zwracam się z prośbą o wskazanie mi owych syfów i propozycję co mam z nimi zrobić. będę wdzięczny :-)
GMER -> http://www.wklej.org/id/340814/
- Kod: Zaznacz wszystko
OTL logfile created on: 2010-05-27 12:50:50 - Run 2
OTL by OldTimer - Version 3.2.5.0 Folder = C:\Documents and Settings\Paździerz\Pulpit
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
767,00 Mb Total Physical Memory | 228,00 Mb Available Physical Memory | 30,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0D:\pagefile.sys 384 2304 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 9,77 Gb Total Space | 1,04 Gb Free Space | 10,65% Space Free | Partition Type: NTFS
Drive D: | 13,67 Gb Total Space | 0,14 Gb Free Space | 1,04% Space Free | Partition Type: NTFS
Drive E: | 13,82 Gb Total Space | 3,21 Gb Free Space | 23,22% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 10,84 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
I: Drive not present or media not loaded
Computer Name: X
Current User Name: Paździerz
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010-05-26 00:00:33 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paździerz\Pulpit\OTL.exe
PRC - [2010-04-17 09:22:33 | 000,693,016 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgcsrvx.exe
PRC - [2010-04-17 09:22:22 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe
PRC - [2010-04-07 16:06:29 | 000,595,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe
PRC - [2010-04-07 16:06:29 | 000,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe
PRC - [2010-04-07 16:06:27 | 000,908,056 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe
PRC - [2010-03-31 14:41:11 | 000,307,672 | ---- | M] (Mozilla Corporation) -- E:\fire fox\firefox.exe
PRC - [2009-12-23 12:16:13 | 000,114,688 | ---- | M] () -- C:\Program Files\PLAY ONLINE\PLAY ONLINE.exe
PRC - [2009-08-31 18:07:34 | 011,391,592 | ---- | M] (GG Network S.A.) -- D:\ggggg\Nowe Gadu-Gadu\gg.exe
PRC - [2009-08-31 16:56:26 | 000,077,824 | ---- | M] () -- D:\ggggg\Nowe Gadu-Gadu\spellchecker_gg.exe
PRC - [2007-06-13 15:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010-05-26 00:00:33 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paździerz\Pulpit\OTL.exe
MOD - [2006-08-25 17:51:13 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
MOD - [2004-08-03 23:01:18 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - File not found [Disabled | Stopped] -- -- (gusvc)
SRV - [2010-04-17 09:22:22 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd)
SRV - [2010-04-07 16:06:27 | 000,908,056 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc)
SRV - [2007-03-26 13:06:24 | 000,292,864 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2004-09-29 12:14:36 | 000,069,632 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2002-12-17 17:26:22 | 007,520,337 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -- (MSSQL$SONY_MEDIAMGR)
SRV - [2002-12-17 17:23:30 | 000,311,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -- (SQLAgent$SONY_MEDIAMGR)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2010-04-07 16:06:52 | 000,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010-04-07 16:06:50 | 000,335,240 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010-04-07 16:06:47 | 000,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2009-04-16 20:43:48 | 000,138,512 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2008-09-26 19:01:00 | 000,101,376 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2007-10-08 21:08:07 | 000,008,413 | ---- | M] (RealNetworks, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\mcstrm.sys -- (MCSTRM)
DRV - [2007-02-22 10:15:56 | 000,137,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (nmwcd)
DRV - [2007-02-22 10:15:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (nmwcdcm)
DRV - [2007-02-22 10:15:14 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (nmwcdc)
DRV - [2006-05-03 18:50:42 | 001,540,608 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006-02-23 11:38:00 | 000,009,728 | R--- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\videX32.sys -- (videX32)
DRV - [2004-08-03 23:08:22 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2003-07-02 04:42:00 | 000,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
DRV - [2003-06-09 03:44:32 | 000,113,840 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2003-06-09 03:44:22 | 000,494,384 | R--- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2003-06-09 03:42:28 | 000,819,984 | R--- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV - [2002-07-19 10:48:32 | 000,156,604 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2002-07-19 10:48:22 | 000,213,860 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2002-07-19 10:48:08 | 000,011,068 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2002-07-19 10:46:28 | 000,127,948 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2002-03-12 17:57:00 | 000,043,776 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\viaudio.sys -- (VIAudio) VIA AC'97 Enhanced Audio Controller (WDM)
