jak i gdzie sprawdzić ładowanie alternatora + pytanie o akku
Uprzejma prośba o sprawdzenie Loga z HJT
Dysk Twardy: nowy czy "z odzysku"_jak sprawdzić?
Prosze o pomoc w usunieciu win32 small EPJ
BARDZO PROSZE O SZYBKA POMOC, SPECJALISTY CO SIE ZNA ;]]]
głośniki blaupunkta JBL i GROUND ZERO..prosze o opinie
sprawdzie moje logi plx
moje logi - sprawdzcie plis
Sprawdzenie LOGa (wyskakujące reklamy)
Samsung D600E
chomiki
Proszę o sprawdzenie logów.Co warto usunąć bądź wyłączyć??
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:35:18, on 2010-02-09
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
D:\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Adobe Reader\Reader\Reader_sl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
D:\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
D:\Sandbox\SbieSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Pc\Pulpit\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HP Software Update] "D:\Hp\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Adobe Reader\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\Pc\USTAWI~1\Temp\herss.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Eset Trial Reset (.EsetTrialReset) - Unknown owner - C:\WINDOWS\reset.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - D:\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - D:\Sandbox\SbieSvc.exe
--
End of file - 6131 bytes
Jest tu infekcja, ale HijackThis widzi zaledwie jej część, więc podaj log z OTL
OTL logfile created on: 2010-02-09 14:07:19 - Run 1
OTL by OldTimer - Version 3.1.28.0 Folder = C:\Documents and Settings\Pc\Pulpit
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1 023,00 Mb Total Physical Memory | 557,00 Mb Available Physical Memory | 54,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 21,17 Gb Free Space | 54,21% Space Free | Partition Type: NTFS
Drive D: | 35,46 Gb Total Space | 34,62 Gb Free Space | 97,63% Space Free | Partition Type: NTFS
Drive E: | 149,04 Gb Total Space | 96,02 Gb Free Space | 64,43% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: KOMPUTER
Current User Name: Pc
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ==========
PRC - [2010-02-09 13:53:22 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pc\Pulpit\OTL.exe
PRC - [2010-01-06 19:48:49 | 000,908,248 | ---- | M] (Mozilla Corporation) -- D:\Mozilla Firefox\firefox.exe
PRC - [2009-10-20 22:05:35 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009-08-28 18:42:54 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2009-02-06 13:23:36 | 000,727,720 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2009-02-06 13:23:12 | 002,021,400 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2009-01-05 15:39:52 | 000,052,224 | ---- | M] (tzuk) -- D:\Sandbox\SbieSvc.exe
PRC - [2008-12-12 10:17:38 | 000,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
PRC - [2007-12-05 12:34:52 | 000,079,136 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe
PRC - [2007-12-05 12:30:28 | 002,295,072 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
PRC - [2007-11-26 14:54:12 | 001,554,728 | ---- | M] (Nero AG) -- D:\Nero\Nero 7\InCD\InCDsrv.exe
PRC - [2006-10-26 23:47:42 | 000,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
PRC - [2006-10-22 11:22:00 | 000,159,810 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2006-03-02 13:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004-05-12 14:18:56 | 000,241,664 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
PRC - [2004-02-12 12:38:56 | 000,049,152 | ---- | M] (Hewlett-Packard Company) -- D:\Hp\HP Software Update\hpwuSchd2.exe
========== Modules (SafeList) ==========
MOD - [2010-02-09 13:53:22 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pc\Pulpit\OTL.exe
MOD - [2010-02-09 13:49:10 | 000,085,504 | RHS- | M] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Temp\cvasds0.dll
MOD - [2006-03-02 13:00:00 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2009-10-20 22:05:35 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009-09-21 15:36:02 | 000,545,568 | ---- | M] (Apple Inc.) [On_Demand | Stopped] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2009-08-28 18:42:54 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009-03-20 14:56:57 | 000,357,182 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\reset.exe -- (.EsetTrialReset)
SRV - [2009-02-06 13:27:06 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009-02-06 13:23:36 | 000,727,720 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2009-01-05 15:39:52 | 000,052,224 | ---- | M] (tzuk) [Auto | Running] -- D:\Sandbox\SbieSvc.exe -- (SbieSvc)
SRV - [2008-12-12 10:17:38 | 000,238,888 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - [2007-12-05 12:34:52 | 000,079,136 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe -- (LightScribeService)
