witam mam problem mianowicie bardzo wolno chodzi mi komputer prosze o sprawdzenie logow i pomoc co mam dalej robic
OTL logfile created on: 2010-04-11 00:13:54 - Run 1
OTL by OldTimer - Version 3.2.1.1 Folder = C:\Documents and Settings\piotr\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
223,00 Mb Total Physical Memory | 45,00 Mb Available Physical Memory | 20,00% Memory free
545,00 Mb Paging File | 79,00 Mb Available in Paging File | 14,00% Paging File free
Paging file location(s): C:\pagefile.sys 336 672 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 14,65 Gb Total Space | 10,24 Gb Free Space | 69,89% Space Free | Partition Type: NTFS
Drive D: | 29,30 Gb Total Space | 4,14 Gb Free Space | 14,14% Space Free | Partition Type: NTFS
Drive E: | 30,60 Gb Total Space | 22,96 Gb Free Space | 75,03% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: WESOL
Current User Name: piotr
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ==========
PRC - [2010-04-11 00:08:40 | 000,561,664 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\piotr\Pulpit\OTL.exe
PRC - [2010-04-07 23:53:17 | 000,910,296 | ---- | M] (Mozilla Corporation) – C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-02-05 23:08:45 | 000,081,000 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009-02-05 23:08:40 | 000,138,680 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-02-05 23:08:26 | 000,254,040 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009-02-05 23:06:04 | 000,352,920 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-02-05 23:01:25 | 000,018,752 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2008-12-04 14:24:30 | 000,665,424 | ---- | M] (SEIKO EPSON CORPORATION) – C:\Program Files\Epson Software\Event Manager\EEventManager.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2007-06-05 14:20:32 | 000,177,704 | ---- | M] () – C:\WINDOWS\system32\PSIService.exe
PRC - [2006-12-03 01:14:03 | 000,310,784 | ---- | M] (http://autoconnect.prv.pl) – C:\Program Files\AutoConnect\AutoConnect.exe
========== Modules (SafeList) ==========
MOD - [2010-04-11 00:08:40 | 000,561,664 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\piotr\Pulpit\OTL.exe
MOD - [2009-02-05 23:07:43 | 000,139,264 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll
========== Win32 Services (SafeList) ==========
SRV - [2009-02-05 23:08:40 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] – C:\Program Files\Alwil Software\Avast4\ashServ.exe – (avast! Antivirus)
SRV - [2009-02-05 23:08:26 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe – (avast! Mail Scanner)
SRV - [2009-02-05 23:06:04 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast4\ashWebSv.exe – (avast! Web Scanner)
SRV - [2009-02-05 23:01:25 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] – C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe – (aswUpdSv)
SRV - [2007-06-05 14:20:32 | 000,177,704 | ---- | M] () [Auto | Running] – C:\WINDOWS\system32\PSIService.exe – (ProtexisLicensing)
========== Driver Services (SafeList) ==========
DRV - [2009-02-05 23:08:10 | 000,094,032 | ---- | M] (ALWIL Software) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\aswmon2.sys – (aswMon2)
DRV - [2009-02-05 23:07:23 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\aswSP.sys – (aswSP)
DRV - [2009-02-05 23:07:12 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\aswFsBlk.sys – (aswFsBlk)
DRV - [2009-02-05 23:06:20 | 000,051,376 | ---- | M] (ALWIL Software) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\aswTdi.sys – (aswTdi)
DRV - [2009-02-05 23:06:10 | 000,023,152 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\aswRdr.sys – (aswRdr)
DRV - [2009-02-05 23:05:11 | 000,026,944 | ---- | M] (ALWIL Software) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\aavmker4.sys – (Aavmker4)
DRV - [2007-04-03 14:57:54 | 000,099,080 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\s116unic.sys – (s116unic) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM)
DRV - [2007-04-03 14:57:52 | 000,098,696 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\s116obex.sys – (s116obex)
DRV - [2007-04-03 14:57:52 | 000,023,176 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\s116nd5.sys – (s116nd5) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS)
