przez Ex'tail 30 Sie 2009, 21:23
( przez Okocza 30 Sie 2009, 21:24
przez Filas 30 Sie 2009, 21:27
Na Forum wróżek nie ma... Od jakiego momentu zaczęło robić jaja ?
przez Mike 30 Sie 2009, 21:39
Okocza napisał(a):daj log z RSIT w tagi code
przez Okocza 30 Sie 2009, 21:58
przez Ex'tail 30 Sie 2009, 22:07
Logfile of random's system information tool 1.06 (written by random/random)
Run by Pawlak at 2009-08-30 22:05:27
Microsoft Windows XP Home Edition Dodatek Service Pack 2
System drive C: has 132 GB (86%) free of 153 GB
Total RAM: 1022 MB (51% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:05:31, on 2009-08-30
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\VVSN\VVSN.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nowe Gadu-Gadu\gg.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Documents and Settings\Pawlak\Menu Start\Programy\Autostart\cvs32.exe
C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\xampp\mysql\bin\mysqld-nt.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Tibia\Tibia.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
c:\program files\winamp toolbar\WinampTbServer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Pawlak\Moje dokumenty\RSIT.exe
C:\Program Files\trend micro\Pawlak.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [VVSN] C:\Program Files\VVSN\VVSN.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: cvs32.exe
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Apache2.2 - Apache Software Foundation - c:\xampp\apache\bin\apache.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: mysql - Unknown owner - c:\xampp\mysql\bin\mysqld-nt.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: XAMPP Service (XAMPP) - Unknown owner - c:\xampp\service.exe
--
End of file - 7628 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-07-15 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-05-06 1262888]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-25 256112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2009-08-25 761840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-08-25 458736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-25 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-25 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-05-06 1262888]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-25 256112]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-01-11 577536]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-25 149280]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-06-01 7618560]
"nwiz"=nwiz.exe /install []
"SW20"=C:\WINDOWS\system32\sw20.exe [2006-05-18 208896]
"SW24"=C:\WINDOWS\system32\sw24.exe [2006-05-17 69632]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit []
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2009-04-10 37888]
"VVSN"=C:\Program Files\VVSN\VVSN.exe [2004-12-22 107520]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-08-17 81000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2006-03-02 15360]
"Nowe Gadu-Gadu"=C:\Program Files\Nowe Gadu-Gadu\gg.exe [2009-07-27 10719848]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-07-16 25604904]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-08-25 39408]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-08-25 321344]
"Picasa Media Detector"=C:\Program Files\Picasa2\PicasaMediaDetector.exe [2008-08-21 443968]
C:\Documents and Settings\Pawlak\Menu Start\Programy\Autostart
cvs32.exe
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Nowe Gadu-Gadu\gg.exe"="C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu"
"C:\xampp\apache\bin\apache.exe"="C:\xampp\apache\bin\apache.exe:*:Enabled:Apache HTTP Server"
"C:\xampp\mysql\bin\mysqld.exe"="C:\xampp\mysql\bin\mysqld.exe:*:Enabled:mysqld"
"C:\Documents and Settings\Pawlak\Pulpit\Sparking\crazy.exe"="C:\Documents and Settings\Pawlak\Pulpit\Sparking\crazy.exe:*:Enabled:Jacolos OTServer"
"C:\Program Files\Torrent Searcher 6\giFT\giFTl.exe"="C:\Program Files\Torrent Searcher 6\giFT\giFTl.exe:*:Enabled:giFT Loader for Torrent Searcher (http://www.torrent-searcher.com)"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Documents and Settings\Pawlak\Pulpit\Sparkingx\crazy.exe"="C:\Documents and Settings\Pawlak\Pulpit\Sparkingx\crazy.exe:*:Enabled:Jacolos OTServer"
"C:\Program Files\TeamViewer3\TeamViewer.exe"="C:\Program Files\TeamViewer3\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f0c21598-916e-11de-8458-0015588ecdab}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL explore.exe
======List of files/folders created in the last 1 months======
2009-08-30 21:45:45 ----D---- C:\rsit
2009-08-30 21:45:45 ----D---- C:\Program Files\trend micro
2009-08-30 09:00:54 ----D---- C:\Program Files\Native Instruments
2009-08-30 08:39:50 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\MakeitOne
2009-08-30 08:39:44 ----D---- C:\Program Files\MakeitOne
2009-08-30 08:36:34 ----D---- C:\Program Files\WMV9_VCM
2009-08-30 08:36:00 ----D---- C:\WINDOWS\system32\djaud
2009-08-30 08:35:57 ----D---- C:\WINDOWS\Video DJ
2009-08-30 08:35:57 ----D---- C:\Program Files\Video DJ
2009-08-30 08:08:14 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Tibia
2009-08-30 08:08:00 ----D---- C:\Program Files\Tibia
2009-08-30 03:51:30 ----A---- C:\WINDOWS\ina32.dll
2009-08-30 03:51:26 ----D---- C:\Program Files\Asprate
2009-08-30 02:53:32 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Hamachi
2009-08-29 22:54:28 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\teamspeak2
2009-08-29 22:54:18 ----D---- C:\Program Files\Teamspeak2_RC2
2009-08-29 14:46:26 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\MagicBall3
2009-08-29 08:21:44 ----D---- C:\Program Files\Gambana
2009-08-29 08:16:11 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\TeamViewer
2009-08-29 08:16:08 ----D---- C:\Program Files\TeamViewer3
2009-08-29 04:26:38 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-08-29 02:45:15 ----A---- C:\WINDOWS\PhotoSnapViewer.INI
2009-08-28 16:58:40 ----A---- C:\WINDOWS\my.ini
2009-08-28 01:37:02 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\DBKO
2009-08-27 23:57:43 ----D---- C:\Program Files\Picasa2
2009-08-27 20:07:17 ----A---- C:\WINDOWS\IsUn0415.exe
2009-08-26 17:24:03 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
2009-08-26 17:24:02 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\OpenFM
2009-08-26 08:50:59 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-08-26 08:50:55 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-08-26 08:50:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-08-26 08:50:48 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-08-26 08:50:44 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-08-26 08:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-08-26 08:50:30 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-08-26 08:50:26 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-08-26 08:50:23 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-08-26 08:50:21 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-08-26 08:50:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2009-08-26 08:50:14 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-08-26 08:50:11 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-08-26 08:50:05 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-08-26 08:50:02 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
