ADVERTISEMENT

OTL.Txt

Blue screen i blad krytyczny c000021a bardzo prosze o pomoc

Przeskanowalem tak jak mowiles mbam wykryl kilka trojanow wiec przeskanowalem jeszcze raz no i zdaje sie ze juz jest ok daje logi o ktore prosiles no i logi z mbam przed usunieciem trojanow no i ostatni gdzie juz nic nie wykryl-Dziekuje bardzo za pomoc


Download file - link to post

OTL logfile created on: 2010-01-01 23:55:58 - Run 1
OTL by OldTimer - Version 3.1.20.1 Folder = C:\Documents and Settings\ \Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 77,00% Memory free
7,00 Gb Paging File | 6,00 Gb Available in Paging File | 93,00% Paging File free
Paging file location(s): C:\pagefile.sys 4221 4221 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,07 Gb Total Space | 22,58 Gb Free Space | 57,79% Space Free | Partition Type: NTFS
Drive D: | 193,82 Gb Total Space | 70,39 Gb Free Space | 36,32% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: CE1F70528FFD4C4
Current User Name:  
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2010-01-01 22:56:18 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ \Pulpit\OTL.exe
PRC - [2010-01-01 14:32:16 | 01,181,328 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
PRC - [2009-12-20 10:16:15 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\ZAINSTALOWANE PROGRAMY !\Gadu-Gadu\gg.exe
PRC - [2009-10-21 14:48:07 | 00,841,728 | ---- | M] (Murray Hurps Corp Pty Ltd) -- C:\ZAINSTALOWANE PROGRAMY !\Ad Muncher\AdMunch.exe
PRC - [2009-10-11 04:17:36 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009-10-11 04:17:35 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009-10-03 03:08:38 | 00,035,696 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
PRC - [2009-09-12 18:25:18 | 00,005,120 | ---- | M] () -- C:\Program Files\Prio\prio_svc.exe
PRC - [2009-04-10 18:29:08 | 00,037,888 | ---- | M] () -- C:\ZAINSTALOWANE PROGRAMY !\Winamp\winampa.exe
PRC - [2009-01-15 16:44:10 | 00,950,664 | ---- | M] (Eset ) -- C:\Program Files\ESET\nod32kui.exe
PRC - [2009-01-15 16:44:10 | 00,549,256 | ---- | M] (Eset ) -- C:\Program Files\ESET\nod32krn.exe
PRC - [2008-10-25 11:44:34 | 00,031,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
PRC - [2008-05-03 04:16:00 | 00,159,812 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2008-04-14 18:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008-03-28 01:28:00 | 01,040,384 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
PRC - [2007-09-02 13:58:52 | 00,495,616 | ---- | M] () -- C:\ZAINSTALOWANE PROGRAMY !\RocketDock\RocketDock.exe
PRC - [2007-08-11 14:50:00 | 00,331,264 | ---- | M] () -- C:\ZAINSTALOWANE PROGRAMY !\NetMeter\NetMeter\NetMeter.exe
PRC - [2007-05-14 03:54:36 | 00,272,024 | ---- | M] () -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe
PRC - [2007-03-14 21:01:30 | 00,071,216 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
PRC - [2004-05-12 15:18:56 | 00,241,664 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
PRC - [2001-10-26 17:30:04 | 00,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\unsecapp.exe


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2010-01-01 22:56:18 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ \Pulpit\OTL.exe
MOD - [2009-10-21 14:48:07 | 00,030,208 | ---- | M] (Murray Hurps Corp Pty Ltd) -- C:\ZAINSTALOWANE PROGRAMY !\Ad Muncher\AM30615.dll
MOD - [2007-09-02 13:57:36 | 00,069,632 | ---- | M] () -- C:\ZAINSTALOWANE PROGRAMY !\RocketDock\RocketDock.dll
MOD - [2006-12-21 13:30:44 | 00,102,400 | ---- | M] (Gadu-Gadu S.A.) -- C:\ZAINSTALOWANE PROGRAMY !\Gadu-Gadu\ggwhook.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found [On_Demand | Stopped] -- -- (NMIndexingService)
SRV - File not found [Auto | Stopped] -- -- (gusvc)
SRV - [2010-01-01 14:32:16 | 01,181,328 | ---- | M] (Lavasoft) [Auto | Running] -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2009-10-11 04:17:35 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009-09-12 18:25:18 | 00,005,120 | ---- | M] () [Auto | Running] -- C:\Program Files\Prio\prio_svc.exe -- (prio_svc)
SRV - [2009-02-20 22:04:02 | 00,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate1c9939ec3aeeb4a) Google Update Service (gupdate1c9939ec3aeeb4a)
SRV - [2009-01-15 16:44:10 | 00,549,256 | ---- | M] (Eset ) [Auto | Running] -- C:\Program Files\Eset\nod32krn.exe -- (NOD32krn)
