Forum komputerowe PC Town :: Zobacz temat - Bardzo proszę o analizę loga z Hijackthis

Forum PC Town

Strona Główna

FAQ

Szukaj

Użytkownicy

Grupy

Rejestracja

Zaloguj

Forum komputerowe PC Town Strona Główna » Kompiradło » Bezpieczeństwo w sieci » Analiza logów » Bardzo proszę o analizę loga z Hijackthis - help

Poprzedni temat :: Następny temat

Bardzo proszę o analizę loga z Hijackthis - help

Autor

Wiadomość

lordbarth

Wysłany: 2010-03-01, 22:49

////////////////////////////////////////// Avenger Pre-Processor log ////////////////////////////////////////// Platform: Windows XP (build 2600, Dodatek Service Pack 3) Mon Mar 01 22:32:21 2010 22:32:20: Error: Invalid script. A valid script must begin with a command directive. Aborting execution! ////////////////////////////////////////// ////////////////////////////////////////// Avenger Pre-Processor log ////////////////////////////////////////// Platform: Windows XP (build 2600, Dodatek Service Pack 3) Mon Mar 01 22:32:51 2010 22:32:51: Error: Invalid script. A valid script must begin with a command directive. Aborting execution! ////////////////////////////////////////// Logfile of The Avenger Version 2.0, (c) by Swandog46 http://swandog46.geekstogo.com Platform: Windows XP ***************** Script file opened successfully. Script file read successfully. Backups directory opened successfully at C:\Avenger *************** Beginning to process script file: Rootkit scan active. No rootkits found! Error: could not open file "c:\documents and settings\Michaˆ\Menu Start\Programy\Autostart\ihaupd32.exe" Deletion of file "c:\documents and settings\Michaˆ\Menu Start\Programy\Autostart\ihaupd32.exe" failed! Status: 0xc000003a (STATUS_OBJECT_PATH_NOT_FOUND) bad path / the parent directory does not exist Completed script processing. ***************** Finished! Terminate.

@Blade@

Pomógł: 8 razy

Wysłany: 2010-03-02, 09:09

Podaj jeszcze nowy log z OTL, bo chcę widzieć jak to wygląda teraz.
_________________