DRV - [2001-08-17 23:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)
DRV - [2001-08-17 22:28:12 | 000,488,383 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\HSF_V124.sys -- (V124)
DRV - [2001-08-17 22:28:12 | 000,050,751 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\HSF_TONE.sys -- (Tones)
DRV - [2001-08-17 22:28:10 | 000,542,879 | ---- | M] (Conexant) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_MSFT.sys -- (hsf_msft)
DRV - [2001-08-17 22:28:10 | 000,057,471 | ---- | M] (Conexant) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_SAMP.sys -- (Rksample)
DRV - [2001-08-17 22:28:08 | 000,391,199 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\HSF_K56K.sys -- (K56)
DRV - [2001-08-17 22:28:06 | 000,289,887 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\HSF_FALL.sys -- (Fallback)
DRV - [2001-08-17 22:28:06 | 000,199,711 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\HSF_FAXX.sys -- (SoftFax)
DRV - [2001-08-17 22:28:06 | 000,115,807 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\HSF_FSKS.sys -- (Fsks)
DRV - [2001-08-17 22:28:04 | 000,067,167 | ---- | M] (Conexant) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_BSC2.sys -- (basic2)
DRV - [2001-08-17 21:19:20 | 000,003,712 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctljystk.sys -- (ctljystk)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://alawar.pl
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://alawar.pl
IE - HKCU\..\URLSearchHook: {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgr1.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5.0.429
FF - prefs.js..extensions.enabledItems: avg@igeared:3.011.025.005
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2010-04-17 09:24:39 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\avg@igeared: C:\Program Files\AVG\AVG8\Toolbar\Firefox\avg@igeared [2010-04-18 21:38:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Components: E:\fire fox\components [2010-05-15 10:09:22 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Plugins: E:\fire fox\plugins [2010-03-31 14:41:17 | 000,000,000 | ---D | M]
[2009-12-23 18:20:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\Mozilla\Extensions
[2010-02-01 13:45:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\Mozilla\Firefox\Profiles\oekviv5j.default\extensions
[2008-01-14 22:04:44 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
O1 HOSTS File: ([2001-10-30 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\bit comet\BitComet\tools\BitCometBHO_1.2.2.28.dll (BitComet)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgr1.dll (Conduit Ltd.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - No CLSID value found.
O2 - BHO: (no name) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - No CLSID value found.
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Chłopcy\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgr1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [Jet Detection] C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe ()
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKCU..\Run: [Nowe Gadu-Gadu] D:\ggggg\Nowe Gadu-Gadu\gg.exe (GG Network S.A.)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - E:\bit comet\BitComet\tools\BitCometBHO_1.2.2.28.dll (BitComet)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_15-windows-i586.cab (Java Plug-in 1.5.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Paździerz\Pulpit\prawda.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Paździerz\Pulpit\prawda.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007-06-14 17:05:38 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2007-03-19 22:51:28 | 000,001,570 | ---- | M] () - D:\Auto.txt -- [ NTFS ]
O32 - AutoRun File - [2008-04-24 15:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.) - H:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2007-11-07 17:41:52 | 000,000,047 | R--- | M] () - H:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{32998a60-efc6-11de-9782-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{32998a60-efc6-11de-9782-806d6172696f}\Shell\AutoRun\command - "" = I:\AutoRun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2010-05-26 00:01:59 | 000,571,904 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Paździerz\Pulpit\OTL.exe
