OLT
- Kod: Zaznacz wszystko
OTL logfile created on: 2010-01-10 19:58:29 - Run 2
OTL by OldTimer - Version 3.1.23.0 Folder = C:\untitled folder
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1 023,00 Mb Total Physical Memory | 652,00 Mb Available Physical Memory | 64,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 82,00% Paging File free
Paging file location(s): C:\pagefile.sys 512 1024 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 40,00 Gb Total Space | 27,49 Gb Free Space | 68,74% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: DANIEL
Current User Name: Administrator
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010-01-10 14:04:36 | 00,543,744 | ---- | M] (OldTimer Tools) -- C:\untitled folder\OTL.exe
PRC - [2009-10-20 12:40:22 | 00,122,152 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe
PRC - [2009-10-10 04:25:00 | 00,588,368 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\ArcaVir\AVMenu.exe
PRC - [2009-10-05 10:49:20 | 00,113,232 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\ArcaUpdate\update.exe
PRC - [2009-09-11 14:45:32 | 00,096,848 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\Common\ArcaTasksService.exe
PRC - [2009-09-11 14:44:26 | 00,207,440 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\Common\ArcaBit.Core.Configurator2.exe
PRC - [2009-09-11 14:37:46 | 00,178,768 | ---- | M] (ArcaBit) -- C:\Program Files\ArcaBit\ArcaTools\arcabackup\ArcaBackupService.exe
PRC - [2009-09-11 14:37:20 | 00,277,072 | ---- | M] () -- C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe
PRC - [2009-05-30 12:30:26 | 00,292,136 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.exe
PRC - [2009-05-30 12:30:20 | 00,541,992 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe
PRC - [2009-05-29 13:41:26 | 00,144,712 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2008-12-12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
PRC - [2006-03-02 13:00:00 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005-06-07 22:14:18 | 00,368,640 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe
PRC - [2005-06-07 21:05:00 | 00,344,064 | ---- | M] (ATI Technologies, Inc.) -- C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
PRC - [2002-09-20 15:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010-01-10 14:04:36 | 00,543,744 | ---- | M] (OldTimer Tools) -- C:\untitled folder\OTL.exe
MOD - [2006-03-02 13:00:00 | 01,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2009-10-20 12:40:22 | 00,122,152 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe -- (ABMainSV)
SRV - [2009-10-05 10:49:20 | 00,113,232 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\ArcaUpdate\update.exe -- (AVUpdate)
SRV - [2009-09-11 14:45:32 | 00,096,848 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\Common\ArcaTasksService.exe -- (AVTasks2)
SRV - [2009-09-11 14:44:36 | 00,248,400 | ---- | M] (ArcaBit) [On_Demand | Stopped] -- C:\Program Files\ArcaBit\Common\ArcaBit.Core.LoggingService.exe -- (ArcaBit.Core.LoggingService)
SRV - [2009-09-11 14:44:26 | 00,207,440 | ---- | M] (ArcaBit) [On_Demand | Running] -- C:\Program Files\ArcaBit\Common\ArcaBit.Core.Configurator2.exe -- (ArcaBit.Core.Configurator)
SRV - [2009-09-11 14:37:46 | 00,178,768 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\ArcaTools\arcabackup\ArcaBackupService.exe -- (AVBackup)
SRV - [2009-09-11 14:37:20 | 00,277,072 | ---- | M] () [Auto | Running] -- C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe -- (ArcaRemoteService)
SRV - [2009-05-30 12:30:20 | 00,541,992 | ---- | M] (Apple Inc.) [On_Demand | Running] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2009-05-29 13:41:26 | 00,144,712 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2008-12-12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - [2007-08-24 03:19:12 | 00,443,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006-03-02 13:00:00 | 00,157,130 | RHS- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\mwplepvr.dll -- (aimwsvhfw)