SRV - [2007-11-26 14:54:12 | 001,554,728 | ---- | M] (Nero AG) [Auto | Running] -- D:\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv)
SRV - [2007-09-17 09:36:18 | 000,800,040 | ---- | M] (Nero AG) [On_Demand | Stopped] -- D:\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService)
SRV - [2007-06-27 18:04:00 | 000,279,848 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService)
SRV - [2006-10-26 23:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2006-10-26 18:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006-10-26 12:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006-10-22 11:22:00 | 000,159,810 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
SRV - [2004-03-18 15:55:48 | 000,065,536 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ==========
DRV - [2009-11-14 18:14:00 | 000,017,408 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Documents and Settings\Pc\Ustawienia lokalne\Temp\vitality.sys -- (Vitality)
DRV - [2009-09-24 21:26:57 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-08-28 18:42:52 | 000,040,448 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaapl.sys -- (USBAAPL)
DRV - [2009-05-18 13:17:00 | 000,026,600 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2009-02-06 13:24:22 | 000,056,280 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2009-02-06 13:24:22 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009-02-06 13:24:18 | 000,130,952 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw)
DRV - [2009-02-06 13:23:18 | 000,106,208 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009-02-06 13:19:52 | 000,113,448 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009-01-05 15:39:52 | 000,103,936 | ---- | M] (tzuk) [Kernel | On_Demand | Running] -- D:\Sandbox\SbieDrv.sys -- (SbieDrv)
DRV - [2007-11-26 14:54:12 | 000,038,440 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm)
DRV - [2007-11-26 14:54:12 | 000,036,776 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDPass.sys -- (InCDPass)
DRV - [2007-11-26 14:54:02 | 000,118,952 | ---- | M] (Nero AG) [File_System | Disabled | Running] -- C:\WINDOWS\system32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2006-10-22 11:22:00 | 003,994,624 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2006-09-05 10:04:38 | 001,419,968 | R--- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\c6501.sys -- (cm102u32)
DRV - [2006-03-02 13:00:00 | 000,027,440 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2006-03-02 13:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [2004-08-04 00:08:22 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2004-08-04 00:07:56 | 000,059,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM)
DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
DRV - [2004-06-22 16:07:20 | 000,051,088 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hpzid412.sys -- (HPZid412)
DRV - [2004-06-22 16:07:20 | 000,021,744 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HPZius12.sys -- (HPZius12)
DRV - [2004-06-22 16:07:20 | 000,016,496 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HPZipr12.sys -- (HPZipr12)
DRV - [2003-09-06 14:37:22 | 000,062,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2003-09-06 13:27:06 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003-09-06 13:25:52 | 000,051,744 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003-09-06 13:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2001-08-17 21:56:16 | 000,007,552 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SONYPVU1.SYS -- (SONYPVU1) Sterownik filtru USB Sony (SONYPVU1)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.5.1.110
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.7
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: D:\Mozilla Firefox\components [2010-01-09 16:39:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: D:\Mozilla Firefox\plugins [2010-01-06 19:48:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2009-09-24 20:13:47 | 000,000,000 | ---D | M]
[2009-09-24 20:11:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Extensions
[2010-02-09 14:01:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\90skt9nx.default\extensions
[2009-12-27 17:59:37 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\90skt9nx.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2009-12-27 16:07:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\90skt9nx.default\extensions\toolbar@ask.com
O1 HOSTS File: ([2006-03-02 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] D:\Adobe Reader\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [HP Component Manager] C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [HP Software Update] D:\Hp\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Inc.)
O4 - HKCU..\Run: [cdoosoft] C:\Documents and Settings\Pc\Ustawienia lokalne\Temp\herss.exe ()
O4 - HKCU..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company)