2009-08-26 08:49:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-08-26 08:49:45 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-08-26 08:49:40 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-08-26 08:49:35 ----D---- C:\WINDOWS\ServicePackFiles
2009-08-26 08:49:34 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2009-08-26 08:49:29 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-08-26 08:48:30 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-08-26 08:48:26 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-08-26 08:48:22 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2009-08-26 08:48:11 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2009-08-26 08:47:22 ----A---- C:\WINDOWS\system32\wpa.bak
2009-08-26 08:23:05 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2009-08-26 08:23:05 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2009-08-26 08:23:05 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-08-26 08:23:05 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-08-26 08:23:04 ----D---- C:\Program Files\Alwil Software
2009-08-26 07:11:40 ----N---- C:\WINDOWS\system32\tzchange.exe
2009-08-26 04:36:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-08-26 04:36:37 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-08-26 04:36:34 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-08-26 04:36:22 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$
2009-08-26 04:36:18 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-08-26 04:36:15 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-08-26 04:36:12 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-08-26 04:36:09 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-08-26 04:36:05 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-08-26 04:36:02 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-08-26 04:35:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-08-26 04:35:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-08-26 04:35:51 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-08-26 04:35:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-08-26 04:35:42 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-08-26 04:35:38 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-08-26 04:35:35 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-08-26 04:35:31 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-08-26 04:35:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-08-26 04:35:22 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-08-26 03:01:22 ----A---- C:\WINDOWS\UnGins.exe
2009-08-26 03:00:40 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-08-26 03:00:31 ----D---- C:\WINDOWS\system32\PreInstall
2009-08-26 03:00:30 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-08-26 03:00:29 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-08-26 03:00:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-08-26 02:58:26 ----A---- C:\WINDOWS\system32\Unlha32.dll
2009-08-26 02:58:25 ----D---- C:\Program Files\ASCII
2009-08-26 02:58:25 ----A---- C:\WINDOWS\system32\Harmony.dll
2009-08-25 21:30:12 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\BitTorrent
2009-08-25 21:30:05 ----D---- C:\Program Files\DNA
2009-08-25 21:30:05 ----D---- C:\Program Files\BitTorrent
2009-08-25 21:30:05 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\DNA
2009-08-25 21:30:02 ----D---- C:\Program Files\Mozilla Firefox
2009-08-25 21:30:02 ----D---- C:\Program Files\AskSearch
2009-08-25 21:30:02 ----D---- C:\Program Files\AskBarDis
2009-08-25 21:30:02 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Mozilla
2009-08-25 21:26:18 ----D---- C:\My Shared Folder
2009-08-25 21:26:17 ----D---- C:\Program Files\Torrent Searcher 6
2009-08-25 21:26:17 ----A---- C:\torrentsearcher-6.0.exe
2009-08-25 21:26:16 ----D---- C:\Program Files\VVSN
2009-08-25 21:05:24 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Google
2009-08-25 19:11:32 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\skypePM
2009-08-25 19:09:46 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Skype
2009-08-25 19:09:28 ----D---- C:\Program Files\Google
2009-08-25 19:09:28 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Google
2009-08-25 19:08:38 ----D---- C:\Program Files\Common Files\Skype
2009-08-25 19:08:36 ----RD---- C:\Program Files\Skype
2009-08-25 19:08:32 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Skype
2009-08-25 14:30:22 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\WoDBO
2009-08-25 14:21:47 ----D---- C:\xampp
2009-08-25 14:18:12 ----D---- C:\Program Files\Winamp Toolbar
2009-08-25 14:18:12 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar
2009-08-25 14:17:49 ----D---- C:\WINDOWS\RegisteredPackages
2009-08-25 14:16:11 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\WinRAR
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\vxblock.dll
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\pxwave.dll
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\pxsfs.dll
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\pxmas.dll
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\pxdrv.dll
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\pxafs.dll
2009-08-25 14:15:23 ----N---- C:\WINDOWS\system32\px.dll
2009-08-25 14:15:21 ----D---- C:\Program Files\Winamp
2009-08-25 14:15:21 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Winamp
2009-08-25 14:10:44 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Nowe Gadu-Gadu
2009-08-25 14:10:35 ----D---- C:\Program Files\Nowe Gadu-Gadu
2009-08-25 14:08:27 ----D---- C:\Program Files\WinRAR
2009-08-25 12:23:49 ----SHD---- C:\RECYCLER
2009-08-25 12:17:13 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Ahead
2009-08-25 12:16:52 ----A---- C:\WINDOWS\NeroDigital.ini
2009-08-25 12:12:00 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\HP
2009-08-25 12:04:19 ----A---- C:\WINDOWS\system32\ptpusb.dll
2009-08-25 12:04:18 ----A---- C:\WINDOWS\system32\ptpusd.dll
2009-08-25 12:03:18 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\HP
2009-08-25 12:02:33 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Sonic
2009-08-25 12:00:49 ----RSD---- C:\WINDOWS\assembly
2009-08-25 12:00:49 ----D---- C:\WINDOWS\Microsoft.NET
2009-08-25 12:00:48 ----D---- C:\WINDOWS\system32\URTTemp
2009-08-25 11:58:17 ----HD---- C:\Config.Msi
2009-08-25 11:58:09 ----D---- C:\Program Files\HP
2009-08-25 11:51:21 ----N---- C:\WINDOWS\UNNMP.exe
2009-08-25 11:50:31 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2009-08-25 11:50:19 ----D---- C:\Program Files\Common Files\Nero
2009-08-25 11:49:55 ----N---- C:\WINDOWS\UNNeroVision.exe
2009-08-25 11:49:55 ----N---- C:\WINDOWS\system32\msxml3a.dll
2009-08-25 11:49:31 ----N---- C:\WINDOWS\system32\TwnLib4.dll
2009-08-25 11:49:31 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2009-08-25 11:49:31 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2009-08-25 11:49:31 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2009-08-25 11:49:31 ----N---- C:\WINDOWS\system32\ImagX7.dll
2009-08-25 11:49:31 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Ahead
2009-08-25 11:49:30 ----N---- C:\WINDOWS\system32\picn20.dll
2009-08-25 11:49:30 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2009-08-25 11:49:27 ----D---- C:\Program Files\Common Files\Ahead
2009-08-25 11:49:26 ----D---- C:\Program Files\Ahead
