log z combofixa
- Kod: Zaznacz wszystko
ComboFix 08-02.02.5 - Maciekk 2008-02-03 12:47:01.9 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1645 [GMT 1:00]
Running from: C:\Documents and Settings\Maciekk\Pulpit\ComboFix.exe
* Created a new restore point
[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.
((((((((((((((((((((((((( Files Created from 2008-01-03 to 2008-02-03 )))))))))))))))))))))))))))))))
.
2008-02-02 11:03 . 2008-02-02 11:03 <DIR> d-------- C:\Program Files\uTorrent
2008-02-02 11:03 . 2008-02-02 11:03 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\uTorrent
2008-02-01 09:41 . 2008-02-01 09:41 <DIR> d--hs---- C:\FOUND.002
2008-01-26 14:04 . 2008-02-02 13:28 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-01-25 18:06 . 2008-01-25 18:07 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\LightScribe
2008-01-25 18:05 . 2008-01-25 18:05 <DIR> d-------- C:\Program Files\Common Files\LightScribe
2008-01-25 18:02 . 2008-01-25 18:02 <DIR> d-------- C:\Program Files\Common Files\Ahead
2008-01-25 15:45 . 2008-01-25 15:45 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\Ahead
2008-01-25 15:45 . 2008-01-25 15:45 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Ahead
2008-01-24 21:30 . 2008-01-24 21:30 3,348 --a------ C:\WINDOWS\nero.INI
2008-01-24 20:22 . 2008-01-24 20:22 0 --a------ C:\WINDOWS\Irremote.ini
2008-01-23 14:49 . 2008-01-23 14:49 <DIR> dr-h----- C:\Documents and Settings\Maciekk\Dane aplikacji\SecuROM
2008-01-17 10:47 . 2008-01-17 10:47 427 --a------ C:\WINDOWS\ODBC.INI
2008-01-17 10:44 . 2008-01-17 10:44 <DIR> d-------- C:\WINDOWS\ShellNew
2008-01-17 10:43 . 2008-01-17 10:43 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\Microsoft Web Folders
2008-01-16 19:44 . 2008-01-16 19:44 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\Winamp
2008-01-16 19:40 . 2008-01-16 19:40 <DIR> d-------- C:\Program Files\Ulead Systems
2008-01-16 19:40 . 2008-01-16 19:40 <DIR> d-------- C:\Program Files\Common Files\Ulead Systems
2008-01-16 19:40 . 2008-01-16 19:40 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems
2008-01-16 19:40 . 2001-12-19 15:47 49,152 --------- C:\WINDOWS\system32\TempDel.EXE
2008-01-16 19:40 . 2005-01-06 16:55 9,446 --a------ C:\WINDOWS\system32\drivers\WFIOCTL.sys
2008-01-16 19:40 . 2002-06-03 23:01 8,734 --a------ C:\WINDOWS\system32\WFSch.ICO
2008-01-16 19:35 . 2008-01-16 19:35 <DIR> d-------- C:\WINDOWS\system32\WinFox
2008-01-16 19:35 . 2008-01-16 19:35 <DIR> d-------- C:\WINDOWS\system32\WinFast
2008-01-16 19:35 . 2003-09-05 09:57 9,469 --a------ C:\WINDOWS\system32\drivers\WINFOXIO.sys
2008-01-15 22:49 . 2008-01-15 22:49 <DIR> d-------- C:\WINDOWS\ERUNT
2008-01-14 22:10 . 2008-01-14 22:10 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\FaxCtr
2008-01-14 22:03 . 2008-01-14 22:03 <DIR> d-------- C:\Program Files\Abbyy FineReader 6.0 Sprint
2008-01-14 22:02 . 2008-01-14 22:02 <DIR> d-------- C:\Program Files\Lx_cats
2008-01-14 22:02 . 2008-01-14 22:02 <DIR> d-------- C:\Program Files\Lexmark Fax Solutions
2008-01-14 22:02 . 2008-01-14 22:02 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\FaxCtr
2008-01-14 22:02 . 2003-03-11 18:26 339,968 --a------ C:\WINDOWS\system32\IMGMAN32.DLL
2008-01-14 22:02 . 2003-03-11 18:26 98,345 --a------ C:\WINDOWS\system32\IMHOST32.DLL
2008-01-14 22:02 . 2003-03-11 18:26 98,304 --a------ C:\WINDOWS\system32\IM31XPNG.DEL