O4 - Startup: C:\Documents and Settings\Pc\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.6.0_16)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-09-24 18:50:46 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010-02-09 14:07:02 | 000,000,051 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-02-09 14:07:02 | 000,000,051 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-02-09 14:07:03 | 000,000,051 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{4f9c7ea6-d935-11de-b46a-008048129b04}\Shell\AutoRun\command - "" = G:\sywyrl0q.exe -- File not found
O33 - MountPoints2\{4f9c7ea6-d935-11de-b46a-008048129b04}\Shell\open\Command - "" = G:\sywyrl0q.exe -- File not found
O33 - MountPoints2\{f2f2b15e-a93f-11de-b377-008048129b04}\Shell - "" = AutoRun
O33 - MountPoints2\{f2f2b15e-a93f-11de-b377-008048129b04}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found
O33 - MountPoints2\{f2f2b15f-a93f-11de-b377-008048129b04}\Shell\AutoRun\command - "" = H:\rg9g9bgq.exe -- File not found
O33 - MountPoints2\{f2f2b15f-a93f-11de-b377-008048129b04}\Shell\open\Command - "" = H:\rg9g9bgq.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010-02-09 13:52:53 | 000,549,376 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Pc\Pulpit\OTL.exe
[2010-02-09 00:28:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010-02-09 00:17:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\HijackThis
[2010-02-08 14:56:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\[cs-scripts.pl] Steam Hack v11 2010-01-15
[2010-02-08 14:55:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\[cs-scripts.pl] Super_Simple_Wall_v6.71
[2010-01-28 00:49:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Moje dokumenty\Dokumenty AFi
[2010-01-27 22:49:09 | 000,000,000 | ---D | C] -- C:\Program Files\PITy
[2010-01-24 18:15:24 | 000,000,000 | ---D | C] -- C:\Program Files\Directx
[2010-01-23 22:10:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Dane aplikacji\COWON
[2010-01-15 20:46:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\FSX Spolszczenie
[2010-01-14 20:03:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\Auto BHH
[2009-10-01 08:45:39 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2009-10-01 00:13:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
[2009-09-24 18:53:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-09-24 18:53:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-09-24 18:50:38 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[5 C:\WINDOWS\*.tmp files C:\WINDOWS\*.tmp ]
[1 C:\WINDOWS\System32\*.tmp files C:\WINDOWS\System32\*.tmp ]
========== Files - Modified Within 30 Days ==========
[2010-02-09 14:08:49 | 000,000,051 | RHS- | M] () -- C:\autorun.inf
[2010-02-09 14:01:00 | 000,000,228 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010-02-09 13:53:22 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pc\Pulpit\OTL.exe
[2010-02-09 13:49:10 | 000,088,566 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010-02-09 13:49:08 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-02-09 13:49:05 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-02-09 13:49:03 | 1073,008,640 | -HS- | M] () -- C:\hiberfil.sys
[2010-02-09 01:55:50 | 006,291,456 | -H-- | M] () -- C:\Documents and Settings\Pc\NTUSER.DAT
[2010-02-09 01:55:40 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Pc\ntuser.ini
[2010-02-09 00:31:53 | 000,000,640 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-02-09 00:31:53 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-02-09 00:31:53 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2010-02-09 00:14:38 | 000,091,648 | RHS- | M] () -- C:\ws.exe
[2010-02-09 00:14:32 | 000,000,454 | ---- | M] () -- C:\WINDOWS\System\C6501.ini
[2010-02-09 00:10:00 | 055,822,048 | ---- | M] () -- C:\Documents and Settings\Pc\Pulpit\saasas.mp3
[2010-02-08 12:53:47 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-02-07 16:54:27 | 000,001,437 | ---- | M] () -- C:\WINDOWS\VPlayer.INI
[2010-02-07 16:54:27 | 000,000,156 | ---- | M] () -- C:\WINDOWS\VplayerINI.vpl
[2010-02-07 16:53:46 | 000,008,704 | ---- | M] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-02-03 11:19:45 | 000,094,208 | RHS- | M] () -- C:\9d6tpg.exe
[2010-01-31 21:48:08 | 000,090,624 | RHS- | M] () -- C:\1hqup.exe
[2010-01-29 16:28:02 | 000,097,280 | RHS- | M] () -- C:\mvmdh.exe
[2010-01-28 18:51:52 | 000,100,864 | RHS- | M] () -- C:\y.exe
[2010-01-27 14:36:44 | 000,100,864 | RHS- | M] () -- C:\0fpdq2dw.exe
[2010-01-26 21:09:44 | 000,047,274 | ---- | M] () -- C:\Documents and Settings\Pc\Moje dokumenty\Motto.docx
[2010-01-26 20:09:12 | 000,100,864 | RHS- | M] () -- C:\df.exe
[2010-01-25 15:33:50 | 000,097,792 | RHS- | M] () -- C:\c2e.exe
[2010-01-24 17:41:12 | 000,000,329 | ---- | M] () -- C:\Documents and Settings\Pc\Pulpit\jetAudio (2).lnk