2009-08-25 11:31:41 ----A---- C:\WINDOWS\system32\h323log.txt
2009-08-25 11:26:44 ----A---- C:\WINDOWS\system32\usbui.dll
2009-08-25 11:25:40 ----A---- C:\WINDOWS\imsins.BAK
2009-08-25 11:25:38 ----SHD---- C:\WINDOWS\Installer
2009-08-25 11:25:38 ----D---- C:\Program Files\Common Files\ODBC
2009-08-25 11:25:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-08-25 11:25:38 ----A---- C:\WINDOWS\ODBCINST.INI
2009-08-25 11:25:35 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-08-25 11:25:35 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-08-25 11:25:35 ----D---- C:\Program Files\Common Files
2009-08-25 11:25:34 ----RD---- C:\Program Files
2009-08-25 11:25:32 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-08-25 11:25:32 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-08-25 11:25:32 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-08-25 11:25:30 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-08-25 11:25:28 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-08-25 11:25:28 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-08-25 11:25:28 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-08-25 11:25:28 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-08-25 11:25:28 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-08-25 11:25:28 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-08-25 11:25:28 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-08-25 11:25:27 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-08-25 11:25:27 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-08-25 11:25:27 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-08-25 11:25:27 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-08-25 11:25:27 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdycl.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdsl.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdro.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdhu.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdcz2.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdcz1.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdcz.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\kbdcr.dll
2009-08-25 11:25:24 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2009-08-25 11:25:23 ----A---- C:\WINDOWS\system32\irclass.dll
2009-08-25 11:25:23 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-08-25 11:25:23 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-08-25 11:25:22 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-08-25 11:25:22 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-08-25 11:25:20 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-08-25 11:25:20 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-08-25 11:25:20 ----A---- C:\WINDOWS\system32\batt.dll
2009-08-25 11:25:19 ----A---- C:\WINDOWS\system32\storprop.dll
2009-08-25 11:25:19 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-08-25 11:25:12 ----ASH---- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
2009-08-25 11:25:11 ----RA---- C:\WINDOWS\SET21.tmp
2009-08-25 11:25:09 ----RA---- C:\WINDOWS\SET8.tmp
2009-08-25 11:25:07 ----RA---- C:\WINDOWS\SET4.tmp
2009-08-25 11:25:06 ----RA---- C:\WINDOWS\SET3.tmp
2009-08-25 11:25:02 ----D---- C:\WINDOWS\system32\CatRoot2
2009-08-25 11:25:02 ----D---- C:\WINDOWS\system32\CatRoot
2009-08-25 11:24:56 ----SD---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
2009-08-25 11:24:37 ----A---- C:\WINDOWS\setuplog.txt
2009-08-25 11:24:35 ----SHD---- C:\System Volume Information
2009-08-25 11:24:35 ----D---- C:\Documents and Settings
2009-08-25 11:20:40 ----SH---- C:\boot.ini
2009-08-25 11:15:26 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-25 11:15:26 ----RSD---- C:\WINDOWS\Fonts
2009-08-25 11:15:26 ----RD---- C:\WINDOWS\Web
2009-08-25 11:15:26 ----HD---- C:\WINDOWS\inf
2009-08-25 11:15:26 ----D---- C:\WINDOWS\WinSxS
2009-08-25 11:15:26 ----D---- C:\WINDOWS\twain_32
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Temp
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\wins
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\wbem
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\usmt
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\spool
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\ShellExt
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\Setup
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\ras
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\oobe
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\npp
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\mui
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\inetsrv
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\IME
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\icsxml
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\ias
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\export
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\drivers
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\dhcp
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\config
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\3com_dmi
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\3076
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\2052
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\1054
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\1045
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\1042
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\1041
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\1037
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\1033
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\1031
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\1028
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32\1025
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system32
2009-08-25 11:15:26 ----D---- C:\WINDOWS\system
2009-08-25 11:15:26 ----D---- C:\WINDOWS\security
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Resources
2009-08-25 11:15:26 ----D---- C:\WINDOWS\repair
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Provisioning
2009-08-25 11:15:26 ----D---- C:\WINDOWS\PeerNet
2009-08-25 11:15:26 ----D---- C:\WINDOWS\pchealth
2009-08-25 11:15:26 ----D---- C:\WINDOWS\mui
2009-08-25 11:15:26 ----D---- C:\WINDOWS\msapps
2009-08-25 11:15:26 ----D---- C:\WINDOWS\msagent
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Media
2009-08-25 11:15:26 ----D---- C:\WINDOWS\java
2009-08-25 11:15:26 ----D---- C:\WINDOWS\ime
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Help
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Driver Cache
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Debug
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Cursors
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Connection Wizard
2009-08-25 11:15:26 ----D---- C:\WINDOWS\Config
2009-08-25 11:15:26 ----D---- C:\WINDOWS\AppPatch
2009-08-25 11:15:26 ----D---- C:\WINDOWS\addins
2009-08-25 11:15:26 ----D---- C:\WINDOWS
2009-08-25 10:11:47 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Macromedia
2009-08-25 10:11:47 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Adobe
2009-08-25 10:10:54 ----A---- C:\WINDOWS\msicpl.ini
2009-08-25 10:07:52 ----D---- C:\WINDOWS\nview
2009-08-25 10:07:52 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-08-25 10:07:51 ----RA---- C:\WINDOWS\system32\sysinfo.dll
