Komp po formacie - wolno chodzi

[Krzychuu]

Komp mi wolno chodzi a jest świeżo po formacie:

Logfile of HijackThis v1.99.1 Scan saved at 23:21:48, on 2007-03-31 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\winsys2.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\CTHELPER.EXE C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\Program Files\FlashGet\FlashGet.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Ares\Ares.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Wapster\AQQ\AQQ.exe C:\Documents and Settings\Krzysztof\Pulpit\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [sW20] C:\WINDOWS\system32\sw20.exe O4 - HKLM…\Run: [sW24] C:\WINDOWS\system32\sw24.exe O4 - HKLM…\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [CTHelper] CTHELPER.EXE O4 - HKLM…\Run: [sBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r O4 - HKLM…\Run: [updReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM…\Run: [speedTouch USB Diagnostics] “C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe” /icon O4 - HKLM…\Run: [AVP] “C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe” O4 - HKLM…\Run: [FlashGet] “C:\Program Files\FlashGet\FlashGet.exe” /min O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background O4 - HKCU…\Run: [skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized O4 - HKCU…\Run: [ares] “C:\Program Files\Ares\Ares.exe” -h O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Stáhnout všechno FlashGetem - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra ‘Tools’ menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [iNTERNATIONAL] International* O17 - HKLM\System\CCS\Services\Tcpip…{026049B9-CD09-4E34-A6B2-BD51E69EC848}: NameServer = 213.241.79.37 83.238.255.76 O17 - HKLM\System\CS1\Services\Tcpip…{026049B9-CD09-4E34-A6B2-BD51E69EC848}: NameServer = 213.241.79.37 83.238.255.76 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

[Joan (Joan Sunshine)]

log jest ok

[Gutek]

Optymalizacja i odchudzanie Windowsa XP.

[Krzychuu]

Joan , a co mogę odznaczyć z autostratu?

[Gutek]

O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [sBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r O4 - HKLM…\Run: [updReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM…\Run: [speedTouch USB Diagnostics] “C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe” /icon O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background O4 - HKCU…\Run: [skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files\FlashGet\jc_link.htm

to są zbędniki

O4 - HKLM…\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe

usuń ten plik - ja ostanio się u siebie zastanawiałem combo sam go ciachnął a to trojan - http://www.processlibrary.com/directory/files/winsys2

[Krzychuu]

Gutek2222 gdy usuwam ten plik wyskakuje błąd, że jest uzuwany i nie chce się skasować.

[Gutek]

Użyj combo - http://www.techsupportforum.com/sectool … mboFix.exe

[Krzychuu]

Raport z Combo Fixa:

“Krzysztof” - 07-04-01 9:18:37 Dodatek Service Pack 2 ComboFix 07-03-27.4.2 - Running from: “C:\Documents and Settings\Krzysztof\Pulpit” (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\WINDOWS\system32\winsys.exe ((((((((((((((((((((((((((((((( Files Created from 2007-03-01 to 2007-04-01 )))))))))))))))))))))))))))))))))) 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 22:00 2007-04-01 21:07 58,624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-04-01 21:07 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-04-01 21:06 77,312 --a------ C:\WINDOWS\system32\usbui.dll 2007-04-01 21:06 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys 2007-04-01 21:05 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-04-01 21:05 9,168 --a------ C:\WINDOWS\system\VER.DLL 2007-04-01 21:05 85,532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-04-01 21:05 83,456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-04-01 21:05 8,704 --a------ C:\WINDOWS\system32\batt.dll 2007-04-01 21:05 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-04-01 21:05 75,776 --a------ C:\WINDOWS\system32\storprop.dll 2007-04-01 21:05 70,144 --a------ C:\WINDOWS\notepad.exe 2007-04-01 21:05 70,096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-04-01 21:05 7,168 --a------ C:\WINDOWS\system32\kbdcz.dll 2007-04-01 21:05 69,552 --a------ C:\WINDOWS\system\mmsystem.dll 2007-04-01 21:05 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-04-01 21:05 6,656 --a------ C:\WINDOWS\system32\kbdycl.dll 2007-04-01 21:05 6,656 --a------ C:\WINDOWS\system32\kbdsl1.dll 2007-04-01 21:05 6,656 --a------ C:\WINDOWS\system32\kbdsl.dll 2007-04-01 21:05 6,656 --a------ C:\WINDOWS\system32\kbdhu.dll 2007-04-01 21:05 6,656 --a------ C:\WINDOWS\system32\kbdcz2.dll 2007-04-01 21:05 6,656 --a------ C:\WINDOWS\system32\kbdcz1.dll 2007-04-01 21:05 6,656 --a------ C:\WINDOWS\system32\kbdcr.dll 2007-04-01 21:05 6,656 --a------ C:\WINDOWS\system32\KBDAL.DLL 2007-04-01 21:05 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-04-01 21:05 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-04-01 21:05 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-04-01 21:05 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-04-01 21:05 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-04-01 21:05 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-04-01 21:05 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-04-01 21:05 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-04-01 21:05 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-04-01 21:05 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-04-01 21:05 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-04-01 21:05 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-04-01 21:05 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-04-01 21:05 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-04-01 21:05 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-04-01 21:05 5,632 --a------ C:\WINDOWS\system32\kbdro.dll 2007-04-01 21:05 5,632 --a------ C:\WINDOWS\system32\kbdhu1.dll 2007-04-01 21:05 5,120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-04-01 21:05 33,376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-04-01 21:05 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-04-01 21:05 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-04-01 21:05 19,200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-04-01 21:05 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-04-01 21:05 15,360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-04-01 21:05 13,312 --a------ C:\WINDOWS\system32\irclass.dll 2007-04-01 21:05 127,008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-04-01 21:05 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-04-01 21:05 109,488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-04-01 21:05 103,424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:05 2007-04-01 21:04 2007-04-01 09:06 2007-04-01 08:56 2007-04-01 08:55 2007-04-01 08:53 2007-04-01 08:46 2007-04-01 08:43 2007-03-31 23:20 2007-03-31 23:12 2007-03-31 23:06 2007-03-31 23:01 2007-03-31 23:01 2007-03-31 23:01 2007-03-31 23:01 2007-03-31 22:59 2007-03-31 22:59 2007-03-31 22:58 2007-03-31 22:58 2007-03-31 22:57 1,231 --a------ C:\WINDOWS\unins000.dat 2007-03-31 22:55 2007-03-31 22:54 2007-03-31 22:54 2007-03-31 22:54 2007-03-31 22:54 2007-03-31 22:52 2007-03-31 22:50 545 --a------ C:\WINDOWS\UC.PIF 2007-03-31 22:50 545 --a------ C:\WINDOWS\RAR.PIF 2007-03-31 22:50 545 --a------ C:\WINDOWS\PKZIP.PIF 2007-03-31 22:50 545 --a------ C:\WINDOWS\PKUNZIP.PIF 2007-03-31 22:50 545 --a------ C:\WINDOWS\NOCLOSE.PIF 2007-03-31 22:50 545 --a------ C:\WINDOWS\LHA.PIF 2007-03-31 22:50 545 --a------ C:\WINDOWS\ARJ.PIF 2007-03-31 22:50 2007-03-31 22:49 2007-03-31 22:48 2007-03-31 22:47 2007-03-31 22:46 2007-03-31 22:46 2007-03-31 22:44 2007-03-31 22:42 2007-03-31 22:40 910,368 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2007-03-31 22:40 75,932 --a------ C:\WINDOWS\system32\drivers\klick.dat 2007-03-31 22:40 74,396 --a------ C:\WINDOWS\system32\drivers\klin.dat 2007-03-31 22:40 65,824 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat 2007-03-31 22:40 2007-03-31 22:40 2007-03-31 22:35 70,688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys 2007-03-31 22:35 53,600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys 2007-03-31 22:35 5,606 --a------ C:\WINDOWS\system32\stci.dll 2007-03-31 22:35 5,280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys 2007-03-31 22:35 3,968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys 2007-03-31 22:35 2007-03-31 22:31 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys 2007-03-31 22:30 2007-03-31 22:26 41,984 --------- C:\WINDOWS\Ctregrun.exe 2007-03-31 22:26 384 