Kaspersky - nie uruchamia się


(Eternal665) #1

Witam!

Dzisiaj przeszedłem na Kasperskiego z avasta. Wszystko pięknie działało gdy nie zresetowałem kompa. Nie mogę włączyć antyvira, sam się nie uruchamia mimo tego, że miał domyślnie ustawione autostart.

Na stronie producenta wyczytałem, że może to być spowodowane infekcją jakiegoś 'mailowego" wirusa, przy czym zaznaczam, że z maila nie korzystałem przez te kilka godzin.

Proszę o poradę. Z czego mam wkleić logi?


(djkamil09061991) #2

Daj log z OTL według instrukcji:

otl-gmer-rsit-dss-inne-instrukcje-t370405.html


(redhop) #3

Przeskanuj komputer czymś alternatywnym polecam tutaj Malwarebytes Anti-Malware znajdziesz na DP.

Po za tym chciałem zauważyć że Kaspersky Lab coraz częściej miewa kłopoty ze swoim oprogramowaniem ,za co trzeba niestety płacić a tyle jest bezpłatnych DOBRYCH PROGRAMÓW antywirusowych na DP.


(Eternal665) #4
OTL logfile created on: 2011-02-25 22:54:14 - Run 1

OTL by OldTimer - Version 3.2.21.0 Folder = C:\Documents and Settings\JA\Pulpit

Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 7.0.5730.13)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd


3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 53,00% Memory free

5,00 Gb Paging File | 4,00 Gb Available in Paging File | 72,00% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]


%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 48,82 Gb Total Space | 16,27 Gb Free Space | 33,32% Space Free | Partition Type: NTFS

Drive D: | 146,48 Gb Total Space | 22,53 Gb Free Space | 15,38% Space Free | Partition Type: NTFS

Drive E: | 58,59 Gb Total Space | 44,63 Gb Free Space | 76,17% Space Free | Partition Type: NTFS

Drive F: | 44,18 Gb Total Space | 34,43 Gb Free Space | 77,93% Space Free | Partition Type: NTFS


Computer Name: SPEED_XP | User Name: JA | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days


[color=#E56717]========== Processes (SafeList) ==========[/color]


PRC - [2011-02-25 22:53:23 | 000,577,024 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JA\Pulpit\OTL.exe

PRC - [2011-02-12 11:53:32 | 009,217,176 | ---- | M] (Blizzard Entertainment) -- d:\World of Warcraft\Wow.exe

PRC - [2010-12-11 18:34:45 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe

PRC - [2010-11-05 12:41:52 | 000,488,952 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe

PRC - [2010-11-05 12:41:48 | 000,738,808 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

PRC - [2010-07-12 17:33:54 | 001,592,672 | ---- | M] (Nullsoft, Inc.) -- D:\Winamp\winamp.exe

PRC - [2010-07-09 20:00:26 | 003,493,776 | ---- | M] (Xfire Inc.) -- D:\Xfire\Xfire.exe

PRC - [2010-07-01 13:27:04 | 000,058,112 | ---- | M] (Space Sciences Laboratory) -- D:\BOINC\boinctray.exe

PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

PRC - [2009-03-05 15:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- D:\Spybot - Search & Destroy\TeaTimer.exe

PRC - [2008-12-13 16:15:26 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe

PRC - [2008-12-09 15:09:30 | 000,068,136 | ---- | M] () -- C:\Program Files\Gigabyte\EasySaver\essvr.exe

PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2007-09-05 10:20:12 | 000,036,352 | ---- | M] (VisualTaskTips.com) -- C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe

PRC - [2007-01-16 12:42:20 | 000,950,272 | ---- | M] ( ) -- C:\Program Files\SAGEM WiFi manager\WLANUTL.EXE

PRC - [2006-10-05 19:56:28 | 000,280,779 | ---- | M] () -- C:\WINDOWS\VistaDrive\VistaDrive.exe

PRC - [2006-09-07 18:19:27 | 000,015,872 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe

PRC - [2004-09-19 11:27:46 | 000,065,536 | ---- | M] () -- C:\Program Files\LClock\LClock.exe

