Niemiec Opublikowano 27 Lipca 2010 Zgłoś Opublikowano 27 Lipca 2010 (edytowane) Komputer restartuje niezbyt czesto, dzisiaj mialo to miejsce i po restarcie tak na szybko zauwazylem, ze pasek boczny nie chce wystartowac, norton sie wysypal a w IE nie laczy sie z siecia i komp jakby spowolnil wiec mniemam, ze cos jest nie tak. Prosze o pomoc 8O OTL OTL logfile created on: 2010-07-27 23:33:21 - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Kamil\Desktop\vir Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18928) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 77,00% Memory free 7,00 Gb Paging File | 6,00 Gb Available in Paging File | 90,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 48,86 Gb Total Space | 28,88 Gb Free Space | 59,11% Space Free | Partition Type: NTFS Drive D: | 92,01 Gb Total Space | 80,34 Gb Free Space | 87,31% Space Free | Partition Type: NTFS Drive E: | 92,02 Gb Total Space | 65,64 Gb Free Space | 71,33% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KAMIL-PC Current User Name: Kamil Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-07-27 23:30:03 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe PRC - [2010-06-30 14:52:22 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2009-06-04 01:55:16 | 000,025,600 | ---- | M] (Creative Technology Ltd) -- C:\Windows\System32\Ctxfihlp.exe PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-02-23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe PRC - [2008-09-10 23:15:26 | 000,131,752 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 7600 Series\ezprint.exe PRC - [2008-09-10 23:15:24 | 000,676,520 | ---- | M] () -- C:\Program Files\Lexmark 7600 Series\lxdwmon.exe PRC - [2008-05-17 04:33:10 | 000,594,600 | ---- | M] ( ) -- C:\Windows\System32\lxdwcoms.exe ========== Modules (SafeList) ========== MOD - [2010-07-27 23:30:03 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe MOD - [2009-04-11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll MOD - [2008-01-19 09:33:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx ========== Win32 Services (SafeList) ========== SRV - File not found [Auto | Stopped] -- C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe -- (N360) SRV - [2010-02-26 20:23:23 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2010-02-26 19:24:59 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2010-01-26 13:41:08 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2009-02-23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2008-05-17 04:33:10 | 000,594,600 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\System32\lxdwcoms.exe -- (lxdw_device) SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stop_Pending] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2008-01-19 09:33:32 | 000,060,928 | --S- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\amstreamv.exe -- (SCardSvrupnphost) SRV - [2004-12-13 04:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | System | Stopped] -- C:\Windows\System32\Drivers\N360\0308000.029\SYMTDI.SYS -- (SYMTDI) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\N360\0308000.029\SYMNDISV.SYS -- (SYMNDISV) DRV - File not found [Kernel | System | Stopped] -- C:\Windows\System32\DRIVERS\SymIMv.sys -- (SymIM) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\N360\0308000.029\SYMFW.SYS -- (SYMFW) DRV - File not found [File_System | Boot | Stopped] -- C:\Windows\System32\drivers\N360\0308000.029\SYMEFA.SYS -- (SymEFA) DRV - File not found [Kernel | System | Stopped] -- C:\Windows\System32\drivers\N360\0308000.029\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV - File not found [File_System | On_Demand | Stopped] -- C:\Windows\System32\Drivers\N360\0308000.029\SRTSP.SYS -- (SRTSP) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100726.041\NAVEX15.SYS -- (NAVEX15) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100726.041\NAVENG.SYS -- (NAVENG) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | System | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20100723.001\IDSvix86.sys -- (IDSVix86) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - File not found [Kernel | System | Stopped] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - File not found [Kernel | System | Stopped] -- C:\Windows\System32\Drivers\N360\0308000.029\ccHPx86.sys -- (ccHP) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\btwusb.sys -- (BTWUSB) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) DRV - File not found [Kernel | System | Stopped] -- C:\Windows\System32\Drivers\N360\0308000.029\BHDrvx86.sys -- (BHDrvx86) DRV - [2010-04-03 22:55:32 | 011,573,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2010-03-06 21:20:57 | 000,124,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2010-01-21 15:53:16 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2010-01-20 17:53:06 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv) DRV - [2010-01-20 17:53:04 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009-12-30 12:30:48 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2009-12-30 12:30:48 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2009-06-04 03:48:12 | 001,177,624 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ha20x2k.sys -- (ha20x2k) DRV - [2009-06-04 03:48:00 | 000,095,768 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emupia2k.sys -- (emupia) DRV - [2009-06-04 03:47:50 | 000,158,744 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2009-06-04 03:47:42 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctprxy2k.sys -- (ctprxy2k) DRV - [2009-06-04 03:47:34 | 000,130,072 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctoss2k.sys -- (ossrv) DRV - [2009-06-04 03:47:24 | 000,347,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctdvda2k.sys -- (ctdvda2k) DRV - [2009-06-04 03:47:14 | 000,526,232 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV - [2009-06-04 03:47:06 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctac32k.sys -- (ctac32k) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTEXFIFX.sys -- (CTEXFIFX) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTHWIUT.sys -- (CTHWIUT) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CT20XUT.SYS -- (CT20XUT.SYS) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CT20XUT.sys -- (CT20XUT) DRV - [2008-12-25 08:56:42 | 000,433,792 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wfeaglxt.sys -- (WFLR6654) WinFast TV2000 XP Expert (FM1216MK3) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-01-19 08:14:59 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV - [2007-03-24 12:20:24 | 000,046,208 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\jraid.sys -- (JRAID) DRV - [2007-03-15 16:41:14 | 000,048,128 | ---- | M] (Attansic Technology corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atl01v32.sys -- (AtcL001) DRV - [2006-11-02 14:00:28 | 000,017,664 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88tune_IBV32.sys -- (CXTUNE) DRV - [2006-11-02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2006-11-02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2006-11-02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2006-11-02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2006-11-02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2006-11-02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2006-11-02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2006-11-02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2006-11-02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2006-11-02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2006-11-02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006-11-02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006-11-02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2006-11-02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2006-11-02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006-11-02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2006-11-02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2006-11-02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2) DRV - [2006-11-02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2006-11-02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2006-11-02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006-11-02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006-11-02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2006-11-02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006-11-02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2006-11-02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006-11-02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006-11-02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006-11-02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2006-11-02 11:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2006-11-02 11:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2006-11-02 11:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2006-11-02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006-11-02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006-11-02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006-11-02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006-11-02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006-11-02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006-11-02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006-11-02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel® DRV - [2006-10-18 23:44:48 | 000,007,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) DRV - [2006-02-07 20:52:58 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\JGOGO.sys -- (JGOGO) DRV - [2005-08-11 08:13:00 | 000,163,584 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88vid.sys -- (CX23880) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.4\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-07-10 00:13:30 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.4\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010-02-26 20:55:01 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions [2010-02-26 20:55:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Lexmark Printable Web) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll () O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\System32\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark 7600 Series\ezprint.exe (Lexmark International Inc.) O4 - HKLM..\Run: [lxdwmon.exe] C:\Program Files\Lexmark 7600 Series\lxdwmon.exe () O4 - HKCU..\Run: [{CE701BBE-CCDF-7A2C-7B9D-058FE208426D}] C:\Users\Kamil\AppData\Roaming\Ilpu\qufa.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 88.156.63.9 82.139.8.7 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010-07-27 23:27:31 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\vir [2010-07-27 23:24:24 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\nis [2010-07-27 22:44:14 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\Symantec [2010-07-27 22:14:00 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Need for Speed World [2010-07-27 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\Electronic_Arts_Inc [2010-07-26 20:19:58 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Ilpu [2010-07-26 20:19:58 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Axgoid [2010-07-26 19:41:05 | 000,000,000 | ---D | C] -- C:\logs [2010-07-25 13:55:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2010-07-23 22:22:48 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\CoreTemp32 [2010-07-10 16:55:39 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\fotki rozne [2010-07-09 19:32:00 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\ACD Systems [2010-07-09 19:31:35 | 000,000,000 | ---D | C] -- C:\ProgramData\ACD Systems [2010-07-09 19:31:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ACD Systems [2010-07-09 19:31:32 | 000,000,000 | ---D | C] -- C:\Program Files\ACD Systems [2010-07-09 18:57:31 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Softplicity [2010-07-09 18:57:28 | 000,000,000 | ---D | C] -- C:\Program Files\TotalCADConverter [2010-07-09 16:25:06 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2010-07-09 16:25:00 | 000,000,000 | ---D | C] -- C:\Program Files\Mystik Media [2010-07-09 16:16:26 | 000,000,000 | ---D | C] -- C:\Program Files\Soft Gold [2010-07-08 22:01:04 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2010-07-01 18:59:34 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\gtk-2.0 [2010-07-01 18:28:33 | 000,000,000 | ---D | C] -- C:\Users\Kamil\.thumbnails [2010-07-01 16:42:43 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Documents\gegl-0.0 [2010-07-01 16:42:43 | 000,000,000 | ---D | C] -- C:\Users\Kamil\.gimp-2.6 [2010-07-01 16:42:08 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0 [2010-07-01 16:39:50 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\mapka [2010-06-30 22:06:43 | 000,000,000 | ---D | C] -- C:\Program Files\Combined Community Codec Pack [2010-03-20 17:20:25 | 000,438,272 | ---- | C] ( ) -- C:\Windows\System32\LXDWhcp.dll [2010-03-20 17:20:25 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxdwinpa.dll [2010-03-20 17:20:24 | 001,069,056 | ---- | C] ( ) -- C:\Windows\System32\lxdwserv.dll [2010-03-20 17:20:24 | 000,851,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwusb1.dll [2010-03-20 17:20:24 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwiesc.dll [2010-03-20 17:20:23 | 000,651,264 | ---- | C] ( ) -- C:\Windows\System32\lxdwpmui.dll [2010-03-20 17:20:23 | 000,577,536 | ---- | C] ( ) -- C:\Windows\System32\lxdwlmpm.dll [2010-03-20 17:20:22 | 000,679,936 | ---- | C] ( ) -- C:\Windows\System32\lxdwhbn3.dll [2010-03-20 17:20:17 | 000,765,952 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomc.dll [2010-03-20 17:20:17 | 000,376,832 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomm.dll [2009-06-04 01:57:38 | 000,060,928 | ---- | C] ( ) -- C:\Windows\System32\a3d.dll ========== Files - Modified Within 30 Days ========== [2010-07-27 23:33:39 | 001,835,008 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT [2010-07-27 23:23:58 | 000,000,000 | ---- | M] () -- C:\ProgramData\N360BUOptions.ini [2010-07-27 23:22:24 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010-07-27 23:22:24 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010-07-27 23:22:17 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-07-27 23:22:17 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-07-27 23:22:15 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-07-27 23:22:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-07-27 22:53:05 | 000,524,288 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010-07-27 22:53:05 | 000,065,536 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010-07-27 22:53:05 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-07-27 22:53:05 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXState-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-07-27 22:53:05 | 000,000,788 | ---- | M] () -- C:\Windows\System32\DVCState-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-07-27 22:37:32 | 002,104,896 | -H-- | M] () -- C:\Users\Kamil\AppData\Local\IconCache.db [2010-07-27 22:33:18 | 000,269,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010-07-27 22:03:52 | 000,000,725 | ---- | M] () -- C:\Users\Public\Desktop\Need For Speed World.lnk [2010-07-27 16:55:16 | 001,468,980 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010-07-27 16:55:16 | 000,661,818 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2010-07-27 16:55:16 | 000,586,980 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010-07-27 16:55:16 | 000,126,702 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2010-07-27 16:55:16 | 000,101,052 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010-07-27 16:51:16 | 000,021,960 | ---- | M] () -- C:\Users\Kamil\Desktop\paczek.jpg [2010-07-26 20:20:36 | 000,000,100 | --S- | M] () -- C:\Windows\System32\3060359707.dat [2010-07-26 18:27:01 | 000,029,184 | ---- | M] () -- C:\Users\Kamil\Desktop\ksiegowe.xls [2010-07-24 20:33:10 | 000,028,160 | ---- | M] () -- C:\Users\Kamil\Desktop\Nikon D80.doc [2010-07-23 23:37:36 | 000,019,456 | ---- | M] () -- C:\Users\Kamil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-07-20 12:44:28 | 000,164,937 | ---- | M] () -- C:\Users\Kamil\Desktop\podanie.pdf [2010-07-14 20:02:03 | 000,026,624 | ---- | M] () -- C:\Users\Kamil\Desktop\oswiadczenie rach.doc [2010-07-10 22:13:34 | 000,037,459 | ---- | M] () -- C:\Users\Kamil\Desktop\DSC_30931.jpg [2010-07-10 21:44:02 | 000,037,812 | ---- | M] () -- C:\Users\Kamil\Desktop\Zdjęcie104.jpg [2010-07-10 00:45:56 | 004,065,670 | ---- | M] () -- C:\Users\Kamil\Desktop\DSC_3093.JPG [2010-07-09 22:02:03 | 000,073,693 | ---- | M] () -- C:\Users\Kamil\Desktop\YIELD2.jpg [2010-07-09 21:57:55 | 000,003,542 | ---- | M] () -- C:\Users\Kamil\Desktop\YIELD.CGM [2010-07-09 16:16:33 | 000,059,280 | ---- | M] () -- C:\Users\Kamil\AppData\Local\GDIPFONTCACHEV1.DAT [2010-07-08 08:36:40 | 000,047,677 | ---- | M] () -- C:\Users\Kamil\Documents\2.prn [2010-07-07 16:42:09 | 000,058,281 | ---- | M] () -- C:\Users\Kamil\Desktop\1278366559_by_raynavan_500.jpg [2010-07-02 18:16:28 | 000,005,219 | ---- | M] () -- C:\Users\Kamil\.recently-used.xbel ========== Files Created - No Company Name ========== [2010-07-27 23:23:58 | 000,000,000 | ---- | C] () -- C:\ProgramData\N360BUOptions.ini [2010-07-27 22:03:52 | 000,000,725 | ---- | C] () -- C:\Users\Public\Desktop\Need For Speed World.lnk [2010-07-27 16:49:06 | 000,021,960 | ---- | C] () -- C:\Users\Kamil\Desktop\paczek.jpg [2010-07-26 20:18:33 | 000,000,100 | --S- | C] () -- C:\Windows\System32\3060359707.dat [2010-07-24 19:31:54 | 000,028,160 | ---- | C] () -- C:\Users\Kamil\Desktop\Nikon D80.doc [2010-07-20 12:40:18 | 000,164,937 | ---- | C] () -- C:\Users\Kamil\Desktop\podanie.pdf [2010-07-14 19:59:46 | 000,026,624 | ---- | C] () -- C:\Users\Kamil\Desktop\oswiadczenie rach.doc [2010-07-10 21:43:37 | 000,037,812 | ---- | C] () -- C:\Users\Kamil\Desktop\Zdjęcie104.jpg [2010-07-10 16:58:25 | 000,037,459 | ---- | C] () -- C:\Users\Kamil\Desktop\DSC_30931.jpg [2010-07-10 16:57:28 | 004,065,670 | ---- | C] () -- C:\Users\Kamil\Desktop\DSC_3093.JPG [2010-07-09 22:01:58 | 000,073,693 | ---- | C] () -- C:\Users\Kamil\Desktop\YIELD2.jpg [2010-07-09 21:57:55 | 000,003,542 | ---- | C] () -- C:\Users\Kamil\Desktop\YIELD.CGM [2010-07-08 08:42:14 | 000,047,677 | ---- | C] () -- C:\Users\Kamil\Documents\2.prn [2010-07-07 16:42:09 | 000,058,281 | ---- | C] () -- C:\Users\Kamil\Desktop\1278366559_by_raynavan_500.jpg [2010-07-02 18:16:28 | 000,005,219 | ---- | C] () -- C:\Users\Kamil\.recently-used.xbel [2010-04-25 02:49:15 | 000,000,002 | ---- | C] () -- C:\Windows\System32\Dvbpws.dll [2010-03-20 17:33:37 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxdwvs.dll [2010-03-20 17:20:25 | 000,389,120 | ---- | C] () -- C:\Windows\System32\LXDWinst.dll [2010-03-20 17:20:21 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdwgrd.dll [2010-03-20 17:17:33 | 000,360,448 | ---- | C] () -- C:\Windows\System32\lxdwcoin.dll [2010-03-06 14:21:47 | 000,014,848 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll [2010-03-06 14:21:46 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys [2010-03-06 14:21:46 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys [2010-03-06 02:53:54 | 000,000,303 | ---- | C] () -- C:\Windows\game.ini [2010-03-03 21:46:21 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010-02-27 12:24:07 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010-02-27 03:53:52 | 000,000,509 | ---- | C] () -- C:\Windows\WINCMD.INI [2010-02-26 19:24:18 | 000,148,480 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL [2010-02-26 19:24:18 | 000,073,728 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL [2010-02-26 19:01:28 | 000,007,680 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys [2010-02-26 19:01:26 | 000,012,358 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2010-02-26 19:01:20 | 000,010,288 | ---- | C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS [2009-06-19 21:06:22 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2009-06-04 02:37:08 | 000,021,093 | ---- | C] () -- C:\Windows\System32\instwdm.ini [2009-06-04 02:37:06 | 000,000,054 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\System32\CtxfiRes.dll [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\CTXFIRES.DLL [2009-05-27 10:49:00 | 000,000,285 | ---- | C] () -- C:\Windows\System32\kill.ini [2006-12-04 01:25:14 | 000,022,723 | ---- | C] () -- C:\Windows\System32\sugs2l3.dll [2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini < End of report > EDIT przy probie zrobienia loga gmerem dwa razy dostalem BSOD Edytowane 27 Lipca 2010 przez Niemiec Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Kolobos Opublikowano 28 Lipca 2010 Zgłoś Opublikowano 28 Lipca 2010 Zrob skan przy pomocy mbam oraz cureit. Sprawdz ram, dysk, temperatury itd. Wklej do OTL: :OTL O4 - HKCU..