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000004-00000000-00000001-00001102-00000004-20021102}.dat 2007-03-31 22:26 384 --a------ C:\WINDOWS\system32\DVCState-{00000004-00000000-00000001-00001102-00000004-20021102}.dat 2007-03-31 22:25 90,112 --------- C:\WINDOWS\Updreg.EXE 2007-03-31 22:25 84,992 --------- C:\WINDOWS\system32\SFCVRT32.DLL 2007-03-31 22:25 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-03-31 22:25 82,432 --------- C:\WINDOWS\system32\CTWFLT32.DLL 2007-03-31 22:25 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2007-03-31 22:25 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2007-03-31 22:25 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2007-03-31 22:25 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-03-31 22:25 54,784 --------- C:\WINDOWS\system32\INETWH32.DLL 2007-03-31 22:25 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-03-31 22:25 53,552 --------- C:\WINDOWS\CTCCW.DLL 2007-03-31 22:25 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-03-31 22:25 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2007-03-31 22:25 49,152 --a------ C:\WINDOWS\CTDCRES.DLL 2007-03-31 22:25 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2007-03-31 22:25 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-03-31 22:25 26,768 --------- C:\WINDOWS\system32\CTL3D.DLL 2007-03-31 22:25 24,976 --------- C:\WINDOWS\CTRES.DLL 2007-03-31 22:25 20,480 --a------ C:\WINDOWS\INRES.DLL 2007-03-31 22:25 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-03-31 22:25 171,776 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-03-31 22:25 149,504 --------- C:\WINDOWS\system32\MFCANS32.DLL 2007-03-31 22:25 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2007-03-31 22:25 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-03-31 22:25 108,032 --------- C:\WINDOWS\system32\MFCUIA32.DLL 2007-03-31 22:25 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys 2007-03-31 22:25 1,048,576 --------- C:\WINDOWS\system32\SFMAN.DAT 2007-03-31 22:25 2007-03-31 22:25 2007-03-31 22:25 2007-03-31 22:24 94,208 --a------ C:\WINDOWS\DEVREG.DLL 2007-03-31 22:24 904,496 --a------ C:\WINDOWS\system32\drivers\ha10kx2k.sys 2007-03-31 22:24 77,824 --a------ C:\WINDOWS\system32\EAXAC3.DLL 2007-03-31 22:24 69,632 --a------ C:\WINDOWS\system32\ctcoinst.dll 2007-03-31 22:24 65,536 --a------ C:\WINDOWS\system32\a3d.dll 2007-03-31 22:24 645,392 --a------ C:\WINDOWS\system32\drivers\ctac32k.sys 2007-03-31 22:24 606,208 --a------ C:\WINDOWS\system32\ctsblfx.dll 2007-03-31 22:24 6,096 --a------ C:\WINDOWS\system32\drivers\ctprxy2k.sys 2007-03-31 22:24 585,728 --a------ C:\WINDOWS\system32\ctaudfx.dll 2007-03-31 22:24 57,344 --a------ C:\WINDOWS\system32\CTAGENT.DLL 2007-03-31 22:24 53,932 --a------ C:\WINDOWS\system32\ctdaught.dat 2007-03-31 22:24 53,248 --a------ C:\WINDOWS\system32\KILLAPPS.EXE 2007-03-31 22:24 53,248 --a------ C:\WINDOWS\system32\AC3API.DLL 2007-03-31 22:24 49,152 --a------ C:\WINDOWS\MIDIDEF.EXE 2007-03-31 22:24 466,944 --a------ C:\WINDOWS\system32\CTDC0001.DLL 2007-03-31 22:24 45,056 --a------ C:\WINDOWS\system32\CTSPKHLP.DLL 2007-03-31 22:24 366,160 --a------ C:\WINDOWS\system32\drivers\ctaud2k.sys 2007-03-31 22:24 36,864 --a------ C:\WINDOWS\system32\sfman32.dll 2007-03-31 22:24 36,864 --a------ C:\WINDOWS\system32\REGPLIB.EXE 2007-03-31 22:24 36,864 --a------ C:\WINDOWS\system32\CTEMUPIA.DLL 2007-03-31 22:24 332,800 --a------ C:\WINDOWS\system32\drivers\ctdvda2k.sys 2007-03-31 22:24 327,680 --a------ C:\WINDOWS\system32\CTDC0000.DLL 2007-03-31 22:24 298,971 --a------ C:\WINDOWS\system32\ctstatic.dat 2007-03-31 22:24 28,672 --a------ C:\WINDOWS\system32\CTMMEP.DLL 2007-03-31 22:24 264,466 --a------ C:\WINDOWS\system32\ctsbas2w.dat 2007-03-31 22:24 24,576 --a------ C:\WINDOWS\system32\CTHELPER.EXE 2007-03-31 22:24 230,201 --a------ C:\WINDOWS\system32\CTSBASW.DAT 2007-03-31 22:24 217,272 --a------ C:\WINDOWS\system32\ctdlang.dat 2007-03-31 22:24 20,480 --a------ C:\WINDOWS\system32\ENSDEF.EXE 2007-03-31 22:24 184,320 --a------ C:\WINDOWS\PSCONV.EXE 2007-03-31 22:24 184 --a------ C:\WINDOWS\system32\e000001.dat 2007-03-31 22:24 180,224 --a------ C:\WINDOWS\READREG.EXE 2007-03-31 22:24 178,672 --a------ C:\WINDOWS\system32\drivers\ctoss2k.sys 2007-03-31 22:24 177,456 --a------ C:\WINDOWS\system32\drivers\CTOSS9X.SYS 2007-03-31 22:24 172,032 --a------ C:\WINDOWS\system32\SFMS32.DLL 2007-03-31 22:24 159,744 --a------ C:\WINDOWS\system32\CTOSUSER.DLL 2007-03-31 22:24 155,648 --a------ C:\WINDOWS\system32\OPENAL32.DLL 2007-03-31 22:24 148,432 --a------ C:\WINDOWS\system32\drivers\haP16v2k.sys 2007-03-31 22:24 145,488 --a------ C:\WINDOWS\system32\drivers\emupia2k.sys 2007-03-31 22:24 143,360 --a------ C:\WINDOWS\system32\ctdvinst.dll 2007-03-31 22:24 140,643 --a------ C:\WINDOWS\system32\ctbas2w.dat 2007-03-31 22:24 139,264 --a------ C:\WINDOWS\system32\CTDCIFCE.DLL 2007-03-31 22:24 130,288 --a------ C:\WINDOWS\system32\drivers\ctsfm2k.sys 2007-03-31 22:24 126,976 --a------ C:\WINDOWS\system32\CTASIO.DLL 2007-03-31 22:24 12,160 --a------ C:\WINDOWS\system32\drivers\CTGAME.SYS 2007-03-31 22:24 118,784 --a------ C:\WINDOWS\system32\CTSCAL.DLL 2007-03-31 22:24 114,688 --a------ C:\WINDOWS\system32\PIAPROXY.DLL 2007-03-31 22:24 114,688 --a------ C:\WINDOWS\system32\commonfx.dll 2007-03-31 22:24 112,411 --a------ C:\WINDOWS\system32\CTBASICW.DAT 2007-03-31 22:24 110,592 --a------ C:\WINDOWS\system32\CTDPROXY.DLL 2007-03-31 22:24 106,496 --a------ C:\WINDOWS\system32\CTTHXCAL.DLL 2007-03-31 22:23 15,840 --a------ C:\WINDOWS\system32\drivers\pfmodnt.sys 2007-03-31 22:23 2007-03-31 22:21 2007-03-31 22:15 9,728 -ra------ C:\WINDOWS\system32\sysinfoX64.sys 2007-03-31 22:15 8,192 -ra------ C:\WINDOWS\system32\sysinfo.sys 2007-03-31 22:15 69,632 -ra------ C:\WINDOWS\system32\sw24.exe 2007-03-31 22:15 53,248 -ra------ C:\WINDOWS\system32\Nvgpio.dll 2007-03-31 22:15 356,352 --a------ C:\WINDOWS\system32\nvudisp.exe 2007-03-31 22:15 348,160 -ra------ C:\WINDOWS\system32\msvcr71.dll 2007-03-31 22:15 32,768 -ra------ C:\WINDOWS\system32\Auxiliary.dll 2007-03-31 22:15 262,144 -ra------ C:\WINDOWS\system32\HookShield.dll 2007-03-31 22:15 253,952 -ra------ C:\WINDOWS\system32\HookMAp.dll 2007-03-31 22:15 217,088 --a------ C:\WINDOWS\system32\WinSys2.exe 2007-03-31 22:15 208,896 -ra------ C:\WINDOWS\system32\sw20.exe 2007-03-31 22:15 131,072 -ra------ C:\WINDOWS\system32\smdll.dll 2007-03-31 22:15 128,512 -ra------ C:\WINDOWS\system32\MadCHook.dll 2007-03-31 22:15 114,688 -ra------ C:\WINDOWS\system32\sysinfo.dll 2007-03-31 22:15 1,605,632 -ra------ C:\WINDOWS\system32\msicpl.dll 2007-03-31 22:15 2007-03-31 22:14 356,352 --a------ C:\WINDOWS\system32\NVUNINST.EXE 2007-03-31 22:11 83,200 -ra------ C:\WINDOWS\system32\drivers\Rtenicxp.sys 2007-03-31 22:11 2007-03-31 22:11 2007-03-31 22:11 2007-03-31 22:11 2007-03-31 22:09 2007-03-31 22:08 2007-03-31 22:07 2007-03-31 22:06 2007-03-31 22:06 2007-03-31 22:04 2007-03-31 21:53 95,424 --------- C:\WINDOWS\system32\drivers\slnthal.sys 2007-03-31 21:53 937,984 --------- C:\WINDOWS\system32\winbrand.dll 2007-03-31 21:53 9,728 --------- C:\WINDOWS\system32\comsdupd.exe 2007-03-31 21:53 896,512 --------- C:\WINDOWS\system32\wmspdmoe.dll 2007-03-31 21:53 88,064 --------- C:\WINDOWS\system32\p2pnetsh.dll 2007-03-31 21:53 870,784 --------- C:\WINDOWS\system32\ati3d1ag.dll 2007-03-31 21:53 86,016 --------- C:\WINDOWS\system32\p2pgasvc.dll 2007-03-31 21:53 86,016 --------- C:\WINDOWS\system32\mdmxsdk.dll 2007-03-31 21:53 81,408 --------- C:\WINDOWS\system32\wscsvc.dll 2007-03-31 21:53 8,192 --------- C:\WINDOWS\system32\smbinst.exe 2007-03-31 21:53 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll 2007-03-31 21:53 78,464 --------- C:\WINDOWS\system32\drivers\usbvideo.sys 2007-03-31 21:53 78,336 --a------ C:\WINDOWS\system32\ieencode.dll 2007-03-31 21:53 75,776 --------- C:\WINDOWS\system32\strmfilt.dll 2007-03-31 21:53 73,832 --------- C:\WINDOWS\system32\slcoinst.dll 2007-03-31 21:53 73,796 --------- C:\WINDOWS\system32\slserv.exe 2007-03-31 21:53 73,216 --------- C:\WINDOWS\system32\drivers\atintuxx.sys 2007-03-31 21:53 71,680 --------- C:\WINDOWS\system32\blastcln.exe 2007-03-31 21:53 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys 2007-03-31 21:53 7,680 --------- C:\WINDOWS\system32\kbdsmsno.dll 2007-03-31 21:53 7,680 --------- C:\WINDOWS\system32\kbdsmsfi.dll 2007-03-31 21:53 7,168 --a------ C:\WINDOWS\system32\hccoin.dll 2007-03-31 21:53 7,168 --------- C:\WINDOWS\system32\kbdukx.dll 2007-03-31 21:53 7,168 --------- C:\WINDOWS\system32\kbdno1.dll 2007-03-31 21:53 7,168 --------- C:\WINDOWS\system32\kbdfi1.dll 2007-03-31 21:53 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll 2007-03-31 21:53 685,056 --------- C:\WINDOWS\system32\drivers\hsfcxts2.sys 2007-03-31 21:53 67,584 --------- C:\WINDOWS\system32\drivers\sdbus.sys 2007-03-31 21:53 63,663 --------- C:\WINDOWS\system32\drivers\ati1rvxx.sys 2007-03-31 21:53 63,488 --------- C:\WINDOWS\system32\drivers\atinxsxx.sys 2007-03-31 21:53 60,416 --------- C:\WINDOWS\system32\fwcfg.dll 2007-03-31 21:53 6,656 --------- C:\WINDOWS\system32\kbdinmal.dll 2007-03-31 21:53 6,656 --------- C:\WINDOWS\system32\kbdinben.dll 2007-03-31 21:53 6,144 --------- C:\WINDOWS\system32\kbdmlt48.dll 2007-03-31 21:53 6,144 --------- C:\WINDOWS\system32\kbdmlt47.dll 2007-03-31 21:53 6,144 --------- C:\WINDOWS\system32\kbdinbe1.dll 2007-03-31 21:53 6,016 --------- C:\WINDOWS\system32\drivers\smbali.sys 2007-03-31 21:53 59,648 --------- C:\WINDOWS\system32\drivers\rfcomm.sys 2007-03-31 21:53 57,856 --------- C:\WINDOWS\system32\drivers\atinbtxx.sys 2007-03-31 21:53 56,623 --------- C:\WINDOWS\system32\drivers\ati1btxx.sys 2007-03-31 21:53 526,848 --------- C:\WINDOWS\system32\p2psvc.dll 2007-03-31 21:53 52,736 --------- C:\WINDOWS\system32\mspmsnsv.dll 2007-03-31 21:53 52,224 --------- C:\WINDOWS\system32\drivers\atinraxx.sys 2007-03-31 21:53 516,768 --------- C:\WINDOWS\system32\ativvaxx.dll 2007-03-31 21:53 50,688 --------- C:\WINDOWS\system32\btpanui.dll 2007-03-31 21:53 50,176 --------- C:\WINDOWS\system32\xmlprovi.dll 2007-03-31 21:53 5,747,488 --a------ C:\WINDOWS\system32\drivers\nv4_mini.sys 2007-03-31 21:53 5,745,536 --a------ C:\WINDOWS\system32\nv4_disp.dll 2007-03-31 21:53 5,632 --------- C:\WINDOWS\system32\kbdmaori.dll 2007-03-31 21:53 49,152 --------- C:\WINDOWS\system32\powercfg.exe 2007-03-31 21:53 484,864 --------- C:\WINDOWS\system32\wmspdmod.dll 2007-03-31 21:53 48,640 --------- C:\WINDOWS\system32\pnrpnsp.dll 2007-03-31 21:53 466,200 --a------ C:\WINDOWS\system32\wuapi.dll 2007-03-31 21:53 46,464 --------- C:\WINDOWS\system32\drivers\gagp30kx.sys 2007-03-31 21:53 452,736 --------- C:\WINDOWS\system32\drivers\mtxparhm.sys 2007-03-31 21:53 44,928 --------- C:\WINDOWS\system32\drivers\agpcpq.sys 2007-03-31 21:53 44,672 --------- C:\WINDOWS\system32\drivers\uagp35.sys 2007-03-31 21:53 44,032 --------- C:\WINDOWS\system32\twext.dll 2007-03-31 21:53 43,008 --------- C:\WINDOWS\system32\drivers\amdagp.sys 2007-03-31 21:53 427,008 --------- C:\WINDOWS\system32\xpob2res.dll 2007-03-31 21:53 42,752 --------- C:\WINDOWS\system32\drivers\alim1541.sys 2007-03-31 21:53 42,368 --------- C:\WINDOWS\system32\drivers\agp440.sys 2007-03-31 21:53 42,240 --------- C:\WINDOWS\system32\drivers\viaagp.sys 2007-03-31 21:53 41,472 --------- C:\WINDOWS\system32\drivers\amdk7.sys 2007-03-31 21:53 41,240 --a------ C:\WINDOWS\system32\wups.dll 2007-03-31 21:53 41,088 --------- C:\WINDOWS\system32\drivers\sisagp.sys 2007-03-31 21:53 404,990 --------- C:\WINDOWS\system32\drivers\slntamr.sys 