Programy bardzo długo się włączają

Dla specjalistów Bezpieczeństwo
#1

Jak w temacie. Bardzo długo mi się włączają programy. Jest tak, że 2 razy kliknę i potem czekam z 30 sekund i program dopiero się włącza. Przeskanowałem avastem cały system i nic, przeczyscilem ccleanerem i tez nic(ccleaner bardzo sie wiesza przy skrótach w menu start). oto log z hijackthis:

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 09:25:09, on 2010-11-27

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18527)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe

C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe

C:\Program Files\ATKOSD2\ATKOSD2.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

D:\programy\Avast\AvastUI.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\system32\igfxsrvc.exe

C:\Windows\system32\wbem\unsecapp.exe

D:\programy\mozilla\firefox.exe

C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe

C:\Windows\system32\wuauclt.exe

D:\programy\mozilla\plugin-container.exe

D:\programy\HiJackThis\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - (no file)

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O4 - HKLM…\Run: [CLMLServer] “C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe”

O4 - HKLM…\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe

O4 - HKLM…\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe

O4 - HKLM…\Run: [ATKOSD2] “C:\Program Files\ATKOSD2\ATKOSD2.exe”

O4 - HKLM…\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM…\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM…\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM…\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM…\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM…\Run: [avast5] “D:\programy\Avast\avastUI.exe” /nogui

O4 - HKCU…\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU…\Run: [ALLUpdate] “D:\programy\ALLPlayer\ALLUpdate.exe” “sleep”

O4 - HKUS\S-1-5-18…\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User ‘SYSTEM’)

O4 - HKUS.DEFAULT…\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User ‘Default user’)

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra ‘Tools’ menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: Pokaż lub ukryj HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s … wflash.cab

O17 - HKLM\System\CCS\Services\Tcpip…{F52BF99F-E6F4-4F1E-9157-E20CAE8BCF1E}: NameServer = 208.67.222.222

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe

O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe

O23 - Service: avast! Antivirus - AVAST Software - D:\programy\Avast\AvastSvc.exe

O23 - Service: avast! Mail Scanner - AVAST Software - D:\programy\Avast\AvastSvc.exe

O23 - Service: avast! Web Scanner - AVAST Software - D:\programy\Avast\AvastSvc.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NanoServiceMain - Panda Security, S.L. - C:\DYSK C\Panda Cloud AV\PSANHost.exe

–

End of file - 5354 bytes

#2

pobierz OTL http://www.dobreprogramy.pl/OTL,Program … 19450.html

kliknij skan i treść tych plików wklej na wklej.to osobnie podaj linki do nich

#3

To jeszcze zdefragmentuj dysk.

#4

dysk defragmentowalem tydzien temu ;), jeszcze zanim pojawily sie problemy, ktore w sumie mam od wczoraj

#5

narazie niech wstawi log z OTL :wink:

#6

to kolego jeszcze mi powiedz, jak mam wstawić ten log z OTL-a, bo niestety mi się nie mieści tutaj

– Dodane 27.11.2010 (So) 10:20 –

znaczy ten drugi mi sie nie miesci ten OTL.txt, a wstawiam tutaj Extras.txt:

OTL Extras logfile created on: 2010-11-27 10:04:49 - Run 1

OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\maria\Downloads

Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation

Internet Explorer (Version = 7.0.6001.18000)

Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 51,00% Memory free

4,00 Gb Paging File | 3,00 Gb Available in Paging File | 73,00% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 74,52 Gb Total Space | 34,81 Gb Free Space | 46,72% Space Free | Partition Type: NTFS

Drive D: | 64,76 Gb Total Space | 49,92 Gb Free Space | 77,08% Space Free | Partition Type: NTFS

Computer Name: RADEK | User Name: maria | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (All) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes]

.chm [@ = chm.file] – C:\Windows\hh.exe (Microsoft Corporation)

.cpl [@ = cplfile] – C:\Windows\System32\shell32.dll (Microsoft Corporation)

.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)

.hta [@ = htafile] – C:\Windows\System32\mshta.exe (Microsoft Corporation)

.html [@ = htmlfile] – C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

.inf [@ = inffile] – C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)

.ini [@ = inifile] – C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)

.url [@ = InternetShortcut] – C:\Windows\System32\ieframe.dll (Microsoft Corporation)

.js [@ = JSFile] – C:\Windows\System32\WScript.exe (Microsoft Corporation)

.jse [@ = JSEFile] – C:\Windows\System32\WScript.exe (Microsoft Corporation)

.reg [@ = regfile] – C:\Windows\regedit.exe (Microsoft Corporation)

.txt [@ = txtfile] – C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)

.vbe [@ = VBEFile] – C:\Windows\System32\WScript.exe (Microsoft Corporation)

.vbs [@ = VBSFile] – C:\Windows\System32\WScript.exe (Microsoft Corporation)

.wsf [@ = WSFFile] – C:\Windows\System32\WScript.exe (Microsoft Corporation)

.wsh [@ = WSHFile] – C:\Windows\System32\WScript.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes]

.html [@ = FirefoxHTML] – D:\programy\mozilla\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\shell[command]\command]

batfile [edit] – %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)

batfile [open] – “%1” %*

batfile [print] – %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)

chm.file [open] – “%SystemRoot%\hh.exe” %1 (Microsoft Corporation)

cmdfile [edit] – %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)

cmdfile [open] – “%1” %*

cmdfile [print] – %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)

comfile [open] – “%1” %*

cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL “%1”,%* (Microsoft Corporation)

exefile [open] – “%1” %*

helpfile [open] – Reg Error: Key error.

hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)

htafile [open] – C:\Windows\system32\mshta.exe “%1” %* (Microsoft Corporation)

htmlfile [edit] – “C:\Program Files\Microsoft Office\Office12\msohtmed.exe” %1 (Microsoft Corporation)

htmlfile [open] – “C:\Program Files\Internet Explorer\iexplore.exe” -nohome (Microsoft Corporation)

htmlfile [opennew] – “C:\Program Files\Internet Explorer\iexplore.exe” %1 (Microsoft Corporation)

htmlfile [print] – rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML “%1” (Microsoft Corporation)

http [open] – “C:\Program Files\Internet Explorer\iexplore.exe” -nohome (Microsoft Corporation)

https [open] – “C:\Program Files\Internet Explorer\iexplore.exe” -nohome (Microsoft Corporation)

inffile [install] – %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)

inffile [open] – %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)

inffile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)

inifile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)

inifile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)

InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l (Microsoft Corporation)

InternetShortcut [print] – rundll32.exe C:\Windows\system32\mshtml.dll,PrintHTML “%1” (Microsoft Corporation)

jsfile [edit] – %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)

jsfile [open] – %SystemRoot%\System32\WScript.exe “%1” %* (Microsoft Corporation)

jsfile [print] – %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)

jsefile [edit] – %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)

jsefile [open] – %SystemRoot%\System32\WScript.exe “%1” %* (Microsoft Corporation)

jsefile [print] – %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)

piffile [open] – “%1” %*

regfile [edit] – %SystemRoot%\system32\notepad.exe “%1” (Microsoft Corporation)

regfile [open] – regedit.exe “%1” (Microsoft Corporation)

regfile [merge] – Reg Error: Key error.

regfile [print] – %SystemRoot%\system32\notepad.exe /p “%1” (Microsoft Corporation)

scrfile [config] – “%1”

scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] – “%1” /S

txtfile [edit] – Reg Error: Key error.

txtfile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)

txtfile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)

txtfile [printto] – %SystemRoot%\system32\notepad.exe /pt “%1” “%2” “%3” “%4” (Microsoft Corporation)

vbefile [edit] – “%SystemRoot%\System32\Notepad.exe” %1 (Microsoft Corporation)

vbefile [open] – %SystemRoot%\System32\WScript.exe “%1” %* (Microsoft Corporation)

vbefile [print] – “%SystemRoot%\System32\Notepad.exe” /p %1 (Microsoft Corporation)

vbsfile [edit] – “%SystemRoot%\System32\Notepad.exe” %1 (Microsoft Corporation)

vbsfile [open] – %SystemRoot%\System32\WScript.exe “%1” %* (Microsoft Corporation)

vbsfile [print] – “%SystemRoot%\System32\Notepad.exe” /p %1 (Microsoft Corporation)

wsffile [edit] – “%SystemRoot%\System32\Notepad.exe” %1 (Microsoft Corporation)

wsffile [open] – “%SystemRoot%\System32\WScript.exe” “%1” %* (Microsoft Corporation)

wsffile [print] – “%SystemRoot%\System32\Notepad.exe” /p %1 (Microsoft Corporation)

wshfile [open] – “%SystemRoot%\System32\WScript.exe” “%1” %* (Microsoft Corporation)

Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] – cmd.exe /s /k pushd “%V” (Microsoft Corporation)

Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [OneNote.Open] – C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE “%L” (Microsoft Corporation)

Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] – “C:\Program Files\Internet Explorer\iexplore.exe” %1 (Microsoft Corporation)

CLSID{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – “C:\Program Files\Internet Explorer\iexplore.exe” (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