2009-08-25 10:07:50 ----RA---- C:\WINDOWS\system32\WinSys.exe
2009-08-25 10:07:50 ----RA---- C:\WINDOWS\system32\sw24.exe
2009-08-25 10:07:50 ----RA---- C:\WINDOWS\system32\sw20.exe
2009-08-25 10:07:50 ----RA---- C:\WINDOWS\system32\Nvgpio.dll
2009-08-25 10:07:49 ----RA---- C:\WINDOWS\system32\msicpl.dll
2009-08-25 10:05:09 ----A---- C:\WINDOWS\system32\javaws.exe
2009-08-25 10:05:09 ----A---- C:\WINDOWS\system32\javaw.exe
2009-08-25 10:05:09 ----A---- C:\WINDOWS\system32\java.exe
2009-08-25 10:05:09 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-08-25 10:05:02 ----D---- C:\Program Files\Java
2009-08-25 10:03:22 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Sun
2009-08-25 09:48:16 ----R---- C:\WINDOWS\system32\ChCfg.exe
2009-08-25 09:47:55 ----R---- C:\WINDOWS\system32\RTLCPL.exe
2009-08-25 09:47:55 ----R---- C:\WINDOWS\system32\RtlCPAPI.dll
2009-08-25 09:47:54 ----R---- C:\WINDOWS\soundman.exe
2009-08-25 09:47:53 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-08-25 09:47:51 ----D---- C:\Program Files\Realtek Sound Manager
2009-08-25 09:47:49 ----R---- C:\WINDOWS\avrack.ini
2009-08-25 09:47:49 ----D---- C:\Program Files\AvRack
2009-08-25 09:47:40 ----D---- C:\Program Files\Realtek AC97
2009-08-25 09:47:26 ----RA---- C:\WINDOWS\Alcrmv.exe
2009-08-25 09:47:26 ----R---- C:\WINDOWS\alcupd.exe
2009-08-25 09:47:24 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-25 09:44:14 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-08-25 09:44:05 ----D---- C:\Program Files\Common Files\InstallShield
2009-08-25 09:40:36 ----D---- C:\Documents and Settings\Pawlak\Dane aplikacji\Identities
2009-08-25 09:40:35 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-08-25 09:40:34 ----HD---- C:\Program Files\Uninstall Information
2009-08-25 09:40:29 ----ASH---- C:\Documents and Settings\Pawlak\Dane aplikacji\desktop.ini
2009-08-25 09:40:28 ----SD---- C:\Documents and Settings\Pawlak\Dane aplikacji\Microsoft
2009-08-25 09:39:38 ----D---- C:\WINDOWS\SoftwareDistribution
2009-08-25 09:39:27 ----D---- C:\WINDOWS\Prefetch
2009-08-25 09:39:26 ----SD---- C:\WINDOWS\system32\Microsoft
2009-08-25 09:39:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-25 09:36:49 ----D---- C:\WINDOWS\system32\xircom
2009-08-25 09:36:49 ----D---- C:\Program Files\xerox
2009-08-25 09:36:49 ----D---- C:\Program Files\microsoft frontpage
2009-08-25 09:36:45 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-08-25 09:36:44 ----HD---- C:\WINDOWS\$hf_mig$
2009-08-25 09:36:31 ----A---- C:\WINDOWS\control.ini
2009-08-25 09:36:31 ----A---- C:\AUTOEXEC.BAT
2009-08-25 09:36:21 ----A---- C:\WINDOWS\OEWABLog.txt
2009-08-25 09:36:18 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-08-25 09:35:38 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-08-25 09:35:38 ----RD---- C:\WINDOWS\Offline Web Pages
2009-08-25 09:35:38 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-08-25 09:35:33 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-08-25 09:35:29 ----HD---- C:\Program Files\WindowsUpdate
2009-08-25 09:35:26 ----D---- C:\Program Files\Usługi online
2009-08-25 09:35:14 ----D---- C:\WINDOWS\system32\DirectX
2009-08-25 09:34:58 ----A---- C:\WINDOWS\system32\atrace.dll
2009-08-25 09:34:56 ----A---- C:\WINDOWS\system32\desktop.ini
2009-08-25 09:34:56 ----A---- C:\WINDOWS\desktop.ini
2009-08-25 09:34:51 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-08-25 09:34:50 ----A---- C:\WINDOWS\system32\acctres.dll
2009-08-25 09:34:49 ----D---- C:\Program Files\Common Files\Services
2009-08-25 09:34:47 ----SD---- C:\WINDOWS\Tasks
2009-08-25 09:34:47 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-08-25 09:34:46 ----D---- C:\Program Files\Common Files\MSSoap
2009-08-25 09:34:43 ----D---- C:\WINDOWS\system32\Macromed
2009-08-25 09:34:43 ----D---- C:\WINDOWS\srchasst
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\wups.dll
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-08-25 09:34:40 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-08-25 09:34:39 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-08-25 09:34:39 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-08-25 09:34:36 ----D---- C:\Program Files\Movie Maker
2009-08-25 09:34:33 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-08-25 09:34:33 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-08-25 09:34:33 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-08-25 09:34:33 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-08-25 09:34:31 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-08-25 09:34:31 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-08-25 09:34:30 ----D---- C:\WINDOWS\system32\Restore
2009-08-25 09:34:30 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-08-25 09:34:30 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-08-25 09:34:30 ----A---- C:\WINDOWS\system32\srclient.dll
2009-08-25 09:34:30 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-08-25 09:34:30 ----A---- C:\WINDOWS\system32\ils.dll
2009-08-25 09:34:29 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-08-25 09:34:29 ----A---- C:\WINDOWS\system32\msconf.dll
2009-08-25 09:34:29 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-08-25 09:34:29 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-08-25 09:34:27 ----D---- C:\Program Files\NetMeeting
2009-08-25 09:34:27 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-08-25 09:34:27 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-08-25 09:34:26 ----A---- C:\WINDOWS\system32\inetres.dll
2009-08-25 09:34:26 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-08-25 09:34:24 ----D---- C:\Program Files\Outlook Express
2009-08-25 09:34:24 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-08-25 09:34:24 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-08-25 09:34:24 ----A---- C:\WINDOWS\system32\mstask.dll
2009-08-25 09:34:24 ----A---- C:\WINDOWS\system32\isign32.dll
2009-08-25 09:34:24 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-08-25 09:34:24 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-08-25 09:34:24 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-08-25 09:34:19 ----D---- C:\Program Files\Internet Explorer
2009-08-25 09:34:19 ----D---- C:\Program Files\Common Files\System
2009-08-25 09:34:08 ----D---- C:\Program Files\ComPlus Applications
2009-08-25 09:34:06 ----A---- C:\WINDOWS\vbaddin.ini
2009-08-25 09:34:06 ----A---- C:\WINDOWS\vb.ini
2009-08-25 09:34:01 ----D---- C:\WINDOWS\Registration
2009-08-25 09:33:35 ----D---- C:\Program Files\Windows Media Player
2009-08-25 09:33:31 ----D---- C:\Program Files\Messenger
2009-08-25 09:33:28 ----D---- C:\Program Files\MSN Gaming Zone
2009-08-25 09:33:28 ----A---- C:\WINDOWS\system32\write.exe
2009-08-25 09:33:22 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-08-25 09:33:22 ----A---- C:\WINDOWS\system32\hticons.dll
2009-08-25 09:33:21 ----A---- C:\WINDOWS\system32\winchat.exe
2009-08-25 09:33:21 ----A---- C:\WINDOWS\system32\avwav.dll
2009-08-25 09:33:21 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-08-25 09:33:21 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-08-25 09:33:16 ----A---- C:\WINDOWS\system32\getuname.dll
2009-08-25 09:33:15 ----A---- C:\WINDOWS\system32\winmine.exe
2009-08-25 09:33:15 ----A---- C:\WINDOWS\system32\sol.exe
2009-08-25 09:33:15 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-08-25 09:33:15 ----A---- C:\WINDOWS\system32\charmap.exe