DRV - [2007-04-03 14:57:50 | 000,100,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\s116mgmt.sys – (s116mgmt) Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM)
DRV - [2007-04-03 14:57:48 | 000,108,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\s116mdm.sys – (s116mdm)
DRV - [2007-04-03 14:57:48 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\s116mdfl.sys – (s116mdfl)
DRV - [2007-04-03 14:57:42 | 000,083,336 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\s116bus.sys – (s116bus) Sony Ericsson Device 116 driver (WDM)
DRV - [2005-09-03 11:49:28 | 000,261,632 | R— | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\sisgrp.sys – (SiS315)
DRV - [2005-08-25 14:23:28 | 000,011,904 | R— | M] (Silicon Integrated Systems Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\srvkp.sys – (SiSkp)
DRV - [2005-05-06 11:14:24 | 000,048,128 | R— | M] (Silicon Integrated Systems) [Kernel | Boot | Running] – C:\WINDOWS\system32\DRIVERS\SiSRaid.sys – (SiSRaid)
DRV - [2002-07-10 17:39:34 | 000,032,256 | R— | M] (SiS Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\sisnic.sys – (SISNIC)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0
IE - HKU\S-1-5-21-682003330-1767777339-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0
========== FireFox ==========
FF - prefs.js…browser.search.useDBForOrder: true
FF - prefs.js…browser.startup.homepage: “http://www.onet.pl/”
FF - prefs.js…extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102
FF - prefs.js…extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1
FF - prefs.js…extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js…network.proxy.http: “216.9.6.148”
FF - prefs.js…network.proxy.http_port: 8080
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\Components: C:\Program Files\Mozilla Firefox\components [2010-04-08 12:29:38 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-04-07 23:53:29 | 000,000,000 | —D | M]
[2010-02-20 14:49:08 | 000,000,000 | —D | M] – C:\Documents and Settings\piotr\Dane aplikacji\Mozilla\Extensions
[2010-04-10 14:26:23 | 000,000,000 | —D | M] – C:\Documents and Settings\piotr\Dane aplikacji\Mozilla\Firefox\Profiles\qbgkqhuq.default\extensions
[2010-02-14 02:34:26 | 000,000,000 | —D | M] (Winamp Toolbar) – C:\Documents and Settings\piotr\Dane aplikacji\Mozilla\Firefox\Profiles\qbgkqhuq.default\extensions{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010-02-14 02:47:29 | 000,001,196 | ---- | M] () – C:\Documents and Settings\piotr\Dane aplikacji\Mozilla\Firefox\Profiles\qbgkqhuq.default\searchplugins\winamp-search.xml
[2010-04-10 23:38:00 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2010-04-07 23:53:22 | 000,002,767 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-04-07 23:53:22 | 000,001,406 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-04-07 23:53:22 | 000,000,917 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-04-07 23:53:22 | 000,000,858 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-04-07 23:53:22 | 000,001,183 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-04-07 23:53:22 | 000,001,683 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
O1 HOSTS File: ([2001-10-26 19:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM…\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKLM…\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKLM…\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKU\S-1-5-21-682003330-1767777339-1177238915-1003…\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-21-682003330-1767777339-1177238915-1003…\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM…\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM…\Run: [Cmaudio] File not found
O4 - HKLM…\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM…\Run: [KernelFaultCheck] File not found
O4 - HKLM…\Run: [siSPower] C:\WINDOWS\System32\SiSPower.dll (Silicon Integrated Systems Corporation)
O4 - HKLM…\Run: [siSRaid] C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\Sraid.exe (SiS)
O4 - HKU\S-1-5-21-682003330-1767777339-1177238915-1003…\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe (http://autoconnect.prv.pl)