2007-03-31 21:53 40,832 --------- C:\WINDOWS\system32\drivers\irbus.sys 2007-03-31 21:53 40,320 --------- C:\WINDOWS\system32\drivers\intelppm.sys 2007-03-31 21:53 4,255 --------- C:\WINDOWS\system32\drivers\adv01nt5.dll 2007-03-31 21:53 4,096 --------- C:\WINDOWS\system32\dsprpres.dll 2007-03-31 21:53 397,056 --------- C:\WINDOWS\system32\s3gnb.dll 2007-03-31 21:53 384,512 --------- C:\WINDOWS\system32\mp4sdmod.dll 2007-03-31 21:53 38,016 --------- C:\WINDOWS\system32\drivers\bthmodem.sys 2007-03-31 21:53 377,984 --------- C:\WINDOWS\system32\ati2dvaa.dll 2007-03-31 21:53 36,463 --------- C:\WINDOWS\system32\drivers\ati1tuxx.sys 2007-03-31 21:53 351,232 --------- C:\WINDOWS\system32\winhttp.dll 2007-03-31 21:53 35,456 --------- C:\WINDOWS\system32\drivers\bthprint.sys 2007-03-31 21:53 34,735 --------- C:\WINDOWS\system32\drivers\ati1xsxx.sys 2007-03-31 21:53 327,040 --------- C:\WINDOWS\system32\drivers\ati2mtaa.sys 2007-03-31 21:53 32,866 --------- C:\WINDOWS\system32\slrundll.exe 2007-03-31 21:53 32,866 --------- C:\WINDOWS\slrundll.exe 2007-03-31 21:53 32,768 --------- C:\WINDOWS\system32\ativtmxx.dll 2007-03-31 21:53 32,768 --------- C:\WINDOWS\system32\asr_pfu.exe 2007-03-31 21:53 32,285 --------- C:\WINDOWS\system32\hsfcisp2.dll 2007-03-31 21:53 312,320 --------- C:\WINDOWS\system32\p2pgraph.dll 2007-03-31 21:53 310,272 --------- C:\WINDOWS\system32\mp43dmod.dll 2007-03-31 21:53 31,744 --------- C:\WINDOWS\system32\drivers\atinxbxx.sys 2007-03-31 21:53 30,671 --------- C:\WINDOWS\system32\drivers\ati1raxx.sys 2007-03-31 21:53 30,208 --------- C:\WINDOWS\system32\bthserv.dll 2007-03-31 21:53 30,080 --------- C:\WINDOWS\system32\drivers\rndismpx.sys 2007-03-31 21:53 3,967 --------- C:\WINDOWS\system32\drivers\adv02nt5.dll 2007-03-31 21:53 3,901 --------- C:\WINDOWS\system32\drivers\siint5.dll 2007-03-31 21:53 3,775 --------- C:\WINDOWS\system32\drivers\adv11nt5.dll 2007-03-31 21:53 3,711 --------- C:\WINDOWS\system32\drivers\adv09nt5.dll 2007-03-31 21:53 3,647 --------- C:\WINDOWS\system32\drivers\adv07nt5.dll 2007-03-31 21:53 3,615 --------- C:\WINDOWS\system32\drivers\adv05nt5.dll 2007-03-31 21:53 3,135 --------- C:\WINDOWS\system32\drivers\adv08nt5.dll 2007-03-31 21:53 29,455 --------- C:\WINDOWS\system32\drivers\ati1xbxx.sys 2007-03-31 21:53 29,184 --------- C:\WINDOWS\system32\sdhcinst.dll 2007-03-31 21:53 29,056 --------- C:\WINDOWS\system32\drivers\ip6fw.sys 2007-03-31 21:53 286,792 --------- C:\WINDOWS\system32\slextspk.dll 2007-03-31 21:53 28,672 --------- C:\WINDOWS\system32\drivers\atinsnxx.sys 2007-03-31 21:53 275,200 --------- C:\WINDOWS\system32\drivers\bthport.sys 2007-03-31 21:53 270,848 --------- C:\WINDOWS\system32\sbe.dll 2007-03-31 21:53 263,040 --------- C:\WINDOWS\system32\drivers\http.sys 2007-03-31 21:53 26,624 --a------ C:\WINDOWS\system32\drivers\usbehci.sys 2007-03-31 21:53 26,367 --------- C:\WINDOWS\system32\drivers\ati1snxx.sys 2007-03-31 21:53 25,728 --------- C:\WINDOWS\system32\drivers\hidbth.sys 2007-03-31 21:53 25,471 --------- C:\WINDOWS\system32\drivers\watv10nt.sys 2007-03-31 21:53 25,471 --------- C:\WINDOWS\system32\drivers\atv04nt5.dll 2007-03-31 21:53 24,576 --------- C:\WINDOWS\system32\httpapi.dll 2007-03-31 21:53 233,472 --------- C:\WINDOWS\system32\wmpdxm.dll 2007-03-31 21:53 229,376 --------- C:\WINDOWS\system32\ati2cqag.dll 2007-03-31 21:53 220,032 --------- C:\WINDOWS\system32\drivers\hsfbs2s2.sys 2007-03-31 21:53 22,528 --------- C:\WINDOWS\system32\fltmc.exe 2007-03-31 21:53 22,271 --------- C:\WINDOWS\system32\drivers\watv06nt.sys 2007-03-31 21:53 21,343 --------- C:\WINDOWS\system32\drivers\ati1ttxx.sys 2007-03-31 21:53 21,183 --------- C:\WINDOWS\system32\drivers\atv01nt5.dll 2007-03-31 21:53 201,728 --------- C:\WINDOWS\system32\ati2dvag.dll 2007-03-31 21:53 20,992 --------- C:\WINDOWS\system32\bthci.dll 2007-03-31 21:53 20,480 --------- C:\WINDOWS\system32\encapi.dll 2007-03-31 21:53 2,953,216 --------- C:\WINDOWS\system32\xpsp2res.dll 2007-03-31 21:53 2,113,536 --------- C:\WINDOWS\system32\dxdiagn.dll 2007-03-31 21:53 195,352 --a------ C:\WINDOWS\system32\wuaueng1.dll 2007-03-31 21:53 194,560 --------- C:\WINDOWS\system32\xpsp1res.dll 2007-03-31 21:53 193,024 --------- C:\WINDOWS\system32\fsquirt.exe 2007-03-31 21:53 190,976 --------- C:\WINDOWS\system32\wmerror.dll 2007-03-31 21:53 188,508 --------- C:\WINDOWS\system32\slgen.dll 2007-03-31 21:53 186,368 --------- C:\WINDOWS\system32\encdec.dll 2007-03-31 21:53 180,360 --------- C:\WINDOWS\system32\drivers\ntmtlfax.sys 2007-03-31 21:53 18,944 --------- C:\WINDOWS\system32\drivers\bthusb.sys 2007-03-31 21:53 175,384 --a------ C:\WINDOWS\system32\wuauclt1.exe 2007-03-31 21:53 173,536 --a------ C:\WINDOWS\system32\wuweb.dll 2007-03-31 21:53 17,408 --------- C:\WINDOWS\system32\winshfhc.dll 2007-03-31 21:53 17,279 --------- C:\WINDOWS\system32\drivers\atv10nt5.dll 2007-03-31 21:53 17,024 --------- C:\WINDOWS\system32\drivers\bthenum.sys 2007-03-31 21:53 166,912 --------- C:\WINDOWS\system32\drivers\s3gnbm.sys 2007-03-31 21:53 16,896 --------- C:\WINDOWS\system32\fltlib.dll 2007-03-31 21:53 159,232 --------- C:\WINDOWS\system32\sbeio.dll 2007-03-31 21:53 151,552 --------- C:\WINDOWS\system32\wmidx.dll 2007-03-31 21:53 15,872 --------- C:\WINDOWS\system32\w3ssl.dll 2007-03-31 21:53 15,488 --------- C:\WINDOWS\system32\drivers\mssmbios.sys 2007-03-31 21:53 15,423 --------- C:\WINDOWS\system32\drivers\ch7xxnt5.dll 2007-03-31 21:53 15,104 --------- C:\WINDOWS\system32\drivers\hidir.sys 2007-03-31 21:53 14,336 --------- C:\WINDOWS\system32\drivers\atinpdxx.sys 2007-03-31 21:53 14,336 --------- C:\WINDOWS\system32\auditusr.exe 2007-03-31 21:53 14,143 --------- C:\WINDOWS\system32\drivers\atv06nt5.dll 2007-03-31 21:53 134,656 --------- C:\WINDOWS\system32\mssap.dll 