Hungapp zawiesza mi IE podczas używania nagrywarki

Robuniek · 18 Luty 2010 20:59

Witam

Problem z moim komputerem wygląda tak, że przy pracy nagrywarki (obojętnie jaki program zastosuję) po kilku chwilach IE się zawiesza.

W podglądzie zdarzeń wywala mi następujące błędy :

szAppName : iexplore.exe szAppVer : 8.0.6001.18702 szModName : hungapp

szModVer : 0.0.0.0 offset : 00000000

Log HijackThis :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:55:51, on 2010-02-18

Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\SYSTEM32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\IoctlSvc.exe

C:\Program Files\CyberLink\Shared Files\RichVideo.exe

C:\Program Files\Spyware Doctor\pctsAuxs.exe

C:\Program Files\Spyware Doctor\pctsSvc.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\QuickTime\qttask.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\CyberLink\PCM4Everio\EverioService.exe

C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe

C:\Program Files\Spyware Doctor\pctsTray.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe

C:\PROGRA~1\COMMON~1\Nokia\MPLATF~1\NOKIAM~1.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre6\bin\jusched.exe”

O4 - HKLM…\Run: [startup Cleaner] C:\Program Files\CM Data Software\CM DiskCleaner\Startup Cleaner.exe

O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime

O4 - HKLM…\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install

O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM…\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM…\Run: [EverioService] “C:\Program Files\CyberLink\PCM4Everio\EverioService.exe”

O4 - HKLM…\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”

O4 - HKLM…\Run: [Adobe ARM] “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

O4 - HKLM…\Run: [iSTray] “C:\Program Files\Spyware Doctor\pctsTray.exe”

O4 - HKLM…\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot

O4 - HKCU…\Run: [uniblue RegistryBooster 2009] C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe /S

O4 - HKCU…\Run: [sJelite3Launch] C:\Documents and Settings\robert\Dane aplikacji\Transcend\SJelite3\SJelite3Launch.exe

O4 - HKCU…\Run: [OM2_Monitor] “C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe” -NoStart

O4 - HKCU…\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray

O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background

O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU…\Run: [ALLUpdate] “C:\Program Files\ALLPlayer\ALLUpdate.exe” “sleep”

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200

O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} (MainControl Class) - http://slimak.onet.pl/_m/wirusy/ArcaOnline.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows … 2558568921

O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup … 2558641859

O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} (SignActivX Control) - https://www.bph.pl/sezam/components/SignActivX.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s … wflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Usługa Google Update (gupdate1c9f9083203d99c) (gupdate1c9f9083203d99c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe

O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: spkrmon - Unknown owner - C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe

–

End of file - 9225 bytes

POMOCY

Gutek · 18 Luty 2010 22:03

Zmiana zasad wklejania logów na forum - viewtopic.php?f=16&t=253052

Pokaż log z: OTL

Przestawiasz w nim Processes i Modules na All oraz wklejasz w dolne białe okienko Custom Scans/Fixes :

Klikasz Run Scan. - otl-gmer-rsit-dds-inne-instrukcje-t370405.html

Robuniek · 18 Luty 2010 23:37

Dodatkowo zrobiłem :

Wywaliłem Avasta na śmieci i na razie nie instalowałem niczego, choć mam ochotę na Avirę.
Wywaliłem jeden z AntiSpywarów - Ad Aware. Został więc tylko PC Tools Spyware Doctor.
Zfiksowałem w HJT wszystko to co miało w nazwie Skype/Toolbars.
Chcę korzystać z IE, a nie np. z Opery.

Problem jest nadal taki sam.

Dodam, że wypaloną płytę DVD (każdym z 4 programów) można odtworzyć tylko na kompie. Nie da się odczytać w odtwarzaczach DVD. Choć jeszcze dwa tygodnie temu wszystko śmigało jak w wytwórni filmowej.

OTL.Txt - Notatnik

OTL logfile created on: 2010-02-20 02:25:38 - Run 3

OTL by OldTimer - Version 3.1.28.0 Folder = C:\Documents and Settings\robert\Pulpit

Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free

6,00 Gb Paging File | 5,00 Gb Available in Paging File | 94,00% Paging File free

Paging file location(s): C:\pagefile.sys 4046 8092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 74,52 Gb Total Space | 28,11 Gb Free Space | 37,73% Space Free | Partition Type: NTFS

Drive D: | 74,43 Gb Total Space | 2,04 Gb Free Space | 2,74% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: ROBERT-CFY6K5GA

Current User Name: robert

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: Current user

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Processes (All) ==========

PRC - [2010-02-20 01:37:07 | 000,253,731 | ---- | M] () – C:\Documents and Settings\robert\Menu Start\Programy\Autostart\crss.exe

PRC - [2010-02-18 23:37:45 | 000,549,376 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\robert\Pulpit\OTL.exe

PRC - [2009-12-08 11:27:10 | 001,503,232 | ---- | M] (Nokia) – C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe

PRC - [2009-10-31 19:46:58 | 000,136,176 | ---- | M] (Google Inc.) – C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe

PRC - [2009-10-27 09:26:36 | 000,657,408 | ---- | M] (Nokia) – C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

PRC - [2009-10-27 09:15:44 | 000,132,608 | ---- | M] (Nokia) – C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe

PRC - [2009-10-27 09:15:02 | 000,120,832 | ---- | M] (Nokia) – C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

PRC - [2009-10-11 04:17:36 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) – C:\Program Files\Java\jre6\bin\jusched.exe

PRC - [2009-10-11 04:17:35 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) – C:\Program Files\Java\jre6\bin\jqs.exe

PRC - [2009-08-17 03:03:00 | 000,168,004 | ---- | M] (NVIDIA Corporation) – C:\WINDOWS\system32\nvsvc32.exe

PRC - [2009-03-08 13:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) – C:\Program Files\Internet Explorer\iexplore.exe