[2010-01-22 15:33:04 | 000,096,768 | RHS- | M] () -- C:\qkm.exe
[2010-01-20 18:46:51 | 000,118,272 | RHS- | M] () -- C:\9fo3ar0j.exe
[2010-01-18 18:34:00 | 000,123,392 | RHS- | M] () -- C:\sywyrl0q.exe
[2010-01-17 19:10:29 | 000,115,712 | RHS- | M] () -- C:\9xf8.exe
[2010-01-17 07:07:23 | 000,118,784 | RHS- | M] () -- C:\mh.exe
[2010-01-17 00:42:01 | 000,824,366 | -H-- | M] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-01-15 18:42:17 | 000,120,320 | RHS- | M] () -- C:\kmj.exe
[2010-01-13 10:33:31 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010-01-12 17:00:22 | 000,121,856 | RHS- | M] () -- C:\olu392qj.exe
[2010-01-11 18:25:21 | 000,118,784 | RHS- | M] () -- C:\8xcrbho6.exe
[5 C:\WINDOWS\*.tmp files C:\WINDOWS\*.tmp ]
[1 C:\WINDOWS\System32\*.tmp files C:\WINDOWS\System32\*.tmp ]
========== Files Created - No Company Name ==========
[2010-02-08 12:55:16 | 000,091,648 | RHS- | C] () -- C:\ws.exe
[2010-02-03 11:20:13 | 000,094,208 | RHS- | C] () -- C:\9d6tpg.exe
[2010-01-30 19:38:17 | 000,090,624 | RHS- | C] () -- C:\1hqup.exe
[2010-01-29 16:28:29 | 000,097,280 | RHS- | C] () -- C:\mvmdh.exe
[2010-01-28 19:20:32 | 055,822,048 | ---- | C] () -- C:\Documents and Settings\Pc\Pulpit\saasas.mp3
[2010-01-28 18:52:32 | 000,100,864 | RHS- | C] () -- C:\y.exe
[2010-01-27 14:37:11 | 000,100,864 | RHS- | C] () -- C:\0fpdq2dw.exe
[2010-01-26 21:09:44 | 000,047,274 | ---- | C] () -- C:\Documents and Settings\Pc\Moje dokumenty\Motto.docx
[2010-01-26 20:09:50 | 000,100,864 | RHS- | C] () -- C:\df.exe
[2010-01-24 17:41:12 | 000,000,329 | ---- | C] () -- C:\Documents and Settings\Pc\Pulpit\jetAudio (2).lnk
[2010-01-23 16:47:47 | 000,097,792 | RHS- | C] () -- C:\c2e.exe
[2010-01-21 11:06:22 | 000,096,768 | RHS- | C] () -- C:\qkm.exe
[2010-01-19 20:08:31 | 000,118,272 | RHS- | C] () -- C:\9fo3ar0j.exe
[2010-01-19 15:34:06 | 1079,449,675 | ---- | C] () -- C:\Documents and Settings\Pc\Pulpit\Tomb Raider Anniversary.cso
[2010-01-18 18:34:28 | 000,123,392 | RHS- | C] () -- C:\sywyrl0q.exe
[2010-01-17 19:10:58 | 000,115,712 | RHS- | C] () -- C:\9xf8.exe
[2010-01-17 07:07:54 | 000,118,784 | RHS- | C] () -- C:\mh.exe
[2010-01-12 18:11:54 | 000,120,320 | RHS- | C] () -- C:\kmj.exe
[2010-01-12 17:00:50 | 000,121,856 | RHS- | C] () -- C:\olu392qj.exe
[2009-12-28 13:24:39 | 000,001,437 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2009-12-09 22:56:06 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-12-04 23:05:24 | 000,273,192 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2009-11-22 18:24:23 | 000,000,062 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009-11-22 18:21:04 | 000,000,763 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2009-10-31 10:16:16 | 000,008,704 | ---- | C] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-10-26 16:57:18 | 000,847,360 | ---- | C] () -- C:\WINDOWS\System32\JS32.dll
[2009-10-12 13:24:40 | 000,001,872 | ---- | C] () -- C:\WINDOWS\Sandboxie.ini
[2009-10-04 16:58:31 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2009-10-04 16:58:31 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2009-10-04 16:58:31 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2009-09-27 17:33:33 | 001,388,544 | ---- | C] () -- C:\WINDOWS\Kopia (2) pingreducer32-steam.dll
[2009-09-27 17:33:30 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\Kopia (2) pingreducer32-steam.dll
[2009-09-27 17:33:19 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer32-steam.dll
[2009-09-27 17:33:16 | 001,388,544 | ---- | C] () -- C:\WINDOWS\pingreducer32-steam.dll
[2009-09-27 17:32:45 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer32.dll
[2009-09-27 17:32:16 | 001,388,544 | ---- | C] () -- C:\WINDOWS\pingreducer32.dll
[2009-09-27 17:31:39 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer.dll
[2009-09-27 17:28:07 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer-steam.dll
[2009-09-25 07:33:33 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2009-09-24 21:58:48 | 000,002,636 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
[2009-09-24 21:26:57 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-09-24 21:09:59 | 000,053,248 | R--- | C] () -- C:\WINDOWS\System32\c6501rm.dll
[2009-09-24 21:05:52 | 000,004,588 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009-09-24 21:05:48 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2009-09-24 20:58:38 | 000,000,256 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2006-10-22 11:22:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006-10-22 11:22:00 | 001,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006-10-22 11:22:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006-10-22 11:22:00 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006-10-22 11:22:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006-10-22 11:22:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-10-22 11:22:00 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2006-03-02 13:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