\Run: [{CE701BBE-CCDF-7A2C-7B9D-058FE208426D}] C:\Users\Kamil\AppData\Roaming\Ilpu\qufa.exe () Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 28 Lipca 2010 Zgłoś Opublikowano 28 Lipca 2010 (edytowane) MBAM Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Wersja bazy: 4363 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18928 2010-07-28 22:11:36 mbam-log-2010-07-28 (22-11-36).txt Typ skanowania: Pełne skanowanie (C:\|) Przeskanowano obiektów: 213359 Upłynęło: 35 minut(y), 49 sekund(y) Zainfekowanych procesów w pamięci: 0 Zainfekowanych modułów w pamięci: 0 Zainfekowanych kluczy rejestru: 0 Zainfekowanych wartości rejestru: 0 Zainfekowane informacje rejestru systemowego: 0 Zainfekowanych folderów: 0 Zainfekowanych plików: 0 Zainfekowanych procesów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych modułów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych kluczy rejestru: (Nie znaleziono zagrożeń) Zainfekowanych wartości rejestru: (Nie znaleziono zagrożeń) Zainfekowane informacje rejestru systemowego: (Nie znaleziono zagrożeń) Zainfekowanych folderów: (Nie znaleziono zagrożeń) Zainfekowanych plików: (Nie znaleziono zagrożeń) edit: cureit EDIT bylo w sumie przez chwile ok, ale po kolejnym restarcie znow lipa. norton nie chce wystartowac, sidebar tez. otl OTL logfile created on: 2010-07-29 06:31:18 - Run 2 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Kamil\Desktop\vir Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18928) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 73,00% Memory free 7,00 Gb Paging File | 6,00 Gb Available in Paging File | 88,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 48,86 Gb Total Space | 28,59 Gb Free Space | 58,51% Space Free | Partition Type: NTFS Drive D: | 92,01 Gb Total Space | 82,06 Gb Free Space | 89,19% Space Free | Partition Type: NTFS Drive E: | 92,02 Gb Total Space | 65,64 Gb Free Space | 71,33% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KAMIL-PC Current User Name: Kamil Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-07-27 23:30:03 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe PRC - [2009-06-04 01:55:16 | 000,025,600 | ---- | M] (Creative Technology Ltd) -- C:\Windows\System32\Ctxfihlp.exe PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-02-23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe PRC - [2008-09-10 23:15:26 | 000,131,752 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 7600 Series\ezprint.exe PRC - [2008-09-10 23:15:24 | 000,676,520 | ---- | M] () -- C:\Program Files\Lexmark 7600 Series\lxdwmon.exe PRC - [2008-05-17 04:33:10 | 000,594,600 | ---- | M] ( ) -- C:\Windows\System32\lxdwcoms.exe ========== Modules (SafeList) ========== MOD - [2010-07-27 23:30:03 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe MOD - [2009-04-11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll MOD - [2008-01-19 09:33:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx ========== Win32 Services (SafeList) ========== SRV - [2010-07-28 06:33:09 | 000,117,640 | R--- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe -- (N360) SRV - [2010-02-26 20:23:23 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2010-02-26 19:24:59 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2010-01-26 13:41:08 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2009-02-23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2008-05-17 04:33:10 | 000,594,600 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\System32\lxdwcoms.exe -- (lxdw_device) SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stop_Pending] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2004-12-13 04:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | System | Stopped] -- C:\Windows\System32\DRIVERS\SymIMv.sys -- (SymIM) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100728.002\NAVEX15.SYS -- (NAVEX15) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100728.002\NAVENG.SYS -- (NAVENG) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\btwusb.sys -- (BTWUSB) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) DRV - [2010-07-28 06:33:18 | 000,124,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2010-07-28 06:33:10 | 000,310,320 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\system32\drivers\N360\0308000.029\SYMEFA.SYS -- (SymEFA) DRV - [2010-07-28 06:33:10 | 000,308,272 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\Drivers\N360\0308000.029\SRTSP.SYS -- (SRTSP) DRV - [2010-07-28 06:33:10 | 000,217,136 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\N360\0308000.029\SYMTDI.SYS -- (SYMTDI) DRV - [2010-07-28 06:33:10 | 000,089,904 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\N360\0308000.029\SYMFW.SYS -- (SYMFW) DRV - [2010-07-28 06:33:10 | 000,048,688 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\N360\0308000.029\SYMNDISV.SYS -- (SYMNDISV) DRV - [2010-07-28 06:33:10 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\N360\0308000.029\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV - [2010-07-28 06:33:09 | 000,482,432 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\N360\0308000.029\ccHPx86.sys -- (ccHP) DRV - [2010-07-28 06:33:09 | 000,259,632 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\N360\0308000.029\BHDrvx86.sys -- (BHDrvx86) DRV - [2010-07-28 00:12:22 | 000,122,104 | ---- | M] (Doctor Web, Ltd.) [File_System | Boot | Running] -- C:\Windows\system32\drivers\dwprot.sys -- (DwProt) DRV - [2010-07-27 12:27:58 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - [2010-07-27 12:27:58 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2010-07-06 03:15:40 | 000,344,112 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20100726.001\IDSvix86.sys -- (IDSVix86) DRV - [2010-04-03 22:55:32 | 011,573,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2010-01-21 15:53:16 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2010-01-20 17:53:06 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv) DRV - [2010-01-20 17:53:04 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009-12-30 12:30:48 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2009-12-30 12:30:48 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2009-06-04 03:48:12 | 001,177,624 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ha20x2k.sys -- (ha20x2k) DRV - [2009-06-04 03:48:00 | 000,095,768 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emupia2k.sys -- (emupia) DRV - [2009-06-04 03:47:50 | 000,158,744 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2009-06-04 03:47:42 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctprxy2k.sys -- (ctprxy2k) DRV - [2009-06-04 03:47:34 | 000,130,072 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctoss2k.sys -- (ossrv) DRV - [2009-06-04 03:47:24 | 000,347,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctdvda2k.sys -- (ctdvda2k) DRV - [2009-06-04 03:47:14 | 000,526,232 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV - [2009-06-04 03:47:06 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctac32k.sys -- (ctac32k) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTEXFIFX.sys -- (CTEXFIFX) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTHWIUT.sys -- (CTHWIUT) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CT20XUT.SYS -- (CT20XUT.SYS) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CT20XUT.sys -- (CT20XUT) DRV - [2008-12-25 08:56:42 | 000,433,792 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wfeaglxt.sys -- (WFLR6654) WinFast TV2000 XP Expert (FM1216MK3) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-01-19 08:14:59 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV - [2007-03-24 12:20:24 | 000,046,208 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\jraid.sys -- (JRAID) DRV - [2007-03-15 16:41:14 | 000,048,128 | ---- | M] (Attansic Technology corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atl01v32.sys -- (AtcL001) DRV - [2006-11-02 14:00:28 | 000,017,664 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88tune_IBV32.sys -- (CXTUNE) DRV - [2006-11-02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2006-11-02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2006-11-02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2006-11-02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2006-11-02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2006-11-02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2006-11-02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2006-11-02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2006-11-02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2006-11-02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2006-11-02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006-11-02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006-11-02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2006-11-02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2006-11-02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006-11-02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2006-11-02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2006-11-02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2) DRV - [2006-11-02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2006-11-02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2006-11-02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006-11-02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006-11-02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2006-11-02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006-11-02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2006-11-02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006-11-02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006-11-02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006-11-02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2006-11-02 11:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2006-11-02 11:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2006-11-02 11:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2006-11-02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006-11-02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006-11-02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006-11-02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006-11-02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006-11-02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006-11-02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006-11-02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel® DRV - [2006-10-18 23:44:48 | 000,007,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) DRV - [2006-02-07 20:52:58 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\JGOGO.sys -- (JGOGO) DRV - [2005-08-11 08:13:00 | 000,163,584 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88vid.sys -- (CX23880) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.4\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-07-10 00:13:30 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.4\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010-02-26 20:55:01 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions [2010-02-26 20:55:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\3.8.0.41\IPSBHO.dll (Symantec Corporation) O2 - BHO: (Lexmark Printable Web) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll () O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation) O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\System32\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark 7600 Series\ezprint.exe (Lexmark International Inc.) O4 - HKLM..\Run: [lxdwmon.exe] C:\Program Files\Lexmark 7600 Series\lxdwmon.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 88.156.63.9 82.139.8.7 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program Files\Norton 360\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010-07-28 22:13:08 | 000,000,000 | ---D | C] -- C:\Users\Kamil\DoctorWeb [2010-07-28 21:29:03 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Malwarebytes [2010-07-28 21:28:53 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010-07-28 21:28:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010-07-28 07:51:56 | 000,310,320 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\SymEFA.sys [2010-07-28 07:51:56 | 000,308,272 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\srtsp.sys [2010-07-28 07:51:56 | 000,217,136 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symtdi.sys [2010-07-28 07:51:56 | 000,089,904 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symfw.sys [2010-07-28 07:51:56 | 000,048,688 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symndisv.sys [2010-07-28 07:51:56 | 000,043,696 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\srtspx.sys [2010-07-28 07:51:56 | 000,036,400 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symndis.sys [2010-07-28 07:51:56 | 000,033,072 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symids.sys [2010-07-28 07:51:55 | 000,482,432 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\cchpx86.sys [2010-07-28 07:51:55 | 000,259,632 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\BHDrvx86.sys [2010-07-28 07:51:39 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360\0308000.029 [2010-07-28 06:33:22 | 000,107,368 | R--- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll [2010-07-28 06:32:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360 [2010-07-28 06:32:57 | 000,000,000 | ---D | C] -- C:\Program Files\Norton 360 [2010-07-28 06:32:47 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller [2010-07-28 06:27:40 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline [2010-07-27 23:57:27 | 000,122,104 | ---- | C] (Doctor Web, Ltd.) -- C:\Windows\System32\drivers\dwprot.sys [2010-07-27 23:49:48 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010-07-27 23:27:31 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\vir [2010-07-27 23:24:24 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\nis [2010-07-27 22:44:14 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\Symantec [2010-07-27 22:14:00 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Need for Speed World [2010-07-27 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\Electronic_Arts_Inc [2010-07-26 20:19:58 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Axgoid [2010-07-26 19:41:05 | 000,000,000 | ---D | C] -- C:\logs [2010-07-25 13:55:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2010-07-23 22:22:48 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\CoreTemp32 [2010-07-10 16:55:39 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\fotki rozne [2010-07-09 19:32:00 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\ACD Systems [2010-07-09 19:31:35 | 000,000,000 | ---D | C] -- C:\ProgramData\ACD Systems [2010-07-09 18:57:31 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Softplicity [2010-07-09 16:25:06 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2010-07-09 16:25:00 | 000,000,000 | ---D | C] -- C:\Program Files\Mystik Media [2010-07-09 16:16:26 | 000,000,000 | ---D | C] -- C:\Program Files\Soft Gold [2010-07-08 22:01:04 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2010-07-01 18:59:34 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\gtk-2.0 [2010-07-01 18:28:33 | 000,000,000 | ---D | C] -- C:\Users\Kamil\.thumbnails [2010-07-01 16:42:43 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Documents\gegl-0.0 [2010-07-01 16:42:43 | 000,000,000 | ---D | C] -- C:\Users\Kamil\.gimp-2.6 [2010-07-01 16:42:08 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0 [2010-07-01 16:39:50 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\mapka [2010-06-30 22:06:43 | 000,000,000 | ---D | C] -- C:\Program Files\Combined Community Codec Pack [2010-03-20 17:20:25 | 000,438,272 | ---- | C] ( ) -- C:\Windows\System32\LXDWhcp.dll [2010-03-20 17:20:25 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxdwinpa.dll [2010-03-20 17:20:24 | 001,069,056 | ---- | C] ( ) -- C:\Windows\System32\lxdwserv.dll [2010-03-20 17:20:24 | 000,851,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwusb1.dll [2010-03-20 17:20:24 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwiesc.dll [2010-03-20 17:20:23 | 000,651,264 | ---- | C] ( ) -- C:\Windows\System32\lxdwpmui.dll [2010-03-20 17:20:23 | 000,577,536 | ---- | C] ( ) -- C:\Windows\System32\lxdwlmpm.dll [2010-03-20 17:20:22 | 000,679,936 | ---- | C] ( ) -- C:\Windows\System32\lxdwhbn3.dll [2010-03-20 17:20:17 | 000,765,952 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomc.dll [2010-03-20 17:20:17 | 000,376,832 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomm.dll [2009-06-04 01:57:38 | 000,060,928 | ---- | C] ( ) -- C:\Windows\System32\a3d.dll ========== Files - Modified Within 30 Days ========== [2010-07-29 06:31:42 | 001,835,008 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT [2010-07-29 06:31:13 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010-07-29 06:31:12 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010-07-29 06:31:01 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-07-29 06:31:01 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-07-29 06:30:53 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-07-29 06:30:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-07-29 06:08:53 | 001,513,900 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\Cat.DB [2010-07-29 00:05:57 | 002,121,785 | -H-- | M] () -- C:\Users\Kamil\AppData\Local\IconCache.db [2010-07-28 23:31:38 | 000,002,145 | ---- | M] () -- C:\Users\Public\Desktop\Norton 360.lnk [2010-07-28 23:14:28 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-07-28 23:14:28 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXState-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-07-28 23:14:28 | 000,000,788 | ---- | M] () -- C:\Windows\System32\DVCState-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-07-28 23:14:27 | 000,524,288 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010-07-28 23:14:27 | 000,065,536 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010-07-28 16:30:47 | 000,029,184 | ---- | M] () -- C:\Users\Kamil\Desktop\ksiegowe.xls [2010-07-28 07:51:39 | 000,000,172 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\isolate.ini [2010-07-28 06:58:47 | 001,468,980 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010-07-28 06:58:47 | 000,661,818 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2010-07-28 06:58:47 | 000,586,980 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010-07-28 06:58:47 | 000,126,702 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2010-07-28 06:58:47 | 000,101,052 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010-07-28 06:33:18 | 000,124,976 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS [2010-07-28 06:33:18 | 000,007,456 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT [2010-07-28 06:33:18 | 000,000,806 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF [2010-07-28 06:33:10 | 000,310,320 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\SymEFA.sys [2010-07-28 06:33:10 | 000,308,272 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\srtsp.sys [2010-07-28 06:33:10 | 000,217,136 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symtdi.sys [2010-07-28 06:33:10 | 000,089,904 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symfw.sys [2010-07-28 06:33:10 | 000,048,688 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symndisv.sys [2010-07-28 06:33:10 | 000,043,696 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\srtspx.sys [2010-07-28 06:33:10 | 000,036,400 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symndis.sys [2010-07-28 06:33:10 | 000,033,072 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\symids.sys [2010-07-28 06:33:09 | 000,482,432 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\cchpx86.sys [2010-07-28 06:33:09 | 000,259,632 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0308000.029\BHDrvx86.sys [2010-07-28 06:33:07 | 000,107,368 | R--- | M] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll [2010-07-28 06:33:03 | 000,003,373 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\SymEFA.inf [2010-07-28 06:33:03 | 000,001,752 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\ccHPx86.inf [2010-07-28 06:33:03 | 000,001,562 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\SymNetV.inf [2010-07-28 06:33:03 | 000,001,561 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\SymNet.inf [2010-07-28 06:33:03 | 000,001,388 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\srtspx.inf [2010-07-28 06:33:03 | 000,001,382 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\srtsp.inf [2010-07-28 06:33:03 | 000,000,640 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\BHDrvx86.inf [2010-07-28 06:32:58 | 000,009,412 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\symnetv.cat [2010-07-28 06:32:58 | 000,009,402 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\SymNet.cat [2010-07-28 06:32:58 | 000,007,431 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\SymEFA.cat [2010-07-28 06:32:58 | 000,007,429 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\srtspx.cat [2010-07-28 06:32:58 | 000,007,425 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\srtsp.cat [2010-07-28 06:32:58 | 000,007,400 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\BHDrvx86.CAT [2010-07-28 06:32:58 | 000,007,383 | ---- | M] () -- C:\Windows\System32\drivers\N360\0308000.029\ccHPx86.cat [2010-07-28 00:12:22 | 000,122,104 | ---- | M] (Doctor Web, Ltd.) -- C:\Windows\System32\drivers\dwprot.sys [2010-07-27 23:52:46 | 214,118,360 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010-07-27 22:33:18 | 000,269,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010-07-27 16:51:16 | 000,021,960 | ---- | M] () -- C:\Users\Kamil\Desktop\paczek.jpg [2010-07-26 20:20:36 | 000,000,100 | --S- | M] () -- C:\Windows\System32\3060359707.dat [2010-07-24 20:33:10 | 000,028,160 | ---- | M] () -- C:\Users\Kamil\Desktop\Nikon D80.doc [2010-07-23 23:37:36 | 000,019,456 | ---- | M] () -- C:\Users\Kamil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-07-20 12:44:28 | 000,164,937 | ---- | M] () -- C:\Users\Kamil\Desktop\podanie.pdf [2010-07-14 20:02:03 | 000,026,624 | ---- | M] () -- C:\Users\Kamil\Desktop\oswiadczenie rach.doc [2010-07-10 22:13:34 | 000,037,459 | ---- | M] () -- C:\Users\Kamil\Desktop\DSC_30931.jpg [2010-07-10 21:44:02 | 000,037,812 | ---- | M] () -- C:\Users\Kamil\Desktop\Zdjęcie104.jpg [2010-07-10 00:45:56 | 004,065,670 | ---- | M] () -- C:\Users\Kamil\Desktop\DSC_3093.JPG [2010-07-09 22:02:03 | 000,073,693 | ---- | M] () -- C:\Users\Kamil\Desktop\YIELD2.jpg [2010-07-09 21:57:55 | 000,003,542 | ---- | M] () -- C:\Users\Kamil\Desktop\YIELD.CGM [2010-07-09 16:16:33 | 000,059,280 | ---- | M] () -- C:\Users\Kamil\AppData\Local\GDIPFONTCACHEV1.DAT [2010-07-08 08:36:40 | 000,047,677 | ---- | M] () -- C:\Users\Kamil\Documents\2.prn [2010-07-07 16:42:09 | 000,058,281 | ---- | M] () -- C:\Users\Kamil\Desktop\1278366559_by_raynavan_500.jpg [2010-07-02 18:16:28 | 000,005,219 | ---- | M] () -- C:\Users\Kamil\.recently-used.xbel ========== Files Created - No Company Name ========== [2010-07-28 23:37:12 | 001,513,900 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\Cat.DB [2010-07-28 23:31:38 | 000,002,145 | ---- | C] () -- C:\Users\Public\Desktop\Norton 360.lnk [2010-07-28 07:51:56 | 000,009,412 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\symnetv.cat [2010-07-28 07:51:56 | 000,009,402 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\SymNet.cat [2010-07-28 07:51:56 | 000,007,431 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\SymEFA.cat [2010-07-28 07:51:56 | 000,007,429 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\srtspx.cat [2010-07-28 07:51:56 | 000,007,425 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\srtsp.cat [2010-07-28 07:51:56 | 000,003,373 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\SymEFA.inf [2010-07-28 07:51:56 | 000,001,562 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\SymNetV.inf [2010-07-28 07:51:56 | 000,001,561 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\SymNet.inf [2010-07-28 07:51:56 | 000,001,388 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\srtspx.inf [2010-07-28 07:51:56 | 000,001,382 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\srtsp.inf [2010-07-28 07:51:55 | 000,007,400 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\BHDrvx86.CAT [2010-07-28 07:51:55 | 000,007,383 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\ccHPx86.cat [2010-07-28 07:51:55 | 000,001,752 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\ccHPx86.inf [2010-07-28 07:51:55 | 000,000,640 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\BHDrvx86.inf [2010-07-28 07:51:39 | 000,000,172 | ---- | C] () -- C:\Windows\System32\drivers\N360\0308000.029\isolate.ini [2010-07-27 23:49:43 | 214,118,360 | ---- | C] () -- C:\Windows\MEMORY.DMP [2010-07-27 16:49:06 | 000,021,960 | ---- | C] () -- C:\Users\Kamil\Desktop\paczek.jpg [2010-07-26 20:18:33 | 000,000,100 | --S- | C] () -- C:\Windows\System32\3060359707.dat [2010-07-24 19:31:54 | 000,028,160 | ---- | C] () -- C:\Users\Kamil\Desktop\Nikon D80.doc [2010-07-20 12:40:18 | 000,164,937 | ---- | C] () -- C:\Users\Kamil\Desktop\podanie.pdf [2010-07-14 19:59:46 | 000,026,624 | ---- | C] () -- C:\Users\Kamil\Desktop\oswiadczenie rach.doc [2010-07-10 21:43:37 | 000,037,812 | ---- | C] () -- C:\Users\Kamil\Desktop\Zdjęcie104.jpg [2010-07-10 16:58:25 | 000,037,459 | ---- | C] () -- C:\Users\Kamil\Desktop\DSC_30931.jpg [2010-07-10 16:57:28 | 004,065,670 | ---- | C] () -- C:\Users\Kamil\Desktop\DSC_3093.JPG [2010-07-09 22:01:58 | 000,073,693 | ---- | C] () -- C:\Users\Kamil\Desktop\YIELD2.jpg [2010-07-09 21:57:55 | 000,003,542 | ---- | C] () -- C:\Users\Kamil\Desktop\YIELD.CGM [2010-07-08 08:42:14 | 000,047,677 | ---- | C] () -- C:\Users\Kamil\Documents\2.prn [2010-07-07 16:42:09 | 000,058,281 | ---- | C] () -- C:\Users\Kamil\Desktop\1278366559_by_raynavan_500.jpg [2010-07-02 18:16:28 | 000,005,219 | ---- | C] () -- C:\Users\Kamil\.recently-used.xbel [2010-04-25 02:49:15 | 000,000,002 | ---- | C] () -- C:\Windows\System32\Dvbpws.dll [2010-03-20 17:33:37 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxdwvs.dll [2010-03-20 17:20:25 | 000,389,120 | ---- | C] () -- C:\Windows\System32\LXDWinst.dll [2010-03-20 17:20:21 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdwgrd.dll [2010-03-20 17:17:33 | 000,360,448 | ---- | C] () -- C:\Windows\System32\lxdwcoin.dll [2010-03-06 14:21:47 | 000,014,848 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll [2010-03-06 14:21:46 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys [2010-03-06 14:21:46 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys [2010-03-06 02:53:54 | 000,000,303 | ---- | C] () -- C:\Windows\game.ini [2010-03-03 21:46:21 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010-02-27 12:24:07 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010-02-27 03:53:52 | 000,000,509 | ---- | C] () -- C:\Windows\WINCMD.INI [2010-02-26 19:24:18 | 000,148,480 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL [2010-02-26 19:24:18 | 000,073,728 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL [2010-02-26 19:01:28 | 000,007,680 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys [2010-02-26 19:01:26 | 000,012,358 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2010-02-26 19:01:20 | 000,010,288 | ---- | C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS [2009-06-19 21:06:22 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2009-06-04 02:37:08 | 000,021,093 | ---- | C] () -- C:\Windows\System32\instwdm.ini [2009-06-04 02:37:06 | 000,000,054 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\System32\CtxfiRes.dll [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\CTXFIRES.DLL [2009-05-27 10:49:00 | 000,000,285 | ---- | C] () -- C:\Windows\System32\kill.ini [2006-12-04 01:25:14 | 000,022,723 | ---- | C] () -- C:\Windows\System32\sugs2l3.dll [2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini < End of report > Edytowane 29 Lipca 2010 przez Niemiec Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 29 Lipca 2010 Zgłoś Opublikowano 29 Lipca 2010 GMER GMER 1.0.15.15281 - GMER - Rootkit Detector and Remover Rootkit scan 2010-07-29 16:25:16 Windows 6.0.6002 Service Pack 2 Running: gmer.exe; Driver: C:\Users\Kamil\AppData\Local\Temp\kwlcqpod.sys ---- System - GMER 1.0.15 ---- SSDT 87EB1900 ZwAlertResumeThread SSDT 87F22160 ZwAlertThread SSDT 886330D8 ZwAllocateVirtualMemory SSDT 87DE12B8 ZwAlpcConnectPort SSDT 885EFFD0 ZwAssignProcessToJobObject SSDT 886346A0 ZwCreateMutant SSDT 885EFD50 ZwCreateSymbolicLinkObject SSDT 87EBB8E0 ZwCreateThread SSDT 88634378 ZwDebugActiveProcess SSDT 88633230 ZwDuplicateObject SSDT 88613EF0 ZwFreeVirtualMemory SSDT 885EC1A0 ZwImpersonateAnonymousToken SSDT 885EB318 ZwImpersonateThread SSDT 87DD72B8 ZwLoadDriver SSDT 88613E10 ZwMapViewOfSection SSDT 886022B8 ZwOpenEvent SSDT 8861C8A0 ZwOpenProcess SSDT 87F19180 ZwOpenProcessToken SSDT 88609068 ZwOpenSection SSDT 8861AAC8 ZwOpenThread SSDT 885EFF00 ZwProtectVirtualMemory SSDT 87EAF238 ZwResumeThread SSDT 87F17A20 ZwSetContextThread SSDT 88634F80 ZwSetInformationProcess SSDT 8860A748 ZwSetSystemInformation SSDT 8858A108 ZwSuspendProcess SSDT 87EBC7F0 ZwSuspendThread SSDT 87E29908 ZwTerminateProcess SSDT 87EBE300 ZwTerminateThread SSDT 87EBD320 ZwUnmapViewOfSection SSDT 88613FC0 ZwWriteVirtualMemory SSDT 885EFE20 ZwCreateThreadEx ---- Devices - GMER 1.0.15 ---- AttachedDevice \FileSystem\Ntfs \Ntfs dwprot.sys (Dr.Web Protection for Windows/Doctor Web, Ltd.) AttachedDevice \Driver\tdx \Device\Tcp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation) AttachedDevice \Driver\tdx \Device\Udp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation) AttachedDevice \Driver\tdx \Device\RawIp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation) Device \FileSystem\cdfs \Cdfs A2EF205C ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\{8e89e3c8-0374-45ca-8603-868d62913ab6}@Dhcpv6State 1 ---- EOF - GMER 1.0.15 ---- zauwazylem, ze jak odlacze kabel sieciowy to komp uruchamia sie normalnie i programy tez chodza jak bozia przykazala. tak pewnie bedzie do nastepnego restartu. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Kinslayer Opublikowano 11 Sierpnia 2010 Zgłoś Opublikowano 11 Sierpnia 2010 A puszczales Combifixa moze ? Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 20 Sierpnia 2010 Zgłoś Opublikowano 20 Sierpnia 2010 wlasnie puscilem ComboFix 10-08-15.04 - Kamil 2010-08-20 21:30:07.1.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.48.1045.18.3326.2062 [GMT 2:00] Uruchomiony z: c:\users\Kamil\Desktop\vir\ComboFix.exe AV: Norton 360 *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} SP: Norton 360 *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\users\Kamil\AppData\Local\omlsvet.dll c:\users\Kamil\AppData\Roaming\EurekaLog c:\windows\system32\3060359707.dat . ((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_PROCEXP141 ((((((((((((((((((((((((( Pliki utworzone od 2010-07-20 do 2010-08-20 ))))))))))))))))))))))))))))))) . 2010-08-01 10:36 . 2010-08-01 10:48 -------- d-----w- C:\Dwa ogrody 2010-07-28 20:13 . 2010-07-28 20:13 -------- d-----w- c:\users\Kamil\DoctorWeb 2010-07-28 19:29 . 2010-07-28 19:29 -------- d-----w- c:\users\Kamil\AppData\Roaming\Malwarebytes 2010-07-28 19:28 . 2010-07-28 21:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-07-28 19:28 . 2010-07-28 19:28 -------- d-----w- c:\programdata\Malwarebytes 2010-07-28 04:33 . 2010-07-28 04:33 26600 ----a-r- c:\windows\system32\drivers\GEARAspiWDM.sys 2010-07-28 04:33 . 2010-07-28 04:33 107368 ----a-r- c:\windows\system32\GEARAspi.dll 2010-07-28 04:32 . 2010-07-28 22:11 -------- d-----w- c:\windows\system32\drivers\N360 2010-07-28 04:32 . 2010-07-28 04:33 -------- d-----w- c:\program files\Norton 360 2010-07-28 04:32 . 2010-07-28 04:32 -------- d-----w- c:\program files\NortonInstaller 2010-07-28 04:27 . 2010-07-28 04:32 -------- d-----w- c:\program files\SkanerOnline 2010-07-27 21:57 . 2010-07-27 22:12 122104 ----a-w- c:\windows\system32\drivers\dwprot.sys 2010-07-27 20:44 . 2010-07-27 20:44 -------- d-----w- c:\users\Kamil\AppData\Local\Symantec 2010-07-27 20:14 . 2010-07-27 20:14 -------- d-----w- c:\users\Kamil\AppData\Roaming\Need for Speed World 2010-07-27 20:04 . 2010-07-27 20:04 -------- d-----w- c:\users\Kamil\AppData\Local\Electronic_Arts_Inc 2010-07-26 18:19 . 2010-07-27 21:12 -------- d-----w- c:\users\Kamil\AppData\Roaming\Axgoid 2010-07-26 17:41 . 2010-07-26 17:41 -------- d-----w- C:\logs 2010-07-25 11:55 . 2010-04-23 14:13 2048 ----a-w- c:\windows\system32\tzres.dll . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-08-20 19:36 . 2010-02-26 18:11 34901 ----a-w- c:\programdata\nvModes.dat 2010-08-20 19:28 . 2010-03-06 01:39 -------- d-----w- c:\users\Kamil\AppData\Roaming\uTorrent 2010-08-20 17:17 . 2010-02-26 18:54 -------- d-----w- c:\program files\Mozilla Thunderbird 2010-08-20 08:05 . 2006-12-05 05:22 661818 ----a-w- c:\windows\system32\perfh015.dat 2010-08-20 08:05 . 2006-12-05 05:22 126702 ----a-w- c:\windows\system32\perfc015.dat 2010-07-29 04:57 . 2010-02-26 16:54 59280 ----a-w- c:\users\Kamil\AppData\Local\GDIPFONTCACHEV1.DAT 2010-07-28 05:00 . 2010-03-06 14:59 -------- d-----w- c:\program files\Common Files\Symantec Shared 2010-07-28 04:33 . 2010-03-06 14:59 -------- d-----w- c:\program files\Symantec 2010-07-28 04:33 . 2010-03-06 14:59 806 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF 2010-07-28 04:33 . 2010-03-06 14:59 7456 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT 2010-07-28 04:33 . 2010-03-06 14:59 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2010-07-28 04:32 . 2010-02-26 17:48 -------- d-----w- c:\programdata\Norton 2010-07-28 04:32 . 2010-02-26 17:47 -------- d-----w- c:\programdata\NortonInstaller 2010-07-09 17:32 . 2010-07-09 17:32 -------- d-----w- c:\users\Kamil\AppData\Roaming\ACD Systems 2010-07-09 17:31 . 2010-07-09 17:31 -------- d-----w- c:\programdata\ACD Systems 2010-07-09 16:57 . 2010-07-09 16:57 -------- d-----w- c:\users\Kamil\AppData\Roaming\Softplicity 2010-07-09 14:25 . 2010-07-09 14:25 -------- d-----w- c:\program files\Mystik Media 2010-07-09 14:16 . 2010-07-09 14:16 -------- d-----w- c:\program files\Soft Gold 2010-07-01 20:38 . 2010-02-27 00:01 -------- d-----w- c:\program files\Opera 2010-07-01 17:07 . 2010-07-01 16:59 -------- d-----w- c:\users\Kamil\AppData\Roaming\gtk-2.0 2010-07-01 14:42 . 2010-07-01 14:42 -------- d-----w- c:\program files\GIMP-2.0 2010-06-30 20:06 . 2010-06-30 20:06 -------- d-----w- c:\program files\Combined Community Codec Pack 2010-05-26 17:06 . 2010-06-19 21:33 34304 ----a-w- c:\windows\system32\atmlib.dll 2010-05-26 14:47 . 2010-06-19 21:33 289792 ----a-w- c:\windows\system32\atmfd.dll . ------- Sigcheck ------- Błąd usług kryptograficznych !! . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTxfiHlp"="CTXFIHLP.EXE" [2009-06-03 25600] "lxdwmon.exe"="c:\program files\Lexmark 7600 Series\lxdwmon.exe" [2008-09-10 676520] "EzPrint"="c:\program files\Lexmark 7600 Series\ezprint.exe" [2008-09-10 131752] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys] @="FSFilter Activity Monitor" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2009-12-11 14:57 948672 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2009-12-22 00:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X IDE Setup] 2007-03-20 13:36 36864 ----a-w- c:\windows\RaidTool\xInsIDE.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "VistaSp2"=hex(b):9d,59,d7,c9,16,bb,ca,01 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2166942745-957436607-1848780418-1000] "EnableNotificationsRef"=dword:00000001 R2 lxdw_device;lxdw_device;c:\windows\system32\lxdwcoms.exe [2008-05-17 594600] R2 N360;Norton 360;c:\program files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe [2010-07-28 117640] R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-02-26 79360] R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-02-26 79360] R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS [2009-06-04 171032] R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS [2009-06-04 1324056] R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS [2009-06-04 72728] R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2010-01-20 14216] R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2010-01-20 8456] R3 WSDPrintDevice;Obsługa drukowania WSD za pośrednictwem bloku pamięci górnej;c:\windows\system32\DRIVERS\WSDPrint.sys [2008-01-19 16896] S0 DwProt;DrWeb Protection;c:\windows\system32\drivers\dwprot.sys [2010-07-27 122104] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0308000.029\SYMEFA.SYS [2010-07-28 310320] S1 BHDrvx86;Symantec Heuristics Driver;c:\windows\System32\Drivers\N360\0308000.029\BHDrvx86.sys [2010-07-28 259632] S1 ccHP;Symantec Hash Provider;c:\windows\System32\Drivers\N360\0308000.029\ccHPx86.sys [2010-07-28 482432] S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20100818.002\IDSvix86.sys [2010-07-06 344112] S3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\atl01v32.sys [2007-03-15 48128] S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS [2009-06-04 171032] S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS [2009-06-04 1324056] S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS [2009-06-04 72728] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-07-27 102448] S3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\Drivers\N360\0308000.029\SYMNDISV.SYS [2010-07-28 48688] S3 WFLR6654;WinFast TV2000 XP Expert (FM1216MK3);c:\windows\system32\drivers\wfeaglxt.sys [2008-12-25 433792] . . ------- Skan uzupełniający ------- . uStart Page = about:blank IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Wyślij do interfejsu &Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm . - - - - USUNIĘTO PUSTE WPISY - - - - HKCU-Run-Kdododipoki - c:\users\Kamil\AppData\Local\omlsvet.dll MSConfigStartUp-{CE701BBE-CCDF-7A2C-7B9D-058FE208426D} - c:\users\Kamil\AppData\Roaming\Ilpu\qufa.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-08-20 21:39 Windows 6.0.6002 Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run CTxfiHlp = CTXFIHLP.EXE? skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\N360] "ImagePath"="\"c:\program files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\3.8.0.41\diMaster.dll\" /prefetch:1" . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'Explorer.exe'(1624) c:\windows\System32\netshell.dll . ------------------------ Pozostałe uruchomione procesy ------------------------ . c:\windows\system32\nvvsvc.exe c:\program files\Creative\Shared Files\CTAudSvc.exe c:\windows\system32\nvvsvc.exe c:\windows\System32\Ctxfihlp.exe c:\windows\system32\taskmgr.exe . ************************************************************************** . Czas ukończenia: 2010-08-20 21:40:12 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2010-08-20 19:40 Przed: 30 449 078 272 bajtów wolnych Po: 30 180 134 912 bajtów wolnych - - End Of File - - FDB43619E1178114A7EAB429AD921D76 EDIT. po restarcie nic sie nie zmienilo :/ EDIT2. w trybie awaryjnym jest prawie ok. dalej nie moge uruchomic WU, ale udalo sie nortona odinstalowac. gmer GMER 1.0.15.15281 - GMER - Rootkit Detector and Remover Rootkit scan 2010-08-21 00:07:22 Windows 6.0.6002 Service Pack 2 Running: gmer.exe; Driver: C:\Users\Kamil\AppData\Local\Temp\kwlcqpod.sys ---- Devices - GMER 1.0.15 ---- AttachedDevice \FileSystem\Ntfs \Ntfs dwprot.sys (Dr.Web Protection for Windows/Doctor Web, Ltd.) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\ControlSet001\Control\Session Manager@PendingFileRenameOperations ???R????????????????????%SystemRoot%\system32\cmd.exe???????%s???????R???????????????+??????????????Windows_NT???????????S????????????l??R???????T???????+???????????????????????,?????????????M???P???P???R???R????????????? ???????R???????????M??????????(????????????????r??HTTP Print Services?????inetpp.dll??????? ???????R?????R?????N??????????2???????????????s????????R???i??2s??win32spl.dll?+????2??R???s?????e????Us?ugi drukowania LanMan????? ???????R???????????????????????????????????(??? ???????R???????????R????????"??????????s????????????????????s?????? ???????????????????R????????.???.??????????l???????????????????????n??? ???????????????????N????????????/???????????????4??R??????????????Terminal Server?Personal?????????N?????????e????? ???????????????????????R???R???????S??? ???????????????????R?R?R?R?R???R????????????????????BSTOR#Disk&Ven_&Prod_Flash_Disk&Rev_5.00#0514460005DCAB06&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}0c91efb8b}fb8b}??\??? ???????????????????R????????4???0???????????e??????????????R? ---- EOF - GMER 1.0.15 ---- otl OTL logfile created on: 2010-08-21 00:08:58 - Run 1 OTL by OldTimer - Version 3.2.10.0 Folder = C:\Users\Kamil\Desktop\vir Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18928) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 75,00% Memory free 7,00 Gb Paging File | 6,00 Gb Available in Paging File | 91,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 48,86 Gb Total Space | 28,34 Gb Free Space | 58,01% Space Free | Partition Type: NTFS Drive D: | 92,01 Gb Total Space | 80,93 Gb Free Space | 87,96% Space Free | Partition Type: NTFS Drive E: | 92,02 Gb Total Space | 39,11 Gb Free Space | 42,51% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KAMIL-PC Current User Name: Kamil Logged in as Administrator. Current Boot Mode: SafeMode with Networking Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-08-21 00:07:07 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe ========== Modules (SafeList) ========== MOD - [2010-08-21 00:07:07 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe MOD - [2009-04-11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll MOD - [2008-01-19 09:33:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx ========== Win32 Services (SafeList) ========== SRV - [2010-02-26 20:23:23 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2010-02-26 19:24:59 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2010-01-26 13:41:08 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2009-02-23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Stopped] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2008-05-17 04:33:10 | 000,594,600 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\System32\lxdwcoms.exe -- (lxdw_device) SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2004-12-13 04:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\VirusDefs\20100304.005\NAVEX15.SYS -- (NAVEX15) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\btwusb.sys -- (BTWUSB) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) DRV - [2010-07-28 00:12:22 | 000,122,104 | ---- | M] (Doctor Web, Ltd.) [File_System | Boot | Running] -- C:\Windows\system32\drivers\dwprot.sys -- (DwProt) DRV - [2010-04-03 22:55:32 | 011,573,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2010-01-21 15:53:16 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2010-01-20 17:53:06 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv) DRV - [2010-01-20 17:53:04 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009-12-30 12:30:48 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2009-12-30 12:30:48 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2009-06-04 03:48:12 | 001,177,624 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ha20x2k.sys -- (ha20x2k) DRV - [2009-06-04 03:48:00 | 000,095,768 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emupia2k.sys -- (emupia) DRV - [2009-06-04 03:47:50 | 000,158,744 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2009-06-04 03:47:42 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctprxy2k.sys -- (ctprxy2k) DRV - [2009-06-04 03:47:34 | 000,130,072 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctoss2k.sys -- (ossrv) DRV - [2009-06-04 03:47:24 | 000,347,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctdvda2k.sys -- (ctdvda2k) DRV - [2009-06-04 03:47:14 | 000,526,232 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV - [2009-06-04 03:47:06 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctac32k.sys -- (ctac32k) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTEXFIFX.sys -- (CTEXFIFX) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTHWIUT.sys -- (CTHWIUT) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CT20XUT.SYS -- (CT20XUT.SYS) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CT20XUT.sys -- (CT20XUT) DRV - [2008-12-25 08:56:42 | 000,433,792 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wfeaglxt.sys -- (WFLR6654) WinFast TV2000 XP Expert (FM1216MK3) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-01-19 08:14:59 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV - [2007-03-24 12:20:24 | 000,046,208 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\jraid.sys -- (JRAID) DRV - [2007-03-15 16:41:14 | 000,048,128 | ---- | M] (Attansic Technology corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atl01v32.sys -- (AtcL001) DRV - [2006-11-02 14:00:28 | 000,017,664 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88tune_IBV32.sys -- (CXTUNE) DRV - [2006-11-02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2006-11-02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2006-11-02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2006-11-02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2006-11-02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2006-11-02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2006-11-02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2006-11-02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2006-11-02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2006-11-02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2006-11-02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006-11-02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006-11-02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2006-11-02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2006-11-02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006-11-02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2006-11-02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2006-11-02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2) DRV - [2006-11-02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2006-11-02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2006-11-02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006-11-02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006-11-02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2006-11-02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006-11-02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2006-11-02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006-11-02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006-11-02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006-11-02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2006-11-02 11:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2006-11-02 11:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2006-11-02 11:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2006-11-02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006-11-02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006-11-02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006-11-02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006-11-02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006-11-02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006-11-02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006-11-02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel® DRV - [2006-10-18 23:44:48 | 000,007,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) DRV - [2006-02-07 20:52:58 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\JGOGO.sys -- (JGOGO) DRV - [2005-08-11 08:13:00 | 000,163,584 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88vid.sys -- (CX23880) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.6\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-08-17 15:59:05 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.6\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010-02-26 20:55:01 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions [2010-02-26 20:55:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} O1 HOSTS File: ([2010-08-20 21:36:04 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Lexmark Printable Web) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll () O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\System32\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark 7600 Series\ezprint.exe (Lexmark International Inc.) O4 - HKLM..\Run: [lxdwmon.exe] C:\Program Files\Lexmark 7600 Series\lxdwmon.