PRC - [2009-02-09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\services.exe

PRC - [2009-01-24 17:06:35 | 000,067,128 | ---- | M] (Logitech Inc.) – C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

PRC - [2008-04-14 22:51:52 | 000,013,824 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\wscntfy.exe

PRC - [2008-04-14 22:51:50 | 000,510,464 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\winlogon.exe

PRC - [2008-04-14 22:51:44 | 000,057,856 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spoolsv.exe

PRC - [2008-04-14 22:51:44 | 000,050,688 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\smss.exe

PRC - [2008-04-14 22:51:44 | 000,014,336 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\svchost.exe [NETWORKSERVICE]

PRC - [2008-04-14 22:51:44 | 000,014,336 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\svchost.exe [NETSVCS]

PRC - [2008-04-14 22:51:44 | 000,014,336 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\svchost.exe [HTTPFILTER]

PRC - [2008-04-14 22:51:44 | 000,014,336 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\svchost.exe [DCOMLAUNCH]

PRC - [2008-04-14 22:51:44 | 000,014,336 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\svchost.exe [anmanworkstation]

PRC - [2008-04-14 22:51:40 | 000,033,280 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\rundll32.exe

PRC - [2008-04-14 22:51:24 | 000,013,312 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\lsass.exe

PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

PRC - [2008-04-14 22:51:12 | 000,015,360 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\ctfmon.exe

PRC - [2008-04-14 22:51:12 | 000,006,144 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\csrss.exe

PRC - [2008-04-14 22:51:04 | 000,044,544 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\alg.exe

PRC - [2007-11-01 17:13:26 | 000,151,552 | ---- | M] (CyberLink Corp.) – C:\Program Files\CyberLink\PCM4Everio\EverioService.exe

PRC - [2007-06-29 13:23:32 | 000,053,248 | ---- | M] (Prolific Technology Inc.) – C:\WINDOWS\system32\IoctlSvc.exe

PRC - [2006-12-19 23:23:00 | 000,272,024 | ---- | M] () – C:\Program Files\CyberLink\Shared Files\RichVideo.exe

PRC - [2003-08-28 14:01:22 | 000,061,440 | ---- | M] () – C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe

PRC - [2003-06-19 22:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) – C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

========== Modules (All) ==========

MOD - [2010-02-18 23:37:45 | 000,549,376 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\robert\Pulpit\OTL.exe

MOD - [2009-12-08 10:25:45 | 000,474,112 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\shlwapi.dll

MOD - [2009-06-25 09:27:54 | 000,056,832 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\secur32.dll

MOD - [2009-04-15 15:54:38 | 000,585,216 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\rpcrt4.dll

MOD - [2009-03-21 15:08:59 | 001,018,368 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\kernel32.dll

MOD - [2009-02-09 11:53:44 | 000,686,592 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\advapi32.dll

MOD - [2009-02-09 11:53:43 | 000,722,944 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\ntdll.dll

MOD - [2008-10-23 13:42:41 | 000,286,720 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\gdi32.dll

MOD - [2008-06-17 20:03:15 | 008,489,984 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\shell32.dll

MOD - [2008-04-14 22:51:58 | 000,146,432 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\winspool.drv

MOD - [2008-04-14 22:50:58 | 000,732,672 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\userenv.dll

MOD - [2008-04-14 22:50:58 | 000,580,096 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\user32.dll

MOD - [2008-04-14 22:50:58 | 000,219,648 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\uxtheme.dll

MOD - [2008-04-14 22:50:58 | 000,172,544 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\wldap32.dll

MOD - [2008-04-14 22:50:58 | 000,067,584 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\srclient.dll

MOD - [2008-04-14 22:50:58 | 000,018,944 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\version.dll

MOD - [2008-04-14 22:50:48 | 000,997,888 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\setupapi.dll

MOD - [2008-04-14 22:50:46 | 001,287,168 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\ole32.dll

MOD - [2008-04-14 22:50:46 | 000,551,936 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\oleaut32.dll

MOD - [2008-04-14 22:50:46 | 000,084,992 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\olepro32.dll

MOD - [2008-04-14 22:50:46 | 000,064,000 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\samlib.dll

MOD - [2008-04-14 22:50:46 | 000,023,040 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\psapi.dll

MOD - [2008-04-14 22:50:42 | 000,119,808 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\ntmarta.dll

MOD - [2008-04-14 22:50:40 | 000,343,040 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\msvcrt.dll

MOD - [2008-04-14 22:50:38 | 000,297,984 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\msctf.dll

MOD - [2008-04-14 22:50:34 | 000,110,080 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\imm32.dll

MOD - [2008-04-14 22:50:32 | 000,185,344 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\wbem\framedyn.dll

MOD - [2008-04-14 22:50:14 | 000,280,064 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\comdlg32.dll

MOD - [2008-04-14 22:50:00 | 000,125,952 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\apphelp.dll

MOD - [2008-04-14 22:43:00 | 000,177,152 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\msctfime.ime

MOD - [2008-04-14 22:29:10 | 001,054,208 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV - [2009-10-27 09:26:36 | 000,657,408 | ---- | M] (Nokia) [On_Demand | Running] – C:\Program Files\PC Connectivity Solution\ServiceLayer.exe – (ServiceLayer)

SRV - [2009-10-11 04:17:35 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] – C:\Program Files\Java\jre6\bin\jqs.exe – (JavaQuickStarterService)

SRV - [2009-08-17 03:03:00 | 000,168,004 | ---- | M] (NVIDIA Corporation) [Auto | Running] – C:\WINDOWS\system32\nvsvc32.exe – (nvsvc)

SRV - [2009-06-29 23:22:56 | 000,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] – C:\Program Files\Google\Update\GoogleUpdate.exe – (gupdate1c9f9083203d99c) Usługa Google Update (gupdate1c9f9083203d99c)