SRV - [2005-06-07 22:14:18 | 00,368,640 | ---- | M] (ATI Technologies Inc.) [Auto | Running] -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller)
SRV - [2004-08-04 01:44:02 | 00,027,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\irmon.dll -- (Irmon)
SRV - [2002-09-20 15:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2009-12-08 19:17:23 | 00,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-05-29 13:36:16 | 00,039,424 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaapl.sys -- (USBAAPL)
DRV - [2009-03-19 16:32:48 | 00,023,400 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2008-02-26 14:45:10 | 00,051,208 | ---- | M] (ArcaBit) [Kernel | System | Running] -- C:\Program Files\ArcaBit\ArcaVir\ABTDI.sys -- (ABTDI)
DRV - [2007-12-10 13:37:28 | 00,037,896 | ---- | M] (ArcaBit) [File_System | On_Demand | Running] -- C:\Program Files\ArcaBit\ArcaVir\ABFLT.sys -- (ABFLT)
DRV - [2006-03-02 13:00:00 | 00,027,440 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2006-03-02 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [2005-06-07 22:19:52 | 01,201,152 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2004-08-04 01:38:40 | 00,607,068 | ---- | M] (LT) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ltmdmnt.sys -- (ltmodem5)
DRV - [2003-12-17 15:29:48 | 00,591,936 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smwdm.sys -- (smwdm)
DRV - [2003-10-23 11:17:10 | 00,100,384 | ---- | M] (Andrea Electronics Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aeaudio.sys -- (aeaudio)
DRV - [2001-10-26 18:07:38 | 00,036,425 | ---- | M] (SMC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA)
DRV - [2001-10-26 17:50:42 | 00,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\e100b325.sys -- (E100B) Sterownik karty Intel(R)
DRV - [2001-08-17 21:20:04 | 00,096,256 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ac97intc.sys -- (ac97intc) Usługa instalacyjna sterownika audio Intel(r) 82801 (WDM)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-220523388-113007714-839522115-500\S-1-5-21-220523388-113007714-839522115-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-220523388-113007714-839522115-500\S-1-5-21-220523388-113007714-839522115-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..extensions.enabledItems: arcabit@www.arcabit.pl:3.5
FF - prefs.js..network.proxy.socks: "localhost"
FF - prefs.js..network.proxy.socks_port: 8080
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-01-09 20:18:29 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-01-09 20:18:29 | 00,000,000 | ---D | M]
[2009-12-05 19:45:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Extensions
[2009-12-05 19:45:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\oxlvaoh6.default\extensions
[2010-01-10 10:00:47 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-01-09 23:35:09 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\arcabit@www.arcabit.pl
[2009-12-08 19:33:43 | 00,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
[2009-11-03 02:54:10 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-11-03 02:54:10 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-11-03 02:54:10 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-11-03 02:54:10 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-11-03 02:54:10 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-11-03 02:54:10 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
O1 HOSTS File: (742 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [ABRegmon] C:\Program Files\ArcaBit\ArcaVir\ABregmon.exe (ArcaBit)
O4 - HKLM..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe (ATI Technologies, Inc.)