2007-03-31 21:53 13,824 --------- C:\WINDOWS\system32\wscntfy.exe 2007-03-31 21:53 13,824 --------- C:\WINDOWS\system32\drivers\atinttxx.sys 2007-03-31 21:53 13,824 --------- C:\WINDOWS\system32\drivers\atinmdxx.sys 2007-03-31 21:53 13,824 --------- C:\WINDOWS\system32\cmsetacl.dll 2007-03-31 21:53 13,776 --------- C:\WINDOWS\system32\drivers\recagent.sys 2007-03-31 21:53 13,568 --------- C:\WINDOWS\system32\drivers\wacompen.sys 2007-03-31 21:53 13,240 --------- C:\WINDOWS\system32\drivers\slwdmsup.sys 2007-03-31 21:53 129,536 --------- C:\WINDOWS\system32\xmlprov.dll 2007-03-31 21:53 129,535 --------- C:\WINDOWS\system32\drivers\slnt7554.sys 2007-03-31 21:53 128,280 --a------ C:\WINDOWS\system32\wucltui.dll 2007-03-31 21:53 126,686 --------- C:\WINDOWS\system32\drivers\mtlmnt5.sys 2007-03-31 21:53 124,800 --------- C:\WINDOWS\system32\drivers\fltmgr.sys 2007-03-31 21:53 12,800 --------- C:\WINDOWS\system32\spiisupd.exe 2007-03-31 21:53 12,672 --------- C:\WINDOWS\system32\drivers\usb8023x.sys 2007-03-31 21:53 12,672 --------- C:\WINDOWS\system32\drivers\mutohpen.sys 2007-03-31 21:53 12,416 --------- C:\WINDOWS\system32\drivers\tunmp.sys 2007-03-31 21:53 12,047 --------- C:\WINDOWS\system32\drivers\ati1pdxx.sys 2007-03-31 21:53 118,784 --------- C:\WINDOWS\system32\msdadiag.dll 2007-03-31 21:53 116,224 --------- C:\WINDOWS\system32\p2p.dll 2007-03-31 21:53 114,688 --------- C:\WINDOWS\system32\wmpasf.dll 2007-03-31 21:53 11,935 --------- C:\WINDOWS\system32\drivers\wadv11nt.sys 2007-03-31 21:53 11,871 --------- C:\WINDOWS\system32\drivers\wadv09nt.sys 2007-03-31 21:53 11,868 --------- C:\WINDOWS\system32\drivers\mdmxsdk.sys 2007-03-31 21:53 11,807 --------- C:\WINDOWS\system32\drivers\wadv07nt.sys 2007-03-31 21:53 11,615 --------- C:\WINDOWS\system32\drivers\ati1mdxx.sys 2007-03-31 21:53 11,359 --------- C:\WINDOWS\system32\drivers\atv02nt5.dll 2007-03-31 21:53 11,325 --------- C:\WINDOWS\system32\drivers\vchnt5.dll 2007-03-31 21:53 11,295 --------- C:\WINDOWS\system32\drivers\wadv08nt.sys 2007-03-31 21:53 11,136 --------- C:\WINDOWS\system32\drivers\sffdisk.sys 2007-03-31 21:53 108,032 --------- C:\WINDOWS\system32\wshbth.dll 2007-03-31 21:53 104,960 --------- C:\WINDOWS\system32\drivers\atinrvxx.sys 2007-03-31 21:53 100,992 --------- C:\WINDOWS\system32\drivers\bthpan.sys 2007-03-31 21:53 10,240 --------- C:\WINDOWS\system32\drivers\sffp_sd.sys 2007-03-31 21:53 1,888,992 --------- C:\WINDOWS\system32\ati3duag.dll 2007-03-31 21:53 1,737,856 --------- C:\WINDOWS\system32\mtxparhd.dll 2007-03-31 21:53 1,689,088 --------- C:\WINDOWS\system32\d3d9.dll 2007-03-31 21:53 1,309,184 --------- C:\WINDOWS\system32\drivers\mtlstrm.sys 2007-03-31 21:53 1,119,744 --------- C:\WINDOWS\system32\wmsdmoe2.dll 2007-03-31 21:53 1,041,536 --------- C:\WINDOWS\system32\drivers\hsfdpsp2.sys 2007-03-31 21:53 1,001,472 --------- C:\WINDOWS\system32\wmvdmoe2.dll 2007-03-31 21:53 2007-03-31 21:53 2007-03-31 21:52 2007-03-31 21:50 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2007-03-31 21:50 2007-03-31 21:48 2007-03-31 21:19 1,310,720 --ah----- C:\DOCUME~1\KRZYSZ~1\NTUSER.DAT 2007-03-31 21:19 2007-03-31 21:19 2007-03-31 21:19 2007-03-31 21:19 2007-03-31 21:19 2007-03-31 21:19 2007-03-31 21:19 2007-03-31 21:19 2007-03-31 21:18 237,568 --ah----- C:\DOCUME~1\NETWOR~1\NTUSER.DAT 2007-03-31 21:18 237,568 --ah----- C:\DOCUME~1\LOCALS~1\NTUSER.DAT 2007-03-31 21:18 2007-03-31 21:18 2007-03-31 21:18 2007-03-31 21:18 2007-03-31 21:18 2007-03-31 21:16 2007-03-31 21:16 2007-03-31 21:15 237,568 —h----- C:\DOCUME~1\DEFAUL~1\NTUSER.DAT 2007-03-31 21:15 112,128 --a------ C:\WINDOWS\system32\mapi32.dll 2007-03-31 21:15 0 -rahs---- C:\MSDOS.SYS 2007-03-31 21:15 0 -rahs---- C:\IO.SYS 2007-03-31 21:15 0 --a------ C:\CONFIG.SYS 2007-03-31 21:15 0 --a------ C:\AUTOEXEC.BAT 2007-03-31 21:15 2007-03-31 21:14 45,568 --a------ C:\WINDOWS\system32\safrslv.dll 2007-03-31 21:14 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2007-03-31 21:14 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll 2007-03-31 21:14 382,464 --a------ C:\WINDOWS\system32\qmgr.dll 2007-03-31 21:14 29,696 --a------ C:\WINDOWS\system32\safrdm.dll 2007-03-31 21:14 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2007-03-31 21:14 11,264 --a------ C:\WINDOWS\system32\atrace.dll 2007-03-31 21:14 2007-03-31 21:14 2007-03-31 21:14 2007-03-31 21:14 2007-03-31 21:14 2007-03-31 21:14 2007-03-31 21:13 86,016 --a------ C:\WINDOWS\system32\isign32.dll 2007-03-31 21:13 81,920 --a------ C:\WINDOWS\system32\ils.dll 2007-03-31 21:13 73,728 --a------ C:\WINDOWS\system32\icwdial.dll 2007-03-31 21:13 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2007-03-31 21:13 69,632 --a------ C:\WINDOWS\system32\msconf.dll 2007-03-31 21:13 678,400 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-03-31 21:13 67,584 --a------ C:\WINDOWS\system32\srclient.dll 2007-03-31 21:13 67,584 --a------ C:\WINDOWS\system32\acctres.dll 2007-03-31 21:13 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll 2007-03-31 21:13 49,664 --a------ C:\WINDOWS\system32\inetres.dll 2007-03-31 21:13 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll 2007-03-31 21:13 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2007-03-31 21:13 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2007-03-31 21:13 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2007-03-31 21:13 278,528 --a------ C:\WINDOWS\system32\mstask.dll 2007-03-31 21:13 278,528 --a------ C:\WINDOWS\system32\inetcfg.dll 2007-03-31 21:13 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll 2007-03-31 21:13 240,128 --a------ C:\WINDOWS\system32\srrstr.dll 2007-03-31 21:13 21,856 --a------ C:\WINDOWS\system32\emptyregdb.dat 2007-03-31 21:13 192,000 --a------ C:\WINDOWS\system32\schedsvc.dll 2007-03-31 