“cval” = 1

“FirewallDisableNotify” = 0

“AntiVirusDisableNotify” = 0

“UpdatesDisableNotify” = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

“DisableMonitoring” = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

“DisableMonitoring” = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

“DisableMonitoring” = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

“AntiVirusOverride” = 0

“AntiSpywareOverride” = 0

“FirewallOverride” = 0

“VistaSp1” = Reg Error: Unknown registry data type – File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

“DisableSR” = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

“EnableFirewall” = 1

“DisableNotifications” = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

“EnableFirewall” = 1

“DisableNotifications” = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

“EnableFirewall” = 1

“DisableNotifications” = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

“{0198E4B0-CFA0-4587-A563-05EFB9464340}” = rport=445 | protocol=6 | dir=out | app=system |

“{11502DFF-3D15-4592-8C90-BBA5726384AD}” = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

“{12D74D21-C680-40B2-A20F-B257FCBDE55F}” = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

“{1C42D6BD-7C2A-42EF-8D2E-55028F671EFA}” = lport=2869 | protocol=6 | dir=in | app=system |

“{1C5A3365-8FE7-4A78-B1D6-74D9BB13AB74}” = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |

“{245C6F0F-FAB0-48CA-ADEB-30EAF422D497}” = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

“{2B1C493C-897A-454B-8D97-1B26CE3A44E6}” = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |

“{2EF8543F-3A09-4804-AA00-764E73454548}” = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |

“{3768160D-8402-4DA4-BF9C-152EF36F4CAA}” = rport=2869 | protocol=6 | dir=out | app=system |

“{5DFE804A-AF88-4A9C-851F-21E24B0939F5}” = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

“{68234443-EA46-445F-B9DC-3DCB2530B5C5}” = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |

“{7843EE28-6DBF-4B17-A610-7C037643A33B}” = lport=138 | protocol=17 | dir=in | app=system |

“{7D4D56CB-23B5-40F9-8AA4-B582C5A771CE}” = rport=137 | protocol=17 | dir=out | app=system |

“{8756175E-0E3A-4252-91FF-88013F4EBD4C}” = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

“{9E529640-E242-482F-962D-739F45B60793}” = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

“{A12077B7-38A0-4B28-B475-615B714FAC6C}” = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

“{AE02998D-7D8D-428C-BAAD-C406F711E94D}” = lport=137 | protocol=17 | dir=in | app=system |

“{BB0E64F0-06A1-4F9B-AA9C-DCA512017D6F}” = rport=138 | protocol=17 | dir=out | app=system |

“{BD36437E-A20D-4AB9-8AB7-0AB68425C570}” = lport=445 | protocol=6 | dir=in | app=system |

“{BD938693-BCA0-41DC-8F28-8351BA66099A}” = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |

“{D5750597-BF06-4A16-84FA-6E3923083D03}” = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

“{DF292BB2-BBD1-4C84-B6C2-2503E413AFB4}” = lport=139 | protocol=6 | dir=in | app=system |

“{E4001C09-D759-410F-9149-52D1EDE86C27}” = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |

“{E7FC80FE-AE18-4C37-8AA7-E68CEECEA733}” = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |

“{E9A78EF2-2D68-458D-A444-62262CB8311E}” = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |

“{F033765B-010A-4648-9BBF-A771A5004AD9}” = rport=139 | protocol=6 | dir=out | app=system |

“{F0F2E6A5-1FEB-4DA5-B610-B817EB97EEC0}” = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

“{085B50E8-F93B-48DB-8A0B-53E4DDC149C7}” = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |

“{0F952615-DFD9-42AB-80DF-74FE27B10C5A}” = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |

“{116D8174-2F98-48BE-AE99-2FC59164780C}” = dir=in | app=c:\program files\common files\hp\digital imaging\bin\hpqphotocrm.exe |

“{1600A892-F435-4A9D-B8AC-C95B767A1EE7}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpqkygrp.exe |

“{17806C38-0210-475E-8372-226ADE8EFD0C}” = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |

“{1A59BE55-D35A-4792-830D-58C984B31726}” = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |

“{1B4E01FA-65E7-446B-90A1-C497B289A87E}” = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |

“{453B49B8-92AF-4434-BE32-4FC81DEEDF31}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpiscnapp.exe |

“{56C5C60B-C7F7-43C3-8D95-56949FFEC2E1}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpfccopy.exe |

“{58A9170E-DB14-48B0-988A-563E780607E8}” = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |

“{669233CA-EC7E-4085-BBC3-6686F8DFAC59}” = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |

“{69B3ACA9-19C0-4DDE-B255-BC15F6AB89F2}” = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |

“{6A819A12-6E20-4B00-8083-4BC8506235D6}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgplgtupl.exe |

“{6FACC39A-B10D-4619-9767-153E80E13557}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpqtra08.exe |

“{6FCB2395-8A73-4196-B613-C10E62EFFD4E}” = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |

“{71D2A95F-8AC8-443C-939A-591ED6837B60}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpoews01.exe |

“{742BC2F2-D75B-4729-B1B6-740F8BF175C0}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpqste08.exe |

“{76A17DA2-5007-4B80-868E-5F5B84F6B3EB}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgh.exe |

“{772506EA-E28D-4D7A-B6A4-A158DDDB8669}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgm.exe |

“{82EE5CBA-7F7F-478C-B020-D5D9F0392DA7}” = dir=in | app=c:\program files\skype\phone\skype.exe |

“{86AAB6A3-B81F-4B2A-8D48-C77518527FB7}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpqcopy2.exe |

“{87B0C18A-B4B8-4607-8DF1-96D112E5C030}” = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |

“{8DDDFB85-21FC-4E54-A710-C27B3827BBB8}” = dir=in | app=c:\program files\hp\digital imaging\smart web printing\smartwebprintexe.exe |

“{928CE833-F2C5-4813-8168-39A68C48D670}” = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |

“{992E57C2-40BD-42A1-A28D-4ECD84B46EBD}” = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |

“{A3712C3C-9F08-43B2-9C9B-0B28412669D4}” = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgpc01.exe |

“{A50931AE-BA70-4A2D-9750-17469D59E38C}” = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |

“{AFB92015-F381-47CE-A459-C2FF2CD2CF07}” = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |

“{C0268285-97A1-4045-9C2E-CCCF9E1FE884}” = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |

“{CDE3E7BD-E15A-4D68-B7FB-2B23CA8C2916}” = dir=in | app=c:\program files\hp\hp software update\hpwucli.exe |

“{E98737A9-DCB4-40D4-B472-365DE992EE27}” = dir=in | app=c:\program files\hp\digital imaging\bin\hposid01.exe |

“TCP Query User{06FE2541-22B1-4907-93F0-215C404F5810}D:\użytki\nowe gg\nowe gadu-gadu\gg.exe” = protocol=6 | dir=in | app=d:\użytki\nowe gg\nowe gadu-gadu\gg.exe |

“TCP Query User{0F3881A9-308F-4E8D-B44E-D0C4A5887A5B}D:\programy\do sciagania\ares\ares.exe” = protocol=6 | dir=in | app=d:\programy\do sciagania\ares\ares.exe |

“TCP Query User{25D644D3-A15E-4A28-AA74-7EF45A288DB8}D:\programy\do ściągania\ares\ares.exe” = protocol=6 | dir=in | app=d:\programy\do ściągania\ares\ares.exe |

“TCP Query User{29A1402E-5ACF-4647-8D5A-D86AD6BFA5E9}D:\programy\sopcast\sopcast.exe” = protocol=6 | dir=in | app=d:\programy\sopcast\sopcast.exe |

“TCP Query User{2CC091AF-E10D-403D-B61B-928C5D55C7E4}D:\program files\bearshare\bearshare.exe” = protocol=6 | dir=in | app=d:\program files\bearshare\bearshare.exe |

“TCP Query User{38F06467-E74D-46DC-8803-2710DABEE4AA}C:\dysk c\instalki\utorrent.exe” = protocol=6 | dir=in | app=c:\dysk c\instalki\utorrent.exe |

“TCP Query User{397781D9-AA14-4EDC-BC4A-D1D3363F3141}D:\programy\sopcast\adv\sopadver.exe” = protocol=6 | dir=in | app=d:\programy\sopcast\adv\sopadver.exe |

“TCP Query User{3F0E2DF6-60F1-42CD-8A0E-6D1DD457A4CB}D:\programy\sopcast\sopcast.exe” = protocol=6 | dir=in | app=d:\programy\sopcast\sopcast.exe |

“TCP Query User{5A6FFBE7-0C2A-49ED-A6A2-EC9CAEA4C3CF}C:\dysk c\instalki\utorrent.exe” = protocol=6 | dir=in | app=c:\dysk c\instalki\utorrent.exe |

“TCP Query User{5AF6FBCC-3013-475E-A66D-34B0AB19E86D}D:\gry\aoe ii\empires2.exe” = protocol=6 | dir=in | app=d:\gry\aoe ii\empires2.exe |

“TCP Query User{7975A0DD-4F66-425C-B60A-F4F785D16072}D:\instalki\utorrent.exe” = protocol=6 | dir=in | app=d:\instalki\utorrent.exe |