2009-08-25 09:33:15 ----A---- C:\WINDOWS\system32\calc.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\tskill.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\tscon.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\shadow.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\reset.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\regini.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\msg.exe
2009-08-25 09:33:14 ----A---- C:\WINDOWS\system32\freecell.exe
2009-08-25 09:33:13 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-08-25 09:33:13 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-08-25 09:33:13 ----A---- C:\WINDOWS\system32\logoff.exe
2009-08-25 09:33:13 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-08-25 09:33:13 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-08-25 09:33:12 ----A---- C:\WINDOWS\system32\stclient.dll
2009-08-25 09:33:12 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-08-25 09:33:12 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-08-25 09:33:12 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-08-25 09:33:12 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-08-25 09:33:12 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-08-25 09:33:08 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-08-25 09:33:08 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-08-25 09:33:08 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-08-25 09:33:07 ----D---- C:\Program Files\Windows NT
2009-08-25 09:33:07 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-08-25 09:33:07 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-08-25 09:33:07 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-08-25 09:33:07 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-08-25 09:33:06 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-08-25 09:33:06 ----A---- C:\WINDOWS\system32\spider.exe
2009-08-25 09:33:06 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-08-25 09:33:06 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-08-25 09:33:05 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-08-25 09:33:04 ----D---- C:\WINDOWS\system32\MsDtc
2009-08-25 09:33:04 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-08-25 09:33:04 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-08-25 09:33:04 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-08-25 09:33:04 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-08-25 09:33:04 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-08-25 09:33:04 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-08-25 09:33:04 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-08-25 09:33:04 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-08-25 09:33:03 ----D---- C:\WINDOWS\system32\Com
2009-08-25 09:33:03 ----A---- C:\WINDOWS\system32\colbact.dll
2009-08-25 09:33:03 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-08-25 09:33:03 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-08-25 09:33:02 ----A---- C:\WINDOWS\system32\comuid.dll
2009-08-25 09:33:02 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-08-25 09:33:02 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-08-25 09:33:02 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-08-25 09:33:02 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-08-25 09:32:58 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-08-25 09:32:58 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-08-25 09:32:58 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-08-25 09:32:58 ----A---- C:\WINDOWS\system32\cmprops.dll
======List of files/folders modified in the last 1 months======
2009-08-25 11:25:33 ----A---- C:\WINDOWS\system.ini
2009-08-25 09:36:31 ----A---- C:\WINDOWS\win.ini
2009-08-05 11:08:09 ----A---- C:\WINDOWS\system32\mswebdvd.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-08-17 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-08-17 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-08-17 51376]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-08-17 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-08-17 94160]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-02-17 3846848]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-08-17 23152]
R3 HidUsb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-06-01 3925920]
R3 rtl8139;Sterownik NT karty Realtek RTL8139(A/B/C)-based PCI Fast Ethernet; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2006-03-02 26624]
R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2006-03-02 57600]
R3 usbstor;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-03-02 26496]
R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2006-03-02 20480]
S3 GMSIPCI;GMSIPCI; \??\H:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-08-30 25280]
S3 NTACCESS;NTACCESS; \??\H:\NTACCESS.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\H:\NTGLM7X.sys []
S3 usbscan;Sterownik skanera USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-08-17 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-08-17 138680]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-08-25 153376]
R2 mysql;mysql; c:\xampp\mysql\bin\mysqld-nt.exe [2008-04-17 5750784]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-06-01 155715]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-08-17 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-08-17 352920]
S2 Apache2.2;Apache2.2; c:\xampp\apache\bin\apache.exe [2008-06-14 17408]
S2 XAMPP;XAMPP Service; c:\xampp\service.exe [2007-12-21 60928]
S3 aspnet_state;Usługa stanu ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-08-25 182768]
-----------------EOF-----------------
przez Okocza 30 Sie 2009, 22:09
przez Ex'tail 30 Sie 2009, 22:27
aComboFix 09-08-30.01 - Pawlak 2009-08-30 22:18.1.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.48.1045.18.1022.567 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Pawlak\Pulpit\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 090830-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\burnlib.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\dsp_sps.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\enc_aacplus.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\enc_flac.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\enc_flake.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\enc_lame.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\enc_vorbis.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\enc_wav.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\enc_wma.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\gen_crasher.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\gen_dropbox.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\gen_ff.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\gen_hotkeys.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\gen_ml.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\gen_tray.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_cdda.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_dshow.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_flac.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_flv.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_linein.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_midi.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_mod.