Kod: 49730 WKLEJTO.PL Darmowa wklejka, na zawsze!

1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. 27. 28. 29. 30. 31. 32. 33. 34. 35. 36. 37. 38. 39. 40. 41. 42. 43. 44. 45. 46. 47. 48. 49. 50. 51. 52. 53. 54. 55. 56. 57. 58. 59. 60. 61. 62. 63. 64. 65. 66. 67. 68. 69. 70. 71. 72. 73. 74. 75. 76. 77. 78. 79. 80. 81. 82. 83. 84. 85. 86. 87. 88. 89. 90. 91. 92. 93. 94. 95. 96. 97. 98. 99. 100. 101. 102. 103. 104. 105. 106. 107. 108. 109. 110. 111. 112. 113. 114. 115. 116. 117. 118. 119. 120. 121. 122. 123. 124. 125. 126. 127. 128. 129. 130. 131. 132. 133. 134. 135. 136. 137. 138. 139. 140. 141. 142. 143. 144. 145. 146. 147. 148. 149. 150. 151. 152. 153. 154. 155. 156. 157. 158. 159. 160. 161. 162. 163. 164. 165. 166. 167. 168. 169. 170. 171. 172. 173. 174. 175. 176. 177. 178. 179. 180. 181. 182. 183. 184. 185. 186. 187. 188. 189. 190. 191. 192. 193. 194. 195. 196. 197. 198. 199. 200. 201. 202. 203. 204. 205. 206. 207. 208. 209. 210. 211. 212. 213. 214. 215. 216. 217. 218. 219. 220. 221. 222. 223. 224. 225. 226. 227. 228. 229. 230. 231. 232. 233. 234. 235. 236. 237. 238. 239. 240. 241. 242. 243. 244. 245. 246. 247. 248. 249. 250. 251. 252. 253. 254. 255. 256. 257. 258. 259. 260. 261. 262. 263. 264. 265. 266. 267. 268. 269. 270. 271. 272. 273. 274. 275. 276. 277. 278. 279. 280. 281. 282. 283. 284. 285. 286. 287. 288. 289. 290. 291. 292. 293. 294. 295. 296. 297. 298. 299. 300. 301. 302. 303. 304. 305. 306. 307. 308. 309. 310. 311. 312. 313. 314. 315. 316. 317. 318. 319. 320. 321. 322. 323. 324. 325. 326. 327. 328. 329. 330. 331. 332. 333. 334. 335. 336. 337. 338. 339. 340. 341. 342. 343. 344. 345. 346. 347. 348. 349. 350. 351. 352. 353. 354. 355. 356. 357. 358. 359. 360. 361. 362. 363. 364. 365. 366. 367. 368. 369. 370. 371. 372. 373. 374. 375. 376. 377. 378. 379. 380. 381. 382. 383. 384. 385. 386. 387. 388. 389. 390. 391. 392. 393. 394. 395. 396. 397. 398. 399. 400. 401. 402. 403. 404. 405. 406. 407. 408. 409. 410. 411. 412. 413. 414. 415. 416. 417. 418. 419. 420. 421. 422. 423. 424. 425. 426. 427. 428. 429. 430. 431. 432. 433. 434. 435. 436. 437. 438. 439. 440. 441. 442. 443. 444. 445. 446. 447. 448. 449. 450. 451. 452. 453. 454. 455. 456. 457. 458. 459. 460. 461. 462. 463. 464. 465. 466. 467. 468. 469. 470. 471. 472. 473. 474. 475. 476. 477. 478. 479. 480. 481. 482. 483. 484. 485. 486. 487. 488. 489. 490. 491. 492. 493. 494. 495. 496. 497. 498. 499. 500. 501. 502. 503. 504. 505. 506. 507. 508. 509. 510. 511. 512. 513. 514. 515. 516. 517. 518. 519. 520. 521. 522. 523. 524. 525. 526. 527. 528. 529. 530. 531. 532. 533. 534. 535. 536. 537. 538. 539. 540. 541. 542. 543. 544. 545. 546. 547. 548. 549. 550. 551. 552. 553. 554. 555. 556. 557. 558. 559. 560. 561. 562. 563. 564. 565. 566. 567. 568. 569. 570. 571. 572. 573. 574. 575. 576. 577. 578. 579. 580. 581. 582. 583. 584. 585. 586. 587. 588. 589. 590. 591. 592. 593. 594.

OTL logfile created on: 2009-12-09 06:13:32 - Run 1 OTL by OldTimer - Version 3.1.11.9 Folder = C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Pobieranie Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 100,00% Memory free 4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free Paging file location(s): C:\\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\\WINDOWS | %ProgramFiles% = C:\\Program Files Drive C: | 48,83 Gb Total Space | 35,72 Gb Free Space | 73,17% Space Free | Partition Type: NTFS Drive D: | 97,65 Gb Total Space | 92,66 Gb Free Space | 94,89% Space Free | Partition Type: NTFS Drive E: | 151,60 Gb Total Space | 144,39 Gb Free Space | 95,24% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MAZUR-704A3079A Current User Name: Belmondo Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (All) ==========[/color] PRC - [2009-12-09 05:57:11 | 00,536,576 | ---- | M] (OldTimer Tools) -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Pobieranie\\OTL.exe PRC - [2009-12-08 21:54:50 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\\Program Files\\Mozilla Firefox\\firefox.exe PRC - [2009-08-06 19:24:06 | 00,053,472 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\wuauclt.exe PRC - [2009-04-09 15:19:08 | 00,731,840 | ---- | M] (ESET) -- C:\\Program Files\\ESET\\ESET Smart Security\\ekrn.exe PRC - [2009-04-09 15:17:56 | 02,029,640 | ---- | M] (ESET) -- C:\\Program Files\\ESET\\ESET Smart Security\\egui.exe PRC - [2009-02-09 12:25:57 | 00,111,104 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\services.exe PRC - [2008-10-07 13:33:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\\WINDOWS\\system32\\nvsvc32.exe PRC - [2008-04-15 13:00:00 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\explorer.exe PRC - [2008-04-15 13:00:00 | 00,510,464 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\winlogon.exe PRC - [2008-04-15 13:00:00 | 00,057,856 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\spoolsv.exe PRC - [2008-04-15 13:00:00 | 00,050,688 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\smss.exe PRC - [2008-04-15 13:00:00 | 00,044,544 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\alg.exe PRC - [2008-04-15 13:00:00 | 00,033,280 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\rundll32.exe PRC - [2008-04-15 13:00:00 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\ctfmon.exe PRC - [2008-04-15 13:00:00 | 00,014,336 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\svchost.exe [RPCSS] PRC - [2008-04-15 13:00:00 | 00,014,336 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\svchost.exe [NETWORKSERVICE] PRC - [2008-04-15 13:00:00 | 00,014,336 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\svchost.exe [NETSVCS] PRC - [2008-04-15 