O4 - HKU\S-1-5-21-682003330-1767777339-1177238915-1003…\Run: [EPSON SX110 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE (SEIKO EPSON CORPORATION)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = E:\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-682003330-1767777339-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - E:\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh … wflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\piotr\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\piotr\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-02-13 17:20:26 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT – [NTFS]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM…comfile [open] – “%1” %*
O35 - HKLM…exefile [open] – “%1” %*
O37 - HKLM…com [@ = comfile] – “%1” %*
O37 - HKLM…exe [@ = exefile] – “%1” %*
========== Files/Folders - Created Within 30 Days ==========
[2010-04-11 00:08:32 | 000,561,664 | ---- | C] (OldTimer Tools) – C:\Documents and Settings\piotr\Pulpit\OTL.exe
[2010-04-10 16:04:46 | 000,000,000 | RH-D | C] – C:\Documents and Settings\piotr\Recent
[2010-04-04 11:08:56 | 000,000,000 | —D | C] – C:\Program Files\ImgBurn
[2010-04-04 11:04:43 | 000,000,000 | —D | C] – C:\Program Files\PowerISO
[2010-04-01 13:39:40 | 000,000,000 | —D | C] – C:\Documents and Settings\piotr\Ustawienia lokalne\Dane aplikacji\Identities
[2010-03-25 22:03:19 | 000,609,584 | ---- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comctl32.ocx
[2010-03-25 22:03:18 | 000,152,848 | ---- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comdlg32.ocx
[2010-03-25 22:03:17 | 000,000,000 | —D | C] – C:\Program Files\Mp3 Knife
[2010-03-15 12:11:19 | 000,000,000 | --SD | C] – C:\Documents and Settings\piotr\UserData
[2010-03-13 02:38:01 | 000,000,000 | —D | C] – C:\Program Files\CCleaner
[2010-02-13 17:25:42 | 000,000,000 | --SD | M] – C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2010-02-13 17:25:42 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-02-13 17:25:09 | 000,000,000 | --SD | M] – C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2010-02-13 17:25:08 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[3 C:\WINDOWS*.tmp files -> C:\WINDOWS*.tmp ->]
[1 C:\WINDOWS\System32*.tmp files -> C:\WINDOWS\System32*.tmp ->]
========== Files - Modified Within 30 Days ==========
[2010-04-11 00:08:40 | 000,561,664 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\piotr\Pulpit\OTL.exe
[2010-04-10 23:22:50 | 000,000,006 | -H-- | M] () – C:\WINDOWS\tasks\SA.DAT
[2010-04-10 23:21:25 | 000,002,048 | --S- | M] () – C:\WINDOWS\bootstat.dat
[2010-04-10 19:22:56 | 000,000,188 | -HS- | M] () – C:\Documents and Settings\piotr\ntuser.ini
[2010-04-10 19:22:55 | 003,670,016 | -H-- | M] () – C:\Documents and Settings\piotr\NTUSER.DAT
[2010-04-10 18:04:12 | 000,058,368 | ---- | M] () – C:\Documents and Settings\piotr\Pulpit\Propozycja rozwiazania umowy o prace.doc
[2010-04-10 06:52:17 | 000,000,260 | ---- | M] () – C:\WINDOWS\tasks\WGASetup.job
[2010-04-08 18:04:50 | 000,002,516 | -HS- | M] () – C:\WINDOWS\System32\KGyGaAvL.sys
[2010-04-06 10:51:36 | 000,001,602 | ---- | M] () – C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
[2010-04-01 07:13:41 | 000,355,830 | ---- | M] () – C:\WINDOWS\System32\perfh015.dat
[2010-04-01 07:13:41 | 000,311,740 | ---- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010-04-01 07:13:41 | 000,049,712 | ---- | M] () – C:\WINDOWS\System32\perfc015.dat
[2010-04-01 07:13:41 | 000,040,128 | ---- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010-04-01 07:13:39 | 000,763,990 | ---- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010-04-01 07:09:49 | 000,002,206 | ---- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010-03-28 12:47:21 | 000,008,704 | ---- | M] () – C:\Documents and Settings\piotr\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-03-25 22:03:21 | 000,000,652 | ---- | M] () – C:\Documents and Settings\piotr\Pulpit\Mp3 Knife.lnk
[2010-03-24 14:19:29 | 000,075,264 | ---- | M] () – C:\Documents and Settings\piotr\Moje dokumenty\MILOSC PRACA 100 ZL.doc
[2010-03-13 02:38:05 | 000,001,548 | ---- | M] () – C:\Documents and Settings\piotr\Pulpit\CCleaner.lnk
