]) DRV - [2009-05-13 23:25:06 | 00,040,552 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfesmfk.sys -- (mfesmfk [On_Demand | Stopped]) DRV - [2007-09-20 16:37:38 | 00,053,632 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\NVENETFD.sys -- (NVENETFD [On_Demand | Stopped]) DRV - [2007-09-20 16:37:40 | 00,022,016 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nvnetbus.sys -- (nvnetbus [On_Demand | Running]) DRV - [2001-08-17 19:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-04-13 18:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Running]) DRV - [2007-04-09 09:08:06 | 12,039,552 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\snp2sxp.sys -- (SNP2STD [On_Demand | Stopped]) DRV - [2009-07-06 21:41:15 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pl.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 72 0C 13 E5 78 FE C9 01 [binary data] IE - URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Yahoo! Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.ask.com/?o=13928&l=dis" FF - prefs.js..extensions.enabledItems: {E9A1DEE0-C623-4439-8932-001E7D17607D}:2.1.0.5 FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5 FF - prefs.js..extensions.enabledItems: avg@igeared:2.506.026.001 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.0.8.0552 FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.11 FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009-07-09 21:28:33 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG8\Toolbar\Firefox\avg@igeared [2009-07-09 21:28:40 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-07-05 21:23:26 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-07-09 14:39:48 | 00,000,000 | ---D | M] [2009-06-17 11:43:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Extensions [2009-06-17 11:43:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-07-19 21:03:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions [2009-07-19 18:30:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}(2) [2009-07-09 14:39:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2009-06-28 19:23:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions\battlefieldheroespatcher@ea(2).com [2009-06-28 19:26:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions\DTToolbar@toolbarnet.com [2009-06-27 20:58:24 | 00,000,681 | ---- | M] () -- C:\Documents and Settings\Matias4us\Dane aplikacji\Mozilla\FireFox\Profiles\iuaompbk.default\searchplugins\ask.xml [2009-07-06 21:50:54 | 00,002,395 | ---- | M] () -- C:\Documents and Settings\Matias4us\Dane aplikacji\Mozilla\FireFox\Profiles\iuaompbk.default\searchplugins\daemon-search.xml [2009-07-19 13:23:41 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-06-17 11:43:56 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009-06-17 10:22:50 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED} [2009-06-03 10:17:54 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-06-03 10:17:54 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-06-03 10:17:54 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2004-12-14 12:19:18 | 00,057,344 | R--- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2007-12-21 00:30:00 | 00,144,720 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2007-12-21 00:30:00 | 00,081,920 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2006-06-03 18:43:22 | 00,000,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-07-09 21:30:50 | 00,001,489 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml [2008-04-03 19:19:08 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2008-04-16 06:08:20 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2007-03-31 19:11:54 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2006-06-03 18:43:22 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2008-03-28 23:36:04 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2007-01-05 13:40:56 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [RegDoctor] C:\Program Files\RegDoctor\RegDoctor.exe (RegDoctor) O4 - HKLM..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe (Nero AG) O4 - HKLM..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe (Sonix) O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe (SONIX) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) O4 - HKCU..\Run: [Uniblue RegistryBooster 2009] File not found O4 - HKCU..\Run: [uTorrent] C:\Documents and Settings\Matias4us\Pulpit\utorrent.exe (BitTorrent, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\Ati2evxx.dll (ATI Technologies Inc.) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2003-04-25 17:31:54 | 00,000,092 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ] O32 - AutoRun File - [2006-09-11 17:12:50 | 00,023,040 | R--- | M] () - F:\autorun.exe -- [ CDFS ] O32 - AutoRun File - [2006-09-11 15:26:42 | 00,000,027 | R--- | M] () - F:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{5fbb6f4f-5b2d-11de-b6ba-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{5fbb6f4f-5b2d-11de-b6ba-806d6172696f}\Shell\AutoRun\command - "" = F:\autorun.exe -- [2006-09-11 17:12:50 | 00,023,040 | R--- | M] () O33 - MountPoints2\{5fbb6f51-5b2d-11de-b6ba-806d6172696f}\Shell\AutoRun\command - "" = C:\WINDOWS\System32\setup.exe -- [2008-04-14 18:51:40 | 00,023,040 | ---- | M] (Microsoft Corporation) O33 - MountPoints2\{937cb8fe-6c89-11de-bdab-000e50dbaa9c}\Shell\Open(&0)\command - "" = Recycled\ctfmon.exe O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] [2009-07-19 21:10:23 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Matias4us\Pulpit\OTL.exe [2009-07-19 21:06:33 | 00,000,664 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Napi-projekt.lnk [2009-07-19 21:04:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\LastGood [2009-07-19 21:04:33 | 01,297,460 | ---- | C] ( ) -- C:\Documents and Settings\Matias4us\Pulpit\napiprojekt1.0.6.2_(www.noweprogramy.com).exe [2009-07-19 14:03:23 | 00,250,334 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\skład cz 2.JPG [2009-07-19 13:59:47 | 00,250,554 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\skład cz.1.JPG [2009-07-19 13:15:36 | 00,181,533 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\haha.JPG [2009-07-19 13:15:25 | 03,932,214 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Nowy Obraz - mapa bitowa.bmp [2009-07-18 22:39:47 | 03,644,080 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\scenowy_peryskop_3_lipiec.zip [2009-07-18 19:25:47 | 00,000,000 | ---D | C] -- C:\Program Files\Championship Manager 01-02 [2009-07-16 16:31:21 | 00,000,000 | ---D | C] -- C:\Program Files\NAPI-PROJEKT [2009-07-16 03:00:26 | 00,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2009-07-15 08:52:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\Uniblue [2009-07-15 08:50:04 | 00,000,830 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\RegistryBooster.lnk [2009-07-15 08:50:02 | 00,000,000 | ---D | C] -- C:\Program Files\Uniblue [2009-07-15 08:47:59 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1} [2009-07-15 08:46:10 | 01,683,864 | ---- | C] (Uniblue Systems ) -- C:\Documents and Settings\Matias4us\Moje dokumenty\registryboosterplc.exe [2009-07-15 08:25:22 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\HijackThis.lnk [2009-07-15 08:25:21 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2009-07-15 08:24:58 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Matias4us\Moje dokumenty\HJTInstall.exe [2009-07-14 16:36:38 | 00,001,560 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\CCleaner.lnk [2009-07-14 16:25:17 | 00,000,640 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\RegDoctor.lnk [2009-07-14 16:25:16 | 00,245,760 | ---- | C] (vbAccelerator) -- C:\WINDOWS\System32\vbalColumnTreeView6.ocx [2009-07-14 16:25:16 | 00,040,960 | ---- | C] (vbAccelerator) -- C:\WINDOWS\System32\SSubTmr6.dll [2009-07-14 16:25:16 | 00,008,096 | ---- | C] () -- C:\WINDOWS\System32\OLEGUIDS.TLB [2009-07-14 16:25:15 | 01,081,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscomctl.ocx [2009-07-14 16:25:15 | 00,152,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Comdlg32.ocx [2009-07-14 16:25:15 | 00,057,344 | ---- | C] (CodeGuru) -- C:\WINDOWS\System32\CGZipLibrary.DLL [2009-07-14 16:25:15 | 00,018,728 | ---- | C] () -- C:\WINDOWS\System32\ISHF_Ex.tlb [2009-07-14 16:25:15 | 00,000,000 | ---D | C] -- C:\Program Files\RegDoctor [2009-07-13 18:01:16 | 00,000,731 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2007.lnk [2009-07-11 15:37:31 | 00,138,909 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Miasteczko_South_Park_-_South_Park_Sezony_1-10_[TVRip]_[Napisy_PL][Torrenty.org].torrent [2009-07-10 17:03:16 | 00,003,638 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\l jak lowel.m3u [2009-07-10 14:59:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\Stronghold 2 [2009-07-10 14:58:53 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\SecuROM [2009-07-10 14:58:52 | 00,108,144 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll [2009-07-10 14:40:39 | 00,000,577 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Stronghold 2 Deluxe.lnk [2009-07-10 14:02:09 | 00,000,000 | -H-D | C] -- C:\$AVG8.VAULT$ [2009-07-09 21:30:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\AVG Security Toolbar [2009-07-09 21:28:48 | 00,108,552 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys [2009-07-09 21:28:48 | 00,011,952 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll [2009-07-09 21:28:48 | 00,001,507 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AVG Free 8.5.lnk [2009-07-09 21:28:44 | 00,335,752 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2009-07-09 21:28:43 | 00,027,784 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys [2009-07-09 21:28:42 | 38,302,345 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2009-07-09 21:28:42 | 06,061,540 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg [2009-07-09 21:28:42 | 00,463,779 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg [2009-07-09 21:28:42 | 00,034,214 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg [2009-07-09 21:28:42 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg [2009-07-09 21:28:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar [2009-07-09 21:28:33 | 00,000,000 | ---D | C] -- C:\Program Files\AVG [2009-07-09 