2008-01-14 22:02 . 2003-03-11 18:26 69,632 --a------ C:\WINDOWS\system32\IM31XTIF.DEL
2008-01-14 22:02 . 2003-03-11 18:26 49,152 --a------ C:\WINDOWS\system32\IM31IMG.DIL
2008-01-14 22:02 . 2005-07-12 10:33 32,768 --a------ C:\WINDOWS\system32\LXPRMON.DLL
2008-01-14 22:02 . 2008-01-14 22:03 23,029 --a------ C:\WINDOWS\system32\LexFiles.ulf
2008-01-14 22:02 . 2005-07-12 10:33 20,480 --a------ C:\WINDOWS\system32\LXPMONUI.DLL
2008-01-14 22:02 . 2005-07-12 10:37 12,288 --a------ C:\WINDOWS\system32\LXPMONRC.DLL
2008-01-14 22:01 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-01-14 22:01 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-01-14 22:01 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-01-14 22:01 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\dllcache\usbprint.sys
2008-01-14 21:56 . 2008-01-14 21:56 <DIR> d-------- C:\Program Files\Lexmark 3300 Series
2008-01-14 21:56 . 2001-10-26 17:29 87,040 --a------ C:\WINDOWS\system32\wiafbdrv.dll
2008-01-14 21:56 . 2001-10-26 17:29 87,040 --a------ C:\WINDOWS\system32\dllcache\wiafbdrv.dll
2008-01-14 21:56 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-01-14 21:56 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\dllcache\usbscan.sys
2008-01-13 17:39 . 2008-01-13 17:39 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft
2008-01-13 17:38 . 2008-01-13 17:38 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-01-13 17:28 . 2008-01-13 17:28 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\Nero
2008-01-13 17:26 . 2008-01-13 17:26 <DIR> d-------- C:\Program Files\Common Files\Nero
2008-01-13 17:26 . 2008-01-13 17:26 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Nero
2008-01-13 17:23 . 2008-01-13 17:23 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-01-13 16:15 . 2008-01-14 22:00 4 --a------ C:\WINDOWS\c.pid
2008-01-13 16:14 . 2008-01-13 16:14 <DIR> dr------- C:\Documents and Settings\LocalService\Ulubione
2008-01-13 16:14 . 2008-01-13 16:14 7,040 --a------ C:\WINDOWS\system32\drivers\ndisaluo.sys
2008-01-13 16:11 . 2008-01-13 16:11 6,144 --a------ C:\Documents and Settings\Maciekk\ie_updates3r.exe
2008-01-13 16:03 . 2008-01-13 16:03 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\DAEMON Tools
2008-01-13 15:20 . 2008-01-13 15:20 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\DAEMON Tools Pro
2008-01-13 15:18 . 2008-01-13 15:34 715,248 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2008-01-13 15:04 . 2008-01-13 15:04 278,984 --a------ C:\WINDOWS\system32\drivers\atksgt.sys
2008-01-13 15:04 . 2008-01-13 15:04 25,416 --a------ C:\WINDOWS\system32\drivers\lirsgt.sys
2008-01-11 17:36 . 2004-08-03 23:10 61,056 --a------ C:\WINDOWS\system32\drivers\ohci1394.sys
2008-01-11 17:36 . 2004-08-03 23:10 61,056 --a------ C:\WINDOWS\system32\dllcache\ohci1394.sys
2008-01-11 17:36 . 2004-08-03 23:10 53,248 --a------ C:\WINDOWS\system32\drivers\1394bus.sys
2008-01-11 17:36 . 2004-08-03 23:10 53,248 --a------ C:\WINDOWS\system32\dllcache\1394bus.sys
2008-01-11 17:36 . 2001-08-17 21:46 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys
2008-01-11 17:36 . 2001-08-17 21:46 6,400 --a------ C:\WINDOWS\system32\dllcache\enum1394.sys
2008-01-11 13:34 . 2008-01-11 13:34 <DIR> d-------- C:\Program Files\Common Files\Adobe
2008-01-11 13:33 . 2008-01-11 13:33 <DIR> d-------- C:\WINDOWS\Cache
2008-01-10 18:22 . 2004-08-03 23:08 26,496 --a------ C:\WINDOWS\system32\dllcache\usbstor.sys