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 88.156.63.9 82.139.8.7 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010-08-20 22:54:50 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Tific [2010-08-20 21:40:14 | 000,000,000 | ---D | C] -- C:\Windows\temp [2010-08-20 21:40:14 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\temp [2010-08-20 21:36:07 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN [2010-08-20 21:29:33 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2010-08-20 21:29:33 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2010-08-20 21:29:33 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2010-08-20 21:29:29 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2010-08-20 21:29:28 | 000,000,000 | ---D | C] -- C:\ComboFix [2010-08-20 21:28:48 | 000,000,000 | ---D | C] -- C:\Qoobox [2010-08-20 21:28:32 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe [2010-08-01 12:36:08 | 000,000,000 | ---D | C] -- C:\Dwa ogrody [2010-07-28 22:13:08 | 000,000,000 | ---D | C] -- C:\Users\Kamil\DoctorWeb [2010-07-28 21:29:03 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Malwarebytes [2010-07-28 21:28:53 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010-07-28 21:28:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010-07-28 06:27:40 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline [2010-07-27 23:57:27 | 000,122,104 | ---- | C] (Doctor Web, Ltd.) -- C:\Windows\System32\drivers\dwprot.sys [2010-07-27 23:49:48 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010-07-27 23:27:31 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\vir [2010-07-27 23:24:24 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\nis [2010-07-27 22:44:14 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\Symantec [2010-07-27 22:14:00 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Need for Speed World [2010-07-27 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\Electronic_Arts_Inc [2010-07-26 20:19:58 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Axgoid [2010-07-26 19:41:05 | 000,000,000 | ---D | C] -- C:\logs [2010-07-23 22:22:48 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\CoreTemp32 [2010-03-20 17:20:25 | 000,438,272 | ---- | C] ( ) -- C:\Windows\System32\LXDWhcp.dll [2010-03-20 17:20:25 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxdwinpa.dll [2010-03-20 17:20:24 | 001,069,056 | ---- | C] ( ) -- C:\Windows\System32\lxdwserv.dll [2010-03-20 17:20:24 | 000,851,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwusb1.dll [2010-03-20 17:20:24 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwiesc.dll [2010-03-20 17:20:23 | 000,651,264 | ---- | C] ( ) -- C:\Windows\System32\lxdwpmui.dll [2010-03-20 17:20:23 | 000,577,536 | ---- | C] ( ) -- C:\Windows\System32\lxdwlmpm.dll [2010-03-20 17:20:22 | 000,679,936 | ---- | C] ( ) -- C:\Windows\System32\lxdwhbn3.dll [2010-03-20 17:20:17 | 000,765,952 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomc.dll [2010-03-20 17:20:17 | 000,376,832 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomm.dll [2009-06-04 01:57:38 | 000,060,928 | ---- | C] ( ) -- C:\Windows\System32\a3d.dll ========== Files - Modified Within 30 Days ========== [2010-08-21 00:09:03 | 001,835,008 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT [2010-08-20 23:26:26 | 001,468,980 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010-08-20 23:26:26 | 000,661,070 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2010-08-20 23:26:26 | 000,586,568 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010-08-20 23:26:26 | 000,126,324 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2010-08-20 23:26:26 | 000,100,640 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010-08-20 23:22:40 | 000,001,356 | ---- | M] () -- C:\Users\Kamil\AppData\Local\d3d9caps.dat [2010-08-20 23:21:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-08-20 23:18:20 | 001,369,883 | -H-- | M] () -- C:\Users\Kamil\AppData\Local\IconCache.db [2010-08-20 22:57:28 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-08-20 22:57:28 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-08-20 22:57:25 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010-08-20 22:57:25 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010-08-20 22:57:13 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-08-20 22:56:13 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-08-20 22:56:13 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXState-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-08-20 22:56:13 | 000,000,788 | ---- | M] () -- C:\Windows\System32\DVCState-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-08-20 22:56:12 | 000,524,288 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010-08-20 22:56:12 | 000,065,536 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010-08-20 21:51:18 | 000,000,000 | ---- | M] () -- C:\ProgramData\N360BUOptions.ini [2010-08-20 21:36:09 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini [2010-08-20 21:36:04 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2010-08-19 17:24:49 | 000,030,208 | ---- | M] () -- C:\Users\Kamil\Desktop\ksiegowe.xls [2010-08-16 18:48:47 | 000,120,980 | ---- | M] () -- C:\Users\Kamil\Desktop\DSC_3250.JPG [2010-08-16 18:44:01 | 000,002,073 | ---- | M] () -- C:\Users\Kamil\.recently-used.xbel [2010-08-16 17:20:09 | 000,035,840 | ---- | M] () -- C:\Users\Kamil\Desktop\tytuly.doc [2010-08-16 17:19:27 | 000,035,328 | ---- | M] () -- C:\Users\Kamil\Desktop\mandaty.doc [2010-08-15 21:34:14 | 003,488,912 | ---- | M] () -- C:\Users\Kamil\Desktop\DSC_3252.JPG [2010-08-15 21:34:04 | 003,590,695 | ---- | M] () -- C:\Users\Kamil\Desktop\DSC_3251.JPG [2010-08-04 17:23:43 | 000,096,689 | ---- | M] () -- C:\Users\Kamil\Desktop\96a35ec98c.jpeg [2010-07-29 06:57:35 | 000,059,280 | ---- | M] () -- C:\Users\Kamil\AppData\Local\GDIPFONTCACHEV1.DAT [2010-07-29 06:57:11 | 000,269,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010-07-28 00:12:22 | 000,122,104 | ---- | M] (Doctor Web, Ltd.) -- C:\Windows\System32\drivers\dwprot.sys [2010-07-27 23:52:46 | 214,118,360 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010-07-24 20:33:10 | 000,028,160 | ---- | M] () -- C:\Users\Kamil\Desktop\Nikon D80.doc [2010-07-23 23:37:36 | 000,019,456 | ---- | M] () -- C:\Users\Kamil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ========== Files Created - No Company Name ========== [2010-08-20 21:51:18 | 000,000,000 | ---- | C] () -- C:\ProgramData\N360BUOptions.ini [2010-08-20 21:29:33 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe [2010-08-20 21:29:33 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2010-08-20 21:29:33 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2010-08-20 21:29:33 | 000,077,312 | ---- | C] () -- C:\Windows\MBR.exe [2010-08-20 21:29:33 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2010-08-16 18:44:01 | 000,002,073 | ---- | C] () -- C:\Users\Kamil\.recently-used.xbel [2010-08-16 17:20:09 | 000,035,840 | ---- | C] () -- C:\Users\Kamil\Desktop\tytuly.doc [2010-08-16 17:19:26 | 000,035,328 | ---- | C] () -- C:\Users\Kamil\Desktop\mandaty.doc [2010-08-15 21:36:33 | 003,590,695 | ---- | C] () -- C:\Users\Kamil\Desktop\DSC_3251.JPG [2010-08-15 21:36:33 | 003,488,912 | ---- | C] () -- C:\Users\Kamil\Desktop\DSC_3252.JPG [2010-08-15 21:36:33 | 000,120,980 | ---- | C] () -- C:\Users\Kamil\Desktop\DSC_3250.JPG [2010-08-04 17:23:43 | 000,096,689 | ---- | C] () -- C:\Users\Kamil\Desktop\96a35ec98c.jpeg [2010-07-27 23:49:43 | 214,118,360 | ---- | C] () -- C:\Windows\MEMORY.DMP [2010-07-24 19:31:54 | 000,028,160 | ---- | C] () -- C:\Users\Kamil\Desktop\Nikon D80.doc [2010-04-25 02:49:15 | 000,000,002 | ---- | C] () -- C:\Windows\System32\Dvbpws.dll [2010-03-20 17:35:26 | 000,011,904 | ---- | C] () -- C:\ProgramData\lxdw.log [2010-03-20 17:33:37 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxdwvs.dll [2010-03-20 17:20:25 | 000,389,120 | ---- | C] () -- C:\Windows\System32\LXDWinst.dll [2010-03-20 17:20:21 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdwgrd.dll [2010-03-20 17:17:33 | 000,360,448 | ---- | C] () -- C:\Windows\System32\lxdwcoin.dll [2010-03-20 17:05:53 | 000,000,187 | ---- | C] () -- C:\ProgramData\lxdwDiagnostics.log [2010-03-20 17:01:33 | 000,000,252 | ---- | C] () -- C:\ProgramData\FastPics.log [2010-03-20 16:59:31 | 000,000,000 | ---- | C] () -- C:\ProgramData\UpdaterLog.txt [2010-03-06 14:21:47 | 000,014,848 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll [2010-03-06 14:21:46 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys [2010-03-06 14:21:46 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys [2010-03-06 02:53:54 | 000,000,303 | ---- | C] () -- C:\Windows\game.ini [2010-03-03 21:46:21 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010-02-27 12:24:07 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010-02-27 04:15:45 | 000,019,456 | ---- | C] () -- C:\Users\Kamil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-02-27 03:53:52 | 000,000,509 | ---- | C] () -- C:\Windows\WINCMD.INI [2010-02-26 20:42:17 | 000,034,901 | ---- | C] () -- C:\ProgramData\nvModes.001 [2010-02-26 20:11:49 | 000,034,901 | ---- | C] () -- C:\ProgramData\nvModes.dat [2010-02-26 19:24:18 | 000,148,480 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL [2010-02-26 19:24:18 | 000,073,728 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL [2010-02-26 19:01:28 | 000,007,680 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys [2010-02-26 19:01:26 | 000,012,358 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2010-02-26 19:01:20 | 000,010,288 | ---- | C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS [2010-02-26 18:54:28 | 000,001,356 | ---- | C] () -- C:\Users\Kamil\AppData\Local\d3d9caps.dat [2009-06-19 21:06:22 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2009-06-04 02:37:08 | 000,021,093 | ---- | C] () -- C:\Windows\System32\instwdm.ini [2009-06-04 02:37:06 | 000,000,054 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\System32\CtxfiRes.dll [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\CTXFIRES.DLL [2009-05-27 10:49:00 | 000,000,285 | ---- | C] () -- C:\Windows\System32\kill.ini [2006-12-04 01:25:14 | 000,022,723 | ---- | C] () -- C:\Windows\System32\sugs2l3.dll [2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini < End of report > otl extras OTL Extras logfile created on: 2010-08-21 00:08:58 - Run 1 OTL by OldTimer - Version 3.2.10.0 Folder = C:\Users\Kamil\Desktop\vir Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18928) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 75,00% Memory free 7,00 Gb Paging File | 6,00 Gb Available in Paging File | 91,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 48,86 Gb Total Space | 28,34 Gb Free Space | 58,01% Space Free | Partition Type: NTFS Drive D: | 92,01 Gb Total Space | 80,93 Gb Free Space | 87,96% Space Free | Partition Type: NTFS Drive E: | 92,02 Gb Total Space | 39,11 Gb Free Space | 42,51% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KAMIL-PC Current User Name: Kamil Logged in as Administrator. Current Boot Mode: SafeMode with Networking Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2166942745-957436607-1848780418-1000] "EnableNotifications" = 0 "EnableNotificationsRef" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 ========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{28728DF9-F1AE-44B0-BDCE-812471C7DEA6}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{687AF004-CF5B-4CBD-9CCA-8D4915785177}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{6A585C65-2EC7-443F-AA60-92A29633711E}" = rport=138 | protocol=17 | dir=out | app=system | "{7A477A84-AD80-4E7B-AD9C-9964B7B6E097}" = rport=139 | protocol=6 | dir=out | app=system | "{7FB70B3A-16E7-439A-8F09-2C4D3A19C5CF}" = lport=445 | protocol=6 | dir=in | app=system | "{814D3084-34FC-4F45-B44C-3F591E7EDC24}" = lport=137 | protocol=17 | dir=in | app=system | "{B8F1D662-39D3-4989-A6BD-ACC7DCBEEA73}" = lport=138 | protocol=17 | dir=in | app=system | "{CFC0AC83-4B2E-49FB-A1BA-10691629E29E}" = rport=445 | protocol=6 | dir=out | app=system | "{DF95094E-5F26-48C0-91EC-05E2B3E0C3E3}" = rport=137 | protocol=17 | dir=out | app=system | "{E1FD5DA9-56A8-4F07-A166-669120FBCE78}" = lport=139 | protocol=6 | dir=in | app=system | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{09299100-34FF-495A-B374-B98B61001025}" = protocol=6 | dir=in | app=c:\windows\system32\lxdwcoms.exe | "{22D6C651-03B5-4D2B-A284-31529E42EA60}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | "{259E7368-64EC-420B-9BD3-C6AE073E0872}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{280DFA69-A598-49C1-8A11-DE00B83BBFD1}" = protocol=17 | dir=in | app=d:\gry\wings of prey demo\aces.exe | "{580EBBF0-F928-4BAA-90EB-98817B4D8102}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{6AF61A57-9264-41AA-9421-D0E1185D3C6C}" = protocol=6 | dir=in | app=d:\gry\wings of prey demo\aces.exe | "{6EEDCECD-DF72-48E6-841D-98BA03298BFE}" = protocol=6 | dir=in | app=d:\gry\wings of prey demo\launcher.exe | "{7A745598-E4BC-4C4D-BD1D-C782398E4260}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | "{911F2315-AE6C-45E9-B800-B02B8C364805}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{9BDF56B5-D029-4554-96F6-D8F08A1AF562}" = protocol=17 | dir=in | app=d:\gry\wings of prey demo\launcher.exe | "{A2467D30-87FE-424B-8452-5B74DAC0A138}" = protocol=17 | dir=in | app=c:\windows\system32\lxdwcoms.exe | "{C11BEF7E-9259-4653-A6A0-DD34E8E74433}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | "{D75D8E27-3B31-4603-8A4D-E1C4E22E9965}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{F9D92DFA-A08B-489D-9FF4-8501A9ABE762}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{19DC9559-9C20-4A46-A67D-7ECBA52A2788}" = Nokia PC Suite "{1D2C96C3-A3F3-49E7-B839-95279DED837F}" = Opera 10.60 "{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java 6 Update 19 "{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMB36X Raid Configurer "{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll "{418EC9DD-25EE-4C3F-8827-B7AA9B26405B}" = WinFast Multimedia Driver Installation "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{5DB65884-C963-4454-AABA-4CA3089281FA}" = NVIDIA PhysX "{6734CA10-8FB8-4C7F-B8C7-75317C617DC5}" = Call of Duty® 4 - Modern Warfare Demo "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2 "{6E19F210-3813-4002-B561-94D66AA182B6}" = Attansic L1 Gigabit Ethernet Driver "{7397EDED-F38A-4654-B669-BF61065803D0}" = PC Connectivity Solution "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}_HOMESTUDENTR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}_HOMESTUDENTR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}_HOMESTUDENTR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-001F-0415-0000-0000000FF1CE}_HOMESTUDENTR_{E9EA2604-8AC9-47D2-8F4B-6BF60787A357}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}_HOMESTUDENTR_{D45F91DE-F0FC-4D5F-9A0C-FDE5B251AAC6}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}_HOMESTUDENTR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.1 "{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86 "{B9C9DB4C-6D77-4AE9-AD1C-C708C23239A0}" = Nokia Connectivity Cable Driver "{BBF0A67B-5DBA-452F-9D2E-6F168BC226E5}" = Need for Speed™ SHIFT Demo "{D2C5E510-BE6D-42CC-9F61-E4F939078474}" = Lexmark Printable Web "{f045ec64-ed96-11de-bb6e-56f655d89593}}_is1" = "Wings of Prey Demo" (Unistall) "05B59228C7E1C21DFBE89260F879BD95880548D8" = Pakiet sterowników systemu Windows - Nokia Modem (10/05/2009 4.2) "504244733D18C8F63FF584AEB290E3904E791693" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) "8CDCFB95BB84DD9C0F88F22266A0CA86035E55BA" = Pakiet sterowników systemu Windows - Nokia Modem (06/01/2009 7.01.0.4) "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "ALchemy" = Creative ALchemy "AQQ" = WapSter AQQ "AudioCS" = Creative Audio Control Panel "Combined Community Codec Pack_is1" = Combined Community Codec Pack 2009-09-09 "Console Launcher" = Creative Console Launcher "Creative Software AutoUpdate" = Creative Software AutoUpdate "Creative Sound Blaster Properties" = Creative Sound Blaster Properties "EASEUS Partition Master Home Edition_is1" = EASEUS Partition Master 5.0.1 Home Edition "ffdshow_is1" = ffdshow [rev 3291] [2010-02-26] "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "InstallShield_{6734CA10-8FB8-4C7F-B8C7-75317C617DC5}" = Call of Duty® 4 - Modern Warfare Demo "IrfanView" = IrfanView (remove only) "Lexmark 7600 Series" = Lexmark 7600 Series "Mozilla Thunderbird (3.0.6)" = Mozilla Thunderbird (3.0.6) "NapiProjekt_is1" = NapiProjekt 1.0.6.9 "Nokia PC Suite" = Nokia PC Suite "NVIDIA Display Control Panel" = NVIDIA Display Control Panel "NVIDIA Drivers" = NVIDIA Drivers "OpenAL" = OpenAL "Picasa 3" = Picasa 3 "RealAlt_is1" = Real Alternative 2.0.2 "SkanerOnline" = Skaner on-line mks_vir "Totalcmd" = Total Commander (Remove or Repair) "uTorrent" = µTorrent "WinGimp-2.0_is1" = GIMP 2.6.9 "WinRAR archiver" = Archiwizator WinRAR ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 2010-08-16 15:50:17 | Computer Name = Kamil-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd mplayerc.exe, wersja 6.4.9.1, sygnatura czasowa 0x4b780a3b, moduł powodujący błąd libmplayer.dll, wersja 0.0.0.0, sygnatura czasowa 0x4b883c1c, kod wyjątku 0xc0000005, przesunięcie błędu 0x0002ba6d, identyfikator procesu 0x11f0, godzina rozpoczęcia aplikacji 0x01cb3d7c2a7e5ad0. Error - 2010-08-16 15:50:20 | Computer Name = Kamil-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd mplayerc.exe, wersja 6.4.9.1, sygnatura czasowa 0x4b780a3b, moduł powodujący błąd ntdll.dll, wersja 6.0.6002.18005, sygnatura czasowa 0x49e03821, kod wyjątku 0xc0000005, przesunięcie błędu 0x00067409, identyfikator procesu 0x11f0, godzina rozpoczęcia aplikacji 0x01cb3d7c2a7e5ad0. Error - 2010-08-16 15:51:49 | Computer Name = Kamil-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd mplayerc.exe, wersja 6.4.9.1, sygnatura czasowa 0x4b780a3b, moduł powodujący błąd ntdll.dll, wersja 6.0.6002.18005, sygnatura czasowa 0x49e03821, kod wyjątku 0xc0000005, przesunięcie błędu 0x000666ab, identyfikator procesu 0x1650, godzina rozpoczęcia aplikacji 0x01cb3d7c7329b7c0. Error - 2010-08-19 06:58:45 | Computer Name = Kamil-PC | Source = Application Hang | ID = 1002 Description = Program TOTALCMD.EXE w wersji 7.5.0.1 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania raportami i rozwiązaniami problemów. Identyfikator procesu: a80 Godzina rozpoczęcia: 01cb3f8c546b61f0 Godzina zakończenia: 2237 Error - 2010-08-20 16:39:28 | Computer Name = Kamil-PC | Source = EventSystem | ID = 4609 Description = Error - 2010-08-20 16:44:30 | Computer Name = Kamil-PC | Source = EventSystem | ID = 4609 Description = Error - 2010-08-20 17:21:46 | Computer Name = Kamil-PC | Source = EventSystem | ID = 4609 Description = Error - 2010-08-20 17:49:16 | Computer Name = Kamil-PC | Source = Perflib | ID = 1008 Description = Error - 2010-08-20 17:49:16 | Computer Name = Kamil-PC | Source = Perflib | ID = 1010 Description = Error - 2010-08-20 17:49:16 | Computer Name = Kamil-PC | Source = PerfNet | ID = 2004 Description = [ System Events ] Error - 2010-04-21 09:57:10 | Computer Name = Kamil-PC | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 12:43:28 na 2010-04-21 było nieoczekiwane. Error - 2010-04-21 10:06:40 | Computer Name = Kamil-PC | Source = Service Control Manager | ID = 7011 Description = Error - 2010-04-21 10:07:10 | Computer Name = Kamil-PC | Source = Service Control Manager | ID = 7011 Description = Error - 2010-04-21 10:07:16 | Computer Name = Kamil-PC | Source = Service Control Manager | ID = 7031 Description = Error - 2010-04-24 20:37:58 | Computer Name = Kamil-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2010-04-24 20:37:58 | Computer Name = Kamil-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2010-04-24 20:46:42 | Computer Name = Kamil-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2010-04-24 20:46:42 | Computer Name = Kamil-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2010-04-25 07:23:04 | Computer Name = Kamil-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2010-04-25 07:23:04 | Computer Name = Kamil-PC | Source = Service Control Manager | ID = 7000 Description = < End of report > Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 20 Września 2010 Zgłoś Opublikowano 20 Września 2010 nikt nie pomoze? probowalem i kombinowalem i dalej sa problemy z uruchamianiem aplikacji z autostartu jak komp jest wpiedy do sieci. jak wtyczka jest odpieta to aplikacje startuja po ok 20 min i mozna normalnie pracowac. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