[2010-05-25 23:47:51 | 000,880,624 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Paździerz\Pulpit\SPTDinst-v162-x86.exe
[2010-05-25 23:02:28 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Paździerz\Recent
[2010-05-10 09:59:18 | 000,000,000 | -H-D | C] -- C:\$AVG8.VAULT$
[2010-05-06 14:49:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paździerz\Dane aplikacji\WinRAR
[2010-05-03 14:10:19 | 000,000,000 | ---D | C] -- C:\Program Files\bfgclient
[2010-05-03 14:08:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\BigFishGamesCache
[2010-05-02 22:50:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paździerz\Pulpit\asd
[2007-06-15 12:42:49 | 000,065,536 | R--- | C] ( ) -- C:\WINDOWS\System32\a3d.dll
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010-05-27 12:26:40 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-05-27 12:24:08 | 003,145,728 | ---- | M] () -- C:\Documents and Settings\Paździerz\NTUSER.DAT
[2010-05-27 12:24:08 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Paździerz\ntuser.ini
[2010-05-27 08:10:42 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-05-27 08:10:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-05-26 23:09:59 | 000,003,888 | ---- | M] () -- C:\WINDOWS\System32\BMXCtrlState-{00000000-00000000-00000009-00001102-00000002-80651102}.rfx
[2010-05-26 23:09:59 | 000,003,888 | ---- | M] () -- C:\WINDOWS\System32\BMXBkpCtrlState-{00000000-00000000-00000009-00001102-00000002-80651102}.rfx
[2010-05-26 23:08:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\ppsrc.ini
[2010-05-26 18:41:20 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010-05-26 00:00:33 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paździerz\Pulpit\OTL.exe
[2010-05-25 23:57:24 | 000,293,376 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\zbg768e1.exe
[2010-05-25 23:49:15 | 002,108,780 | -H-- | M] () -- C:\Documents and Settings\Paździerz\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-05-25 23:46:40 | 000,880,624 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Paździerz\Pulpit\SPTDinst-v162-x86.exe
[2010-05-25 23:36:18 | 000,000,604 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-05-25 23:36:18 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-05-25 23:36:18 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2010-05-25 21:28:00 | 000,000,000 | ---- | M] () -- C:\WINDOWS\ppsrc.ini.bak
[2010-05-18 19:25:03 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010-05-17 19:01:15 | 060,075,572 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010-05-16 00:10:57 | 004,648,618 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - krosah.mp31273946237_[mp3.teledyski.info].mp3
[2010-05-15 21:57:36 | 003,799,743 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - lavanya.mp31273402587_[mp3.teledyski.info].mp3
[2010-05-15 21:48:12 | 004,125,333 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - varuna.mp31273946124_[mp3.teledyski.info].mp3
[2010-05-12 16:07:07 | 003,496,722 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - vishnu.mp31273402580_[mp3.teledyski.info].mp3
[2010-05-12 16:03:28 | 003,528,455 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - pompeii (full).mp31273403194_[mp3.teledyski.info].mp3
[2010-05-10 13:37:16 | 000,047,924 | ---- | M] () -- C:\Documents and Settings\Paździerz\Moje dokumenty\cc_20100510_1337.reg
[2010-05-10 09:42:15 | 000,000,552 | ---- | M] () -- C:\WINDOWS\System32\d3d8caps.dat
[2010-05-09 13:00:07 | 003,328,241 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - lepcis magna.mp31273402599_[mp3.teledyski.info].mp3
[2010-05-03 16:35:36 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\Edytor Pytań v2ed.lnk
[2010-05-03 16:35:36 | 000,000,465 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\Gra w ciemno v2 2007.lnk
[2010-05-03 16:29:43 | 000,000,436 | ---- | M] () -- C:\Documents and Settings\Paździerz\Pulpit\Gra w ciemno.lnk
[2010-05-02 17:02:53 | 000,017,920 | ---- | M] () -- C:\Documents and Settings\Paździerz\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010-05-25 23:57:43 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\zbg768e1.exe
[2010-05-15 21:31:31 | 004,648,618 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - krosah.mp31273946237_[mp3.teledyski.info].mp3
[2010-05-15 21:31:28 | 003,799,743 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - lavanya.mp31273402587_[mp3.teledyski.info].mp3
[2010-05-15 21:31:27 | 003,528,455 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - pompeii (full).mp31273403194_[mp3.teledyski.info].mp3