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_mp3.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_mp4.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_nsv.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_swf.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_vorbis.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_wav.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_wave.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_wm.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\in_wv.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_autotag.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_bookmarks.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_dash.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_disc.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_history.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_impex.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_local.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_nowplaying.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_online.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_orb.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_playlists.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_plg.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_pmp.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_rg.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_transcode.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\ml_wire.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\out_disk.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\out_ds.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\out_wave.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\playlist.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\pmp_activesync.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\pmp_ipod.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\pmp_njb.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\pmp_p4s.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\pmp_usb.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\tagz.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\vis_avs.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\vis_milk2.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\vis_nsfs.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\winamp.lng
c:\docume~1\Pawlak\USTAWI~1\Temp\WLZC880.tmp\winampa.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\burnlib.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\dsp_sps.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\enc_aacplus.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\enc_flac.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\enc_flake.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\enc_lame.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\enc_vorbis.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\enc_wav.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\enc_wma.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\gen_crasher.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\gen_dropbox.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\gen_ff.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\gen_hotkeys.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\gen_ml.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\gen_tray.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_cdda.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_dshow.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_flac.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_flv.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_linein.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_midi.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_mod.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_mp3.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_mp4.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_nsv.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_swf.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_vorbis.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_wav.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_wave.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_wm.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\in_wv.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_autotag.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_bookmarks.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_dash.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_disc.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_history.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_impex.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_local.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_nowplaying.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_online.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_orb.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_playlists.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_plg.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_pmp.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_rg.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_transcode.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\ml_wire.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\out_disk.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\out_ds.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\out_wave.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\playlist.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\pmp_activesync.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\pmp_ipod.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\pmp_njb.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\pmp_p4s.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\pmp_usb.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\tagz.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\vis_avs.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\vis_milk2.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\vis_nsfs.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\winamp.lng
c:\documents and settings\Pawlak\Ustawienia lokalne\Temp\WLZC880.tmp\winampa.lng
c:\program files\AskSearch\bin\DefaultSearch.dll
c:\windows\system32\ieuinit.inf
c:\windows\system32\Ijl11.dll
.
((((((((((((((((((((((((( Pliki utworzone od 2009-07-28 do 2009-08-30 )))))))))))))))))))))))))))))))
.
2009-08-30 19:45 . 2009-08-30 20:08 -------- d-----w- c:\program files\trend micro
2009-08-30 19:45 . 2009-08-30 19:46 -------- d-----w- C:\rsit
2009-08-30 07:19 . 2009-08-30 07:19 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\Native Instruments
2009-08-30 07:00 . 2009-08-30 07:02 -------- d-----w- c:\program files\Native Instruments
2009-08-30 06:39 . 2009-08-30 06:39 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\MakeitOne
2009-08-30 06:39 . 2009-08-30 06:39 3774 ----a-r- c:\documents and settings\Pawlak\Dane aplikacji\Microsoft\Installer\{DD6FA976-3F0A-4C6C-A30F-6E75DFC39DE9}\_4ae13d6c.exe
2009-08-30 06:39 . 2009-08-30 06:39 3774 ----a-r- c:\documents and settings\Pawlak\Dane aplikacji\Microsoft\Installer\{DD6FA976-3F0A-4C6C-A30F-6E75DFC39DE9}\_2cd672ae.exe
2009-08-30 06:39 . 2009-08-30 06:39 -------- d-----w- c:\program files\MakeitOne
2009-08-30 06:36 . 2009-08-30 06:36 -------- d-----w- c:\program files\WMV9_VCM