13:00:00 | 00,014,336 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\svchost.exe [LOCALSERVICE] PRC - [2008-04-15 13:00:00 | 00,014,336 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\svchost.exe [LOCALSERVICE] PRC - [2008-04-15 13:00:00 | 00,014,336 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\svchost.exe [IMGSVC] PRC - [2008-04-15 13:00:00 | 00,014,336 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\svchost.exe [DCOMLAUNCH] PRC - [2008-04-15 13:00:00 | 00,013,312 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\lsass.exe PRC - [2008-04-15 13:00:00 | 00,006,144 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\csrss.exe PRC - [2007-12-06 21:03:41 | 00,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\\Program Files\\Common Files\\ABBYY\\FineReader\\9.00\\Licensing\\PE\\NetworkLicenseServer.exe PRC - [2007-04-09 15:45:54 | 00,049,152 | ---- | M] () -- C:\\Program Files\\GW Micro\\Window-Eyes\\weserv.exe PRC - [2007-02-16 19:08:14 | 00,057,344 | ---- | M] (Nalpeiron Ltd.) -- C:\\WINDOWS\\system32\\ASTSRV.EXE [color=#E56717]========== Modules (All) ==========[/color] MOD - [2009-12-09 05:57:11 | 00,536,576 | ---- | M] (OldTimer Tools) -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Pobieranie\\OTL.exe MOD - [2009-06-25 09:27:54 | 00,056,832 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\secur32.dll MOD - [2009-04-15 15:54:38 | 00,585,216 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\rpcrt4.dll MOD - [2009-03-21 15:08:59 | 01,018,368 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\kernel32.dll MOD - [2009-02-09 11:53:44 | 00,686,592 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\advapi32.dll MOD - [2009-02-09 11:53:43 | 00,722,944 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\ntdll.dll MOD - [2008-10-23 13:42:41 | 00,286,720 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\gdi32.dll MOD - [2008-06-17 20:03:15 | 08,489,984 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\shell32.dll MOD - [2008-04-15 13:00:00 | 01,287,168 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\ole32.dll MOD - [2008-04-15 13:00:00 | 01,054,208 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\WinSxS\\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\\comctl32.dll MOD - [2008-04-15 13:00:00 | 00,997,888 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\setupapi.dll MOD - [2008-04-15 13:00:00 | 00,732,672 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\userenv.dll MOD - [2008-04-15 13:00:00 | 00,580,096 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\user32.dll MOD - [2008-04-15 13:00:00 | 00,551,936 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\oleaut32.dll MOD - [2008-04-15 13:00:00 | 00,474,112 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\shlwapi.dll MOD - [2008-04-15 13:00:00 | 00,343,040 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\msvcrt.dll MOD - [2008-04-15 13:00:00 | 00,297,984 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\MSCTF.dll MOD - [2008-04-15 13:00:00 | 00,219,648 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\uxtheme.dll MOD - [2008-04-15 13:00:00 | 00,185,344 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\wbem\\framedyn.dll MOD - [2008-04-15 13:00:00 | 00,178,176 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\winmm.dll MOD - [2008-04-15 13:00:00 | 00,172,544 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\wldap32.dll MOD - [2008-04-15 13:00:00 | 00,146,432 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\winspool.drv MOD - [2008-04-15 13:00:00 | 00,119,808 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\ntmarta.dll MOD - [2008-04-15 13:00:00 | 00,084,992 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\olepro32.dll MOD - [2008-04-15 13:00:00 | 00,067,584 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\srclient.dll MOD - [2008-04-15 13:00:00 | 00,064,000 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\samlib.dll MOD - [2008-04-15 13:00:00 | 00,023,040 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\psapi.dll MOD - [2008-04-15 13:00:00 | 00,018,944 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\version.dll MOD - [2008-04-15 13:00:00 | 00,004,608 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\system32\\msimg32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-04-09 15:29:20 | 00,020,680 | ---- | M] (ESET) -- C:\\Program Files\\ESET\\ESET Smart Security\\EHttpSrv.exe -- (EhttpSrv) SRV - [2009-04-09 15:19:08 | 00,731,840 | ---- | M] (ESET) -- C:\\Program Files\\ESET\\ESET Smart Security\\ekrn.exe -- (ekrn) SRV - [2008-10-07 13:33:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\\WINDOWS\\system32\\nvsvc32.exe -- (NVSvc) SRV - [2007-12-06 21:03:41 | 00,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\\Program Files\\Common Files\\ABBYY\\FineReader\\9.00\\Licensing\\PE\\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0) SRV - [2007-04-09 15:45:54 | 00,049,152 | ---- | M] () -- C:\\Program Files\\GW Micro\\Window-Eyes\\weserv.exe -- (windoweyes) SRV - [2007-02-16 19:08:14 | 00,057,344 | ---- | M] (Nalpeiron Ltd.) -- C:\\WINDOWS\\system32\\ASTSRV.EXE -- (astcc) SRV - [2006-10-27 00:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- C:\\Program Files\\Microsoft Office\\Office12\\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE12\\ODSERV.EXE -- (odserv) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE -- (ose) SRV - [2005-11-14 01:06:04 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\\Program Files\\Common Files\\InstallShield\\Driver\\1150\\Intel 32\\IDriverT.exe -- (IDriverT) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-12-07 13:00:53 | 00,148,768 | ---- | M] () -- C:\\WINDOWS\\system32\\DRIVERS\\atapi.sys -- (atapi) DRV - [2009-12-03 20:06:36 | 00,008,704 | ---- | M] () -- C:\\WINDOWS\\Temp\\SiwIo.sys -- (SIWIO) DRV - [2009-04-09 15:21:12 | 00,055,768 | ---- | M] (ESET) -- C:\\WINDOWS\\system32\\drivers\\epfwtdi.sys -- (epfwtdi) DRV - [2009-04-09 15:21:10 | 00,033,096 | ---- | M] (ESET) -- C:\\WINDOWS\\system32\\drivers\\epfwndis.sys -- (Epfwndis) DRV - [2009-04-09 15:21:06 | 00,133,000 | ---- | M] (ESET) -- C:\\WINDOWS\\system32\\drivers\\epfw.sys -- (epfw) DRV - [2009-04-09 15:18:02 | 00,107,256 | ---- | M] (ESET) -- C:\\WINDOWS\\system32\\drivers\\ehdrv.sys -- (ehdrv) DRV - [2009-04-09 15:10:30 | 00,113,960 | ---- | M] (ESET) -- C:\\WINDOWS\\system32\\drivers\\eamon.sys -- (eamon) DRV - [2008-12-12 15:18:41 | 00,021,419 | ---- | M] (Meetinghouse Data Communications) -- C:\\WINDOWS\\system32\\drivers\\AegisP.sys -- (AegisP) AEGIS Protocol (IEEE 802.1x) DRV - [2008-10-07 13:33:00 | 06,133,856 | ---- | M] (NVIDIA Corporation) -- C:\\WINDOWS\\system32\\drivers\\nv4_mini.sys -- (nv) DRV - [2008-04-15 13:00:00 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\\WINDOWS\\system32\\drivers\\hdaudbus.sys -- (HDAudBus) DRV - [2008-04-15 13:00:00 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\\WINDOWS\\system32\\drivers\\secdrv.sys -- (Secdrv) DRV - [2008-04-15 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\\WINDOWS\\system32\\drivers\\ptilink.sys -- (Ptilink) DRV - [2007-07-27 08:10:18 | 00,483,968 | ---- | M] (Ralink Technology, Corp.) -- C:\\WINDOWS\\system32\\drivers\\rt61.sys -- (RT61) DRV - [2007-04-10 19:04:40 | 04,397,568 | R--- | M] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\system32\\drivers\\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2007-01-16 13:52:20 | 00,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\\WINDOWS\\system32\\drivers\\ZDPSp50.sys -- (ZDPSp50) DRV - [2007-01-10 10:14:34 | 00,450,560 | ---- | M] (ZyDAS Technology Corporation) -- C:\\WINDOWS\\system32\\drivers\\WlanBZXP.sys -- (SG762_XP) DRV - [2006-10-31 11:10:06 | 00,035,840 | ---- | M] (Attansic Technology corporation.) -- C:\\WINDOWS\\system32\\drivers\\atl01_xp.sys -- (AtcL001) DRV - [2006-08-25 04:47:00 | 00,036,528 | ---- | M] (Sonic Solutions) -- C:\\WINDOWS\\System32\\Drivers\\PxHelp20.sys -- (PxHelp20) DRV - [2002-11-29 15:02:40 | 00,006,560 | ---- | M] (Zeal SoftStudio) -- C:\\WINDOWS\\system32\\zntport.sys -- (zntport) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Main,Local Page = %SystemRoot%\\system32\\blank.htm IE - HKCU\\SOFTWARE\\Microsoft\\Internet Explorer\\Main,Start Page = http://pracownik.mikrotech.pl/ IE - HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings: \"ProxyEnable\" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: \"http://www.multimo.pl/sprawdz-dostepnosc-uslugi/\" FF - HKLM\\software\\mozilla\\Mozilla Firefox 3.0.15\\extensions\\\\Components: C:\\Program Files\\Mozilla Firefox\\components [2009-12-08 21:54:59 | 00,000,000 | ---D | M] FF - HKLM\\software\\mozilla\\Mozilla Firefox 3.0.15\\extensions\\\\Plugins: C:\\Program Files\\Mozilla Firefox\\plugins [2009-12-08 21:54:59 | 00,000,000 | ---D | M] FF - HKLM\\software\\mozilla\\Mozilla Thunderbird 2.0.0.23\\extensions\\\\Components: C:\\Program Files\\Mozilla Thunderbird\\components [2009-10-15 05:58:57 | 00,000,000 | ---D | M] FF - HKLM\\software\\mozilla\\Mozilla Thunderbird 2.0.0.23\\extensions\\\\Plugins: C:\\Program Files\\Mozilla Thunderbird\\plugins FF - HKLM\\software\\mozilla\\Thunderbird\\Extensions\\\\eplgTb@eset.com: C:\\Program Files\\ESET\\ESET Smart Security\\Mozilla Thunderbird [2009-12-03 19:58:28 | 00,000,000 | ---D | M] [2009-01-12 11:25:21 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\Mozilla\\Extensions [2009-12-08 21:45:01 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\Mozilla\\Firefox\\Profiles\\f49bkex9.default\\extensions [2009-01-12 11:25:22 | 00,000,000 | ---D | M] -- C:\\Program Files\\Mozilla Firefox\\extensions [2009-12-08 21:54:55 | 00,002,767 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\allegro-pl.xml [2009-12-08 21:54:55 | 00,001,406 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\fbc-pl.xml [2009-12-08 21:54:55 | 00,000,917 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\merlin-pl.xml [2009-12-08 21:54:55 | 00,000,858 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\pwn-pl.xml [2009-12-08 21:54:55 | 00,001,183 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\wikipedia-pl.xml [2009-12-08 21:54:55 | 00,001,683 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\wp-pl.xml O1 HOSTS File: (27 bytes) - C:\\WINDOWS\\system32\\drivers\\etc\\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Adobe\\Acrobat 7.0\\ActiveX\\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\\Program Files\\Microsoft Office\\Office12\\GrooveShellExtensions.dll (Microsoft Corporation) O4 - HKLM..\\Run: [egui] C:\\Program Files\\ESET\\ESET Smart Security\\egui.exe (ESET) O4 - HKLM..\\Run: [NvCplDaemon] C:\\WINDOWS\\System32\\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\\Run: [NvMediaCenter] C:\\WINDOWS\\System32\\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\\Run: [nwiz] C:\\WINDOWS\\System32\\nwiz.exe () O4 - HKLM..\\Run: [Regedit32] C:\\WINDOWS\\System32\\regedit.exe File not found O4 - HKCU..