[3 C:\WINDOWS*.tmp files -> C:\WINDOWS*.tmp ->]
[1 C:\WINDOWS\System32*.tmp files -> C:\WINDOWS\System32*.tmp ->]
========== Files Created - No Company Name ==========
[2010-04-10 18:04:05 | 000,058,368 | ---- | C] () – C:\Documents and Settings\piotr\Pulpit\Propozycja rozwiazania umowy o prace.doc
[2010-04-06 10:51:36 | 000,001,602 | ---- | C] () – C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
[2010-03-25 22:03:21 | 000,000,652 | ---- | C] () – C:\Documents and Settings\piotr\Pulpit\Mp3 Knife.lnk
[2010-03-24 14:19:23 | 000,075,264 | ---- | C] () – C:\Documents and Settings\piotr\Moje dokumenty\MILOSC PRACA 100 ZL.doc
[2010-03-13 02:38:05 | 000,001,548 | ---- | C] () – C:\Documents and Settings\piotr\Pulpit\CCleaner.lnk
[2010-03-08 20:01:21 | 000,000,000 | ---- | C] () – C:\WINDOWS\EEventManager.INI
[2010-03-08 16:07:31 | 000,000,097 | ---- | C] () – C:\WINDOWS\System32\PICSDK.ini
[2010-02-20 15:08:58 | 000,000,427 | ---- | C] () – C:\WINDOWS\ODBC.INI
[2010-02-14 15:05:24 | 000,002,516 | -HS- | C] () – C:\WINDOWS\System32\KGyGaAvL.sys
[2010-02-14 15:05:24 | 000,000,088 | RHS- | C] () – C:\WINDOWS\System32\5B88086980.sys
[2010-02-14 03:02:39 | 000,008,704 | ---- | C] () – C:\Documents and Settings\piotr\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-02-13 17:38:32 | 000,135,168 | R— | C] () – C:\WINDOWS\System32\property.dll
[2010-02-13 17:36:06 | 000,028,672 | R— | C] () – C:\WINDOWS\System32\cmirmdrv.dll
[2010-02-13 17:35:56 | 000,000,092 | ---- | C] () – C:\WINDOWS\CMISETUP.INI
[2010-02-13 17:35:55 | 000,000,026 | ---- | C] () – C:\WINDOWS\CMCDPLAY.INI
[2010-02-13 17:35:53 | 000,000,000 | ---- | C] () – C:\WINDOWS\Wininit.ini
[2010-02-13 17:35:49 | 000,132,864 | R— | C] () – C:\WINDOWS\Cmuda.ini
[2010-02-13 17:35:41 | 000,028,672 | ---- | C] () – C:\WINDOWS\CMIRmDriver.dll
[2010-02-13 17:32:15 | 000,076,011 | ---- | C] () – C:\WINDOWS\VGAsetup.ini
[2010-02-13 17:31:54 | 000,074,247 | ---- | C] () – C:\WINDOWS\System32\VGAunistlog.ini
[2010-02-13 17:28:01 | 000,000,188 | -HS- | C] () – C:\Documents and Settings\piotr\ntuser.ini
[2010-02-13 17:27:59 | 003,670,016 | -H-- | C] () – C:\Documents and Settings\piotr\NTUSER.DAT
[2010-02-13 17:27:59 | 000,001,024 | -H-- | C] () – C:\Documents and Settings\piotr\NTUSER.DAT.LOG
[2006-01-24 20:08:29 | 000,012,288 | ---- | C] () – C:\WINDOWS\System32\DivXWMPExtType.dll
[2005-08-12 23:57:09 | 003,596,288 | ---- | C] () – C:\WINDOWS\System32\qt-dx331.dll
========== LOP Check ==========
[2010-02-14 02:55:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software
[2010-03-08 16:15:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Dane aplikacji\EPSON
[2010-03-08 16:14:52 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Dane aplikacji\UDL
[2010-04-08 17:55:51 | 000,000,000 | —D | M] – C:\Documents and Settings\piotr\Dane aplikacji\Epson
[2010-02-14 13:41:43 | 000,000,000 | —D | M] – C:\Documents and Settings\piotr\Dane aplikacji\Gadu-Gadu
[2010-04-10 06:52:17 | 000,000,260 | ---- | M] () – C:\WINDOWS\Tasks\WGASetup.job
========== Purity Check ==========
< End of report >
OTL Extras logfile created on: 2010-04-11 00:13:54 - Run 1
OTL by OldTimer - Version 3.2.1.1 Folder = C:\Documents and Settings\piotr\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
223,00 Mb Total Physical Memory | 45,00 Mb Available Physical Memory | 20,00% Memory free
545,00 Mb Paging File | 79,00 Mb Available in Paging File | 14,00% Paging File free
Paging file location(s): C:\pagefile.sys 336 672 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 14,65 Gb Total Space | 10,24 Gb Free Space | 69,89% Space Free | Partition Type: NTFS
Drive D: | 29,30 Gb Total Space | 4,14 Gb Free Space | 14,14% Space Free | Partition Type: NTFS
Drive E: | 30,60 Gb Total Space | 22,96 Gb Free Space | 75,03% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: WESOL
Current User Name: piotr
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes]
[HKEY_USERS\S-1-5-21-682003330-1767777339-1177238915-1003\SOFTWARE\Classes]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\shell[command]\command]
batfile [open] – “%1” %*
cmdfile [open] – “%1” %*
comfile [open] – “%1” %*
exefile [open] – “%1” %*
htmlfile [edit] – Reg Error: Key error.