SRV - [2009-06-29 23:22:17 | 000,183,280 | ---- | M] (Google) [On_Demand | Stopped] – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe – (gusvc)

SRV - [2009-01-21 13:08:06 | 001,095,560 | ---- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\Spyware Doctor\pctsSvc.exe – (sdCoreService)

SRV - [2009-01-07 12:40:56 | 000,348,752 | ---- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\Spyware Doctor\pctsAuxs.exe – (sdAuxService)

SRV - [2007-06-29 13:23:32 | 000,053,248 | ---- | M] (Prolific Technology Inc.) [Auto | Running] – C:\WINDOWS\system32\IoctlSvc.exe – (PLFlash DeviceIoControl Service)

SRV - [2006-12-19 23:23:00 | 000,272,024 | ---- | M] () [Auto | Running] – C:\Program Files\CyberLink\Shared Files\RichVideo.exe – (RichVideo) Cyberlink RichVideo Service(CRVS)

SRV - [2004-10-22 03:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe – (IDriverT)

SRV - [2003-08-28 14:01:22 | 000,061,440 | ---- | M] () [Auto | Running] – C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe – (spkrmon)

SRV - [2003-07-28 19:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE – (ose)

========== Driver Services (SafeList) ==========

DRV - [2009-12-15 15:25:15 | 000,163,328 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\b57xp32.sys – (b57w2k)

DRV - [2009-12-15 08:32:08 | 007,729,568 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nv4_mini.sys – (nv)

DRV - [2009-10-06 11:56:34 | 000,136,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\nmwcdnsu.sys – (nmwcdnsu)

DRV - [2009-10-06 11:56:32 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\nmwcdnsuc.sys – (nmwcdnsuc)

DRV - [2009-10-06 11:52:50 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys – (UsbserFilt)

DRV - [2009-10-06 11:52:34 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ccdcmbo.sys – (nmwcdc)

DRV - [2009-10-06 11:52:34 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ccdcmb.sys – (nmwcd)

DRV - [2009-10-06 11:52:34 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\usbser_lowerflt.sys – (upperdev)

DRV - [2009-09-16 23:41:57 | 000,180,224 | ---- | M] () [Kernel | Auto | Running] – C:\WINDOWS\system32\WinVd32.sys – (WinVd32)

DRV - [2009-09-16 23:41:52 | 000,010,752 | ---- | M] () [File_System | Auto | Running] – C:\WINDOWS\system32\WinFLdrv.sys – (WinFLdrv)

DRV - [2009-07-02 19:35:12 | 000,130,936 | ---- | M] (PC Tools) [File_System | Boot | Running] – C:\WINDOWS\system32\drivers\PCTCore.sys – (PCTCore)

DRV - [2009-04-28 21:20:06 | 000,044,944 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] – C:\WINDOWS\System32\Drivers\PxHelp20.sys – (PxHelp20)

DRV - [2009-04-15 19:11:06 | 000,215,872 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\truecrypt.sys – (truecrypt)

DRV - [2009-01-27 23:30:55 | 000,047,360 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\pcouffin.sys – (pcouffin)

DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\pccsmcfd.sys – (pccsmcfd)

DRV - [2008-06-26 11:25:28 | 000,197,888 | ---- | M] (Panda Security, S.L.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\neti1634.sys – (NETIMFLT01060034)

DRV - [2008-06-20 12:08:27 | 000,225,856 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\tcpip6.sys – (Tcpip6)

DRV - [2008-04-14 00:15:38 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\usbser.sys – (usbser)

DRV - [2008-04-14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\USBAUDIO.sys – (usbaudio) Sterownik audio USB (WDM)

DRV - [2008-04-13 22:09:18 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\secdrv.sys – (Secdrv)

DRV - [2008-02-29 11:12:34 | 000,037,008 | ---- | M] (Logicool, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\LMouFilt.Sys – (LMouFilt)

DRV - [2008-02-29 11:12:28 | 000,035,472 | ---- | M] (Logicool, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\LHidFilt.Sys – (LHidFilt)

DRV - [2007-01-29 23:16:42 | 000,006,144 | ---- | M] () [Kernel | On_Demand | Stopped] – C:\Program Files\PeerGuardian2\pgfilter.sys – (pgfilter)

DRV - [2006-09-19 14:44:04 | 000,015,664 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\GEARAspiWDM.sys – (GEARAspiWDM)

DRV - [2004-04-09 12:41:30 | 000,612,352 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\smwdm.sys – (smwdm)

DRV - [2003-08-06 19:58:15 | 000,005,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\rootmdm.sys – (ROOTMODEM)

DRV - [2003-08-06 19:57:01 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ptilink.sys – (Ptilink)

DRV - [2002-04-01 13:15:00 | 000,004,816 | ---- | M] (Andrea Electronics Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\aeaudio.sys – (aeaudio)

DRV - [2001-08-22 08:42:58 | 000,013,632 | ---- | M] (Dell Computer Corporation) [Kernel | System | Running] – C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS – (OMCI)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 1

O1 HOSTS File: ([2010-02-11 13:51:02 | 000,000,686 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\HOSTS

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)

O4 - HKLM…\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)

O4 - HKLM…\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)

O4 - HKLM…\Run: [EverioService] C:\Program Files\CyberLink\PCM4Everio\EverioService.exe (CyberLink Corp.)

O4 - HKLM…\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logicool, Inc.)

O4 - HKLM…\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)

O4 - HKLM…\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)

O4 - HKLM…\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()

O4 - HKLM…\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Computer, Inc.)

O4 - HKLM…\Run: [startup Cleaner] C:\Program Files\CM Data Software\CM DiskCleaner\Startup Cleaner.exe (CM DiskCleaner)

O4 - HKLM…\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)

O4 - HKLM…\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe (Simply Super Software)

O4 - HKCU…\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()

O4 - HKCU…\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe (Nokia)

O4 - HKCU…\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe (OLYMPUS IMAGING CORP.)