21:13 171,008 --a------ C:\WINDOWS\system32\srsvc.dll 2007-03-31 21:13 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2007-03-31 21:13 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2007-03-31 21:13 12,288 --a------ C:\WINDOWS\system32\mstinit.exe 2007-03-31 21:13 105,984 --a------ C:\WINDOWS\system32\msoert2.dll 2007-03-31 21:13 2007-03-31 21:13 2007-03-31 21:13 2007-03-31 21:13 2007-03-31 21:13 2007-03-31 21:12 949,248 --a------ C:\WINDOWS\system32\msdtctm.dll 2007-03-31 21:12 94,720 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2007-03-31 21:12 90,112 --a------ C:\WINDOWS\system32\mtxoci.dll 2007-03-31 21:12 9,728 --a------ C:\WINDOWS\system32\reset.exe 2007-03-31 21:12 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2007-03-31 21:12 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll 2007-03-31 21:12 82,432 --a------ C:\WINDOWS\system32\comrepl.dll 2007-03-31 21:12 80,896 --a------ C:\WINDOWS\system32\charmap.exe 2007-03-31 21:12 73,216 --a------ C:\WINDOWS\system32\avwav.dll 2007-03-31 21:12 67,072 --a------ C:\WINDOWS\system32\rdshost.exe 2007-03-31 21:12 655,360 --a------ C:\WINDOWS\system32\mstscax.dll 2007-03-31 21:12 628,224 --a------ C:\WINDOWS\system32\catsrvut.dll 2007-03-31 21:12 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe 2007-03-31 21:12 62,464 --a------ C:\WINDOWS\system32\colbact.dll 2007-03-31 21:12 605,696 --a------ C:\WINDOWS\system32\getuname.dll 2007-03-31 21:12 60,928 --a------ C:\WINDOWS\system32\remotepg.dll 2007-03-31 21:12 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll 2007-03-31 21:12 6,144 --a------ C:\WINDOWS\system32\msdtc.exe 2007-03-31 21:12 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll 2007-03-31 21:12 58,880 --a------ C:\WINDOWS\system32\licwmi.dll 2007-03-31 21:12 57,344 --a------ C:\WINDOWS\system32\sol.exe 2007-03-31 21:12 56,320 --a------ C:\WINDOWS\system32\servdeps.dll 2007-03-31 21:12 55,808 --a------ C:\WINDOWS\system32\freecell.exe 2007-03-31 21:12 540,160 --a------ C:\WINDOWS\system32\comuid.dll 2007-03-31 21:12 54,272 --a------ C:\WINDOWS\system32\stclient.dll 2007-03-31 21:12 539,136 --a------ C:\WINDOWS\system32\spider.exe 2007-03-31 21:12 501,248 --a------ C:\WINDOWS\system32\clbcatq.dll 2007-03-31 21:12 5,632 --a------ C:\WINDOWS\system32\write.exe 2007-03-31 21:12 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2007-03-31 21:12 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2007-03-31 21:12 44,544 --a------ C:\WINDOWS\system32\hticons.dll 2007-03-31 21:12 425,472 --a------ C:\WINDOWS\system32\msdtcprx.dll 2007-03-31 21:12 408,576 --a------ C:\WINDOWS\system32\mstsc.exe 2007-03-31 21:12 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2007-03-31 21:12 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2007-03-31 21:12 4,096 --a------ C:\WINDOWS\system32\mtxex.dll 2007-03-31 21:12 38,912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2007-03-31 21:12 35,328 --a------ C:\WINDOWS\system32\winchat.exe 2007-03-31 21:12 349,696 --a------ C:\WINDOWS\system32\hypertrm.dll 2007-03-31 21:12 345,088 --a------ C:\WINDOWS\system32\mspaint.exe 2007-03-31 21:12 33,792 --a------ C:\WINDOWS\system32\regini.exe 2007-03-31 21:12 296,448 --a------ C:\WINDOWS\system32\termsrv.dll 2007-03-31 21:12 25,600 --a------ C:\WINDOWS\system32\comaddin.dll 2007-03-31 21:12 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2007-03-31 21:12 231,424 --a------ C:\WINDOWS\system32\avtapi.dll 2007-03-31 21:12 229,888 --a------ C:\WINDOWS\system32\catsrv.dll 2007-03-31 21:12 22,528 --a------ C:\WINDOWS\system32\qwinsta.exe 2007-03-31 21:12 22,528 --a------ C:\WINDOWS\system32\msg.exe 2007-03-31 21:12 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2007-03-31 21:12 20,992 --a------ C:\WINDOWS\system32\qprocess.exe 2007-03-31 21:12 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll 2007-03-31 21:12 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys 2007-03-31 21:12 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2007-03-31 21:12 187,904 --a------ C:\WINDOWS\system32\cmprops.dll 2007-03-31 21:12 187,904 --a------ C:\WINDOWS\system32\accwiz.exe 2007-03-31 21:12 17,920 --a------ C:\WINDOWS\system32\tsshutdn.exe 2007-03-31 21:12 17,920 --a------ C:\WINDOWS\system32\mmfutil.dll 2007-03-31 21:12 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe 2007-03-31 21:12 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2007-03-31 21:12 16,384 --a------ C:\WINDOWS\system32\tskill.exe 2007-03-31 21:12 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe 2007-03-31 21:12 16,384 --a------ C:\WINDOWS\system32\avmeter.dll 2007-03-31 21:12 15,872 --a------ C:\WINDOWS\system32\logoff.exe 2007-03-31 21:12 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll 2007-03-31 21:12 15,360 --a------ C:\WINDOWS\system32\tsdiscon.exe 2007-03-31 21:12 15,360 --a------ C:\WINDOWS\system32\tscon.exe 2007-03-31 21:12 15,360 --a------ C:\WINDOWS\system32\shadow.exe 2007-03-31 21:12 147,968 --a------ C:\WINDOWS\system32\rdchost.dll 2007-03-31 21:12 147,456 --a------ C:\WINDOWS\system32\comsnap.dll 2007-03-31 21:12 141,824 --a------ C:\WINDOWS\system32\sessmgr.exe 2007-03-31 21:12 139,400 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2007-03-31 21:12 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe 2007-03-31 21:12 132,608 --a------ C:\WINDOWS\system32\sndrec32.exe 2007-03-31 21:12 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2007-03-31 21:12 128,000 --a------ C:\WINDOWS\system32\mshearts.exe 2007-03-31 21:12 125,208 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-03-31 21:12 124,928 --a------ C:\WINDOWS\system32\mplay32.exe 2007-03-31 21:12 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2007-03-31 21:12 119,808 --a------ C:\WINDOWS\system32\winmine.exe 2007-03-31 