lordbarth

Wysłany: 2010-03-02, 18:00

OTL logfile created on: 2010-03-02 17:44:05 - Run 2 OTL by OldTimer - Version 3.1.30.3 Folder = C:\Documents and Settings\Administrator\Pulpit Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 \| Country: Polska \| Language: PLK \| Date Format: yyyy-MM-dd 502,00 Mb Total Physical Memory \| 402,00 Mb Available Physical Memory \| 80,00% Memory free 1,00 Gb Paging File \| 1,00 Gb Available in Paging File \| 96,00% Paging File free Paging file location(s): C:\pagefile.sys 756 1512 [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\WINDOWS \| %ProgramFiles% = C:\Program Files Drive C: \| 74,53 Gb Total Space \| 45,46 Gb Free Space \| 61,00% Space Free \| Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: GADŻET Current User Name: Administrator Logged in as Administrator. Current Boot Mode: SafeMode Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-02-27 16:18:08 \| 000,549,888 \| ---- \| M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe PRC - [2008-04-14 18:21:16 \| 001,035,264 \| ---- \| M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe ========== Modules (SafeList) ========== MOD - [2010-02-27 16:18:08 \| 000,549,888 \| ---- \| M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe ========== Win32 Services (SafeList) ========== SRV - [2010-02-11 19:53:39 \| 000,040,384 \| ---- \| M] (ALWIL Software) [On_Demand \| Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV - [2010-02-11 19:53:39 \| 000,040,384 \| ---- \| M] (ALWIL Software) [On_Demand \| Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV - [2010-02-11 19:53:39 \| 000,040,384 \| ---- \| M] (ALWIL Software) [Auto \| Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-02-10 15:33:16 \| 000,194,032 \| ---- \| M] (Google) [Auto \| Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc) SRV - [2010-02-10 14:35:52 \| 000,135,664 \| ---- \| M] (Google Inc.) [Auto \| Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate) Usługa Google Update (gupdate) SRV - [2006-05-25 17:30:16 \| 000,114,688 \| ---- \| M] (TOSHIBA Corporation) [Auto \| Stopped] -- C:\WINDOWS\system32\TODDSrv.exe -- (TODDSrv) SRV - [2005-11-28 11:31:32 \| 000,540,745 \| ---- \| M] (Intel Corporation ) [Auto \| Stopped] -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe -- (S24EventMonitor) Intel(R) SRV - [2005-11-28 11:29:00 \| 000,114,753 \| ---- \| M] (Intel Corporation) [Auto \| Stopped] -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2005-11-28 11:28:14 \| 000,217,164 \| ---- \| M] (Intel Corporation) [Auto \| Stopped] -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe -- (RegSrvc) Intel(R) SRV - [2005-01-18 00:38:38 \| 000,040,960 \| ---- \| M] (TOSHIBA CORPORATION) [Auto \| Stopped] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs) SRV - [2004-07-15 00:49:26 \| 000,032,768 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe -- (aspnet_state) SRV - [2003-07-28 19:28:22 \| 000,089,136 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) ========== Driver Services (SafeList) ========== DRV - [2010-02-11 19:42:34 \| 000,046,672 \| ---- \| M] (ALWIL Software) [Kernel \| System \| Stopped] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi) DRV - [2010-02-11 19:42:13 \| 000,162,512 \| ---- \| M] (ALWIL Software) [Kernel \| System \| Stopped] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP) DRV - [2010-02-11 19:39:01 \| 000,023,376 \| ---- \| M] (ALWIL Software) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr) DRV - [2010-02-11 19:38:34 \| 000,100,432 \| ---- \| M] (ALWIL Software) [File_System \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2) DRV - [2010-02-11 19:38:23 \| 000,019,024 \| ---- \| M] (ALWIL Software) [File_System \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-02-11 19:38:07 \| 000,028,880 \| ---- \| M] (ALWIL Software) [Kernel \| System \| Stopped] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2010-02-10 16:12:24 \| 000,691,696 \| ---- \| M] (Duplex Secure Ltd.) [Kernel \| Boot \| Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-02-10 14:12:41 \| 000,021,275 \| ---- \| M] (Meetinghouse Data Communications) [Kernel \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\AegisP.sys -- (AegisP) AEGIS Protocol (IEEE 802.1x) DRV - [2008-11-20 20:19:06 \| 000,043,872 \| ---- \| M] (Sonic Solutions) [Kernel \| Boot \| Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2008-04-13 17:36:05 \| 000,144,384 \| ---- \| M] (Windows (R) Server 2003 DDK provider) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2006-04-25 08:01:48 \| 000,043,776 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\Tvs.sys -- (Tvs) DRV - [2006-04-25 01:00:46 \| 000,083,584 \| ---- \| M] (Realtek Semiconductor Corporation ) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2006-04-18 14:12:00 \| 000,098,816 \| ---- \| M] (TOSHIBA Corporation) [File_System \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\tdudf.sys -- (tdudf) DRV - [2006-04-18 00:31:26 \| 004,262,912 \| ---- \| M] (Realtek Semiconductor Corp.) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2006-03-23 17:59:36 \| 000,037,888 \| ---- \| M] (ENE Technology Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\ESD7SK.sys -- (ESDCR) DRV - [2006-03-23 17:59:32 \| 000,074,752 \| ---- \| M] (ENE Technology Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\ESM7SK.sys -- (ESMCR) DRV - [2006-03-23 17:59:28 \| 000,061,056 \| ---- \| M] (ENE Technology Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\EMS7SK.sys -- (EMSCR) DRV - [2006-03-18 15:36:42 \| 001,155,584 \| R--- \| M] (Agere Systems) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2006-03-02 17:49:50 \| 000,015,360 \| ---- \| M] (TOSHIBA Corporation.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\tdcmdpst.sys -- (tdcmdpst) DRV - [2006-02-07 17:04:34 \| 001,399,615 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\ialmnt5.sys -- (ialm) DRV - [2006-01-05 15:31:20 \| 000,011,264 \| ---- \| M] (TOSHIBA ) [Kernel \| System \| Stopped] -- C:\WINDOWS\system32\drivers\TPwSav.sys -- (TPwSav) DRV - [2005-12-05 09:55:30 \| 001,428,096 \| ---- \| M] (Intel® Corporation) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51) Intel(R) DRV - [2005-11-28 12:09:26 \| 000,013,568 \| ---- \| M] (Intel Corporation) [Kernel \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2004-11-16 00:22:08 \| 000,101,874 \| ---- \| M] (Alps Electric Co., Ltd.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2004-08-04 11:00:00 \| 000,017,792 \| ---- \| M] (Parallel Technologies, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2003-09-19 00:47:00 \| 000,010,368 \| ---- \| M] (Padus, Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (Pfc) DRV - [2003-09-10 22:36:54 \| 000,021,060 \| ---- \| M] (InterVideo, Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\iviaspi.sys -- (Iviaspi) DRV - [2003-01-29 22:35:00 \| 000,012,032 \| ---- \| M] (TOSHIBA Corporation.) [Kernel \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\Netdevio.sys -- (Netdevio) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\S-1-5-21-3441589714-2377351355-1460125659-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-02-19 15:41:48 \| 000,000,000 \| ---D \| M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-02-19 15:41:48 \| 000,000,000 \| ---D \| M] [2010-02-10 15:46:36 \| 000,000,000 \| ---D \| M] -- C:\Program Files\Mozilla Firefox\extensions [2009-12-22 04:48:34 \| 000,002,767 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-12-22 04:48:34 \| 000,001,406 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-12-22 04:48:34 \| 000,000,917 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-12-22 04:48:34 \| 000,000,858 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-12-22 04:48:34 \| 000,001,183 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-12-22 04:48:34 \| 000,001,683 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-03-01 20:28:10 \| 000,000,027 \| ---- \| M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found. O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.) O4 - HKLM..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe (COMPAL ELECTRONIC INC.) O4 - HKLM..\Run: [DDWMon] C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe () O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe (TOSHIBA CO.,LTD.) O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation) O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation) O4 - HKLM..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe (TOSHIBA) O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\Program narzędziowy TOSHIBA Zooming Utility\SmoothView.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe (TOSHIBA) O4 - HKLM..\Run: [TCtryIOHook] C:\WINDOWS\System32\TCtrlIOHook.exe (TOSHIBA) O4 - HKLM..\Run: [TFncKy] File not found O4 - HKLM..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe (COMPAL ELECTRONIC INC.) O4 - HKLM..\Run: [TPSMain] C:\WINDOWS\System32\TPSMain.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [Zooming] C:\WINDOWS\System32\ZoomingHook.exe (TOSHIBA) O4 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500..\Run: [swg] File not found O4 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - Startup: C:\Documents and Settings\Michał\Menu Start\Programy\Autostart\ihaupd32.exe (TWX Corp.) O4 - Startup: C:\Documents and Settings\Michał\Menu Start\Programy\Autostart\Szybkie uruchamianie programu Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\NPJPI150_06.dll (Sun Microsystems, Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.5.0_06) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.134.128.19 213.134.128.20 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-06-07 17:05:15 \| 000,000,000 \| ---- \| M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk ) - File not found O35 - comfile [open] -- "%1" % O35 - exefile [open] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010-03-01 22:35:35 \| 000,000,000 \| ---D \| C] -- C:\Avenger [2010-03-01 20:25:25 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\temp [2010-03-01 20:17:51 \| 000,000,000 \| ---D \| C] -- C:\ComboFix [2010-02-28 15:38:50 \| 000,212,480 \| ---- \| C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010-02-28 15:38:50 \| 000,161,792 \| ---- \| C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010-02-28 15:38:50 \| 000,136,704 \| ---- \| C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010-02-28 15:38:50 \| 000,031,232 \| ---- \| C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010-02-28 15:38:45 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\ERDNT [2010-02-28 15:36:36 \| 000,000,000 \| ---D \| C] -- C:\Qoobox [2010-02-28 09:38:03 \| 001,830,424 \| ---- \| C] (Smallfrogs Studio) -- C:\Documents and Settings\Administrator\Pulpit\SREngLdr.EXE [2010-02-28 09:38:03 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Pulpit\Upload [2010-02-27 20:07:14 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\DoctorWeb [2010-02-27 20:01:16 \| 005,115,824 \| ---- \| C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Administrator\Pulpit\mbam-setup.exe [2010-02-27 20:01:00 \| 000,549,888 \| ---- \| C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe [2010-02-27 19:59:21 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Pulpit\autorun.inf [2010-02-27 14:54:23 \| 000,000,000 \| -HSD \| C] -- C:\Documents and Settings\Administrator\IETldCache [2010-02-27 14:53:38 \| 000,000,000 \| --SD \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Microsoft [2010-02-27 14:53:38 \| 000,000,000 \| RH-D \| C] -- C:\Documents and Settings\Administrator\SendTo [2010-02-27 14:53:38 \| 000,000,000 \| RH-D \| C] -- C:\Documents and Settings\Administrator\Recent [2010-02-27 14:53:38 \| 000,000,000 \| RH-D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Ulubione [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Moje obrazy [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Moje dokumenty [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Moja muzyka [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Menu Start [2010-02-27 14:53:38 \| 000,000,000 \| -HSD \| C] -- C:\Documents and Settings\Administrator\Cookies [2010-02-27 14:53:38 \| 000,000,000 \| -H-D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne [2010-02-27 14:53:38 \| 000,000,000 \| -H-D \| C] -- C:\Documents and Settings\Administrator\Szablony [2010-02-27 14:53:38 \| 000,000,000 \| -H-D \| C] -- C:\Documents and Settings\Administrator\PrintHood [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\WINDOWS [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\toshiba [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Pulpit [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Nethood [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Intel [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Identities [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\ApplicationHistory [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Application Data [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Adobe [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Adobe [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\{3248F0A6-6813-11D6-A77B-00B0D0150060} [2010-02-21 16:47:11 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-02-21 16:46:55 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\Prefetch [2010-02-21 16:12:43 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\l2schemas [2010-02-21 16:12:42 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\pl [2010-02-21 16:12:42 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\bits [2010-02-21 16:06:05 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\network diagnostic [2010-02-21 16:01:30 \| 000,000,000 \| -H-D \| C] -- C:\WINDOWS\$NtServicePackUninstall$ [2010-02-21 16:01:28 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\EHome [2010-02-13 08:20:00 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\ie8updates [2010-02-13 08:19:16 \| 001,985,536 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2010-02-13 08:19:16 \| 000,594,432 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2010-02-13 08:19:16 \| 000,055,296 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2010-02-13 08:19:15 \| 011,070,464 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2010-02-13 08:18:51 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\WBEM [2010-02-13 08:17:37 \| 000,000,000 \| -H-D \| C] -- C:\WINDOWS\ie8 [2010-02-13 08:17:37 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\pl-PL [2010-02-13 07:47:20 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Temp [2010-02-12 21:28:12 \| 000,025,471 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys [2010-02-12 21:28:12 \| 000,022,271 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys [2010-02-12 21:28:12 \| 000,011,935 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys [2010-02-12 21:28:12 \| 000,011,871 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys [2010-02-12 21:28:12 \| 000,011,807 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys [2010-02-12 21:28:12 \| 000,011,295 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys [2010-02-12 21:28:07 \| 000,095,424 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys [2010-02-12 21:28:07 \| 000,013,240 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys [2010-02-12 21:28:06 \| 000,404,990 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys [2010-02-12 21:28:06 \| 000,166,912 \| ---- \| C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys [2010-02-12 21:28:06 \| 000,129,535 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys [2010-02-12 21:28:05 \| 000,013,776 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys [2010-02-12 21:28:04 \| 001,897,408 \| ---- \| C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nv4_mini.sys [2010-02-12 21:28:04 \| 000,180,360 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys [2010-02-12 21:28:03 \| 001,309,184 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys [2010-02-12 21:28:03 \| 000,452,736 \| ---- \| C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys [2010-02-12 21:28:03 \| 000,126,686 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys [2010-02-12 21:28:00 \| 000,011,868 \| ---- \| C] (Conexant) -- C:\WINDOWS\System32\drivers\mdmxsdk.sys [2010-02-12 21:27:49 \| 001,041,536 \| ---- \| C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfdpsp2.sys [2010-02-12 21:27:49 \| 000,685,056 \| ---- \| C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfcxts2.sys [2010-02-12 21:27:49 \| 000,220,032 \| ---- \| C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfbs2s2.sys [2010-02-12 21:26:10 \| 000,073,216 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys [2010-02-12 21:26:10 \| 000,063,488 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys [2010-02-12 21:26:10 \| 000,031,744 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys [2010-02-12 21:26:10 \| 000,013,824 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys [2010-02-12 21:26:09 \| 000,701,440 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys [2010-02-12 21:26:09 \| 000,327,040 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys [2010-02-12 21:26:09 \| 000,104,960 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys [2010-02-12 21:26:09 \| 000,063,663 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys [2010-02-12 21:26:09 \| 000,057,856 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys [2010-02-12 21:26:09 \| 000,056,623 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys [2010-02-12 21:26:09 \| 000,052,224 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys [2010-02-12 21:26:09 \| 000,036,463 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys [2010-02-12 21:26:09 \| 000,034,735 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys [2010-02-12 21:26:09 \| 000,030,671 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys [2010-02-12 21:26:09 \| 000,029,455 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys [2010-02-12 21:26:09 \| 000,028,672 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys [2010-02-12 21:26:09 \| 000,026,367 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys [2010-02-12 21:26:09 \| 000,021,343 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys [2010-02-12 21:26:09 \| 000,014,336 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2010-02-12 21:26:09 \| 000,013,824 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2010-02-12 21:26:09 \| 000,012,047 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys [2010-02-12 21:26:09 \| 000,011,615 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys [2010-02-10 22:33:31 \| 000,000,000 \| --SD \| M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2010-02-10 22:33:31 \| 000,000,000 \| --SD \| M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [2010-02-10 22:33:31 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-02-10 16:27:20 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\ServicePackFiles [2010-02-10 16:26:29 \| 000,000,000 \| ---D \| C] -- C:\Program Files\MSXML 4.0 [2010-02-10 16:23:25 \| 000,017,920 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdimon.dll [2010-02-10 16:22:30 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\DESIGNER [2010-02-10 16:22:13 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\SHELLNEW [2010-02-10 16:12:45 \| 000,000,000 \| ---D \| C] -- C:\Program Files\DAEMON Tools Toolbar [2010-02-10 16:12:24 \| 000,691,696 \| ---- \| C] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys [2010-02-10 16:12:08 \| 000,000,000 \| ---D \| C] -- C:\Program Files\DAEMON Tools Lite [2010-02-10 16:11:49 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2010-02-10 16:10:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\GRETECH [2010-02-10 16:08:18 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\pss [2010-02-10 16:01:51 \| 000,038,848 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr [2010-02-10 15:51:44 \| 000,839,680 \| ---- \| C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2010-02-10 15:51:44 \| 000,118,784 \| ---- \| C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2010-02-10 15:51:43 \| 000,217,088 \| ---- \| C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll [2010-02-10 15:51:29 \| 000,000,000 \| ---D \| C] -- C:\Program Files\K-Lite Codec Pack [2010-02-10 15:47:51 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo [2010-02-10 15:46:21 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Mozilla Firefox [2010-02-10 15:07:12 \| 000,119,808 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll [2010-02-10 15:07:12 \| 000,081,920 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll [2010-02-10 15:06:57 \| 000,273,024 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys [2010-02-10 15:06:03 \| 000,353,792 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys [2010-02-10 15:04:46 \| 000,471,552 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll [2010-02-10 14:55:55 \| 000,203,136 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys [2010-02-10 14:55:31 \| 002,190,464 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2010-02-10 14:55:30 \| 000,732,160 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll [2010-02-10 14:55:29 \| 002,146,816 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2010-02-10 14:55:28 \| 002,025,472 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2010-02-10 14:54:05 \| 000,455,424 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys [2010-02-10 14:53:51 \| 000,331,776 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll [2010-02-10 14:53:25 \| 000,691,712 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll [2010-02-10 14:46:34 \| 000,019,024 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2010-02-10 14:46:33 \| 000,162,512 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2010-02-10 14:46:31 \| 000,023,376 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2010-02-10 14:46:28 \| 000,046,672 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2010-02-10 14:46:26 \| 000,100,432 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2010-02-10 14:46:26 \| 000,094,800 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2010-02-10 14:46:25 \| 000,028,880 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2010-02-10 14:45:16 \| 000,337,408 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll [2010-02-10 14:45:02 \| 000,153,184 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe [2010-02-10 14:44:33 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Alwil Software [2010-02-10 14:44:33 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2010-02-10 14:43:20 \| 002,066,432 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll [2010-02-10 14:41:04 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google [2010-02-10 14:38:30 \| 001,172,480 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll [2010-02-10 14:36:57 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google [2010-02-10 14:35:01 \| 000,009,200 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys [2010-02-10 14:35:01 \| 000,009,072 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys [2010-02-10 14:35:00 \| 000,072,176 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe [2010-02-10 14:34:59 \| 000,543,216 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll [2010-02-10 14:34:58 \| 000,088,560 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll [2010-02-10 14:34:57 \| 000,379,376 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll [2010-02-10 14:34:54 \| 000,186,864 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll [2010-02-10 14:34:52 \| 000,588,272 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll [2010-02-10 14:34:46 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\IOSUBSYS [2010-02-10 14:31:43 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\Google Updater [2010-02-10 14:31:39 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Google [2010-02-10 14:30:46 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\PreInstall [2010-02-10 14:30:45 \| 000,018,976 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll [2010-02-10 14:24:42 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe [2010-02-10 14:24:09 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\Adobe [2010-02-10 14:19:00 \| 000,012,160 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mouhid.sys [2010-02-10 14:18:54 \| 000,010,368 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidusb.sys [2010-02-10 14:18:49 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\SoftwareDistribution [2010-02-10 14:18:35 \| 000,026,368 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys [2010-02-10 14:14:55 \| 000,000,000 \| -H-D \| C] -- C:\Program