SRV - [2008-11-04 01:06:28 | 00,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2008-10-25 11:44:08 | 00,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2008-05-03 04:16:00 | 00,159,812 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
SRV - [2007-05-14 03:54:36 | 00,272,024 | ---- | M] () [Auto | Running] -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe -- (RichVideo) Cyberlink RichVideo Service(CRVS)
SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2004-07-15 01:49:26 | 00,032,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe -- (aspnet_state)
SRV - [2004-03-18 16:55:48 | 00,065,536 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2009-12-02 14:19:06 | 00,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2009-09-12 18:25:32 | 00,051,448 | ---- | M] (Xeno) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prio.sys -- (prio)
DRV - [2009-06-14 20:14:07 | 00,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-02-13 18:37:42 | 00,021,035 | ---- | M] (Meetinghouse Data Communications) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\AegisP.sys -- (AegisP) AEGIS Protocol (IEEE 802.1x)
DRV - [2009-01-15 16:44:10 | 00,512,096 | ---- | M] (Eset ) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\amon.sys -- (AMON)
DRV - [2009-01-15 16:44:09 | 00,015,424 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\nod32drv.sys -- (nod32drv)
DRV - [2008-09-11 09:18:36 | 00,034,688 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcampr5.sys -- (PCAMPR5)
DRV - [2008-09-11 09:18:36 | 00,032,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcandis5.sys -- (PCANDIS5)
DRV - [2008-08-20 18:58:58 | 00,044,944 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2008-05-03 04:16:00 | 06,554,496 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2008-04-27 10:52:00 | 01,310,464 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2008-04-24 22:18:48 | 00,054,016 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2008-04-24 22:18:48 | 00,022,016 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2008-04-24 22:18:48 | 00,013,312 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2008-04-22 07:20:04 | 00,737,792 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CHDAU32.sys -- (CnxtHdAudService)
DRV - [2008-04-13 19:45:36 | 00,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser.sys -- (usbser)
DRV - [2008-04-13 17:39:16 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2008-04-13 17:36:05 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-03-28 01:14:00 | 00,224,672 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2008-02-08 09:46:36 | 00,057,408 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wsimd.sys -- (WSIMD)
DRV - [2007-12-18 12:18:10 | 00,732,160 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (HdAudAddService)
DRV - [2007-11-01 08:26:36 | 00,989,696 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2007-11-01 08:25:32 | 00,211,456 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2007-11-01 08:25:22 | 00,731,520 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2007-07-16 11:38:08 | 00,026,272 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2007-05-23 22:26:34 | 00,049,904 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS -- (BVRPMPR5)
DRV - [2007-04-16 21:46:00 | 00,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2007-01-07 17:11:22 | 00,100,864 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssbcmdm.sys -- (ssbcmdm)
DRV - [2007-01-07 17:11:18 | 00,009,360 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssbcmdfl.sys -- (ssbcmdfl) SAMSUNG Mobile USB Modem 1.0 (Filter)
DRV - [2007-01-07 17:10:28 | 00,066,880 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssbcbus.sys -- (ssbcbus) SAMSUNG Mobile Composite Device (WDM)
DRV - [2006-12-13 17:52:50 | 00,020,992 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\motmodem.sys -- (motmodem)
DRV - [2006-11-15 16:23:06 | 00,038,144 | R--- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\EAPPkt.sys -- (EAPPkt)
DRV - [2006-06-19 05:26:58 | 00,012,672 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\mdmxsdk.sys -- (mdmxsdk)
DRV - [2004-03-18 16:52:44 | 00,016,496 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HPZipr12.sys -- (HPZipr12)
DRV - [2004-03-18 16:52:42 | 00,051,088 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hpzid412.sys -- (HPZid412)
DRV - [2004-03-18 16:51:02 | 00,021,744 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HPZius12.sys -- (HPZius12)