PRC - [2003-08-19 16:09:30 | 000,057,344 | ---- | M] (Lexmark International, Inc.) -- C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe

PRC - [2003-08-19 16:00:40 | 000,053,248 | ---- | M] (Lexmark International, Inc.) -- C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe



[color=#E56717]========== Modules (SafeList) ==========[/color]


MOD - [2011-02-25 22:53:23 | 000,577,024 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JA\Pulpit\OTL.exe

MOD - [2010-11-05 12:41:56 | 000,640,504 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

MOD - [2010-07-09 20:00:34 | 000,970,640 | ---- | M] (Xfire Inc.) -- D:\Xfire\xfire_toucan_43094.dll

MOD - [2009-07-12 00:12:06 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll

MOD - [2009-07-12 00:09:20 | 000,554,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll

MOD - [2008-04-14 21:51:00 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wsock32.dll

MOD - [2007-09-05 10:20:04 | 000,007,680 | ---- | M] () -- C:\Program Files\Utilities\VisualTaskTips\VttHooks.dll

MOD - [2006-09-07 18:18:56 | 000,004,608 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerHook.dll



[color=#E56717]========== Win32 Services (SafeList) ==========[/color]


SRV - [2010-11-23 20:33:01 | 004,012,424 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)

SRV - [2010-11-05 12:41:52 | 000,488,952 | ---- | M] (Check Point Software Technologies) [Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe -- (IswSvc)

SRV - [2010-11-02 22:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) [Auto | Stopped] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe -- (AVP)

SRV - [2010-03-18 15:47:22 | 000,035,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)

SRV - [2010-03-18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)

SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2010-03-18 12:16:28 | 000,124,240 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpPortSharing)

SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)

SRV - [2008-12-13 16:15:26 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)

SRV - [2008-12-09 15:09:30 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service)



[color=#E56717]========== Driver Services (SafeList) ==========[/color]


DRV - [2011-02-25 22:15:31 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv)

DRV - [2011-02-25 19:45:19 | 000,475,736 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)

DRV - [2011-01-02 19:59:07 | 000,436,792 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)

DRV - [2010-11-05 12:41:44 | 000,026,872 | ---- | M] (Check Point Software Technologies) [Kernel | Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)

DRV - [2010-10-22 07:23:22 | 009,623,680 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)

DRV - [2010-06-09 16:43:52 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl2.sys -- (kl2)

DRV - [2010-06-09 16:43:50 | 000,132,184 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\kl1.sys -- (KL1)

DRV - [2010-05-07 11:06:26 | 000,032,856 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)

DRV - [2009-11-02 19:27:24 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)

DRV - [2009-02-17 18:11:30 | 000,024,232 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys -- (ElbyCDIO)

DRV - [2008-12-13 16:15:26 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)

DRV - [2008-11-19 16:09:10 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem)

DRV - [2008-11-19 16:09:08 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag)

DRV - [2008-11-19 16:09:08 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus)

DRV - [2008-08-27 10:22:24 | 004,754,432 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)

DRV - [2008-08-07 12:14:56 | 000,111,360 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)

DRV - [2008-04-13 23:26:50 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (USB_RNDIS)

DRV - [2008-04-13 21:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)

DRV - [2007-05-02 10:11:18 | 000,109,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm)

DRV - [2007-05-02 10:11:18 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl)

DRV - [2007-05-02 10:11:16 | 000,083,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)

DRV - [2007-04-16 15:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)

DRV - [2007-02-16 01:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)

DRV - [2007-01-16 12:52:20 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50)

DRV - [2007-01-10 09:14:34 | 000,450,560 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WlanBZXP.sys -- (SG762_XP)

DRV - [2006-08-28 22:54:56 | 000,010,664 | ---- | M] (Applied Networking Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gan_adapter.sys -- (hamachi_oem)

DRV - [2006-02-25 16:13:06 | 000,016,877 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\aspi32.sys -- (Aspi32)



[color=#E56717]========== Standard Registry (SafeList) ==========[/color]



[color=#E56717]========== Internet Explorer ==========[/color]




IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

IE - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

IE - HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


IE - HKU\S-1-5-21-790525478-1965331169-839522115-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

IE - HKU\S-1-5-21-790525478-1965331169-839522115-1001\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s

IE - HKU\S-1-5-21-790525478-1965331169-839522115-1001\..\URLSearchHook: {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.)