ULLISSES Opublikowano 20 Września 2010 Zgłoś Opublikowano 20 Września 2010 1. Wywal Nortona i wszelkie zamulacze systemu. 2. Przejedź MBAM + Spybot S&D. 3. Przejedź kompa przy pomocy Avira i/lub AVG. 4. Odpal program Autoruns (patrz: Google), zaznacz "Hide microsoft and Windows Entries" i pokaż listę. Podejrzane pliki bez podpisów możesz usunąć. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 20 Września 2010 Zgłoś Opublikowano 20 Września 2010 "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" "" + "CTxfiHlp" "CTXfiHlp MFC Application" "Creative Technology Ltd" "c:\windows\system32\ctxfihlp.exe" + "EzPrint" "Lexmark Fast Pics Application" "Lexmark International Inc." "c:\program files\lexmark 7600 series\ezprint.exe" + "lxdwmon.exe" "Printer Device Monitor" "" "c:\program files\lexmark 7600 series\lxdwmon.exe" "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" "" "" "" + "Sidebar" "Pasek boczny systemu Windows" "Microsoft Corporation" "c:\program files\windows sidebar\sidebar.exe" "HKLM\SOFTWARE\Classes\Protocols\Filter" "" "" "" + "text/xml" "Microsoft Office XML MIME Filter" "Microsoft Corporation" "c:\program files\common files\microsoft shared\office12\msoxmlmf.dll" "HKLM\SOFTWARE\Classes\Protocols\Handler" "" "" "" + "ms-help" "Microsoft® Help Data Services Module" "Microsoft Corporation" "c:\program files\common files\microsoft shared\help\hxds.dll" "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" "" "" "" + "Microsoft Windows Mail 7" "Poczta systemu Windows" "Microsoft Corporation" "c:\program files\windows mail\winmail.exe" "HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers" "" "" "" + "BUContextMenu" "Backup Shell" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\bushell.dll" + "Symantec.Norton.Antivirus.IEContextMenu" "Symantec Shared Component Shell Extension Module" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\navshext.dll" + "WinRAR" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" "" + "WinRAR" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Classes\Directory\Shellex\DragDropHandlers" "" "" "" + "WinRAR" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Classes\Directory\Shellex\CopyHookHandlers" "" "" "" + "Nokia" "Phone Browser" "Nokia" "c:\program files\nokia\nokia pc suite 7\phonebrowser.dll" "HKLM\Software\Classes\Folder\Shellex\ColumnHandlers" "" "" "" + "PDF Shell Extension" "PDF Shell Extension" "Adobe Systems, Inc." "c:\program files\common files\adobe\acrobat\activex\pdfshell.dll" "HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" "" + "BUContextMenu" "Backup Shell" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\bushell.dll" + "Symantec.Norton.Antivirus.IEContextMenu" "Symantec Shared Component Shell Extension Module" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\navshext.dll" + "WinRAR" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" "" + "NvCplDesktopContext" "" "NVIDIA Corporation" "c:\windows\system32\nvshext.dll" "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers" "" "" "" + "OverlayExcluded" "Backup Shell" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\bushell.dll" + "OverlayPending" "Backup Shell" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\bushell.dll" + "OverlayProtected" "Backup Shell" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\bushell.dll" "HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" "" "" "" + ".contact shell extension handler" "Microsoft ® Contacts DLL" "Microsoft Corporation" "c:\program files\common files\system\wab32.dll" + ".group shell extension handler" "Microsoft ® Contacts DLL" "Microsoft Corporation" "c:\program files\common files\system\wab32.dll" + "contact_wab_auto_file" "Microsoft ® Contacts DLL" "Microsoft Corporation" "c:\program files\common files\system\wab32.dll" + "For &People..." "Find People" "Microsoft Corporation" "c:\program files\windows mail\wabfind.dll" + "group_wab_auto_file" "Microsoft ® Contacts DLL" "Microsoft Corporation" "c:\program files\common files\system\wab32.dll" + "Microsoft Data Link" "OLE DB Core Services" "Microsoft Corporation" "c:\program files\common files\system\ole db\oledb32.dll" + "Microsoft Office HTML Icon Handler" "2007 Microsoft Office component" "Microsoft Corporation" "c:\program files\microsoft office\office12\msohevi.dll" + "Microsoft Office Metadata Handler" "Microsoft Office Shell Extension Handlers" "Microsoft Corporation" "c:\program files\common files\microsoft shared\office12\msoshext.dll" + "Microsoft Office Thumbnail Handler" "Microsoft Office Shell Extension Handlers" "Microsoft Corporation" "c:\program files\common files\microsoft shared\office12\msoshext.dll" + "Microsoft.ScannersAndCameras" "Panel sterowania Urządzenia do obrazowania" "Microsoft Corporation" "c:\program files\windows photo gallery\imagingdevices.exe" + "Nokia Phone Browser" "Phone Browser" "Nokia" "c:\program files\nokia\nokia pc suite 7\phonebrowser.dll" + "NvCpl DesktopContext Class" "NVIDIA Display Properties Extension" "NVIDIA Corporation" "c:\windows\system32\nvcpl.dll" + "NVIDIA Play On My TV Context Menu Extension" "" "NVIDIA Corporation" "c:\windows\system32\nvshext.dll" + "PhotoAcqDropTarget" "Pozyskiwanie fotografii" "Microsoft Corporation" "c:\program files\windows photo gallery\photoacq.dll" + "Play on my TV helper" "NVIDIA Display Properties Extension" "NVIDIA Corporation" "c:\windows\system32\nvcpl.dll" + "Tablet PC Input Panel" "Pasek wprowadzania Microsoft Tablet" "Microsoft Corporation" "c:\program files\common files\microsoft shared\ink\tipband.dll" + "Windows Contact Preview Handler" "Microsoft ® Contacts DLL" "Microsoft Corporation" "c:\program files\common files\system\wab32.dll" + "Windows Defender" "Windows Defender User Interface" "Microsoft Corporation" "c:\program files\windows defender\msascui.exe" + "Windows Defender IOfficeAntiVirus implementation" "IOfficeAntiVirus Module" "Microsoft Corporation" "c:\program files\windows defender\mpoav.dll" + "Windows gadget DropTarget" "Element docelowy paska bocznego" "Microsoft Corporation" "c:\program files\windows sidebar\sbdrop.dll" + "Windows Media Player" "Pomocniczy pasek zadań programu Windows Media Player" "Microsoft Corporation" "c:\program files\windows media player\wmpband.dll" + "Windows Photo Gallery Viewer Image Verbs" "Galeria fotografii systemu Windows" "Microsoft Corporation" "c:\program files\windows photo gallery\photoviewer.dll" + "Windows Photo Gallery Viewer Video Verbs" "Galeria fotografii systemu Windows" "Microsoft Corporation" "c:\program files\windows photo gallery\photoviewer.dll" + "Windows Sidebar Properties" "Pasek boczny systemu Windows" "Microsoft Corporation" "c:\program files\windows sidebar\sidebar.exe" + "WinRAR shell extension" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" "" + "Adobe PDF Link Helper" "Adobe PDF Helper for Internet Explorer" "Adobe Systems Incorporated" "c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll" + "Java Plug-In 2 SSV Helper" "Java Platform SE binary" "Sun Microsystems, Inc." "c:\program files\java\jre6\bin\jp2ssv.dll" + "Lexmark Printable Web" "" "" "c:\program files\lexmark printable web\bho.dll" + "Symantec Intrusion Prevention" "IPS Browser Helper DLL" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\ipsbho.dll" + "Symantec NCO BHO" "coIEPlugIn" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\coieplg.dll" "HKLM\Software\Microsoft\Internet Explorer\Toolbar" "" "" "" + "Norton Toolbar" "coIEPlugIn" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\coieplg.dll" "Task Scheduler" "" "" "" + "\Installation App Launcher" "" "" "" + "\Microsoft\Windows\Wired\GatherWiredInfo" "" "" "c:\windows\system32\gatherwiredinfo.vbs" + "\Microsoft\Windows\Wireless\GatherWirelessInfo" "" "" "c:\windows\system32\gatherwirelessinfo.vbs" + "\Symantec\Symantec Error Analyzer 4.2.0.12" "Symantec Error Reporting" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\symerr.exe" + "\Symantec\Symantec Error Processor 4.2.0.12" "Symantec Error Reporting" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\symerr.exe" "HKLM\System\CurrentControlSet\Services" "" "" "" + "Creative ALchemy AL6 Licensing Service" "Provides licensing services for Creative ALchemy." "Creative Labs" "c:\program files\common files\creative labs shared\service\al6licensing.exe" + "Creative Audio Engine Licensing Service" "Provides licensing services for Creative Audio Engine." "Creative Labs" "c:\program files\common files\creative labs shared\service\ctaelicensing.exe" + "CTAudSvcService" "Creative Audio Service" "Creative Technology Ltd" "c:\program files\creative\shared files\ctaudsvc.exe" + "gusvc" "gusvc" "Google" "c:\program files\google\common\google updater\googleupdaterservice.exe" + "lxdw_device" "Printer Communication System" " " "c:\windows\system32\lxdwcoms.exe" + "N360" "Norton 360" "Symantec Corporation" "c:\program files\norton 360\engine\4.2.0.12\ccsvchst.exe" + "nvsvc" "Provides system and desktop level support to the NVIDIA display driver" "NVIDIA Corporation" "c:\windows\system32\nvvsvc.exe" + "odserv" "Uruchom części Diagnostyki pakietu Microsoft Office." "Microsoft Corporation" "c:\program files\common files\microsoft shared\office12\odserv.exe" + "ose" "Zapisuje pliki instalacyjne używane przy aktualizacjach i naprawach. Jest niezbędny do pobierania aktualizacji Instalatora i zgłaszania raportów programu Watson o błędach." "Microsoft Corporation" "c:\program files\common files\microsoft shared\source engine\ose.exe" + "ServiceLayer" "ServiceLayer Module" "Nokia" "c:\program files\pc connectivity solution\servicelayer.exe" + "UleadBurningHelper" "ULCDRSvr" "Ulead Systems, Inc." "c:\program files\common files\ulead systems\dvd\ulcdrsvr.exe" + "WinDefend" "Skanuj komputer w poszukiwaniu niechcianego oprogramowania, zaplanuj skanowania i pobieraj najnowsze definicje niechcianego oprogramowania." "Microsoft Corporation" "c:\program files\windows defender\mpsvc.dll" + "WMPNetworkSvc" "Udostępnia biblioteki programu Windows Media Player innym odtwarzaczom i urządzeniom multimedialnym w sieci przy użyciu technologii Universal Plug and Play" "Microsoft Corporation" "c:\program files\windows media player\wmpnetwk.exe" "HKLM\System\CurrentControlSet\Services" "" "" "" + "AtcL001" "Attansic L1 Gigabit Ethernet 10/100/1000Base-T Adapter" "Attansic Technology corporation." "c:\windows\system32\drivers\atl01v32.sys" + "BHDrvx86" "SONAR Engine Driver" "Symantec Corporation" "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.1.0.32\definitions\bashdefs\20100901.003\bhdrvx86.sys" + "BrFiltLo" "Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltlo.sys" + "BrFiltUp" "Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltup.sys" + "BrUsbSer" "Brother USB Serial Driver" "Brother Industries Ltd." "c:\windows\system32\drivers\brusbser.sys" + "BTWUSB" "" "" "File not found: System32\Drivers\btwusb.sys" + "catchme" "" "" "File not found: C:\Users\Kamil\AppData\Local\Temp\catchme.sys" + "ccHP" "Common Client Hash Provider Driver" "Symantec Corporation" "c:\windows\system32\drivers\n360\0402000.00c\cchpx86.sys" + "CT20XUT" "Creative 20X Utility Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\ct20xut.sys" + "CT20XUT.SYS" "Creative 20X Utility Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\ct20xut.sys" + "ctac32k" "Creative AC3 SW Decoder Device Driver (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ctac32k.sys" + "ctaud2k" "Creative WDM Audio Device Driver" "Creative Technology Ltd" "c:\windows\system32\drivers\ctaud2k.sys" + "ctdvda2k" "Creative DVD-Audio Device Driver (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ctdvda2k.sys" + "CTEXFIFX" "Creative XFi Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\ctexfifx.sys" + "CTEXFIFX.SYS" "Creative XFi Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\ctexfifx.sys" + "CTHWIUT" "Creative Utility Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\cthwiut.sys" + "CTHWIUT.SYS" "Creative Utility Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\cthwiut.sys" + "ctprxy2k" "Creative Proxy Device Driver (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ctprxy2k.sys" + "ctsfm2k" "SoundFont® Manager (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ctsfm2k.sys" + "CX23880" "CX2388x Video Capture Driver" "Leadtek Research Inc." "c:\windows\system32\drivers\cx88vid.sys" + "CXTUNE" "CxTuner, Tuner Driver" "Conexant Systems, Inc." "c:\windows\system32\drivers\cx88tune_ibv32.sys" + "DwProt" "Dr.Web Protection for Windows" "Doctor Web, Ltd." "c:\windows\system32\drivers\dwprot.sys" + "E1G60" "Intel® PRO/1000 Adapter NDIS 6 deserialized driver" "Intel Corporation" "c:\windows\system32\drivers\e1g60i32.sys" + "eeCtrl" "Symantec Eraser Control Driver" "Symantec Corporation" "c:\program files\common files\symantec shared\eengine\eectrl.sys" + "emupia" "E-mu Plug-in Architecture Driver (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\emupia2k.sys" + "epmntdrv" "" "" "c:\windows\system32\epmntdrv.sys" + "EraserUtilRebootDrv" "Symantec Eraser Utility Driver" "Symantec Corporation" "c:\program files\common files\symantec shared\eengine\eraserutilrebootdrv.sys" + "EuGdiDrv" "" "" "c:\windows\system32\eugdidrv.sys" + "GEARAspiWDM" "CD DVD Filter" "GEAR Software Inc." "c:\windows\system32\drivers\gearaspiwdm.sys" + "grmnusb" "grmnusb.sys" "GARMIN Corp." "c:\windows\system32\drivers\grmnusb.sys" + "ha20x2k" "Creative 20X HAL (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ha20x2k.sys" + "IDSVix86" "Symantec Intrusion Prevention Driver" "Symantec Corporation" "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.1.0.32\definitions\ipsdefs\20100917.001\idsvix86.sys" + "IpInIp" "IP in IP Tunnel Driver" "" "File not found: system32\DRIVERS\ipinip.sys" + "JGOGO" "SCSI Port upper filter driver" "JMicron " "c:\windows\system32\drivers\jgogo.sys" + "JRAID" "JMicron JMB36X RAID Driver" "JMicron Technology Corp." "c:\windows\system32\drivers\jraid.sys" + "MTsensor" "ATK0110 ACPI Utility" "" "c:\windows\system32\drivers\asacpi.sys" + "NAVENG" "AV Engine" "Symantec Corporation" "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.1.0.32\definitions\virusdefs\20100919.003\naveng.sys" + "NAVEX15" "AV Engine" "Symantec Corporation" "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.1.0.32\definitions\virusdefs\20100919.003\navex15.sys" + "nmwcd" "Nokia USB Phone Bus Driver" "Nokia" "c:\windows\system32\drivers\ccdcmb.sys" + "nmwcdc" "Nokia USB Phone Bus Driver" "Nokia" "c:\windows\system32\drivers\ccdcmbo.sys" + "nvlddmkm" "NVIDIA Windows Kernel Mode Driver, Version 197.45 " "NVIDIA Corporation" "c:\windows\system32\drivers\nvlddmkm.sys" + "NwlnkFlt" "IPX Traffic Filter Driver" "" "File not found: system32\DRIVERS\nwlnkflt.sys" + "NwlnkFwd" "IPX Traffic Forwarder Driver" "" "File not found: system32\DRIVERS\nwlnkfwd.sys" + "ossrv" "Creative OS Services Driver (WDM)" "Creative Technology Ltd." "c:\windows\system32\drivers\ctoss2k.sys" + "pccsmcfd" "PCCS Mode Change Filter Driver" "Nokia" "c:\windows\system32\drivers\pccsmcfd.sys" + "secdrv" "Macrovision SECURITY Driver" "Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K." "c:\windows\system32\drivers\secdrv.sys" + "SRTSP" "Symantec AutoProtect" "Symantec Corporation" "c:\windows\system32\drivers\n360\0402000.00c\srtsp.sys" + "SRTSPX" "Symantec AutoProtect" "Symantec Corporation" "c:\windows\system32\drivers\n360\0402000.00c\srtspx.sys" + "SymDS" "Symantec Data Store" "Symantec Corporation" "c:\windows\system32\drivers\n360\0402000.00c\symds.sys" + "SymEFA" "Symantec Extended File Attributes" "Symantec Corporation" "c:\windows\system32\drivers\n360\0402000.00c\symefa.sys" + "SymEvent" "Symantec Event Library" "Symantec Corporation" "c:\windows\system32\drivers\symevent.sys" + "SymIRON" "Iron Driver" "Symantec Corporation" "c:\windows\system32\drivers\n360\0402000.00c\ironx86.sys" + "SYMTDIv" "Network Dispatch Driver" "Symantec Corporation" "c:\windows\system32\drivers\n360\0402000.00c\symtdiv.sys" + "upperdev" "Filter Driver for Nokia USB Phone Bus Driver" "Nokia" "c:\windows\system32\drivers\usbser_lowerflt.sys" + "WFLR6654" "WinFast EagleXT Driver" "Leadtek Research Inc." "c:\windows\system32\drivers\wfeaglxt.sys" "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" "" + "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\system32\l3codeca.acm" + "msacm.vorbis" "" "" "File not found: vorbis.acm" + "vidc.cvid" "Koder-dekoder Cinepak®" "Radius Inc." "c:\windows\system32\iccvid.dll" + "VIDC.FFDS" "" "" "c:\windows\system32\ff_vfw.dll" "HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" "" + "9x8Resize" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Allocator Fix" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "ArcSoft AAC Decoder" "ArcSoft AAC Decoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\aacdecode.ax" + "ArcSoft AAC Encoder" "AACEncoder" "ArcSoft" "c:\program files\common files\arcsoft\mpeg engine\aacencoder.ax" + "ArcSoft AC3 Encoder" "Mpeg2AudioEncoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\ac3encoderfilter.ax" + "ArcSoft Audio Decoder" "ArcSoft Audio Decoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\asaudio.ax" + "ArcSoft Deinterlace" "" "" "File not found: C:\PROGRA~1\COMMON~1\ArcSoft\MPEGEN~1\deinterlace.ax" + "Arcsoft LPCM Decoder" "LPCM Decoder" "ArcSoft" "c:\program files\common files\arcsoft\mpeg engine\lpcmdec.ax" + "ArcSoft MP4 Splitter" "ArcSoft MP4 Splitter Filter" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\mp4splitter.ax" + "ArcSoft MP4Muxer" "ArcSoft MP4 Muxer Filter " "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\mp4muxer.ax" + "ArcSoft Mpeg-1 Encoder Filter" "" "ArcSoft" "c:\program files\common files\arcsoft\mpeg engine\asmpeg1encoder.ax" + "ArcSoft Mpeg-2 Encoder Filter" "" "ArcSoft" "c:\program files\common files\arcsoft\mpeg engine\asmpeg2encoder.ax" + "Arcsoft Mpeg2Audio Encoder" "Mpeg2AudioEncoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\mpeg2audioencoder.ax" + "ArcSoft MPEG4 Encoder" "ArcSoft MPEG-4 Encoder Filter" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\ump4encoder.ax" + "ArcSoft Realtime Capture Encoder Filter" "Arc Real time Capture Encoder Filter" "Arcsoft" "c:\program files\common files\arcsoft\mpeg engine\asrealtimempeg1encoder.ax" + "ArcSoft Realtime Capture Encoder Filter" "Arc Real time Capture Encoder Filter" "Arcsoft" "c:\program files\common files\arcsoft\mpeg engine\asrealtimempeg2encoder.ax" + "ArcSoft TS Stream" "MPGDemux Filter" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\arcdemux.ax" + "ArcSoft Video Decoder" "ArcSoft Video Decoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\asvid.ax" + "ArcSoft Video Encoder" "ArcSoft Encoder Filter" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\arcvencoder.ax" + "Bitmap" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "BPM Metadata" "Creative BPM Metadata Filter" "Creative Technology Ltd." "c:\program files\creative\shared files\metabpmu.ax" + "Capture ASF Writer" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Creative AC3 Source Filter" "Creative AC3 Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\ac3srcu.ax" + "Creative Audio Gain Filter" "Audio Gain Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\audgain.ax" + "Creative CDDA Source Filter" "CDDA Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\cdda.ax" + "Creative File Reader Filter" "Creative File Reader Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\filreadu.ax" + "Creative Flac Source Filter" "Creative FLAC Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\flacsrcu.ax" + "Creative Internet Source Filter" "Creative Internet Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\inetsrcu.ax" + "Creative LiveRecording Filter_SxS" "Live Recording Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\liverecu.ax" + "Creative MLP Source Filter" "Creative MLP Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\mlpsrcu.ax" + "Creative NVF Filter" "Creative Nomad Voice File Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\nvfsrcu.ax" + "Creative Ogg Source Filter" "Creative Ogg Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\oggsrcu.ax" + "Creative PCM Raw Writer" "Creative Raw Writer" "Creative Technology Ltd" "c:\program files\creative\shared files\rawwritu.ax" + "Creative Recording Wav_Asio Filter" "Audio Recording Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\audiorec.ax" + "Creative Wave Writer" "Wave Writer" "Creative Technology Ltd" "c:\program files\creative\shared files\wavwrite.ax" + "Creative WMA Source Filter" "Creative WMA Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\wmasrc.ax" + "Creative WMA Writer" "WMA Writer" "Creative Technology Ltd" "c:\program files\creative\shared files\wmawrite.ax" + "CT CMSS3 filter" "Sample" "Creative Technology Ltd" "c:\program files\creative\shared files\cmss3.ax" + "CT HPVirtualizer filter" "Creative Headphone Virtualizer Filter" "Creative Technology, Ltd." "c:\program files\creative\shared files\virtual.ax" + "CT Karaoke filter" "Creative Karaoke Filter" "Creative Technology Ltd." "c:\program files\creative\shared files\karaoke.ax" + "CT PDP filter" "Creative Crystalizer Filter" "Creative Technology, Ltd." "c:\program files\creative\shared files\pdp.ax" + "CT SmartVolumeManagement filter" "Creative Compressor Plugin" "Creative Technology Ltd." "c:\program files\creative\shared files\dscompr.ax" + "CT Time-Scaling filter" "Sample" "Creative Technology Ltd." "c:\program files\creative\shared files\timescal.ax" + "CT Upsampler filter" "Sample" "Creative Technology Ltd" "c:\program files\creative\shared files\upsample.ax" + "DirectVobSub" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "Gabest" "c:\program files\combined community codec pack\filters\vsfilter.dll" + "DirectVobSub (auto-loading version)" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "Gabest" "c:\program files\combined community codec pack\filters\vsfilter.dll" + "Emuzed AAC/AAC+ Decoder TFilter" "Emuzed AAC/AAC+ Decoder Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\emzaacdecfilter.dll" + "Emuzed AMR/3GPP/MP4/MP3 Multiplexer-Filter" "Emuzed MP4/3GP2/AMR/QCP Multiplexer/Sink Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\ezdmp4muxfilter.dll" + "Emuzed AMR/QCP/3GPP/MP4/3G2 Source Filter" "Emuzed MP4/3GP2/AMR/QCP Source Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\emzmp4source.dll" + "Emuzed H264 Video Decoder-Filter" "Emuzed H.264 Video Transform Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\ezdh264dectfilter.dll" + "Emuzed MP3 Source/Decoder Filter" "Emuzed MP3 Source/Decoder Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\emzmp3sourcefilter.dll" + "Emuzed MP4SP/H263 Video Decoder-Filter" "Emuzed MP4SP/H.263 Video Transform Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\emzdecmp4_h263.dll" + "ffdshow Audio Decoder" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow Audio Processor" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow DXVA Video Decoder" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow raw video filter" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow subtitles filter" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow Video Decoder" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "Frame Eater" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Haali Matroska Muxer" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "Haali Media Splitter" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "Haali Media Splitter (AR)" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "Haali Simple Media Splitter" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "Haali Video Renderer" "" "" "c:\program files\combined community codec pack\filters\haali\dxr.dll" + "Haali Video Sink" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "MPC - FLV Source (Gabest)" "FLV Splitter" "Gabest" "c:\program files\combined community codec pack\filters\flvsplitter.ax" + "MPC - FLV Splitter (Gabest)" "FLV Splitter" "Gabest" "c:\program files\combined community codec pack\filters\flvsplitter.ax" + "MPC - MPEG-2 Video Decoder (Gabest)" "MPEG-2 Decoder Filter for DirectShow" "Gabest" "c:\program files\combined community codec pack\filters\mpeg2decfilter.ax" + "MPC - RealAudio Decoder" "RealMedia Splitter" "MPC-HC Team" "c:\program files\real alternative\realmediasplitter.ax" + "MPC - RealMedia Source" "RealMedia Splitter" "MPC-HC Team" "c:\program files\real alternative\realmediasplitter.ax" + "MPC - RealMedia Splitter" "RealMedia Splitter" "MPC-HC Team" "c:\program files\real alternative\realmediasplitter.ax" + "MPC - RealVideo Decoder" "RealMedia Splitter" "MPC-HC Team" "c:\program files\real alternative\realmediasplitter.ax" + "Multiple File Output" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Noise Reduction" "Creative Noise Reduction Filter" "Creative Technology Ltd." "c:\program files\creative\shared files\noisredu.ax" + "Proxy Sink" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Proxy Source" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Record Queue" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "ShotDetect" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Stetch" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "SVM Metadata" "Creative SVM Metadata Filter" "Creative Technology Ltd." "c:\program files\creative\shared files\metasvmu.ax" + "WavPack Audio Decoder" "WavPack Audio DirectShow Decoder" "-" "c:\program files\combined community codec pack\filters\wavpackdsdecoder.ax" + "WavPack Audio Splitter" "WavPack Audio DirectShow Splitter" "-" "c:\program files\combined community codec pack\filters\wavpackdssplitter.ax" + "WinFast Subtitle Decoder" "" "" "File not found: C:\Program Files\WinFast\WFDTV\DVBSbtle.ax" + "WinFast TeleText Decoder" "" "" "File not found: C:\Program Files\WinFast\WFDTV\TTXDecoder.dll" + "WM VIH2 Fix" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Audio Analyzer" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Black Frame Generator" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT DV Extract Filter" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT FormatConversion" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Import Filter" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Interlacer" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Log Filter" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT MuxDeMux Filter" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Sample Info Filter" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Switch Filter" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Virtual Renderer" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Virtual Source" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Volume" "Windows Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" "HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors" "" "" "" + "7600 Series Port" "Printer Communication System" " " "c:\windows\system32\lxdwlmpm.dll" + "SUGS2 Langmon" "Language Monitor for Status Monitor" "" "c:\windows\system32\sugs2l3.dll" "C:\Users\Kamil\AppData\Local\Microsoft\Windows Sidebar\Settings.ini" "" "" "" + "" "" "" "C:\Users\Kamil\AppData\Local\Temp\chameleon_netbars_int.gadget.~0000" + "Kalendarz" "PrzeglÄ…daj dni kalendarza." "Microsoft Corporation" "C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\pl-PL\Gadget.xml" + "Miernik CPU" "Zobacz bieĹĽÄ…ce uĹĽycie procesora CPU i pamiÄ™ci systemowej (RAM) komputera." "Microsoft Corporation" "C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\pl-PL\Gadget.xml" + "Notatki" "Zapisuj pomysĹ‚y, notatki i przypomnienia Ĺ‚atwo i szybko." "Microsoft Corporation" "C:\Program Files\Windows Sidebar\Gadgets\Notes.Gadget\pl-PL\Gadget.xml" + "Pogoda" "Obserwuj pogodę w różnych miejscach na świecie." "Microsoft Corporation" "C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\pl-PL\Gadget.xml" Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