O4 - HKCU…\Run: [sJelite3Launch] C:\Documents and Settings\robert\Dane aplikacji\Transcend\SJelite3\SJelite3Launch.exe ()

O4 - HKCU…\Run: [uniblue RegistryBooster 2009] C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe (Uniblue Software)

O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.)

O4 - Startup: C:\Documents and Settings\robert\Menu Start\Programy\Autostart\crss.exe ()

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)

O15 - HKLM…Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.

O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} http://slimak.onet.pl/_m/wirusy/ArcaOnline.cab (MainControl Class)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windows … 2558568921 (WUWebControl Class)

O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftup … 2558641859 (MUWebControl Class)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_17)

O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} https://www.bph.pl/sezam/components/SignActivX.cab (SignActivX Control)

O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_17)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_17)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s … wflash.cab (Shockwave Flash Object)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1

O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home

O24 - Desktop WallPaper: C:\Documents and Settings\robert\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\robert\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009-01-21 14:10:03 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT – [NTFS]

O33 - MountPoints2{0f964214-2c5c-11de-86f0-001143bc753d}\Shell - “” = Autorun

O33 - MountPoints2{0f964214-2c5c-11de-86f0-001143bc753d}\Shell\Open\command - “” = F:\chess.exe – File not found

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - comfile [open] – “%1” %*

O35 - exefile [open] – “%1” %*

NetSvcs: Ias - C:\WINDOWS\system32\ias [2009-12-15 10:58:35 | 000,000,000 | —D | M]

NetSvcs: Iprip - File not found

NetSvcs: Irmon - File not found

NetSvcs: LanmanWorkstation - File not found

NetSvcs: Messenger - File not found

NetSvcs: NWCWorkstation - File not found

NetSvcs: Nwsapagent - File not found

NetSvcs: WmdmPmSp - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^robert^Menu Start^Programy^Autostart^DesktopEarth AutoStart.lnk - C:\Documents and Settings\robert\Dane aplikacji\Microsoft\Installer{DBA5E973-660D-4CBE-A469-F5C37FBF0CE4}_C1A9BF9D98647632ED5172.exe - ()

MsConfig - State: “system.ini” - 0

MsConfig - State: “win.ini” - 0

MsConfig - State: “bootini” - 0

MsConfig - State: “services” - 0

MsConfig - State: “startup” - 0

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: Netlogon - Service

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PEVSystemStart - Service

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: procexp90.Sys - Driver

SafeBootMin: PskSvcRetail - Service

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: sdauxservice - C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)

SafeBootMin: sdcoreservice - C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)

SafeBootMin: sermouse.sys - Driver

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: vds - Service

SafeBootMin: vga.sys - Driver

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: Browser - Service

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: LanmanWorkstation - File not found

SafeBootNet: Messenger - File not found

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOS - Service

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Netlogon - Service

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: nm - File not found

SafeBootNet: nm.sys - File not found

SafeBootNet: NtLmSsp - Service

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PEVSystemStart - Service

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: procexp90.Sys - Driver

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: sdauxservice - C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)

SafeBootNet: sdcoreservice - C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)

SafeBootNet: sermouse.sys - Driver

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: UploadMgr - Service

SafeBootNet: vga.sys - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

========== Files/Folders - Created Within 30 Days ==========

[2010-02-20 01:37:23 | 000,000,000 | —D | C] – C:\Program Files\Total Uninstall 5

[2010-02-20 01:37:11 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Dane aplikacji\Martau

[2010-02-19 17:41:26 | 000,000,000 | —D | C] – C:\Program Files\ALLPlayer

[2010-02-19 16:52:24 | 000,000,000 | RH-D | C] – C:\Documents and Settings\robert\Recent

[2010-02-18 23:37:41 | 000,549,376 | ---- | C] (OldTimer Tools) – C:\Documents and Settings\robert\Pulpit\OTL.exe

[2010-02-18 01:22:43 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Dane aplikacji\SecTaskMan

[2010-02-18 01:22:36 | 000,000,000 | —D | C] – C:\Program Files\Security Task Manager

[2010-02-18 00:52:22 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Moje dokumenty\Simply Super Software

[2010-02-18 00:52:09 | 000,069,632 | ---- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ztvcabinet.dll

[2010-02-18 00:52:04 | 000,000,000 | —D | C] – C:\Program Files\Trojan Remover

[2010-02-18 00:52:04 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Dane aplikacji\Simply Super Software

[2010-02-18 00:52:04 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Dane aplikacji\Simply Super Software

[2010-02-17 20:24:58 | 000,000,000 | —D | C] – C:\Program Files\Trend Micro

[2010-02-17 02:04:47 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Pulpit\Testosteron

[2010-02-17 02:01:56 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Pulpit\TAKEN

[2010-02-11 23:55:43 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Pulpit\Miłość

[2010-02-11 14:39:00 | 000,000,000 | —D | C] – C:\Qoobox

[2010-02-11 13:49:22 | 000,580,096 | ---- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\user32.dll

[2010-02-11 13:46:04 | 000,000,000 | —D | C] – C:\WINDOWS\ERUNT

[2010-02-11 13:34:23 | 000,000,000 | —D | C] – C:\SDFix

[2010-02-11 02:51:49 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Dane aplikacji{2840BBCB-9BEC-47F6-BA0F-10D3C34BF151}

[2010-02-11 00:19:32 | 000,000,000 | —D | C] – C:\Program Files\Uniblue

[2010-02-11 00:19:10 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Dane aplikacji{D5ABFFAD-D592-4F98-B02B-587125B4801F}

[2010-02-10 21:05:22 | 000,000,000 | —D | C] – C:\Intel

[2010-02-10 21:04:34 | 001,419,232 | ---- | C] (Microsoft Corporation) – C:\WINDOWS\System32\WdfCoInstaller01005.dll