2008-01-10 15:52 . 2004-08-03 23:14 359,040 --a------ C:\WINDOWS\system32\drivers\tcpip.sys.flg
2008-01-10 08:38 . 2008-01-10 08:38 108,144 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2008-01-10 08:33 . 2008-01-10 08:33 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\Gadu-Gadu
2008-01-09 21:41 . 2008-01-09 21:41 <DIR> d-------- C:\WINDOWS\Sun
2008-01-09 21:41 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-01-09 21:40 . 2008-01-09 21:41 <DIR> d-------- C:\Program Files\Java
2008-01-09 21:39 . 2008-01-09 21:39 <DIR> d-------- C:\Program Files\Common Files\Java
2008-01-09 21:33 . 2008-01-19 20:02 1,477 --a------ C:\WINDOWS\mozver.dat
2008-01-09 20:41 . 2008-01-09 20:41 <DIR> d-------- C:\Documents and Settings\Maciekk\Gadu-Gadu
2008-01-09 20:40 . 2008-01-09 20:40 <DIR> d-------- C:\Documents and Settings\Maciekk\Dane aplikacji\Talkback
2008-01-09 20:40 . 2008-01-09 20:40 0 --a------ C:\WINDOWS\nsreg.dat
2008-01-09 20:31 . 2008-01-09 20:31 <DIR> d-------- C:\WINDOWS\system32\Lang
2008-01-09 20:31 . 2008-01-09 20:31 940,794 --a------ C:\WINDOWS\system32\LoopyMusic.wav
2008-01-09 20:31 . 2008-01-09 20:31 146,650 --a------ C:\WINDOWS\system32\BuzzingBee.wav
2008-01-09 20:29 . 2008-01-09 20:29 <DIR> d-------- C:\WINDOWS\system32\DRVSTORE
2008-01-09 20:29 . 2008-01-09 20:29 <DIR> d-------- C:\Program Files\Realtek
2008-01-09 20:29 . 2008-01-09 20:29 <DIR> d--h----- C:\Program Files\InstallShield Installation Information
2008-01-09 20:29 . 2008-01-09 20:29 <DIR> d-------- C:\Program Files\DIFX
2008-01-09 20:29 . 2007-07-05 09:08 16,380,416 -r------- C:\WINDOWS\RTHDCPL.exe
2008-01-09 20:29 . 2007-07-18 12:26 4,547,584 -r------- C:\WINDOWS\system32\drivers\RtkHDAud.sys
2008-01-09 20:29 . 2006-05-04 09:26 2,808,832 -r------- C:\WINDOWS\alcwzrd.exe
2008-01-09 20:29 . 2007-06-28 09:44 2,165,760 -r------- C:\WINDOWS\MicCal.exe
2008-01-09 20:29 . 2007-01-12 09:54 520,192 -r------- C:\WINDOWS\RtlExUpd.dll
2008-01-09 20:29 . 2005-09-21 03:25 299,008 -r------- C:\WINDOWS\system32\ALSndMgr.cpl
2008-01-09 20:29 . 2005-05-03 11:43 69,632 -r------- C:\WINDOWS\Alcmtr.exe
2008-01-09 20:29 . 2006-06-18 23:51 43,520 --a------ C:\WINDOWS\system32\drivers\AmdK8.sys
2008-01-09 20:29 . 2004-11-18 10:42 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-13 15:27 9,216 ----a-w C:\WINDOWS\system32\clipsrv.exe
2008-01-09 18:55 --------- d-----w C:\Program Files\microsoft frontpage
2008-01-09 18:54 --------- d-----w C:\Program Files\Usługi online
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44 15360]
"Gadu-Gadu"="E:\Gadu-Gadu\gg.exe" [2007-11-14 11:54 2131392]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:55 1667584]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [ ]
"DAEMON Tools Lite"="e:\DAEMON Tools Lite\daemon.exe" [2008-01-03 14:54 486856]
"LightScribe Control Panel"="C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-07-18 17:55 451872]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gainward"="C:\Program Files\VDOTool\TBPanel.exe" [2007-11-01 13:25 2165272]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-16 18:07 8491008]
"nwiz"="nwiz.exe" [2007-09-16 18:07 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-09-16 18:07 81920]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 09:08 16380416 C:\WINDOWS\RTHDCPL.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"Flashget"="e:\FlashGet\FlashGet.exe" [ ]