ULLISSES Opublikowano 20 Września 2010 Zgłoś Opublikowano 20 Września 2010 Nie wiem czemu, ale strasznie po oczach wali mi Norton - cały pakiet, który pakuje się gdzie tylko może. Odinstaluj całość tego wynalazku, wyczyść kompa przy pomocy CCleaner i pokaż jeszcze raz loga. Jak bym miał zgadywać, to backup shell jest winne. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 20 Września 2010 Zgłoś Opublikowano 20 Września 2010 (edytowane) po wywaleniu nortona i restarcie sytuacja bez zmian "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" "" + "CTxfiHlp" "CTXfiHlp MFC Application" "Creative Technology Ltd" "c:\windows\system32\ctxfihlp.exe" + "EzPrint" "Lexmark Fast Pics Application" "Lexmark International Inc." "c:\program files\lexmark 7600 series\ezprint.exe" + "lxdwmon.exe" "Printer Device Monitor" "" "c:\program files\lexmark 7600 series\lxdwmon.exe" "HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers" "" "" "" + "WinRAR" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" "" + "MBAMShlExt" "Malwarebytes' Anti-Malware" "Malwarebytes Corporation" "c:\program files\malwarebytes' anti-malware\mbamext.dll" "HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" "" + "WinRAR" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Classes\Directory\Shellex\DragDropHandlers" "" "" "" + "WinRAR" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Classes\Directory\Shellex\CopyHookHandlers" "" "" "" + "Nokia" "Phone Browser" "Nokia" "c:\program files\nokia\nokia pc suite 7\phonebrowser.dll" "HKLM\Software\Classes\Folder\Shellex\ColumnHandlers" "" "" "" + "PDF Shell Extension" "PDF Shell Extension" "Adobe Systems, Inc." "c:\program files\common files\adobe\acrobat\activex\pdfshell.dll" "HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" "" + "MBAMShlExt" "Malwarebytes' Anti-Malware" "Malwarebytes Corporation" "c:\program files\malwarebytes' anti-malware\mbamext.dll" + "WinRAR" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" "" + "NvCplDesktopContext" "" "NVIDIA Corporation" "c:\windows\system32\nvshext.dll" "HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" "" "" "" + "Nokia Phone Browser" "Phone Browser" "Nokia" "c:\program files\nokia\nokia pc suite 7\phonebrowser.dll" + "NvCpl DesktopContext Class" "NVIDIA Display Properties Extension" "NVIDIA Corporation" "c:\windows\system32\nvcpl.dll" + "NVIDIA Play On My TV Context Menu Extension" "" "NVIDIA Corporation" "c:\windows\system32\nvshext.dll" + "Play on my TV helper" "NVIDIA Display Properties Extension" "NVIDIA Corporation" "c:\windows\system32\nvcpl.dll" + "WinRAR shell extension" "Rozszerzenie powłoki" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" "" + "Adobe PDF Link Helper" "Adobe PDF Helper for Internet Explorer" "Adobe Systems Incorporated" "c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll" + "Java Plug-In 2 SSV Helper" "Java Platform SE binary" "Sun Microsystems, Inc." "c:\program files\java\jre6\bin\jp2ssv.dll" + "Lexmark Printable Web" "" "" "c:\program files\lexmark printable web\bho.dll" "Task Scheduler" "" "" "" + "\Installation App Launcher" "" "" "" + "\Microsoft\Windows\Wired\GatherWiredInfo" "" "" "c:\windows\system32\gatherwiredinfo.vbs" + "\Microsoft\Windows\Wireless\GatherWirelessInfo" "" "" "c:\windows\system32\gatherwirelessinfo.vbs" "HKLM\System\CurrentControlSet\Services" "" "" "" + "Creative ALchemy AL6 Licensing Service" "Provides licensing services for Creative ALchemy." "Creative Labs" "c:\program files\common files\creative labs shared\service\al6licensing.exe" + "Creative Audio Engine Licensing Service" "Provides licensing services for Creative Audio Engine." "Creative Labs" "c:\program files\common files\creative labs shared\service\ctaelicensing.exe" + "CTAudSvcService" "Creative Audio Service" "Creative Technology Ltd" "c:\program files\creative\shared files\ctaudsvc.exe" + "gusvc" "gusvc" "Google" "c:\program files\google\common\google updater\googleupdaterservice.exe" + "lxdw_device" "Printer Communication System" " " "c:\windows\system32\lxdwcoms.exe" + "nvsvc" "Provides system and desktop level support to the NVIDIA display driver" "NVIDIA Corporation" "c:\windows\system32\nvvsvc.exe" + "ServiceLayer" "ServiceLayer Module" "Nokia" "c:\program files\pc connectivity solution\servicelayer.exe" + "UleadBurningHelper" "ULCDRSvr" "Ulead Systems, Inc." "c:\program files\common files\ulead systems\dvd\ulcdrsvr.exe" "HKLM\System\CurrentControlSet\Services" "" "" "" + "AtcL001" "Attansic L1 Gigabit Ethernet 10/100/1000Base-T Adapter" "Attansic Technology corporation." "c:\windows\system32\drivers\atl01v32.sys" + "BrFiltLo" "Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltlo.sys" + "BrFiltUp" "Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltup.sys" + "BrUsbSer" "Brother USB Serial Driver" "Brother Industries Ltd." "c:\windows\system32\drivers\brusbser.sys" + "BTWUSB" "" "" "File not found: System32\Drivers\btwusb.sys" + "catchme" "" "" "File not found: C:\Users\Kamil\AppData\Local\Temp\catchme.sys" + "CT20XUT" "Creative 20X Utility Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\ct20xut.sys" + "CT20XUT.SYS" "Creative 20X Utility Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\ct20xut.sys" + "ctac32k" "Creative AC3 SW Decoder Device Driver (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ctac32k.sys" + "ctaud2k" "Creative WDM Audio Device Driver" "Creative Technology Ltd" "c:\windows\system32\drivers\ctaud2k.sys" + "ctdvda2k" "Creative DVD-Audio Device Driver (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ctdvda2k.sys" + "CTEXFIFX" "Creative XFi Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\ctexfifx.sys" + "CTEXFIFX.SYS" "Creative XFi Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\ctexfifx.sys" + "CTHWIUT" "Creative Utility Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\cthwiut.sys" + "CTHWIUT.SYS" "Creative Utility Effects" "Creative Technology Ltd." "c:\windows\system32\drivers\cthwiut.sys" + "ctprxy2k" "Creative Proxy Device Driver (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ctprxy2k.sys" + "ctsfm2k" "SoundFont® Manager (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ctsfm2k.sys" + "CX23880" "CX2388x Video Capture Driver" "Leadtek Research Inc." "c:\windows\system32\drivers\cx88vid.sys" + "CXTUNE" "CxTuner, Tuner Driver" "Conexant Systems, Inc." "c:\windows\system32\drivers\cx88tune_ibv32.sys" + "DwProt" "Dr.Web Protection for Windows" "Doctor Web, Ltd." "c:\windows\system32\drivers\dwprot.sys" + "E1G60" "Intel® PRO/1000 Adapter NDIS 6 deserialized driver" "Intel Corporation" "c:\windows\system32\drivers\e1g60i32.sys" + "emupia" "E-mu Plug-in Architecture Driver (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\emupia2k.sys" + "epmntdrv" "" "" "c:\windows\system32\epmntdrv.sys" + "EuGdiDrv" "" "" "c:\windows\system32\eugdidrv.sys" + "grmnusb" "grmnusb.sys" "GARMIN Corp." "c:\windows\system32\drivers\grmnusb.sys" + "ha20x2k" "Creative 20X HAL (WDM)" "Creative Technology Ltd" "c:\windows\system32\drivers\ha20x2k.sys" + "IpInIp" "IP in IP Tunnel Driver" "" "File not found: system32\DRIVERS\ipinip.sys" + "JGOGO" "SCSI Port upper filter driver" "JMicron " "c:\windows\system32\drivers\jgogo.sys" + "JRAID" "JMicron JMB36X RAID Driver" "JMicron Technology Corp." "c:\windows\system32\drivers\jraid.sys" + "MTsensor" "ATK0110 ACPI Utility" "" "c:\windows\system32\drivers\asacpi.sys" + "nmwcd" "Nokia USB Phone Bus Driver" "Nokia" "c:\windows\system32\drivers\ccdcmb.sys" + "nmwcdc" "Nokia USB Phone Bus Driver" "Nokia" "c:\windows\system32\drivers\ccdcmbo.sys" + "nvlddmkm" "NVIDIA Windows Kernel Mode Driver, Version 197.45 " "NVIDIA Corporation" "c:\windows\system32\drivers\nvlddmkm.sys" + "NwlnkFlt" "IPX Traffic Filter Driver" "" "File not found: system32\DRIVERS\nwlnkflt.sys" + "NwlnkFwd" "IPX Traffic Forwarder Driver" "" "File not found: system32\DRIVERS\nwlnkfwd.sys" + "ossrv" "Creative OS Services Driver (WDM)" "Creative Technology Ltd." "c:\windows\system32\drivers\ctoss2k.sys" + "pccsmcfd" "PCCS Mode Change Filter Driver" "Nokia" "c:\windows\system32\drivers\pccsmcfd.sys" + "secdrv" "Macrovision SECURITY Driver" "Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K." "c:\windows\system32\drivers\secdrv.sys" + "upperdev" "Filter Driver for Nokia USB Phone Bus Driver" "Nokia" "c:\windows\system32\drivers\usbser_lowerflt.sys" + "WFLR6654" "WinFast EagleXT Driver" "Leadtek Research Inc." "c:\windows\system32\drivers\wfeaglxt.sys" "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" "" + "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\system32\l3codeca.acm" + "msacm.vorbis" "" "" "File not found: vorbis.acm" + "vidc.cvid" "Koder-dekoder Cinepak®" "Radius Inc." "c:\windows\system32\iccvid.dll" + "VIDC.FFDS" "" "" "c:\windows\system32\ff_vfw.dll" "HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" "" + "ArcSoft AAC Decoder" "ArcSoft AAC Decoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\aacdecode.ax" + "ArcSoft AAC Encoder" "AACEncoder" "ArcSoft" "c:\program files\common files\arcsoft\mpeg engine\aacencoder.ax" + "ArcSoft AC3 Encoder" "Mpeg2AudioEncoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\ac3encoderfilter.ax" + "ArcSoft Audio Decoder" "ArcSoft Audio Decoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\asaudio.ax" + "Arcsoft LPCM Decoder" "LPCM Decoder" "ArcSoft" "c:\program files\common files\arcsoft\mpeg engine\lpcmdec.ax" + "ArcSoft MP4 Splitter" "ArcSoft MP4 Splitter Filter" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\mp4splitter.ax" + "ArcSoft MP4Muxer" "ArcSoft MP4 Muxer Filter " "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\mp4muxer.ax" + "ArcSoft Mpeg-1 Encoder Filter" "" "ArcSoft" "c:\program files\common files\arcsoft\mpeg engine\asmpeg1encoder.ax" + "ArcSoft Mpeg-2 Encoder Filter" "" "ArcSoft" "c:\program files\common files\arcsoft\mpeg engine\asmpeg2encoder.ax" + "Arcsoft Mpeg2Audio Encoder" "Mpeg2AudioEncoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\mpeg2audioencoder.ax" + "ArcSoft MPEG4 Encoder" "ArcSoft MPEG-4 Encoder Filter" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\ump4encoder.ax" + "ArcSoft Realtime Capture Encoder Filter" "Arc Real time Capture Encoder Filter" "Arcsoft" "c:\program files\common files\arcsoft\mpeg engine\asrealtimempeg1encoder.ax" + "ArcSoft Realtime Capture Encoder Filter" "Arc Real time Capture Encoder Filter" "Arcsoft" "c:\program files\common files\arcsoft\mpeg engine\asrealtimempeg2encoder.ax" + "ArcSoft TS Stream" "MPGDemux Filter" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\arcdemux.ax" + "ArcSoft Video Decoder" "ArcSoft Video Decoder" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\asvid.ax" + "ArcSoft Video Encoder" "ArcSoft Encoder Filter" "ArcSoft Inc." "c:\program files\common files\arcsoft\mpeg engine\arcvencoder.ax" + "BPM Metadata" "Creative BPM Metadata Filter" "Creative Technology Ltd." "c:\program files\creative\shared files\metabpmu.ax" + "Creative AC3 Source Filter" "Creative AC3 Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\ac3srcu.ax" + "Creative Audio Gain Filter" "Audio Gain Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\audgain.ax" + "Creative CDDA Source Filter" "CDDA Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\cdda.ax" + "Creative File Reader Filter" "Creative File Reader Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\filreadu.ax" + "Creative Flac Source Filter" "Creative FLAC Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\flacsrcu.ax" + "Creative Internet Source Filter" "Creative Internet Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\inetsrcu.ax" + "Creative LiveRecording Filter_SxS" "Live Recording Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\liverecu.ax" + "Creative MLP Source Filter" "Creative MLP Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\mlpsrcu.ax" + "Creative NVF Filter" "Creative Nomad Voice File Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\nvfsrcu.ax" + "Creative Ogg Source Filter" "Creative Ogg Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\oggsrcu.ax" + "Creative PCM Raw Writer" "Creative Raw Writer" "Creative Technology Ltd" "c:\program files\creative\shared files\rawwritu.ax" + "Creative Recording Wav_Asio Filter" "Audio Recording Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\audiorec.ax" + "Creative Wave Writer" "Wave Writer" "Creative Technology Ltd" "c:\program files\creative\shared files\wavwrite.ax" + "Creative WMA Source Filter" "Creative WMA Source Filter" "Creative Technology Ltd" "c:\program files\creative\shared files\wmasrc.ax" + "Creative WMA Writer" "WMA Writer" "Creative Technology Ltd" "c:\program files\creative\shared files\wmawrite.ax" + "CT CMSS3 filter" "Sample" "Creative Technology Ltd" "c:\program files\creative\shared files\cmss3.ax" + "CT HPVirtualizer filter" "Creative Headphone Virtualizer Filter" "Creative Technology, Ltd." "c:\program files\creative\shared files\virtual.ax" + "CT Karaoke filter" "Creative Karaoke Filter" "Creative Technology Ltd." "c:\program files\creative\shared files\karaoke.ax" + "CT PDP filter" "Creative Crystalizer Filter" "Creative Technology, Ltd." "c:\program files\creative\shared files\pdp.ax" + "CT SmartVolumeManagement filter" "Creative Compressor Plugin" "Creative Technology Ltd." "c:\program files\creative\shared files\dscompr.ax" + "CT Time-Scaling filter" "Sample" "Creative Technology Ltd." "c:\program files\creative\shared files\timescal.ax" + "CT Upsampler filter" "Sample" "Creative Technology Ltd" "c:\program files\creative\shared files\upsample.ax" + "DirectVobSub" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "Gabest" "c:\program files\combined community codec pack\filters\vsfilter.dll" + "DirectVobSub (auto-loading version)" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "Gabest" "c:\program files\combined community codec pack\filters\vsfilter.dll" + "Emuzed AAC/AAC+ Decoder TFilter" "Emuzed AAC/AAC+ Decoder Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\emzaacdecfilter.dll" + "Emuzed AMR/3GPP/MP4/MP3 Multiplexer-Filter" "Emuzed MP4/3GP2/AMR/QCP Multiplexer/Sink Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\ezdmp4muxfilter.dll" + "Emuzed AMR/QCP/3GPP/MP4/3G2 Source Filter" "Emuzed MP4/3GP2/AMR/QCP Source Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\emzmp4source.dll" + "Emuzed H264 Video Decoder-Filter" "Emuzed H.264 Video Transform Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\ezdh264dectfilter.dll" + "Emuzed MP3 Source/Decoder Filter" "Emuzed MP3 Source/Decoder Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\emzmp3sourcefilter.dll" + "Emuzed MP4SP/H263 Video Decoder-Filter" "Emuzed MP4SP/H.263 Video Transform Filter" "Emuzed Inc. " "c:\program files\common files\nokia\codecs\emzdecmp4_h263.dll" + "ffdshow Audio Decoder" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow Audio Processor" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow DXVA Video Decoder" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow raw video filter" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow subtitles filter" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "ffdshow Video Decoder" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files\ffdshow\ffdshow.ax" + "Haali Matroska Muxer" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "Haali Media Splitter" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "Haali Media Splitter (AR)" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "Haali Simple Media Splitter" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "Haali Video Renderer" "" "" "c:\program files\combined community codec pack\filters\haali\dxr.dll" + "Haali Video Sink" "Haali Media Splitter" "" "c:\program files\combined community codec pack\filters\haali\splitter.ax" + "MPC - FLV Source (Gabest)" "FLV Splitter" "Gabest" "c:\program files\combined community codec pack\filters\flvsplitter.ax" + "MPC - FLV Splitter (Gabest)" "FLV Splitter" "Gabest" "c:\program files\combined community codec pack\filters\flvsplitter.ax" + "MPC - MPEG-2 Video Decoder (Gabest)" "MPEG-2 Decoder Filter for DirectShow" "Gabest" "c:\program files\combined community codec pack\filters\mpeg2decfilter.ax" + "MPC - RealAudio Decoder" "RealMedia Splitter" "MPC-HC Team" "c:\program files\real alternative\realmediasplitter.ax" + "MPC - RealMedia Source" "RealMedia Splitter" "MPC-HC Team" "c:\program files\real alternative\realmediasplitter.ax" + "MPC - RealMedia Splitter" "RealMedia Splitter" "MPC-HC Team" "c:\program files\real alternative\realmediasplitter.ax" + "MPC - RealVideo Decoder" "RealMedia Splitter" "MPC-HC Team" "c:\program files\real alternative\realmediasplitter.ax" + "Noise Reduction" "Creative Noise Reduction Filter" "Creative Technology Ltd." "c:\program files\creative\shared files\noisredu.ax" + "SVM Metadata" "Creative SVM Metadata Filter" "Creative Technology Ltd." "c:\program files\creative\shared files\metasvmu.ax" + "WavPack Audio Decoder" "WavPack Audio DirectShow Decoder" "-" "c:\program files\combined community codec pack\filters\wavpackdsdecoder.ax" + "WavPack Audio Splitter" "WavPack Audio DirectShow Splitter" "-" "c:\program files\combined community codec pack\filters\wavpackdssplitter.ax" "HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors" "" "" "" + "7600 Series Port" "Printer Communication System" " " "c:\windows\system32\lxdwlmpm.dll" + "SUGS2 Langmon" "Language Monitor for Status Monitor" "" "c:\windows\system32\sugs2l3.dll" "C:\Users\Kamil\AppData\Local\Microsoft\Windows Sidebar\Settings.ini" "" "" "" + "" "" "" "C:\Users\Kamil\AppData\Local\Temp\chameleon_netbars_int.gadget.~0000" Edytowane 20 Września 2010 przez Niemiec Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
ULLISSES Opublikowano 20 Września 2010 Zgłoś Opublikowano 20 Września 2010 O! Nie wiem, jak mi to umknęło za pierwszym razem... + "\Microsoft\Windows\Wired\GatherWiredInfo" "" "" "c:\windows\system32\gatherwiredinfo.vbs" + "\Microsoft\Windows\Wireless\GatherWirelessInfo" "" "" "c:\windows\system32\gatherwirelessinfo.vbs" + "DwProt" "Dr.Web Protection for Windows" "Doctor Web, Ltd." "c:\windows\system32\drivers\dwprot.sys" I jeszcze "sugs2l3.dll" jest podejrzane. Użyłeś Avira i AVG? Usunęły coś? Tego poniżej nie powinno już być. Jak jest, to usuń ręcznie: [2010-08-20 21:29:33 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2010-08-20 21:29:33 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2010-08-20 21:29:33 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2010-08-20 21:28:32 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe [2010-07-27 23:57:27 | 000,122,104 | ---- | C] (Doctor Web, Ltd.) -- C:\Windows\System32\drivers\dwprot.sys [2010-08-20 21:29:33 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe [2010-08-20 21:29:33 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2010-08-20 21:29:33 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2010-08-20 21:29:33 | 000,077,312 | ---- | C] () -- C:\Windows\MBR.exe [2010-08-20 21:29:33 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe Potem przejedź CCleaner i daj nowy log z OTL. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 20 Września 2010 Zgłoś Opublikowano 20 Września 2010 (edytowane) chcialem usunac i nie moglem nawet w safe mode i poszukalem dla czego. gatherWirelessInfo.vbs - Security Warning Vulnerable vbs file! gatherWiredInfo.vbs - Security Warning Vulnerable vbs file! ten sugs2l3.dll wyglada, ze ma cos wspolnego z kombajnem lexmarka. pliki z dolnego cytatu wywalilem, zaraz dam loga z otl a avire lub avg puszcze na noc. otl OTL logfile created on: 2010-09-20 23:56:39 - Run 2 OTL by OldTimer - Version 3.2.10.0 Folder = C:\Users\Kamil\Desktop\vir Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18943) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 79,00% Memory free 7,00 Gb Paging File | 6,00 Gb Available in Paging File | 91,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 48,86 Gb Total Space | 28,18 Gb Free Space | 57,67% Space Free | Partition Type: NTFS Drive D: | 92,01 Gb Total Space | 82,92 Gb Free Space | 90,12% Space Free | Partition Type: NTFS Drive E: | 92,02 Gb Total Space | 27,12 Gb Free Space | 29,47% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KAMIL Current User Name: Kamil Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-08-21 00:07:07 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe PRC - [2010-06-30 14:52:22 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2009-09-24 08:50:10 | 003,520,256 | ---- | M] (Ghisler Software GmbH) -- C:\totalcmd\TOTALCMD.EXE PRC - [2009-06-04 01:55:16 | 000,025,600 | ---- | M] (Creative Technology Ltd) -- C:\Windows\System32\Ctxfihlp.exe PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-02-23 11:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe PRC - [2008-09-10 23:15:26 | 000,131,752 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 7600 Series\ezprint.exe PRC - [2008-09-10 23:15:24 | 000,676,520 | ---- | M] () -- C:\Program Files\Lexmark 7600 Series\lxdwmon.exe PRC - [2008-05-17 04:33:10 | 000,594,600 | ---- | M] ( ) -- C:\Windows\System32\lxdwcoms.exe ========== Modules (SafeList) ========== MOD - [2010-08-21 00:07:07 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe MOD - [2009-04-11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll MOD - [2008-01-19 09:33:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx ========== Win32 Services (SafeList) ========== SRV - [2010-02-26 20:23:23 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2010-02-26 19:24:59 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2010-01-26 13:41:08 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2009-02-23 11:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2008-05-17 04:33:10 | 000,594,600 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\System32\lxdwcoms.exe -- (lxdw_device) SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stop_Pending] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2004-12-13 04:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [File_System | Boot | Stopped] -- C:\Windows\System32\drivers\dwprot.sys -- (DwProt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Kamil\AppData\Local\Temp\catchme.sys -- (catchme) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\btwusb.sys -- (BTWUSB) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) DRV - [2010-04-03 22:55:32 | 011,573,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2010-01-21 15:53:16 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2010-01-20 17:53:06 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv) DRV - [2010-01-20 17:53:04 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009-12-30 12:30:48 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2009-12-30 12:30:48 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2009-06-04 03:48:12 | 001,177,624 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ha20x2k.sys -- (ha20x2k) DRV - [2009-06-04 03:48:00 | 000,095,768 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emupia2k.sys -- (emupia) DRV - [2009-06-04 03:47:50 | 000,158,744 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2009-06-04 03:47:42 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctprxy2k.sys -- (ctprxy2k) DRV - [2009-06-04 03:47:34 | 000,130,072 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctoss2k.sys -- (ossrv) DRV - [2009-06-04 03:47:24 | 000,347,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctdvda2k.sys -- (ctdvda2k) DRV - [2009-06-04 03:47:14 | 000,526,232 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV - [2009-06-04 03:47:06 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctac32k.sys -- (ctac32k) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTEXFIFX.sys -- (CTEXFIFX) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTHWIUT.sys -- (CTHWIUT) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CT20XUT.SYS -- (CT20XUT.SYS) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CT20XUT.sys -- (CT20XUT) DRV - [2008-12-25 08:56:42 | 000,433,792 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wfeaglxt.sys -- (WFLR6654) WinFast TV2000 XP Expert (FM1216MK3) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-01-19 08:14:59 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV - [2007-03-24 12:20:24 | 000,046,208 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\jraid.sys -- (JRAID) DRV - [2007-03-15 16:41:14 | 000,048,128 | ---- | M] (Attansic Technology corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atl01v32.sys -- (AtcL001) DRV - [2006-11-02 14:00:28 | 000,017,664 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88tune_IBV32.sys -- (CXTUNE) DRV - [2006-11-02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2006-11-02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2006-11-02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2006-11-02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2006-11-02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2006-11-02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2006-11-02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2006-11-02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2006-11-02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2006-11-02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2006-11-02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006-11-02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006-11-02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2006-11-02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2006-11-02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006-11-02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2006-11-02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2006-11-02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2) DRV - [2006-11-02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2006-11-02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2006-11-02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006-11-02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006-11-02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2006-11-02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006-11-02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2006-11-02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006-11-02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006-11-02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006-11-02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2006-11-02 11:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2006-11-02 11:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2006-11-02 11:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2006-11-02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006-11-02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006-11-02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006-11-02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006-11-02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006-11-02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006-11-02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006-11-02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel® DRV - [2006-10-18 23:44:48 | 000,007,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) DRV - [2006-02-07 20:52:58 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\JGOGO.sys -- (JGOGO) DRV - [2005-08-11 08:13:00 | 000,163,584 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88vid.sys -- (CX23880) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.3\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-09-09 20:57:52 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.3\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010-02-26 20:55:01 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions [2010-02-26 20:55:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} O1 HOSTS File: ([2010-08-20 21:36:04 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Lexmark Printable Web) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll () O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\System32\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark 7600 Series\ezprint.exe (Lexmark International Inc.) O4 - HKLM..\Run: [lxdwmon.exe] C:\Program Files\Lexmark 7600 Series\lxdwmon.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 88.156.63.9 82.139.8.7 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Kamil\AppData\Roaming\IrfanView\IrfanView_Wallpaper.bmp O24 - Desktop BackupWallPaper: C:\Users\Kamil\AppData\Roaming\IrfanView\IrfanView_Wallpaper.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010-09-20 19:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2010-09-20 19:16:48 | 003,427,248 | ---- | C] (Piriform Ltd) -- C:\Users\Kamil\Desktop\ccsetup235.exe [2010-09-20 19:09:06 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2010-09-20 19:09:05 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010-09-20 19:04:31 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\Autoruns [2010-09-12 22:14:15 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\CrashDumps [2010-09-12 20:38:40 | 000,000,000 | ---D | C] -- C:\Program Files\MaxPunkte 5 [2010-09-12 16:53:23 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\NVIDIA Corporation [2010-09-09 18:45:40 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\EurekaLog [2010-08-28 00:19:21 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe [2010-08-28 00:19:21 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll [2010-08-28 00:19:21 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll [2010-08-28 00:16:12 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll [2010-08-28 00:16:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2010-08-28 00:15:56 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2010-08-28 00:15:56 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2010-08-28 00:15:56 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2010-08-28 00:15:56 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2010-08-28 00:15:56 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2010-08-28 00:15:56 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2010-08-28 00:15:56 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2010-08-28 00:15:56 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2010-08-28 00:15:56 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2010-08-28 00:15:56 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2010-08-28 00:15:55 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2010-08-28 00:15:55 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2010-08-28 00:15:55 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2010-08-28 00:15:55 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2010-08-28 00:15:55 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2010-08-28 00:15:42 | 003,600,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2010-08-28 00:15:41 | 003,548,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2010-08-28 00:15:37 | 002,037,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2010-08-28 00:15:27 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll [2010-08-27 10:12:17 | 000,000,000 | ---D | C] -- C:\logs [2010-08-22 21:01:08 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2010-03-20 17:20:25 | 000,438,272 | ---- | C] ( ) -- C:\Windows\System32\LXDWhcp.dll [2010-03-20 17:20:25 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxdwinpa.dll [2010-03-20 17:20:24 | 001,069,056 | ---- | C] ( ) -- C:\Windows\System32\lxdwserv.dll [2010-03-20 17:20:24 | 000,851,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwusb1.dll [2010-03-20 17:20:24 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwiesc.dll [2010-03-20 17:20:23 | 000,651,264 | ---- | C] ( ) -- C:\Windows\System32\lxdwpmui.dll [2010-03-20 17:20:23 | 000,577,536 | ---- | C] ( ) -- C:\Windows\System32\lxdwlmpm.dll [2010-03-20 17:20:22 | 000,679,936 | ---- | C] ( ) -- C:\Windows\System32\lxdwhbn3.dll [2010-03-20 17:20:17 | 000,765,952 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomc.dll [2010-03-20 17:20:17 | 000,376,832 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomm.dll [2009-06-04 01:57:38 | 000,060,928 | ---- | C] ( ) -- C:\Windows\System32\a3d.dll ========== Files - Modified Within 30 Days ========== [2010-09-20 23:52:04 | 000,079,437 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010-09-20 23:52:04 | 000,079,437 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010-09-20 23:51:54 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-09-20 23:51:54 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-09-20 23:51:52 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-09-20 23:51:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-09-20 23:51:06 | 002,621,440 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT [2010-09-20 23:51:05 | 000,524,288 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010-09-20 23:51:05 | 000,065,536 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010-09-20 23:45:26 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000005-00000000-00000002-00001102-00000005-00311102}.rfx [2010-09-20 23:45:26 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXState-{00000005-00000000-00000002-00001102-00000005-00311102}.rfx [2010-09-20 23:45:26 | 000,000,788 | ---- | M] () -- C:\Windows\System32\DVCState-{00000005-00000000-00000002-00001102-00000005-00311102}.rfx [2010-09-20 19:16:49 | 003,427,248 | ---- | M] (Piriform Ltd) -- C:\Users\Kamil\Desktop\ccsetup235.exe [2010-09-20 19:04:27 | 000,618,945 | ---- | M] () -- C:\Users\Kamil\Desktop\Autoruns.zip [2010-09-19 23:28:32 | 000,031,232 | ---- | M] () -- C:\Users\Kamil\Desktop\ksiegowe.xls [2010-09-18 12:34:02 | 001,468,980 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010-09-18 12:34:02 | 000,661,818 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2010-09-18 12:34:02 | 000,586,980 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010-09-18 12:34:02 | 000,126,702 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2010-09-18 12:34:02 | 000,101,052 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010-09-15 16:54:25 | 000,126,117 | ---- | M] () -- C:\Users\Kamil\Desktop\PK_SC_pytania.pdf [2010-09-11 20:07:33 | 000,018,944 | ---- | M] () -- C:\Users\Kamil\Desktop\komp.xls [2010-09-09 22:24:02 | 002,552,459 | ---- | M] () -- C:\Users\Kamil\Desktop\poradnik-uzytkownika-bankowosci-internetowej-polbank24.pdf [2010-09-07 00:07:31 | 000,269,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010-08-27 22:49:34 | 000,102,797 | ---- | M] () -- C:\Users\Kamil\Desktop\IMG_0118e.JPG [2010-08-27 22:46:53 | 000,001,123 | ---- | M] () -- C:\Users\Kamil\Desktop\AQQ odebrane.lnk [2010-08-22 20:59:32 | 000,001,356 | ---- | M] () -- C:\Users\Kamil\AppData\Local\d3d9caps.dat [2010-08-21 23:58:06 | 000,001,887 | ---- | M] () -- C:\Windows\diagwrn.xml [2010-08-21 23:58:06 | 000,001,887 | ---- | M] () -- C:\Windows\diagerr.xml ========== Files Created - No Company Name ========== [2010-09-20 19:04:13 | 000,618,945 | ---- | C] () -- C:\Users\Kamil\Desktop\Autoruns.zip [2010-09-15 16:54:25 | 000,126,117 | ---- | C] () -- C:\Users\Kamil\Desktop\PK_SC_pytania.pdf [2010-09-12 20:38:40 | 000,495,616 | ---- | C] () -- C:\Windows\System32\D3DX8ab.dll [2010-09-11 19:26:07 | 000,018,944 | ---- | C] () -- C:\Users\Kamil\Desktop\komp.xls [2010-09-09 22:23:54 | 002,552,459 | ---- | C] () -- C:\Users\Kamil\Desktop\poradnik-uzytkownika-bankowosci-internetowej-polbank24.pdf [2010-08-27 22:52:37 | 000,102,797 | ---- | C] () -- C:\Users\Kamil\Desktop\IMG_0118e.JPG [2010-08-27 22:46:53 | 000,001,123 | ---- | C] () -- C:\Users\Kamil\Desktop\AQQ odebrane.lnk [2010-04-25 02:49:15 | 000,000,002 | ---- | C] () -- C:\Windows\System32\Dvbpws.dll [2010-03-20 17:35:26 | 000,013,020 | ---- | C] () -- C:\ProgramData\lxdw.log [2010-03-20 17:33:37 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxdwvs.dll [2010-03-20 17:20:25 | 000,389,120 | ---- | C] () -- C:\Windows\System32\LXDWinst.dll [2010-03-20 17:20:21 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdwgrd.dll [2010-03-20 17:17:33 | 000,360,448 | ---- | C] () -- C:\Windows\System32\lxdwcoin.dll [2010-03-20 17:05:53 | 000,000,187 | ---- | C] () -- C:\ProgramData\lxdwDiagnostics.log [2010-03-20 17:01:33 | 000,000,252 | ---- | C] () -- C:\ProgramData\FastPics.log [2010-03-20 16:59:31 | 000,000,000 | ---- | C] () -- C:\ProgramData\UpdaterLog.txt [2010-03-06 14:21:47 | 000,014,848 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll [2010-03-06 14:21:46 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys [2010-03-06 14:21:46 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys [2010-03-06 02:53:54 | 000,000,303 | ---- | C] () -- C:\Windows\game.ini [2010-03-03 21:46:21 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010-02-27 12:24:07 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010-02-27 04:15:45 | 000,019,456 | ---- | C] () -- C:\Users\Kamil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-02-27 03:53:52 | 000,000,509 | ---- | C] () -- C:\Windows\WINCMD.INI [2010-02-26 20:42:17 | 000,079,437 | ---- | C] () -- C:\ProgramData\nvModes.001 [2010-02-26 20:11:49 | 000,079,437 | ---- | C] () -- C:\ProgramData\nvModes.dat [2010-02-26 19:24:18 | 000,148,480 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL [2010-02-26 19:24:18 | 000,073,728 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL [2010-02-26 19:01:28 | 000,007,680 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys [2010-02-26 19:01:26 | 000,012,358 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2010-02-26 19:01:20 | 000,010,288 | ---- | C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS [2010-02-26 18:54:28 | 000,001,356 | ---- | C] () -- C:\Users\Kamil\AppData\Local\d3d9caps.dat [2009-06-19 21:06:22 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2009-06-04 02:37:08 | 000,021,093 | ---- | C] () -- C:\Windows\System32\instwdm.ini [2009-06-04 02:37:06 | 000,000,054 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\System32\CtxfiRes.dll [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\CTXFIRES.DLL [2009-05-27 10:49:00 | 000,000,285 | ---- | C] () -- C:\Windows\System32\kill.ini [2006-12-04 01:25:14 | 000,022,723 | ---- | C] () -- C:\Windows\System32\sugs2l3.dll [2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini < End of report > Edytowane 20 Września 2010 przez Niemiec Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 21 Września 2010 Zgłoś Opublikowano 21 Września 2010 mbam Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Wersja bazy: 4657 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18943 2010-09-21 06:20:27 mbam-log-2010-09-21 (06-20-27).txt Typ skanowania: Szybkie skanowanie Przeskanowano obiektów: 133452 Upłynęło: 3 minut(y), 25 sekund(y) Zainfekowanych procesów w pamięci: 0 Zainfekowanych modułów w pamięci: 0 Zainfekowanych kluczy rejestru: 0 Zainfekowanych wartości rejestru: 0 Zainfekowane informacje rejestru systemowego: 0 Zainfekowanych folderów: 0 Zainfekowanych plików: 1 Zainfekowanych procesów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych modułów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych kluczy rejestru: (Nie znaleziono zagrożeń) Zainfekowanych wartości rejestru: (Nie znaleziono zagrożeń) Zainfekowane informacje rejestru systemowego: (Nie znaleziono zagrożeń) Zainfekowanych folderów: (Nie znaleziono zagrożeń) Zainfekowanych plików: C:\Windows\System32\D3DX8ab.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully. restart po instalacji aviry i mozliwosc kozystania z OS po 20min czyli tak jak bylo do tej pory. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
ULLISSES Opublikowano 21 Września 2010 Zgłoś Opublikowano 21 Września 2010 A od czego się zaczęło i kiedy? Może po instalacji jakiegoś programu? Z daty postów wnoszę, że 30 dni w OTL to może być mało. Ustaw na 60, albo nawet 90. Ewentualnie wyłącz wszystkie programy z autostartu (razem z sidebarem) i włączaj po kolei. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 21 Września 2010 Zgłoś Opublikowano 21 Września 2010 wg. aviry jest czysto. nie pamietam od czego sie zaczelo. otl 90dni OTL logfile created on: 2010-09-21 16:33:08 - Run 3 OTL by OldTimer - Version 3.2.10.0 Folder = C:\Users\Kamil\Desktop\vir Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18943) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 67,00% Memory free 7,00 Gb Paging File | 6,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 48,86 Gb Total Space | 27,97 Gb Free Space | 57,24% Space Free | Partition Type: NTFS Drive D: | 92,01 Gb Total Space | 82,92 Gb Free Space | 90,12% Space Free | Partition Type: NTFS Drive E: | 92,02 Gb Total Space | 27,12 Gb Free Space | 29,47% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KAMIL Current User Name: Kamil Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 90 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-09-10 09:51:38 | 008,004,608 | ---- | M] (Creative Team S.A.) -- C:\Program Files\WapSter\WapSter AQQ\AQQ.exe PRC - [2010-08-21 00:07:07 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe PRC - [2010-06-30 14:52:22 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2010-04-01 13:37:38 | 000,433,832 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avscan.exe PRC - [2010-03-02 11:28:31 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-02-23 11:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe PRC - [2008-09-10 23:15:26 | 000,131,752 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 7600 Series\ezprint.exe PRC - [2008-09-10 23:15:24 | 000,676,520 | ---- | M] () -- C:\Program Files\Lexmark 7600 Series\lxdwmon.exe PRC - [2008-05-17 04:33:10 | 000,594,600 | ---- | M] ( ) -- C:\Windows\System32\lxdwcoms.exe PRC - [2004-12-13 04:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe ========== Modules (SafeList) ========== MOD - [2010-08-21 00:07:07 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Kamil\Desktop\vir\OTL.exe MOD - [2009-04-11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll MOD - [2008-01-19 09:33:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx ========== Win32 Services (SafeList) ========== SRV - [2010-02-26 20:23:23 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2010-02-26 19:24:59 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2010-01-26 13:41:08 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2009-02-23 11:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2008-05-17 04:33:10 | 000,594,600 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxdwcoms.exe -- (lxdw_device) SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2004-12-13 04:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [File_System | Boot | Stopped] -- C:\Windows\System32\drivers\dwprot.sys -- (DwProt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Kamil\AppData\Local\Temp\catchme.sys -- (catchme) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\btwusb.sys -- (BTWUSB) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) DRV - [2010-04-03 22:55:32 | 011,573,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2010-03-01 10:05:24 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2010-02-16 14:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010-01-21 15:53:16 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2010-01-20 17:53:06 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv) DRV - [2010-01-20 17:53:04 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009-12-30 12:30:48 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2009-12-30 12:30:48 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2009-06-04 03:48:12 | 001,177,624 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ha20x2k.sys -- (ha20x2k) DRV - [2009-06-04 03:48:00 | 000,095,768 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emupia2k.sys -- (emupia) DRV - [2009-06-04 03:47:50 | 000,158,744 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2009-06-04 03:47:42 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctprxy2k.sys -- (ctprxy2k) DRV - [2009-06-04 03:47:34 | 000,130,072 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctoss2k.sys -- (ossrv) DRV - [2009-06-04 03:47:24 | 000,347,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctdvda2k.sys -- (ctdvda2k) DRV - [2009-06-04 03:47:14 | 000,526,232 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV - [2009-06-04 03:47:06 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctac32k.sys -- (ctac32k) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS) DRV - [2009-06-04 03:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTEXFIFX.sys -- (CTEXFIFX) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS) DRV - [2009-06-04 03:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTHWIUT.sys -- (CTHWIUT) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CT20XUT.SYS -- (CT20XUT.SYS) DRV - [2009-06-04 03:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CT20XUT.sys -- (CT20XUT) DRV - [2009-05-11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2008-12-25 08:56:42 | 000,433,792 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wfeaglxt.sys -- (WFLR6654) WinFast TV2000 XP Expert (FM1216MK3) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-01-19 08:14:59 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV - [2007-03-24 12:20:24 | 000,046,208 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\jraid.sys -- (JRAID) DRV - [2007-03-15 16:41:14 | 000,048,128 | ---- | M] (Attansic Technology corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atl01v32.sys -- (AtcL001) DRV - [2006-11-02 14:00:28 | 000,017,664 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88tune_IBV32.sys -- (CXTUNE) DRV - [2006-11-02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2006-11-02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2006-11-02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2006-11-02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2006-11-02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2006-11-02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2006-11-02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2006-11-02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2006-11-02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2006-11-02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2006-11-02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006-11-02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006-11-02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2006-11-02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2006-11-02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006-11-02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2006-11-02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2006-11-02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2) DRV - [2006-11-02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2006-11-02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2006-11-02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006-11-02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006-11-02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2006-11-02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006-11-02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2006-11-02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006-11-02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006-11-02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006-11-02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2006-11-02 11:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2006-11-02 11:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2006-11-02 11:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2006-11-02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006-11-02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006-11-02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006-11-02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006-11-02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006-11-02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006-11-02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006-11-02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel® DRV - [2006-10-18 23:44:48 | 000,007,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) DRV - [2006-02-07 20:52:58 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\JGOGO.sys -- (JGOGO) DRV - [2005-08-11 08:13:00 | 000,163,584 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\cx88vid.sys -- (CX23880) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.3\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-09-09 20:57:52 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.3\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010-02-26 20:55:01 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions [2010-02-26 20:55:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kamil\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} O1 HOSTS File: ([2010-08-20 21:36:04 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Lexmark Printable Web) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll () O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\System32\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark 7600 Series\ezprint.exe (Lexmark International Inc.) O4 - HKLM..