21:28:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\avg8 [2009-07-09 17:49:39 | 70,288,632 | ---- | C] (AVG Technologies) -- C:\Documents and Settings\Matias4us\Moje dokumenty\avg_free_stf_eu_85_386a1586.exe [2009-07-09 17:45:12 | 00,001,116 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Twierdza Krzyżowiec.lnk [2009-07-09 17:39:24 | 00,001,043 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Twierdza Deluxe.lnk [2009-07-09 14:43:11 | 00,288,048 | ---- | C] (BitTorrent, Inc.) -- C:\Documents and Settings\Matias4us\Pulpit\utorrent.exe [2009-07-09 14:39:48 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2009-07-09 14:39:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe [2009-07-09 14:27:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe(2) [2009-07-09 14:27:11 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe(2) [2009-07-08 23:16:59 | 00,000,000 | ---D | C] -- C:\Program Files\FIFA Tools(2) [2009-07-08 14:04:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\2006 FIFA World Cup™ [2009-07-07 23:14:19 | 00,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages [2009-07-07 23:14:06 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2009-07-07 23:14:06 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll [2009-07-07 23:14:06 | 00,052,224 | ---- | C] () -- C:\WINDOWS\System32\msdvbnp.ax [2009-07-07 23:14:06 | 00,052,224 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax [2009-07-07 23:14:06 | 00,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msdv.sys [2009-07-07 23:14:06 | 00,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdv.sys [2009-07-07 23:14:06 | 00,030,208 | ---- | C] () -- C:\WINDOWS\System32\psisrndr.ax [2009-07-07 23:14:06 | 00,030,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax [2009-07-07 23:14:06 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdaplgin.ax [2009-07-07 23:14:06 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdaplgin.ax [2009-07-07 23:14:06 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mpe.sys [2009-07-07 23:14:06 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys [2009-07-07 23:14:06 | 00,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bdasup.sys [2009-07-07 23:14:06 | 00,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdasup.sys [2009-07-07 23:14:05 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksolay.ax [2009-07-07 23:14:03 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdllreg.exe [2009-07-07 23:14:02 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pid.dll [2009-07-06 21:51:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2009-07-06 21:50:51 | 00,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite [2009-07-06 21:41:15 | 00,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-07-06 19:11:47 | 00,000,933 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Spybot - Search & Destroy.lnk [2009-07-06 19:11:43 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy [2009-07-06 19:11:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy [2009-07-05 18:57:41 | 00,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS [2009-07-05 18:57:41 | 00,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys [2009-07-05 12:36:53 | 00,006,448 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\assa.m3u [2009-07-04 17:38:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\AdobeUM [2009-06-30 23:19:56 | 00,921,624 | ---- | C] () -- C:\snp2sxp-001.raw [2009-06-29 23:22:33 | 00,000,536 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\assad.ctm [2009-06-29 16:54:44 | 00,000,826 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Gothic II.lnk [2009-06-29 11:20:50 | 00,000,000 | ---D | C] -- C:\Program Files\Wesola_Szkola_2 [2009-06-29 09:24:35 | 00,094,208 | ---- | C] (MediaTexX) -- C:\WINDOWS\System32\wmpuice.dll [2009-06-29 08:44:46 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner [2009-06-28 20:45:37 | 00,079,816 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfeavfk.sys [2009-06-28 20:45:37 | 00,040,552 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfesmfk.sys [2009-06-28 20:45:37 | 00,035,272 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfebopk.sys [2009-06-28 20:44:21 | 00,034,248 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mferkdk.sys [2009-06-28 20:22:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\McAfee [2009-06-28 19:23:28 | 00,000,000 | ---D | C] -- C:\Program Files\Bonjour [2009-06-28 19:23:27 | 00,000,000 | ---D | C] -- C:\Config.Msi [2009-06-28 19:23:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Ahead [2009-06-28 19:23:18 | 00,000,000 | ---D | C] -- C:\ATI [2009-06-28 19:23:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple [2009-06-28 19:23:16 | 00,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft [2009-06-28 19:23:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer [2009-06-28 19:23:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real [2009-06-28 19:23:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Nero [2009-06-28 19:23:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive [2009-06-28 19:23:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2009-06-28 19:23:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Windows Genuine Advantage [2009-06-28 19:22:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive(2) [2009-06-28 19:21:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype(2) [2009-06-27 21:17:53 | 00,000,000 | ---D | C] -- C:\Program Files\EA SPORTS [2009-06-27 21:15:43 | 00,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Toolbar [2009-06-27 21:12:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\DAEMON Tools Lite [2009-06-27 20:28:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\Downloads [2009-06-27 20:00:36 | 00,000,000 | ---D | C] -- C:\Program Files\AskBarDis [2009-06-27 19:59:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\uTorrent [2009-06-26 14:59:15 | 00,189,640 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.xtr [2009-06-26 14:42:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\Battlefield Heroes [2009-06-26 13:59:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2009-06-25 19:31:55 | 00,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat [2009-06-25 15:01:14 | 07,527,445 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3.mp3 [2009-06-25 14:53:01 | 20,216,086 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3_2 [2009-06-25 14:52:28 | 20,216,086 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3_1 [2009-06-25 14:31:07 | 01,277,388 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Daron sings in armenian.mp3.mp3 [2009-06-25 14:29:03 | 03,095,510 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Daron sings in armenian_0 [2009-06-25 14:28:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\vdownloader [2009-06-25 14:28:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\Desktopicon [2009-06-25 14:28:26 | 00,000,000 | ---D | C] -- C:\Program Files\VDOWNLOADER [2009-06-24 19:48:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\Adobe [2009-06-22 21:18:26 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-06-21 22:49:08 | 00,000,064 | ---- | C] () -- C:\acc.ini [2009-06-21 22:49:06 | 00,000,000 | ---D | C] -- C:\Program Files\CM Rev Colours Changer 2 [2009-06-21 19:43:28 | 00,000,000 | ---D | C] -- C:\Program Files\GameSpy Arcade [2009-06-21 19:37:10 | 00,000,000 | ---D | C] -- C:\Program Files\Team17 Software Ltd [2009-06-21 19:35:33 | 00,000,000 | ---D | C] -- C:\Program Files\Adobe [2009-06-21 18:46:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\JoWooD [2009-06-21 18:45:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Pulpit\Gry Kasi [2009-06-21 12:58:46 | 00,000,000 | ---D | C] -- C:\Program Files\Neostrada TP [2009-06-21 12:58:33 | 00,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache [2009-06-21 10:11:19 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0 [2009-06-20 23:18:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\Ahead [2009-06-20 23:07:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\Identities [2009-06-20 23:07:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\Ahead [2009-06-20 23:04:57 | 00,000,000 | ---D | C] -- C:\Program Files\Nero [2009-06-20 23:04:57 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead [2009-06-20 22:50:49 | 00,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib [2009-06-20 22:50:35 | 00,000,000 | ---D | C] -- C:\Program Files\SlySoft [2009-06-20 13:31:14 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\Moje wideo [2009-06-19 22:37:19 | 00,000,429 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\War Rock.lnk [2009-06-19 22:37:12 | 00,000,760 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2009.lnk [2009-06-19 22:37:06 | 00,000,760 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2008.lnk [2009-06-19 22:37:00 | 00,001,862 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2006.lnk [2009-06-17 11:36:05 | 00,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll [2009-06-17 11:01:56 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-06-17 11:01:54 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-06-17 11:01:54 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-06-17 11:01:54 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-06-17 11:01:53 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-06-17 11:01:53 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-06-17 10:34:57 | 12,039,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2sxp.sys [2009-06-17 10:34:57 | 00,025,472 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncamd.sys [2009-06-17 10:34:57 | 00,015,497 | ---- | C] () -- C:\WINDOWS\snp2std.ini [2009-06-17 10:34:55 | 00,151,552 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2std.dll [2009-06-17 10:34:55 | 00,077,824 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2std.dll [2001-07-21 20:16:20 | 00,000,780 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 20:15:52 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] [2009-07-19 21:10:32 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Matias4us\Pulpit\OTL.exe [2009-07-19 21:06:33 | 00,000,664 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Napi-projekt.lnk [2009-07-19 21:05:08 | 