O4 - HKLM..\Run: [AvMenu] C:\Program Files\ArcaBit\ArcaVir\AVMenu.exe (ArcaBit)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-220523388-113007714-839522115-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll (ArcaBit sp. z o.o)
O9 - Extra 'Tools' menuitem : ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll (ArcaBit sp. z o.o)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-12-03 22:41:30 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-12-20 11:55:20 | 00,000,000 | ---D | M] - C:\Automapa -- [ NTFS ]
O33 - MountPoints2\{5ef1f94c-e055-11de-9ad3-0008029795a2}\Shell - "" = AutoRun
O33 - MountPoints2\{d76f8000-e425-11de-9ada-0008029795a2}\Shell - "" = AutoRun
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2010-01-10 15:43:31 | 00,000,000 | ---D | C] -- C:\baza
[2010-01-10 14:07:16 | 00,000,000 | ---D | C] -- C:\untitled folder
[2010-01-10 11:49:28 | 00,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010-01-10 10:09:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Gadu-Gadu
[2010-01-10 10:01:46 | 00,000,000 | ---D | C] -- C:\Program Files\RegCleaner
[2010-01-10 10:00:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Smart PC Solutions
[2010-01-10 10:00:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2010-01-09 23:36:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\ArcaBit
[2010-01-09 23:34:38 | 00,000,000 | ---D | C] -- C:\Program Files\ArcaBit
[2010-01-09 23:34:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\ArcaBit
[2010-01-09 23:26:43 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2010-01-09 18:40:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\vpworkspace
[2010-01-09 18:39:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\.vplls
[2010-01-09 18:38:27 | 00,000,000 | ---D | C] -- C:\Program Files\VP Suite 4.0
[2010-01-09 18:24:58 | 00,000,000 | ---D | C] -- C:\Visual_Paradigm_Suite_4.0__TPB_
[2009-12-19 16:57:08 | 00,009,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidusb.sys
[2009-12-17 07:55:44 | 00,000,000 | ---D | C] -- C:\Program Files\WinSCP
[2009-12-16 23:27:45 | 00,137,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMAPI32.OCX
[2009-12-16 23:27:30 | 00,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMPIDE.DLL
[2009-12-16 23:27:29 | 00,000,000 | ---D | C] -- C:\Program Files\PDFCreator
[2009-12-15 23:08:24 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\SecuROM
[2009-12-15 16:27:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TrueCrypt
[2009-12-14 23:39:52 | 00,000,000 | ---D | C] -- C:\swsetup
[2009-12-12 20:19:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\MathWorks
[2009-12-12 19:04:57 | 00,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX
[2009-12-12 18:23:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss
[2009-12-11 23:01:41 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2009-12-11 22:59:46 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\NetDragon
[2009-12-11 22:59:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\91 Mobile
[2009-12-11 22:46:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\WinRAR
[2009-12-11 22:46:36 | 00,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2009-12-11 22:43:29 | 00,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2009-12-11 22:42:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Apple Computer
[2009-12-11 22:42:36 | 00,000,000 | ---D | C] -- C:\Program Files\iPod
[2009-12-11 22:42:34 | 00,000,000 | ---D | C] -- C:\Program Files\iTunes
[2009-12-11 22:42:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009-12-11 22:42:23 | 00,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2009-12-11 22:42:00 | 00,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2009-12-11 22:41:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
[2009-12-11 22:41:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Apple
[2009-12-11 22:41:43 | 00,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2009-12-11 22:41:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2009-12-11 22:41:26 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2009-12-11 22:41:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple
[2009-12-11 22:38:09 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2009-12-11 22:38:06 | 00,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2009-12-11 22:38:04 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2009-12-11 22:38:00 | 00,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2009-12-11 22:37:38 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpssvcs.dll
[2009-12-11 22:37:38 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2009-12-11 22:37:38 | 00,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2009-12-11 22:37:38 | 00,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2009-12-11 22:37:38 | 00,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll
[2009-12-11 22:37:38 | 00,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2009-12-11 22:37:03 | 00,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2009-12-11 22:36:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2009-12-11 22:35:09 | 00,026,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2009-12-11 22:35:01 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 6.0
[2009-12-11 22:29:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Apple Computer
[2009-12-11 22:26:31 | 00,000,000 | ---D | C] -- C:\Program Files\iPhone PC Suite 2.3.1.86
[2009-12-03 22:45:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-12-03 22:45:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-12-03 22:41:23 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2009-12-03 22:41:23 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010-01-10 19:57:02 | 00,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-01-10 19:55:34 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-01-10 19:55:32 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-01-10 16:03:51 | 01,572,864 | -H-- | M] () -- C:\Documents and Settings\Administrator\NTUSER.DAT
[2010-01-10 16:03:51 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\Administrator\ntuser.ini
[2010-01-10 16:03:43 | 03,340,116 | -H-- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-01-10 11:05:17 | 00,000,106 | ---- | M] () -- C:\Documents and Settings\Administrator\.vpinstall.properties
[2010-01-10 10:01:48 | 00,000,645 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\RegCleaner.lnk
[2010-01-10 00:14:23 | 00,490,866 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-01-10 00:14:23 | 00,432,690 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-01-10 00:14:23 | 00,084,078 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-01-10 00:14:22 | 01,087,116 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-01-10 00:14:22 | 00,067,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-01-09 23:35:48 | 00,000,477 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-01-09 23:35:48 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-01-09 23:35:48 | 00,000,211 | -HS- | M] () -- C:\boot.ini
[2010-01-09 18:39:46 | 00,000,108 | ---- | M] () -- C:\Documents and Settings\Administrator\.vpsuite_installation.xml
[2009-12-19 16:53:59 | 00,021,840 | ---- | M] () -- C:\WINDOWS\System32\SIntfNT.dll
[2009-12-19 16:53:59 | 00,017,212 | ---- | M] () -- C:\WINDOWS\System32\SIntf32.dll
[2009-12-19 16:53:59 | 00,012,067 | ---- | M] () -- C:\WINDOWS\System32\SIntf16.dll
[2009-12-17 07:56:23 | 00,000,600 | ---- | M] () -- C:\Documents and Settings\Administrator\Dane aplikacji\winscp.rnd
[2009-12-17 07:55:45 | 00,001,464 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\WinSCP.lnk
[2009-12-16 23:42:04 | 00,001,100 | ---- | M] () -- C:\WINDOWS\System32\d3d8caps.dat
[2009-12-16 23:29:26 | 00,318,882 | ---- | M] () -- C:\Sprawozdanie SiST.pdf
[2009-12-15 23:11:46 | 00,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009-12-15 15:40:41 | 07,924,820 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\68000-notatki dobre.rar
[2009-12-15 15:37:12 | 00,014,450 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Magisterka-07-23.docx
[2009-12-13 17:17:46 | 00,000,600 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
[2009-12-12 18:22:51 | 00,192,976 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-12-11 22:58:52 | 00,044,528 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-12-11 22:57:58 | 00,000,739 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\iPhone PC Suite.lnk
[2009-12-11 22:43:29 | 00,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2009-12-11 22:41:47 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009-12-11 22:35:27 | 00,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010-01-10 10:01:48 | 00,000,645 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\RegCleaner.lnk
[2010-01-09 18:39:46 | 00,000,108 | ---- | C] () -- C:\Documents and Settings\Administrator\.vpsuite_installation.xml
[2010-01-09 18:38:13 | 00,000,106 | ---- | C] () -- C:\Documents and Settings\Administrator\.vpinstall.properties
[2009-12-19 16:53:59 | 00,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2009-12-19 16:53:59 | 00,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2009-12-19 16:53:59 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2009-12-17 07:55:46 | 00,000,600 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\winscp.rnd
[2009-12-17 07:55:45 | 00,001,464 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\WinSCP.lnk
[2009-12-17 07:54:35 | 00,318,882 | ---- | C] () -- C:\Sprawozdanie SiST.pdf
[2009-12-16 23:27:44 | 00,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2009-12-15 23:07:48 | 00,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009-12-15 15:40:30 | 07,924,820 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\68000-notatki dobre.rar
[2009-12-15 15:37:12 | 00,014,450 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Magisterka-07-23.docx