“TCP Query User{855A31A4-D6AF-4ED8-9592-5A1C2E30CF7D}D:\gry\blobby(dobreprogramy.pl)\volley.exe” = protocol=6 | dir=in | app=d:\gry\blobby(dobreprogramy.pl)\volley.exe |

“TCP Query User{98F92512-8E20-4E92-8C37-2DF8794AED78}D:\programy\do sciagania\bearflix\bearflix.exe” = protocol=6 | dir=in | app=d:\programy\do sciagania\bearflix\bearflix.exe |

“TCP Query User{9980FF77-6D7F-4898-A69B-F4F980855002}D:\gry\blobby(dobreprogramy.pl)\volley.exe” = protocol=6 | dir=in | app=d:\gry\blobby(dobreprogramy.pl)\volley.exe |

“TCP Query User{9C402740-3FCD-42EA-901C-28825448991A}D:\gry\111małe gierki\blobby(dobreprogramy.pl)\volley.exe” = protocol=6 | dir=in | app=d:\gry\111małe gierki\blobby(dobreprogramy.pl)\volley.exe |

“TCP Query User{AAD76CCE-D4F4-41C6-AA8A-6D758C5E8C26}D:\programy\torrent searcher 6\gift\giftl.exe” = protocol=6 | dir=in | app=d:\programy\torrent searcher 6\gift\giftl.exe |

“TCP Query User{B161E57C-613F-4543-A1A0-0881E52DE29D}D:\programy\do ściągania\ares\ares.exe” = protocol=6 | dir=in | app=d:\programy\do ściągania\ares\ares.exe |

“TCP Query User{C0C27A27-8ECC-4C38-A173-7804DB767755}D:\programy\do sciagania\shareaza\shareaza.exe” = protocol=6 | dir=in | app=d:\programy\do sciagania\shareaza\shareaza.exe |

“TCP Query User{C2F69361-01EF-4421-9725-F36268868FE2}D:\programy\gadu-gadu\gadu-gadu 10\gg.exe” = protocol=6 | dir=in | app=d:\programy\gadu-gadu\gadu-gadu 10\gg.exe |

“TCP Query User{C390C391-978F-4A65-ACEA-3FB12FB74797}D:\programy\do sciagania\ares\ares.exe” = protocol=6 | dir=in | app=d:\programy\do sciagania\ares\ares.exe |

“TCP Query User{D501C6E5-4378-44D1-8AD4-0240356F280A}D:\programy\gadu-gadu\gg.exe” = protocol=6 | dir=in | app=d:\programy\gadu-gadu\gg.exe |

“TCP Query User{D519A0C9-5DEC-47AE-96DD-365CB5644043}D:\programy\windvd\windvd.exe” = protocol=6 | dir=in | app=d:\programy\windvd\windvd.exe |

“TCP Query User{E365377D-9BA2-4A9A-BE89-679965FA151F}C:\program files\bearshare applications\bearshare\bearshare.exe” = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |

“TCP Query User{EAEAC1FD-C7DD-443D-9650-E95AC3BA8851}D:\użytki\gadu-gadu 10\gg.exe” = protocol=6 | dir=in | app=d:\użytki\gadu-gadu 10\gg.exe |

“TCP Query User{F20884DD-0FFB-4609-AC4A-2E08847269E4}C:\users\maria\appdata\locallow\powerchallenge\powersoccer\powersoccer.exe” = protocol=6 | dir=in | app=c:\users\maria\appdata\locallow\powerchallenge\powersoccer\powersoccer.exe |

“TCP Query User{FBF34CD2-81AA-45C5-9148-86D7D197C241}D:\programy\sopcast\adv\sopadver.exe” = protocol=6 | dir=in | app=d:\programy\sopcast\adv\sopadver.exe |

“UDP Query User{099762AF-A50C-4DC2-9A14-7DB7800F2974}D:\programy\do sciagania\bearflix\bearflix.exe” = protocol=17 | dir=in | app=d:\programy\do sciagania\bearflix\bearflix.exe |

“UDP Query User{14D15BB0-6E92-49EA-A1AA-B2F0202E8AFF}D:\programy\gadu-gadu\gadu-gadu 10\gg.exe” = protocol=17 | dir=in | app=d:\programy\gadu-gadu\gadu-gadu 10\gg.exe |

“UDP Query User{3BDA1C3A-3E03-44E5-B83F-06F0C35ADB9A}C:\users\maria\appdata\locallow\powerchallenge\powersoccer\powersoccer.exe” = protocol=17 | dir=in | app=c:\users\maria\appdata\locallow\powerchallenge\powersoccer\powersoccer.exe |

“UDP Query User{5145E1AA-E396-4880-ACE6-673D9CB2868A}D:\programy\do ściągania\ares\ares.exe” = protocol=17 | dir=in | app=d:\programy\do ściągania\ares\ares.exe |

“UDP Query User{51F4946C-1230-4488-BE9B-25032B6066E7}D:\użytki\gadu-gadu 10\gg.exe” = protocol=17 | dir=in | app=d:\użytki\gadu-gadu 10\gg.exe |

“UDP Query User{6535709C-2482-4A4A-83F8-7FA16BDA51FD}D:\programy\do sciagania\ares\ares.exe” = protocol=17 | dir=in | app=d:\programy\do sciagania\ares\ares.exe |

“UDP Query User{6B99D23B-77FB-410C-BD2B-727CA0CD6103}C:\program files\bearshare applications\bearshare\bearshare.exe” = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |

“UDP Query User{6C68DB6B-4DEC-4180-A9B1-840AFA497F6A}D:\użytki\nowe gg\nowe gadu-gadu\gg.exe” = protocol=17 | dir=in | app=d:\użytki\nowe gg\nowe gadu-gadu\gg.exe |

“UDP Query User{75DEF00F-3AC6-4CA4-8610-B014D3090271}D:\programy\sopcast\adv\sopadver.exe” = protocol=17 | dir=in | app=d:\programy\sopcast\adv\sopadver.exe |

“UDP Query User{9A63F042-706D-440A-8FFA-81265B43E586}C:\dysk c\instalki\utorrent.exe” = protocol=17 | dir=in | app=c:\dysk c\instalki\utorrent.exe |

“UDP Query User{9AAB0DF5-AD49-41F3-AD7E-07B86DC59E08}D:\programy\sopcast\sopcast.exe” = protocol=17 | dir=in | app=d:\programy\sopcast\sopcast.exe |

“UDP Query User{A0EA6218-B148-424A-B9A9-E66D502465B7}D:\programy\sopcast\adv\sopadver.exe” = protocol=17 | dir=in | app=d:\programy\sopcast\adv\sopadver.exe |

“UDP Query User{A6E93398-49F9-4472-AB9E-66DD2757F97B}C:\dysk c\instalki\utorrent.exe” = protocol=17 | dir=in | app=c:\dysk c\instalki\utorrent.exe |

“UDP Query User{A8188FB5-0E05-46A8-BB5F-A793B85DDD6E}D:\programy\windvd\windvd.exe” = protocol=17 | dir=in | app=d:\programy\windvd\windvd.exe |

“UDP Query User{B777CB53-3148-4050-9EA2-8FAB9343EF34}D:\programy\do ściągania\ares\ares.exe” = protocol=17 | dir=in | app=d:\programy\do ściągania\ares\ares.exe |

“UDP Query User{C1A480E3-678D-4B71-8B03-ADEE7DED56C8}D:\gry\blobby(dobreprogramy.pl)\volley.exe” = protocol=17 | dir=in | app=d:\gry\blobby(dobreprogramy.pl)\volley.exe |

“UDP Query User{C6FB5FA4-38E8-417D-8A28-13A2A86E68B0}D:\instalki\utorrent.exe” = protocol=17 | dir=in | app=d:\instalki\utorrent.exe |

“UDP Query User{C8405C7D-16B6-4D0D-BC62-BDC1251E2F18}D:\program files\bearshare\bearshare.exe” = protocol=17 | dir=in | app=d:\program files\bearshare\bearshare.exe |

“UDP Query User{CEFB32CA-EAC1-4322-A97B-A90AD204D4B9}D:\programy\gadu-gadu\gg.exe” = protocol=17 | dir=in | app=d:\programy\gadu-gadu\gg.exe |

“UDP Query User{D0DC4C54-A8A2-4224-840B-F4048428B9E5}D:\programy\do sciagania\shareaza\shareaza.exe” = protocol=17 | dir=in | app=d:\programy\do sciagania\shareaza\shareaza.exe |

“UDP Query User{D1AB132D-C987-4C36-9263-089A846D4F31}D:\gry\aoe ii\empires2.exe” = protocol=17 | dir=in | app=d:\gry\aoe ii\empires2.exe |

“UDP Query User{D27FC999-2448-46F6-9FC0-60D236614634}D:\programy\sopcast\sopcast.exe” = protocol=17 | dir=in | app=d:\programy\sopcast\sopcast.exe |