< End of report >
Uruchom OTL w oknie Custom Scans/Fixes wklej:
:OTL
MOD - [2010-02-09 13:49:10 | 000,085,504 | RHS- | M] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Temp\cvasds0.dll
DRV - [2009-11-14 18:14:00 | 000,017,408 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Documents and Settings\Pc\Ustawienia lokalne\Temp\vitality.sys -- (Vitality)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKCU..\Run: [cdoosoft] C:\Documents and Settings\Pc\Ustawienia lokalne\Temp\herss.exe ()
O32 - AutoRun File - [2010-02-09 14:07:02 | 000,000,051 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-02-09 14:07:02 | 000,000,051 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-02-09 14:07:03 | 000,000,051 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{4f9c7ea6-d935-11de-b46a-008048129b04}\Shell\AutoRun\command - "" = G:\sywyrl0q.exe -- File not found
O33 - MountPoints2\{4f9c7ea6-d935-11de-b46a-008048129b04}\Shell\open\Command - "" = G:\sywyrl0q.exe -- File not found
O33 - MountPoints2\{f2f2b15e-a93f-11de-b377-008048129b04}\Shell - "" = AutoRun
O33 - MountPoints2\{f2f2b15f-a93f-11de-b377-008048129b04}\Shell\AutoRun\command - "" = H:\rg9g9bgq.exe -- File not found
O33 - MountPoints2\{f2f2b15f-a93f-11de-b377-008048129b04}\Shell\open\Command - "" = H:\rg9g9bgq.exe -- File not found
:Files
C:\Program Files\Ask.com
C:\Documents and Settings\Pc\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
C:\ws.exe
D:\ws.exe
E:\ws.exe
C:\9d6tpg.exe
D:\9d6tpg.exe
E:\9d6tpg.exe
C:\1hqup.exe
D:\1hqup.exe
E:\1hqup.exe
C:\mvmdh.exe
D:\mvmdh.exe
E:\mvmdh.exe
C:\y.exe
D:\y.exe
E:\y.exe
C:\0fpdq2dw.exe
D:\0fpdq2dw.exe
E:\0fpdq2dw.exe
C:\df.exe
D:\df.exe
E:\df.exe
C:\c2e.exe
D:\c2e.exe
E:\c2e.exe
C:\qkm.exe
D:\qkm.exe
E:\qkm.exe
C:\9fo3ar0j.exe
D:\9fo3ar0j.exe
E:\9fo3ar0j.exe
C:\sywyrl0q.exe
D:\sywyrl0q.exe
E:\sywyrl0q.exe
C:\9xf8.exe
D:\9xf8.exe
E:\9xf8.exe
C:\mh.exe
D:\mh.exe
E:\mh.exe
C:\kmj.exe
D:\kmj.exe
E:\kmj.exe
C:\olu392qj.exe
D:\olu392qj.exe
E:\olu392qj.exe
C:\8xcrbho6.exe
D:\8xcrbho6.exe
E:\8xcrbho6.exe
:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"GrooveMonitor"=-
"HP Software Update"=-
"nwiz"=-
"QuickTime Task"=-
:Commands
[emptytemp]
Klikasz Run Fix. Dajesz log z usuwania + nowy log z OTL
Wylecz pamięci przenośne Flash Disinfector lub sformatuj
Log kasacji:
All processes killed
========== OTL ==========
Service Vitality stopped successfully!
Service Vitality deleted successfully!
C:\Documents and Settings\Pc\Ustawienia lokalne\Temp\vitality.sys moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
C:\Program Files\Ask.com\GenericAskToolbar.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cdoosoft deleted successfully.
C:\Documents and Settings\Pc\Ustawienia lokalne\Temp\herss.exe moved successfully.
C:\autorun.inf moved successfully.
D:\autorun.inf moved successfully.
E:\autorun.inf moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4f9c7ea6-d935-11de-b46a-008048129b04}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4f9c7ea6-d935-11de-b46a-008048129b04}\ not found.
File G:\sywyrl0q.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4f9c7ea6-d935-11de-b46a-008048129b04}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4f9c7ea6-d935-11de-b46a-008048129b04}\ not found.
File G:\sywyrl0q.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f2f2b15e-a93f-11de-b377-008048129b04}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2f2b15e-a93f-11de-b377-008048129b04}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f2f2b15f-a93f-11de-b377-008048129b04}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2f2b15f-a93f-11de-b377-008048129b04}\ not found.
File H:\rg9g9bgq.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f2f2b15f-a93f-11de-b377-008048129b04}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2f2b15f-a93f-11de-b377-008048129b04}\ not found.
File H:\rg9g9bgq.exe not found.
========== FILES ==========
C:\Program Files\Ask.com folder moved successfully.
C:\Documents and Settings\Pc\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk moved successfully.
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job moved successfully.
C:\ws.exe moved successfully.
D:\ws.exe moved successfully.
E:\ws.exe moved successfully.
C:\9d6tpg.exe moved successfully.
D:\9d6tpg.exe moved successfully.
E:\9d6tpg.exe moved successfully.
C:\1hqup.exe moved successfully.
D:\1hqup.exe moved successfully.
E:\1hqup.exe moved successfully.
C:\mvmdh.exe moved successfully.
D:\mvmdh.exe moved successfully.
E:\mvmdh.exe moved successfully.
C:\y.exe moved successfully.
D:\y.exe moved successfully.
E:\y.exe moved successfully.
C:\0fpdq2dw.exe moved successfully.
D:\0fpdq2dw.exe moved successfully.
E:\0fpdq2dw.exe moved successfully.