http [open] – “C:\Program Files\Mozilla Firefox\firefox.exe” -requestPending -osint -url “%1” (Mozilla Corporation)
https [open] – “C:\Program Files\Mozilla Firefox\firefox.exe” -requestPending -osint -url “%1” (Mozilla Corporation)
piffile [open] – “%1” %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – “%1”
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – “%1” /S
txtfile [edit] – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] – “E:\Winamp\winamp.exe” /BOOKMARK “%1” (Nullsoft)
Directory [Winamp.Enqueue] – “E:\Winamp\winamp.exe” /ADD “%1” (Nullsoft)
Directory [Winamp.Play] – “E:\Winamp\winamp.exe” “%1” (Nullsoft)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
“FirstRunDisabled” = 1
“AntiVirusDisableNotify” = 0
“FirewallDisableNotify” = 0
“UpdatesDisableNotify” = 0
“AntiVirusOverride” = 1
“FirewallOverride” = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
“139:TCP” = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
“445:TCP” = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
“137:UDP” = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
“138:UDP” = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
“1900:UDP” = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
“2869:TCP” = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
“139:TCP” = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
“445:TCP” = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
“137:UDP” = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
“138:UDP” = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
“E:\Bit Lord 1.1\BitLord.exe” = E:\Bit Lord 1.1\BitLord.exe:*:Enabled:BitLord – (http://www.BitLord.com)
“E:\Gadu-Gadu\gg.exe” = E:\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny – (Gadu-Gadu S.A.)
“C:\Program Files\Epson Software\Event Manager\EEventManager.exe” = C:\Program Files\Epson Software\Event Manager\EEventManager.exe:*:Enabled:EEventManager Application – (SEIKO EPSON CORPORATION)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
“{08498FF9-6C9B-4FC2-8DE1-BD98C89CC220}” = SiSRaidPackage
“{18D10072035C4515918F7E37EAFAACFC}” = AutoUpdate
“{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}” = Skype™ 4.0
“{26A24AE4-039D-4CA4-87B4-2F83216018FF}” = Java 6 Update 18
“{2FFE93F0-BB72-4E52-8761-354D1AAA9387}” = Sony Ericsson PC Suite 3.209.00
“{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}” = WebFldrs XP
“{48F22622-1CC2-4A83-9C1E-644DD96F832D}” = Epson Event Manager
“{4A03706F-666A-4037-7777-5F2748764D10}” = Java Auto Updater
“{64E72FB1-2343-4977-B4A8-262CD53D0BD3}” = Corel Paint Shop Pro Photo X2
“{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}” = Avanquest update
“{7B63B2922B174135AFC0E1377DD81EC2}” = DivX
“{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}” = EPSON Web-To-Page
“{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}” = Epson Easy Photo Print 2
“{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}” = Microsoft Silverlight
“{8ADFC4160D694100B5B8A22DE9DCABD9}” = DivX Player
“{91110415-6000-11D3-8CFE-0050048383C9}” = Microsoft Office XP Professional
“{AC76BA86-7AD7-1038-7B44-CEA000000001}” = Adobe Reader 6.0.2 CE
“{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}” = ABBYY FineReader 6.0 Sprint
“{B7050CBDB2504B34BC2A9CA0A692CC29}” = DivX Web Player
“{DC226AC9-0314-496C-BE6A-B6A132628466}” = SiSAGP driver
“Adobe Flash Player ActiveX” = Adobe Flash Player 10 ActiveX
“Adobe Flash Player Plugin” = Adobe Flash Player 10 Plugin