DRV - [2001-08-17 21:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyEnable " = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.startup.homepage: " http://www.google.pl/ "
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.2
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 48
FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:3.3.19
FF - prefs.js..extensions.enabledItems: {ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}:2.5.2
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {4D144BC3-23FB-47de-90C5-63CCB0139CCF}:1.0


FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-12-20 13:31:12 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-12-20 13:31:12 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-12-20 13:31:12 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-12-20 13:31:12 | 00,000,000 | ---D | M]

[2009-02-17 19:37:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Extensions
[2010-01-01 17:44:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Firefox\Profiles\ogkm2cy9.default\extensions
[2009-12-11 17:06:47 | 00,000,000 | ---D | M] (Flagfox) -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Firefox\Profiles\ogkm2cy9.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2009-11-24 10:53:53 | 00,000,000 | ---D | M] (TradeManager-Plugin) -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Firefox\Profiles\ogkm2cy9.default\extensions\{4D144BC3-23FB-47de-90C5-63CCB0139CCF}
[2009-12-12 19:02:14 | 00,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Firefox\Profiles\ogkm2cy9.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009-11-06 19:19:42 | 00,000,000 | ---D | M] (FoxClocks) -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Firefox\Profiles\ogkm2cy9.default\extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1}
[2009-10-22 16:42:40 | 00,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Firefox\Profiles\ogkm2cy9.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2009-12-11 17:06:47 | 00,000,000 | ---D | M] (FoxLingo) -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Firefox\Profiles\ogkm2cy9.default\extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
[2009-07-25 21:33:49 | 00,000,254 | ---- | M] () -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Firefox\Profiles\ogkm2cy9.default\searchplugins\Search.xml
[2009-07-22 11:38:25 | 00,000,358 | ---- | M] () -- C:\Documents and Settings\ \Dane aplikacji\Mozilla\Firefox\Profiles\ogkm2cy9.default\searchplugins\winamp-search.xml
[2010-01-01 17:44:37 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2007-12-17 18:16:14 | 00,065,536 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins\npkimi.dll
[2009-12-20 13:31:06 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-12-20 13:31:06 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-12-20 13:31:06 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-12-20 13:31:06 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-12-20 13:31:06 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-12-20 13:31:06 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

O1 HOSTS File: (27 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Expressivo) - {85F685C3-20D9-4943-95E4-EB4224056C3F} - C:\ZAINSTALOWANE PROGRAMY !\Expressivo\IH_iexplore.dll (IVO Software Sp. z o.o.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Expressivo) - {85F685C3-20D9-4943-95E4-EB4224056C3F} - C:\ZAINSTALOWANE PROGRAMY !\Expressivo\IH_iexplore.dll (IVO Software Sp. z o.o.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Ad Muncher] C:\ZAINSTALOWANE PROGRAMY !\Ad Muncher\AdMunch.exe (Murray Hurps Corp Pty Ltd)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\CHDAudPropShortcut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKLM..\Run: [HP Component Manager] C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [nod32kui] C:\Program Files\Eset\nod32kui.exe (Eset )
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Cyberlink Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\ZAINSTALOWANE PROGRAMY !\Winamp\winampa.exe ()
O4 - HKCU..\Run: [C:\ZAINSTALOWANE PROGRAMY !\NetMeter\NetMeter\NetMeter.exe] C:\ZAINSTALOWANE PROGRAMY !\NetMeter\NetMeter\NetMeter.exe ()
O4 - HKCU..\Run: [ccleaner] C:\ZAINSTALOWANE PROGRAMY !\CCleaner\CCleaner.exe (Piriform Ltd)