IE - HKU\S-1-5-21-790525478-1965331169-839522115-1001\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfi1.dll (Conduit Ltd.)

IE - HKU\S-1-5-21-790525478-1965331169-839522115-1001\..\URLSearchHook: {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files\ZoneAlarm_Security\tbZone.dll (Conduit Ltd.)

IE - HKU\S-1-5-21-790525478-1965331169-839522115-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


[color=#E56717]========== FireFox ==========[/color]


FF - prefs.js..browser.search.selectedEngine: "Wikipedia (pl)"

FF - prefs.js..browser.startup.homepage: "google.pl"

FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3

FF - prefs.js..extensions.enabledItems: {5e5ab302-7f65-44cd-8211-c1d4caaccea3}:3.2.5.2

FF - prefs.js..extensions.enabledItems: saloonbar@ligny.org.uk:3.0

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - prefs.js..extensions.enabledItems: {91da5e8a-3318-4f8c-b67e-5964de3ab546}:2.6.0.15

FF - prefs.js..extensions.enabledItems: {FFB96CC1-7EB3-449D-B827-DB661701C6BB}:1.5.260.0

FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2

FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:11.0.2.556


FF - HKLM\software\mozilla\Firefox\extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker [2011-02-07 13:31:32 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-11 18:34:48 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-02-10 14:01:16 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.9\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-07-16 17:41:56 | 000,000,000 | ---D | M]


[2010-07-16 18:56:32 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\JA\Dane aplikacji\Mozilla\Extensions

[2011-02-25 19:47:16 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\JA\Dane aplikacji\Mozilla\Firefox\Profiles\dq3ccdhi.default\extensions

[2011-01-27 10:59:19 | 000,000,000 | ---D | M] (XfireXO Community Toolbar) -- C:\Documents and Settings\JA\Dane aplikacji\Mozilla\Firefox\Profiles\dq3ccdhi.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}

[2011-01-09 15:32:19 | 000,000,000 | ---D | M] (ZoneAlarm Security Toolbar) -- C:\Documents and Settings\JA\Dane aplikacji\Mozilla\Firefox\Profiles\dq3ccdhi.default\extensions\{91da5e8a-3318-4f8c-b67e-5964de3ab546}

[2010-12-23 18:00:15 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\JA\Dane aplikacji\Mozilla\Firefox\Profiles\dq3ccdhi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

[2011-01-27 10:59:19 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\JA\Dane aplikacji\Mozilla\Firefox\Profiles\dq3ccdhi.default\extensions\engine@conduit.com

[2010-09-12 19:37:49 | 000,000,000 | ---D | M] (Personas) -- C:\Documents and Settings\JA\Dane aplikacji\Mozilla\Firefox\Profiles\dq3ccdhi.default\extensions\personas@christopher.beard

[2010-07-17 11:08:52 | 000,000,000 | ---D | M] (The Saloon Bar) -- C:\Documents and Settings\JA\Dane aplikacji\Mozilla\Firefox\Profiles\dq3ccdhi.default\extensions\saloonbar@ligny.org.uk

[2011-02-25 20:44:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2010-07-21 18:32:34 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

[2010-08-05 10:00:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

[2010-11-05 18:09:16 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

[2011-01-05 18:00:37 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

[2011-02-25 19:46:24 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru

[2011-02-07 13:31:32 | 000,000,000 | ---D | M] (ZoneAlarm Security Engine) -- C:\PROGRAM FILES\CHECKPOINT\ZAFORCEFIELD\TRUSTCHECKER

[2010-07-21 18:32:30 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF

[2010-09-05 12:12:14 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION

[2010-11-12 18:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

[2010-07-27 16:13:46 | 000,027,136 | ---- | M] (NHN USA Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll

[2010-07-12 17:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll

[2010-10-28 20:08:37 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml

[2010-10-28 20:08:37 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml

[2010-10-28 20:08:37 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml

[2010-10-28 20:08:37 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml

[2010-10-28 20:08:37 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml

[2010-10-28 20:08:37 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml


O1 HOSTS File: ([2011-02-03 16:41:59 | 000,429,734 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O1 - Hosts: 127.0.0.1	www.007guard.com

O1 - Hosts: 127.0.0.1	007guard.com

O1 - Hosts: 127.0.0.1	008i.com

O1 - Hosts: 127.0.0.1	www.008k.com

O1 - Hosts: 127.0.0.1	008k.com

O1 - Hosts: 127.0.0.1	www.00hq.com

O1 - Hosts: 127.0.0.1	00hq.com

O1 - Hosts: 127.0.0.1	010402.com

O1 - Hosts: 127.0.0.1	www.032439.com

O1 - Hosts: 127.0.0.1	032439.com

O1 - Hosts: 127.0.0.1	www.0scan.com

O1 - Hosts: 127.0.0.1	0scan.com

O1 - Hosts: 127.0.0.1	1000gratisproben.com

O1 - Hosts: 127.0.0.1	www.1000gratisproben.com

O1 - Hosts: 127.0.0.1	1001namen.com

O1 - Hosts: 127.0.0.1	www.1001namen.com

O1 - Hosts: 127.0.0.1	100888290cs.com

O1 - Hosts: 127.0.0.1	www.100888290cs.com

O1 - Hosts: 127.0.0.1	www.100sexlinks.com

O1 - Hosts: 127.0.0.1	100sexlinks.com

O1 - Hosts: 127.0.0.1	10sek.com

O1 - Hosts: 127.0.0.1	www.10sek.com

O1 - Hosts: 127.0.0.1	www.1-2005-search.com

O1 - Hosts: 127.0.0.1	1-2005-search.com

O1 - Hosts: 14795 more lines...

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O2 - BHO: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.)

O2 - BHO: (no name) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - No CLSID value found.

O2 - BHO: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfi1.dll (Conduit Ltd.)

O2 - BHO: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)

O2 - BHO: (ZoneAlarm Security Toolbar) - {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files\ZoneAlarm_Security\tbZone.dll (Conduit Ltd.)

O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfi1.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (ZoneAlarm Security Toolbar) - {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files\ZoneAlarm_Security\tbZone.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

O3 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\..\Toolbar\WebBrowser: (Free Lunch Design Toolbar) - {57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} - C:\Program Files\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.)

O3 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\..\Toolbar\WebBrowser: (XfireXO Toolbar) - {5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - C:\Program Files\XfireXO\tbXfi1.dll (Conduit Ltd.)

O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [boincmgr] D:\BOINC\boincmgr.exe (Space Sciences Laboratory)

O4 - HKLM..\Run: [boinctray] D:\BOINC\boinctray.exe (Space Sciences Laboratory)

O4 - HKLM..\Run: [CloneCDTray] C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)

O4 - HKLM..\Run: [GEST] File not found

O4 - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies)

O4 - HKLM..\Run: [LClock] C:\Program Files\LClock\LClock.exe ()

O4 - HKLM..\Run: [Lexmark X1100 Series] C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe (Lexmark International, Inc.)

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()

O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe ()

O4 - HKLM..\Run: [VistaDrive] C:\WINDOWS\VistaDrive\VistaDrive.exe ()

O4 - HKU\.DEFAULT..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com)

O4 - HKU\S-1-5-18..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com)

O4 - HKU\S-1-5-20..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com)

O4 - HKU\S-1-5-21-790525478-1965331169-839522115-1001..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe (Alcohol Soft Development Team)

O4 - HKU\S-1-5-21-790525478-1965331169-839522115-1001..\Run: [SpybotSD TeaTimer] D:\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)

O4 - HKU\S-1-5-21-790525478-1965331169-839522115-1001..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com)

O4 - HKLM..\RunOnce: [WIAWizardMenu] C:\WINDOWS\System32\sti_ci.dll (Microsoft Corporation)