“UDP Query User{D611655D-4888-458F-A622-7F26B6760C76}D:\gry\111małe gierki\blobby(dobreprogramy.pl)\volley.exe” = protocol=17 | dir=in | app=d:\gry\111małe gierki\blobby(dobreprogramy.pl)\volley.exe |

“UDP Query User{E4B84C14-E828-49F9-BCA4-0594388CACD7}D:\gry\blobby(dobreprogramy.pl)\volley.exe” = protocol=17 | dir=in | app=d:\gry\blobby(dobreprogramy.pl)\volley.exe |

“UDP Query User{F330AE2F-F8C8-4C43-8360-1E16E860A692}D:\programy\torrent searcher 6\gift\giftl.exe” = protocol=17 | dir=in | app=d:\programy\torrent searcher 6\gift\giftl.exe |

“UDP Query User{F822BB8B-B55A-407F-A15A-748A757E28EF}D:\programy\do sciagania\ares\ares.exe” = protocol=17 | dir=in | app=d:\programy\do sciagania\ares\ares.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

“{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}” = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

“{06A1D88C-E102-4527-AF70-29FFD7AF215A}” = Scan

“{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}” = hpWLPGInstaller

“{175F0111-2968-4935-8F70-33108C6A4DE3}” = MarketResearch

“{1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}” = ASUS Data Security Manager

“{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

“{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}” = DeviceDiscovery

“{28006915-2739-4EBE-B5E8-49B25D32EB33}” = Atheros Client Installation Program

“{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}” = BufferChm

“{31A27B1E-53A2-4C17-9C36-F06E896D3B68}” = WebSTAR WLAN Card Utilities/Driver

“{3C3901C5-3455-3E0A-A214-0B093A5070A6}” = Microsoft .NET Framework 4 Client Profile

“{40BF1E83-20EB-11D8-97C5-0009C5020658}” = CyberLink Power2Go

“{415B2719-AD3A-4944-B404-C472DB6085B3}” = Cisco EAP-FAST Module

“{43CDF946-F5D9-4292-B006-BA0D92013021}” = WebReg

“{45A66726-69BC-466B-A7A4-12FCBA4883D7}” = HiJackThis

“{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}” = SolutionCenter

“{4A9849CA-E11C-4F24-8BB1-97C717A1C898}” = LightScribe System Software

“{59F6A514-9813-47A3-948C-8A155460CC2A}” = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02

“{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}” = ATKOSD2

“{6372F44B-392B-4FD8-AF1E-E185283F6528}” = DJ_AIO_06_K209a-z_SW_Min

“{63FF21C9-A810-464F-B60A-3111747B1A6D}” = GPBaseService2

“{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}” = Cisco PEAP Module

“{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}” = SmartWebPrinting

“{6BBA26E9-AB03-4FE7-831A-3535584CA002}” = Toolbox

“{7299052b-02a4-4627-81f2-1818da5d550d}” = Microsoft Visual C++ 2005 Redistributable

“{770657D0-A123-3C07-8E44-1C83EC895118}” = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

“{7C05592D-424B-46CB-B505-E0013E8E75C9}” = ATK Hotkey

“{7D4386A2-3DAC-4A78-B8D8-6AD638E822DD}” = Watchtower Library 2009 - wydanie polskie

“{83770D14-21B9-44B3-8689-F7B523F94560}” = Cisco LEAP Module

“{837b34e3-7c30-493c-8f6a-2b0f04e2912c}” = Microsoft Visual C++ 2005 Redistributable

“{83F73CB1-7705-49D1-9852-84D839CA2A45}” = Wireless Console 2

“{90120000-0015-0409-0000-0000000FF1CE}” = Microsoft Office Access MUI (English) 2007

“{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-0016-0409-0000-0000000FF1CE}” = Microsoft Office Excel MUI (English) 2007

“{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-0018-0409-0000-0000000FF1CE}” = Microsoft Office PowerPoint MUI (English) 2007

“{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-0019-0409-0000-0000000FF1CE}” = Microsoft Office Publisher MUI (English) 2007

“{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-001A-0409-0000-0000000FF1CE}” = Microsoft Office Outlook MUI (English) 2007

“{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-001B-0409-0000-0000000FF1CE}” = Microsoft Office Word MUI (English) 2007

“{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-001F-0409-0000-0000000FF1CE}” = Microsoft Office Proof (English) 2007

“{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}” = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

“{90120000-001F-0409-0000-0000000FF1CE}_PRJPRO_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}” = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

“{90120000-001F-040C-0000-0000000FF1CE}” = Microsoft Office Proof (French) 2007

“{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}” = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

“{90120000-001F-040C-0000-0000000FF1CE}_PRJPRO_{F580DDD5-8D37-4998-968E-EBB76BB86787}” = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

“{90120000-001F-0C0A-0000-0000000FF1CE}” = Microsoft Office Proof (Spanish) 2007

“{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}” = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

“{90120000-001F-0C0A-0000-0000000FF1CE}_PRJPRO_{187308AB-5FA7-4F14-9AB9-D290383A10D9}” = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

“{90120000-002C-0409-0000-0000000FF1CE}” = Microsoft Office Proofing (English) 2007

“{90120000-0030-0000-0000-0000000FF1CE}” = Microsoft Office Enterprise 2007

“{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}” = Security Update for Microsoft Office system 2007 (972581)

“{90120000-003B-0000-0000-0000000FF1CE}” = Microsoft Office Project Professional 2007

“{90120000-003B-0000-0000-0000000FF1CE}_PRJPRO_{3D019598-7B59-447A-80AE-815B703B84FF}” = Security Update for Microsoft Office system 2007 (972581)

“{90120000-003B-0000-0000-0000000FF1CE}_PRJPRO_{9E73617F-2F38-4864-BD61-BB2DDFE43323}” = Microsoft Office Project 2007 Service Pack 2 (SP2)

“{90120000-0044-0409-0000-0000000FF1CE}” = Microsoft Office InfoPath MUI (English) 2007

“{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-006E-0409-0000-0000000FF1CE}” = Microsoft Office Shared MUI (English) 2007

“{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-006E-0409-0000-0000000FF1CE}_PRJPRO_{DE5A002D-8122-4278-A7EE-3121E7EA254E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-00A1-0409-0000-0000000FF1CE}” = Microsoft Office OneNote MUI (English) 2007

“{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-00B4-0409-0000-0000000FF1CE}” = Microsoft Office Project MUI (English) 2007

“{90120000-00B4-0409-0000-0000000FF1CE}_PRJPRO_{27A9D316-D332-433B-8EB1-1D93EE49F26D}” = Microsoft Office Project 2007 Service Pack 2 (SP2)

“{90120000-00BA-0409-0000-0000000FF1CE}” = Microsoft Office Groove MUI (English) 2007

“{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-0114-0409-0000-0000000FF1CE}” = Microsoft Office Groove Setup Metadata MUI (English) 2007

“{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-0115-0409-0000-0000000FF1CE}” = Microsoft Office Shared Setup Metadata MUI (English) 2007

“{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-0115-0409-0000-0000000FF1CE}_PRJPRO_{DE5A002D-8122-4278-A7EE-3121E7EA254E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{90120000-0117-0409-0000-0000000FF1CE}” = Microsoft Office Access Setup Metadata MUI (English) 2007

“{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}” = Microsoft Office 2007 Service Pack 2 (SP2)

“{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}” = 32 Bit HP CIO Components Installer

“{9370105C-71BB-4FF9-A85B-36D79B95457A}_is1” = ALLConverter PRO 1.0

“{9A25302D-30C0-39D9-BD6F-21E6EC160475}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

“{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}” = ASUS Power4Gear Hybrid

“{AC76BA86-7AD7-1033-7B44-A82000000003}” = Adobe Reader 8.2.0

“{AE46ABD3-D625-467F-B5A7-8D3FFF077F0D}” = Realtek 8139 and 8139C+ Ethernet Network Card Driver for Windows Vista

“{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}” = Status

“{C43326F5-F135-4551-8270-7F7ABA0462E1}” = HPProductAssistant

“{C59C179C-668D-49A9-B6EA-0121CCFC1243}” = CyberLink LabelPrint

“{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}” = hpPrintProjects

“{C98BBC25-490C-4F3F-81D8-5D12C11732DF}” = Panda Cloud Antivirus

“{CAE4213F-F797-439D-BD9E-79B71D115BE3}” = HPPhotoGadget

“{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}” = Microsoft .NET Framework 3.5 SP1

“{D103C4BA-F905-437A-8049-DB24763BBE36}” = Skype™ 4.2

“{D3D54F3E-C5C3-443D-978F-87A72E5616E8}” = ATK Generic Function Service

“{DB982BEA-E9FF-4C61-9058-57FFDA5076D1}” = HP Deskjet Ink Advant K209a-z All-in-One Driver Software 13.0 Rel .6

“{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}” = TrayApp

“{DE10AB76-4756-4913-BE25-55D1C1051F9A}” = WinFlash

“{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}” = jetAudio Basic VX

“{EE51AA68-7BF9-4FB3-9BB4-57CCD2C7EFFA}” = K209a-z

“{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}” = Realtek High Definition Audio Driver