[2010-02-10 21:04:34 | 000,037,008 | ---- | C] (Logicool, Inc.) – C:\WINDOWS\System32\drivers\LMouFilt.Sys

[2010-02-10 21:04:34 | 000,035,472 | ---- | C] (Logicool, Inc.) – C:\WINDOWS\System32\drivers\LHidFilt.Sys

[2010-02-10 21:04:33 | 000,076,304 | ---- | C] (Logicool, Inc.) – C:\WINDOWS\KHALMNPR.Exe

[2010-02-09 11:08:48 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Dane aplikacji{66E2F539-12B6-4870-A500-7689CDE75C5E}

[2010-02-09 02:30:28 | 000,000,000 | —D | C] – C:\Program Files\MGrenda

[2010-02-09 02:19:01 | 000,000,000 | —D | C] – C:\Program Files\Audacity

[2010-02-09 02:11:53 | 000,000,000 | —D | C] – C:\Program Files\Sagasoft

[2010-02-09 02:06:41 | 000,000,000 | —D | C] – C:\Program Files\K-Lite Codec Pack

[2010-02-08 11:31:11 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Pulpit\rosyjskie - luty 2010

[2010-02-07 15:28:03 | 000,000,000 | —D | C] – C:\Program Files\Muziic

[2010-02-07 14:48:52 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Pulpit\Muzyka z Radia

[2010-02-07 14:38:54 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Dane aplikacji\FairStars MP3 Recorder

[2010-02-07 14:38:25 | 000,000,000 | —D | C] – C:\Program Files\FairStars MP3 Recorder

[2010-02-01 02:47:09 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Nero

[2010-01-30 02:56:29 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Dane aplikacji\Canneverbe Limited

[2010-01-30 02:56:28 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited

[2010-01-30 02:35:14 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\DoctorWeb

[2010-01-28 16:01:51 | 000,327,168 | ---- | C] (InstallShield Software Corporation) – C:\WINDOWS\IsUn0415.exe

[2010-01-28 01:44:13 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Dane aplikacji\JAM Software

[2010-01-28 01:43:58 | 000,000,000 | —D | C] – C:\Program Files\JAM Software

[2010-01-28 01:17:38 | 000,000,000 | —D | C] – C:\Program Files\audiograbber

[2010-01-24 01:44:55 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Dane aplikacji\ArcaVirMicroScan

[2010-01-23 14:00:26 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Ustawienia lokalne\Dane aplikacji\Nokia

[2010-01-23 14:00:22 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Ustawienia lokalne\Dane aplikacji\NokiaAccount

[2010-01-21 09:58:40 | 000,000,000 | —D | C] – C:\Documents and Settings\robert\Pulpit\Various Artists - Radiowe przeboje lata - cz.1

[2009-08-13 16:27:22 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Dane aplikacji\Ahead

[2009-07-09 07:51:14 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google

[2009-07-09 07:50:07 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google

[2009-03-09 14:32:40 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft

[2009-02-06 23:33:44 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Dane aplikacji\Adobe

[2009-01-27 23:30:55 | 000,047,360 | ---- | C] (VSO Software) – C:\Documents and Settings\robert\Dane aplikacji\pcouffin.sys

[2009-01-23 21:59:06 | 009,934,392 | ---- | C] (Google Inc.) – C:\Program Files\picasa3-setup.exe

[2009-01-23 19:48:56 | 009,334,158 | ---- | C] (GermaniXSoft ) – C:\Program Files\setup_3351-mult.exe

[2009-01-23 13:25:11 | 009,802,176 | ---- | C] (Vuze Inc.) – C:\Program Files\Vuze_4.0.0.4b_windows_[www.programosy.pl].exe

[2009-01-23 13:16:13 | 022,260,008 | ---- | C] (Skype Technologies S.A.) – C:\Program Files\SkypeSetup.exe

[2009-01-23 12:38:31 | 003,165,824 | ---- | C] (Piriform Ltd) – C:\Program Files\ccsetup215.exe

[2009-01-23 08:42:34 | 005,150,168 | ---- | C] (COMARCH S.A. ) – C:\Program Files\NOL3Setup.exe

[2009-01-21 14:20:22 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft

[2009-01-21 14:09:45 | 000,000,000 | --SD | M] – C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft

[2009-01-21 14:09:45 | 000,000,000 | --SD | M] – C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft

========== Files - Modified Within 30 Days ==========

[2010-02-20 01:52:03 | 000,001,036 | ---- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2010-02-20 01:37:25 | 000,000,645 | ---- | M] () – C:\Documents and Settings\All Users\Pulpit\Total Uninstall 5.lnk

[2010-02-20 01:37:07 | 000,253,731 | ---- | M] () – C:\Documents and Settings\robert\Menu Start\Programy\Autostart\crss.exe

[2010-02-20 01:19:50 | 000,249,324 | ---- | M] () – C:\WINDOWS\System32\NvApps.xml

[2010-02-20 01:19:46 | 000,002,206 | ---- | M] () – C:\WINDOWS\System32\wpa.dbl

[2010-02-20 01:19:46 | 000,001,032 | ---- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2010-02-20 01:19:32 | 000,000,006 | -H-- | M] () – C:\WINDOWS\tasks\SA.DAT

[2010-02-20 01:19:29 | 000,002,048 | --S- | M] () – C:\WINDOWS\bootstat.dat

[2010-02-20 01:18:35 | 014,680,064 | ---- | M] () – C:\Documents and Settings\robert\ntuser.dat

[2010-02-20 01:18:35 | 000,000,292 | -HS- | M] () – C:\Documents and Settings\robert\ntuser.ini

[2010-02-19 17:42:49 | 000,000,121 | ---- | M] () – C:\Documents and Settings\robert\default.pls