[2010-05-15 21:31:17 | 003,496,722 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - vishnu.mp31273402580_[mp3.teledyski.info].mp3
[2010-05-15 21:23:33 | 003,328,241 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - lepcis magna.mp31273402599_[mp3.teledyski.info].mp3
[2010-05-15 21:23:28 | 004,125,333 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\e.s. posthumus - varuna.mp31273946124_[mp3.teledyski.info].mp3
[2010-05-10 13:37:05 | 000,047,924 | ---- | C] () -- C:\Documents and Settings\Paździerz\Moje dokumenty\cc_20100510_1337.reg
[2010-05-10 09:42:15 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2010-05-03 16:35:36 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\Edytor Pytań v2ed.lnk
[2010-05-03 16:35:36 | 000,000,465 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\Gra w ciemno v2 2007.lnk
[2010-05-03 16:29:43 | 000,000,436 | ---- | C] () -- C:\Documents and Settings\Paździerz\Pulpit\Gra w ciemno.lnk
[2009-07-16 16:45:58 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-07-16 16:45:57 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009-07-16 16:45:55 | 000,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-07-16 16:45:54 | 000,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-07-16 16:45:53 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009-07-16 16:45:51 | 000,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-07-16 16:45:51 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-06-24 19:13:37 | 000,000,083 | ---- | C] () -- C:\WINDOWS\7thlevel.ini
[2009-06-24 12:49:25 | 000,000,660 | ---- | C] () -- C:\WINDOWS\disney.ini
[2008-12-25 00:44:50 | 000,138,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2007-11-27 12:50:36 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2007-08-26 21:53:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ppsrc.ini.bak
[2007-08-26 21:53:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ppsrc.ini
[2007-08-26 19:25:25 | 000,000,035 | ---- | C] () -- C:\WINDOWS\Powerplayer.ini
[2007-08-26 19:25:18 | 000,000,179 | ---- | C] () -- C:\WINDOWS\psnetwork.ini
[2007-08-16 14:42:49 | 000,001,174 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2007-06-26 12:22:57 | 000,000,098 | ---- | C] () -- C:\WINDOWS\h3maped.INI
[2007-06-16 20:46:03 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007-06-16 17:08:28 | 000,000,795 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2007-06-16 15:49:46 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\adinst32.dll
[2007-06-16 14:59:02 | 000,000,086 | ---- | C] () -- C:\WINDOWS\kit.ini
[2007-06-15 13:45:22 | 000,000,046 | ---- | C] () -- C:\WINDOWS\adiras.ini
[2007-06-15 12:43:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SBWIN.INI
[2007-06-15 12:43:53 | 000,000,231 | ---- | C] () -- C:\WINDOWS\AC3API.INI
[2007-06-15 12:43:03 | 000,037,727 | ---- | C] () -- C:\WINDOWS\System32\Emu10kx.ini
[2007-06-15 12:43:03 | 000,000,029 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2007-06-15 12:42:53 | 000,000,180 | ---- | C] () -- C:\WINDOWS\System32\KILL.INI
[2007-06-15 11:18:19 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\UnAudioNT.dll
[2005-12-07 12:31:00 | 000,202,752 | R--- | C] () -- C:\WINDOWS\System32\CddbCdda.dll
[2005-04-26 03:05:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\vbZlib.dll
[2005-04-26 03:05:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\vbaZlib.dll
[2004-01-02 01:28:29 | 000,000,100 | ---- | C] () -- C:\WINDOWS\forevermopt.INI
[2004-01-02 01:28:13 | 000,000,317 | ---- | C] () -- C:\WINDOWS\mafosav.INI
[2001-07-06 15:30:02 | 000,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI
[color=#E56717]========== LOP Check ==========[/color]
[2010-03-20 21:16:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper
[2010-04-07 19:13:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar
[2009-01-25 23:35:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\gameplate.com
[2008-05-30 20:16:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IM
[2008-05-30 20:12:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IncrediMail
[2007-06-16 18:11:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2010-05-03 14:14:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InterAction studios
[2009-12-16 01:05:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2007-07-24 01:31:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2008-07-17 23:53:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony
[2010-05-03 14:47:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2010-03-20 23:15:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\Boolat Games
[2009-12-24 00:49:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\Nowe Gadu-Gadu
[2010-04-01 15:01:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\OpenFM
[2010-05-25 23:00:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\OpenOffice.ux.pl2
[2010-04-08 21:11:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\PC Suite
[2009-12-23 18:18:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\PPStream
[2009-12-24 23:32:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\Publish Providers
[2009-12-24 23:31:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paździerz\Dane aplikacji\Sony
[color=#E56717]========== Purity Check ==========[/color]
[color=#E56717]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 139 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:83BAA24B
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:888AFB86
< End of report >
- Kod: Zaznacz wszystko
OTL Extras logfile created on: 2010-05-27 12:50:50 - Run 2
OTL by OldTimer - Version 3.2.5.0 Folder = C:\Documents and Settings\Paździerz\Pulpit
Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
767,00 Mb Total Physical Memory | 228,00 Mb Available Physical Memory | 30,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0D:\pagefile.sys 384 2304 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 9,77 Gb Total Space | 1,04 Gb Free Space | 10,65% Space Free | Partition Type: NTFS
Drive D: | 13,67 Gb Total Space | 0,14 Gb Free Space | 1,04% Space Free | Partition Type: NTFS
Drive E: | 13,82 Gb Total Space | 3,21 Gb Free Space | 23,22% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 10,84 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
I: Drive not present or media not loaded
Computer Name: X
Current User Name: Paździerz
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- E:\fire fox\firefox.exe (Mozilla Corporation)
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"21483:TCP" = 21483:TCP:*:Enabled:BitComet 21483 TCP
"21483:UDP" = 21483:UDP:*:Enabled:BitComet 21483 UDP
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
[color=#E56717]========== Authorized Applications List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\MSN Messenger\msnmsgr.exe" = C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0 -- File not found
"C:\Program Files\MSN Messenger\msncall.exe" = C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) -- File not found
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny -- (Gadu-Gadu S.A.)
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare -- File not found
"C:\Program Files\MSN Messenger\msnmsgr.exe" = C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0 -- File not found
"C:\Program Files\MSN Messenger\msncall.exe" = C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) -- File not found
"C:\Program Files\KONAMI\Pro Evolution Soccer 6\PES6.exe" = C:\Program Files\KONAMI\Pro Evolution Soccer 6\PES6.exe:*:Enabled:pes6.exe -- (KONAMI)
"C:\Program Files\LimeWire\LimeWire.exe" = C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- File not found
"C:\Program Files\BearShare\BearShare.exe" = C:\Program Files\BearShare\BearShare.exe:*:Enabled:BearShare -- (Free Peers, Inc.)
"D:\HP\Digital Imaging\bin\hpofxm08.exe" = D:\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)
"D:\HP\Digital Imaging\bin\hposfx08.exe" = D:\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)
"D:\HP\Digital Imaging\bin\hposid01.exe" = D:\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"D:\HP\Digital Imaging\bin\hpqCopy.exe" = D:\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Co.)
"D:\HP\Digital Imaging\bin\hpfccopy.exe" = D:\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"D:\HP\Digital Imaging\bin\hpzwiz01.exe" = D:\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)
"D:\HP\Digital Imaging\Unload\HpqPhUnl.exe" = D:\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- ()
"D:\HP\Digital Imaging\Unload\HpqDIA.exe" = D:\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
"D:\HP\Digital Imaging\bin\hpoews01.exe" = D:\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"" = "C:\Program Files\PPStream\PPStream.exe" "C:\Program Files\PPStream\PPStream.exe:*:Enabled:PPStream" -- (PPStream.com)
"C:\Program Files\PPStream\PPStream.exe" = C:\Program Files\PPStream\PPStream.exe:*:Enabled:PPS???? -- (PPStream.com)
"C:\Program Files\TVUPlayer\TVUPlayer.exe" = C:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks)
"D:\RRR\rhapsody.exe" = D:\RRR\rhapsody.exe:*:Enabled:Rhapsody Media Player -- File not found
"E:\REM\rhapsody.exe" = E:\REM\rhapsody.exe:*:Enabled:Rhapsody Media Player -- File not found
"E:\gg\Gadu-Gadu\gg.exe" = E:\gg\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny -- (Gadu-Gadu S.A.)