“{FAF26102-09D7-4C58-AB01-0D59A2E517CA}” = Copy

“{FFFF6D5C-E2F1-4B40-BC89-8923312E89EB}}_is1” = ACE Mega CoDecS Pack

“Adobe Flash Player ActiveX” = Adobe Flash Player 10 ActiveX

“Adobe Flash Player Plugin” = Adobe Flash Player 10 Plugin

“Adobe Shockwave Player” = Adobe Shockwave Player 11.5

“Agere Systems Soft Modem” = Agere Systems HDA Modem

“ALLPlayer_is1” = ALLPlayer V4.X

“avast5” = avast! Free Antivirus

“CCleaner” = CCleaner

“Defraggler” = Defraggler

“ENTERPRISE” = Microsoft Office Enterprise 2007

“foobar2000” = foobar2000 v1.0

“Gadu-Gadu 10” = Gadu-Gadu 10

“HDMI” = Intel® Graphics Media Accelerator Driver

“HP Imaging Device Functions” = HP Imaging Device Functions 13.0

“HP Print Projects” = HP Print Projects 1.0

“HP Smart Web Printing” = HP Smart Web Printing 4.5

“HP Solution Center & Imaging Support Tools” = HP Solution Center 13.0

“HPExtendedCapabilities” = HP Customer Participation Program 13.0

“InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}” = CyberLink Power2Go

“Microsoft .NET Framework 3.5 SP1” = Microsoft .NET Framework 3.5 SP1

“Microsoft .NET Framework 4 Client Profile” = Microsoft .NET Framework 4 Client Profile

“Mozilla Firefox (3.6.12)” = Mozilla Firefox (3.6.12)

“PRJPRO” = Microsoft Office Project Professional 2007

“SynTPDeinstKey” = Synaptics Pointing Device Driver

“uTorrent” = µTorrent

“WebSTAR DPC2100 Uninstall” = Scientific-Atlanta WebSTAR 2000 series Cable Modem

“WinRAR archiver” = Archiwizator WinRAR

“YdpDict100” = Słownik YDP (angielsko-polski, polsko-angielski)

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

“Angielski w pigułce 2.0_is1” = Angielski w pigułce 2.0

========== Last 10 Event Log Errors ==========

[Application Events]

Error - 2010-10-21 16:54:26 | Computer Name = Radek | Source = Application Hang | ID = 1002

Description = The program Aurora.scr version 6.0.6001.18000 stopped interacting

with Windows and was closed. To see if more information about the problem is available,

check the problem history in the Problem Reports and Solutions control panel. Process

ID: 1344 Start Time: 01cb7161f2031dc0 Termination Time: 5171

Error - 2010-10-22 09:41:25 | Computer Name = Radek | Source = VSS | ID = 8194

Description =

Error - 2010-10-24 08:43:28 | Computer Name = Radek | Source = Application Error | ID = 1000

Description = Faulting application RunDLL32.exe, version 6.0.6000.16386, time stamp

0x4549b0e1, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception

code 0xc0000005, fault offset 0x04e12860, process id 0x107c, application start time

0x01cb73790d344ec0.

Error - 2010-10-24 08:43:28 | Computer Name = Radek | Source = Application Error | ID = 1000

Description = Faulting application RunDLL32.exe, version 6.0.6000.16386, time stamp

0x4549b0e1, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception

code 0xc0000005, fault offset 0x04dc2860, process id 0xa7c, application start time

0x01cb73790c8f8340.

Error - 2010-10-24 08:43:30 | Computer Name = Radek | Source = Application Error | ID = 1000

Description = Faulting application RunDLL32.exe, version 6.0.6000.16386, time stamp

0x4549b0e1, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception

code 0xc0000005, fault offset 0x04df2860, process id 0x158c, application start time

0x01cb73790f5c85f0.

Error - 2010-10-24 08:43:37 | Computer Name = Radek | Source = Application Error | ID = 1000

Description = Faulting application RunDLL32.exe, version 6.0.6000.16386, time stamp

0x4549b0e1, faulting module lmpgspl.ax, version 4.0.0.77, time stamp 0x3d133951,

exception code 0xc0000005, fault offset 0x00001652, process id 0x17b0, application

start time 0x01cb737912eab5c0.

Error - 2010-10-24 08:43:37 | Computer Name = Radek | Source = Application Error | ID = 1000

Description = Faulting application RunDLL32.exe, version 6.0.6000.16386, time stamp

0x4549b0e1, faulting module lmpgspl.ax, version 4.0.0.77, time stamp 0x3d133951,

exception code 0xc0000005, fault offset 0x00001652, process id 0x6ec, application

start time 0x01cb737912d24bc0.

Error - 2010-10-24 08:43:37 | Computer Name = Radek | Source = Application Error | ID = 1000

Description = Faulting application RunDLL32.exe, version 6.0.6000.16386, time stamp

0x4549b0e1, faulting module lmpgspl.ax, version 4.0.0.77, time stamp 0x3d133951,

exception code 0xc0000005, fault offset 0x00001652, process id 0x10f4, application

start time 0x01cb737912e3d7f0.

Error - 2010-10-24 09:30:16 | Computer Name = Radek | Source = WinMgmt | ID = 10

Description =

Error - 2010-10-24 09:30:39 | Computer Name = Radek | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description =

[OSession Events]

Error - 2009-10-08 02:24:23 | Computer Name = maria-PC | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application

Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session

lasted 10 seconds with 0 seconds of active time. This session ended with a crash.

Error - 2009-10-08 02:24:58 | Computer Name = maria-PC | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application

Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session

lasted 22 seconds with 0 seconds of active time. This session ended with a crash.

[System Events]

Error - 2009-09-14 10:44:15 | Computer Name = maria-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001

Description =

Error - 2009-09-23 16:40:26 | Computer Name = maria-PC | Source = EventLog | ID = 6008

Description = The previous system shutdown at 22:36:41 on 2009-09-23 was unexpected.

Error - 2009-09-23 16:40:34 | Computer Name = maria-PC | Source = HTTP | ID = 15016

Description =

Error - 2009-09-23 16:41:59 | Computer Name = maria-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001

Description =

Error - 2009-09-24 14:45:37 | Computer Name = maria-PC | Source = EventLog | ID = 6008

Description = The previous system shutdown at 22:59:34 on 2009-09-23 was unexpected.

Error - 2009-09-24 14:45:40 | Computer Name = maria-PC | Source = HTTP | ID = 15016

Description =

Error - 2009-09-24 14:46:09 | Computer Name = maria-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001

Description =

Error - 2009-10-06 10:15:47 | Computer Name = maria-PC | Source = ipnathlp | ID = 34001

Description = The ICS_IPV6 failed to configure IPv6 stack.

Error - 2009-10-06 10:15:47 | Computer Name = maria-PC | Source = ipnathlp | ID = 30013

Description = The DHCP allocator has disabled itself on IP address 192.168.1.101,

since the IP address is outside the 192.168.0.0/255.255.255.0 scope from which

addresses are being allocated to DHCP clients. To enable the DHCP allocator on this

IP address, change the scope to include the IP address, or change the IP address

to fall within the scope.

Error - 2009-10-07 01:24:55 | Computer Name = maria-PC | Source = ipnathlp | ID = 30013

Description = The DHCP allocator has disabled itself on IP address 192.168.1.100,

since the IP address is outside the 192.168.0.0/255.255.255.0 scope from which

addresses are being allocated to DHCP clients. To enable the DHCP allocator on this

IP address, change the scope to include the IP address, or change the IP address

to fall within the scope.

< End of report >

#7

bez otl nic nie zrobie

możę go podziel

sprubój na wklejto.pl

#8

http://wklejto.pl/82448

#9

teraz ide…

logi sprawdze troche później :expressionless:

#10

kurcze to nie jest caly plik, wkleilem tam, ale tylko do ktorejs czesci tekstu jest widoczne, reszte chyba sobie to cale wklejto.pl odpuscilo

powrzucam tu wszystko w czesciach

– Dodane 27.11.2010 (So) 10:37 –

OTL logfile created on: 2010-11-27 10:04:49 - Run 1

OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\maria\Downloads

Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation

Internet Explorer (Version = 7.0.6001.18000)

Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 51,00% Memory free

4,00 Gb Paging File | 3,00 Gb Available in Paging File | 73,00% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 74,52 Gb Total Space | 34,81 Gb Free Space | 46,72% Space Free | Partition Type: NTFS

Drive D: | 64,76 Gb Total Space | 49,92 Gb Free Space | 77,08% Space Free | Partition Type: NTFS

Computer Name: RADEK | User Name: maria | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (All) ==========

PRC - [2010-11-27 10:01:08 | 000,575,488 | ---- | M] (OldTimer Tools) – C:\Users\maria\Downloads\OTL_3.2.17.3(dobreprogramy.pl).exe

PRC - [2010-10-27 07:21:28 | 000,912,344 | ---- | M] (Mozilla Corporation) – D:\programy\mozilla\firefox.exe

PRC - [2010-10-27 07:21:28 | 000,016,856 | ---- | M] (Mozilla Corporation) – D:\programy\mozilla\plugin-container.exe