O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] File not found

O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] File not found

O4 - HKU\S-1-5-20..\RunOnce: [nltide_2] File not found

O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = C:\Program Files\SAGEM WiFi manager\WLANUTL.EXE ( )

O4 - Startup: C:\Documents and Settings\Magda\Menu Start\Programy\Autostart\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

O4 - Startup: C:\Documents and Settings\Monika\Menu Start\Programy\Autostart\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideRunAsVerb = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1

O7 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1

O7 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0

O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O15 - HKU\.DEFAULT\..Trusted Domains: google.com ([mail] https in Trusted sites)

O15 - HKU\S-1-5-18\..Trusted Domains: google.com ([mail] https in Trusted sites)

O15 - HKU\S-1-5-20\..Trusted Domains: google.com ([mail] https in Trusted sites)

O15 - HKU\S-1-5-21-790525478-1965331169-839522115-1001\..Trusted Domains: google.com ([mail] https in Trusted sites)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)

O20 - Winlogon\Notify\klogon: DllName - Reg Error: Value error. - Reg Error: Value error. File not found

O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home

O24 - Desktop WallPaper: C:\Documents and Settings\JA\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\JA\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - Reg Error: Key error. File not found

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010-07-16 11:45:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [NTFS]

O33 - MountPoints2\{229d2788-cee0-11df-a5c8-0060b34d2c52}\Shell - "" = AutoRun

O33 - MountPoints2\{229d2788-cee0-11df-a5c8-0060b34d2c52}\Shell\AutoRun\command - "" = H:\USBAutoRun.exe

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O34 - HKLM BootExecute: (OODBS) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*


NetSvcs: 6to4 - File not found

NetSvcs: Ias - File not found

NetSvcs: Iprip - File not found

NetSvcs: Irmon - File not found

NetSvcs: NWCWorkstation - File not found

NetSvcs: Nwsapagent - File not found

NetSvcs: WmdmPmSp - File not found


MsConfig - StartUpFolder: C:^Documents and Settings^JA^Menu Start^Programy^Autostart^OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe - ()

MsConfig - StartUpReg: [b]AutoStartNPSAgent[/b] - hkey= - key= - D:\Samsung PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)

MsConfig - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)

MsConfig - StartUpReg: [b]WinampAgent[/b] - hkey= - key= - D:\Winamp\winampa.exe (Nullsoft, Inc.)


SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: sermouse.sys - Driver

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: vds - Service

SafeBootMin: vga.sys - Driver

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices


SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: Messenger - File not found

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: sermouse.sys - Driver

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: vga.sys - Driver

SafeBootNet: vsmon - Service

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices


[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]


[2011-02-25 22:53:23 | 000,577,024 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\JA\Pulpit\OTL.exe

[2011-02-25 22:13:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\JA\Recent

[2011-02-25 20:28:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JA\Pulpit\KAV.by.gerton

[2011-02-25 20:25:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Kaspersky Internet Security 2011

[2011-02-25 19:45:28 | 000,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab

[2011-02-25 19:45:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab

[2011-02-25 19:45:19 | 000,475,736 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys

[2011-02-25 19:35:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files

[2011-02-25 19:28:21 | 118,069,616 | ---- | C] (Kaspersky Lab) -- C:\Documents and Settings\JA\Pulpit\kav11.0.2.556pl.exe

[2011-02-20 17:22:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JA\Moje dokumenty\Crysis2

[2011-02-19 19:55:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JA\Dane aplikacji\Acreon

[2011-02-19 19:55:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JA\Ustawienia lokalne\Dane aplikacji\._Revolution_

[2011-02-19 19:55:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JA\Pulpit\WowMatrix

[2011-02-15 18:03:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Odkurzacz

[2011-02-10 17:54:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JA\Pulpit\euroTEST 2011

[2011-01-28 18:54:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JA\Pulpit\iwd

[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp ->]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp ->]


[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]


[2011-02-25 22:53:23 | 000,577,024 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JA\Pulpit\OTL.exe