\\Run: [av_md] C:\\WINDOWS\\System32\\config\\systemprofile\\av_md.exe File not found O6 - HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDrives = 0 O7 - HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel present O7 - HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDrives = 0 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\\Program Files\\Microsoft Office\\Office12\\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\\Program Files\\Microsoft Office\\Office12\\ONBttnIE.dll (Microsoft Corporation) O9 - Extra \'Tools\' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\\Program Files\\Microsoft Office\\Office12\\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\\Program Files\\Microsoft ActiveSync\\INetRepl.dll (Microsoft Corporation) O9 - Extra \'Tools\' menuitem : Utwórz Ulubione dla urządzenia przenośnego... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\\Program Files\\Microsoft ActiveSync\\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\\Program Files\\Microsoft Office\\Office12\\REFIEBAR.DLL (Microsoft Corporation) O15 - HKLM\\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O17 - HKLM\\System\\CCS\\Services\\Tcpip\\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\\Handler\\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\\Program Files\\Microsoft Office\\Office12\\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\\Handler\\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll (Microsoft Corporation) O18 - Protocol\\Handler\\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\\Program Files\\Common Files\\Skype\\Skype4COM.dll (Skype Technologies) O18 - Protocol\\Filter\\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE12\\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\\WINDOWS\\explorer.exe (Microsoft Corporation) O20 - Winlogon\\Notify\\wineyes: DllName - welogon.dll - C:\\WINDOWS\\System32\\welogon.dll () O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\\Program Files\\Microsoft Office\\Office12\\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-11-03 20:10:06 | 00,000,000 | ---- | M] () - C:\\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - comfile [open] -- \"%1\" %* O35 - exefile [open] -- \"%1\" %* NetSvcs: 6to4 - File not found NetSvcs: Ias - C:\\WINDOWS\\system32\\ias [2008-11-03 20:51:33 | 00,000,000 | ---D | M] NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: Wmi - C:\\WINDOWS\\system32\\wmi.dll (Microsoft Corporation) NetSvcs: WmdmPmSp - File not found MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk - C:\\Program Files\\SAGEM WiFi manager\\WLANUTL.EXE - ( ) MsConfig - StartUpReg: [b]12Voip[/b] - hkey= - key= - C:\\Program Files\\12Voip.com\\12Voip\\12Voip.exe (12Voip) MsConfig - StartUpReg: [b]GrooveMonitor[/b] - hkey= - key= - C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe (Microsoft Corporation) MsConfig - StartUpReg: [b]H/PC Connection Agent[/b] - hkey= - key= - C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe (Microsoft Corporation) MsConfig - StartUpReg: [b]IPLA![/b] - hkey= - key= - C:\\Program Files\\ipla\\ipla.exe (Redefine Sp z o.o.) MsConfig - StartUpReg: [b]MSMSGS[/b] - hkey= - key= - C:\\Program Files\\Messenger\\msmsgs.exe (Microsoft Corporation) MsConfig - StartUpReg: [b]Outpost Firewall[/b] - hkey= - key= - C:\\PROGRA~1\\Agnitum\\OUTPOS~1.0\\outpost.exe File not found SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: SCSI Class - Driver Group SafeBootMin: sermouse.sys - Driver SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vga.sys - Driver SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: SCSI Class - Driver Group SafeBootNet: sermouse.sys - Driver SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vga.sys - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Renderowanie grafiki wektorowej (VML) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4 ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\\system32\\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\\system32\\themeui.dll ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Powiązania danych dynamicznego HTML dla języka Java ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Pakiet przeglądania w trybie offline ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Autorstwo zaawansowane ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - \"%ProgramFiles%\\Outlook Express\\setup50.exe\" /APP:OE /CALLER:WINNT /user /install ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\\WINDOWS\\INF\\msnetmtg.inf,NetMtg.Install.PerUser.NT ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Pomoc programu Internet Explorer ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Klasy Java DirectAnimation ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7 ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\\WINDOWS\\INF\\msmsgs.inf,BLC.QuietInstall.PerUser ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Narzędzia Instalatora programu Internet Explorer ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Rozszerzenia przeglądania ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Dostęp do witryny MSN ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - \"%ProgramFiles%\\Outlook Express\\setup50.exe\" /APP:WAB /CALLER:WINNT /user /install ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\\system32\\ie4uinit.exe ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\\WINDOWS\\system32\\Rundll32.exe C:\\WINDOWS\\system32\\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Powiązania danych dynamicznego HTML ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} - ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Podstawowe czcionki programu Internet Explorer ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Harmonogram zadań ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player ActiveX: {DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D} - Microsoft .NET Framework 1.1 Security Update (KB953297) ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - Pomoc HTML ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\\WINDOWS\\inf\\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\\system32\\shmgrate.exe OCInstallUserConfigIE ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\\system32\\shmgrate.exe OCInstallUserConfigOE Drivers32: msacm.ac3filter - C:\\WINDOWS\\System32\\ac3filter.acm () Drivers32: msacm.iac2 - C:\\WINDOWS\\system32\\iac25_32.ax (Intel Corporation) Drivers32: msacm.l3acm - C:\\WINDOWS\\system32\\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.sl_anet - C:\\WINDOWS\\System32\\sl_anet.acm (Sipro Lab Telecom Inc.) Drivers32: msacm.trspch - C:\\WINDOWS\\System32\\tssoft32.acm (DSP GROUP, INC.) Drivers32: vidc.cvid - C:\\WINDOWS\\System32\\iccvid.dll (Radius Inc.) Drivers32: vidc.iv31 - C:\\WINDOWS\\System32\\ir32_32.dll () Drivers32: vidc.iv32 - C:\\WINDOWS\\System32\\ir32_32.dll () Drivers32: vidc.iv41 - C:\\WINDOWS\\System32\\ir41_32.ax (Intel Corporation) Drivers32: vidc.iv50 - C:\\WINDOWS\\System32\\ir50_32.dll (Intel Corporation) CREATERESTOREPOINT Restore point Set: OTL Restore Point (55172544294027264) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-12-09 05:56:50 | 00,000,000 | ---D | C] -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Pobieranie [2009-12-08 20:44:52 | 00,000,000 | ---D | C] -- C:\\Program Files\\Trend Micro [2009-12-04 18:34:53 | 00,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\XPSViewer [2009-12-04 18:34:49 | 00,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\en-US [2009-12-04 18:34:46 | 00,000,000 | ---D | C] -- C:\\Program Files\\Reference Assemblies [2009-12-04 18:29:13 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\xpssvcs.dll [2009-12-04 18:29:13 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\xpssvcs.dll [2009-12-04 18:29:13 | 00,597,504 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\printfilterpipelinesvc.exe [2009-12-04 18:29:13 | 00,575,488 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\xpsshhdr.dll [2009-12-04 18:29:13 | 00,117,760 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\prntvpt.dll [2009-12-04 18:29:13 | 00,089,088 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\filterpipelineprintproc.dll [2009-12-04 17:12:26 | 00,000,000 | -HSD | C] -- C:\\Config.Msi [2009-12-04 13:00:47 | 00,000,000 | ---D | C] -- C:\\Program Files\\MSXML 4.0 [2009-12-03 20:28:05 | 00,000,000 | ---D | C] -- C:\\Documents and Settings\\All Users\\Dane aplikacji\\Windows Genuine Advantage [2009-12-03 20:25:43 | 00,000,000 | ---D | C] -- C:\\Documents and Settings\\Belmondo\\Ustawienia lokalne\\Dane aplikacji\\ESET [2009-12-03 20:22:16 | 00,015,584 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\wuapi.dll.mui [2009-12-03 20:13:15 | 00,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\Attansic [2009-12-03 20:13:11 | 00,000,000 | ---D | C] -- C:\\Program Files\\Attansic [2009-12-03 20:11:56 | 00,035,840 | ---- | C] (Attansic Technology corporation.) -- C:\\WINDOWS\\System32\\drivers\\atl01_xp.sys [2009-12-03 19:59:13 | 00,000,000 | ---D | C] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\ESET [2009-12-03 19:58:26 | 00,000,000 | ---D | C] -- C:\\Program Files\\ESET [2009-12-03 19:58:26 | 00,000,000 | ---D | C] -- C:\\Documents and Settings\\All Users\\Dane aplikacji\\ESET [2009-12-03 19:06:24 | 00,000,000 | ---D | C] -- C:\\Documents and Settings\\Belmondo\\Pulpit\\xxxxxxxxxxxxxx [2009-12-03 18:55:10 | 00,212,480 | ---- | C] (SteelWerX) -- C:\\WINDOWS\\SWXCACLS.exe [2009-12-03 18:55:10 | 00,161,792 | ---- | C] (SteelWerX) -- C:\\WINDOWS\\SWREG.exe [2009-12-03 18:55:10 | 00,136,704 | ---- | C] (SteelWerX) -- C:\\WINDOWS\\SWSC.exe [2009-12-03 18:55:04 | 19,968,616 | ---- | C] (Skype Technologies S.A. ) -- C:\\Documents and Settings\\Belmondo\\Pulpit\\SkypeSetup.exe [2009-12-03 18:54:58 | 00,783,360 | ---- | C] (Borland Software Corporation) -- C:\\WINDOWS\\System32\\rtl70.bpl [2009-12-03 18:54:53 | 02,157,568 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\MicCal.exe [2009-12-03 18:54:53 | 00,129,536 | ---- | C] (Zeal SoftStudio) -- C:\\WINDOWS\\System32\\ntport.dll [3 C:\\WINDOWS\\*.tmp files -> C:\\WINDOWS\\*.tmp -> ] [1 C:\\WINDOWS\\System32\\*.tmp files -> C:\\WINDOWS\\System32\\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-12-09 06:09:36 | 00,200,819 | ---- | M] () -- C:\\WINDOWS\\System32\\nvapps.xml [2009-12-09 06:09:30 | 00,000,006 | -H-- | M] () -- C:\\WINDOWS\\tasks\\SA.DAT [2009-12-09 06:09:29 | 00,002,048 | --S- | M] () -- C:\\WINDOWS\\bootstat.dat [2009-12-09 06:04:44 | 00,566,724 | ---- | M] () -- C:\\WINDOWS\\System32\\perfh015.dat [2009-12-09 06:04:44 | 00,501,416 | ---- | M] () -- C:\\WINDOWS\\System32\\perfh009.dat [2009-12-09 06:04:44 | 00,122,540 | ---- | M] () -- C:\\WINDOWS\\System32\\perfc015.dat [2009-12-09 06:04:44 | 00,095,576 | ---- | M] () -- C:\\WINDOWS\\System32\\perfc009.dat [2009-12-09 06:04:44 | 00,004,808 | ---- | M] () -- C:\\WINDOWS\\System32\\PerfStringBackup.INI [2009-12-09 06:02:38 | 03,407,872 | -H-- | M] () -- C:\\Documents and Settings\\Belmondo\\NTUSER.DAT [2009-12-09 06:02:30 | 06,291,456 | -H-- | M] () -- C:\\Documents and Settings\\Belmondo\\Ustawienia lokalne\\Dane aplikacji\\IconCache.db [2009-12-09 06:00:13 | 00,000,219 | ---- | M] () -- C:\\WINDOWS\\System32\\MRT.INI [2009-12-09 05:58:58 | 00,001,374 | ---- | M] () -- C:\\WINDOWS\\imsins.BAK [2009-12-09 05:56:02 | 00,002,422 | ---- | M] () -- C:\\WINDOWS\\System32\\wpa.dbl [2009-12-08 21:10:23 | 00,000,188 | -HS- | M] () -- C:\\Documents and Settings\\Belmondo\\ntuser.ini [2009-12-08 20:44:53 | 00,001,734 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Pulpit\\HijackThis.lnk [2009-12-07 14:38:32 | 00,000,216 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\grids.ini [2009-12-07 13:00:53 | 00,148,768 | ---- | M] () -- C:\\WINDOWS\\System32\\drivers\\atapi.sys [2009-12-07 09:00:39 | 00,068,456 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Ustawienia lokalne\\Dane aplikacji\\GDIPFONTCACHEV1.DAT [2009-12-04 18:40:33 | 00,269,392 | ---- | M] () -- C:\\WINDOWS\\System32\\FNTCACHE.DAT [2009-12-04 08:57:48 | 00,000,116 | ---- | M] () -- C:\\WINDOWS\\System32\\fjhdyfhsn.bat [2009-12-04 08:57:43 | 00,000,004 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\avdrn.dat [2009-12-04 06:57:27 | 00,000,244 | ---- | M] () -- C:\\WINDOWS\\Link_wprowadzacz.INI [2009-12-03 19:35:23 | 00,002,596 | ---- | M] () -- C:\\WINDOWS\\System32\\CONFIG.NT [2009-12-03 18:55:10 | 19,968,616 | ---- | M] (Skype Technologies S.A. ) -- C:\\Documents and Settings\\Belmondo\\Pulpit\\SkypeSetup.exe [2009-12-03 18:55:10 | 00,212,480 | ---- | M] (SteelWerX) -- C:\\WINDOWS\\SWXCACLS.exe [2009-12-03 18:55:10 | 00,161,792 | ---- | M] (SteelWerX) -- C:\\WINDOWS\\SWREG.exe [2009-12-03 18:55:10 | 00,136,704 | ---- | M] (SteelWerX) -- C:\\WINDOWS\\SWSC.exe [2009-12-03 18:54:58 | 00,783,360 | ---- | M] (Borland Software Corporation) -- C:\\WINDOWS\\System32\\rtl70.bpl [2009-12-03 18:54:53 | 02,157,568 | ---- | M] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\MicCal.exe [2009-12-03 18:54:53 | 00,129,536 | ---- | M] (Zeal SoftStudio) -- C:\\WINDOWS\\System32\\ntport.dll [2009-12-03 06:23:12 | 00,000,227 | ---- | M] () -- C:\\WINDOWS\\system.ini [2009-11-28 00:21:37 | 00,032,450 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Pulpit\\Wypalenie zawodowe.docx [2009-11-27 17:49:55 | 00,002,513 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Pulpit\\Microsoft Office Word 2007.lnk [2009-11-23 21:33:42 | 00,780,618 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00024.jpg [2009-11-23 21:33:42 | 00,761,914 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00022.jpg [2009-11-23 21:33:42 | 00,728,691 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00023.jpg [2009-11-23 21:33:42 | 00,452,630 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00025.jpg [2009-11-23 21:33:41 | 00,820,624 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00015.jpg [2009-11-23 21:33:41 | 00,652,041 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00017.jpg [2009-11-23 21:33:41 | 00,572,916 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00018.jpg [2009-11-23 21:33:41 | 00,570,809 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00016.jpg [2009-11-23 21:33:41 | 00,425,861 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00019.jpg [2009-11-22 20:38:01 | 00,011,582 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Maria Grabowska 16-20.11.09.docx [2009-11-21 17:03:37 | 01,206,508 | ---- | M] () -- C:\\WINDOWS\\System32\\dllcache\\sysmain.sdb [2009-11-21 17:03:06 | 00,471,552 | ---- | M] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\aclayers.dll [2009-11-14 23:03:28 | 00,011,097 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Wyższa Szkoła Informatyki.docx [2009-11-14 01:47:57 | 00,260,608 | ---- | M] () -- C:\\WINDOWS\\PEV.exe [2009-11-12 18:47:43 | 00,013,289 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Maria Grabowska 9-13.11.09.docx [2009-11-12 16:05:10 | 00,012,624 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\tomsad namiary.docx [2009-11-10 13:07:23 | 00,013,601 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\9 listopad.docx [2009-11-09 13:58:44 | 00,010,070 | ---- | M] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Mańkowski Tadeusz Zakład RTV.docx [3 C:\\WINDOWS\\*.tmp files -> C:\\WINDOWS\\*.tmp -> ] [1 C:\\WINDOWS\\System32\\*.tmp files -> C:\\WINDOWS\\System32\\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2009-12-09 06:00:13 | 00,000,219 | ---- | C] () -- C:\\WINDOWS\\System32\\MRT.INI [2009-12-08 20:44:53 | 00,001,734 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Pulpit\\HijackThis.lnk [2009-12-04 13:00:26 | 00,001,374 | ---- | C] () -- C:\\WINDOWS\\imsins.BAK [2009-12-04 08:57:48 | 00,000,116 | ---- | C] () -- C:\\WINDOWS\\System32\\fjhdyfhsn.bat [2009-12-04 08:57:43 | 00,000,004 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\avdrn.dat [2009-12-03 06:15:50 | 00,077,312 | ---- | C] () -- C:\\WINDOWS\\MBR.exe [2009-11-27 17:53:17 | 00,032,450 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Pulpit\\Wypalenie zawodowe.docx [2009-11-23 21:33:42 | 00,780,618 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00024.jpg [2009-11-23 21:33:42 | 00,761,914 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00022.jpg [2009-11-23 21:33:42 | 00,728,691 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00023.jpg [2009-11-23 21:33:42 | 00,452,630 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00025.jpg [2009-11-23 21:33:41 | 00,820,624 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00015.jpg [2009-11-23 21:33:41 | 00,652,041 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00017.jpg [2009-11-23 21:33:41 | 00,572,916 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00018.jpg [2009-11-23 21:33:41 | 00,570,809 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00016.jpg [2009-11-23 21:33:41 | 00,425,861 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\DSC00019.jpg [2009-11-22 20:38:01 | 00,011,582 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Maria