PRC - [2010-09-07 17:12:02 | 002,838,912 | ---- | M] (AVAST Software) – D:\programy\Avast\AvastUI.exe

PRC - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) – D:\programy\Avast\AvastSvc.exe

PRC - [2010-08-17 14:32:33 | 000,126,464 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\spoolsv.exe

PRC - [2009-10-30 16:29:58 | 000,136,448 | ---- | M] (Panda Security, S.L.) – C:\DYSK C\Panda Cloud AV\PSANHost.exe

PRC - [2009-08-07 03:24:04 | 000,053,472 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\wuauclt.exe

PRC - [2009-06-15 13:57:59 | 000,009,728 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\lsass.exe

PRC - [2009-05-21 20:54:18 | 000,116,280 | ---- | M] (Hewlett-Packard Co.) – C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe

PRC - [2009-03-03 03:16:04 | 000,247,296 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\wbem\WmiPrvSE.exe

PRC - [2009-01-27 22:37:24 | 000,073,728 | ---- | M] (Hewlett-Packard Company) – C:\Program Files\Common Files\LightScribe\LSSrvc.exe

PRC - [2008-10-29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) – C:\Windows\explorer.exe

PRC - [2008-08-21 02:35:19 | 006,265,376 | ---- | M] (Realtek Semiconductor) – C:\Windows\RtHDVCpl.exe

PRC - [2008-08-09 05:00:40 | 000,217,088 | ---- | M] (ASUS) – C:\Program Files\ASUS\ATK Hotkey\HControl.exe

PRC - [2008-07-25 23:55:02 | 000,207,416 | ---- | M] (ATK) – C:\Program Files\P4G\BatteryLife.exe

PRC - [2008-07-19 03:52:16 | 000,104,936 | ---- | M] (CyberLink) – C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

PRC - [2008-06-24 04:16:24 | 002,482,176 | ---- | M] (ASUS) – C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe

PRC - [2008-05-27 06:18:43 | 000,439,808 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\SearchIndexer.exe

PRC - [2008-04-01 07:09:30 | 000,266,240 | ---- | M] (ASUSTek Computer Inc.) – C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe

PRC - [2008-03-31 10:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) – C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe

PRC - [2008-03-18 20:27:11 | 000,013,312 | ---- | M] (Agere Systems) – C:\Windows\System32\agrsmsvc.exe

PRC - [2008-02-22 03:35:01 | 000,256,536 | ---- | M] (Intel Corporation) – C:\Windows\System32\igfxsrvc.exe

PRC - [2008-02-22 03:34:57 | 000,133,656 | ---- | M] (Intel Corporation) – C:\Windows\System32\igfxpers.exe

PRC - [2008-02-22 03:34:45 | 000,166,424 | ---- | M] (Intel Corporation) – C:\Windows\System32\hkcmd.exe

PRC - [2008-01-23 18:51:28 | 000,151,552 | ---- | M] () – C:\Program Files\ASUS\ATK Hotkey\WDC.exe

PRC - [2008-01-21 03:35:20 | 000,896,512 | ---- | M] (Microsoft Corporation) – C:\Program Files\Windows Media Player\wmpnetwk.exe

PRC - [2008-01-21 03:35:20 | 000,202,240 | ---- | M] (Microsoft Corporation) – C:\Program Files\Windows Media Player\wmpnscfg.exe

PRC - [2008-01-21 03:34:50 | 002,623,488 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\SLsvc.exe

PRC - [2008-01-21 03:34:43 | 000,006,144 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\csrss.exe

PRC - [2008-01-21 03:34:38 | 000,314,880 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\winlogon.exe

PRC - [2008-01-21 03:34:36 | 000,279,040 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\services.exe

PRC - [2008-01-21 03:34:32 | 000,169,472 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\taskeng.exe

PRC - [2008-01-21 03:34:32 | 000,081,920 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\dwm.exe

PRC - [2008-01-21 03:34:02 | 000,151,040 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\notepad.exe

PRC - [2008-01-21 03:33:53 | 000,059,392 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\alg.exe

PRC - [2008-01-21 03:33:24 | 000,037,888 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\wbem\unsecapp.exe

PRC - [2008-01-21 03:33:22 | 000,064,000 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\smss.exe

PRC - [2008-01-21 03:33:15 | 000,229,888 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\lsm.exe

PRC - [2008-01-21 03:33:13 | 000,096,768 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\wininit.exe

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:33:13 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\svchost.exe [comLaunch]

PRC - [2008-01-21 03:32:56 | 000,074,240 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\wlanext.exe

PRC - [2008-01-12 06:40:10 | 000,098,304 | ---- | M] () – C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe

PRC - [2007-12-06 11:12:57 | 000,095,528 | ---- | M] (Synaptics, Inc.) – C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

PRC - [2007-12-06 11:12:43 | 001,029,416 | ---- | M] (Synaptics, Inc.) – C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

PRC - [2007-11-05 03:48:06 | 000,106,496 | ---- | M] () – C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe

PRC - [2007-10-18 03:04:00 | 007,737,344 | ---- | M] () – C:\Program Files\ATKOSD2\ATKOSD2.exe

PRC - [2007-10-03 05:53:00 | 000,094,208 | ---- | M] () – C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe

PRC - [2007-08-15 19:20:16 | 000,106,496 | ---- | M] () – C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe

PRC - [2007-08-08 08:08:40 | 000,094,208 | ---- | M] () – C:\Program Files\ATKGFNEX\GFNEXSrv.exe

PRC - [2007-07-06 00:53:44 | 001,040,384 | ---- | M] () – C:\Program Files\Wireless Console 2\wcourier.exe

========== Modules (All) ==========

MOD - [2010-11-27 10:01:08 | 000,575,488 | ---- | M] (OldTimer Tools) – C:\Users\maria\Downloads\OTL_3.2.17.3(dobreprogramy.pl).exe

MOD - [2010-08-31 16:39:57 | 001,684,480 | ---- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll

MOD - [2010-07-26 17:55:26 | 011,581,440 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\shell32.dll

MOD - [2010-06-28 17:15:53 | 001,315,840 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\ole32.dll

MOD - [2010-04-16 17:10:45 | 000,501,760 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\usp10.dll

MOD - [2009-07-17 15:35:11 | 000,071,680 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\atl.dll

MOD - [2009-06-15 16:24:05 | 000,072,704 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\secur32.dll

MOD - [2009-04-23 13:43:04 | 000,784,896 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\rpcrt4.dll

MOD - [2009-02-13 09:49:05 | 000,888,832 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\kernel32.dll

MOD - [2008-10-21 06:25:18 | 000,296,960 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\gdi32.dll

MOD - [2008-10-16 05:47:33 | 000,466,944 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\netapi32.dll

MOD - [2008-05-27 06:17:46 | 000,754,176 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\propsys.dll

MOD - [2008-02-29 07:53:38 | 000,040,960 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\srclient.dll

MOD - [2008-01-21 03:34:50 | 001,203,792 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\ntdll.dll

MOD - [2008-01-21 03:34:50 | 000,563,200 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\oleaut32.dll

MOD - [2008-01-21 03:34:46 | 000,806,912 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\msctf.dll

MOD - [2008-01-21 03:34:36 | 000,179,200 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\ws2_32.dll

MOD - [2008-01-21 03:34:35 | 000,008,192 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\nsi.dll

MOD - [2008-01-21 03:34:34 | 001,590,272 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\setupapi.dll

MOD - [2008-01-21 03:34:22 | 000,450,048 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\comdlg32.dll

MOD - [2008-01-21 03:34:22 | 000,351,744 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\shlwapi.dll

MOD - [2008-01-21 03:34:21 | 000,183,296 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\xmllite.dll

MOD - [2008-01-21 03:34:21 | 000,110,592 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\msscript.ocx

MOD - [2008-01-21 03:34:21 | 000,057,344 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\samlib.dll

MOD - [2008-01-21 03:34:20 | 000,680,448 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\msvcrt.dll

MOD - [2008-01-21 03:34:11 | 000,798,720 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\advapi32.dll

MOD - [2008-01-21 03:34:07 | 001,076,224 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\vssapi.dll

MOD - [2008-01-21 03:34:07 | 000,069,120 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\vsstrace.dll

MOD - [2008-01-21 03:34:05 | 000,523,776 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\clbcatq.dll

MOD - [2008-01-21 03:34:05 | 000,114,688 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\imm32.dll

MOD - [2008-01-21 03:34:03 | 000,121,344 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\ntmarta.dll

MOD - [2008-01-21 03:34:03 | 000,079,360 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\authz.dll

MOD - [2008-01-21 03:34:02 | 000,627,200 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\user32.dll

MOD - [2008-01-21 03:33:53 | 000,023,552 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\lpk.dll

MOD - [2008-01-21 03:33:52 | 000,289,280 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\Wldap32.dll

MOD - [2008-01-21 03:33:52 | 000,068,608 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\mpr.dll

MOD - [2008-01-21 03:33:48 | 000,020,480 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\version.dll