O4 - HKCU..\Run: [Gadu-Gadu] C:\ZAINSTALOWANE PROGRAMY !\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O4 - HKCU..\Run: [RocketDock] C:\ZAINSTALOWANE PROGRAMY !\RocketDock\RocketDock.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa & ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E & ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Funkcja Google Sidewiki - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij & do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\System32\imon.dll (Eset )
O15 - HKLM\..Trusted Domains: 58 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1258147369718 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-01-15 14:45:18 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - comfile [open] -- " %1 " %*
O35 - exefile [open] -- " %1 " %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010-01-01 23:56:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \Pulpit\DO skanowania i Logi
[2010-01-01 23:54:59 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\ \Recent
[2010-01-01 22:45:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \Dane aplikacji\Malwarebytes
[2010-01-01 22:45:00 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010-01-01 22:44:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2010-01-01 22:44:56 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010-01-01 22:44:55 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010-01-01 19:10:38 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2010-01-01 14:34:10 | 00,064,288 | ---- | C] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys
[2010-01-01 14:29:45 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
[2010-01-01 14:29:21 | 00,000,000 | ---D | C] -- C:\Program Files\Lavasoft
[2010-01-01 14:29:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft
[2009-12-30 21:41:25 | 00,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2009-12-30 15:09:49 | 00,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2009-12-30 14:44:37 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2009-12-30 14:25:48 | 00,396,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF11388.exe
[2009-12-30 11:08:30 | 00,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2009-12-30 11:07:31 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2009-12-29 15:01:31 | 00,000,000 | ---D | C] -- C:\CC Get MAC Address
[2009-12-29 12:45:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \Dane aplikacji\BPFTP
[2009-12-27 16:55:33 | 00,094,208 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\w32n50.dll
[2009-12-27 16:55:33 | 00,034,688 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\pcampr5.sys
[2009-12-27 16:55:33 | 00,032,128 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\pcandis5.sys
[2009-12-27 16:55:21 | 00,000,000 | ---D | C] -- C:\Program Files\OrangeBS
[2009-12-27 16:53:45 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\France Telecom
[2009-12-27 13:27:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-12-27 13:24:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \Moje dokumenty\CV
[2009-12-24 17:56:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Temp
[2009-12-20 12:59:06 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot_bak
[2009-12-20 09:56:03 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[2009-12-18 22:24:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \Ustawienia lokalne\Dane aplikacji\cache
[2009-12-18 22:22:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \Dane aplikacji\Nowe Gadu-Gadu
[2009-12-18 21:41:14 | 00,000,000 | ---D | C] -- C:\RECYCLER(3)
[2009-12-18 21:29:43 | 00,000,000 | ---D | C] -- C:\WINDOWS\temp
[2009-12-17 14:16:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \.gstreamer-0.10
[2009-12-16 20:02:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-12-16 20:02:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \Dane aplikacji\OpenFM
[2009-12-16 20:01:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \Dane aplikacji\Gadu-Gadu 10
[2009-12-09 22:06:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\ \Dane aplikacji\HpUpdate
[2009-12-06 10:45:53 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Bootvis
[2009-12-05 19:30:34 | 00,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2009-12-04 12:13:30 | 00,000,000 | ---D | C] -- C:\Program Files\KaraFun
[2009-11-06 08:46:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-11-01 11:07:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-10-26 09:12:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Apple
[2009-05-13 19:24:08 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google
[2009-02-21 21:32:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google