"NBKeyScan"="E:\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [ ]
"lxccmon.exe"="C:\Program Files\Lexmark 3300 Series\lxccmon.exe" [2005-07-21 01:17 192512]
"FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [2005-07-12 10:36 299008]
"WinFast Schedule"="e:\TV\WFWIZ.exe" [ ]
"WinampAgent"="E:\Winamp\winampa.exe" [2007-12-20 16:16 37376]
"BearShare"="E:\BearShare\BearShare.exe" [2006-08-01 17:04 3313664]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57 153136]
"LXCCCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll" [2005-07-20 14:44 73728]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:44 15360]
"nv"="C:\Documents and Settings\LocalService\desktop.exe" [ ]
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 21:05:56 65588]
R2 WF23880;WinFast TV2000/DV2000 WDM Video Capture.;C:\WINDOWS\system32\drivers\wf88vcap.sys [2004-10-18 11:25]
R2 WF88XBAR;WinFast TV2000/DV2000 WDM Crossbar.;C:\WINDOWS\system32\drivers\WF88XBAR.sys [2004-10-18 11:25]
R2 WFTUNE;WinFast TV2000/DV2000 WDM Tuner.;C:\WINDOWS\system32\drivers\WF88TUNE.sys [2004-10-18 11:25]
S3 gdrv;gdrv;C:\WINDOWS\gdrv.sys [2008-01-09 20:31]
S3 WFIOCTL;WFIOCTL;e:\TV\WFIOCTL.SYS [2005-01-06 16:55]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-03 12:47:33
Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden autostart entries ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCCCATS = rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-02-03 12:47:46
z hijackthis
- Kod: Zaznacz wszystko
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:51:59, on 2008-02-03
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\VDOTool\TBPanel.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Lexmark 3300 Series\lxccmon.exe
E:\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
E:\Gadu-Gadu\gg.exe
C:\Program Files\Messenger\msmsgs.exe
E:\DAEMON Tools Lite\daemon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\lxcccoms.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
E:\FireFox\firefox.exe
e:\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com/pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe /A
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Flashget] "e:\FlashGet\FlashGet.exe" /min
O4 - HKLM\..\Run: [NBKeyScan] "E:\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [lxccmon.exe] "C:\Program Files\Lexmark 3300 Series\lxccmon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [WinFast Schedule] e:\TV\WFWIZ.exe
O4 - HKLM\..\Run: [WinampAgent] E:\Winamp\winampa.exe
O4 - HKLM\..\Run: [BearShare] "E:\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LXCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "E:\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [DAEMON Tools Lite] "e:\DAEMON Tools Lite\daemon.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Download All with FlashGet - E:\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - E:\FlashGet\jc_link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - e:\FlashGet\FlashGet.exe (file missing)
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - e:\FlashGet\FlashGet.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O21 - SSODL: PdcoywRN - {203D7CBB-8A97-D611-55FB-C76659B4C12F} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Unknown owner - E:\Ad-Aware 2007\aawservice.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: NBService - Nero AG - E:\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 5622 bytes