2009-08-30 06:36 . 2009-08-30 06:36 -------- d-----w- c:\windows\system32\djaud
2009-08-30 06:35 . 2009-08-30 06:36 -------- d-----w- c:\program files\Video DJ
2009-08-30 06:35 . 2009-08-30 06:35 -------- d-----w- c:\windows\Video DJ
2009-08-30 06:08 . 2009-08-30 06:08 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\Tibia
2009-08-30 06:08 . 2009-08-30 06:08 -------- d-----w- c:\program files\Tibia
2009-08-30 01:51 . 2009-08-30 01:51 35328 ----a-w- c:\windows\ina32.dll
2009-08-30 01:51 . 2009-08-30 01:51 -------- d-----w- c:\program files\Asprate
2009-08-30 00:53 . 2009-08-30 18:11 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\Hamachi
2009-08-30 00:53 . 2009-08-30 00:53 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2009-08-29 20:54 . 2009-08-29 20:54 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\teamspeak2
2009-08-29 20:54 . 2009-08-29 20:54 -------- d-----w- c:\program files\Teamspeak2_RC2
2009-08-29 12:46 . 2009-08-29 21:32 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\MagicBall3
2009-08-29 06:21 . 2009-08-29 06:21 -------- d-----w- c:\program files\Gambana
2009-08-29 06:16 . 2009-08-29 06:16 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\TeamViewer
2009-08-29 06:16 . 2009-08-29 06:16 -------- d-----w- c:\program files\TeamViewer3
2009-08-29 06:14 . 2009-08-29 06:14 -------- d-----w- c:\documents and settings\Pawlak\temp
2009-08-29 02:26 . 2009-08-29 03:57 -------- d-----w- c:\windows\system32\CatRoot_bak
2009-08-28 15:23 . 2009-08-28 15:23 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\Identities
2009-08-27 23:37 . 2009-08-27 23:37 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\DBKO
2009-08-27 21:57 . 2009-08-27 22:05 -------- d-----w- c:\program files\Picasa2
2009-08-27 18:16 . 2009-08-27 18:16 0 ----a-w- c:\windows\nsreg.dat
2009-08-27 18:16 . 2009-08-27 18:16 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\Mozilla
2009-08-27 18:07 . 1998-01-23 12:15 304640 ----a-w- c:\windows\IsUn0415.exe
2009-08-27 18:07 . 2009-08-27 18:07 -------- d-----w- c:\documents and settings\Pawlak\WINDOWS
2009-08-26 15:24 . 2009-08-26 15:24 -------- d-----w- c:\documents and settings\Pawlak\.gstreamer-0.10
2009-08-26 15:24 . 2009-08-29 12:46 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\OpenFM
2009-08-26 15:24 . 2009-08-26 15:24 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\OpenFM
2009-08-26 06:49 . 2009-08-26 06:49 -------- d-----w- c:\windows\ServicePackFiles
2009-08-26 05:02 . 2008-10-24 11:10 453632 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2009-08-26 02:30 . 2008-06-14 18:01 273024 -c----w- c:\windows\system32\dllcache\bthport.sys
2009-08-26 02:30 . 2008-06-14 18:01 273024 ------w- c:\windows\system32\drivers\bthport.sys
2009-08-26 01:01 . 2000-07-08 13:06 87040 ----a-w- c:\windows\UnGins.exe
2009-08-26 01:00 . 2008-07-09 07:57 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2009-08-26 00:58 . 2000-03-06 22:00 237568 ----a-w- c:\windows\system32\Unlha32.dll
2009-08-26 00:58 . 2009-08-26 00:58 -------- d-----w- c:\program files\ASCII
2009-08-26 00:58 . 2000-03-06 22:00 473600 ----a-w- c:\windows\system32\Harmony.dll
2009-08-25 22:01 . 2001-08-17 20:02 9600 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2009-08-25 22:01 . 2001-08-17 20:02 9600 ----a-w- c:\windows\system32\drivers\hidusb.sys
2009-08-25 19:30 . 2009-08-30 18:08 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\BitTorrent
2009-08-25 19:30 . 2009-08-25 19:30 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\DNA
2009-08-25 19:30 . 2009-08-30 20:21 -------- d-----w- c:\program files\DNA
2009-08-25 19:30 . 2009-08-30 20:21 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\DNA
2009-08-25 19:30 . 2009-08-25 19:30 -------- d-----w- c:\program files\BitTorrent
2009-08-25 19:30 . 2009-08-26 10:03 -------- d-----w- c:\program files\AskBarDis
2009-08-25 19:30 . 2009-08-25 19:30 -------- d-----w- c:\program files\AskSearch
2009-08-25 19:26 . 2009-08-25 19:26 -------- d-----w- C:\My Shared Folder
2009-08-25 19:26 . 2009-08-25 19:27 -------- d-----w- c:\program files\Torrent Searcher 6
2009-08-25 19:26 . 2009-08-25 19:24 4805418 ----a-w- C:\torrentsearcher-6.0.exe
2009-08-25 19:26 . 2009-08-25 19:26 -------- d-----w- c:\program files\VVSN
2009-08-25 19:05 . 2009-08-27 22:05 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\Google
2009-08-25 17:11 . 2009-08-30 18:10 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\skypePM
2009-08-25 17:11 . 2009-08-25 17:11 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-08-25 17:09 . 2009-08-30 20:21 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\Skype
2009-08-25 17:09 . 2009-08-25 17:10 -------- d-----w- c:\program files\Google
2009-08-25 17:08 . 2009-08-25 17:08 -------- d-----w- c:\program files\Common Files\Skype
2009-08-25 17:08 . 2009-08-25 17:09 -------- d-----r- c:\program files\Skype
2009-08-25 17:08 . 2009-08-25 17:08 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Skype
2009-08-25 16:48 . 2009-08-25 16:48 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\WMTools Downloaded Files
2009-08-25 12:30 . 2009-08-25 12:30 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\WoDBO
2009-08-25 12:25 . 2009-08-25 12:25 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\Winamp Toolbar
2009-08-25 12:21 . 2009-08-28 20:54 -------- d-----w- C:\xampp
2009-08-25 12:18 . 2009-08-25 12:18 -------- d-----w- c:\program files\Winamp Toolbar
2009-08-25 12:18 . 2009-08-25 12:18 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Winamp Toolbar
2009-08-25 12:10 . 2009-08-26 09:49 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\Nowe Gadu-Gadu
2009-08-25 12:10 . 2009-08-30 16:08 -------- d-----w- c:\program files\Nowe Gadu-Gadu
2009-08-25 10:17 . 2009-08-25 10:17 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\Ahead
2009-08-25 10:12 . 2009-08-25 10:12 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\HP
2009-08-25 10:11 . 2009-08-25 10:11 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\IsolatedStorage
2009-08-25 10:11 . 2009-08-25 10:11 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\HP
2009-08-25 10:11 . 2009-08-30 06:42 -------- d-----w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\ApplicationHistory
2009-08-25 10:11 . 2009-08-25 10:11 131 ----a-w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
2009-08-25 10:04 . 2001-10-26 15:29 5632 ----a-w- c:\windows\system32\ptpusb.dll
2009-08-25 10:04 . 2004-08-03 22:44 159232 ----a-w- c:\windows\system32\ptpusd.dll
2009-08-25 10:04 . 2004-08-03 20:58 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2009-08-25 10:04 . 2004-08-03 20:58 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2009-08-25 10:03 . 2009-08-25 10:03 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\HP
2009-08-25 10:02 . 2009-08-25 10:02 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Sonic
2009-08-25 10:00 . 2009-08-25 10:00 -------- d-----w- c:\windows\system32\URTTemp
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-30 19:57 . 2009-08-25 12:15 -------- d-----w- c:\documents and settings\Pawlak\Dane aplikacji\Winamp
2009-08-30 07:19 . 2009-08-25 07:35 76487 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-08-30 06:39 . 2009-08-25 09:56 12328 ----a-w- c:\documents and settings\Pawlak\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2009-08-26 07:02 . 2006-03-02 12:00 67078 ----a-w- c:\windows\system32\perfc015.dat