[2010-02-19 17:42:49 | 000,000,116 | ---- | M] () – C:\WINDOWS\NeroDigital.ini

[2010-02-19 00:59:54 | 000,002,259 | ---- | M] () – C:\Documents and Settings\All Users\Pulpit\Skype.lnk

[2010-02-18 23:37:45 | 000,549,376 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\robert\Pulpit\OTL.exe

[2010-02-18 22:47:22 | 000,002,596 | ---- | M] () – C:\WINDOWS\System32\CONFIG.NT

[2010-02-18 00:52:13 | 000,000,760 | ---- | M] () – C:\Documents and Settings\All Users\Pulpit\Trojan Remover.lnk

[2010-02-17 23:45:53 | 000,085,504 | ---- | M] () – C:\Documents and Settings\robert\Moje dokumenty\Aneta - wezwanie do zapłaty.doc

[2010-02-17 20:24:58 | 000,001,740 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\HijackThis.lnk

[2010-02-15 18:26:41 | 000,000,472 | ---- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

[2010-02-12 17:38:52 | 380,567,707 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Image.nrg

[2010-02-11 13:51:02 | 000,000,686 | ---- | M] () – C:\WINDOWS\System32\drivers\etc\HOSTS

[2010-02-11 13:49:22 | 000,580,096 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\user32.dll

[2010-02-11 12:47:17 | 000,001,435 | ---- | M] () – C:\WINDOWS\win.ini

[2010-02-11 12:47:17 | 000,000,211 | RHS- | M] () – C:\boot.ini

[2010-02-11 03:15:55 | 000,000,897 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Skrót do StartRegistryBooster.lnk

[2010-02-11 00:19:36 | 000,000,848 | ---- | M] () – C:\Documents and Settings\All Users\Pulpit\DriverScanner.lnk

[2010-02-10 21:04:44 | 000,000,000 | -H-- | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_LMouFilt_01005.Wdf

[2010-02-09 20:25:48 | 000,000,238 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Skaner On-line.url

[2010-02-09 02:46:53 | 000,174,672 | ---- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT

[2010-02-09 02:42:28 | 000,000,516 | ---- | M] () – C:\WINDOWS\powermp3cutterjoiner.ini

[2010-02-09 02:30:34 | 000,001,650 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Rzeźnik MPEG’ów .lnk

[2010-02-09 02:19:03 | 000,000,636 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Audacity.lnk

[2010-02-09 02:11:55 | 000,000,937 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Power MP3 Cutter Joiner.lnk

[2010-02-07 17:53:24 | 000,042,048 | ---- | M] () – C:\Documents and Settings\robert\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT

[2010-02-07 15:30:32 | 000,000,660 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Muziic Player.lnk

[2010-02-07 14:38:42 | 000,000,706 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\FairStars MP3 Recorder.lnk

[2010-02-04 09:25:47 | 000,000,672 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Avi2Dvd.lnk

[2010-02-02 12:46:01 | 000,034,816 | ---- | M] () – C:\Documents and Settings\robert\Moje dokumenty\Umowa Spółki (ver.1a).doc

[2010-02-01 03:03:46 | 000,000,979 | ---- | M] () – C:\Documents and Settings\All Users\Pulpit\Nero ShowTime CE.lnk

[2010-01-31 13:29:30 | 000,001,921 | ---- | M] () – C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk

[2010-01-30 01:15:56 | 000,001,735 | ---- | M] () – C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk

[2010-01-28 12:15:40 | 000,020,480 | ---- | M] () – C:\Documents and Settings\robert\Moje dokumenty\Przedmiot działalności.doc

[2010-01-28 01:44:00 | 000,000,880 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\TreeSize Free.lnk

[2010-01-28 01:17:39 | 000,000,718 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Audiograbber.lnk

[2010-01-28 00:38:30 | 000,008,278 | ---- | M] () – C:\Documents and Settings\robert\Moje dokumenty\Moja ulubiona kompozycja.theme

[2010-01-27 16:52:47 | 000,075,268 | ---- | M] () – C:\Documents and Settings\robert\Moje dokumenty\umowa spolki cywilnej.rtf

[2010-01-27 16:49:44 | 000,030,208 | ---- | M] () – C:\Documents and Settings\robert\Moje dokumenty\spolka1[1].doc

[2010-01-26 02:07:43 | 000,004,146 | ---- | M] () – C:\WINDOWS\CDPLAYER.UNI

[2010-01-23 13:54:04 | 000,001,794 | ---- | M] () – C:\Documents and Settings\All Users\Pulpit\Nokia Ovi Suite.lnk

[2010-01-21 09:52:08 | 000,000,318 | ---- | M] () – C:\WINDOWS\cdplayer.ini

[2010-01-21 08:31:11 | 008,749,302 | ---- | M] () – C:\Documents and Settings\robert\Pulpit\Edyta Górniak & Mietek Szcześniak - Dumka na dwa serca (RMF mix).mp3

========== Files Created - No Company Name ==========

[2010-02-20 01:37:25 | 000,000,645 | ---- | C] () – C:\Documents and Settings\All Users\Pulpit\Total Uninstall 5.lnk

[2010-02-20 01:37:07 | 000,253,731 | ---- | C] () – C:\Documents and Settings\robert\Menu Start\Programy\Autostart\crss.exe

[2010-02-19 01:13:10 | 000,001,747 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\PowerProducer.lnk

[2010-02-18 00:52:13 | 000,000,760 | ---- | C] () – C:\Documents and Settings\All Users\Pulpit\Trojan Remover.lnk

[2010-02-18 00:52:09 | 000,162,304 | ---- | C] () – C:\WINDOWS\System32\ztvunrar36.dll

[2010-02-18 00:52:09 | 000,153,088 | ---- | C] () – C:\WINDOWS\System32\UNRAR3.dll

[2010-02-18 00:52:09 | 000,077,312 | ---- | C] () – C:\WINDOWS\System32\ztvunace26.dll