[2009-01-18 17:14:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Bytemobile
[2009-01-15 14:45:15 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2009-01-15 14:45:15 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[1 C:\WINDOWS\System32\*.tmp files - & gt; C:\WINDOWS\System32\*.tmp - & gt; ]
[1 C:\WINDOWS\*.tmp files - & gt; C:\WINDOWS\*.tmp - & gt; ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010-01-01 23:56:41 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010-01-01 23:56:41 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010-01-01 23:56:40 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010-01-01 23:56:40 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010-01-01 23:56:39 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010-01-01 23:54:29 | 00,182,851 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010-01-01 23:54:24 | 00,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-01-01 23:54:19 | 00,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010-01-01 23:54:15 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-01-01 23:54:13 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-01-01 23:53:14 | 08,912,896 | ---- | M] () -- C:\Documents and Settings\ \ntuser.dat
[2010-01-01 23:53:14 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\ \ntuser.ini
[2010-01-01 23:50:30 | 00,000,454 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{4B35ABAA-5376-4EF2-A12C-005CB9C433B0}.job
[2010-01-01 23:12:35 | 00,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010-01-01 22:45:03 | 00,000,714 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2010-01-01 19:29:52 | 00,002,259 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2010-01-01 14:29:43 | 00,000,885 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ad-Aware.lnk
[2010-01-01 11:03:07 | 00,112,128 | ---- | M] () -- C:\Documents and Settings\ \Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-12-30 21:41:07 | 00,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2009-12-30 21:41:07 | 00,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2009-12-30 19:37:28 | 00,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-12-30 19:32:41 | 00,007,171 | ---- | M] () -- C:\Documents and Settings\ \Pulpit\Avast _4_Professional_Edition_4 8 1169_[PL]_[key][Torrenty.org].torrent
[2009-12-30 15:07:43 | 00,381,118 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009-12-30 15:07:43 | 00,052,848 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009-12-30 14:55:24 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009-12-30 14:54:58 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009-12-30 14:44:42 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009-12-30 14:44:26 | 00,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009-12-30 14:25:30 | 00,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\CF11388.exe
[2009-12-30 10:57:55 | 00,439,882 | ---- | M] () -- C:\WINDOWS\System32\prfh0415.dat
[2009-12-30 10:57:55 | 00,068,814 | ---- | M] () -- C:\WINDOWS\System32\prfc0415.dat
[2009-12-29 15:01:32 | 00,000,616 | ---- | M] () -- C:\Documents and Settings\ \Pulpit\CC Get MAC Address.lnk
[2009-12-26 16:48:06 | 00,000,700 | ---- | M] () -- C:\WINDOWS\win.ini
[2009-12-24 18:00:02 | 00,001,933 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk
[2009-12-17 23:30:48 | 02,851,336 | -H-- | M] () -- C:\Documents and Settings\ \Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-12-15 11:24:48 | 00,293,376 | ---- | M] () -- C:\Documents and Settings\ \Pulpit\gmer.exe
[2009-12-14 21:21:47 | 00,440,212 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2009-12-14 21:21:47 | 00,069,018 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2009-12-14 17:35:14 | 00,956,380 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-12-14 09:12:02 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009-12-09 22:54:07 | 00,261,632 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2009-12-09 08:46:32 | 00,000,949 | ---- | M] () -- C:\Documents and Settings\ \Pulpit\Pasek TVN24.lnk
[2009-12-07 18:09:24 | 00,000,281 | -HS- | M] () -- C:\boot.ini
[2009-12-06 13:22:51 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2009-12-04 08:53:18 | 00,026,112 | ---- | M] () -- C:\Documents and Settings\ \Moje dokumenty\Zwrot towaru do 10 dni.doc
[2009-12-03 13:09:38 | 00,002,513 | ---- | M] () -- C:\Documents and Settings\ \Pulpit\Microsoft Office Word 2007.lnk