MOD - [2008-01-21 03:33:47 | 000,171,008 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\apphelp.dll

MOD - [2008-01-21 03:33:46 | 000,108,032 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\userenv.dll

MOD - [2008-01-21 03:33:20 | 000,258,048 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\winspool.drv

MOD - [2008-01-21 03:33:15 | 001,067,520 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\shdocvw.dll

MOD - [2008-01-21 03:33:14 | 000,240,128 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\uxtheme.dll

MOD - [2008-01-21 03:33:12 | 000,088,576 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\olepro32.dll

MOD - [2008-01-21 03:32:53 | 000,142,336 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\spp.dll

MOD - [2006-11-02 10:46:12 | 000,012,288 | ---- | M] (Microsoft Corporation) – C:\Windows\System32\psapi.dll

========== Win32 Services (All) ==========

SRV - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] – D:\programy\Avast\AvastSvc.exe – (avast! Web Scanner)

SRV - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] – D:\programy\Avast\AvastSvc.exe – (avast! Mail Scanner)

SRV - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] – D:\programy\Avast\AvastSvc.exe – (avast! Antivirus)

SRV - [2010-09-06 17:24:40 | 000,125,952 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\srvsvc.dll – (LanmanServer)

SRV - [2010-08-17 14:32:33 | 000,126,464 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\spoolsv.exe – (Spooler)

SRV - [2010-03-18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe – (WPFFontCache_v0400)

SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)

SRV - [2010-02-18 15:11:41 | 000,190,464 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\iphlpsvc.dll – (iphlpsvc)

SRV - [2009-10-30 16:29:58 | 000,136,448 | ---- | M] (Panda Security, S.L.) [Auto | Running] – C:\DYSK C\Panda Cloud AV\PSANHost.exe – (NanoServiceMain)

SRV - [2009-08-24 13:16:12 | 000,378,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\winhttp.dll – (WinHttpAutoProxySvc)

SRV - [2009-08-07 03:23:45 | 001,929,952 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\wuaueng.dll – (wuauserv)

SRV - [2009-07-11 20:32:52 | 000,513,024 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\wlansvc.dll – (Wlansvc)

SRV - [2009-06-15 13:57:59 | 000,009,728 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\lsass.exe – (SamSs)

SRV - [2009-06-15 13:57:59 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\lsass.exe – (ProtectedStorage)

SRV - [2009-06-15 13:57:59 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\lsass.exe – (Netlogon)

SRV - [2009-06-15 13:57:59 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\lsass.exe – (KeyIso)

SRV - [2009-06-10 13:12:29 | 000,160,256 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\wkssvc.dll – (LanmanWorkstation)

SRV - [2009-05-21 21:13:36 | 000,248,832 | ---- | M] (Hewlett-Packard Co.) [On_Demand | Running] – C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll – (hpqcxs08)

SRV - [2009-05-21 21:03:06 | 000,133,120 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] – C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll – (hpqddsvc)

SRV - [2009-03-03 05:39:32 | 000,551,424 | ---- | M] (Microsoft Corporation) [unknown | Running] – C:\Windows\System32\rpcss.dll – (RpcSs) Remote Procedure Call (RPC)

SRV - [2009-03-03 05:39:32 | 000,551,424 | ---- | M] (Microsoft Corporation) [unknown | Running] – C:\Windows\System32\rpcss.dll – (DcomLaunch)

SRV - [2009-01-27 22:37:24 | 000,073,728 | ---- | M] (Hewlett-Packard Company) [Auto | Running] – C:\Program Files\Common Files\LightScribe\LSSrvc.exe – (LightScribeService)

SRV - [2008-12-03 19:05:42 | 000,053,760 | ---- | M] (Hewlett-Packard) [Auto | Stopped] – C:\Windows\System32\HPZipm12.dll – (Pml Driver HPZ12)

SRV - [2008-12-03 19:05:32 | 000,044,544 | ---- | M] (Hewlett-Packard) [Auto | Stopped] – C:\Windows\System32\HPZinw12.dll – (Net Driver HPZ12)

SRV - [2008-11-04 01:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE – (odserv)

SRV - [2008-10-25 11:44:08 | 000,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe – (Microsoft Office Groove Audit Service)

SRV - [2008-09-18 05:56:07 | 000,125,952 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\wersvc.dll – (WerSvc)

SRV - [2008-07-27 19:03:13 | 000,069,632 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)

SRV - [2008-06-26 04:29:02 | 000,565,248 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\emdmgmt.dll – (EMDMgmt)

SRV - [2008-06-20 02:14:44 | 000,046,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe – (FontCache3.0.0.0)

SRV - [2008-06-20 02:14:31 | 000,881,664 | ---- | M] (Microsoft Corporation) [unknown | Stopped] – C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe – (idsvc)

SRV - [2008-06-20 02:14:31 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe – (NetTcpPortSharing)

SRV - [2008-06-19 04:31:48 | 000,361,984 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\IPSECSVC.DLL – (PolicyAgent)

SRV - [2008-05-27 06:18:43 | 000,439,808 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\SearchIndexer.exe – (WSearch)

SRV - [2008-04-18 06:48:39 | 000,269,312 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\es.dll – (EventSystem)

SRV - [2008-03-31 10:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] – C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe – (ADSMService)

SRV - [2008-03-18 20:27:11 | 000,013,312 | ---- | M] (Agere Systems) [Auto | Running] – C:\Windows\System32\agrsmsvc.exe – (AgereModemAudio)

SRV - [2008-02-05 07:22:57 | 000,026,112 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\hidserv.dll – (hidserv)

SRV - [2008-01-21 03:35:20 | 000,896,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files\Windows Media Player\wmpnetwk.exe – (WMPNetworkSvc)

SRV - [2008-01-21 03:35:17 | 000,658,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\p2psvc.dll – (PNRPsvc)

SRV - [2008-01-21 03:35:17 | 000,658,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\p2psvc.dll – (PNRPAutoReg)

SRV - [2008-01-21 03:35:17 | 000,658,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\p2psvc.dll – (p2psvc)

SRV - [2008-01-21 03:35:17 | 000,658,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\p2psvc.dll – (p2pimsvc)

SRV - [2008-01-21 03:35:17 | 000,140,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\wpcsvc.dll – (WPCSvc)

SRV - [2008-01-21 03:35:05 | 000,070,144 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\wpdbusenum.dll – (WPDBusEnum)

SRV - [2008-01-21 03:34:56 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\sstpsvc.dll – (SstpSvc)

SRV - [2008-01-21 03:34:51 | 000,057,344 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\eapsvc.dll – (EapHost)

SRV - [2008-01-21 03:34:50 | 002,623,488 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\SLsvc.exe – (slsvc)

SRV - [2008-01-21 03:34:50 | 000,382,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\vds.exe – (vds)

SRV - [2008-01-21 03:34:50 | 000,188,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\lltdsvc.dll – (lltdsvc)

SRV - [2008-01-21 03:34:49 | 000,758,272 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\qmgr.dll – (BITS)

SRV - [2008-01-21 03:34:49 | 000,161,792 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\wbem\WMIsvc.dll – (Winmgmt)

SRV - [2008-01-21 03:34:48 | 000,055,296 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\WUDFSvc.dll – (wudfsvc)

SRV - [2008-01-21 03:34:45 | 000,302,080 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\QAGENTRT.DLL – (napagent)

SRV - [2008-01-21 03:34:44 | 000,574,464 | ---- | M] (Microsoft Corporation) [unknown | Running] – C:\Windows\System32\gpsvc.dll – (gpsvc)

SRV - [2008-01-21 03:34:44 | 000,084,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\SessEnv.dll – (SessionEnv)

SRV - [2008-01-21 03:34:43 | 000,314,368 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\audiosrv.dll – (Audiosrv)

SRV - [2008-01-21 03:34:43 | 000,314,368 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\audiosrv.dll – (AudioEndpointBuilder)

SRV - [2008-01-21 03:34:43 | 000,242,688 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\tapisrv.dll – (TapiSrv)

SRV - [2008-01-21 03:34:43 | 000,045,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\mmcss.dll – (THREADORDER)

SRV - [2008-01-21 03:34:43 | 000,045,056 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\mmcss.dll – (MMCSS)

SRV - [2008-01-21 03:34:42 | 000,574,976 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\sysmain.dll – (SysMain)

SRV - [2008-01-21 03:34:37 | 000,155,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\ssdpsrv.dll – (SSDPSRV)

SRV - [2008-01-21 03:34:35 | 000,393,216 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\MPSSVC.dll – (MpsSvc)

SRV - [2008-01-21 03:34:35 | 000,018,432 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\nsisvc.dll – (nsi)

SRV - [2008-01-21 03:34:32 | 000,047,104 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\Sens.dll – (SENS)

SRV - [2008-01-21 03:34:32 | 000,028,672 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\uxsms.dll – (UxSms)

SRV - [2008-01-21 03:34:30 | 000,057,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\SLUINotify.dll – (SLUINotify)

SRV - [2008-01-21 03:34:24 | 000,745,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\WsmSvc.dll – (WinRM) Windows Remote Management (WS-Management)