C:\df.exe moved successfully.
D:\df.exe moved successfully.
E:\df.exe moved successfully.
C:\c2e.exe moved successfully.
D:\c2e.exe moved successfully.
E:\c2e.exe moved successfully.
C:\qkm.exe moved successfully.
D:\qkm.exe moved successfully.
E:\qkm.exe moved successfully.
C:\9fo3ar0j.exe moved successfully.
D:\9fo3ar0j.exe moved successfully.
E:\9fo3ar0j.exe moved successfully.
C:\sywyrl0q.exe moved successfully.
D:\sywyrl0q.exe moved successfully.
E:\sywyrl0q.exe moved successfully.
C:\9xf8.exe moved successfully.
D:\9xf8.exe moved successfully.
E:\9xf8.exe moved successfully.
C:\mh.exe moved successfully.
D:\mh.exe moved successfully.
E:\mh.exe moved successfully.
C:\kmj.exe moved successfully.
D:\kmj.exe moved successfully.
E:\kmj.exe moved successfully.
C:\olu392qj.exe moved successfully.
D:\olu392qj.exe moved successfully.
E:\olu392qj.exe moved successfully.
C:\8xcrbho6.exe moved successfully.
D:\8xcrbho6.exe moved successfully.
E:\8xcrbho6.exe moved successfully.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"SuperHidden"|dword:00000001 /E : value set successfully!
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"Hidden"|dword:00000001 /E : value set successfully!
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"ShowSuperHidden"|dword:00000001 /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Advanced\Folder\Hidden\SHOWALL\\"CheckedValue"|dword:00000001 /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\\@|"" /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\HP Software Update deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\nwiz deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Pc
->Temp folder emptied: 1778668050 bytes
->Temporary Internet Files folder emptied: 9056036 bytes
->Java cache emptied: 52500697 bytes
->FireFox cache emptied: 102612679 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2230789 bytes
%systemroot%\System32 .tmp files removed: 2596 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 44722645 bytes
RecycleBin emptied: 7738337127 bytes
Total Files Cleaned = 9 278,00 mb
OTL by OldTimer - Version 3.1.28.0 log created on 02092010_190728
Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\Pc\Ustawienia lokalne\Temp\cvasds0.dll not found!
Registry entries deleted on Reboot...
Nowy scan OTL po kasacji:
OTL logfile created on: 2010-02-09 19:14:38 - Run 2
OTL by OldTimer - Version 3.1.28.0 Folder = C:\Documents and Settings\Pc\Pulpit
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1 023,00 Mb Total Physical Memory | 614,00 Mb Available Physical Memory | 60,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 26,44 Gb Free Space | 67,70% Space Free | Partition Type: NTFS
Drive D: | 35,46 Gb Total Space | 34,62 Gb Free Space | 97,63% Space Free | Partition Type: NTFS
Drive E: | 149,04 Gb Total Space | 99,81 Gb Free Space | 66,97% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: KOMPUTER
Current User Name: Pc
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ==========
PRC - [2010-02-09 13:53:22 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pc\Pulpit\OTL.exe
PRC - [2010-01-06 19:48:49 | 000,908,248 | ---- | M] (Mozilla Corporation) -- D:\Mozilla Firefox\firefox.exe
PRC - [2009-10-20 22:05:35 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009-08-28 18:42:54 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2009-02-06 13:23:36 | 000,727,720 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2009-02-06 13:23:12 | 002,021,400 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2009-01-05 15:39:52 | 000,052,224 | ---- | M] (tzuk) -- D:\Sandbox\SbieSvc.exe
PRC - [2008-12-12 10:17:38 | 000,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
PRC - [2007-12-05 12:34:52 | 000,079,136 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe
PRC - [2007-12-05 12:30:28 | 002,295,072 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
PRC - [2007-11-26 14:54:12 | 001,554,728 | ---- | M] (Nero AG) -- D:\Nero\Nero 7\InCD\InCDsrv.exe
PRC - [2006-10-22 11:22:00 | 000,159,810 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2006-03-02 13:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004-05-12 14:18:56 | 000,241,664 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
PRC - [2004-05-12 14:18:54 | 000,135,168 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
========== Modules (SafeList) ==========
MOD - [2010-02-09 13:53:22 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pc\Pulpit\OTL.exe
MOD - [2006-03-02 13:00:00 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2009-10-20 22:05:35 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009-09-21 15:36:02 | 000,545,568 | ---- | M] (Apple Inc.) [On_Demand | Stopped] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2009-08-28 18:42:54 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009-03-20 14:56:57 | 000,357,182 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\reset.exe -- (.EsetTrialReset)
SRV - [2009-02-06 13:27:06 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009-02-06 13:23:36 | 000,727,720 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2009-01-05 15:39:52 | 000,052,224 | ---- | M] (tzuk) [Auto | Running] -- D:\Sandbox\SbieSvc.exe -- (SbieSvc)
SRV - [2008-12-12 10:17:38 | 000,238,888 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - [2007-12-05 12:34:52 | 000,079,136 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe -- (LightScribeService)
SRV - [2007-11-26 14:54:12 | 001,554,728 | ---- | M] (Nero AG) [Auto | Running] -- D:\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv)