[2010-02-18 00:52:09 | 000,075,264 | ---- | C] () – C:\WINDOWS\System32\unacev2.dll

[2010-02-17 20:24:58 | 000,001,740 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\HijackThis.lnk

[2010-02-11 12:47:15 | 000,002,082 | ---- | C] () – C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech Desktop Messenger.lnk

[2010-02-11 03:15:55 | 000,000,897 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\Skrót do StartRegistryBooster.lnk

[2010-02-11 00:19:36 | 000,000,848 | ---- | C] () – C:\Documents and Settings\All Users\Pulpit\DriverScanner.lnk

[2010-02-10 21:04:44 | 000,000,000 | -H-- | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_LMouFilt_01005.Wdf

[2010-02-09 02:30:34 | 000,001,650 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\Rzeźnik MPEG’ów .lnk

[2010-02-09 02:19:03 | 000,000,636 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\Audacity.lnk

[2010-02-09 02:11:55 | 000,000,937 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\Power MP3 Cutter Joiner.lnk

[2010-02-07 15:30:32 | 000,000,660 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\Muziic Player.lnk

[2010-02-07 14:38:42 | 000,000,706 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\FairStars MP3 Recorder.lnk

[2010-02-06 01:01:39 | 380,567,707 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\Image.nrg

[2010-02-04 09:23:41 | 000,000,672 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\Avi2Dvd.lnk

[2010-02-02 12:46:01 | 000,034,816 | ---- | C] () – C:\Documents and Settings\robert\Moje dokumenty\Umowa Spółki (ver.1a).doc

[2010-02-01 03:03:46 | 000,000,979 | ---- | C] () – C:\Documents and Settings\All Users\Pulpit\Nero ShowTime CE.lnk

[2010-01-31 13:29:30 | 000,001,921 | ---- | C] () – C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk

[2010-01-30 01:15:56 | 000,001,735 | ---- | C] () – C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk

[2010-01-28 12:15:40 | 000,020,480 | ---- | C] () – C:\Documents and Settings\robert\Moje dokumenty\Przedmiot działalności.doc

[2010-01-28 01:44:00 | 000,000,880 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\TreeSize Free.lnk

[2010-01-28 01:17:39 | 000,000,718 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\Audiograbber.lnk

[2010-01-27 16:52:47 | 000,075,268 | ---- | C] () – C:\Documents and Settings\robert\Moje dokumenty\umowa spolki cywilnej.rtf

[2010-01-27 16:49:44 | 000,030,208 | ---- | C] () – C:\Documents and Settings\robert\Moje dokumenty\spolka1[1].doc

[2010-01-23 13:54:03 | 000,001,794 | ---- | C] () – C:\Documents and Settings\All Users\Pulpit\Nokia Ovi Suite.lnk

[2010-01-21 08:28:45 | 008,749,302 | ---- | C] () – C:\Documents and Settings\robert\Pulpit\Edyta Górniak & Mietek Szcześniak - Dumka na dwa serca (RMF mix).mp3

[2009-11-21 12:39:53 | 000,018,944 | ---- | C] () – C:\WINDOWS\System32\vbCPUInf.dll

[2009-11-09 18:39:25 | 000,890,864 | ---- | C] () – C:\Program Files\badcopy-setup.exe

[2009-10-15 13:01:20 | 001,554,889 | ---- | C] () – C:\Program Files\CDCheckSetup.exe

[2009-09-16 23:41:57 | 000,180,224 | ---- | C] () – C:\WINDOWS\System32\WinVd32.sys

[2009-08-03 14:07:42 | 000,403,816 | ---- | C] () – C:\WINDOWS\System32\OGACheckControl.dll

[2009-08-03 00:21:54 | 000,197,912 | ---- | C] () – C:\WINDOWS\System32\physxcudart_20.dll

[2009-08-03 00:21:54 | 000,058,648 | ---- | C] () – C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll

[2009-08-03 00:21:54 | 000,058,648 | ---- | C] () – C:\WINDOWS\System32\AgCPanelSwedish.dll

[2009-08-03 00:21:54 | 000,058,648 | ---- | C] () – C:\WINDOWS\System32\AgCPanelSpanish.dll

[2009-08-03 00:21:54 | 000,058,648 | ---- | C] () – C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll

[2009-08-03 00:21:54 | 000,058,648 | ---- | C] () – C:\WINDOWS\System32\AgCPanelPortugese.dll

[2009-08-03 00:21:54 | 000,058,648 | ---- | C] () – C:\WINDOWS\System32\AgCPanelKorean.dll

[2009-08-03 00:21:54 | 000,058,648 | ---- | C] () – C:\WINDOWS\System32\AgCPanelJapanese.dll

[2009-08-03 00:21:52 | 000,058,648 | ---- | C] () – C:\WINDOWS\System32\AgCPanelGerman.dll

[2009-08-03 00:21:52 | 000,058,648 | ---- | C] () – C:\WINDOWS\System32\AgCPanelFrench.dll

[2009-07-06 20:03:53 | 000,086,185 | ---- | C] () – C:\Documents and Settings\robert\Dane aplikacji\NMM-MetaData.db

[2009-05-01 22:00:10 | 000,000,083 | ---- | C] () – C:\Documents and Settings\robert\Ustawienia lokalne\Dane aplikacji\FASTWiz.log

[2009-04-22 09:18:40 | 000,237,568 | ---- | C] () – C:\WINDOWS\System32\lame_enc.dll

[2009-04-05 00:39:21 | 000,010,752 | ---- | C] () – C:\WINDOWS\System32\BASSMOD.dll

[2009-04-04 20:32:21 | 000,000,000 | ---- | C] () – C:\Documents and Settings\robert\Ustawienia lokalne\Dane aplikacji\C

[2009-02-23 18:37:36 | 000,001,747 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\QTSBandwidthCache