SRV - [2008-01-21 03:34:21 | 000,073,728 | ---- | M] (Microsoft Corporation) [unknown | Running] – C:\Windows\System32\wdi.dll – (WdiSystemHost)

SRV - [2008-01-21 03:34:21 | 000,073,728 | ---- | M] (Microsoft Corporation) [unknown | Stopped] – C:\Windows\System32\wdi.dll – (WdiServiceHost)

SRV - [2008-01-21 03:34:20 | 000,260,608 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\rasmans.dll – (RasMan)

SRV - [2008-01-21 03:34:20 | 000,081,920 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\browser.dll – (Browser)

SRV - [2008-01-21 03:34:19 | 000,134,656 | ---- | M] (Microsoft Corporation) [unknown | Running] – C:\Windows\System32\dps.dll – (DPS)

SRV - [2008-01-21 03:34:19 | 000,128,000 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\cryptsvc.dll – (CryptSvc)

SRV - [2008-01-21 03:34:19 | 000,019,968 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\seclogon.dll – (seclogon)

SRV - [2008-01-21 03:34:18 | 000,596,992 | ---- | M] (Microsoft Corporation) [unknown | Running] – C:\Windows\System32\schedsvc.dll – (Schedule)

SRV - [2008-01-21 03:34:18 | 000,068,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\KMSVC.DLL – (hkmsvc)

SRV - [2008-01-21 03:34:17 | 000,056,320 | ---- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\System32\tbssvc.dll – (TBS)

SRV - [2008-01-21 03:34:08 | 000,106,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\regsvc.dll – (RemoteRegistry)

SRV - [2008-01-21 03:34:08 | 000,086,528 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\dnsrslvr.dll – (Dnscache)

SRV - [2008-01-21 03:34:08 | 000,071,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\msiexec.exe – (msiserver)

SRV - [2008-01-21 03:34:04 | 000,237,056 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\netprofm.dll – (netprofm)

SRV - [2008-01-21 03:34:03 | 000,310,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\swprv.dll – (swprv)

SRV - [2008-01-21 03:34:03 | 000,175,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\dot3svc.dll – (dot3svc)

SRV - [2008-01-21 03:34:03 | 000,145,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\wecsvc.dll – (Wecsvc)

SRV - [2008-01-21 03:34:02 | 000,282,624 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\w32time.dll – (W32Time)

SRV - [2008-01-21 03:34:02 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\fdPHost.dll – (fdPHost)

SRV - [2008-01-21 03:34:01 | 000,095,232 | ---- | M] (Microsoft Corporation) [unknown | Stopped] – C:\Windows\System32\SCardSvr.dll – (SCardSvr)

SRV - [2008-01-21 03:34:01 | 000,040,448 | ---- | M] (Microsoft Corporation) [unknown | Stopped] – C:\Windows\System32\certprop.dll – (SCPolicySvc)

SRV - [2008-01-21 03:34:01 | 000,040,448 | ---- | M] (Microsoft Corporation) [unknown | Stopped] – C:\Windows\System32\certprop.dll – (CertPropSvc)

SRV - [2008-01-21 03:34:00 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\rasauto.dll – (RasAuto)

SRV - [2008-01-21 03:34:00 | 000,068,608 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\System32\mprdim.dll – (RemoteAccess)

SRV - [2008-01-21 03:33:59 | 000,074,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\IPBusEnum.dll – (IPBusEnum)

SRV - [2008-01-21 03:33:55 | 000,344,576 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\msdtckrm.dll – (KtmRm)

SRV - [2008-01-21 03:33:55 | 000,105,984 | ---- | M] (Microsoft Corporation) [unknown | Stopped] – C:\Windows\System32\msdtc.exe – (MSDTC)

SRV - [2008-01-21 03:33:54 | 000,033,280 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\appinfo.dll – (Appinfo)

SRV - [2008-01-21 03:33:53 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\alg.exe – (ALG)

SRV - [2008-01-21 03:33:51 | 000,448,512 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\termsrv.dll – (TermService)

SRV - [2008-01-21 03:33:50 | 000,274,432 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\netman.dll – (Netman)

SRV - [2008-01-21 03:33:47 | 000,039,424 | ---- | M] (Microsoft Corporation) [unknown | Stopped] – C:\Windows\servicing\TrustedInstaller.exe – (TrustedInstaller)

SRV - [2008-01-21 03:33:46 | 000,288,256 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\ipnathlp.dll – (SharedAccess) Internet Connection Sharing (ICS)

SRV - [2008-01-21 03:33:45 | 000,035,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\UI0Detect.exe – (UI0Detect)

SRV - [2008-01-21 03:33:41 | 000,075,264 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\trkwks.dll – (TrkWks)

SRV - [2008-01-21 03:33:40 | 000,259,072 | ---- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\upnphost.dll – (upnphost)

SRV - [2008-01-21 03:33:40 | 000,153,600 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\profsvc.dll – (ProfSvc)

SRV - [2008-01-21 03:33:39 | 001,502,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\pla.dll – (pla)

SRV - [2008-01-21 03:33:37 | 000,204,288 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\dhcpcsvc.dll – (Dhcp)

SRV - [2008-01-21 03:33:36 | 000,221,696 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\umpnpmgr.dll – (PlugPlay)

SRV - [2008-01-21 03:33:27 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\IKEEXT.DLL – (IKEEXT)

SRV - [2008-01-21 03:33:27 | 000,328,704 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\BFE.DLL – (BFE)

SRV - [2008-01-21 03:33:26 | 000,062,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\wercplsupport.dll – (wercplsupport)

SRV - [2008-01-21 03:33:24 | 000,137,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\wbem\WmiApSrv.exe – (wmiApSrv)

SRV - [2008-01-21 03:33:23 | 000,247,296 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\shsvcs.dll – (Themes)

SRV - [2008-01-21 03:33:23 | 000,247,296 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\shsvcs.dll – (ShellHWDetection)

SRV - [2008-01-21 03:33:20 | 001,054,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\VSSVC.exe – (VSS)

SRV - [2008-01-21 03:33:19 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\iscsiexe.dll – (MSiSCSI)

SRV - [2008-01-21 03:33:18 | 001,013,760 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\wevtsvc.dll – (Eventlog)

SRV - [2008-01-21 03:33:15 | 000,168,448 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\nlasvc.dll – (NlaSvc)

SRV - [2008-01-21 03:33:11 | 002,091,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\dfsr.exe – (DFSR)

SRV - [2008-01-21 03:33:08 | 000,412,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\wcncsvc.dll – (wcncsvc)

SRV - [2008-01-21 03:33:06 | 000,452,608 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\wiaservc.dll – (stisvc) Windows Image Acquisition (WIA)

SRV - [2008-01-21 03:33:06 | 000,196,608 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\WebClnt.dll – (WebClient)

SRV - [2008-01-21 03:33:06 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\wscsvc.dll – (wscsvc)

SRV - [2008-01-21 03:33:00 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)

SRV - [2008-01-21 03:32:58 | 000,243,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\qwave.dll – (QWAVE)

SRV - [2008-01-21 03:32:56 | 000,037,888 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\pcasvc.dll – (PcaSvc)

SRV - [2008-01-21 03:32:53 | 000,104,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\sdrsvc.dll – (SDRSVC)

SRV - [2007-10-03 05:53:00 | 000,094,208 | ---- | M] () [Auto | Running] – C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe – (ASLDRService)

SRV - [2007-08-08 08:08:40 | 000,094,208 | ---- | M] () [Auto | Running] – C:\Program Files\ATKGFNEX\GFNEXSrv.exe – (ATKGFNEXSrv)

SRV - [2006-11-02 13:34:40 | 000,068,096 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\TabSvc.dll – (TabletInputService)

SRV - [2006-11-02 10:46:13 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\WcsPlugInService.dll – (WcsPlugInService)

SRV - [2006-11-02 10:46:05 | 000,018,944 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\lmhsvc.dll – (lmhosts)

SRV - [2006-11-02 10:46:04 | 000,027,648 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\FDResPub.dll – (FDResPub)

SRV - [2006-11-02 10:46:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\aelupsvc.dll – (AeLookupSvc)

SRV - [2006-11-02 10:45:46 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\snmptrap.exe – (SNMPTRAP)

SRV - [2006-11-02 10:45:21 | 000,007,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\Locator.exe – (RpcLocator) Remote Procedure Call (RPC)

SRV - [2006-11-02 10:45:02 | 000,007,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\dllhost.exe – (COMSysApp)

SRV - [2006-10-26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE – (ose)

SRV - [2005-04-04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe – (IDriverT)

========== Driver Services (All) ==========

– Dodane 27.11.2010 (So) 10:57 –

reszta na wklej to:

http://wklejto.pl/82449

http://wklejto.pl/82450

http://wklejto.pl/82451

http://wklejto.pl/82452

http://wklejto.pl/82453

http://wklejto.pl/82454

http://wklejto.pl/82455

http://wklejto.pl/82456

http://wklejto.pl/82457

Pierwsza część to jest ta zamieszczona tutaj, a reszta części po kolei z wklej to