Files\Uninstall Information [2010-02-10 14:13:26 \| 000,000,000 \| ---D \| C] -- C:\Program Files\ltmoh [2010-02-10 14:12:41 \| 000,021,275 \| ---- \| C] (Meetinghouse Data Communications) -- C:\WINDOWS\System32\drivers\AegisP.sys [2010-02-10 14:12:27 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\Intel [1 C:\WINDOWS\System32\.tmp files C:\WINDOWS\System32\.tmp ] [1 C:\WINDOWS\.tmp files C:\WINDOWS\.tmp ] ========== Files - Modified Within 30 Days ========== [2010-03-02 17:40:35 \| 000,002,048 \| --S- \| M] () -- C:\WINDOWS\bootstat.dat [2010-03-01 22:36:13 \| 000,000,972 \| ---- \| M] () -- C:\WINDOWS\tasks\Google Software Updater.job [2010-03-01 22:36:04 \| 000,001,032 \| ---- \| M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010-03-01 22:36:01 \| 000,000,006 \| -H-- \| M] () -- C:\WINDOWS\tasks\SA.DAT [2010-03-01 22:35:08 \| 000,000,188 \| -HS- \| M] () -- C:\Documents and Settings\Administrator\ntuser.ini [2010-03-01 22:35:07 \| 000,786,432 \| -H-- \| M] () -- C:\Documents and Settings\Administrator\NTUSER.DAT [2010-03-01 22:35:05 \| 001,656,336 \| -H-- \| M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-03-01 20:28:36 \| 000,000,227 \| ---- \| M] () -- C:\WINDOWS\system.ini [2010-03-01 20:28:10 \| 000,000,027 \| ---- \| M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2010-03-01 19:58:56 \| 000,001,158 \| ---- \| M] () -- C:\WINDOWS\System32\wpa.dbl [2010-02-27 23:31:12 \| 000,001,977 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\DrWeb.csv [2010-02-27 22:06:48 \| 000,000,077 \| ---- \| M] () -- C:\WINDOWS\System32\tmp.files0 [2010-02-27 17:35:58 \| 032,270,296 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\launch.exe [2010-02-27 16:28:52 \| 005,115,824 \| ---- \| M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Administrator\Pulpit\mbam-setup.exe [2010-02-27 16:27:42 \| 003,874,353 \| R--- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe [2010-02-27 16:20:54 \| 000,724,952 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\avenger.zip [2010-02-27 16:20:34 \| 000,684,619 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\sreng2.zip [2010-02-27 16:19:52 \| 000,132,597 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\Flash_Disinfector.exe [2010-02-27 16:19:02 \| 000,284,915 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\gmer.zip [2010-02-27 16:18:08 \| 000,549,888 \| ---- \| M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe [2010-02-25 22:44:30 \| 000,000,000 \| ---- \| M] () -- C:\WINDOWS\ToDisc.INI [2010-02-25 22:41:00 \| 000,001,036 \| ---- \| M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010-02-24 12:13:47 \| 000,001,374 \| ---- \| M] () -- C:\WINDOWS\imsins.BAK [2010-02-21 16:48:37 \| 000,946,272 \| ---- \| M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-02-21 16:48:37 \| 000,436,560 \| ---- \| M] () -- C:\WINDOWS\System32\perfh015.dat [2010-02-21 16:48:37 \| 000,380,684 \| ---- \| M] () -- C:\WINDOWS\System32\perfh009.dat [2010-02-21 16:48:37 \| 000,067,496 \| ---- \| M] () -- C:\WINDOWS\System32\perfc015.dat [2010-02-21 16:48:37 \| 000,053,098 \| ---- \| M] () -- C:\WINDOWS\System32\perfc009.dat [2010-02-21 16:47:21 \| 000,316,640 \| ---- \| M] () -- C:\WINDOWS\WMSysPr9.prx [2010-02-21 16:46:12 \| 000,122,928 \| ---- \| M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-02-21 16:05:37 \| 000,251,152 \| RHS- \| M] () -- C:\ntldr [2010-02-21 10:55:20 \| 000,001,624 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Microsoft Office OneNote 2003.lnk [2010-02-14 21:04:41 \| 000,001,537 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Gwarancja firmy Toshiba.lnk [2010-02-13 07:50:30 \| 000,001,915 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk [2010-02-12 20:55:18 \| 000,002,645 \| ---- \| M] () -- C:\WINDOWS\System32\CONFIG.NT [2010-02-11 19:53:57 \| 000,038,848 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr [2010-02-11 19:53:36 \| 000,153,184 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe [2010-02-11 19:42:34 \| 000,046,672 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2010-02-11 19:42:13 \| 000,162,512 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2010-02-11 19:39:01 \| 000,023,376 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2010-02-11 19:38:34 \| 000,100,432 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2010-02-11 19:38:31 \| 000,094,800 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2010-02-11 19:38:23 \| 000,019,024 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2010-02-11 19:38:07 \| 000,028,880 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2010-02-10 16:23:30 \| 000,000,421 \| ---- \| M] () -- C:\WINDOWS\ODBC.INI [2010-02-10 16:12:26 \| 000,001,613 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk [2010-02-10 16:12:24 \| 000,691,696 \| ---- \| M] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys [2010-02-10 16:10:31 \| 000,000,000 \| ---- \| M] () -- C:\WINDOWS\nsreg.dat [2010-02-10 16:10:22 \| 000,000,762 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\GOM Player.lnk [2010-02-10 16:09:04 \| 000,000,477 \| ---- \| M] () -- C:\WINDOWS\win.ini [2010-02-10 16:09:04 \| 000,000,211 \| RHS- \| M] () -- C:\boot.ini [2010-02-10 15:47:05 \| 000,001,602 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2010-02-10 14:24:48 \| 000,001,729 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk [2010-02-10 14:14:50 \| 000,000,000 \| RHS- \| M] () -- C:\WINDOWS\System32\drivers\TOSHIBA_Satellite A110_04440-PL_PSAB0E-00G00.MRK [2010-02-10 14:13:30 \| 000,000,332 \| ---- \| M] () -- C:\WINDOWS\System32\$winnt$.inf [2010-02-10 14:13:28 \| 000,262,144 \| ---- \| M] () -- C:\Documents and Settings\All Users\NTUSER.DAT [2010-02-10 14:12:41 \| 000,021,275 \| ---- \| M] (Meetinghouse Data Communications) -- C:\WINDOWS\System32\drivers\AegisP.sys [2010-02-10 14:07:59 \| 000,008,192 \| ---- \| M] () -- C:\WINDOWS\REGLOCS.OLD [1 C:\WINDOWS\System32\.tmp files C:\WINDOWS\System32\.tmp ] [1 C:\WINDOWS\.tmp files C:\WINDOWS\.tmp ] ========== Files Created - No Company Name ========== [2010-03-01 22:30:22 \| 000,731,136 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\avenger.exe [2010-02-28 15:38:50 \| 000,261,632 \| ---- \| C] () -- C:\WINDOWS\PEV.exe [2010-02-28 15:38:50 \| 000,098,816 \| ---- \| C] () -- C:\WINDOWS\sed.exe [2010-02-28 15:38:50 \| 000,080,412 \| ---- \| C] () -- C:\WINDOWS\grep.exe [2010-02-28 15:38:50 \| 000,077,312 \| ---- \| C] () -- C:\WINDOWS\MBR.exe [2010-02-28 15:38:50 \| 000,068,096 \| ---- \| C] () -- C:\WINDOWS\zip.exe [2010-02-28 09:54:20 \| 000,293,376 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\gmer.exe [2010-02-27 23:31:12 \| 000,001,977 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\DrWeb.csv [2010-02-27 22:06:48 \| 000,000,077 \| ---- \| C] () -- C:\WINDOWS\System32\tmp.files0 [2010-02-27 20:02:37 \| 000,284,915 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\gmer.zip [2010-02-27 20:01:53 \| 000,724,952 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\avenger.zip [2010-02-27 20:01:41 \| 000,684,619 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\sreng2.zip [2010-02-27 20:00:48 \| 000,132,597 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\Flash_Disinfector.exe [2010-02-27 20:00:28 \| 003,874,353 \| R--- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe [2010-02-27 19:59:59 \| 032,270,296 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\launch.exe [2010-02-27 14:53:39 \| 000,000,135 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2010-02-27 14:53:38 \| 000,000,188 \| -HS- \| C] () -- C:\Documents and Settings\Administrator\ntuser.ini [2010-02-27 14:53:37 \| 000,786,432 \| -H-- \| C] () -- C:\Documents and Settings\Administrator\NTUSER.DAT [2010-02-27 08:03:13 \| 000,000,012 \| ---- \| C] () -- C:\Documents and Settings\LocalService\Dane aplikacji\pdytbs.dat [2010-02-25 22:44:30 \| 000,000,000 \| ---- \| C] () -- C:\WINDOWS\ToDisc.INI [2010-02-13 07:50:30 \| 000,001,915 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk [2010-02-12 21:28:03 \| 000,067,866 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\netwlan5.img [2010-02-12 21:27:31 \| 000,129,045 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2010-02-12 21:26:10 \| 000,064,352 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod [2010-02-10 16:12:26 \| 000,001,613 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk [2010-02-10 16:11:19 \| 000,178,176 \| ---- \| C] () -- C:\WINDOWS\System32\unrar.dll [2010-02-10 16:11:19 \| 000,000,038 \| ---- \| C] () -- C:\WINDOWS\avisplitter.ini [2010-02-10 16:10:31 \| 000,000,000 \| ---- \| C] () -- C:\WINDOWS\nsreg.dat [2010-02-10 16:10:22 \| 000,000,762 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\GOM Player.lnk [2010-02-10 15:51:44 \| 000,000,414 \| ---- \| C] () -- C:\WINDOWS\System32\lame_acm.xml [2010-02-10 15:51:42 \| 000,881,664 \| ---- \| C] () -- C:\WINDOWS\System32\xvidcore.dll [2010-02-10 15:51:42 \| 000,205,824 \| ---- \| C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010-02-10 15:51:36 \| 000,000,547 \| ---- \| C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2010-02-10 15:51:34 \| 000,085,504 \| ---- \| C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010-02-10 15:47:04 \| 000,001,602 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2010-02-10 14:36:44 \| 000,001,036 \| ---- \| C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010-02-10 14:36:42 \| 000,001,032 \| ---- \| C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010-02-10 14:31:42 \| 000,000,972 \| ---- \| C] () -- C:\WINDOWS\tasks\Google Software Updater.job [2010-02-10 14:24:48 \| 000,001,729 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk [2010-02-10 14:14:50 \| 000,000,000 \| RHS- \| C] () -- C:\WINDOWS\System32\drivers\TOSHIBA_Satellite A110_04440-PL_PSAB0E-00G00.MRK [2010-02-10 14:14:49 \| 003,072,054 \| ---- \| C] () -- C:\WINDOWS\TOSHIBA SATELLITE.bmp [2010-02-10 14:13:28 \| 000,262,144 \| ---- \| C] () -- C:\Documents and Settings\All Users\NTUSER.DAT [2010-02-10 14:07:59 \| 000,008,192 \| ---- \| C] () -- C:\WINDOWS\REGLOCS.OLD [2006-06-08 10:58:25 \| 000,000,061 \| ---- \| C] () -- C:\WINDOWS\smscfg.ini [2006-06-08 10:10:06 \| 000,000,421 \| ---- \| C] () -- C:\WINDOWS\ODBC.INI [2006-06-08 09:13:05 \| 000,000,000 \| ---- \| C] () -- C:\WINDOWS\NDSTray.INI [2006-06-08 09:12:36 \| 000,204,800 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizeW7.dll [2006-06-08 09:12:36 \| 000,200,704 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizeA6.dll [2006-06-08 09:12:36 \| 000,192,512 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizeP6.dll [2006-06-08 09:12:36 \| 000,192,512 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizeM6.dll [2006-06-08 09:12:36 \| 000,188,416 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizePX.dll [2006-06-08 09:12:36 \| 000,020,480 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresize.dll [2006-06-08 09:09:14 \| 000,036,736 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\CSIIDecoder_kern_i386.sys [2006-06-08 09:09:14 \| 000,029,184 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\TSXT_kern_i386.sys [2006-06-08 08:48:31 \| 000,032,768 \| ---- \| C] () -- C:\WINDOWS\System32\EBLib.DLL [2006-06-08 08:43:47 \| 000,128,113 \| ---- \| C] () -- C:\WINDOWS\System32\csellang.ini [2006-06-08 08:43:47 \| 000,045,056 \| ---- \| C] () -- C:\WINDOWS\System32\csellang.dll [2006-06-08 08:43:47 \| 000,010,147 \| ---- \| C] () -- C:\WINDOWS\System32\tosmreg.ini [2006-06-08 08:43:47 \| 000,007,671 \| ---- \| C] () -- C:\WINDOWS\System32\cseltbl.ini [2006-06-08 08:33:06 \| 000,356,352 \| ---- \| C] () -- C:\WINDOWS\EMCRI.dll [2006-06-08 08:27:32 \| 000,135,168 \| ---- \| C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2006-06-07 16:52:59 \| 000,028,672 \| ---- \| C] () -- C:\WINDOWS\System32\ToshBIOS.dll [2006-06-07 16:52:59 \| 000,000,083 \| ---- \| C] () -- C:\WINDOWS\System32\OEMINFO.INI [2006-01-05 17:49:34 \| 000,036,864 \| ---- \| C] () -- C:\WINDOWS\System32\HWS_Ctrl.dll [2006-01-05 16:36:22 \| 000,024,576 \| ---- \| C] () -- C:\WINDOWS\System32\EKECioCtl.dll [2006-01-04 09:59:52 \| 000,028,672 \| ---- \| C] () -- C:\WINDOWS\System32\TCtrlIO.dll [2005-12-09 13:36:30 \| 000,028,672 \| ---- \| C] () -- C:\WINDOWS\System32\TPeculiarity.dll [2005-11-23 12:55:42 \| 000,024,576 \| ---- \| C] () -- C:\WINDOWS\System32\SPCtl.dll < End of report >