21:12 115,200 --a------ C:\WINDOWS\system32\calc.exe 2007-03-31 21:12 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll 2007-03-31 21:12 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll 2007-03-31 21:12 11,264 --a------ C:\WINDOWS\system32\icaapi.dll 2007-03-31 21:12 103,424 --a------ C:\WINDOWS\system32\clipbrd.exe 2007-03-31 21:12 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-03-31 21:12 1,251,840 --a------ C:\WINDOWS\system32\comsvcs.dll 2007-03-31 21:12 1,225 --a------ C:\WINDOWS\system32\usrlogon.cmd 2007-03-31 21:12 2007-03-31 21:12 2007-03-31 21:12 2007-03-31 21:12 2007-03-31 21:12 2007-03-31 21:12 2007-03-31 21:12 (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-04-01 21:05 62 --ahs---- C:\DOCUME~1\KRZYSZ~1\DANEAP~1\desktop.ini 2007-04-01 09:09 49712 --a------ C:\WINDOWS\system32\perfc015.dat 2007-04-01 09:09 355830 --a------ C:\WINDOWS\system32\perfh015.dat 2007-03-31 21:12 -------- d-------- C:\Program Files\usugi online 2007-01-29 23:04 200768 --a------ C:\WINDOWS\system32\klogon.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] “SpeedTouch USB Diagnostics”="“C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe” /icon" “AVP”="“C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe”" “NvCplDaemon”=“RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk] “path”=“C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk” “backup”=“C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup” “location”=“Common Startup” “command”=“C:\PROGRA~1\Adobe\READER~1.0\Reader\READER~1.EXE " “item”=“Adobe Reader Speed Launch” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Synchronizer.lnk] “path”=“C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Synchronizer.lnk” “backup”=“C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup” “location”=“Common Startup” “command”=“C:\PROGRA~1\Adobe\READER~1.0\Reader\ADOBEC~1.EXE " “item”=“Adobe Reader Synchronizer” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“Ares” “hkey”=“HKCU” “command”=”“C:\Program Files\Ares\Ares.exe” -h” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“ctfmon” “hkey”=“HKCU” “command”=“C:\WINDOWS\system32\ctfmon.exe” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHelper] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“CTHELPER” “hkey”=“HKLM” “command”=“CTHELPER.EXE” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashGet] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“FlashGet” “hkey”=“HKLM” “command”="“C:\Program Files\FlashGet\FlashGet.exe” /min" “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“msmsgs” “hkey”=“HKCU” “command”="“C:\Program Files\Messenger\msmsgs.exe” /background" “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“NvCpl” “hkey”=“HKLM” “command”=“RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“NvMcTray” “hkey”=“HKLM” “command”=“RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“nwiz” “hkey”=“HKLM” “command”=“nwiz.exe /install” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SBDrvDet] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“SBDrvDet” “hkey”=“HKLM” “command”=“C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“Skype” “hkey”=“HKCU” “command”="“C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized" “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SW20] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“sw20” “hkey”=“HKLM” “command”=“C:\WINDOWS\system32\sw20.exe” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SW24] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“sw24” “hkey”=“HKLM” “command”=“C:\WINDOWS\system32\sw24.exe” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“UpdReg” “hkey”=“HKLM” “command”=“C:\WINDOWS\UpdReg.EXE” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinSys2] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“winsys2” “hkey”=“HKLM” “command”=“C:\WINDOWS\system32\winsys2.exe” “inimapping”=“0” [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] “appinit_dlls”=“C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll” [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] “SecurityProviders”=“msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll” [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 ******************************************************************** catchme 0.2 W2K/XP/Vista - userland rootkit detector by Gmer, 17 October 2006 http://www.gmer.net scanning hidden processes … scanning hidden services … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 ******************************************************************** Completion time: 07-04-01 9:25:43

HJT:

Logfile of HijackThis v1.99.1 Scan saved at 09:26:32, on 2007-04-01 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Wapster\AQQ\AQQ.exe C:\Program Files\Opera\Opera.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\SoftwareDistribution\Download\c383584119af831a75aa3baf2b5378b8\update\update.exe C:\Documents and Settings\Krzysztof\Pulpit\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll O4 - HKLM…\Run: [speedTouch USB Diagnostics] “C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe” /icon O4 - HKLM…\Run: [AVP] “C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe” O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Stáhnout všechno FlashGetem - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra ‘Tools’ menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [iNTERNATIONAL] International* O17 - HKLM\System\CCS\Services\Tcpip…{026049B9-CD09-4E34-A6B2-BD51E69EC848}: NameServer = 213.241.79.37 83.238.255.76 O17 - HKLM\System\CS1\Services\Tcpip…{026049B9-CD09-4E34-A6B2-BD51E69EC848}: NameServer = 213.241.79.37 83.238.255.76 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

[Gutek]

Jest już Ok

OT-y KOSZ już jest Ok - nic więcej nie potrzeba