\Run: [lxdwmon.exe] C:\Program Files\Lexmark 7600 Series\lxdwmon.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 88.156.63.9 82.139.8.7 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Kamil\AppData\Roaming\IrfanView\IrfanView_Wallpaper.bmp O24 - Desktop BackupWallPaper: C:\Users\Kamil\AppData\Roaming\IrfanView\IrfanView_Wallpaper.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 90 Days ========== [2010-09-21 06:27:04 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Avira [2010-09-21 00:02:33 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2010-09-21 00:02:33 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys [2010-09-21 00:02:33 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntdd.sys [2010-09-21 00:02:33 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys [2010-09-21 00:02:33 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntmgr.sys [2010-09-21 00:02:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2010-09-21 00:02:33 | 000,000,000 | ---D | C] -- C:\Program Files\Avira [2010-09-20 19:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2010-09-20 19:16:48 | 003,427,248 | ---- | C] (Piriform Ltd) -- C:\Users\Kamil\Desktop\ccsetup235.exe [2010-09-20 19:09:06 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2010-09-20 19:09:05 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010-09-20 19:04:31 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\Autoruns [2010-09-12 22:14:15 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\CrashDumps [2010-09-12 20:38:40 | 000,000,000 | ---D | C] -- C:\Program Files\MaxPunkte 5 [2010-09-12 16:53:23 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\NVIDIA Corporation [2010-09-09 18:45:40 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\EurekaLog [2010-08-28 00:19:21 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe [2010-08-28 00:19:21 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll [2010-08-28 00:19:21 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll [2010-08-28 00:16:12 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll [2010-08-28 00:16:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2010-08-28 00:15:56 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2010-08-28 00:15:56 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2010-08-28 00:15:56 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2010-08-28 00:15:56 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2010-08-28 00:15:56 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2010-08-28 00:15:56 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2010-08-28 00:15:56 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2010-08-28 00:15:56 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2010-08-28 00:15:56 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2010-08-28 00:15:56 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2010-08-28 00:15:55 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2010-08-28 00:15:55 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2010-08-28 00:15:55 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2010-08-28 00:15:55 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2010-08-28 00:15:55 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2010-08-28 00:15:42 | 003,600,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2010-08-28 00:15:41 | 003,548,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2010-08-28 00:15:37 | 002,037,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2010-08-28 00:15:27 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll [2010-08-27 10:12:17 | 000,000,000 | ---D | C] -- C:\logs [2010-08-22 21:01:08 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2010-08-21 21:16:47 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\HD Tune Pro [2010-08-21 21:16:43 | 000,000,000 | ---D | C] -- C:\Program Files\HD Tune Pro [2010-08-21 18:38:48 | 000,000,000 | ---D | C] -- C:\Windows\temp [2010-08-21 18:38:48 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\temp [2010-08-21 18:38:15 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2010-08-20 22:54:50 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Tific [2010-08-20 21:29:29 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2010-07-28 22:13:08 | 000,000,000 | ---D | C] -- C:\Users\Kamil\DoctorWeb [2010-07-28 21:29:03 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Malwarebytes [2010-07-28 21:28:53 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010-07-28 21:28:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010-07-28 06:27:40 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline [2010-07-27 23:49:48 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010-07-27 23:27:31 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\vir [2010-07-27 23:24:24 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\nis [2010-07-27 22:44:14 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\Symantec [2010-07-27 22:14:00 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Need for Speed World [2010-07-27 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\Electronic_Arts_Inc [2010-07-26 20:19:58 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Axgoid [2010-07-23 22:22:48 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\CoreTemp32 [2010-07-10 16:55:39 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\fotki rozne [2010-07-09 19:32:00 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\ACD Systems [2010-07-09 19:31:35 | 000,000,000 | ---D | C] -- C:\ProgramData\ACD Systems [2010-07-09 18:57:31 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Softplicity [2010-07-09 16:25:06 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2010-07-09 16:25:00 | 000,000,000 | ---D | C] -- C:\Program Files\Mystik Media [2010-07-09 16:16:26 | 000,000,000 | ---D | C] -- C:\Program Files\Soft Gold [2010-07-08 22:01:04 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2010-07-01 18:59:34 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\gtk-2.0 [2010-07-01 18:28:33 | 000,000,000 | ---D | C] -- C:\Users\Kamil\.thumbnails [2010-07-01 16:42:43 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Documents\gegl-0.0 [2010-07-01 16:42:43 | 000,000,000 | ---D | C] -- C:\Users\Kamil\.gimp-2.6 [2010-07-01 16:42:08 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0 [2010-07-01 16:39:50 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\mapka [2010-06-30 22:06:43 | 000,000,000 | ---D | C] -- C:\Program Files\Combined Community Codec Pack [2010-06-26 19:31:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\Adobe [2010-06-24 20:10:23 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\encyklopedia_broni [2010-03-20 17:20:25 | 000,438,272 | ---- | C] ( ) -- C:\Windows\System32\LXDWhcp.dll [2010-03-20 17:20:25 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxdwinpa.dll [2010-03-20 17:20:24 | 001,069,056 | ---- | C] ( ) -- C:\Windows\System32\lxdwserv.dll [2010-03-20 17:20:24 | 000,851,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwusb1.dll [2010-03-20 17:20:24 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxdwiesc.dll [2010-03-20 17:20:23 | 000,651,264 | ---- | C] ( ) -- C:\Windows\System32\lxdwpmui.dll [2010-03-20 17:20:23 | 000,577,536 | ---- | C] ( ) -- C:\Windows\System32\lxdwlmpm.dll [2010-03-20 17:20:22 | 000,679,936 | ---- | C] ( ) -- C:\Windows\System32\lxdwhbn3.dll [2010-03-20 17:20:17 | 000,765,952 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomc.dll [2010-03-20 17:20:17 | 000,376,832 | ---- | C] ( ) -- C:\Windows\System32\lxdwcomm.dll [2009-06-04 01:57:38 | 000,060,928 | ---- | C] ( ) -- C:\Windows\System32\a3d.dll ========== Files - Modified Within 90 Days ========== [2010-09-21 16:33:10 | 002,621,440 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT [2010-09-21 16:29:09 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-09-21 16:29:09 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-09-21 06:54:57 | 001,468,980 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010-09-21 06:54:57 | 000,661,818 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2010-09-21 06:54:57 | 000,586,980 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010-09-21 06:54:57 | 000,126,702 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2010-09-21 06:54:57 | 000,101,052 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010-09-21 06:29:21 | 000,079,437 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010-09-21 06:29:20 | 000,079,437 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010-09-21 06:29:12 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-09-21 06:29:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-09-21 06:28:14 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000005-00000000-00000002-00001102-00000005-00311102}.rfx [2010-09-21 06:28:14 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXState-{00000005-00000000-00000002-00001102-00000005-00311102}.rfx [2010-09-21 06:28:14 | 000,000,788 | ---- | M] () -- C:\Windows\System32\DVCState-{00000005-00000000-00000002-00001102-00000005-00311102}.rfx [2010-09-21 06:28:13 | 000,524,288 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010-09-21 06:28:13 | 000,065,536 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010-09-21 06:27:17 | 001,484,156 | -H-- | M] () -- C:\Users\Kamil\AppData\Local\IconCache.db [2010-09-20 19:16:49 | 003,427,248 | ---- | M] (Piriform Ltd) -- C:\Users\Kamil\Desktop\ccsetup235.exe [2010-09-20 19:04:27 | 000,618,945 | ---- | M] () -- C:\Users\Kamil\Desktop\Autoruns.zip [2010-09-19 23:28:32 | 000,031,232 | ---- | M] () -- C:\Users\Kamil\Desktop\ksiegowe.xls [2010-09-15 16:54:25 | 000,126,117 | ---- | M] () -- C:\Users\Kamil\Desktop\PK_SC_pytania.pdf [2010-09-11 20:07:33 | 000,018,944 | ---- | M] () -- C:\Users\Kamil\Desktop\komp.xls [2010-09-09 22:24:02 | 002,552,459 | ---- | M] () -- C:\Users\Kamil\Desktop\poradnik-uzytkownika-bankowosci-internetowej-polbank24.pdf [2010-09-07 00:07:31 | 000,269,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010-08-27 22:49:34 | 000,102,797 | ---- | M] () -- C:\Users\Kamil\Desktop\IMG_0118e.JPG [2010-08-27 22:46:53 | 000,001,123 | ---- | M] () -- C:\Users\Kamil\Desktop\AQQ odebrane.lnk [2010-08-22 20:59:32 | 000,001,356 | ---- | M] () -- C:\Users\Kamil\AppData\Local\d3d9caps.dat [2010-08-21 23:58:06 | 000,001,887 | ---- | M] () -- C:\Windows\diagwrn.xml [2010-08-21 23:58:06 | 000,001,887 | ---- | M] () -- C:\Windows\diagerr.xml [2010-08-21 21:31:07 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll [2010-08-21 21:31:07 | 000,109,080 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll [2010-08-21 21:31:07 | 000,000,087 | RH-- | M] () -- C:\Windows\ctfile.rfc [2010-08-21 18:48:48 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-08-21 18:48:48 | 000,055,300 | ---- | M] () -- C:\Windows\System32\BMXState-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-08-21 18:48:48 | 000,000,788 | ---- | M] () -- C:\Windows\System32\DVCState-{00000005-00000000-00000001-00001102-00000005-00311102}.rfx [2010-08-21 18:36:30 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini [2010-08-20 21:36:04 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2010-08-16 18:44:01 | 000,002,073 | ---- | M] () -- C:\Users\Kamil\.recently-used.xbel [2010-08-16 17:20:09 | 000,035,840 | ---- | M] () -- C:\Users\Kamil\Desktop\tytuly.doc [2010-08-16 17:19:27 | 000,035,328 | ---- | M] () -- C:\Users\Kamil\Desktop\mandaty.doc [2010-08-04 17:23:43 | 000,096,689 | ---- | M] () -- C:\Users\Kamil\Desktop\96a35ec98c.jpeg [2010-07-29 06:57:35 | 000,059,280 | ---- | M] () -- C:\Users\Kamil\AppData\Local\GDIPFONTCACHEV1.DAT [2010-07-24 20:33:10 | 000,028,160 | ---- | M] () -- C:\Users\Kamil\Desktop\Nikon D80.doc [2010-07-23 23:37:36 | 000,019,456 | ---- | M] () -- C:\Users\Kamil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-07-20 12:44:28 | 000,164,937 | ---- | M] () -- C:\Users\Kamil\Desktop\podanie.pdf [2010-07-14 20:02:03 | 000,026,624 | ---- | M] () -- C:\Users\Kamil\Desktop\oswiadczenie rach.doc [2010-07-09 22:02:03 | 000,073,693 | ---- | M] () -- C:\Users\Kamil\Desktop\YIELD2.jpg [2010-07-09 21:57:55 | 000,003,542 | ---- | M] () -- C:\Users\Kamil\Desktop\YIELD.CGM [2010-07-08 08:36:40 | 000,047,677 | ---- | M] () -- C:\Users\Kamil\Documents\2.prn [2010-06-26 08:03:22 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2010-06-26 08:03:02 | 000,599,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2010-06-26 08:03:02 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2010-06-26 08:02:31 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2010-06-26 08:02:26 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2010-06-26 08:02:15 | 000,164,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2010-06-26 08:02:15 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2010-06-26 08:02:15 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2010-06-26 08:02:14 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2010-06-26 08:02:14 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2010-06-26 08:02:09 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2010-06-26 06:25:02 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2010-06-26 06:24:51 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2010-06-26 06:24:17 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2010-06-26 06:23:53 | 001,638,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb ========== Files Created - No Company Name ========== [2010-09-20 19:04:13 | 000,618,945 | ---- | C] () -- C:\Users\Kamil\Desktop\Autoruns.zip [2010-09-15 16:54:25 | 000,126,117 | ---- | C] () -- C:\Users\Kamil\Desktop\PK_SC_pytania.pdf [2010-09-11 19:26:07 | 000,018,944 | ---- | C] () -- C:\Users\Kamil\Desktop\komp.xls [2010-09-09 22:23:54 | 002,552,459 | ---- | C] () -- C:\Users\Kamil\Desktop\poradnik-uzytkownika-bankowosci-internetowej-polbank24.pdf [2010-08-27 22:52:37 | 000,102,797 | ---- | C] () -- C:\Users\Kamil\Desktop\IMG_0118e.JPG [2010-08-27 22:46:53 | 000,001,123 | ---- | C] () -- C:\Users\Kamil\Desktop\AQQ odebrane.lnk [2010-08-21 23:52:27 | 000,001,887 | ---- | C] () -- C:\Windows\diagwrn.xml [2010-08-21 23:52:27 | 000,001,887 | ---- | C] () -- C:\Windows\diagerr.xml [2010-08-21 21:36:02 | 000,055,300 | ---- | C] () -- C:\Windows\System32\BMXStateBkp-{00000005-00000000-00000002-00001102-00000005-00311102}.rfx [2010-08-21 21:36:02 | 000,055,300 | ---- | C] () -- C:\Windows\System32\BMXState-{00000005-00000000-00000002-00001102-00000005-00311102}.rfx [2010-08-21 21:36:02 | 000,000,788 | ---- | C] () -- C:\Windows\System32\DVCState-{00000005-00000000-00000002-00001102-00000005-00311102}.rfx [2010-08-16 18:44:01 | 000,002,073 | ---- | C] () -- C:\Users\Kamil\.recently-used.xbel [2010-08-16 17:20:09 | 000,035,840 | ---- | C] () -- C:\Users\Kamil\Desktop\tytuly.doc [2010-08-16 17:19:26 | 000,035,328 | ---- | C] () -- C:\Users\Kamil\Desktop\mandaty.doc [2010-08-04 17:23:43 | 000,096,689 | ---- | C] () -- C:\Users\Kamil\Desktop\96a35ec98c.jpeg [2010-07-24 19:31:54 | 000,028,160 | ---- | C] () -- C:\Users\Kamil\Desktop\Nikon D80.doc [2010-07-20 12:40:18 | 000,164,937 | ---- | C] () -- C:\Users\Kamil\Desktop\podanie.pdf [2010-07-14 19:59:46 | 000,026,624 | ---- | C] () -- C:\Users\Kamil\Desktop\oswiadczenie rach.doc [2010-07-09 22:01:58 | 000,073,693 | ---- | C] () -- C:\Users\Kamil\Desktop\YIELD2.jpg [2010-07-09 21:57:55 | 000,003,542 | ---- | C] () -- C:\Users\Kamil\Desktop\YIELD.CGM [2010-07-08 08:42:14 | 000,047,677 | ---- | C] () -- C:\Users\Kamil\Documents\2.prn [2010-04-25 02:49:15 | 000,000,002 | ---- | C] () -- C:\Windows\System32\Dvbpws.dll [2010-03-20 17:35:26 | 000,013,020 | ---- | C] () -- C:\ProgramData\lxdw.log [2010-03-20 17:33:37 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxdwvs.dll [2010-03-20 17:20:25 | 000,389,120 | ---- | C] () -- C:\Windows\System32\LXDWinst.dll [2010-03-20 17:20:21 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdwgrd.dll [2010-03-20 17:17:33 | 000,360,448 | ---- | C] () -- C:\Windows\System32\lxdwcoin.dll [2010-03-20 17:05:53 | 000,000,187 | ---- | C] () -- C:\ProgramData\lxdwDiagnostics.log [2010-03-20 17:01:33 | 000,000,252 | ---- | C] () -- C:\ProgramData\FastPics.log [2010-03-20 16:59:31 | 000,000,000 | ---- | C] () -- C:\ProgramData\UpdaterLog.txt [2010-03-06 14:21:47 | 000,014,848 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll [2010-03-06 14:21:46 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys [2010-03-06 14:21:46 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys [2010-03-06 02:53:54 | 000,000,303 | ---- | C] () -- C:\Windows\game.ini [2010-03-03 21:46:21 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010-02-27 12:24:07 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010-02-27 04:15:45 | 000,019,456 | ---- | C] () -- C:\Users\Kamil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-02-27 03:53:52 | 000,000,509 | ---- | C] () -- C:\Windows\WINCMD.INI [2010-02-26 20:42:17 | 000,079,437 | ---- | C] () -- C:\ProgramData\nvModes.001 [2010-02-26 20:11:49 | 000,079,437 | ---- | C] () -- C:\ProgramData\nvModes.dat [2010-02-26 19:24:18 | 000,148,480 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL [2010-02-26 19:24:18 | 000,073,728 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL [2010-02-26 19:01:28 | 000,007,680 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys [2010-02-26 19:01:26 | 000,012,358 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2010-02-26 19:01:20 | 000,010,288 | ---- | C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS [2010-02-26 18:54:28 | 000,001,356 | ---- | C] () -- C:\Users\Kamil\AppData\Local\d3d9caps.dat [2009-06-19 21:06:22 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2009-06-04 02:37:08 | 000,021,093 | ---- | C] () -- C:\Windows\System32\instwdm.ini [2009-06-04 02:37:06 | 000,000,054 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\System32\CtxfiRes.dll [2009-06-04 01:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\CTXFIRES.DLL [2009-05-27 10:49:00 | 000,000,285 | ---- | C] () -- C:\Windows\System32\kill.ini [2006-12-04 01:25:14 | 000,022,723 | ---- | C] () -- C:\Windows\System32\sugs2l3.dll [2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini < End of report > Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 21 Września 2010 Zgłoś Opublikowano 21 Września 2010 w autostarcie duzo nie ma, ale wylaczylem sidebara, dwa lexmarki i creativa i zadnych zmian to nie dalo. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Kolobos Opublikowano 12 Października 2010 Zgłoś Opublikowano 12 Października 2010 Uzyj HdTune (nie pro) i daj screeny ze wszystkich zakladek programu. Sprawdz ram -> www.memtest.org Do tego temperatury. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 12 Października 2010 Zgłoś Opublikowano 12 Października 2010 Temperatury dla procka to ok 40-45st. Starczy szybki erro scan czy ma byc pelen? Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
ULLISSES Opublikowano 12 Października 2010 Zgłoś Opublikowano 12 Października 2010 Szybki skan nic nie daje. Użyj pełnego lub najlepiej MHDD (opis na forum, tudzież w Sieci) - szukaj wg postów Kwazor'a. ;] Widzę natomiast, że masz UDMA 5, podczas gdy sprzęt może lecieć na UDMA6. Ergo wywal kontrolery dysku i restart kompa. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 12 Października 2010 Zgłoś Opublikowano 12 Października 2010 (edytowane) Full scan. Edytowane 12 Października 2010 przez Niemiec Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
Niemiec Opublikowano 13 Października 2010 Zgłoś Opublikowano 13 Października 2010 puscilem memtesta i bledow zero, zainstalowalem jeszcz raz stery od intela, zmienilem tasme sata i zero poprawy Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...
ULLISSES Opublikowano 13 Października 2010 Zgłoś Opublikowano 13 Października 2010 Nawiązując do pomocy Windows - "Ten kreator nie jest w stanie rozwiązać Twojego problemu" ;] A tak bardziej poważnie, to nie prościej postawić nowy system? 1 Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach Więcej opcji udostępniania...