@Blade@

Pomógł: 8 razy

Wysłany: 2010-03-02, 19:05

Uruchom OTL

w oknie Custom Scans/Fixes wklej:

Cytat:

:Processes
killallprocesses

:OTL
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O4 - Startup: C:\Documents and Settings\Michał\Menu Start\Programy\Autostart\ihaupd32.exe (TWX Corp.)

:Files
C:\Documents and Settings\Michał\Menu Start\Programy\Autostart\ihaupd32.exe
C:\Program Files\DAEMON Tools Toolbar

:Commands
[reboot]

Klikasz Run Fix. Dajesz log z usuwania + nowy log z OTL

_________________

lordbarth

Wysłany: 2010-03-02, 20:31

========== PROCESSES ========== All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully. C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll moved successfully. Registry value HKEY_USERS\S-1-5-21-3441589714-2377351355-1460125659-500\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{C4069E3A-68F1-403E-B40E-20066696354B} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C4069E3A-68F1-403E-B40E-20066696354B}\ not found. C:\Documents and Settings\Michał\Menu Start\Programy\Autostart\ihaupd32.exe moved successfully. ========== FILES ========== File\Folder C:\Documents and Settings\Michał\Menu Start\Programy\Autostart\ihaupd32.exe not found. C:\Program Files\DAEMON Tools Toolbar\Resources folder moved successfully. C:\Program Files\DAEMON Tools Toolbar folder moved successfully. ========== COMMANDS ========== OTL by OldTimer - Version 3.1.30.3 log created on 03022010_192234 Files\Folders moved on Reboot... Registry entries deleted on Reboot... OTL logfile created on: 2010-03-02 19:31:42 - Run 3 OTL by OldTimer - Version 3.1.30.3 Folder = C:\Documents and Settings\Administrator\Pulpit Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 \| Country: Polska \| Language: PLK \| Date Format: yyyy-MM-dd 502,00 Mb Total Physical Memory \| 402,00 Mb Available Physical Memory \| 80,00% Memory free 1,00 Gb Paging File \| 1,00 Gb Available in Paging File \| 96,00% Paging File free Paging file location(s): C:\pagefile.sys 756 1512 [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\WINDOWS \| %ProgramFiles% = C:\Program Files Drive C: \| 74,53 Gb Total Space \| 45,46 Gb Free Space \| 61,00% Space Free \| Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: GADŻET Current User Name: Administrator Logged in as Administrator. Current Boot Mode: SafeMode Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-02-27 16:18:08 \| 000,549,888 \| ---- \| M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe PRC - [2008-04-14 18:21:16 \| 001,035,264 \| ---- \| M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe ========== Modules (SafeList) ========== MOD - [2010-02-27 16:18:08 \| 000,549,888 \| ---- \| M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe ========== Win32 Services (SafeList) ========== SRV - [2010-02-11 19:53:39 \| 000,040,384 \| ---- \| M] (ALWIL Software) [On_Demand \| Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV - [2010-02-11 19:53:39 \| 000,040,384 \| ---- \| M] (ALWIL Software) [On_Demand \| Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV - [2010-02-11 19:53:39 \| 000,040,384 \| ---- \| M] (ALWIL Software) [Auto \| Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-02-10 15:33:16 \| 000,194,032 \| ---- \| M] (Google) [Auto \| Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc) SRV - [2010-02-10 14:35:52 \| 000,135,664 \| ---- \| M] (Google Inc.) [Auto \| Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate) Usługa Google Update (gupdate) SRV - [2006-05-25 17:30:16 \| 000,114,688 \| ---- \| M] (TOSHIBA Corporation) [Auto \| Stopped] -- C:\WINDOWS\system32\TODDSrv.exe -- (TODDSrv) SRV - [2005-11-28 11:31:32 \| 000,540,745 \| ---- \| M] (Intel Corporation ) [Auto \| Stopped] -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe -- (S24EventMonitor) Intel(R) SRV - [2005-11-28 11:29:00 \| 000,114,753 \| ---- \| M] (Intel Corporation) [Auto \| Stopped] -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2005-11-28 11:28:14 \| 000,217,164 \| ---- \| M] (Intel Corporation) [Auto \| Stopped] -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe -- (RegSrvc) Intel(R) SRV - [2005-01-18 00:38:38 \| 000,040,960 \| ---- \| M] (TOSHIBA CORPORATION) [Auto \| Stopped] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs) SRV - [2004-07-15 00:49:26 \| 000,032,768 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe -- (aspnet_state) SRV - [2003-07-28 19:28:22 \| 000,089,136 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) ========== Driver Services (SafeList) ========== DRV - [2010-02-11 19:42:34 \| 000,046,672 \| ---- \| M] (ALWIL Software) [Kernel \| System \| Stopped] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi) DRV - [2010-02-11 19:42:13 \| 000,162,512 \| ---- \| M] (ALWIL Software) [Kernel \| System \| Stopped] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP) DRV - [2010-02-11 19:39:01 \| 000,023,376 \| ---- \| M] (ALWIL Software) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr) DRV - [2010-02-11 19:38:34 \| 000,100,432 \| ---- \| M] (ALWIL Software) [File_System \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2) DRV - [2010-02-11 19:38:23 \| 000,019,024 \| ---- \| M] (ALWIL Software) [File_System \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-02-11 19:38:07 \| 000,028,880 \| ---- \| M] (ALWIL Software) [Kernel \| System \| Stopped] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2010-02-10 16:12:24 \| 000,691,696 \| ---- \| M] (Duplex Secure Ltd.) [Kernel \| Boot \| Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-02-10 14:12:41 \| 000,021,275 \| ---- \| M] (Meetinghouse Data Communications) [Kernel \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\AegisP.sys -- (AegisP) AEGIS Protocol (IEEE 802.1x) DRV - [2008-11-20 20:19:06 \| 000,043,872 \| ---- \| M] (Sonic Solutions) [Kernel \| Boot \| Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2008-04-13 17:36:05 \| 000,144,384 \| ---- \| M] (Windows (R) Server 2003 DDK provider) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2006-04-25 08:01:48 \| 000,043,776 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\Tvs.sys -- (Tvs) DRV - [2006-04-25 01:00:46 \| 000,083,584 \| ---- \| M] (Realtek Semiconductor Corporation ) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2006-04-18 14:12:00 \| 000,098,816 \| ---- \| M] (TOSHIBA Corporation) [File_System \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\tdudf.sys -- (tdudf) DRV - [2006-04-18 00:31:26 \| 004,262,912 \| ---- \| M] (Realtek Semiconductor Corp.) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2006-03-23 17:59:36 \| 000,037,888 \| ---- \| M] (ENE Technology Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\ESD7SK.sys -- (ESDCR) DRV - [2006-03-23 17:59:32 \| 000,074,752 \| ---- \| M] (ENE Technology Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\ESM7SK.sys -- (ESMCR) DRV - [2006-03-23 17:59:28 \| 000,061,056 \| ---- \| M] (ENE Technology Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\EMS7SK.sys -- (EMSCR) DRV - [2006-03-18 15:36:42 \| 001,155,584 \| R--- \| M] (Agere Systems) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2006-03-02 17:49:50 \| 000,015,360 \| ---- \| M] (TOSHIBA Corporation.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\tdcmdpst.sys -- (tdcmdpst) DRV - [2006-02-07 17:04:34 \| 001,399,615 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\ialmnt5.sys -- (ialm) DRV - [2006-01-05 15:31:20 \| 000,011,264 \| ---- \| M] (TOSHIBA ) [Kernel \| System \| Stopped] -- C:\WINDOWS\system32\drivers\TPwSav.sys -- (TPwSav) DRV - [2005-12-05 09:55:30 \| 001,428,096 \| ---- \| M] (Intel® Corporation) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51) Intel(R) DRV - [2005-11-28 12:09:26 \| 000,013,568 \| ---- \| M] (Intel Corporation) [Kernel \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2004-11-16 00:22:08 \| 000,101,874 \| ---- \| M] (Alps Electric Co., Ltd.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2004-08-04 11:00:00 \| 000,017,792 \| ---- \| M] (Parallel Technologies, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2003-09-19 00:47:00 \| 000,010,368 \| ---- \| M] (Padus, Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (Pfc) DRV - [2003-09-10 22:36:54 \| 000,021,060 \| ---- \| M] (InterVideo, Inc.) [Kernel \| On_Demand \| Running] -- C:\WINDOWS\system32\drivers\iviaspi.sys -- (Iviaspi) DRV - [2003-01-29 22:35:00 \| 000,012,032 \| ---- \| M] (TOSHIBA Corporation.) [Kernel \| Auto \| Stopped] -- C:\WINDOWS\system32\drivers\Netdevio.sys -- (Netdevio) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\S-1-5-21-3441589714-2377351355-1460125659-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-02-19 15:41:48 \| 000,000,000 \| ---D \| M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-02-19 15:41:48 \| 000,000,000 \| ---D \| M] [2010-02-10 15:46:36 \| 000,000,000 \| ---D \| M] -- C:\Program Files\Mozilla Firefox\extensions [2009-12-22 04:48:34 \| 000,002,767 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-12-22 04:48:34 \| 000,001,406 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-12-22 04:48:34 \| 000,000,917 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-12-22 04:48:34 \| 000,000,858 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-12-22 04:48:34 \| 000,001,183 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-12-22 04:48:34 \| 000,001,683 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-03-01 20:28:10 \| 000,000,027 \| ---- \| M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.) O4 - HKLM..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe (COMPAL ELECTRONIC INC.) O4 - HKLM..\Run: [DDWMon] C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe () O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe (TOSHIBA CO.,LTD.) O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation) O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation) O4 - HKLM..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe (TOSHIBA) O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\Program narzędziowy TOSHIBA Zooming Utility\SmoothView.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe (TOSHIBA) O4 - HKLM..\Run: [TCtryIOHook] C:\WINDOWS\System32\TCtrlIOHook.exe (TOSHIBA) O4 - HKLM..\Run: [TFncKy] File not found O4 - HKLM..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe (COMPAL ELECTRONIC INC.) O4 - HKLM..\Run: [TPSMain] C:\WINDOWS\System32\TPSMain.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [Zooming] C:\WINDOWS\System32\ZoomingHook.exe (TOSHIBA) O4 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500..\Run: [swg] File not found O4 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - Startup: C:\Documents and Settings\Michał\Menu Start\Programy\Autostart\Szybkie uruchamianie programu Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-3441589714-2377351355-1460125659-500_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\NPJPI150_06.dll (Sun Microsystems, Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.5.0_06) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.134.128.19 213.134.128.20 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-06-07 17:05:15 \| 000,000,000 \| ---- \| M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk ) - File not found O35 - comfile [open] -- "%1" % O35 - exefile [open] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010-03-02 19:22:34 \| 000,000,000 \| ---D \| C] -- C:\_OTL [2010-03-01 22:35:35 \| 000,000,000 \| ---D \| C] -- C:\Avenger [2010-03-01 20:25:25 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\temp [2010-03-01 20:17:51 \| 000,000,000 \| ---D \| C] -- C:\ComboFix [2010-02-28 15:38:50 \| 000,212,480 \| ---- \| C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010-02-28 15:38:50 \| 000,161,792 \| ---- \| C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010-02-28 15:38:50 \| 000,136,704 \| ---- \| C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010-02-28 15:38:50 \| 000,031,232 \| ---- \| C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010-02-28 15:38:45 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\ERDNT [2010-02-28 15:36:36 \| 000,000,000 \| ---D \| C] -- C:\Qoobox [2010-02-28 09:38:03 \| 001,830,424 \| ---- \| C] (Smallfrogs Studio) -- C:\Documents and Settings\Administrator\Pulpit\SREngLdr.EXE [2010-02-28 09:38:03 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Pulpit\Upload [2010-02-27 20:07:14 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\DoctorWeb [2010-02-27 20:01:16 \| 005,115,824 \| ---- \| C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Administrator\Pulpit\mbam-setup.exe [2010-02-27 20:01:00 \| 000,549,888 \| ---- \| C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe [2010-02-27 19:59:21 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Pulpit\autorun.inf [2010-02-27 14:54:23 \| 000,000,000 \| -HSD \| C] -- C:\Documents and Settings\Administrator\IETldCache [2010-02-27 14:53:38 \| 000,000,000 \| --SD \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Microsoft [2010-02-27 14:53:38 \| 000,000,000 \| RH-D \| C] -- C:\Documents and Settings\Administrator\SendTo [2010-02-27 14:53:38 \| 000,000,000 \| RH-D \| C] -- C:\Documents and Settings\Administrator\Recent [2010-02-27 14:53:38 \| 000,000,000 \| RH-D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Ulubione [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Moje obrazy [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Moje dokumenty [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Moja muzyka [2010-02-27 14:53:38 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\Administrator\Menu Start [2010-02-27 14:53:38 \| 000,000,000 \| -HSD \| C] -- C:\Documents and Settings\Administrator\Cookies [2010-02-27 14:53:38 \| 000,000,000 \| -H-D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne [2010-02-27 14:53:38 \| 000,000,000 \| -H-D \| C] -- C:\Documents and Settings\Administrator\Szablony [2010-02-27 14:53:38 \| 000,000,000 \| -H-D \| C] -- C:\Documents and Settings\Administrator\PrintHood [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\WINDOWS [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\toshiba [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Pulpit [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Nethood [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Intel [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Identities [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\ApplicationHistory [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Application Data [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Adobe [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Adobe [2010-02-27 14:53:38 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\{3248F0A6-6813-11D6-A77B-00B0D0150060} [2010-02-21 16:47:11 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-02-21 16:46:55 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\Prefetch [2010-02-21 16:12:43 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\l2schemas [2010-02-21 16:12:42 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\pl [2010-02-21 16:12:42 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\bits [2010-02-21 16:06:05 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\network diagnostic [2010-02-21 16:01:30 \| 000,000,000 \| -H-D \| C] -- C:\WINDOWS\$NtServicePackUninstall$ [2010-02-21 16:01:28 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\EHome [2010-02-13 08:20:00 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\ie8updates [2010-02-13 08:19:16 \| 001,985,536 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2010-02-13 08:19:16 \| 000,594,432 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2010-02-13 08:19:16 \| 000,055,296 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2010-02-13 08:19:15 \| 011,070,464 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2010-02-13 08:18:51 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\WBEM [2010-02-13 08:17:37 \| 000,000,000 \| -H-D \| C] -- C:\WINDOWS\ie8 [2010-02-13 08:17:37 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\pl-PL [2010-02-13 07:47:20 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Temp [2010-02-12 21:28:12 \| 000,025,471 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys [2010-02-12 21:28:12 \| 000,022,271 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys [2010-02-12 21:28:12 \| 000,011,935 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys [2010-02-12 21:28:12 \| 000,011,871 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys [2010-02-12 21:28:12 \| 000,011,807 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys [2010-02-12 21:28:12 \| 000,011,295 \| ---- \| C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys [2010-02-12 21:28:07 \| 000,095,424 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys [2010-02-12 21:28:07 \| 000,013,240 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys [2010-02-12 21:28:06 \| 000,404,990 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys [2010-02-12 21:28:06 \| 000,166,912 \| ---- \| C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys [2010-02-12 21:28:06 \| 000,129,535 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys [2010-02-12 21:28:05 \| 000,013,776 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys [2010-02-12 21:28:04 \| 001,897,408 \| ---- \| C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nv4_mini.sys [2010-02-12 21:28:04 \| 000,180,360 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys [2010-02-12 21:28:03 \| 001,309,184 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys [2010-02-12 21:28:03 \| 000,452,736 \| ---- \| C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys [2010-02-12 21:28:03 \| 000,126,686 \| ---- \| C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys [2010-02-12 21:28:00 \| 000,011,868 \| ---- \| C] (Conexant) -- C:\WINDOWS\System32\drivers\mdmxsdk.sys [2010-02-12 21:27:49 \| 001,041,536 \| ---- \| C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfdpsp2.sys [2010-02-12 21:27:49 \| 000,685,056 \| ---- \| C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfcxts2.sys [2010-02-12 21:27:49 \| 000,220,032 \| ---- \| C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfbs2s2.sys [2010-02-12 21:26:10 \| 000,073,216 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys [2010-02-12 21:26:10 \| 000,063,488 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys [2010-02-12 21:26:10 \| 000,031,744 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys [2010-02-12 21:26:10 \| 000,013,824 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys [2010-02-12 21:26:09 \| 000,701,440 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys [2010-02-12 21:26:09 \| 000,327,040 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys [2010-02-12 21:26:09 \| 000,104,960 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys [2010-02-12 21:26:09 \| 000,063,663 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys [2010-02-12 21:26:09 \| 000,057,856 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys [2010-02-12 21:26:09 \| 000,056,623 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys [2010-02-12 21:26:09 \| 000,052,224 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys [2010-02-12 21:26:09 \| 000,036,463 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys [2010-02-12 21:26:09 \| 000,034,735 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys [2010-02-12 21:26:09 \| 000,030,671 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys [2010-02-12 21:26:09 \| 000,029,455 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys [2010-02-12 21:26:09 \| 000,028,672 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys [2010-02-12 21:26:09 \| 000,026,367 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys [2010-02-12 21:26:09 \| 000,021,343 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys [2010-02-12 21:26:09 \| 000,014,336 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2010-02-12 21:26:09 \| 000,013,824 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2010-02-12 21:26:09 \| 000,012,047 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys [2010-02-12 21:26:09 \| 000,011,615 \| ---- \| C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys [2010-02-10 22:33:31 \| 000,000,000 \| --SD \| M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2010-02-10 22:33:31 \| 000,000,000 \| --SD \| M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [2010-02-10 22:33:31 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-02-10 16:27:20 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\ServicePackFiles [2010-02-10 16:26:29 \| 000,000,000 \| ---D \| C] -- C:\Program Files\MSXML 4.0 [2010-02-10 16:23:25 \| 000,017,920 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdimon.dll [2010-02-10 16:22:30 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\DESIGNER [2010-02-10 16:22:13 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\SHELLNEW [2010-02-10 16:12:24 \| 000,691,696 \| ---- \| C] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys [2010-02-10 16:12:08 \| 000,000,000 \| ---D \| C] -- C:\Program Files\DAEMON Tools Lite [2010-02-10 16:11:49 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2010-02-10 16:10:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\GRETECH [2010-02-10 16:08:18 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\pss [2010-02-10 16:01:51 \| 000,038,848 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr [2010-02-10 15:51:44 \| 000,839,680 \| ---- \| C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2010-02-10 15:51:44 \| 000,118,784 \| ---- \| C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2010-02-10 15:51:43 \| 000,217,088 \| ---- \| C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll [2010-02-10 15:51:29 \| 000,000,000 \| ---D \| C] -- C:\Program Files\K-Lite Codec Pack [2010-02-10 15:47:51 \| 000,000,000 \| R--D \| C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo [2010-02-10 15:46:21 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Mozilla Firefox [2010-02-10 15:07:12 \| 000,119,808 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll [2010-02-10 15:07:12 \| 000,081,920 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll [2010-02-10 15:06:57 \| 000,273,024 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys [2010-02-10 15:06:03 \| 000,353,792 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys [2010-02-10 15:04:46 \| 000,471,552 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll [2010-02-10 14:55:55 \| 000,203,136 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys [2010-02-10 14:55:31 \| 002,190,464 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2010-02-10 14:55:30 \| 000,732,160 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll [2010-02-10 14:55:29 \| 002,146,816 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2010-02-10 14:55:28 \| 002,025,472 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2010-02-10 14:54:05 \| 000,455,424 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys [2010-02-10 14:53:51 \| 000,331,776 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll [2010-02-10 14:53:25 \| 000,691,712 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll [2010-02-10 14:46:34 \| 000,019,024 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2010-02-10 14:46:33 \| 000,162,512 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2010-02-10 14:46:31 \| 000,023,376 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2010-02-10 14:46:28 \| 000,046,672 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2010-02-10 14:46:26 \| 000,100,432 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2010-02-10 14:46:26 \| 000,094,800 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2010-02-10 14:46:25 \| 000,028,880 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2010-02-10 14:45:16 \| 000,337,408 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll [2010-02-10 14:45:02 \| 000,153,184 \| ---- \| C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe [2010-02-10 14:44:33 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Alwil Software [2010-02-10 14:44:33 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2010-02-10 14:43:20 \| 002,066,432 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll [2010-02-10 14:41:04 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google [2010-02-10 14:38:30 \| 001,172,480 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll [2010-02-10 14:36:57 \| 000,000,000 \| ---D \| M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google [2010-02-10 14:35:01 \| 000,009,200 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys [2010-02-10 14:35:01 \| 000,009,072 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys [2010-02-10 14:35:00 \| 000,072,176 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe [2010-02-10 14:34:59 \| 000,543,216 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll [2010-02-10 14:34:58 \| 000,088,560 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll [2010-02-10 14:34:57 \| 000,379,376 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll [2010-02-10 14:34:54 \| 000,186,864 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll [2010-02-10 14:34:52 \| 000,588,272 \| ---- \| C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll [2010-02-10 14:34:46 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\IOSUBSYS [2010-02-10 14:31:43 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\Google Updater [2010-02-10 14:31:39 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Google [2010-02-10 14:30:46 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\PreInstall [2010-02-10 14:30:45 \| 000,018,976 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll [2010-02-10 14:24:42 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe [2010-02-10 14:24:09 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\Adobe [2010-02-10 14:19:00 \| 000,012,160 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mouhid.sys [2010-02-10 14:18:54 \| 000,010,368 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidusb.sys [2010-02-10 14:18:49 \| 000,000,000 \| ---D \| C] -- C:\WINDOWS\System32\SoftwareDistribution [2010-02-10 14:18:35 \| 000,026,368 \| ---- \| C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys [2010-02-10 14:14:55 \| 000,000,000 \| -H-D \| C] -- C:\Program Files\Uninstall Information [2010-02-10 14:13:26 \| 000,000,000 \| ---D \| C] -- C:\Program Files\ltmoh [2010-02-10 14:12:41 \| 000,021,275 \| ---- \| C] (Meetinghouse Data Communications) -- C:\WINDOWS\System32\drivers\AegisP.sys [2010-02-10 14:12:27 \| 000,000,000 \| ---D \| C] -- C:\Documents and Settings\All Users\Dane aplikacji\Intel [1 C:\WINDOWS\System32\.tmp files C:\WINDOWS\System32\.tmp ] [1 C:\WINDOWS\.tmp files C:\WINDOWS\.tmp ] ========== Files - Modified Within 30 Days ========== [2010-03-02 19:28:26 \| 000,002,048 \| --S- \| M] () -- C:\WINDOWS\bootstat.dat [2010-03-02 19:23:59 \| 000,000,972 \| ---- \| M] () -- C:\WINDOWS\tasks\Google Software Updater.job [2010-03-02 19:23:50 \| 000,001,032 \| ---- \| M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010-03-02 19:23:48 \| 000,000,006 \| -H-- \| M] () -- C:\WINDOWS\tasks\SA.DAT [2010-03-02 19:22:44 \| 000,000,188 \| -HS- \| M] () -- C:\Documents and Settings\Administrator\ntuser.ini [2010-03-02 19:22:43 \| 000,786,432 \| -H-- \| M] () -- C:\Documents and Settings\Administrator\NTUSER.DAT [2010-03-01 22:35:05 \| 001,656,336 \| -H-- \| M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-03-01 20:28:36 \| 000,000,227 \| ---- \| M] () -- C:\WINDOWS\system.ini [2010-03-01 20:28:10 \| 000,000,027 \| ---- \| M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2010-03-01 19:58:56 \| 000,001,158 \| ---- \| M] () -- C:\WINDOWS\System32\wpa.dbl [2010-02-27 23:31:12 \| 000,001,977 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\DrWeb.csv [2010-02-27 22:06:48 \| 000,000,077 \| ---- \| M] () -- C:\WINDOWS\System32\tmp.files0 [2010-02-27 17:35:58 \| 032,270,296 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\launch.exe [2010-02-27 16:28:52 \| 005,115,824 \| ---- \| M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Administrator\Pulpit\mbam-setup.exe [2010-02-27 16:27:42 \| 003,874,353 \| R--- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe [2010-02-27 16:20:54 \| 000,724,952 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\avenger.zip [2010-02-27 16:20:34 \| 000,684,619 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\sreng2.zip [2010-02-27 16:19:52 \| 000,132,597 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\Flash_Disinfector.exe [2010-02-27 16:19:02 \| 000,284,915 \| ---- \| M] () -- C:\Documents and Settings\Administrator\Pulpit\gmer.zip [2010-02-27 16:18:08 \| 000,549,888 \| ---- \| M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe [2010-02-25 22:44:30 \| 000,000,000 \| ---- \| M] () -- C:\WINDOWS\ToDisc.INI [2010-02-25 22:41:00 \| 000,001,036 \| ---- \| M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010-02-24 12:13:47 \| 000,001,374 \| ---- \| M] () -- C:\WINDOWS\imsins.BAK [2010-02-21 16:48:37 \| 000,946,272 \| ---- \| M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-02-21 16:48:37 \| 000,436,560 \| ---- \| M] () -- C:\WINDOWS\System32\perfh015.dat [2010-02-21 16:48:37 \| 000,380,684 \| ---- \| M] () -- C:\WINDOWS\System32\perfh009.dat [2010-02-21 16:48:37 \| 000,067,496 \| ---- \| M] () -- C:\WINDOWS\System32\perfc015.dat [2010-02-21 16:48:37 \| 000,053,098 \| ---- \| M] () -- C:\WINDOWS\System32\perfc009.dat [2010-02-21 16:47:21 \| 000,316,640 \| ---- \| M] () -- C:\WINDOWS\WMSysPr9.prx [2010-02-21 16:46:12 \| 000,122,928 \| ---- \| M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-02-21 16:05:37 \| 000,251,152 \| RHS- \| M] () -- C:\ntldr [2010-02-21 10:55:20 \| 000,001,624 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Microsoft Office OneNote 2003.lnk [2010-02-14 21:04:41 \| 000,001,537 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Gwarancja firmy Toshiba.lnk [2010-02-13 07:50:30 \| 000,001,915 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk [2010-02-12 20:55:18 \| 000,002,645 \| ---- \| M] () -- C:\WINDOWS\System32\CONFIG.NT [2010-02-11 19:53:57 \| 000,038,848 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr [2010-02-11 19:53:36 \| 000,153,184 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe [2010-02-11 19:42:34 \| 000,046,672 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2010-02-11 19:42:13 \| 000,162,512 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2010-02-11 19:39:01 \| 000,023,376 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2010-02-11 19:38:34 \| 000,100,432 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2010-02-11 19:38:31 \| 000,094,800 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2010-02-11 19:38:23 \| 000,019,024 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2010-02-11 19:38:07 \| 000,028,880 \| ---- \| M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2010-02-10 16:23:30 \| 000,000,421 \| ---- \| M] () -- C:\WINDOWS\ODBC.INI [2010-02-10 16:12:26 \| 000,001,613 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk [2010-02-10 16:12:24 \| 000,691,696 \| ---- \| M] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys [2010-02-10 16:10:31 \| 000,000,000 \| ---- \| M] () -- C:\WINDOWS\nsreg.dat [2010-02-10 16:10:22 \| 000,000,762 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\GOM Player.lnk [2010-02-10 16:09:04 \| 000,000,477 \| ---- \| M] () -- C:\WINDOWS\win.ini [2010-02-10 16:09:04 \| 000,000,211 \| RHS- \| M] () -- C:\boot.ini [2010-02-10 15:47:05 \| 000,001,602 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2010-02-10 14:24:48 \| 000,001,729 \| ---- \| M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk [2010-02-10 14:14:50 \| 000,000,000 \| RHS- \| M] () -- C:\WINDOWS\System32\drivers\TOSHIBA_Satellite A110_04440-PL_PSAB0E-00G00.MRK [2010-02-10 14:13:30 \| 000,000,332 \| ---- \| M] () -- C:\WINDOWS\System32\$winnt$.inf [2010-02-10 14:13:28 \| 000,262,144 \| ---- \| M] () -- C:\Documents and Settings\All Users\NTUSER.DAT [2010-02-10 14:12:41 \| 000,021,275 \| ---- \| M] (Meetinghouse Data Communications) -- C:\WINDOWS\System32\drivers\AegisP.sys [2010-02-10 14:07:59 \| 000,008,192 \| ---- \| M] () -- C:\WINDOWS\REGLOCS.OLD [1 C:\WINDOWS\System32\.tmp files C:\WINDOWS\System32\.tmp ] [1 C:\WINDOWS\.tmp files C:\WINDOWS\.tmp ] ========== Files Created - No Company Name ========== [2010-03-01 22:30:22 \| 000,731,136 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\avenger.exe [2010-02-28 15:38:50 \| 000,261,632 \| ---- \| C] () -- C:\WINDOWS\PEV.exe [2010-02-28 15:38:50 \| 000,098,816 \| ---- \| C] () -- C:\WINDOWS\sed.exe [2010-02-28 15:38:50 \| 000,080,412 \| ---- \| C] () -- C:\WINDOWS\grep.exe [2010-02-28 15:38:50 \| 000,077,312 \| ---- \| C] () -- C:\WINDOWS\MBR.exe [2010-02-28 15:38:50 \| 000,068,096 \| ---- \| C] () -- C:\WINDOWS\zip.exe [2010-02-28 09:54:20 \| 000,293,376 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\gmer.exe [2010-02-27 23:31:12 \| 000,001,977 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\DrWeb.csv [2010-02-27 22:06:48 \| 000,000,077 \| ---- \| C] () -- C:\WINDOWS\System32\tmp.files0 [2010-02-27 20:02:37 \| 000,284,915 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\gmer.zip [2010-02-27 20:01:53 \| 000,724,952 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\avenger.zip [2010-02-27 20:01:41 \| 000,684,619 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\sreng2.zip [2010-02-27 20:00:48 \| 000,132,597 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\Flash_Disinfector.exe [2010-02-27 20:00:28 \| 003,874,353 \| R--- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe [2010-02-27 19:59:59 \| 032,270,296 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Pulpit\launch.exe [2010-02-27 14:53:39 \| 000,000,135 \| ---- \| C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2010-02-27 14:53:38 \| 000,000,188 \| -HS- \| C] () -- C:\Documents and Settings\Administrator\ntuser.ini [2010-02-27 14:53:37 \| 000,786,432 \| -H-- \| C] () -- C:\Documents and Settings\Administrator\NTUSER.DAT [2010-02-27 08:03:13 \| 000,000,012 \| ---- \| C] () -- C:\Documents and Settings\LocalService\Dane aplikacji\pdytbs.dat [2010-02-25 22:44:30 \| 000,000,000 \| ---- \| C] () -- C:\WINDOWS\ToDisc.INI [2010-02-13 07:50:30 \| 000,001,915 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk [2010-02-12 21:28:03 \| 000,067,866 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\netwlan5.img [2010-02-12 21:27:31 \| 000,129,045 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2010-02-12 21:26:10 \| 000,064,352 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod [2010-02-10 16:12:26 \| 000,001,613 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk [2010-02-10 16:11:19 \| 000,178,176 \| ---- \| C] () -- C:\WINDOWS\System32\unrar.dll [2010-02-10 16:11:19 \| 000,000,038 \| ---- \| C] () -- C:\WINDOWS\avisplitter.ini [2010-02-10 16:10:31 \| 000,000,000 \| ---- \| C] () -- C:\WINDOWS\nsreg.dat [2010-02-10 16:10:22 \| 000,000,762 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\GOM Player.lnk [2010-02-10 15:51:44 \| 000,000,414 \| ---- \| C] () -- C:\WINDOWS\System32\lame_acm.xml [2010-02-10 15:51:42 \| 000,881,664 \| ---- \| C] () -- C:\WINDOWS\System32\xvidcore.dll [2010-02-10 15:51:42 \| 000,205,824 \| ---- \| C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010-02-10 15:51:36 \| 000,000,547 \| ---- \| C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2010-02-10 15:51:34 \| 000,085,504 \| ---- \| C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010-02-10 15:47:04 \| 000,001,602 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2010-02-10 14:36:44 \| 000,001,036 \| ---- \| C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010-02-10 14:36:42 \| 000,001,032 \| ---- \| C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010-02-10 14:31:42 \| 000,000,972 \| ---- \| C] () -- C:\WINDOWS\tasks\Google Software Updater.job [2010-02-10 14:24:48 \| 000,001,729 \| ---- \| C] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk [2010-02-10 14:14:50 \| 000,000,000 \| RHS- \| C] () -- C:\WINDOWS\System32\drivers\TOSHIBA_Satellite A110_04440-PL_PSAB0E-00G00.MRK [2010-02-10 14:14:49 \| 003,072,054 \| ---- \| C] () -- C:\WINDOWS\TOSHIBA SATELLITE.bmp [2010-02-10 14:13:28 \| 000,262,144 \| ---- \| C] () -- C:\Documents and Settings\All Users\NTUSER.DAT [2010-02-10 14:07:59 \| 000,008,192 \| ---- \| C] () -- C:\WINDOWS\REGLOCS.OLD [2006-06-08 10:58:25 \| 000,000,061 \| ---- \| C] () -- C:\WINDOWS\smscfg.ini [2006-06-08 10:10:06 \| 000,000,421 \| ---- \| C] () -- C:\WINDOWS\ODBC.INI [2006-06-08 09:13:05 \| 000,000,000 \| ---- \| C] () -- C:\WINDOWS\NDSTray.INI [2006-06-08 09:12:36 \| 000,204,800 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizeW7.dll [2006-06-08 09:12:36 \| 000,200,704 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizeA6.dll [2006-06-08 09:12:36 \| 000,192,512 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizeP6.dll [2006-06-08 09:12:36 \| 000,192,512 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizeM6.dll [2006-06-08 09:12:36 \| 000,188,416 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresizePX.dll [2006-06-08 09:12:36 \| 000,020,480 \| ---- \| C] () -- C:\WINDOWS\System32\IVIresize.dll [2006-06-08 09:09:14 \| 000,036,736 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\CSIIDecoder_kern_i386.sys [2006-06-08 09:09:14 \| 000,029,184 \| ---- \| C] () -- C:\WINDOWS\System32\drivers\TSXT_kern_i386.sys [2006-06-08 08:48:31 \| 000,032,768 \| ---- \| C] () -- C:\WINDOWS\System32\EBLib.DLL [2006-06-08 08:43:47 \| 000,128,113 \| ---- \| C] () -- C:\WINDOWS\System32\csellang.ini [2006-06-08 08:43:47 \| 000,045,056 \| ---- \| C] () -- C:\WINDOWS\System32\csellang.dll [2006-06-08 08:43:47 \| 000,010,147 \| ---- \| C] () -- C:\WINDOWS\System32\tosmreg.ini [2006-06-08 08:43:47 \| 000,007,671 \| ---- \| C] () -- C:\WINDOWS\System32\cseltbl.ini [2006-06-08 08:33:06 \| 000,356,352 \| ---- \| C] () -- C:\WINDOWS\EMCRI.dll [2006-06-08 08:27:32 \| 000,135,168 \| ---- \| C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2006-06-07 16:52:59 \| 000,028,672 \| ---- \| C] () -- C:\WINDOWS\System32\ToshBIOS.dll [2006-06-07 16:52:59 \| 000,000,083 \| ---- \| C] () -- C:\WINDOWS\System32\OEMINFO.INI [2006-01-05 17:49:34 \| 000,036,864 \| ---- \| C] () -- C:\WINDOWS\System32\HWS_Ctrl.dll [2006-01-05 16:36:22 \| 000,024,576 \| ---- \| C] () -- C:\WINDOWS\System32\EKECioCtl.dll [2006-01-04 09:59:52 \| 000,028,672 \| ---- \| C] () -- C:\WINDOWS\System32\TCtrlIO.dll [2005-12-09 13:36:30 \| 000,028,672 \| ---- \| C] () -- C:\WINDOWS\System32\TPeculiarity.dll [2005-11-23 12:55:42 \| 000,024,576 \| ---- \| C] () -- C:\WINDOWS\System32\SPCtl.dll < End of report >