01,297,460 | ---- | M] ( ) -- C:\Documents and Settings\Matias4us\Pulpit\napiprojekt1.0.6.2_(www.noweprogramy.com).exe [2009-07-19 21:03:53 | 00,030,208 | ---- | M] () -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-07-19 18:31:41 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-07-19 18:31:31 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-07-19 18:31:27 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-07-19 16:34:14 | 03,173,928 | -H-- | M] () -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-07-19 14:03:23 | 00,250,334 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\skład cz 2.JPG [2009-07-19 13:59:47 | 00,250,554 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\skład cz.1.JPG [2009-07-19 13:15:36 | 00,181,533 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\haha.JPG [2009-07-19 13:15:30 | 03,932,214 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Nowy Obraz - mapa bitowa.bmp [2009-07-19 09:32:02 | 38,302,345 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2009-07-18 23:13:57 | 03,644,080 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\scenowy_peryskop_3_lipiec.zip [2009-07-18 09:31:23 | 00,034,214 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg [2009-07-16 03:01:40 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009-07-15 08:50:04 | 00,000,830 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\RegistryBooster.lnk [2009-07-15 08:47:45 | 01,683,864 | ---- | M] (Uniblue Systems ) -- C:\Documents and Settings\Matias4us\Moje dokumenty\registryboosterplc.exe [2009-07-15 08:25:22 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\HijackThis.lnk [2009-07-15 08:25:09 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Matias4us\Moje dokumenty\HJTInstall.exe [2009-07-14 16:36:38 | 00,001,560 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\CCleaner.lnk [2009-07-14 16:25:17 | 00,000,640 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\RegDoctor.lnk [2009-07-14 07:07:00 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2009-07-13 18:01:16 | 00,000,731 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2007.lnk [2009-07-12 23:52:23 | 00,000,780 | ---- | M] () -- C:\WINDOWS\win.ini [2009-07-12 22:33:42 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-07-11 15:37:37 | 00,138,909 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Miasteczko_South_Park_-_South_Park_Sezony_1-10_[TVRip]_[Napisy_PL][Torrenty.org].torrent [2009-07-10 17:03:16 | 00,003,638 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\l jak lowel.m3u [2009-07-10 14:58:52 | 00,108,144 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll [2009-07-10 14:40:39 | 00,000,577 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Stronghold 2 Deluxe.lnk [2009-07-09 21:30:04 | 00,463,779 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg [2009-07-09 21:28:48 | 00,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys [2009-07-09 21:28:48 | 00,011,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll [2009-07-09 21:28:48 | 00,001,507 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG Free 8.5.lnk [2009-07-09 21:28:44 | 00,335,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2009-07-09 21:28:43 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys [2009-07-09 21:28:42 | 06,061,540 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg [2009-07-09 18:07:16 | 70,288,632 | ---- | M] (AVG Technologies) -- C:\Documents and Settings\Matias4us\Moje dokumenty\avg_free_stf_eu_85_386a1586.exe [2009-07-09 17:49:32 | 00,763,990 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-07-09 17:49:32 | 00,355,830 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2009-07-09 17:49:32 | 00,311,740 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009-07-09 17:49:32 | 00,049,712 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2009-07-09 17:49:32 | 00,040,128 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009-07-09 17:45:12 | 00,001,116 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Twierdza Krzyżowiec.lnk [2009-07-09 17:39:24 | 00,001,043 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Twierdza Deluxe.lnk [2009-07-09 14:43:16 | 00,288,048 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Matias4us\Pulpit\utorrent.exe [2009-07-06 22:19:35 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2009-07-06 22:19:35 | 00,000,211 | -HS- | M] () -- C:\boot.ini [2009-07-06 21:41:15 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-07-06 19:11:47 | 00,000,933 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Spybot - Search & Destroy.lnk [2009-07-05 12:36:53 | 00,006,448 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\assa.m3u [2009-06-30 23:19:56 | 00,921,624 | ---- | M] () -- C:\snp2sxp-001.raw [2009-06-29 23:27:50 | 00,000,064 | ---- | M] () -- C:\acc.ini [2009-06-29 23:22:18 | 00,000,536 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\assad.ctm [2009-06-29 16:54:44 | 00,000,826 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gothic II.lnk [2009-06-26 19:33:07 | 00,189,640 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr [2009-06-25 19:31:55 | 00,004,096 | ---- | M] () -- C:\WINDOWS\d3dx.dat [2009-06-25 15:01:41 | 07,527,445 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3.mp3 [2009-06-25 14:53:09 | 20,216,086 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3_2 [2009-06-25 14:53:09 | 20,216,086 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3_1 [2009-06-25 14:31:12 | 01,277,388 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Daron sings in armenian.mp3.mp3 [2009-06-25 14:29:18 | 03,095,510 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Daron sings in armenian_0 [2009-06-21 10:58:02 | 00,013,552 | ---- | M] () -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-06-21 09:37:12 | 00,096,664 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-06-20 22:50:49 | 00,000,041 | -HS- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib [2009-06-19 22:37:19 | 00,000,429 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\War Rock.lnk [2009-06-19 22:37:12 | 00,000,760 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2009.lnk [2009-06-19 22:37:06 | 00,000,760 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2008.lnk [2009-06-19 22:37:00 | 00,001,862 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2006.lnk [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 55838 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive:$ES_DESCRIPTOR_MVPUV1PKSVXJKX69UK1CWPP0DTVNYKM1UVXPJCEPP4DMJ3K1XYE7LRJEM53EPPJCFPLP45168LPSB5PL0EM6REGXHCTVVVVVVVVVVVVV @Alternate Data Stream - 24 bytes -> C:\WINDOWS:06CE80D88AF40ABC < End of report >

**Posty:** 18165 · przez **wojtas** 19 Lip 2009, 23:19

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Uniblue RegistryBooster 2009] File not found
O32 - AutoRun File - [2003-04-25 17:31:54 | 00,000,092 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ]
O32 - AutoRun File - [2006-09-11 17:12:50 | 00,023,040 | R--- | M] () - F:\autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2006-09-11 15:26:42 | 00,000,027 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{5fbb6f4f-5b2d-11de-b6ba-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{5fbb6f4f-5b2d-11de-b6ba-806d6172696f}\Shell\AutoRun\command - "" = F:\autorun.exe -- [2006-09-11 17:12:50 | 00,023,040 | R--- | M] ()
O33 - MountPoints2\{5fbb6f51-5b2d-11de-b6ba-806d6172696f}\Shell\AutoRun\command - "" = C:\WINDOWS\System32\setup.exe -- [2008-04-14 18:51:40 | 00,023,040 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{937cb8fe-6c89-11de-bdab-000e50dbaa9c}\Shell\Open(&0)\command - "" = Recycled\ctfmon.exe

:Files
C:\Program Files\AskBarDis
C:\Program Files\DAEMON Tools Toolbar

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia kompa

**Posty:** 20 · przez **Frezz** 20 Lip 2009, 11:10

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== No active process named explorer.exe was found! Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Uniblue RegistryBooster 2009 deleted successfully. D:\AUTORUN.INF moved successfully. File move failed. F:\autorun.exe scheduled to be moved on reboot. File move failed. F:\autorun.inf scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5fbb6f4f-5b2d-11de-b6ba-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5fbb6f4f-5b2d-11de-b6ba-806d6172696f}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5fbb6f4f-5b2d-11de-b6ba-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5fbb6f4f-5b2d-11de-b6ba-806d6172696f}\ not found. File move failed. F:\autorun.exe scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5fbb6f51-5b2d-11de-b6ba-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5fbb6f51-5b2d-11de-b6ba-806d6172696f}\ not found. C:\WINDOWS\System32\setup.exe moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{937cb8fe-6c89-11de-bdab-000e50dbaa9c}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{937cb8fe-6c89-11de-bdab-000e50dbaa9c}\ not found. File C:\Recycled\ctfmon.exe not found. ========== FILES ========== C:\Program Files\AskBarDis\bar\Settings moved successfully. C:\Program Files\AskBarDis\bar\History moved successfully. C:\Program Files\AskBarDis\bar moved successfully. C:\Program Files\AskBarDis moved successfully. C:\Program Files\DAEMON Tools Toolbar\Resources moved successfully. C:\Program Files\DAEMON Tools Toolbar moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 0 bytes File delete failed. C:\Documents and Settings\LocalService\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. ->Temporary Internet Files folder emptied: 33170 bytes User: Matias4us ->Temp folder emptied: 5445646 bytes ->Temporary Internet Files folder emptied: 2134079 bytes ->FireFox cache emptied: 121727275 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 583306 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2352022 bytes %systemroot%\System32 .tmp files removed: 2596 bytes Windows Temp folder emptied: 82403 bytes RecycleBin emptied: 2324 bytes Total Files Cleaned = 126,26 mb OTL by OldTimer - Version 3.0.9.2 log created on 07202009_105839 Files\Folders moved on Reboot... File move failed. F:\autorun.exe scheduled to be moved on reboot. File move failed. F:\autorun.inf scheduled to be moved on reboot. Registry entries deleted on Reboot...