[2011-02-25 22:19:52 | 000,534,312 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat

[2011-02-25 22:19:52 | 000,473,120 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2011-02-25 22:19:52 | 000,096,048 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat

[2011-02-25 22:19:52 | 000,076,554 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2011-02-25 22:15:31 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys

[2011-02-25 22:15:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011-02-25 20:40:07 | 000,310,703 | ---- | M] () -- C:\Documents and Settings\JA\Pulpit\Kaspersky 2011 Trial Reset v3.2.0.rar

[2011-02-25 19:46:16 | 000,114,243 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat

[2011-02-25 19:46:16 | 000,097,859 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat

[2011-02-25 19:45:19 | 000,475,736 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys

[2011-02-25 19:39:27 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT

[2011-02-25 19:34:43 | 118,069,616 | ---- | M] (Kaspersky Lab) -- C:\Documents and Settings\JA\Pulpit\kav11.0.2.556pl.exe

[2011-02-25 13:07:45 | 000,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2011-02-24 14:52:49 | 000,000,393 | ---- | M] () -- C:\WINDOWS\lexstat.ini

[2011-02-20 17:42:24 | 000,000,672 | ---- | M] () -- C:\Documents and Settings\JA\Pulpit\Crysis2.exe.lnk

[2011-02-19 11:30:53 | 000,100,640 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2011-02-10 16:41:21 | 000,004,826 | ---- | M] () -- C:\Documents and Settings\JA\Pulpit\infa.zip

[2011-02-08 17:27:02 | 000,304,974 | ---- | M] () -- C:\Documents and Settings\JA\Moje dokumenty\erniego.png

[2011-02-08 13:01:35 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini

[2011-02-03 16:41:59 | 000,429,734 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts

[2011-01-30 22:10:54 | 000,016,637 | ---- | M] () -- C:\Documents and Settings\JA\Pulpit\plan prezentacji.odt

[2011-01-27 14:46:05 | 000,000,201 | ---- | M] () -- C:\Documents and Settings\JA\Pulpit\Call of Duty Modern Warfare 2.url

[2011-01-27 14:46:05 | 000,000,201 | ---- | M] () -- C:\Documents and Settings\JA\Pulpit\Call of Duty Modern Warfare 2 - Multiplayer.url

[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp ->]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp ->]


[color=#E56717]========== Files Created - No Company Name ==========[/color]


[2011-02-25 20:39:50 | 000,310,703 | ---- | C] () -- C:\Documents and Settings\JA\Pulpit\Kaspersky 2011 Trial Reset v3.2.0.rar

[2011-02-25 19:46:16 | 000,114,243 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat

[2011-02-25 19:46:16 | 000,097,859 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat

[2011-02-20 17:42:24 | 000,000,672 | ---- | C] () -- C:\Documents and Settings\JA\Pulpit\Crysis2.exe.lnk

[2011-02-10 16:41:24 | 000,004,826 | ---- | C] () -- C:\Documents and Settings\JA\Pulpit\infa.zip

[2011-02-08 17:26:27 | 000,304,974 | ---- | C] () -- C:\Documents and Settings\JA\Moje dokumenty\erniego.png

[2011-01-27 14:46:05 | 000,000,201 | ---- | C] () -- C:\Documents and Settings\JA\Pulpit\Call of Duty Modern Warfare 2 - Multiplayer.url

[2011-01-27 14:46:04 | 000,000,201 | ---- | C] () -- C:\Documents and Settings\JA\Pulpit\Call of Duty Modern Warfare 2.url

[2011-01-02 20:16:12 | 000,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib

[2011-01-02 19:49:44 | 000,436,792 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys

[2011-01-02 19:47:27 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll

[2011-01-02 19:47:27 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll

[2011-01-02 19:47:27 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll

[2010-12-15 19:26:52 | 000,137,464 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys

[2010-12-14 22:54:36 | 000,000,262 | ---- | C] () -- C:\WINDOWS\game.ini

[2010-10-31 10:41:00 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll

[2010-08-28 12:02:23 | 000,117,520 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat

[2010-08-03 18:27:52 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll

[2010-08-03 18:27:52 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys

[2010-08-03 18:27:42 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\JA\Dane aplikacji\$_hpcst$.hpc

[2010-07-26 10:18:56 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2010-07-22 10:41:33 | 000,000,393 | ---- | C] () -- C:\WINDOWS\lexstat.ini

[2010-07-22 10:41:23 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxbkvs.dll

[2010-07-22 10:41:20 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\LXBKLCNP.DLL

[2010-07-22 10:40:54 | 000,000,266 | ---- | C] () -- C:\WINDOWS\System32\lxbkcoin.ini

[2010-07-21 21:43:22 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll

[2010-07-16 17:41:53 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[2010-07-16 17:41:52 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini

[2010-07-16 17:41:45 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2010-07-16 17:41:45 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2010-07-16 17:41:44 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll

[2010-07-16 17:41:42 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2010-07-16 16:03:39 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll

[2010-07-16 13:37:22 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2010-07-16 12:10:39 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll

[2010-07-16 11:42:08 | 000,394,752 | ---- | C] () -- C:\WINDOWS\System32\cygwinb19.dll

[2010-07-16 11:42:02 | 000,000,147 | ---- | C] () -- C:\WINDOWS\System32\cpuz.ini

[2010-07-09 20:00:32 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll

[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll

[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll

[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll

[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll

[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll

[2008-01-31 12:30:18 | 000,000,381 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini

[2007-10-25 16:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys


[color=#E56717]========== LOP Check ==========[/color]


[2011-01-20 13:13:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper

[2011-02-25 19:39:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software

[2010-07-22 10:43:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software

[2011-01-02 19:49:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite

[2010-12-24 23:12:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts

[2010-07-21 14:33:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10

[2010-12-15 20:27:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files

[2010-11-20 19:16:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Solidshield

[2010-12-03 15:42:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony

[2010-12-11 22:43:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft

[2010-07-16 11:42:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\uTorrent

[2011-02-19 19:55:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Acreon

[2010-07-17 12:35:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\ArcaBit

[2011-01-09 15:57:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\ArcaVirMicroScan

[2010-12-17 11:10:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Bioshock

[2011-01-09 15:32:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\CheckPoint

[2011-01-02 20:17:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\DAEMON Tools Lite

[2010-07-21 20:02:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Gadu-Gadu 10

[2010-11-12 17:29:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\ijjigame

[2010-10-13 12:49:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Leadertech

[2010-12-15 21:35:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\LolClient

[2011-01-23 12:55:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\OnLive App

[2010-07-25 19:22:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\OpenOffice.org

[2010-08-07 08:51:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Opera

[2010-10-04 16:30:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Publish Providers

[2010-08-03 18:27:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Samsung

[2010-10-04 16:30:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\Sony

[2011-02-25 22:04:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\uTorrent

[2011-01-05 21:20:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JA\Dane aplikacji\yess

[2011-01-09 19:32:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Magda\Dane aplikacji\CheckPoint

[2011-01-09 19:40:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Magda\Dane aplikacji\Gadu-Gadu 10

[2010-08-10 21:22:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Magda\Dane aplikacji\OpenOffice.org

[2010-09-04 16:41:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Magda\Dane aplikacji\Opera

[2010-07-16 11:42:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Magda\Dane aplikacji\uTorrent

[2011-01-09 18:15:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Monika\Dane aplikacji\CheckPoint

[2010-11-18 14:27:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Monika\Dane aplikacji\Gadu-Gadu 10

[2010-10-28 18:10:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Monika\Dane aplikacji\OpenOffice.org

[2010-07-16 11:42:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Monika\Dane aplikacji\uTorrent


[color=#E56717]========== Purity Check ==========[/color]




[color=#E56717]========== Custom Scans ==========[/color]



[color=#A23BEC]< %systemdrive%\*.* >[/color]