"C:\Program Files\Best Buy Rhapsody\rhapsody.exe" = C:\Program Files\Best Buy Rhapsody\rhapsody.exe:*:Enabled:Rhapsody Media Player -- File not found
"C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- File not found
"C:\Documents and Settings\Chłopcy\Dane aplikacji\SopCast\adv\SopAdver.exe" = C:\Documents and Settings\Chłopcy\Dane aplikacji\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- File not found
"E:\FM08\fm.exe" = E:\FM08\fm.exe:*:Disabled:Football Manager 2008 -- File not found
"C:\Program Files\IncrediMail\bin\ImApp.exe" = C:\Program Files\IncrediMail\bin\ImApp.exe:*:Enabled:IncrediMail -- File not found
"C:\Program Files\IncrediMail\bin\IncMail.exe" = C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail -- File not found
"C:\Program Files\IncrediMail\bin\ImpCnt.exe" = C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail -- File not found
"E:\bit comet\BitComet\BitComet.exe" = E:\bit comet\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client -- (www.BitComet.com)
"D:\Gaduuu Gaduu\Gadu-Gadu\gg.exe" = D:\Gaduuu Gaduu\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny -- File not found
"E:\CLAW\cla.exe" = E:\CLAW\cla.exe:*:Enabled:Side-Scrolling Arcade-Action Game -- File not found
"C:\Program Files\Winamp Remote\bin\Orb.exe" = C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb -- File not found
"C:\Program Files\Winamp Remote\bin\OrbTray.exe" = C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray -- File not found
"C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe" = C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client -- File not found
"C:\Program Files\HEROES3\BLADE\h3blade.exe" = C:\Program Files\HEROES3\BLADE\h3blade.exe:*:Disabled:Heroes of Might and Magic(tm) III -- File not found
"E:\Wolfenstein - Enemy Territory\ETDED.exe" = E:\Wolfenstein - Enemy Territory\ETDED.exe:*:Enabled:ETDED -- ()
"E:\Wolfenstein - Enemy Territory\ET.exe" = E:\Wolfenstein - Enemy Territory\ET.exe:*:Enabled:ET -- File not found
"C:\worms\frontend.exe" = C:\worms\frontend.exe:*:Enabled:Worms 2 Frontend -- File not found
"C:\Program Files\Team17\Worms 2\frontend.exe" = C:\Program Files\Team17\Worms 2\frontend.exe:*:Enabled:Worms 2 Frontend -- File not found
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- File not found
"D:\gadu gadu nowe\Nowe Gadu-Gadu\gg.exe" = D:\gadu gadu nowe\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu -- File not found
"D:\ggggg\Nowe Gadu-Gadu\gg.exe" = D:\ggggg\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu -- (GG Network S.A.)
"C:\Program Files\AVG\AVG8\avgemc.exe" = C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG8\avgnsx.exe" = C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.)