@Blade@

Pomógł: 8 razy

Wysłany: 2010-03-02, 20:36

Dobra, więcej tu nic nie widzę. W OTL kliknij CleanUp Przeczyść dysk oraz rejestr CCleaner Wyłącz i włącz przywracanie systemu na wszystkich dyskach Instrukcja Wykonaj pełne skanowanie Malwarebytes' Anti-Malware - jeśli coś znajdzie usuń i daj raport
_________________

lordbarth

Wysłany: 2010-03-02, 21:48

Malwarebytes' Anti-Malware 1.44 Wersja bazy definicji: 3510 Windows 5.1.2600 Dodatek Service Pack 3 Internet Explorer 8.0.6001.18702 2010-03-02 21:36:22 mbam-log-2010-03-02 (21-36-22).txt Typ skanowania: Pełne skanowanie (C:\\|) Przeskanowane obiekty: 164945 Upłynęło: 24 minute(s), 12 second(s) Zainfekowane procesy w pamięci: 0 Zainfekowane moduły pamięci: 0 Zainfekowane klucze rejestru: 0 Zainfekowane wartości rejestru: 0 Zainfekowane pliki rejestru: 0 Zainfekowane foldery: 0 Zainfekowane pliki: 3 Zainfekowane procesy w pamięci: (Nie wykryto groźnych plików) Zainfekowane moduły pamięci: (Nie wykryto groźnych plików) Zainfekowane klucze rejestru: (Nie wykryto groźnych plików) Zainfekowane wartości rejestru: (Nie wykryto groźnych plików) Zainfekowane pliki rejestru: (Nie wykryto groźnych plików) Zainfekowane foldery: (Nie wykryto groźnych plików) Zainfekowane pliki: C:\Documents and Settings\Michał\Dane aplikacji\wiaservg.log (Malware.Trace) Quarantined and deleted successfully. C:\Documents and Settings\Michał\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) Quarantined and deleted successfully. C:\Documents and Settings\Michał\Dane aplikacji\avdrn.dat (Malware.Trace) Quarantined and deleted successfully.

@Blade@

Pomógł: 8 razy

Wysłany: 2010-03-03, 15:27

W porządku, możesz opróżnić jeszcze kwarantannę Malwarebytes.
_________________

lordbarth

Wysłany: 2010-03-03, 19:16

Opróżniłem, i wyglądało że wszystko ok bo inne programy których skróty miałem na pulpicie też działały ale po najechaniu na dolny pasek zadań klepsydra i nie można włączyć star, manager zadań też nie da sie włączyć... musiałem wyłączyć powerem, co jeszcze mogę zrobić?

@Blade@

Pomógł: 8 razy

Wysłany: 2010-03-03, 20:12

Spróbuj instalacji nakładkowej http://helpc.eu/instalacja-nakladkowa-t2198.html
_________________

lordbarth

Wysłany: 2010-03-03, 20:36

Pasek zadziałał ale chyba po 15 minutach i teraz wygląda wszystko okale pewnie po restarcie będzie to samo - patrzyłem w sieci i coś tam niby mówią o tym http://209.85.129.132/sea...lient=firefox-a

@Blade@

Pomógł: 8 razy

Wysłany: 2010-03-03, 20:49

Po prostu ta infekcja to "nowość" i patrząc na inne fora właśnie są takie przy niej problemy.
_________________

lordbarth

Wysłany: 2010-03-03, 20:52

ok, nainstaluję windę jeszcze raz, w sumie komp już czysty to nie ma już strachu że coś przejdzie z drugiego dysku na dysk systemowy [ Dodano: 2010-03-03, 22:12 ] Tylko włąśnie - akcja jest taka że do tego laptopa mam orginalną płytę Product Recovery - jakiś obraz całej windy z zainstalowanymi programami czy coś takiego - nie wiem czy nim zrobię instalację nakładkową - czy nic nie zaszkodzi zrobienie tego z innej płyty z windą?

Asdef

Administrator

Pomógł: 32 razy
Skąd: Lodz

Wysłany: 2010-03-04, 11:28

obraz windowsa zazwyczaj posiada obraz partycji nie ma mozliwosci nakladkowo instalować.
_________________ PCT szuka ludzi dobrej woli, którzy jak mają ciekawe artykuły pisane z własnej ręki, to oczywiście można je nadsyłać nawet z gościa, po zatwierdzeniu przez moderatora… http://www.pctown.pl/submitnews.php lub wysyłać na asdef(malpa)o2.pl http://img528.imageshack.us/img528/3311/dn9ar.png

@Blade@

Pomógł: 8 razy

Wysłany: 2010-03-04, 18:08

Musisz mieć płytkę z windowsem, żeby zrobić nakładkę.
_________________

Forum komputerowe PC Town Strona Główna » Kompiradło » Bezpieczeństwo w sieci » Analiza logów » Bardzo proszę o analizę loga z Hijackthis - help

Możesz pisać nowe tematy
Możesz odpowiadać w tematach
Nie możesz zmieniać swoich postów
Nie możesz usuwać swoich postów
Nie możesz głosować w ankietach
Nie możesz załączać plików na tym forum
Możesz ściągać załączniki na tym forum

Dodaj temat do Ulubionych
Wersja do druku

system walidacji dla gości opracował Petermechanic Forum komputerowe

Strona wygenerowana w 0,43 sekundy. Zapytań do SQL: 10