[2010-07-16 11:45:10 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT

[2010-09-06 18:09:42 | 000,000,223 | RHS- | M] () -- C:\boot.ini

[2001-07-21 23:13:54 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin

[2010-07-16 11:45:10 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS

[2010-07-16 11:57:04 | 000,000,086 | ---- | M] () -- C:\csb.log

[2011-01-03 18:28:56 | 000,000,594 | ---- | M] () -- C:\Diablo II - Lord of Destruction.lnk

[2009-05-29 12:14:48 | 000,296,974 | ---- | M] () -- C:\gry.ico

[2009-06-01 08:16:08 | 000,000,043 | ---- | M] () -- C:\gry.url

[2010-07-16 11:45:10 | 000,000,000 | RHS- | M] () -- C:\IO.SYS

[2010-07-16 11:45:10 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS

[2004-08-03 20:38:34 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM

[2010-07-16 18:42:40 | 000,251,152 | RHS- | M] () -- C:\ntldr

[2011-02-25 22:15:22 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys

[2010-07-16 11:55:25 | 000,000,948 | ---- | M] () -- C:\RHDSetup.log

[2011-02-25 22:15:33 | 000,000,124 | ---- | M] () -- C:\service.log

[2010-07-16 16:05:35 | 000,000,159 | ---- | M] () -- C:\Setup.log

[2010-07-22 10:43:40 | 000,000,168 | ---- | M] () -- C:\setupfax.log

[2010-07-17 09:37:04 | 000,000,045 | ---- | M] () -- C:\TEST.XML



[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]

[2008-04-14 22:09:56 | 020,110,420 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:agp440.sys

[2008-04-14 22:09:56 | 020,110,420 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:agp440.sys

[2008-04-13 23:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys

[2008-04-13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\agp440.sys

[2008-04-13 23:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys


[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]

[2008-04-14 22:09:56 | 020,110,420 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys

[2008-04-14 22:09:56 | 020,110,420 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys

[2008-04-13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys

[2008-04-13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\atapi.sys

[2008-04-13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys

[2004-08-03 20:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys


[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]

[2001-08-17 22:47:36 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\drivers\beep.sys


[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]

[2008-04-14 22:09:56 | 020,110,420 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys

[2008-04-14 22:09:56 | 020,110,420 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys

[2008-04-13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys

[2008-04-13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\cdrom.sys

[2008-04-13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys

[2004-08-03 20:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys


[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]

[2008-04-13 23:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys

[2008-04-13 20:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\ndis.sys

[2008-04-13 23:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys

[2004-08-03 21:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys


[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]

[2008-04-14 21:51:46 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=2A5B37D520508BE6570A3EA79695F5B5 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe

[2008-04-14 18:21:45 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=2A5B37D520508BE6570A3EA79695F5B5 -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\userinit.exe

[2008-04-14 21:51:46 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=2A5B37D520508BE6570A3EA79695F5B5 -- C:\WINDOWS\system32\userinit.exe

[2004-08-03 22:44:30 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=BD768099B4C44AA631728CB74EB54396 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe


[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]

[2004-08-03 22:44:30 | 000,504,832 | ---- | M] (Microsoft Corporation) MD5=0344407089B08548D4FEBA62BB0F32D0 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe

[2008-04-14 21:51:50 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=51FD2E13D723857B9CA239AE77150F48 -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe

[2008-04-14 18:21:48 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=51FD2E13D723857B9CA239AE77150F48 -- C:\WINDOWS\SoftwareDistribution\Download\51fc2b55c6deef38fc801319336cdbc7\winlogon.exe

[2008-04-14 21:51:50 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=51FD2E13D723857B9CA239AE77150F48 -- C:\WINDOWS\system32\winlogon.exe


[color=#E56717]========== Alternate Data Streams ==========[/color]


@Alternate Data Stream - 24 bytes -> C:\WINDOWS:CCFD17338C2CA296


< End of report >

(Acorus) #5

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

Kliknij Wykonaj skrypt..Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.

Odinstaluj Spybota, XfireXO Toolbar,Free Lunch Design Toolbar,ZoneAlarm Security Toolbar.Log wrzuć na wklej.org-źle się czyta z załącznika.