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0611BD4E-4FE4-4a62-B0C0-18A4CC463428}" = CP_Package_Variety1
"{066D65EA-ED53-44E4-A96A-F81B6E409D2E}" = PC Connectivity Solution
"{09984AEC-6B9F-4ca7-B78D-CB44D4771DA3}" = Destinations
"{0B33B738-AD79-4E32-90C5-E67BFB10BBFF}" = AiO_Scan
"{15095BF3-A3D7-4DDF-B193-3A496881E003}" = Microsoft .NET Framework 3.0
"{15EE79F4-4ED1-4267-9B0F-351009325D7D}" = HP Software Update
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 2.5.4
"{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A}" = CP_Package_Variety3
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = Multimedia Launcher
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17
"{2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C}" = Unload
"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp
"{3248F0A8-6813-11D6-A77B-00B0D0150150}" = J2SE Runtime Environment 5.0 Update 15
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{350C97C2-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3AE08592-EAB2-4E47-A8CF-B7A51F803957}" = OpenOffice.ux.pl 2.2.0
"{3FCAADB8-EB1B-11D6-AB2D-0090271A23A2}" = Sound Blaster Live! Web 2K/XP
"{491DD792-AD81-429C-9EB4-86DD3D22E333}" = Windows Communication Foundation
"{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840
"{54E3707F-808E-4fd4-95C9-15D1AB077E5D}" = NewCopy
"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg
"{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}" = Nokia PC Suite
"{5B622B7A-60FB-4630-B11D-F121D20BCCD6}" = MarketResearch
"{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}" = HP PSC & OfficeJet 5.3.B
"{65248369-7CB9-43A9-82C8-C438AE04DED4}" = 1500
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724}" = DocProc
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74EC78BC-B379-4E29-9006-8F161DCAABA6}" = Apple Software Update
"{7850A6D2-CBEA-4728-9877-F1BEDEA9F619}" = AiOSoftware
"{7C9AD221-994C-45B2-B46D-26F5735158CF}" = Sony Vegas Pro 8.0
"{7C9B95B7-B598-4398-B30F-7F6827192E6C}" = ProductContext
"{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}" = Windows Workflow Foundation
"{81E06318-EEB9-4D55-8CD5-7AC9148D5E66}" = 1500_Help
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F}" = Readme
"{96965E6C-41DB-4E0A-BC65-D92381D51D2A}" = Sony Vegas 7.0
"{972B1D9B-0EAD-49E8-B7D6-3B83FD5665B1}" = Nokia Connectivity Cable Driver
"{9A00D1BA-D03A-44E5-AF28-86A1F377DF61}" = The Sims Abrakadabra
"{A05BE20E-6510-44BC-95ED-6E6D730407D3}" = Vplayer
"{A195B13E-A5E3-4BAF-A995-7F70F445CD06}" = ScannerCopy
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1045-7B44-A90000000001}" = Adobe Reader 9 - Polish
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA}" = CP_Package_Variety2
"{B97CF5C3-0487-11D8-A36E-0050BAE317E1}" = DVD Solution
"{B996AE66-10DB-4ac5-B151-E8B4BFBC42FC}" = BufferChm
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C506A18C-1469-4678-B094-F4EC9DAE6DB7}" = Scan
"{C9E129BC-27D3-436E-BAAC-4CE81E0962F1}" = Sony Media Manager 2.2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBA30674-A242-4531-82B5-586B31F90E04}" = 1500Trb
"{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC}" = Fax
"{E09B48B5-E141-427A-AB0C-D3605127224A}" = Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)
"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant
"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter
"{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}" = ATI Catalyst Control Center
"{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6
"{ED0B70E3-8980-4977-9545-E490655E111D}" = Cosmopolitan Virtual Makeover 3
"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status
"{F656DC79-013A-4683-8692-B938FC00B941}" = DkZ Studio
"{FE64AE29-0883-4C70-8388-DC026019C900}" = HP Image Zone Express
"0852D05415AB9A4F1EF451E342267F76C776ED2F" = Pakiet sterowników systemu Windows - Nokia Modem (11/03/2006 6.82.0.1)
"0C5EDC3653FED5B121F464339EAC12534D253B25" = Windows Driver Package - Nokia Modem (02/15/2007 3.1)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"All ATI Software" = ATI - Software Uninstall Utility
"ALLPlayer V2.3.1_is1" = ALLPlayer V2.3.1
"ATI Display Driver" = ATI Display Driver
"AVG8Uninstall" = AVG Free 8.5
"BearShare" = BearShare
"BFGC" = Big Fish Games: Game Manager
"BitComet" = BitComet 1.02
"CCleaner" = CCleaner (remove only)
"DkZ Studio0.9.1 BETA" = DkZ Studio
"F064B256B4A20996EA9E333B5E0F14B61AB3333D" = Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)