Grabowska 16-20.11.09.docx [2009-11-14 23:03:28 | 00,011,097 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Wyższa Szkoła Informatyki.docx [2009-11-12 18:45:56 | 00,013,289 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Maria Grabowska 9-13.11.09.docx [2009-11-09 13:58:44 | 00,010,070 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Moje dokumenty\\Mańkowski Tadeusz Zakład RTV.docx [2009-10-13 14:36:31 | 00,000,216 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\grids.ini [2008-12-30 19:32:35 | 00,002,528 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\$_hpcst$.hpc [2008-12-29 11:24:36 | 00,618,496 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3gang.dll [2008-12-12 15:53:13 | 00,007,168 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Ustawienia lokalne\\Dane aplikacji\\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-12-12 15:51:23 | 00,164,352 | ---- | C] () -- C:\\WINDOWS\\System32\\unrar.dll [2008-12-12 15:51:23 | 00,000,038 | ---- | C] () -- C:\\WINDOWS\\avisplitter.ini [2008-11-09 11:34:55 | 00,000,082 | ---- | C] () -- C:\\WINDOWS\\Setuptl.ini [2008-11-06 21:25:29 | 00,167,936 | ---- | C] () -- C:\\WINDOWS\\System32\\hpsfs.dll [2008-11-04 22:59:40 | 00,114,688 | ---- | C] () -- C:\\WINDOWS\\System32\\WLANUTL.dll [2008-11-04 22:43:27 | 00,000,144 | ---- | C] () -- C:\\WINDOWS\\Readiris.ini [2008-11-04 22:05:44 | 00,000,133 | ---- | C] () -- C:\\Documents and Settings\\Belmondo\\Ustawienia lokalne\\Dane aplikacji\\fusioncache.dat [2008-11-04 09:23:27 | 00,000,244 | ---- | C] () -- C:\\WINDOWS\\Link_wprowadzacz.INI [2008-11-03 23:02:43 | 00,041,160 | R--- | C] () -- C:\\WINDOWS\\System32\\gwmvidms.dll [2008-11-03 23:02:42 | 00,081,920 | R--- | C] () -- C:\\WINDOWS\\System32\\gwmhook.dll [2008-11-03 23:02:42 | 00,073,785 | R--- | C] () -- C:\\WINDOWS\\System32\\welogon.dll [2008-11-03 23:02:42 | 00,042,037 | R--- | C] () -- C:\\WINDOWS\\System32\\gwmvid.dll [2008-11-03 23:02:42 | 00,041,160 | R--- | C] () -- C:\\WINDOWS\\System32\\gwmvidcx.dll [2008-11-03 23:01:37 | 00,000,380 | ---- | C] () -- C:\\WINDOWS\\dcmuser.ini [2008-10-07 13:33:00 | 01,703,936 | ---- | C] () -- C:\\WINDOWS\\System32\\nvwdmcpl.dll [2008-10-07 13:33:00 | 01,486,848 | ---- | C] () -- C:\\WINDOWS\\System32\\nview.dll [2008-10-07 13:33:00 | 01,019,904 | ---- | C] () -- C:\\WINDOWS\\System32\\nvwimg.dll [2008-10-07 13:33:00 | 00,466,944 | ---- | C] () -- C:\\WINDOWS\\System32\\nvshell.dll [2008-10-07 13:33:00 | 00,286,720 | ---- | C] () -- C:\\WINDOWS\\System32\\nvnt4cpl.dll [2008-06-11 09:02:34 | 00,058,648 | ---- | C] () -- C:\\WINDOWS\\System32\\AgCPanelTraditionalChinese.dll [2008-06-11 09:02:34 | 00,058,648 | ---- | C] () -- C:\\WINDOWS\\System32\\AgCPanelSwedish.dll [2008-06-11 09:02:34 | 00,058,648 | ---- | C] () -- C:\\WINDOWS\\System32\\AgCPanelSpanish.dll [2008-06-11 09:02:34 | 00,058,648 | ---- | C] () -- C:\\WINDOWS\\System32\\AgCPanelSimplifiedChinese.dll [2008-06-11 09:02:34 | 00,058,648 | ---- | C] () -- C:\\WINDOWS\\System32\\AgCPanelPortugese.dll [2008-06-11 09:02:34 | 00,058,648 | ---- | C] () -- C:\\WINDOWS\\System32\\AgCPanelKorean.dll [2008-06-11 09:02:32 | 00,058,648 | ---- | C] () -- C:\\WINDOWS\\System32\\AgCPanelJapanese.dll [2008-06-11 09:02:32 | 00,058,648 | ---- | C] () -- C:\\WINDOWS\\System32\\AgCPanelGerman.dll [2008-06-11 09:02:32 | 00,058,648 | ---- | C] () -- C:\\WINDOWS\\System32\\AgCPanelFrench.dll [2008-06-05 08:58:26 | 00,197,912 | ---- | C] () -- C:\\WINDOWS\\System32\\physxcudart_20.dll [2008-04-15 13:00:00 | 00,148,768 | ---- | C] () -- C:\\WINDOWS\\System32\\drivers\\atapi.sys [2008-01-02 07:05:21 | 00,864,256 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3epm2.dll [2007-12-14 12:51:58 | 00,163,840 | ---- | C] () -- C:\\WINDOWS\\System32\\hppatusg01.dll [2007-10-30 02:38:32 | 01,826,816 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3190.dll [2006-09-18 03:59:17 | 00,561,152 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3list.dll [2006-08-23 01:56:59 | 01,318,912 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3opt.dll [2006-08-19 03:06:17 | 00,593,920 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3pin.dll [2006-06-08 07:39:03 | 00,372,736 | ---- | C] () -- C:\\WINDOWS\\System32\\vp6io.dll [2006-06-07 04:49:04 | 02,650,112 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3mpu5.dll [2006-02-09 02:48:41 | 01,847,296 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3180.dll [2005-10-17 07:45:22 | 03,592,192 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3sepm2.dll [2005-08-29 11:22:04 | 00,569,344 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3ram.dll [2005-07-01 11:08:54 | 06,807,552 | ---- | C] () -- C:\\WINDOWS\\System32\\adpter.dll [2005-05-27 07:39:28 | 01,351,680 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3mpu4.dll [2005-01-22 02:49:57 | 01,200,128 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3SEPM1.dll [2005-01-14 09:44:16 | 00,491,520 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3base.dll [2004-09-17 08:28:50 | 00,036,864 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3io.dll [2004-09-13 07:43:07 | 01,867,776 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3epm3.dll [2004-09-05 04:15:04 | 02,543,616 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3MPU.dll [2004-09-05 04:14:57 | 02,260,992 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3sepm.dll [2004-09-05 04:14:56 | 03,600,384 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3mpu1.dll [2004-09-05 04:14:56 | 02,617,344 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3mpu2.dll [2004-09-05 