[2009-02-23 13:16:25 | 000,198,144 | ---- | C] () – C:\WINDOWS\System32_psisdecd.dll

[2009-01-28 08:38:16 | 000,000,038 | ---- | C] () – C:\WINDOWS\AviSplitter.INI

[2009-01-27 23:31:12 | 000,000,671 | ---- | C] () – C:\Documents and Settings\robert\Dane aplikacji\vso_ts_preview.xml

[2009-01-27 23:31:01 | 000,000,033 | ---- | C] () – C:\Documents and Settings\robert\Dane aplikacji\pcouffin.log

[2009-01-27 23:30:55 | 000,087,608 | ---- | C] () – C:\Documents and Settings\robert\Dane aplikacji\inst.exe

[2009-01-27 23:30:55 | 000,007,887 | ---- | C] () – C:\Documents and Settings\robert\Dane aplikacji\pcouffin.cat

[2009-01-27 23:30:55 | 000,001,144 | ---- | C] () – C:\Documents and Settings\robert\Dane aplikacji\pcouffin.inf

[2009-01-24 01:51:34 | 000,000,202 | ---- | C] () – C:\WINDOWS\AvDetected.ini

[2009-01-24 01:22:48 | 000,000,208 | ---- | C] () – C:\WINDOWS\VOGEL.INI

[2009-01-24 00:15:49 | 000,002,596 | ---- | C] () – C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Config.nt.bak

[2009-01-24 00:15:49 | 000,001,734 | ---- | C] () – C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Autoexec.nt.bak

[2009-01-24 00:15:49 | 000,000,742 | ---- | C] () – C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\hosts.bak

[2009-01-23 20:26:40 | 001,665,325 | ---- | C] () – C:\Program Files\agsetup.exe

[2009-01-23 19:57:46 | 000,000,318 | ---- | C] () – C:\WINDOWS\cdplayer.ini

[2009-01-23 19:31:28 | 001,280,201 | ---- | C] () – C:\Program Files\wrar371pl.exe

[2009-01-23 13:41:59 | 000,000,116 | ---- | C] () – C:\WINDOWS\NeroDigital.ini

[2009-01-23 13:08:19 | 000,333,488 | ---- | C] () – C:\Program Files\InstallCZATeriaKam2_5_04.exe

[2009-01-21 18:57:42 | 000,000,131 | ---- | C] () – C:\Documents and Settings\robert\Ustawienia lokalne\Dane aplikacji\fusioncache.dat

[2009-01-21 17:56:11 | 000,208,384 | ---- | C] () – C:\Documents and Settings\robert\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009-01-21 17:44:15 | 000,000,421 | ---- | C] () – C:\WINDOWS\ODBC.INI

[2009-01-21 16:46:32 | 000,000,523 | ---- | C] () – C:\WINDOWS\ATICIM.INI

[2008-12-17 23:30:06 | 000,180,224 | ---- | C] () – C:\WINDOWS\System32\xvidvfw.dll

[2006-12-30 18:48:38 | 000,000,516 | ---- | C] () – C:\WINDOWS\powermp3cutterjoiner.ini

[2006-08-15 02:21:54 | 000,110,592 | ---- | C] () – C:\WINDOWS\System32\4e52ad24.dll

[2006-04-05 02:39:17 | 000,008,192 | ---- | C] () – C:\WINDOWS\System32\02250438.dll

[2006-04-05 02:39:15 | 000,000,033 | ---- | C] () – C:\WINDOWS\System32\4699fdb3.dll

[2003-04-08 10:40:22 | 000,005,679 | ---- | C] () – C:\WINDOWS\System32\OUTLPERF.INI

[2002-10-15 23:54:04 | 000,178,176 | ---- | C] () – C:\WINDOWS\System32\unrar.dll

========== Custom Scans ==========

< %systemdrive%*.* >

[2010-02-18 20:41:24 | 000,070,727 | ---- | M] () – C:\aaw7boot.log

[2009-01-21 14:10:03 | 000,000,000 | ---- | M] () – C:\AUTOEXEC.BAT

[2010-02-11 12:47:17 | 000,000,211 | RHS- | M] () – C:\boot.ini

[2003-08-06 19:37:53 | 000,004,952 | RHS- | M] () – C:\Bootfont.bin

[2009-01-21 14:10:03 | 000,000,000 | ---- | M] () – C:\CONFIG.SYS

[2009-09-16 23:46:56 | 000,000,075 | ---- | M] () – C:\debug_infix.log

[2009-11-14 23:09:56 | 000,000,000 | ---- | M] () – C:\dump_dvd.vob

[2009-01-23 08:56:22 | 000,000,851 | ---- | M] () – C:\Get OpenOffice.org.lnk

[2009-01-21 14:10:03 | 000,000,000 | RHS- | M] () – C:\IO.SYS

[2010-02-10 18:42:29 | 000,539,941 | ---- | M] () – C:\mksbasel.cpp.log

[2009-01-21 14:10:03 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS

[2009-01-21 17:10:33 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM

[2009-01-21 17:10:33 | 000,251,152 | RHS- | M] () – C:\ntldr

[2010-02-20 01:19:25 | 4242,538,496 | -HS- | M] () – C:\pagefile.sys

[2009-10-21 08:47:28 | 000,158,760 | ---- | M] () – C:\R148501.EXE

[2009-07-28 19:36:08 | 003,922,858 | ---- | M] () – C:\R165804.exe

[2009-09-17 00:09:09 | 000,000,345 | ---- | M] () – C:\Sys_LogWin.log

========== Alternate Data Streams ==========

@Alternate Data Stream - 98 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:A616875A

@Alternate Data Stream - 193 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DD4DD9B9

@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:CB0AACC9

@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2

@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C97C8631

< End of report >

– Dodane 24.03.2010 (Śr) 21:18 –

Nic nie pomogło, więc dokonano formatowania.

Ale problem wcale nie zniknął.

O co chodzi ?