“AutoConnect” = AutoConnect v0.1.3.1
“avast!” = avast! Antivirus
“BitLord” = BitLord 1.1
“CCleaner” = CCleaner (remove only)
“C-Media Audio” = C-Media 3D Audio
“EPSON Scanner” = EPSON Scan
“Epson Stylus SX110_TX110 Przewodnik użytkownika” = Epson Stylus SX110_TX110 Podręcznik
“EPSON SX110 Series” = EPSON SX110 Series Printer Uninstall
“Gadu-Gadu” = Gadu-Gadu 7.7
“Mozilla Firefox (3.6.3)” = Mozilla Firefox (3.6.3)
“Mp3 Knife_is1” = Mp3 Knife 3.2
“NAPIPROJEKT_is1” = NAPIPROJEKT 1.0.6.2
“RealAlt_is1” = Real Alternative 2.0.1
“SiS VGA Driver” = SiS VGA Utilities
“SiSLan” = SiS 900 PCI Fast Ethernet Adapter Driver
“SubEdit-Player_is1” = SubEdit-Player
“Winamp” = Winamp
“Winamp Toolbar” = Winamp Toolbar
“Windows Media Format Runtime” = Windows Media Format Runtime
“WinRAR archiver” = Archiwizator WinRAR
“WinZip” = WinZip
========== Last 10 Event Log Errors ==========
[Antivirus Events]
Error - 2010-03-08 10:16:29 | Computer Name = WESOL | Source = avast! | ID = 33554522
Description = AAVM - scanning error: Aavm: FetchGlobalCounters cannot open mapping
- server DOWN???, 00000002.
Error - 2010-03-20 05:28:00 | Computer Name = WESOL | Source = avast! | ID = 33554522
Description = AAVM - scanning error: Aavm: FetchGlobalCounters cannot open mapping
- server DOWN???, 00000002.
Error - 2010-03-30 12:46:22 | Computer Name = WESOL | Source = avast! | ID = 33554522
Description =
[Application Events]
Error - 2010-02-27 09:12:21 | Computer Name = WESOL | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca winamp.exe, wersja 5.5.5.2419, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2010-03-17 09:47:00 | Computer Name = WESOL | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca java.exe, wersja 6.0.180.7, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2010-03-17 09:47:02 | Computer Name = WESOL | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca java.exe, wersja 6.0.180.7, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2010-03-20 05:27:01 | Computer Name = WESOL | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd firefox.exe, wersja 1.9.0.3685, moduł powodujący
błąd js3250.dll, wersja 4.0.0.0, adres błędu 0x00015ed2.
Error - 2010-04-03 19:56:06 | Computer Name = WESOL | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca BitLord.exe, wersja 1.1.5.6, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2010-04-09 12:59:14 | Computer Name = WESOL | Source = PerfNet | ID = 2004
Description = Nie można otworzyć usługi Server. Dane wydajności usługi Server nie
zostaną zwrócone. Zwrócony kod stanu to dane DWORD 0.
Error - 2010-04-10 00:43:43 | Computer Name = WESOL | Source = PerfNet | ID = 2004
Description = Nie można otworzyć usługi Server. Dane wydajności usługi Server nie
zostaną zwrócone. Zwrócony kod stanu to dane DWORD 0.
Error - 2010-04-10 09:38:52 | Computer Name = WESOL | Source = PerfNet | ID = 2004
Description = Nie można otworzyć usługi Server. Dane wydajności usługi Server nie
zostaną zwrócone. Zwrócony kod stanu to dane DWORD 0.
Error - 2010-04-10 10:03:18 | Computer Name = WESOL | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.2.3743, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2010-04-10 17:23:16 | Computer Name = WESOL | Source = PerfNet | ID = 2004
Description = Nie można otworzyć usługi Server. Dane wydajności usługi Server nie
zostaną zwrócone. Zwrócony kod stanu to dane DWORD 0.
< End of report >
– Dodane 11.04.2010 (N) 15:06 –
prosze o szybka pomoc;/;/;/;/