Kod: Zaznacz wszystko: OTL logfile created on: 2009-07-20 11:05:53 - Run 2 OTL by OldTimer - Version 3.0.9.2 Folder = C:\Documents and Settings\Matias4us\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 100,00% Memory free 4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,29 Gb Total Space | 17,75 Gb Free Space | 60,58% Space Free | Partition Type: NTFS Drive D: | 101,79 Gb Total Space | 63,35 Gb Free Space | 62,24% Space Free | Partition Type: NTFS Drive E: | 101,79 Gb Total Space | 76,56 Gb Free Space | 75,22% Space Free | Partition Type: NTFS Drive F: | 538,51 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DZIKISAMOCHODZI Current User Name: Matias4us Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-05-16 05:15:52 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2009-05-16 05:15:52 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2008-02-18 08:46:30 | 00,110,592 | ---- | M] (Apple, Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe PRC - [2009-07-09 21:28:34 | 00,298,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe PRC - [2007-05-15 15:55:46 | 01,550,896 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe PRC - [2008-04-14 18:51:18 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2009-07-09 21:28:34 | 00,907,032 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe PRC - [2009-07-09 21:28:34 | 00,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe PRC - [2009-07-09 21:28:34 | 00,594,712 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe PRC - [2009-07-09 21:28:34 | 00,692,504 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgcsrvx.exe PRC - [2006-09-15 10:51:54 | 00,675,840 | ---- | M] (Sonix) -- C:\WINDOWS\vsnp2std.exe PRC - [2007-05-15 15:55:46 | 01,628,208 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe PRC - [2009-07-09 21:28:35 | 01,948,440 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe PRC - [2009-06-03 10:17:52 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-07-19 21:10:32 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Matias4us\Pulpit\OTL.exe PRC - [2008-03-20 12:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2008-02-18 08:46:30 | 00,110,592 | ---- | M] (Apple, Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device [Auto | Running]) SRV - [2009-05-16 05:15:52 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running]) SRV - [2009-05-15 18:35:00 | 00,593,920 | ---- | M] () -- C:\WINDOWS\System32\ati2sgag.exe -- (ATI Smart [Auto | Stopped]) SRV - [2009-07-09 21:28:34 | 00,907,032 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc [Auto | Running]) SRV - [2009-07-09 21:28:34 | 00,298,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd [Auto | Running]) SRV - [2007-07-24 12:47:08 | 00,229,376 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Disabled | Stopped]) SRV - [2008-04-14 18:50:46 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2007-05-15 15:55:46 | 01,550,896 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv [Auto | Running]) SRV - [2007-04-13 21:09:56 | 00,792,112 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService [On_Demand | Stopped]) SRV - [2007-05-08 19:47:22 | 00,271,920 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Stopped]) SRV - [2006-12-01 11:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2003-12-08 09:23:48 | 00,053,600 | ---- | M] (THOMSON) -- C:\WINDOWS\System32\DRIVERS\alcan5wn.sys -- (alcan5wn [On_Demand | Running]) DRV - [2003-12-08 09:23:46 | 00,070,688 | ---- | M] (THOMSON) -- C:\WINDOWS\System32\DRIVERS\alcaudsl.sys -- (alcaudsl [On_Demand | Running]) DRV - [2009-05-16 05:58:45 | 04,069,888 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running]) DRV - [2009-07-09 21:28:44 | 00,335,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86 [System | Running]) DRV - [2009-07-09 21:28:43 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86 [System | Running]) DRV - [2009-07-09 21:28:48 | 00,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX [System | Running]) DRV - [2009-06-17 11:43:19 | 00,015,600 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys -- (gdrv [On_Demand | Stopped]) DRV - [2008-04-13 18:06:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running]) DRV - [2007-05-15 15:55:36 | 00,118,576 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\drivers\InCDFs.sys -- (InCDfs [Disabled | Running]) DRV - [2007-05-15 15:55:36 | 00,037,040 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\drivers\InCDPass.sys -- (InCDPass [System | Running]) DRV - [2007-05-15 15:55:36 | 00,038,576 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\drivers\InCDRm.sys -- (incdrm [System | Running]) DRV - [2007-09-19 11:16:32 | 04,617,728 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running]) DRV - [2009-05-13 23:25:06 | 00,079,816 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfeavfk.sys -- (mfeavfk [On_Demand | Stopped]) DRV - [2009-05-13 23:25:06 | 00,035,272 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfebopk.sys -- (mfebopk [On_Demand | Stopped]) DRV - [2009-05-13 23:25:06 | 00,214,024 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfehidk.sys -- (mfehidk [System | Running]) DRV - [2009-05-13 23:24:34 | 00,034,248 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mferkdk.sys -- (mferkdk [On_Demand | Stopped]) DRV - [2009-05-13 23:25:06 | 00,040,552 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfesmfk.sys -- (mfesmfk [On_Demand | Stopped]) DRV - [2007-09-20 16:37:38 | 00,053,632 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\NVENETFD.sys -- (NVENETFD [On_Demand | Stopped]) DRV - [2007-09-20 16:37:40 | 00,022,016 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nvnetbus.sys -- (nvnetbus [On_Demand | Running]) DRV - [2001-08-17 19:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-04-13 18:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2007-04-09 09:08:06 | 12,039,552 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\snp2sxp.sys -- (SNP2STD [On_Demand | Stopped]) DRV - [2009-07-06 21:41:15 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pl.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 72 0C 13 E5 78 FE C9 01 [binary data] IE - URLSearchHook: *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Reg Error: Key error. File not found IE - URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Yahoo! Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.ask.com/?o=13928&l=dis" FF - prefs.js..extensions.enabledItems: {E9A1DEE0-C623-4439-8932-001E7D17607D}:2.1.0.5 FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5 FF - prefs.js..extensions.enabledItems: avg@igeared:2.506.026.001 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.0.8.0552 FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.11 FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009-07-09 21:28:33 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG8\Toolbar\Firefox\avg@igeared [2009-07-09 21:28:40 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-07-05 21:23:26 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-07-09 14:39:48 | 00,000,000 | ---D | M] [2009-06-17 11:43:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Extensions [2009-06-17 11:43:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-07-19 21:03:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions [2009-07-19 18:30:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}(2) [2009-07-09 14:39:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2009-06-28 19:23:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions\battlefieldheroespatcher@ea(2).com [2009-06-28 19:26:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matias4us\Dane aplikacji\mozilla\Firefox\Profiles\iuaompbk.default\extensions\DTToolbar@toolbarnet.com [2009-06-27 20:58:24 | 00,000,681 | ---- | M] () -- C:\Documents and Settings\Matias4us\Dane aplikacji\Mozilla\FireFox\Profiles\iuaompbk.default\searchplugins\ask.xml [2009-07-06 21:50:54 | 00,002,395 | ---- | M] () -- C:\Documents and Settings\Matias4us\Dane aplikacji\Mozilla\FireFox\Profiles\iuaompbk.default\searchplugins\daemon-search.xml [2009-07-20 11:03:25 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-06-17 11:43:56 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009-06-17 10:22:50 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED} [2009-06-03 10:17:54 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-06-03 10:17:54 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-06-03 10:17:54 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2004-12-14 12:19:18 | 00,057,344 | R--- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2007-12-21 00:30:00 | 00,144,720 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2007-12-21 00:30:00 | 00,081,920 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2006-06-03 18:43:22 | 00,000,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-07-09 21:30:50 | 00,001,489 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml [2008-04-03 19:19:08 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2008-04-16 06:08:20 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2007-03-31 19:11:54 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2006-06-03 18:43:22 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2008-03-28 23:36:04 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2007-01-05 13:40:56 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [RegDoctor] C:\Program Files\RegDoctor\RegDoctor.exe (RegDoctor) O4 - HKLM..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe (Nero AG) O4 - HKLM..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe (Sonix) O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe (SONIX) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) O4 - HKCU..\Run: [uTorrent] C:\Documents and Settings\Matias4us\Pulpit\utorrent.exe (BitTorrent, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\Ati2evxx.dll (ATI Technologies Inc.) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-10-02 13:24:09 | 00,039,680 | R--- | M] (Sports Interactive) - F:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2007-09-05 22:47:46 | 00,000,027 | R--- | M] () - F:\autorun.inf -- [ UDF ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-07-20 10:58:39 | 00,000,000 | ---D | C] -- C:\_OTL [2009-07-19 23:59:57 | 00,663,832 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\gamingharbor_installer.exe [2009-07-19 21:10:23 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Matias4us\Pulpit\OTL.exe [2009-07-19 21:06:33 | 00,000,664 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Napi-projekt.lnk [2009-07-19 21:04:33 | 01,297,460 | ---- | C] ( ) -- C:\Documents and Settings\Matias4us\Pulpit\napiprojekt1.0.6.2_(www.noweprogramy.com).exe [2009-07-19 14:03:23 | 00,250,334 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\skład cz 2.JPG [2009-07-19 13:59:47 | 00,250,554 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\skład cz.1.JPG [2009-07-19 13:15:36 | 00,181,533 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\haha.JPG [2009-07-19 13:15:25 | 03,932,214 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Nowy Obraz - mapa bitowa.bmp [2009-07-18 22:39:47 | 03,644,080 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\scenowy_peryskop_3_lipiec.zip [2009-07-18 19:25:47 | 00,000,000 | ---D | C] -- C:\Program Files\Championship Manager 01-02 [2009-07-16 16:31:21 | 00,000,000 | ---D | C] -- C:\Program Files\NAPI-PROJEKT [2009-07-16 03:00:26 | 00,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2009-07-15 08:52:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\Uniblue [2009-07-15 08:50:04 | 00,000,830 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\RegistryBooster.lnk [2009-07-15 08:50:02 | 00,000,000 | ---D | C] -- C:\Program Files\Uniblue [2009-07-15 08:47:59 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1} [2009-07-15 08:46:10 | 01,683,864 | ---- | C] (Uniblue Systems ) -- C:\Documents and Settings\Matias4us\Moje dokumenty\registryboosterplc.exe [2009-07-15 08:25:22 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\HijackThis.lnk [2009-07-15 08:25:21 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2009-07-15 08:24:58 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Matias4us\Moje dokumenty\HJTInstall.exe [2009-07-14 16:36:38 | 00,001,560 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\CCleaner.lnk [2009-07-14 16:25:17 | 00,000,640 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\RegDoctor.lnk [2009-07-14 16:25:16 | 00,245,760 | ---- | C] (vbAccelerator) -- C:\WINDOWS\System32\vbalColumnTreeView6.ocx [2009-07-14 16:25:16 | 00,040,960 | ---- | C] (vbAccelerator) -- C:\WINDOWS\System32\SSubTmr6.dll [2009-07-14 16:25:16 | 00,008,096 | ---- | C] () -- C:\WINDOWS\System32\OLEGUIDS.TLB [2009-07-14 16:25:15 | 01,081,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscomctl.ocx [2009-07-14 16:25:15 | 00,152,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Comdlg32.ocx [2009-07-14 16:25:15 | 00,057,344 | ---- | C] (CodeGuru) -- C:\WINDOWS\System32\CGZipLibrary.DLL [2009-07-14 16:25:15 | 00,018,728 | ---- | C] () -- C:\WINDOWS\System32\ISHF_Ex.tlb [2009-07-14 16:25:15 | 00,000,000 | ---D | C] -- C:\Program Files\RegDoctor [2009-07-13 18:01:16 | 00,000,731 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2007.lnk [2009-07-11 15:37:31 | 00,138,909 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Miasteczko_South_Park_-_South_Park_Sezony_1-10_[TVRip]_[Napisy_PL][Torrenty.org].torrent [2009-07-10 17:03:16 | 00,003,638 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\l jak lowel.m3u [2009-07-10 14:59:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\Stronghold 2 [2009-07-10 14:58:53 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\SecuROM [2009-07-10 14:58:52 | 00,108,144 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll [2009-07-10 14:40:39 | 00,000,577 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Stronghold 2 Deluxe.lnk [2009-07-10 14:02:09 | 00,000,000 | -H-D | C] -- C:\$AVG8.VAULT$ [2009-07-09 21:30:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\AVG Security Toolbar [2009-07-09 21:28:48 | 00,108,552 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys [2009-07-09 21:28:48 | 00,011,952 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll [2009-07-09 21:28:48 | 00,001,507 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AVG Free 8.5.lnk [2009-07-09 21:28:44 | 00,335,752 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2009-07-09 21:28:43 | 00,027,784 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys [2009-07-09 21:28:42 | 39,069,030 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2009-07-09 21:28:42 | 06,061,540 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg [2009-07-09 21:28:42 | 00,463,779 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg [2009-07-09 21:28:42 | 00,034,214 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg [2009-07-09 21:28:42 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg [2009-07-09 21:28:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar [2009-07-09 21:28:33 | 00,000,000 | ---D | C] -- C:\Program Files\AVG [2009-07-09 21:28:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\avg8 [2009-07-09 17:49:39 | 70,288,632 | ---- | C] (AVG Technologies) -- C:\Documents and Settings\Matias4us\Moje dokumenty\avg_free_stf_eu_85_386a1586.exe [2009-07-09 17:45:12 | 00,001,116 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Twierdza Krzyżowiec.lnk [2009-07-09 17:39:24 | 00,001,043 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Twierdza Deluxe.lnk [2009-07-09 14:43:11 | 00,288,048 | ---- | C] (BitTorrent, Inc.) -- C:\Documents and Settings\Matias4us\Pulpit\utorrent.exe [2009-07-09 14:39:48 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2009-07-09 14:39:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe [2009-07-09 14:27:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe(2) [2009-07-09 14:27:11 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe(2) [2009-07-08 23:16:59 | 00,000,000 | ---D | C] -- C:\Program Files\FIFA Tools(2) [2009-07-08 14:04:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\2006 FIFA World Cup™ [2009-07-07 23:14:19 | 00,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages [2009-07-07 23:14:06 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2009-07-07 23:14:06 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll [2009-07-07 23:14:06 | 00,052,224 | ---- | C] () -- C:\WINDOWS\System32\msdvbnp.ax [2009-07-07 23:14:06 | 00,052,224 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax [2009-07-07 23:14:06 | 00,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msdv.sys [2009-07-07 23:14:06 | 00,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdv.sys [2009-07-07 23:14:06 | 00,030,208 | ---- | C] () -- C:\WINDOWS\System32\psisrndr.ax [2009-07-07 23:14:06 | 00,030,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax [2009-07-07 23:14:06 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdaplgin.ax [2009-07-07 23:14:06 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdaplgin.ax [2009-07-07 23:14:06 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mpe.sys [2009-07-07 23:14:06 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys [2009-07-07 23:14:06 | 00,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bdasup.sys [2009-07-07 23:14:06 | 00,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdasup.sys [2009-07-07 23:14:05 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksolay.ax [2009-07-07 23:14:03 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdllreg.exe [2009-07-07 23:14:02 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pid.dll [2009-07-06 21:51:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2009-07-06 21:50:51 | 00,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite [2009-07-06 21:41:15 | 00,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-07-06 19:11:47 | 00,000,933 | ---- | C] () -- C:\Documents and Settings\Matias4us\Pulpit\Spybot - Search & Destroy.lnk [2009-07-06 19:11:43 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy [2009-07-06 19:11:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy [2009-07-05 18:57:41 | 00,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS [2009-07-05 18:57:41 | 00,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys [2009-07-05 12:36:53 | 00,006,448 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\assa.m3u [2009-07-04 17:38:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\AdobeUM [2009-06-30 23:19:56 | 00,921,624 | ---- | C] () -- C:\snp2sxp-001.raw [2009-06-29 23:22:33 | 00,000,536 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\assad.ctm [2009-06-29 16:54:44 | 00,000,826 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Gothic II.lnk [2009-06-29 11:20:50 | 00,000,000 | ---D | C] -- C:\Program Files\Wesola_Szkola_2 [2009-06-29 09:24:35 | 00,094,208 | ---- | C] (MediaTexX) -- C:\WINDOWS\System32\wmpuice.dll [2009-06-29 08:44:46 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner [2009-06-28 20:45:37 | 00,079,816 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfeavfk.sys [2009-06-28 20:45:37 | 00,040,552 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfesmfk.sys [2009-06-28 20:45:37 | 00,035,272 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfebopk.sys [2009-06-28 20:44:21 | 00,034,248 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mferkdk.sys [2009-06-28 20:22:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\McAfee [2009-06-28 19:23:28 | 00,000,000 | ---D | C] -- C:\Program Files\Bonjour [2009-06-28 19:23:27 | 00,000,000 | ---D | C] -- C:\Config.Msi [2009-06-28 19:23:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Ahead [2009-06-28 19:23:18 | 00,000,000 | ---D | C] -- C:\ATI [2009-06-28 19:23:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple [2009-06-28 19:23:16 | 00,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft [2009-06-28 19:23:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer [2009-06-28 19:23:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real [2009-06-28 19:23:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Nero [2009-06-28 19:23:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive [2009-06-28 19:23:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2009-06-28 19:23:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Windows Genuine Advantage [2009-06-28 19:22:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive(2) [2009-06-28 19:21:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype(2) [2009-06-27 21:17:53 | 00,000,000 | ---D | C] -- C:\Program Files\EA SPORTS [2009-06-27 21:12:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\DAEMON Tools Lite [2009-06-27 20:28:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\Downloads [2009-06-27 