04:14:55 | 01,495,040 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3epm.dll [2004-09-05 04:14:55 | 00,552,960 | ---- | C] () -- C:\\WINDOWS\\System32\\vp3com.dll [color=#E56717]========== LOP Check ==========[/color] [2009-09-14 20:29:26 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\All Users\\Dane aplikacji\\ashampoo [2009-12-03 19:58:26 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\All Users\\Dane aplikacji\\ESET [2008-11-09 11:34:56 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\All Users\\Dane aplikacji\\GW Micro [2009-11-08 12:33:30 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\All Users\\Dane aplikacji\\ipla [2009-11-03 10:25:17 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\12Voip [2009-09-14 20:29:47 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\Ashampoo [2008-12-12 16:01:08 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\BESTplayer [2009-12-03 19:59:13 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\ESET [2008-11-03 23:17:53 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\Gadu-Gadu [2008-11-09 11:35:25 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\GW Micro [2009-12-03 05:50:23 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\ipla [2009-10-15 05:58:58 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\Thunderbird [2008-11-03 21:54:27 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\TMP [2009-08-11 19:41:57 | 00,000,000 | ---D | M] -- C:\\Documents and Settings\\Belmondo\\Dane aplikacji\\VoipDiscount [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\\*.* >[/color] [2008-11-03 20:10:06 | 00,000,000 | ---- | M] () -- C:\\AUTOEXEC.BAT [2008-11-03 20:04:48 | 00,000,211 | -HS- | M] () -- C:\\boot.ini [2008-04-15 13:00:00 | 00,004,952 | RHS- | M] () -- C:\\Bootfont.bin [2009-12-03 06:23:52 | 00,008,068 | ---- | M] () -- C:\\ComboFix.txt [2008-11-03 20:10:06 | 00,000,000 | ---- | M] () -- C:\\CONFIG.SYS [2008-11-06 21:25:50 | 00,001,194 | ---- | M] () -- C:\\fwdownload.log [2008-11-03 20:10:06 | 00,000,000 | RHS- | M] () -- C:\\IO.SYS [2008-11-03 20:10:06 | 00,000,000 | RHS- | M] () -- C:\\MSDOS.SYS [2008-04-15 13:00:00 | 00,047,564 | RHS- | M] () -- C:\\NTDETECT.COM [2008-04-15 13:00:00 | 00,251,152 | RHS- | M] () -- C:\\ntldr [2009-12-09 06:09:26 | 21,453,86496 | -HS- | M] () -- C:\\pagefile.sys [2008-11-04 23:01:32 | 00,000,159 | ---- | M] () -- C:\\Setup.log [color=#A23BEC]< %systemdrive%\\*. >[/color] [2009-12-07 12:59:14 | 00,000,000 | -HSD | M] -- C:\\Config.Msi [2008-11-03 22:56:33 | 00,000,000 | ---D | M] -- C:\\DirectX [2008-11-03 20:31:11 | 00,000,000 | ---D | M] -- C:\\Documents and Settings [2008-11-03 21:50:13 | 00,000,000 | ---D | M] -- C:\\Intel [2008-11-07 15:28:17 | 00,000,000 | R--D | M] -- C:\\MSOCache [2008-11-03 21:34:55 | 00,000,000 | ---D | M] -- C:\\NVIDIA [2009-12-08 20:44:52 | 00,000,000 | R--D | M] -- C:\\Program Files [2009-07-24 20:09:56 | 00,000,000 | ---D | M] -- C:\\RECYCLER [2009-03-29 11:00:41 | 00,000,000 | -HSD | M] -- C:\\System Volume Information [2008-11-05 17:55:42 | 00,000,000 | ---D | M] -- C:\\temp [2009-10-15 15:58:49 | 00,000,000 | ---D | M] -- C:\\weilei [2009-12-09 06:03:29 | 00,000,000 | ---D | M] -- C:\\WINDOWS [color=#A23BEC]< %systemroot%\\*. /mp /s >[/color] [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-12-07 13:00:53 | 00,148,768 | ---- | M] () MD5=0B6D32482F49F3B1689903D88E6B19EB -- C:\\WINDOWS\\system32\\drivers\\atapi.sys [2008-04-14 00:10:32 | 00,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\\WINDOWS\\ERDNT\\cache\\atapi.sys [2008-04-15 13:00:00 | 00,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\\WINDOWS\\system32\\drivers\\system32\\DRIVERS\\atapi.sys [2008-04-15 13:00:00 | 00,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\\WINDOWS\\system32\\ReinstallBackups\\0005\\DriverFiles\\i386\\atapi.sys [2008-04-14 00:10:32 | 00,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\\WINDOWS\\system32\\ReinstallBackups\\0006\\DriverFiles\\i386\\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2008-04-15 13:00:00 | 00,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\\WINDOWS\\ERDNT\\cache\\beep.sys [2008-04-15 13:00:00 | 00,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\\WINDOWS\\system32\\dllcache\\beep.sys [2008-04-15 13:00:00 | 00,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\\WINDOWS\\system32\\drivers\\beep.sys [color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color] [2008-04-15 13:00:00 | 00,056,320 | ---- | M] (Microsoft Corporation) MD5=35FCCFD093582FA9098762E6F84EE119 -- C:\\WINDOWS\\ERDNT\\cache\\eventlog.dll [2008-04-15 13:00:00 | 00,056,320 | ---- | M] (Microsoft Corporation) MD5=35FCCFD093582FA9098762E6F84EE119 -- C:\\WINDOWS\\system32\\dllcache\\eventlog.dll [2008-04-15 13:00:00 | 00,056,320 | ---- | M] (Microsoft Corporation) MD5=35FCCFD093582FA9098762E6F84EE119 -- C:\\WINDOWS\\system32\\eventlog.dll [color=#A23BEC]< MD5 for: REGEDIT.CHM >[/color] [2008-04-15 13:00:00 | 00,053,056 | ---- | M] () MD5=7B36C6E57479774E800FC8EA1C2AD743 -- C:\\WINDOWS\\Help\\regedit.chm [color=#A23BEC]< MD5 for: REGEDIT.EXE >[/color] [2008-04-15 13:00:00 | 00,149,504 | ---- | M] (Microsoft Corporation) MD5=FD317A23C3EB2A856E74279FBE04B9C2 -- C:\\WINDOWS\\regedit.exe [2008-04-15 13:00:00 | 00,149,504 | ---- | M] (Microsoft Corporation) MD5=FD317A23C3EB2A856E74279FBE04B9C2 -- C:\\WINDOWS\\system32\\dllcache\\regedit.exe [color=#A23BEC]< MD5 for: REGEDIT.HLP >[/color] [2008-04-15 13:00:00 | 00,013,121 | ---- | M] () MD5=6F7ECEC8CFCBA3651815A0B03E304CEA -- C:\\WINDOWS\\Help\\regedit.hlp < End of report >

Nowy Komentarz:

Komentarze: