01 Maj 2008, 09:23
ComboFix 08-04-29.5 - Maciek 2008-05-01 9:22:04.8 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1607 [GMT 2:00]
Running from: C:\Documents and Settings\Maciek\Pulpit\ComboFix.exe
* Created a new restore point
[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.
((((((((((((((((((((((((( Files Created from 2008-04-01 to 2008-05-01 )))))))))))))))))))))))))))))))
.
2008-04-30 17:45 . 2008-04-30 17:45 <DIR> d--hs---- C:\FOUND.000
2008-04-28 17:53 . 2008-04-30 11:46 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2008-04-28 16:57 . 2008-04-28 16:57 106,496 --a------ C:\WINDOWS\DIIUnin.exe
2008-04-28 16:57 . 2008-04-28 17:53 30,977 --a------ C:\WINDOWS\DIIUnin.dat
2008-04-28 16:57 . 2008-04-28 16:57 2,829 --a------ C:\WINDOWS\DIIUnin.pif
2008-04-27 19:12 . 2003-06-18 17:31 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2008-04-27 19:12 . 2008-04-27 19:12 385 --a------ C:\WINDOWS\ODBC.INI
2008-04-27 19:11 . 2008-04-27 19:11 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-04-27 19:11 . 2008-04-27 19:11 <DIR> d-------- C:\Program Files\Microsoft ActiveSync
2008-04-27 19:10 . 2008-04-27 19:10 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-04-27 15:53 . 2008-04-27 15:53 <DIR> d-------- C:\Program Files\Common Files\Adobe Systems Shared
2008-04-25 13:55 . 2008-04-25 13:55 <DIR> d-------- C:\WINDOWS\system32\AGEIA
2008-04-25 13:55 . 2008-04-25 13:55 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-04-25 13:55 . 2008-04-25 13:55 <DIR> d-------- C:\Program Files\AGEIA Technologies
2008-04-23 20:01 . 2008-04-30 17:11 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-04-23 20:01 . 2008-04-23 20:01 22,328 --a------ C:\Documents and Settings\Maciek\Dane aplikacji\PnkBstrK.sys
2008-04-23 20:01 . 2008-04-23 20:01 275 --a------ C:\WINDOWS\game.ini
2008-04-23 19:42 . 2008-04-23 19:42 <DIR> d--hs---- C:\WINDOWS\ftpcache
2008-04-23 18:36 . 2008-04-23 18:36 <DIR> d-------- C:\WINDOWS\Sun
2008-04-23 18:36 . 2008-04-23 18:36 <DIR> d-------- C:\Program Files\Java
2008-04-23 18:36 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-04-23 18:35 . 2008-04-23 18:35 <DIR> d-------- C:\Program Files\Common Files\Java
2008-04-22 20:58 . 2008-04-22 20:58 <DIR> d-------- C:\Program Files\Ulead Systems
2008-04-22 20:58 . 2008-04-22 20:58 <DIR> d-------- C:\Program Files\Common Files\Ulead Systems
2008-04-22 20:58 . 2008-04-22 20:58 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems
2008-04-22 20:58 . 2001-12-19 15:47 49,152 --------- C:\WINDOWS\system32\TempDel.EXE
2008-04-22 20:58 . 2005-01-06 16:55 9,446 --a------ C:\WINDOWS\system32\drivers\WFIOCTL.sys
2008-04-22 20:58 . 2002-06-03 23:01 8,734 --a------ C:\WINDOWS\system32\WFSch.ICO
2008-04-22 20:53 . 2008-04-22 20:53 <DIR> d-------- C:\WINDOWS\system32\WinFox
2008-04-22 20:53 . 2008-04-22 20:53 <DIR> d-------- C:\WINDOWS\system32\WinFast
2008-04-22 20:53 . 2003-09-05 09:57 9,469 --a------ C:\WINDOWS\system32\drivers\WINFOXIO.sys
2008-04-22 15:27 . 2008-04-22 15:27 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Adobe Systems
2008-04-22 15:26 . 2008-04-22 15:26 <DIR> d-------- C:\Program Files\Common Files\Adobe
2008-04-22 15:24 . 2008-04-22 15:24 <DIR> d-------- C:\Program Files\Common Files\EZB Systems
2008-04-22 14:57 . 2008-04-22 14:57 <DIR> d-------- C:\Program Files\uTorrent
2008-04-22 14:57 . 2008-04-22 14:57 <DIR> d-------- C:\Documents and Settings\Maciek\Dane aplikacji\uTorrent
2008-04-22 12:11 . 2008-04-26 16:58 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-04-21 17:40 . 2008-04-21 17:40 <DIR> d-------- C:\Program Files\Trend Micro
2008-04-21 17:02 . 2008-04-30 17:11 107,832 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2008-04-21 17:01 . 2008-04-21 17:01 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-04-21 17:01 . 2008-04-26 10:10 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2008-04-21 15:35 . 2008-04-21 15:35 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Avira
2008-04-21 15:24 . 2008-05-01 09:22 1,024 --ah----- C:\WINDOWS\system32\config\systemprofile\NtUser.dat.LOG
2008-04-21 15:07 . 2008-04-21 15:07 1,208 --a------ C:\WINDOWS\mozver.dat
2008-04-21 15:06 . 2008-04-21 15:06 <DIR> d-------- C:\Documents and Settings\Maciek\Dane aplikacji\Gadu-Gadu
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-21 12:46 --------- d-----w C:\Program Files\Common Files\LightScribe
2008-04-21 12:45 --------- d-----w C:\Documents and Settings\Maciek\Dane aplikacji\Ahead
2008-04-21 12:45 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Ahead
2008-04-21 12:43 --------- d-----w C:\Program Files\Nero
2008-04-21 12:43 --------- d-----w C:\Program Files\Common Files\Ahead
2008-04-21 12:43 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Nero
2008-04-21 12:38 --------- d-----w C:\Documents and Settings\Maciek\Dane aplikacji\Talkback
2008-04-21 12:31 --------- d-----w C:\Program Files\Lexmark 3300 Series
2008-04-21 12:28 15,600 ----a-w C:\WINDOWS\gdrv.sys
2008-04-21 12:27 315,392 ----a-w C:\WINDOWS\HideWin.exe
2008-04-21 12:27 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-21 12:27 --------- d-----w C:\Program Files\Realtek
2008-04-21 12:26 --------- d-----w C:\Program Files\DIFX
2008-04-21 12:24 --------- d-----w C:\Documents and Settings\Maciek\Dane aplikacji\InstallShield
2008-04-21 12:20 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-04-21 12:19 --------- d-----w C:\Program Files\VDOTool
2008-04-21 12:12 --------- d-----w C:\Program Files\microsoft frontpage
2008-04-21 12:11 --------- d-----w C:\Program Files\Usługi online
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-01 10:21 153136]
"LightScribe Control Panel"="C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-07-18 17:55 451872]
"Gadu-Gadu"="D:\GG\gg.exe" [2008-03-20 12:04 2127296]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:55 1667584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gainward"="C:\Program Files\VDOTool\TBPanel.exe" [2007-11-01 13:25 2165272]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-16 19:07 8491008]
"nwiz"="nwiz.exe" [2007-09-16 19:07 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-09-16 19:07 81920]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 10:08 16380416 C:\WINDOWS\RTHDCPL.exe]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57 153136]
"avgnt"="D:\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-04-21 15:41 262401]
"WinFast Schedule"="d:\TV\WFWIZ.exe" [2005-03-02 13:21 278528]
"Adobe Reader Speed Launcher"="D:\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:44 15360]
C:\Documents and Settings\Maciek\Menu Start\Programy\Autostart\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 19:16:50 113664]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"D:\\Maciek\\cs\\hl.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\WINDOWS\\System32\\PnkBstrA.exe"=
"C:\\WINDOWS\\System32\\PnkBstrB.exe"=
"D:\\Maciek\\COD 4\\iw3mp.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"27050:TCP"= 27050:TCP:smut
R2 WF23880;WinFast TV2000/DV2000 WDM Video Capture.;C:\WINDOWS\system32\drivers\wf88vcap.sys [2004-10-18 11:25]
R2 WF88XBAR;WinFast TV2000/DV2000 WDM Crossbar.;C:\WINDOWS\system32\drivers\WF88XBAR.sys [2004-10-18 11:25]
R2 WFTUNE;WinFast TV2000/DV2000 WDM Tuner.;C:\WINDOWS\system32\drivers\WF88TUNE.sys [2004-10-18 11:25]
R3 WFIOCTL;WFIOCTL;d:\TV\WFIOCTL.SYS [2005-01-06 16:55]
S3 gdrv;gdrv;C:\WINDOWS\gdrv.sys [2008-04-21 14:28]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
.
**************************************************************************
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-01 09:22:41
Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-05-01 9:22:56
ComboFix-quarantined-files.txt 2008-05-01 07:22:54
Pre-Run: 18,186,010,624 bajtów wolnych
Post-Run: 18,181,439,488 bajtów wolnych
135
01 Maj 2008, 11:55
01 Maj 2008, 12:00
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:59:27, on 2008-05-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Avira\AntiVir PersonalEdition Classic\avguard.exe
D:\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
D:\GG\gg.exe
D:\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe /A
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "D:\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [WinFast Schedule] d:\TV\WFWIZ.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Gadu-Gadu] "D:\GG\gg.exe" /tray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://d:\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - d:\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - D:\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - D:\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
--
End of file - 5159 bytes
01 Maj 2008, 12:07
01 Maj 2008, 16:34
http://www.searchengines.pl/index.php?showtopic=86306&st=0&p=392369&#entry39236901 Maj 2008, 23:47
02 Maj 2008, 14:26
02 Maj 2008, 16:24
http://www.kaspersky.pl/virusscanner.html02 Maj 2008, 19:30
Deckard's System Scanner v20071014.68
Run by Maciek on 2008-05-02 19:25:02
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Successfully created a Deckard's System Scanner Restore Point.
-- Last 5 Restore Point(s) --
30: 2008-05-02 17:25:04 UTC - RP40 - Deckard's System Scanner Restore Point
29: 2008-05-02 13:20:24 UTC - RP39 - Installed Ad-Aware 2008
28: 2008-05-02 12:44:14 UTC - RP38 - Tweak-XP System-Restore Point 1 - Created on the first start of
27: 2008-05-02 12:40:08 UTC - RP37 - Tweak-XP System-Restore Point 1 - Created on the first start of
26: 2008-05-02 08:20:12 UTC - RP36 - Punkt kontrolny systemu
-- First Restore Point --
1: 2008-04-21 14:47:30 UTC - RP11 - Punkt kontrolny systemu
Backed up registry hives.
Performed disk cleanup.
-- HijackThis (run as Maciek.exe) ----------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:25:44, on 2008-05-02
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
D:\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
D:\GG\gg.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Avira\AntiVir PersonalEdition Classic\avguard.exe
D:\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Maciek\Pulpit\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Maciek.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [avgnt] "D:\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "D:\GG\gg.exe" /tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://d:\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - d:\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - D:\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - D:\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 4329 bytes
-- File Associations -----------------------------------------------------------
[COLOR=red].cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*[/COLOR]
[COLOR=red].cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1",%*[/COLOR]
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
S1 ISODrive (ISO DVD/CD-ROM Device Driver) - d:\ultraiso\drivers\isodrive.sys (file missing)
S3 WFIOCTL - d:\tv\wfioctl.sys <Not Verified; Leadtek Research Inc.; WinFast MultiMedia Device Driver (Windows 2000/XP)>
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 AntiVirScheduler (AntiVir PersonalEdition Classic Scheduler) - "d:\avira\antivir personaledition classic\sched.exe" <Not Verified; Avira GmbH; AntiVir Workstation>
S3 NBService - c:\program files\nero\nero 7\nero backitup\nbservice.exe
-- Device Manager: Disabled ----------------------------------------------------
No disabled devices found.
-- Files created between 2008-04-02 and 2008-05-02 -----------------------------
2008-05-02 15:20:25 0 d-------- C:\Program Files\Lavasoft
2008-05-02 14:39:28 737280 --a------ C:\WINDOWS\iun6002.exe <Not Verified; Indigo Rose Corporation; Setup Factory 6.0 Runtime Module>
2008-05-02 14:08:07 0 d-------- C:\WINDOWS\pss
2008-05-01 09:21:48 68096 --a------ C:\WINDOWS\zip.exe
2008-05-01 09:21:48 49152 --a------ C:\WINDOWS\VFind.exe
2008-05-01 09:21:48 212480 --a------ C:\WINDOWS\swxcacls.exe <Not Verified; SteelWerX; SteelWerX Extended Configurator ACLists>
2008-05-01 09:21:48 136704 --a------ C:\WINDOWS\swsc.exe <Not Verified; SteelWerX; SteelWerX Service Controller>
2008-05-01 09:21:48 161792 --a------ C:\WINDOWS\swreg.exe <Not Verified; SteelWerX; SteelWerX Registry Editor>
2008-05-01 09:21:48 98816 --a------ C:\WINDOWS\sed.exe
2008-05-01 09:21:48 80412 --a------ C:\WINDOWS\grep.exe
2008-05-01 09:21:48 73728 --a------ C:\WINDOWS\fdsv.exe <Not Verified; Smallfrogs Studio; >
2008-04-30 17:45:40 0 d--hs---- C:\FOUND.000
2008-04-28 17:53:31 43520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2008-04-27 19:11:39 0 d-------- C:\Program Files\Microsoft.NET
2008-04-27 19:11:34 0 d-------- C:\Program Files\Microsoft ActiveSync
2008-04-27 19:10:44 0 d-------- C:\WINDOWS\SHELLNEW
2008-04-27 15:53:38 0 d-------- C:\Program Files\Common Files\Adobe Systems Shared
2008-04-25 13:55:54 0 d-------- C:\WINDOWS\system32\AGEIA
2008-04-25 13:55:53 0 d-------- C:\Program Files\AGEIA Technologies
2008-04-25 13:55:49 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-04-23 19:42:46 0 d--hs---- C:\WINDOWS\ftpcache
2008-04-23 18:36:39 0 d-------- C:\WINDOWS\Sun
2008-04-23 18:36:09 0 d-------- C:\Program Files\Java
2008-04-23 18:35:43 0 d-------- C:\Program Files\Common Files\Java
2008-04-22 20:58:24 0 d-------- C:\Program Files\Ulead Systems
2008-04-22 20:58:24 0 d-------- C:\Program Files\Common Files\Ulead Systems
2008-04-22 20:58:10 49152 -----n--- C:\WINDOWS\system32\TempDel.EXE <Not Verified; Leadtek Research Inc.; Leadtek Research Inc. TempDel>
2008-04-22 20:58:07 9446 --a------ C:\WINDOWS\system32\drivers\WFIOCTL.sys <Not Verified; Leadtek Research Inc.; WinFast MultiMedia Device Driver (Windows 2000/XP)>
2008-04-22 20:54:22 0 d-------- C:\WINDOWS\system32\DX9
2008-04-22 20:53:30 0 d-------- C:\WINDOWS\system32\WinFox
2008-04-22 20:53:30 0 d-------- C:\WINDOWS\system32\WinFast
2008-04-22 20:53:30 9469 --a------ C:\WINDOWS\system32\drivers\WINFOXIO.sys <Not Verified; Leadtek Research Inc.; WinFox I/O Device (Windows 2000/XP)>
2008-04-22 17:47:41 0 d-------- C:\Documents and Settings\All Users\Application Data
2008-04-22 17:47:41 0 d-------- C:\Documents and Settings\All Users\Application Data\Ubisoft
2008-04-22 15:26:42 0 d-------- C:\Program Files\Common Files\Adobe
2008-04-22 15:24:17 0 d-------- C:\Program Files\Common Files\EZB Systems
2008-04-22 14:57:40 0 d-------- C:\Program Files\uTorrent
2008-04-21 17:40:11 0 d-------- C:\Program Files\Trend Micro
2008-04-21 17:01:37 0 d-------- C:\WINDOWS\system32\LogFiles
2008-04-21 15:07:22 1208 --a------ C:\WINDOWS\mozver.dat
2008-04-21 14:46:15 0 d-------- C:\Program Files\Common Files\LightScribe
2008-04-21 14:43:27 0 d-------- C:\Program Files\Nero
2008-04-21 14:43:27 0 d-------- C:\Program Files\Common Files\Ahead
2008-04-21 14:42:34 0 d-------- C:\WINDOWS\RegisteredPackages
2008-04-21 14:38:46 0 --a------ C:\WINDOWS\nsreg.dat
2008-04-21 14:38:45 0 d--hs---- C:\Recycled
2008-04-21 14:31:56 0 d-------- C:\Program Files\Lexmark 3300 Series
2008-04-21 14:31:51 0 d-------- C:\Temp
2008-04-21 14:28:39 0 d-------- C:\WINDOWS\system32\Lang
2008-04-21 14:27:34 49152 -r------- C:\WINDOWS\system32\ChCfg.exe
2008-04-21 14:27:25 0 d-------- C:\WINDOWS\system32\RTCOM
2008-04-21 14:27:00 0 d-------- C:\Program Files\Realtek
2008-04-21 14:26:59 315392 --a------ C:\WINDOWS\HideWin.exe <Not Verified; Realtek Semiconductor Corp.; HD Audio Hide windows program>
2008-04-21 14:26:59 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-04-21 14:26:58 520192 -r------- C:\WINDOWS\RtlExUpd.dll <Not Verified; Realtek Semiconductor Corp.; RtlExUpd Dynamic Link Library>
2008-04-21 14:26:43 0 d-------- C:\Program Files\DIFX
2008-04-21 14:26:42 0 d-------- C:\WINDOWS\system32\DRVSTORE
2008-04-21 14:24:45 0 d-------- C:\WINDOWS\system32\ReinstallBackups
2008-04-21 14:24:40 1732 --a------ C:\WINDOWS\system32\drivers\nvphy.bin
2008-04-21 14:21:26 0 d-------- C:\WINDOWS\nview
2008-04-21 14:20:44 0 d-------- C:\Program Files\Common Files\InstallShield
2008-04-21 14:20:42 1626112 --a------ C:\WINDOWS\system32\nwiz.exe
2008-04-21 14:20:42 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe
2008-04-21 14:20:42 442368 --a------ C:\WINDOWS\system32\nvappbar.exe
2008-04-21 14:20:42 425984 --a------ C:\WINDOWS\system32\keystone.exe
2008-04-21 14:20:41 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll
2008-04-21 14:20:41 1703936 --a------ C:\WINDOWS\system32\nvwdmcpl.dll
2008-04-21 14:20:41 466944 --a------ C:\WINDOWS\system32\nvshell.dll
2008-04-21 14:20:41 1478656 --a------ C:\WINDOWS\system32\nview.dll
2008-04-21 14:19:20 0 d-------- C:\Program Files\VDOTool
2008-04-21 14:17:13 0 d-------- C:\WINDOWS\SoftwareDistribution
2008-04-21 14:17:13 0 d--hs---- C:\System Volume Information
2008-04-21 14:17:12 0 d---s---- C:\WINDOWS\system32\Microsoft
2008-04-21 14:17:12 0 d-------- C:\WINDOWS\Prefetch
2008-04-21 14:12:48 0 d-------- C:\WINDOWS\system32\xircom
2008-04-21 14:12:48 0 d-------- C:\Program Files\microsoft frontpage
2008-04-21 14:12:28 0 -rahs---- C:\MSDOS.SYS
2008-04-21 14:12:28 0 -rahs---- C:\IO.SYS
2008-04-21 14:12:28 0 --a------ C:\CONFIG.SYS
2008-04-21 14:12:28 0 --a------ C:\AUTOEXEC.BAT
2008-04-21 14:11:46 0 d--hs---- C:\Documents and Settings\All Users\DRM
2008-04-21 14:11:39 0 dr------- C:\WINDOWS\Offline Web Pages
2008-04-21 14:11:39 0 d---s---- C:\WINDOWS\Downloaded Program Files
2008-04-21 14:11:32 0 d--h----- C:\Program Files\WindowsUpdate
2008-04-21 14:11:29 0 d-------- C:\Program Files\Usługi online
2008-04-21 14:11:15 0 d-------- C:\WINDOWS\system32\DirectX
2008-04-21 14:10:43 0 d---s---- C:\WINDOWS\Tasks
2008-04-21 14:10:43 0 d-------- C:\Program Files\Common Files\MSSoap
2008-04-21 14:10:40 0 d-------- C:\WINDOWS\srchasst
2008-04-21 14:10:39 0 d-------- C:\WINDOWS\system32\Macromed
2008-04-21 14:10:32 0 d-------- C:\Program Files\Movie Maker
2008-04-21 14:10:27 0 d-------- C:\WINDOWS\system32\Restore
2008-04-21 14:09:52 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat
2008-04-21 14:09:35 0 d-------- C:\WINDOWS\Registration
2008-04-21 14:09:25 0 d-------- C:\Program Files\Messenger
2008-04-21 14:09:20 0 d-------- C:\Program Files\MSN Gaming Zone
2008-04-21 14:08:56 0 d-------- C:\Program Files\Windows NT
2008-04-21 14:08:53 0 d-------- C:\WINDOWS\system32\MsDtc
2008-04-21 14:08:52 0 d-------- C:\WINDOWS\system32\Com
2008-04-21 14:04:18 0 d--hs---- C:\WINDOWS\Installer
2008-04-21 14:04:17 0 d-------- C:\Program Files\Common Files\ODBC
2008-04-21 14:04:15 0 dr------- C:\Program Files
2008-04-21 14:04:15 0 d-------- C:\Program Files\Common Files
2008-04-21 14:04:15 0 d-------- C:\Program Files\Common Files\SpeechEngines
2008-04-21 14:03:52 0 d-------- C:\Documents and Settings\All Users\Ulubione
2008-04-21 14:03:52 0 d--h----- C:\Documents and Settings\All Users\Szablony
2008-04-21 14:03:52 0 d-------- C:\Documents and Settings\All Users\Pulpit
2008-04-21 14:03:52 0 dr------- C:\Documents and Settings\All Users\Menu Start
2008-04-21 14:03:52 0 dr------- C:\Documents and Settings\All Users\Dokumenty
2008-04-21 14:01:38 0 d-------- C:\WINDOWS\system32\CatRoot2
2008-04-21 14:01:38 0 d-------- C:\WINDOWS\system32\CatRoot
2008-04-21 14:01:33 0 dr-h----- C:\Documents and Settings\All Users\Dane aplikacji
2008-04-21 14:00:56 0 d-------- C:\Documents and Settings
2008-04-21 13:54:59 0 d-------- C:\WINDOWS
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\WinSxS
2008-04-21 13:54:59 0 dr------- C:\WINDOWS\Web
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\twain_32
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\wins
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\wbem
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\usmt
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\spool
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\ShellExt
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\Setup
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\ras
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\oobe
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\npp
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\mui
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\inetsrv
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\IME
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\icsxml
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\ias
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\export
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\drivers
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\drivers\etc
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\drivers\disdn
2008-04-21 13:54:59 0 dr-hs---- C:\WINDOWS\system32\dllcache
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\dhcp
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\config
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\3com_dmi
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\3076
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\2052
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\1054
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\1045
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\1042
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\1041
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\1037
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\1033
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\1031
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\1028
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system32\1025
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\system
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\security
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\Resources
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\repair
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\Provisioning
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\PeerNet
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\pchealth
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\mui
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\msapps
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\msagent
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\Media
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\java
2008-04-21 13:54:59 0 d--h----- C:\WINDOWS\inf
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\ime
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\Help
2008-04-21 13:54:59 0 dr--s---- C:\WINDOWS\Fonts
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\ehome
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\Driver Cache
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\Debug
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\Cursors
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\Connection Wizard
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\Config
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\AppPatch
2008-04-21 13:54:59 0 d-------- C:\WINDOWS\addins
-- Find3M Report ---------------------------------------------------------------
2008-05-02 14:44:48 358734 --a------ C:\WINDOWS\system32\perfh015.dat
2008-05-02 14:44:48 50556 --a------ C:\WINDOWS\system32\perfc015.dat
2008-04-23 18:36:40 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\Sun
2008-04-22 14:57:40 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\uTorrent
2008-04-21 15:07:30 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\Macromedia
2008-04-21 15:07:30 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\Adobe
2008-04-21 15:06:10 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\Gadu-Gadu
2008-04-21 14:45:46 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\Ahead
2008-04-21 14:38:52 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\Talkback
2008-04-21 14:38:46 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\Mozilla
2008-04-21 14:24:36 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\InstallShield
2008-04-21 14:17:58 0 d-------- C:\Documents and Settings\Maciek\Dane aplikacji\Identities
2008-04-21 14:03:54 62 --ahs---- C:\Documents and Settings\Maciek\Dane aplikacji\desktop.ini
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="D:\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-04-21 15:41]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-16 19:07]
"MSConfig"="C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.exe" [2004-08-04 02:44]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44]
"Gadu-Gadu"="D:\GG\gg.exe" [2008-03-20 12:04]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=1 (0x1)
"HideStartupScripts"=0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=1 (0x1)
"HideStartupScripts"=0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Maciek^Menu Start^Programy^Autostart^Adobe Gamma.lnk]
path=C:\Documents and Settings\Maciek\Menu Start\Programy\Autostart\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
"D:\Reader 8.0\Reader\Reader_sl.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gainward]
C:\Program Files\VDOTool\TBPanel.exe /A
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
%systemroot%\system32\dumprep 0 -k
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
RTHDCPL.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule]
d:\TV\WFWIZ.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"wscsvc"=2 (0x2)
"WebClient"=2 (0x2)
"SharedAccess"=2 (0x2)
*Newly Created Service* - DDSXEISERVICE
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
-- End of Deckard's System Scanner: finished at 2008-05-02 19:26:52 ------------
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft Windows XP Professional (build 2600) SP 2.0
Architecture: X86; Language: Polish
CPU 0: AMD Athlon(tm) 64 X2 Dual Core Processor 4000+
CPU 1: AMD Athlon(tm) 64 X2 Dual Core Processor 4000+
Percentage of Memory in Use: 19%
Physical Memory (total/avail): 2047.48 MiB / 1644.97 MiB
Pagefile Memory (total/avail): 3940.72 MiB / 3641.67 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1923.63 MiB
A: is Removable (No Media)
C: is Fixed (FAT32) - 24.4 GiB total, 16.68 GiB free.
D: is Fixed (NTFS) - 97.65 GiB total, 54.21 GiB free.
E: is Fixed (NTFS) - 110.81 GiB total, 57.3 GiB free.
F: is CDROM (No Media)
\\.\PHYSICALDRIVE0 - MAXTOR STM3250310AS - 232.88 GiB - 3 partitions
\PARTITION0 (bootable) - Unknown - 24.41 GiB - C:
\PARTITION1 - Rozszerzona z rozszerzonym przerwaniem 13 - 208.46 GiB - D: - E:
-- Security Center -------------------------------------------------------------
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Maciek\Dane aplikacji
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=MACIEK-FAE1BD70
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Maciek
LOGONSERVER=\\MACIEK-FAE1BD70
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\Common Files\Adobe\AGL
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 107 Stepping 1, AuthenticAMD
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=6b01
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\Maciek\USTAWI~1\Temp
TMP=C:\DOCUME~1\Maciek\USTAWI~1\Temp
USERDOMAIN=MACIEK-FAE1BD70
USERNAME=Maciek
USERPROFILE=C:\Documents and Settings\Maciek
windir=C:\WINDOWS
-- User Profiles ---------------------------------------------------------------
Maciek [I](admin)[/I]
-- Add/Remove Programs ---------------------------------------------------------
--> C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
--> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
--> C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
--> C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
--> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
--> C:\WINDOWS\UNRecode.exe /UNINSTALL
--> MsiExec /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware 2008 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Bridge 1.0 --> MsiExec.exe /I{B74D4E10-1033-0000-0000-000000000001}
Adobe Common File Installer --> MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5B39}
Adobe Help Center 1.0 --> MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
Adobe Photoshop CS2 --> msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
Adobe Reader 8 - Polish --> MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A81200000003}
Adobe Stock Photos 1.0 --> MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001}
AGEIA PhysX v7.09.13 --> MsiExec.exe /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
Archiwizator WinRAR --> d:\WinRAR\uninstall.exe
µTorrent --> "C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
Avira AntiVir Personal – Free Antivirus --> D:\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
Call of Duty(R) 4 - Modern Warfare(TM) --> C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0415
Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch --> C:\Program Files\InstallShield Installation Information\{E5141379-B2D9-4BBC-BB2A-5805541571DD}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch --> C:\Program Files\InstallShield Installation Information\{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch --> C:\Program Files\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch --> C:\Program Files\InstallShield Installation Information\{8503C901-85D7-4262-88D2-8D8B2A7B08B8}\setup.exe -runfromtemp -l0x0409
Counter-Strike 1.6 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}\Setup.exe" -l0x19
Gadu-Gadu 7.7 --> d:\GG\Setup.exe
High Definition Audio Driver Package - KB888111 --> "C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
Java(TM) 6 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Lexmark 3300 Series --> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxccUNST.EXE -NOLICENSE
Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
Mozilla Firefox (2.0.0.14) --> d:\maciek\Firefox\uninstall\helper.exe
Nero 7 Essentials --> MsiExec.exe /X{1A6A6531-08FC-47AD-BAC4-C41497E71045}
neroxml --> MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NVIDIA Drivers --> C:\WINDOWS\system32\nvuide.exe UninstallGUI
Pakiet sterowników systemu Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0) --> C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPINST.EXE /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_642960B49F5985230DB9B953682A9431120601FA\amdk8.inf
Realtek High Definition Audio Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.EXE" -l0x15 -removeonly
SubEdit-Player --> "d:\SubEdit-Player\unins000.exe"
sXe Injected --> "D:\Maciek\cs\sXe Injected\uninstall.exe"
Ulead Straight-to-Disc SDK --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8D2C1E44-7685-4D05-8342-B0DC6422FA47}\Setup.exe" -l0x9
UltraISO Premium V9.12 --> "d:\UltraISO\unins000.exe"
VDOTool 5.7 --> "C:\Program Files\VDOTool\unins000.exe"
WinFast Entertainment Center(WDM Driver) --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BE4AA694-815A-4045-BD49-C94F2BED7458}\setup.exe"
WinFast PVR --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C882DE6B-1482-42D6-A7C2-A9F946EDBAF6}\setup.exe"
-- Application Event Log -------------------------------------------------------
Event Record #/Type414 / Error
Event Submitted/Written: 05/01/2008 09:27:01 AM
Event ID/Source: 1002 / Application Hang
Event Description:
Aplikacja zawieszająca ImageReady.exe, wersja 9.0.0.196, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Event Record #/Type366 / Error
Event Submitted/Written: 04/30/2008 04:31:38 PM
Event ID/Source: 1002 / Application Hang
Event Description:
Aplikacja zawieszająca Photoshop.exe, wersja 9.0.0.0, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Event Record #/Type357 / Error
Event Submitted/Written: 04/30/2008 10:33:45 AM
Event ID/Source: 1002 / Application Hang
Event Description:
Aplikacja zawieszająca Photoshop.exe, wersja 9.0.0.0, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
Event Record #/Type339 / Warning
Event Submitted/Written: 04/28/2008 03:00:14 PM
Event ID/Source: 2002 / LoadPerf
Event Description:
Nie można załadować pliku MOF utworzonego dla usługi Outlook.
Kod błędu zwróconego przez program MOF Compiler jest zamieszczony
w danych rekordu. Aby usługa WMI mogła zgromadzić liczniki wydajności,
musisz najpierw ręcznie załadować plik MOF. Skontaktuj się z dostawcą
tej usługi, aby uzyskać dodatkowe informacje.
Event Record #/Type321 / Warning
Event Submitted/Written: 04/27/2008 07:11:47 PM
Event ID/Source: 5603 / WinMgmt
Event Description:
Dostawca, OffProv11, został zarejestrowany w obszarze nazw WMI, Root\MSAPPS11, ale nie określił właściwości HostingModel. Ten dostawca będzie działał za pomocą konta LocalSystem. To konto jest uprzywilejowane i dostawca może spowodować naruszenie zabezpieczeń, jeśli niepoprawnie spersonifikuje żądania użytkownika. Upewnij się, że dostawca został sprawdzony pod względem bezpieczeństwa i zaktualizuj właściwość HostingModel rejestracji dostawcy z kontem o możliwie najmniejszych uprawnieniach dla wymaganej funkcjonalności.
-- Security Event Log ----------------------------------------------------------
No Errors/Warnings found.
-- System Event Log ------------------------------------------------------------
Event Record #/Type4177 / Error
Event Submitted/Written: 04/28/2008 05:49:08 PM
Event ID/Source: 59 / SideBySide
Event Description:
Generate Activation Context nie powiodło się dla D:\GG\ggwhook.dll.
Odpowiedni komunikat o błędzie: Operacja ukończona pomyślnie.
.
Event Record #/Type4176 / Error
Event Submitted/Written: 04/28/2008 05:49:08 PM
Event ID/Source: 58 / SideBySide
Event Description:
Błąd składniowy w pliku manifestu lub w pliku zasad "Odmowa dostępu.
1" w wierszu Odmowa dostępu.
2.
Event Record #/Type4175 / Error
Event Submitted/Written: 04/28/2008 05:49:08 PM
Event ID/Source: 59 / SideBySide
Event Description:
Generate Activation Context nie powiodło się dla D:\GG\ggwhook.dll.
Odpowiedni komunikat o błędzie: Operacja ukończona pomyślnie.
.
Event Record #/Type4174 / Error
Event Submitted/Written: 04/28/2008 05:49:08 PM
Event ID/Source: 58 / SideBySide
Event Description:
Błąd składniowy w pliku manifestu lub w pliku zasad "Odmowa dostępu.
1" w wierszu Odmowa dostępu.
2.
Event Record #/Type4173 / Error
Event Submitted/Written: 04/28/2008 05:49:08 PM
Event ID/Source: 59 / SideBySide
Event Description:
Generate Activation Context nie powiodło się dla D:\GG\ggwhook.dll.
Odpowiedni komunikat o błędzie: Operacja ukończona pomyślnie.
.
-- End of Deckard's System Scanner: finished at 2008-05-02 19:26:52 ------------
02 Maj 2008, 19:36
03 Maj 2008, 11:25
03 Maj 2008, 11:31
03 Maj 2008, 13:08
3 maj 2008 13:07:21
System operacyjny: Microsoft Windows XP Professional, Dodatek Service Pack 2 (Build 2600)
Kaspersky Online Scanner wersja: 5.0.98.0
Ostatnia aktualizacja Kaspersky Anti-Virus 3/05/2008
Liczba wpisów w bazie danych Kaspersky Anti-Virus736822
Ustawienia skanowania
Skanowanie przy użyciu następujących baz danych rozszerzone
Skanuj archiwa tak
Skanuj pocztowe bazy danych tak
Obszar skanowania Mój komputer
A:\
C:\
D:\
E:\
F:\
Statystyki skanowania
Liczba skanowanych obiektów 58673
Liczba wykrytych wirusów 0
Liczba zainfekowanych obiektów 0
Liczba podejrzanych obiektów 0
Czas trwania skanowania 01:12:32
Nazwa zainfekowanego obiektu Nazwa wirusa Ostatnie działanie
C:\WINDOWS\system32\config\system.LOG Object is locked pominięty
C:\WINDOWS\system32\config\software.LOG Object is locked pominięty
C:\WINDOWS\system32\config\default.LOG Object is locked pominięty
C:\WINDOWS\system32\config\SECURITY Object is locked pominięty
C:\WINDOWS\system32\config\SAM Object is locked pominięty
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked pominięty
C:\WINDOWS\system32\config\SAM.LOG Object is locked pominięty
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked pominięty
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked pominięty
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked pominięty
C:\WINDOWS\system32\config\SYSTEM Object is locked pominięty
C:\WINDOWS\system32\config\SOFTWARE Object is locked pominięty
C:\WINDOWS\system32\config\DEFAULT Object is locked pominięty
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked pominięty
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked pominięty
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked pominięty
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked pominięty
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked pominięty
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked pominięty
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked pominięty
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked pominięty
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked pominięty
C:\WINDOWS\system32\h323log.txt Object is locked pominięty
C:\WINDOWS\Debug\PASSWD.LOG Object is locked pominięty
C:\WINDOWS\Sti_Trace.log Object is locked pominięty
C:\WINDOWS\wiaservc.log Object is locked pominięty
C:\WINDOWS\wiadebug.log Object is locked pominięty
C:\WINDOWS\SchedLgU.Txt Object is locked pominięty
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked pominięty
C:\Documents and Settings\NetworkService\Ustawienia lokalne\Historia\History.IE5\index.dat Object is locked pominięty
C:\Documents and Settings\NetworkService\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat Object is locked pominięty
C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat Object is locked pominięty
C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG Object is locked pominięty
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked pominięty
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked pominięty
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked pominięty
C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat Object is locked pominięty
C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG Object is locked pominięty
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked pominięty
C:\Documents and Settings\Maciek\NTUSER.DAT Object is locked pominięty
C:\Documents and Settings\Maciek\Ustawienia lokalne\Historia\History.IE5\index.dat Object is locked pominięty
C:\Documents and Settings\Maciek\Ustawienia lokalne\Historia\History.IE5\MSHist012008050320080504\index.dat Object is locked pominięty
C:\Documents and Settings\Maciek\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat Object is locked pominięty
C:\Documents and Settings\Maciek\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat Object is locked pominięty
C:\Documents and Settings\Maciek\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG Object is locked pominięty
C:\Documents and Settings\Maciek\Cookies\index.dat Object is locked pominięty
C:\Documents and Settings\Maciek\Dane aplikacji\Mozilla\Firefox\Profiles\7kuki25u.default\history.dat Object is locked pominięty
C:\Documents and Settings\Maciek\Dane aplikacji\Mozilla\Firefox\Profiles\7kuki25u.default\formhistory.dat Object is locked pominięty
C:\Documents and Settings\Maciek\Dane aplikacji\Mozilla\Firefox\Profiles\7kuki25u.default\cert8.db Object is locked pominięty
C:\Documents and Settings\Maciek\Dane aplikacji\Mozilla\Firefox\Profiles\7kuki25u.default\key3.db Object is locked pominięty
C:\Documents and Settings\Maciek\Dane aplikacji\Mozilla\Firefox\Profiles\7kuki25u.default\parent.lock Object is locked pominięty
C:\Documents and Settings\Maciek\Dane aplikacji\Mozilla\Firefox\Profiles\7kuki25u.default\search.sqlite Object is locked pominięty
C:\Documents and Settings\Maciek\Dane aplikacji\Mozilla\Firefox\Profiles\7kuki25u.default\urlclassifier2.sqlite Object is locked pominięty
C:\Documents and Settings\Maciek\ntuser.dat.LOG Object is locked pominięty
C:\System Volume Information\_restore{BB161BB1-E1FB-413F-8152-E2F16FB590A3}\RP41\change.log Object is locked pominięty
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked pominięty
D:\System Volume Information\_restore{BB161BB1-E1FB-413F-8152-E2F16FB590A3}\RP41\change.log Object is locked pominięty
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked pominięty
E:\System Volume Information\_restore{BB161BB1-E1FB-413F-8152-E2F16FB590A3}\RP41\change.log Object is locked pominięty
Skanowanie zostało przerwane przez użytkownika03 Maj 2008, 13:15