SRV - [2007-09-17 09:36:18 | 000,800,040 | ---- | M] (Nero AG) [On_Demand | Stopped] -- D:\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService)
SRV - [2007-06-27 18:04:00 | 000,279,848 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService)
SRV - [2006-10-26 23:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2006-10-26 18:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006-10-26 12:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006-10-22 11:22:00 | 000,159,810 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
SRV - [2004-03-18 15:55:48 | 000,065,536 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ==========
DRV - [2009-09-24 21:26:57 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-08-28 18:42:52 | 000,040,448 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaapl.sys -- (USBAAPL)
DRV - [2009-05-18 13:17:00 | 000,026,600 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2009-02-06 13:24:22 | 000,056,280 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2009-02-06 13:24:22 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009-02-06 13:24:18 | 000,130,952 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw)
DRV - [2009-02-06 13:23:18 | 000,106,208 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009-02-06 13:19:52 | 000,113,448 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009-01-05 15:39:52 | 000,103,936 | ---- | M] (tzuk) [Kernel | On_Demand | Running] -- D:\Sandbox\SbieDrv.sys -- (SbieDrv)
DRV - [2007-11-26 14:54:12 | 000,038,440 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm)
DRV - [2007-11-26 14:54:12 | 000,036,776 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDPass.sys -- (InCDPass)
DRV - [2007-11-26 14:54:02 | 000,118,952 | ---- | M] (Nero AG) [File_System | Disabled | Running] -- C:\WINDOWS\system32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2006-10-22 11:22:00 | 003,994,624 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2006-09-05 10:04:38 | 001,419,968 | R--- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\c6501.sys -- (cm102u32)
DRV - [2006-03-02 13:00:00 | 000,027,440 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2006-03-02 13:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [2004-08-04 00:08:22 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2004-08-04 00:07:56 | 000,059,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM)
DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
DRV - [2004-06-22 16:07:20 | 000,051,088 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hpzid412.sys -- (HPZid412)
DRV - [2004-06-22 16:07:20 | 000,021,744 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HPZius12.sys -- (HPZius12)
DRV - [2004-06-22 16:07:20 | 000,016,496 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HPZipr12.sys -- (HPZipr12)
DRV - [2003-09-06 14:37:22 | 000,062,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2003-09-06 13:27:06 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003-09-06 13:25:52 | 000,051,744 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003-09-06 13:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2001-08-17 21:56:16 | 000,007,552 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SONYPVU1.SYS -- (SONYPVU1) Sterownik filtru USB Sony (SONYPVU1)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.5.1.110
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.7
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: D:\Mozilla Firefox\components [2010-01-09 16:39:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: D:\Mozilla Firefox\plugins [2010-01-06 19:48:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2009-09-24 20:13:47 | 000,000,000 | ---D | M]
[2009-09-24 20:11:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Extensions
[2010-02-09 14:01:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\90skt9nx.default\extensions
[2009-12-27 17:59:37 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\90skt9nx.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2009-12-27 16:07:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\90skt9nx.default\extensions\toolbar@ask.com
O1 HOSTS File: ([2006-03-02 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [HP Component Manager] C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKCU..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/updat...indows-i586.cab (Java Plug-in 1.6.0_16)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-09-24 18:50:46 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010-02-09 19:07:28 | 000,000,000 | ---D | C] -- C:\_OTL
[2010-02-09 13:52:53 | 000,549,376 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Pc\Pulpit\OTL.exe
[2010-02-09 00:28:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010-02-09 00:17:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\HijackThis
[2010-02-08 14:56:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\[cs-scripts.pl] Steam Hack v11 2010-01-15
[2010-02-08 14:55:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\[cs-scripts.pl] Super_Simple_Wall_v6.71
[2010-01-28 00:49:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Moje dokumenty\Dokumenty AFi
[2010-01-27 22:49:09 | 000,000,000 | ---D | C] -- C:\Program Files\PITy
[2010-01-24 18:15:24 | 000,000,000 | ---D | C] -- C:\Program Files\Directx
[2010-01-23 22:10:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Dane aplikacji\COWON
[2010-01-15 20:46:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\FSX Spolszczenie
[2010-01-14 20:03:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pc\Pulpit\Auto BHH
[2009-10-01 08:45:39 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2009-10-01 00:13:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