[1 C:\WINDOWS\System32\*.tmp files - & gt; C:\WINDOWS\System32\*.tmp - & gt; ]
[1 C:\WINDOWS\*.tmp files - & gt; C:\WINDOWS\*.tmp - & gt; ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-01-01 23:56:25 | 00,293,376 | ---- | C] () -- C:\Documents and Settings\ \Pulpit\gmer.exe
[2010-01-01 22:45:03 | 00,000,714 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2010-01-01 15:18:50 | 00,015,880 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe
[2010-01-01 14:34:24 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010-01-01 14:34:23 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010-01-01 14:34:23 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010-01-01 14:34:22 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010-01-01 14:34:20 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010-01-01 14:29:43 | 00,000,885 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ad-Aware.lnk
[2010-01-01 14:02:45 | 00,047,564 | ---- | C] () -- C:\WINDOWS\System32\ntdetect.com
[2010-01-01 14:02:05 | 00,250,624 | ---- | C] () -- C:\WINDOWS\System32\ntldr
[2009-12-30 22:28:36 | 00,351,703 | ---- | C] () -- C:\WINDOWS\explorer.ex_
[2009-12-30 22:27:20 | 00,011,237 | ---- | C] () -- C:\WINDOWS\System32\userinit.ex_
[2009-12-30 22:23:45 | 00,261,513 | ---- | C] () -- C:\WINDOWS\System32\winlogon.ex_
[2009-12-30 19:32:39 | 00,007,171 | ---- | C] () -- C:\Documents and Settings\ \Pulpit\Avast _4_Professional_Edition_4 8 1169_[PL]_[key][Torrenty.org].torrent
[2009-12-30 15:06:29 | 00,037,047 | ---- | C] () -- C:\Documents and Settings\ \Ustawienia lokalne\Dane aplikacji\FASTWiz.log
[2009-12-30 14:35:01 | 00,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2009-12-29 15:01:32 | 00,000,616 | ---- | C] () -- C:\Documents and Settings\ \Pulpit\CC Get MAC Address.lnk
[2009-12-24 18:00:02 | 00,001,933 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk
[2009-12-20 09:54:25 | 00,439,882 | ---- | C] () -- C:\WINDOWS\System32\prfh0415.dat
[2009-12-20 09:54:25 | 00,068,814 | ---- | C] () -- C:\WINDOWS\System32\prfc0415.dat
[2009-12-14 21:05:12 | 08,912,896 | ---- | C] () -- C:\Documents and Settings\ \ntuser.dat
[2009-12-04 08:53:18 | 00,026,112 | ---- | C] () -- C:\Documents and Settings\ \Moje dokumenty\Zwrot towaru do 10 dni.doc
[2009-11-12 13:39:08 | 00,029,696 | ---- | C] () -- C:\WINDOWS\System32\pthread.dll
[2009-11-05 13:16:13 | 00,000,058 | ---- | C] () -- C:\Documents and Settings\ \Dane aplikacji\prio.ini
[2009-06-14 21:39:50 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Route.INI
[2009-06-14 20:14:04 | 00,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-05-31 21:16:42 | 00,076,407 | ---- | C] () -- C:\Documents and Settings\ \Dane aplikacji\Smiley.ico
[2009-03-18 20:27:19 | 00,484,352 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2009-02-22 13:46:26 | 00,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2009-01-23 20:09:49 | 00,000,027 | ---- | C] () -- C:\WINDOWS\SmartAudio.INI
[2009-01-23 20:09:35 | 00,000,027 | ---- | C] () -- C:\WINDOWS\SmAudio.INI
[2009-01-16 22:11:19 | 00,000,126 | ---- | C] () -- C:\Documents and Settings\ \Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2009-01-16 21:33:47 | 00,003,797 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
[2009-01-16 18:24:05 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-01-16 18:24:04 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009-01-16 18:24:02 | 00,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-01-16 18:24:02 | 00,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-01-16 18:24:01 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009-01-16 12:56:50 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-01-16 12:27:14 | 00,112,128 | ---- | C] () -- C:\Documents and Settings\ \Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-01-15 16:44:17 | 00,015,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\nod32drv.sys
[2009-01-15 16:43:59 | 00,000,155 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2008-05-03 04:16:00 | 01,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008-05-03 04:16:00 | 01,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008-05-03 04:16:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008-05-03 04:16:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008-05-03 04:16:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2000-09-12 12:58:26 | 00,160,256 | ---- | C] () -- C:\WINDOWS\System32\ShrLk21.dll
& lt; End of report & gt;