2009-08-26 07:02 . 2006-03-02 12:00 435978 ----a-w- c:\windows\system32\perfh015.dat
2009-08-26 06:23 . 2009-08-26 06:23 -------- d-----w- c:\program files\Alwil Software
2009-08-25 12:18 . 2009-08-25 12:15 -------- d-----w- c:\program files\Winamp
2009-08-25 10:27 . 2009-08-25 09:58 -------- d-----w- c:\program files\HP
2009-08-25 10:03 . 2009-08-25 09:56 101515 ----a-w- c:\windows\hpiins04.dat
2009-08-25 09:51 . 2009-08-25 09:49 -------- d-----w- c:\program files\Ahead
2009-08-25 09:50 . 2009-08-25 09:50 -------- d-----w- c:\program files\Common Files\Nero
2009-08-25 09:49 . 2009-08-25 09:49 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Ahead
2009-08-25 09:49 . 2009-08-25 09:49 -------- d-----w- c:\program files\Common Files\Ahead
2009-08-25 08:05 . 2009-08-25 08:05 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-08-25 08:05 . 2009-08-25 08:05 -------- d-----w- c:\program files\Java
2009-08-25 08:04 . 2009-08-25 08:04 152576 ----a-w- c:\documents and settings\Pawlak\Dane aplikacji\Sun\Java\jre1.6.0_15\lzma.dll
2009-08-25 07:47 . 2009-08-25 07:47 -------- d-----w- c:\program files\Realtek Sound Manager
2009-08-25 07:47 . 2009-08-25 07:47 -------- d-----w- c:\program files\AvRack
2009-08-25 07:47 . 2009-08-25 07:47 -------- d-----w- c:\program files\Realtek AC97
2009-08-25 07:47 . 2009-08-25 07:47 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-08-25 07:44 . 2009-08-25 07:44 -------- d-----w- c:\program files\Common Files\InstallShield
2009-08-25 07:36 . 2009-08-25 07:36 -------- d-----w- c:\program files\microsoft frontpage
2009-08-25 07:35 . 2009-08-25 07:35 -------- d-----w- c:\program files\Usługi online
2009-08-25 07:34 . 2009-08-25 07:34 21856 ----a-w- c:\windows\system32\emptyregdb.dat
2009-08-17 16:10 . 2009-08-26 06:23 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-08-26 06:23 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-08-26 06:23 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-08-26 06:23 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-08-26 06:23 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-08-26 06:23 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-08-26 06:23 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-08-26 06:23 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-08-26 06:23 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-05 09:08 . 2006-03-02 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-29 04:54 . 2006-03-02 12:00 82432 ----a-w- c:\windows\system32\fontsub.dll
2009-07-29 04:54 . 2006-03-02 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-27 15:42 . 2009-07-27 15:42 42088 ----a-w- c:\documents and settings\Pawlak\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
2009-07-17 18:57 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 00:18 . 2006-03-02 12:00 233472 ----a-w- c:\windows\system32\wmpdxm.dll
2009-06-26 16:19 . 2006-03-02 12:00 662016 ----a-w- c:\windows\system32\wininet.dll
2009-06-26 16:19 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-06-15 11:33 . 2006-03-02 12:00 78336 ----a-w- c:\windows\system32\telnet.exe
2009-06-10 14:25 . 2006-03-02 12:00 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 06:31 . 2006-03-02 12:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-05 07:46 . 2009-08-25 07:33 655872 ----a-w- c:\windows\system32\mstscax.dll
2009-06-03 19:27 . 2006-03-02 12:00 1294336 ----a-w- c:\windows\system32\quartz.dll
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}"= "c:\program files\Winamp Toolbar\winamptb.dll" [2009-05-06 1262888]
[HKEY_CLASSES_ROOT\clsid\{57bca5fa-5dbb-45a2-b558-1755c3f6253b}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-09-29 15:24 325000 ----a-w- c:\program files\AskBarDis\bar\bin\askBar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 325000]
[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 325000]
[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Nowe Gadu-Gadu"="c:\program files\Nowe Gadu-Gadu\gg.exe" [2009-07-27 10719848]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-07-16 25604904]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-25 39408]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-08-25 321344]
"Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-08-21 443968]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-25 149280]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-06-01 7618560]
"SW20"="c:\windows\system32\sw20.exe" [2006-05-18 208896]
"SW24"="c:\windows\system32\sw24.exe" [2006-05-17 69632]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-04-10 37888]
"VVSN"="c:\program files\VVSN\VVSN.exe" [2004-12-22 107520]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\soundman.exe [2006-01-11 577536]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-06-01 1519616]
"NvMediaCenter"="NvMCTray.dll" - c:\windows\system32\nvmctray.dll [2006-06-01 86016]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2006-03-02 15360]
c:\documents and settings\Pawlak\Menu Start\Programy\Autostart\
cvs32.exe [2009-8-30 169984]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Nowe Gadu-Gadu\\gg.exe"=
"c:\\xampp\\apache\\bin\\apache.exe"=
"c:\\xampp\\mysql\\bin\\mysqld.exe"=
"c:\\Program Files\\Torrent Searcher 6\\giFT\\giFTl.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\TeamViewer3\\TeamViewer.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-08-26 114768]
R2 Apache2.2;Apache2.2;c:\xampp\apache\bin\apache.exe [2008-06-14 17408]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-08-26 20560]
S2 XAMPP;XAMPP Service;c:\xampp\service.exe [2007-12-21 60928]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\h:\ntglm7x.sys --> h:\NTGLM7X.sys [?]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://google.pl/
uSearch Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com/ie
uSearch Bar = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Winamp Search - c:\documents and settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
FF - ProfilePath - c:\documents and settings\Pawlak\Dane aplikacji\Mozilla\Firefox\Profiles\phledw8w.default\
FF - plugin: c:\program files\Picasa2\npPicasa2.dll
FF - plugin: c:\program files\Picasa2\npPicasa3.dll
---- FIREFOX - SPOSÓB POSTĘPOWANIA ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-30 22:21
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
- - - - - - - > 'explorer.exe'(1356)
c:\windows\system32\msi.dll
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\xampp\mysql\bin\mysqld-nt.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\nvsvc32.exe
c:\documents and settings\Pawlak\Menu Start\Programy\Autostart\cvs32.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Czas ukończenia: 2009-08-30 22:24 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt 2009-08-30 20:24
Przed: 138 135 814 144 bajtów wolnych
Po: 138 262 507 520 bajtów wolnych
WindowsXP-KB310994-SP2-Home-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
454 --- E O F --- 2009-08-27 01:01
przez Okocza 30 Sie 2009, 22:33
przez wojtas 31 Sie 2009, 10:27
c:\program files\AskBarDis
c:\program files\AskSearch
c:\program files\VVSN
c:\documents and settings\Pawlak\Menu Start\Programy\Autostart\cvs32.exe
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SW20"=-
"SW24"=-
"VVSN"=-
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 1 gość