[2009-09-24 18:53:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-09-24 18:53:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-09-24 18:50:38 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
========== Files - Modified Within 30 Days ==========
[2010-02-09 19:12:15 | 000,088,566 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010-02-09 19:11:38 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-02-09 19:11:36 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-02-09 19:11:34 | 1073,008,640 | -HS- | M] () -- C:\hiberfil.sys
[2010-02-09 19:08:42 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Pc\ntuser.ini
[2010-02-09 15:12:53 | 000,000,763 | ---- | M] () -- C:\WINDOWS\WINCMD.INI
[2010-02-09 15:12:06 | 000,000,062 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2010-02-09 13:53:22 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pc\Pulpit\OTL.exe
[2010-02-09 01:55:50 | 006,291,456 | -H-- | M] () -- C:\Documents and Settings\Pc\NTUSER.DAT
[2010-02-09 00:31:53 | 000,000,640 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-02-09 00:31:53 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-02-09 00:31:53 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2010-02-09 00:14:32 | 000,000,454 | ---- | M] () -- C:\WINDOWS\System\C6501.ini
[2010-02-09 00:10:00 | 055,822,048 | ---- | M] () -- C:\Documents and Settings\Pc\Pulpit\saasas.mp3
[2010-02-08 12:53:47 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-02-07 16:54:27 | 000,001,437 | ---- | M] () -- C:\WINDOWS\VPlayer.INI
[2010-02-07 16:54:27 | 000,000,156 | ---- | M] () -- C:\WINDOWS\VplayerINI.vpl
[2010-02-07 16:53:46 | 000,008,704 | ---- | M] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-01-26 21:09:44 | 000,047,274 | ---- | M] () -- C:\Documents and Settings\Pc\Moje dokumenty\Motto.docx
[2010-01-24 17:41:12 | 000,000,329 | ---- | M] () -- C:\Documents and Settings\Pc\Pulpit\jetAudio (2).lnk
[2010-01-17 00:42:01 | 000,824,366 | -H-- | M] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-01-13 10:33:31 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
========== Files Created - No Company Name ==========
[2010-01-28 19:20:32 | 055,822,048 | ---- | C] () -- C:\Documents and Settings\Pc\Pulpit\saasas.mp3
[2010-01-26 21:09:44 | 000,047,274 | ---- | C] () -- C:\Documents and Settings\Pc\Moje dokumenty\Motto.docx
[2010-01-24 17:41:12 | 000,000,329 | ---- | C] () -- C:\Documents and Settings\Pc\Pulpit\jetAudio (2).lnk
[2010-01-19 15:34:06 | 1079,449,675 | ---- | C] () -- C:\Documents and Settings\Pc\Pulpit\Tomb Raider Anniversary.cso
[2009-12-28 13:24:39 | 000,001,437 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2009-12-09 22:56:06 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-12-04 23:05:24 | 000,273,192 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2009-11-22 18:24:23 | 000,000,062 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009-11-22 18:21:04 | 000,000,763 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2009-10-31 10:16:16 | 000,008,704 | ---- | C] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-10-26 16:57:18 | 000,847,360 | ---- | C] () -- C:\WINDOWS\System32\JS32.dll
[2009-10-12 13:24:40 | 000,001,872 | ---- | C] () -- C:\WINDOWS\Sandboxie.ini
[2009-10-04 16:58:31 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2009-10-04 16:58:31 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2009-10-04 16:58:31 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2009-09-27 17:33:33 | 001,388,544 | ---- | C] () -- C:\WINDOWS\Kopia (2) pingreducer32-steam.dll
[2009-09-27 17:33:30 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\Kopia (2) pingreducer32-steam.dll
[2009-09-27 17:33:19 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer32-steam.dll
[2009-09-27 17:33:16 | 001,388,544 | ---- | C] () -- C:\WINDOWS\pingreducer32-steam.dll
[2009-09-27 17:32:45 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer32.dll
[2009-09-27 17:32:16 | 001,388,544 | ---- | C] () -- C:\WINDOWS\pingreducer32.dll
[2009-09-27 17:31:39 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer.dll
[2009-09-27 17:28:07 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer-steam.dll
[2009-09-25 07:33:33 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2009-09-24 21:58:48 | 000,002,636 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
[2009-09-24 21:26:57 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-09-24 21:09:59 | 000,053,248 | R--- | C] () -- C:\WINDOWS\System32\c6501rm.dll
[2009-09-24 21:05:52 | 000,004,588 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009-09-24 21:05:48 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2009-09-24 20:58:38 | 000,000,256 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2006-10-22 11:22:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006-10-22 11:22:00 | 001,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006-10-22 11:22:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006-10-22 11:22:00 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006-10-22 11:22:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006-10-22 11:22:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-10-22 11:22:00 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2006-03-02 13:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
< End of report >
Ok, więcej nic nie widzę.
W OTL kliknij CleanUp
Przeczyść dysk oraz rejestr CCleaner
Wyłącz i włącz przywracanie systemu na wszystkich dyskach Instrukcja
Wykonaj pełne skanowanie Malwarebytes' Anti-Malware - jeśli coś znajdzie usuń i daj raport