"Gimnazjum klasa 1 - Historia" = Gimnazjum klasa 1 - Historia
"Gra w ciemno_is1" = Gra w ciemno 1.0.0.3
"gry Toolbar" = gry Toolbar
"Heroes of Might and Magic III - Złota Edycja_is1" = Heroes of Might and Magic III - Złota Edycja
"HijackThis" = HijackThis 1.99.1
"HP Imaging Device Functions" = HP Imaging Device Functions 5.3
"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.3
"HPExtendedCapabilities" = HP Extended Capabilities 5.3
"Icy Tower v1.3.1_is1" = Icy Tower v1.3.1
"ie7" = Windows Internet Explorer 7
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"InstallShield_{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6
"Kawiarnia Amelii" = Kawiarnia Amelii
"KLiteCodecPack_is1" = K-Lite Codec Pack 4.8.5 (Full)
"Magic Block_is1" = Magic Block v1.0
"Magic Bullet Editors 2.0 Vegas" = Magic Bullet Editors 2.0 Vegas
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.0" = Microsoft .NET Framework 3.0
"Mozilla Firefox (3.0.19)" = Mozilla Firefox (3.0.19)
"Nero - Burning Rom!UninstallKey" = Nero OEM
"Nokia PC Suite" = Nokia PC Suite
"Nowe Gadu-Gadu" = Nowe Gadu-Gadu
"PLAY ONLINE" = PLAY ONLINE
"PPS" = PPS
"Szubienica" = Szubienica
"Total Video Converter 3.11_is1" = Total Video Converter 3.11
"TVUPlayer" = TVUPlayer 2.3.2.52
"VIA Audio Driver Setup Program" = VIA Audio Driver Setup Program
"Winamp Toolbar for Firefox" = Winamp Toolbar for Firefox
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = Archiwizator WinRAR
"XBTB01621.XBTB01621Toolbar" = BearShare MediaBar
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2010-04-08 11:07:08 | Computer Name = X | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd cthelper.exe, wersja 1.0.0.2, moduł powodujący
błąd ctspkhlp.dll, wersja 1.0.0.2, adres błędu 0x00001128.
Error - 2010-04-08 11:13:01 | Computer Name = X | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd cthelper.exe, wersja 1.0.0.2, moduł powodujący
błąd ctspkhlp.dll, wersja 1.0.0.2, adres błędu 0x00001128.
Error - 2010-04-08 15:09:22 | Computer Name = X | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd cthelper.exe, wersja 1.0.0.2, moduł powodujący
błąd ctspkhlp.dll, wersja 1.0.0.2, adres błędu 0x00001128.
Error - 2010-04-08 15:10:45 | Computer Name = X | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca avgtray.exe, wersja 8.5.0.422, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2010-04-12 05:06:06 | Computer Name = X | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 7.0.6000.16762, moduł
powodujący błąd flash10e.ocx, wersja 10.0.45.2, adres błędu 0x0023f221.
Error - 2010-04-14 16:07:08 | Computer Name = X | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.0.3725, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2010-04-19 13:08:32 | Computer Name = X | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca iexplore.exe, wersja 7.0.6000.16762, moduł
zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2010-04-23 15:28:21 | Computer Name = X | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd avgui.exe, wersja 8.5.0.437, moduł powodujący
błąd avgui.exe, wersja 8.5.0.437, adres błędu 0x001c0913.
Error - 2010-04-27 14:24:31 | Computer Name = X | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca gg.exe, wersja 8.0.0.9453, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Error - 2010-05-15 18:41:28 | Computer Name = X | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.0.3725, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
[ System Events ]
Error - 2010-05-23 09:44:33 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
Error - 2010-05-23 15:35:14 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
Error - 2010-05-24 08:38:01 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
Error - 2010-05-24 13:06:46 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
Error - 2010-05-25 06:36:08 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
Error - 2010-05-25 15:22:32 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
Error - 2010-05-25 16:57:59 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
Error - 2010-05-25 17:52:31 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
Error - 2010-05-26 12:36:39 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
Error - 2010-05-27 02:10:55 | Computer Name = X | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys)
z powodu następującego błędu: %%2
< End of report >