19:59:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\uTorrent [2009-06-26 14:59:15 | 00,189,640 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.xtr [2009-06-26 14:42:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\Battlefield Heroes [2009-06-26 13:59:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2009-06-25 19:31:55 | 00,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat [2009-06-25 15:01:14 | 07,527,445 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3.mp3 [2009-06-25 14:53:01 | 20,216,086 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3_2 [2009-06-25 14:52:28 | 20,216,086 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3_1 [2009-06-25 14:31:07 | 01,277,388 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Daron sings in armenian.mp3.mp3 [2009-06-25 14:29:03 | 03,095,510 | ---- | C] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Daron sings in armenian_0 [2009-06-25 14:28:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\vdownloader [2009-06-25 14:28:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\Desktopicon [2009-06-25 14:28:26 | 00,000,000 | ---D | C] -- C:\Program Files\VDOWNLOADER [2009-06-24 19:48:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\Adobe [2009-06-22 21:18:26 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-06-21 22:49:08 | 00,000,064 | ---- | C] () -- C:\acc.ini [2009-06-21 22:49:06 | 00,000,000 | ---D | C] -- C:\Program Files\CM Rev Colours Changer 2 [2009-06-21 19:43:28 | 00,000,000 | ---D | C] -- C:\Program Files\GameSpy Arcade [2009-06-21 19:37:10 | 00,000,000 | ---D | C] -- C:\Program Files\Team17 Software Ltd [2009-06-21 19:35:33 | 00,000,000 | ---D | C] -- C:\Program Files\Adobe [2009-06-21 18:46:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\JoWooD [2009-06-21 18:45:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Pulpit\Gry Kasi [2009-06-21 12:58:46 | 00,000,000 | ---D | C] -- C:\Program Files\Neostrada TP [2009-06-21 12:58:33 | 00,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache [2009-06-21 10:11:19 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0 [2009-06-20 23:18:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Dane aplikacji\Ahead [2009-06-20 23:07:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\Identities [2009-06-20 23:07:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\Ahead [2009-06-20 23:04:57 | 00,000,000 | ---D | C] -- C:\Program Files\Nero [2009-06-20 23:04:57 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead [2009-06-20 22:50:49 | 00,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib [2009-06-20 22:50:35 | 00,000,000 | ---D | C] -- C:\Program Files\SlySoft [2009-06-20 13:31:14 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Matias4us\Moje dokumenty\Moje wideo [2009-06-17 11:36:05 | 00,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll [2009-06-17 11:01:56 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-06-17 11:01:54 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-06-17 11:01:54 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-06-17 11:01:54 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-06-17 11:01:53 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-06-17 11:01:53 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-06-17 10:34:57 | 12,039,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2sxp.sys [2009-06-17 10:34:57 | 00,025,472 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncamd.sys [2009-06-17 10:34:57 | 00,015,497 | ---- | C] () -- C:\WINDOWS\snp2std.ini [2009-06-17 10:34:55 | 00,151,552 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2std.dll [2009-06-17 10:34:55 | 00,077,824 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2std.dll [2001-07-21 20:16:20 | 00,000,780 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 20:15:52 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-07-20 11:02:07 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-07-20 11:01:58 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-07-20 11:01:56 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-07-20 08:01:31 | 39,069,030 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2009-07-20 08:01:31 | 00,034,214 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg [2009-07-20 03:01:35 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009-07-20 00:00:07 | 00,663,832 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\gamingharbor_installer.exe [2009-07-19 21:10:32 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Matias4us\Pulpit\OTL.exe [2009-07-19 21:06:33 | 00,000,664 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Napi-projekt.lnk [2009-07-19 21:05:08 | 01,297,460 | ---- | M] ( ) -- C:\Documents and Settings\Matias4us\Pulpit\napiprojekt1.0.6.2_(www.noweprogramy.com).exe [2009-07-19 21:03:53 | 00,030,208 | ---- | M] () -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-07-19 16:34:14 | 03,173,928 | -H-- | M] () -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-07-19 14:03:23 | 00,250,334 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\skład cz 2.JPG [2009-07-19 13:59:47 | 00,250,554 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\skład cz.1.JPG [2009-07-19 13:15:36 | 00,181,533 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\haha.JPG [2009-07-19 13:15:30 | 03,932,214 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Nowy Obraz - mapa bitowa.bmp [2009-07-18 23:13:57 | 03,644,080 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\scenowy_peryskop_3_lipiec.zip [2009-07-15 08:50:04 | 00,000,830 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\RegistryBooster.lnk [2009-07-15 08:47:45 | 01,683,864 | ---- | M] (Uniblue Systems ) -- C:\Documents and Settings\Matias4us\Moje dokumenty\registryboosterplc.exe [2009-07-15 08:25:22 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\HijackThis.lnk [2009-07-15 08:25:09 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Matias4us\Moje dokumenty\HJTInstall.exe [2009-07-14 16:36:38 | 00,001,560 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\CCleaner.lnk [2009-07-14 16:25:17 | 00,000,640 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\RegDoctor.lnk [2009-07-14 07:07:00 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2009-07-13 18:01:16 | 00,000,731 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Football Manager 2007.lnk [2009-07-12 23:52:23 | 00,000,780 | ---- | M] () -- C:\WINDOWS\win.ini [2009-07-12 22:33:42 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-07-11 15:37:37 | 00,138,909 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Miasteczko_South_Park_-_South_Park_Sezony_1-10_[TVRip]_[Napisy_PL][Torrenty.org].torrent [2009-07-10 17:03:16 | 00,003,638 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\l jak lowel.m3u [2009-07-10 14:58:52 | 00,108,144 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll [2009-07-10 14:40:39 | 00,000,577 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Stronghold 2 Deluxe.lnk [2009-07-09 21:30:04 | 00,463,779 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg [2009-07-09 21:28:48 | 00,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys [2009-07-09 21:28:48 | 00,011,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll [2009-07-09 21:28:48 | 00,001,507 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG Free 8.5.lnk [2009-07-09 21:28:44 | 00,335,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2009-07-09 21:28:43 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys [2009-07-09 21:28:42 | 06,061,540 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg [2009-07-09 18:07:16 | 70,288,632 | ---- | M] (AVG Technologies) -- C:\Documents and Settings\Matias4us\Moje dokumenty\avg_free_stf_eu_85_386a1586.exe [2009-07-09 17:49:32 | 00,763,990 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-07-09 17:49:32 | 00,355,830 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2009-07-09 17:49:32 | 00,311,740 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009-07-09 17:49:32 | 00,049,712 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2009-07-09 17:49:32 | 00,040,128 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009-07-09 17:45:12 | 00,001,116 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Twierdza Krzyżowiec.lnk [2009-07-09 17:39:24 | 00,001,043 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Twierdza Deluxe.lnk [2009-07-09 14:43:16 | 00,288,048 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Matias4us\Pulpit\utorrent.exe [2009-07-07 17:10:56 | 24,539,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe [2009-07-06 22:19:35 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2009-07-06 22:19:35 | 00,000,211 | -HS- | M] () -- C:\boot.ini [2009-07-06 21:41:15 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-07-06 19:11:47 | 00,000,933 | ---- | M] () -- C:\Documents and Settings\Matias4us\Pulpit\Spybot - Search & Destroy.lnk [2009-07-05 12:36:53 | 00,006,448 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\assa.m3u [2009-06-30 23:19:56 | 00,921,624 | ---- | M] () -- C:\snp2sxp-001.raw [2009-06-29 23:27:50 | 00,000,064 | ---- | M] () -- C:\acc.ini [2009-06-29 23:22:18 | 00,000,536 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\assad.ctm [2009-06-29 16:54:44 | 00,000,826 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gothic II.lnk [2009-06-26 19:33:07 | 00,189,640 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr [2009-06-25 19:31:55 | 00,004,096 | ---- | M] () -- C:\WINDOWS\d3dx.dat [2009-06-25 15:01:41 | 07,527,445 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3.mp3 [2009-06-25 14:53:09 | 20,216,086 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3_2 [2009-06-25 14:53:09 | 20,216,086 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Metalica - Nothing Else Matters.mp3_1 [2009-06-25 14:31:12 | 01,277,388 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Daron sings in armenian.mp3.mp3 [2009-06-25 14:29:18 | 03,095,510 | ---- | M] () -- C:\Documents and Settings\Matias4us\Moje dokumenty\Daron sings in armenian_0 [2009-06-21 10:58:02 | 00,013,552 | ---- | M] () -- C:\Documents and Settings\Matias4us\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-06-21 09:37:12 | 00,096,664 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-06-20 22:50:49 | 00,000,041 | -HS- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 55838 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive:$ES_DESCRIPTOR_MVPUV1PKSVXJKX69UK1CWPP0DTVNYKM1UVXPJCEPP4DMJ3K1XYE7LRJEM53EPPJCFPLP45168LPSB5PL0EM6REGXHCTVVVVVVVVVVVVV @Alternate Data Stream - 24 bytes -> C:\WINDOWS:06CE80D88AF40ABC < End of report >

**Posty:** 18165 · przez **wojtas** 20 Lip 2009, 17:22

Daj loga z combofixa ale zainstaluj wraz z nim konsolę odzyskiwania ( instrukcja programu )

**Posty:** 20 · przez **Frezz** 23 Lip 2009, 21:57

Kod: Zaznacz wszystko: ComboFix 09-07-23.01 - Matias4us 2009-07-23 21:46.1.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.3326.2601 [GMT 2:00] Uruchomiony z: c:\documents and settings\Matias4us\Pulpit\ComboFix.exe Użyto następujących komend :: c:\documents and settings\Matias4us\Pulpit\WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} . ((((((((((((((((((((((((( Pliki utworzone od 2009-06-23 do 2009-07-23 ))))))))))))))))))))))))))))))) . 2009-07-21 16:10 . 1994-09-20 22:00 12800 ----a-w- c:\windows\system\WING32.DLL 2009-07-20 08:58 . 2009-07-20 08:58 -------- d-----w- C:\_OTL 2009-07-19 16:30 . 2009-07-19 16:30 -------- d-----w- c:\windows\system32\wbem\Repository 2009-07-18 17:25 . 2009-07-19 16:30 -------- d-----w- c:\program files\Championship Manager 01-02 2009-07-16 14:31 . 2009-07-19 19:23 -------- d-----w- c:\program files\NAPI-PROJEKT 2009-07-15 06:52 . 2009-07-15 06:52 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\Uniblue 2009-07-15 06:50 . 2009-07-06 04:16 2568214 -c--a-w- c:\documents and settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\Uniblue RegistryBooster.exe 2009-07-15 06:50 . 2009-07-15 06:50 -------- d-----w- c:\program files\Uniblue 2009-07-15 06:49 . 2008-08-26 16:48 99624 -c--a-w- c:\documents and settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\7390E4F0\6383BC9B\StartRegistryBooster.exe 2009-07-15 06:49 . 2008-08-26 16:48 757760 -c--a-w- c:\documents and settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\2B86F085\6383BC9B\UBVarRB.dll 2009-07-15 06:49 . 2008-08-26 16:48 6676480 -c--a-w- c:\documents and settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\4E45A1A4\6383BC9B\RegistryBooster.dll 2009-07-15 06:49 . 2008-08-26 16:48 497496 -c--a-w- c:\documents and settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\AF01B0B\6383BC9B\XceedZip.dll 2009-07-15 06:49 . 2008-08-26 16:48 413696 -c--a-w- c:\documents and settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\52CD59C9\6383BC9B\update.dll 2009-07-15 06:49 . 2008-08-26 16:48 2019624 -c--a-w- c:\documents and settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\7CE1607E\6383BC9B\RegistryBooster.exe 2009-07-15 06:49 . 2008-08-26 16:48 111912 -c--a-w- c:\documents and settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\65B92A91\6383BC9B\KillRBProcess.exe 2009-07-15 06:47 . 2009-07-15 06:50 -------- dc-h--w- c:\documents and settings\All Users\Dane aplikacji\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1} 2009-07-15 06:25 . 2009-07-15 06:25 -------- d-----w- c:\program files\Trend Micro 2009-07-14 14:25 . 2003-01-26 12:41 40960 ----a-w- c:\windows\system32\SSubTmr6.dll 2009-07-14 14:25 . 2009-07-14 14:25 -------- d-----w- c:\program files\RegDoctor 2009-07-14 14:25 . 1999-08-02 15:11 57344 ----a-w- c:\windows\system32\CGZipLibrary.DLL 2009-07-10 12:58 . 2009-07-10 12:58 -------- d--h--r- c:\documents and settings\Matias4us\Dane aplikacji\SecuROM 2009-07-10 12:58 . 2009-07-10 12:58 108144 ----a-w- c:\windows\system32\CmdLineExt.dll 2009-07-10 12:02 . 2009-07-23 12:01 -------- d--h--w- C:\$AVG8.VAULT$ 2009-07-09 19:30 . 2009-07-09 19:30 -------- d-----w- c:\documents and settings\Matias4us\Ustawienia lokalne\Dane aplikacji\AVG Security Toolbar 2009-07-09 19:28 . 2009-07-09 19:28 11952 ----a-w- c:\windows\system32\avgrsstx.dll 2009-07-09 19:28 . 2009-07-09 19:28 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2009-07-09 19:28 . 2009-07-09 19:28 335752 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2009-07-09 19:28 . 2009-07-09 19:28 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys 2009-07-09 19:28 . 2009-07-23 15:50 -------- d-----w- c:\windows\system32\drivers\Avg 2009-07-09 19:28 . 2009-07-09 19:30 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\AVG Security Toolbar 2009-07-09 19:28 . 2009-07-09 19:28 -------- d-----w- c:\program files\AVG 2009-07-09 19:28 . 2009-07-09 19:28 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\avg8 2009-07-09 12:39 . 2009-07-09 12:39 -------- d-----w- c:\program files\Common Files\Adobe 2009-07-09 12:27 . 2009-07-09 12:39 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Adobe(2) 2009-07-09 12:27 . 2009-07-09 12:39 -------- d-----w- c:\program files\Common Files\Adobe(2) 2009-07-08 21:16 . 2009-07-09 12:40 -------- d-----w- c:\program files\FIFA Tools(2) 2009-07-07 21:14 . 2004-07-09 02:26 354816 -c--a-w- c:\windows\system32\dllcache\psisdecd.dll 2009-07-07 21:14 . 2004-07-09 02:26 354816 ----a-w- c:\windows\system32\psisdecd.dll 2009-07-07 21:14 . 2004-07-09 02:26 52096 -c--a-w- c:\windows\system32\dllcache\msdv.sys 2009-07-07 21:14 . 2004-07-09 02:26 52096 ----a-w- c:\windows\system32\drivers\msdv.sys 2009-07-07 21:14 . 2004-07-09 02:26 15104 -c--a-w- c:\windows\system32\dllcache\mpe.sys 2009-07-07 21:14 . 2004-07-09 02:26 15104 ----a-w- c:\windows\system32\drivers\mpe.sys 2009-07-07 21:14 . 2004-07-09 02:26 11392 -c--a-w- c:\windows\system32\dllcache\bdasup.sys 2009-07-07 21:14 . 2004-07-09 02:26 11392 ----a-w- c:\windows\system32\drivers\bdasup.sys 2009-07-07 21:14 . 2002-12-11 22:14 46592 ----a-w- c:\windows\system32\dxdllreg.exe 2009-07-07 21:14 . 2002-08-29 01:41 31744 -c--a-w- c:\windows\system32\dllcache\pid.dll 2009-07-06 20:15 . 2009-07-06 20:15 -------- d-sh--w- c:\documents and settings\Matias4us\IECompatCache 2009-07-06 19:51 . 2009-07-06 19:51 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\DAEMON Tools Lite 2009-07-06 19:50 . 2009-07-06 20:19 -------- d-----w- c:\program files\DAEMON Tools Lite 2009-07-06 19:41 . 2009-07-06 19:41 721904 ----a-w- c:\windows\system32\drivers\sptd.sys 2009-07-06 17:11 . 2009-07-19 16:45 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2009-07-06 17:11 . 2009-07-06 17:13 -------- d-----w- c:\program files\Spybot - Search & Destroy 2009-07-05 16:57 . 2008-04-13 21:15 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys 2009-07-04 15:38 . 2009-07-04 15:38 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\AdobeUM 2009-06-29 09:20 . 2009-06-29 09:23 -------- d-----w- c:\program files\Wesola_Szkola_2 2009-06-29 07:24 . 2003-01-27 12:27 94208 ----a-w- c:\windows\system32\wmpuice.dll 2009-06-29 06:44 . 2009-06-29 06:44 -------- d-----w- c:\program files\CCleaner 2009-06-28 19:09 . 2009-06-28 19:09 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache 2009-06-28 18:45 . 2009-05-13 21:25 79816 ----a-w- c:\windows\system32\drivers\mfeavfk.sys 2009-06-28 18:45 . 2009-05-13 21:25 40552 ----a-w- c:\windows\system32\drivers\mfesmfk.sys 2009-06-28 18:45 . 2009-05-13 21:25 35272 ----a-w- c:\windows\system32\drivers\mfebopk.sys 2009-06-28 18:44 . 2009-05-13 21:24 34248 ----a-w- c:\windows\system32\drivers\mferkdk.sys 2009-06-28 18:22 . 2009-07-09 15:47 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\McAfee 2009-06-27 19:17 . 2009-06-27 19:17 -------- d-----w- c:\program files\EA SPORTS 2009-06-27 19:12 . 2009-07-06 19:51 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\DAEMON Tools Lite 2009-06-27 17:59 . 2009-07-22 15:31 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\uTorrent 2009-06-26 11:59 . 2009-06-26 11:59 -------- d-----w- c:\windows\system32\LogFiles 2009-06-25 17:31 . 2009-06-25 17:31 4096 ----a-w- c:\windows\d3dx.dat 2009-06-25 12:28 . 2009-06-25 12:28 -------- d-----w- c:\documents and settings\Matias4us\Ustawienia lokalne\Dane aplikacji\vdownloader 2009-06-25 12:28 . 2009-07-20 09:05 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\Desktopicon 2009-06-25 12:28 . 2009-06-25 12:28 -------- d-----w- c:\program files\VDOWNLOADER 2009-06-24 17:48 . 2009-06-24 17:48 -------- d-----w- c:\documents and settings\Matias4us\Ustawienia lokalne\Dane aplikacji\Adobe . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-23 18:33 . 2009-06-28 17:23 -------- d---a-w- c:\documents and settings\All Users\Dane aplikacji\Sports Interactive 2009-07-23 09:37 . 2009-06-17 08:23 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\Skype 2009-07-23 09:23 . 2009-06-17 08:23 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\skypePM 2009-07-10 12:40 . 2009-06-17 09:36 -------- d--h--w- c:\program files\InstallShield Installation Information 2009-07-09 15:49 . 2001-10-26 12:15 49712 ----a-w- c:\windows\system32\perfc015.dat 2009-07-09 15:49 . 2001-10-26 12:15 355830 ----a-w- c:\windows\system32\perfh015.dat 2009-07-08 22:40 . 2009-06-17 09:36 -------- d-----w- c:\program files\Common Files\InstallShield 2009-07-05 19:23 . 2009-06-28 17:23 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Apple Computer 2009-06-29 21:29 . 2009-06-21 20:49 -------- d-----w- c:\program files\CM Rev Colours Changer 2 2009-06-29 13:45 . 2009-06-17 07:27 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\Sports Interactive 2009-06-29 06:31 . 2009-06-21 17:43 -------- d-----w- c:\program files\GameSpy Arcade 2009-06-28 17:23 . 2009-06-28 17:23 -------- d-----w- c:\program files\Bonjour 2009-06-28 17:23 . 2009-06-28 17:23 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Ahead 2009-06-28 17:23 . 2009-06-28 17:23 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Apple 2009-06-28 17:23 . 2009-06-28 17:23 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Nero 2009-06-28 17:23 . 2009-06-28 17:23 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Skype 2009-06-28 17:23 . 2009-06-28 17:22 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Sports Interactive(2) 2009-06-28 17:23 . 2009-06-28 17:21 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Skype(2) 2009-06-27 10:44 . 2009-06-17 07:40 -------- d-----w- c:\program files\Gadu-Gadu 2009-06-21 17:37 . 2009-06-21 17:37 -------- d-----w- c:\program files\Team17 Software Ltd 2009-06-21 10:59 . 2009-06-21 10:58 -------- d-----w- c:\program files\Neostrada TP 2009-06-21 08:58 . 2009-06-17 09:35 13552 ----a-w- c:\documents and settings\Matias4us\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2009-06-21 08:11 . 2009-06-21 08:11 -------- d-----w- c:\program files\MSXML 4.0 2009-06-20 21:18 . 2009-06-20 21:18 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\Ahead 2009-06-20 21:07 . 2009-06-20 21:04 -------- d-----w- c:\program files\Common Files\Ahead 2009-06-20 21:04 . 2009-06-20 21:04 -------- d-----w- c:\program files\Nero 2009-06-20 20:58 . 2009-06-20 20:50 -------- d-----w- c:\program files\SlySoft 2009-06-18 09:48 . 2009-06-17 09:19 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat 2009-06-18 05:09 . 2009-06-18 05:09 -------- d-----w- c:\program files\3do 2009-06-18 01:47 . 2009-06-18 01:47 -------- d-----w- c:\program files\SubEdit-Player 2009-06-17 10:13 . 2009-06-17 10:09 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\Winamp 2009-06-17 10:10 . 2009-06-17 10:09 -------- d-----w- c:\program files\Winamp 2009-06-17 09:48 . 2009-06-17 09:48 -------- d--h--w- c:\program files\Zero G Registry 2009-06-17 09:44 . 2009-06-17 09:44 -------- d-----w- c:\program files\Realtek 2009-06-17 09:44 . 2009-06-17 09:44 315392 ----a-w- c:\windows\HideWin.exe 2009-06-17 09:43 . 2009-06-17 09:43 0 ----a-w- c:\windows\nsreg.dat 2009-06-17 09:43 . 2009-06-17 09:43 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\InstallShield 2009-06-17 09:43 . 2009-06-17 09:43 15600 ----a-w- c:\windows\gdrv.sys 2009-06-17 09:40 . 2009-06-17 09:40 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\Apple Computer 2009-06-17 09:39 . 2009-06-17 09:39 -------- d-----w- c:\program files\Apple Software Update 2009-06-17 09:39 . 2009-06-17 09:39 -------- d-----w- c:\program files\Common Files\Apple 2009-06-17 09:36 . 2009-06-17 09:36 -------- d-----w- c:\program files\Thomson 2009-06-17 09:23 . 2009-06-17 09:23 -------- d-----w- c:\program files\microsoft frontpage 2009-06-17 09:18 . 2009-06-17 09:18 -------- d-----w- c:\program files\Usługi online 2009-06-17 09:17 . 2009-06-17 09:17 21856 ----a-w- c:\windows\system32\emptyregdb.dat 2009-06-17 09:16 . 2009-06-17 09:16 -------- d-----w- c:\program files\Windows Media Connect 2 2009-06-17 09:02 . 2009-06-17 09:02 -------- d-----w- c:\program files\Real Alternative 2009-06-17 09:01 . 2009-06-17 09:01 -------- d-----w- c:\program files\K-Lite Codec Pack 2009-06-17 08:43 . 2009-06-17 08:43 -------- d-----w- c:\documents and settings\Matias4us\Dane aplikacji\Gadu-Gadu 2009-06-17 08:34 . 2009-06-17 08:34 -------- d-----w- c:\program files\Common Files\snp2std 2009-06-17 08:23 . 2009-06-17 08:23 56 ---ha-w- c:\windows\system32\ezsidmv.dat 2009-06-17 08:22 . 2009-06-17 08:22 -------- d-----w- c:\program files\Common Files\Skype 2009-06-17 08:22 . 2009-06-17 08:22 -------- d-----r- c:\program files\Skype 2009-06-17 08:01 . 2009-06-17 08:01 7886 ----a-r- c:\documents and settings\Matias4us\Dane aplikacji\Microsoft\Installer\{52A8B5F2-6DB5-4ECA-8367-3F42D8CAACA9}\fm2006_final_exe_49CFD5D905564037B7D6E13ED4BEA4C5.exe 2009-06-17 08:01 . 2009-06-17 08:01 7886 ----a-r- c:\documents and settings\Matias4us\Dane aplikacji\Microsoft\Installer\{52A8B5F2-6DB5-4ECA-8367-3F42D8CAACA9}\exe_final_49CFD5D905564037B7D6E13ED4BEA4C5.exe 2009-06-17 08:01 . 2009-06-17 08:01 7886 ----a-r- c:\documents and settings\Matias4us\Dane aplikacji\Microsoft\Installer\{52A8B5F2-6DB5-4ECA-8367-3F42D8CAACA9}\ARPPRODUCTICON.exe 2009-06-17 08:01 . 2009-06-17 08:01 49152 ----a-r- c:\documents and settings\Matias4us\Dane aplikacji\Microsoft\Installer\{52A8B5F2-6DB5-4ECA-8367-3F42D8CAACA9}\editor_EC0AB585B2794A778BB564C403E43EE7.exe 2009-06-17 07:24 . 2009-06-17 07:24 0 ----a-w- c:\windows\ativpsrm.bin 2009-06-16 14:40 . 2008-04-14 16:50 119808 ----a-w- c:\windows\system32\t2embed.dll 2009-06-16 14:40 . 2008-04-14 16:50 81920 ----a-w- c:\windows\system32\fontsub.dll 2009-06-03 19:12 . 2009-01-30 15:28 1294848 ----a-w- c:\windows\system32\quartz.dll 2009-05-16 03:58 . 2009-05-16 03:58 4069888 ----a-w- c:\windows\system32\drivers\ati2mtag.sys 2009-05-16 03:39 . 2009-05-16 03:39 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll 2009-05-16 03:38 . 2009-05-16 03:38 335872 ----a-w- c:\windows\system32\ati2dvag.dll 2009-05-16 03:18 . 2009-05-16 03:18 204800 ----a-w- c:\windows\system32\atipdlxx.dll 2009-05-16 03:17 . 2009-05-16 03:17 155648 ----a-w- c:\windows\system32\Oemdspif.dll 2009-05-16 03:17 . 2009-05-16 03:17 26112 ----a-w- c:\windows\system32\Ati2mdxx.exe 2009-05-16 03:17 . 2009-05-16 03:17 43520 ----a-w- c:\windows\system32\ati2edxx.dll 2009-05-16 03:17 . 2009-05-16 03:17 155648 ----a-w- c:\windows\system32\ati2evxx.dll 2009-05-16 03:15 . 2009-05-16 03:15 602112 ----a-w- c:\windows\system32\ati2evxx.exe 2009-05-16 03:14 . 2009-05-16 03:14 53248 ----a-w- c:\windows\system32\ATIDDC.DLL 2009-05-16 03:07 . 2009-05-16 03:07 2987136 ----a-w- c:\windows\system32\ati3duag.dll 2009-05-16 02:55 . 2009-05-16 02:55 11423744 ----a-w- c:\windows\system32\atioglxx.dll 2009-05-16 02:54 . 2009-05-16 02:54 2122624 ----a-w- c:\windows\system32\ativvaxx.dll 2009-05-16 02:54 . 2009-05-16 02:54 887724 ----a-w- c:\windows\system32\ativva6x.dat 2009-05-16 02:54 . 2009-05-16 02:54 3 ----a-w- c:\windows\system32\ativva5x.dat 2009-05-16 02:51 . 2009-05-16 02:51 311296 ----a-w- c:\windows\system32\atiiiexx.dll 2009-05-16 02:38 . 2009-05-16 02:38 49664 ----a-w- c:\windows\system32\atimpc32.dll 2009-05-16 02:38 . 2009-05-16 02:38 49664 ----a-w- c:\windows\system32\amdpcom32.dll 2009-05-16 02:33 . 2009-05-16 02:33 479232 ----a-w- c:\windows\system32\atikvmag.dll 2009-05-16 02:31 . 2009-05-16 02:31 139264 ----a-w- c:\windows\system32\atiadlxx.dll 2009-05-16 02:31 . 2009-05-16 02:31 17408 ----a-w- c:\windows\system32\atitvo32.dll 2009-05-16 02:30 . 2009-05-16 02:30 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll 2009-05-16 02:26 . 2009-05-16 02:26 376832 ----a-w- c:\windows\system32\atiok3x2.dll 2009-05-16 02:24 . 2009-05-16 02:24 651264 ----a-w- c:\windows\system32\ati2cqag.dll 2009-05-16 01:35 . 2009-05-16 01:35 45056 ----a-w- c:\windows\system32\aticalrt.dll 2009-05-16 01:34 . 2009-05-16 01:34 45056 ----a-w- c:\windows\system32\aticalcl.dll 2009-05-16 01:33 . 2009-05-16 01:33 3158016 ----a-w- c:\windows\system32\aticaldd.dll 2009-05-15 16:35 . 2009-06-17 07:22 593920 ------w- c:\windows\system32\ati2sgag.exe 2009-05-13 21:25 . 2009-05-13 21:25 214024 ----a-w- c:\windows\system32\drivers\mfehidk.sys 2009-05-13 05:06 . 2008-10-16 17:33 915456 ----a-w- c:\windows\system32\wininet.dll 2009-05-07 15:16 . 2009-01-30 15:26 348160 ----a-w- c:\windows\system32\localspl.dll 2009-05-05 19:33 . 2009-05-05 19:33 118784 ----a-w- c:\windows\system32\atibtmon.exe 2009-07-22 19:44 . 2009-06-17 09:43 134648 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll . ------- Sigcheck ------- [-] 2008-05-08 14:02 1571840 9F02C1CF7C3100E4AEA7DD8B6A86A01B c:\windows\system32\sfcfiles.dll . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll" [2009-06-26 1008896] [HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}] 2009-06-26 08:36 1008896 ----a-w- c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll" [2009-06-26 1008896] [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll" [2009-06-26 1008896] [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2008-03-20 2127296] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-02-04 23975720] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656] "uTorrent"="c:\documents and settings\Matias4us\Pulpit\utorrent.exe" [2009-07-09 288048] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SpeedTouch USB Diagnostics"="c:\program files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-01-26 866816] "tsnp2std"="c:\windows\tsnp2std.exe" [2007-01-05 258048] "snp2std"="c:\windows\vsnp2std.exe" [2006-09-15 675840] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136] "SecurDisc"="c:\program files\Nero\Nero 7\InCD\NBHGui.exe" [2007-05-15 1628208] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-07-09 1948440] "RegDoctor"="c:\program files\RegDoctor\RegDoctor.exe" [2007-08-14 2256896] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_2"="shell32" [X] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter] 2009-07-09 19:28 11952 ----a-w- c:\windows\system32\avgrsstx.dll HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "e:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"= "e:\\Program Files\\Sports Interactive\\Football Manager 2009\\fm.exe"= "c:\\Program Files\\GameSpy Arcade\\Aphex.exe"= "c:\\Documents and Settings\\Matias4us\\Pulpit\\utorrent.exe"= "c:\\Program Files\\AVG\\AVG8\\avgemc.exe"= "c:\\Program Files\\AVG\\AVG8\\avgupd.exe"= "c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"= "e:\\Program Files\\Firefly Studios\\Stronghold 2 Deluxe\\game.dat"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-07-09 335752] R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-07-09 108552] R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-07-09 907032] R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-07-09 298776] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP . Zawartość folderu 'Zaplanowane zadania' 2009-07-14 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 10:27] . - - - - USUNIĘTO PUSTE WPISY - - - - SafeBoot-mcmscsvc SafeBoot-MCODS . ------- Skan uzupełniający ------- . FF - ProfilePath - c:\documents and settings\Matias4us\Dane aplikacji\Mozilla\Firefox\Profiles\iuaompbk.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.ask.com/?o=13928&l=dis FF - component: c:\documents and settings\Matias4us\Dane aplikacji\Mozilla\Firefox\Profiles\iuaompbk.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll FF - component: c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll FF - component: c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll FF - component: c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll FF - component: c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\components\xpavgtbapi.dll FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-23 21:50 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(536) c:\windows\system32\Ati2evxx.dll - - - - - - - > 'explorer.exe'(1332) c:\windows\system32\WININET.dll c:\windows\system32\webcheck.dll c:\windows\system32\wpdshserviceobj.dll c:\windows\system32\portabledevicetypes.dll c:\windows\system32\portabledeviceapi.dll . Czas ukończenia: 2009-07-23 21:50 ComboFix-quarantined-files.txt 2009-07-23 19:50 Przed: 18 510 626 816 bajtów wolnych Po: 18 830 282 752 bajtów wolnych WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe 288 --- E O F --- 2009-07-20 01:01

**Posty:** 18165 · przez **wojtas** 24 Lip 2009, 20:22

.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware

Kto jest na forum