[2009-12-12 19:04:57 | 00,002,362 | ---- | C] () -- C:\WINDOWS\System32\mscomct2.dep
[2009-12-11 22:57:58 | 00,000,739 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\iPhone PC Suite.lnk
[2009-12-11 22:41:46 | 00,000,284 | ---- | C] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009-12-11 22:38:39 | 00,120,208 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2009-12-08 19:17:22 | 00,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-12-06 18:06:44 | 00,000,600 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
[2009-12-05 19:51:17 | 00,000,044 | ---- | C] () -- C:\WINDOWS\System32\msssc.dll
[2006-03-02 13:00:00 | 00,157,130 | RHS- | C] () -- C:\WINDOWS\System32\mwplepvr.dll
[2006-03-02 13:00:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2006-03-02 13:00:00 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[color=#E56717]========== LOP Check ==========[/color]
[2010-01-09 23:34:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\ArcaBit
[2009-12-08 19:17:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\DAEMON Tools Lite
[2010-01-10 16:03:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\foobar2000
[2009-12-08 19:34:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Foxit
[2010-01-10 10:09:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Gadu-Gadu
[2010-01-10 10:09:08 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Smart PC Solutions
[2009-12-10 20:45:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Sports Interactive
[2009-12-08 19:17:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2009-12-10 20:46:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive
[2010-01-10 10:00:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-12-15 16:27:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TrueCrypt
[2009-12-11 22:42:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2010-01-09 23:36:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\ArcaBit
[color=#E56717]========== Purity Check ==========[/color]
< End of report >
RSIT
- Kod: Zaznacz wszystko
Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-01-10 15:46:46
Microsoft Windows XP Professional Dodatek Service Pack 2
System drive C: has 28 GB (69%) free of 41 GB
Total RAM: 1023 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:46:48, on 2010-01-10
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\ArcaBit\Common\ArcaBit.Core.Configurator2.exe
C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe
C:\Program Files\ArcaBit\ArcaTools\arcabackup\ArcaBackupService.exe
C:\Program Files\ArcaBit\Common\ArcaTasksService.exe
C:\Program Files\ArcaBit\ArcaUpdate\update.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ArcaBit\ArcaVir\AVMenu.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\foobar2000\foobar2000.exe
C:\Program Files\ArcaBit\ArcaVir\abregmon.exe
C:\PROGRA~1\FOXITR~1\FOXITR~1.EXE
C:\untitled folder\RSIT.exe
C:\untitled folder\Administrator.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = £¹cza
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AvMenu] C:\Program Files\ArcaBit\ArcaVir\AVMenu.exe
O4 - HKLM\..\Run: [ABRegmon] C:\Program Files\ArcaBit\ArcaVir\ABregmon.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'US£UGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'US£UGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll
O9 - Extra 'Tools' menuitem: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: ArcaBit Main Service (ABMainSV) - ArcaBit - C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ArcaBit.Core.Configurator - ArcaBit - C:\Program Files\ArcaBit\Common\ArcaBit.Core.Configurator2.exe
O23 - Service: ArcaBit.Core.LoggingService - ArcaBit - C:\Program Files\ArcaBit\Common\ArcaBit.Core.LoggingService.exe
O23 - Service: ArcaBit Control (ArcaRemoteService) - Unknown owner - C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ArcaBit Backup Service (AVBackup) - ArcaBit - C:\Program Files\ArcaBit\ArcaTools\arcabackup\ArcaBackupService.exe
O23 - Service: ArcaBit Tasks Service (AVTasks2) - ArcaBit - C:\Program Files\ArcaBit\Common\ArcaTasksService.exe
O23 - Service: ArcaBit Update Service (AVUpdate) - ArcaBit - C:\Program Files\ArcaBit\ArcaUpdate\update.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Us³uga iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
--
End of file - 4584 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-06-07 344064]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-05-30 292136]
"AvMenu"=C:\Program Files\ArcaBit\ArcaVir\AVMenu.exe [2009-10-10 588368]
"ABRegmon"=C:\Program Files\ArcaBit\ArcaVir\ABregmon.exe [2009-10-10 420432]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iPhone PC Suite]
C:\Program Files\iPhone PC Suite 2.3.1.86\iPhone PC Suite.exe [2009-12-11 897024]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-06-07 46080]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Football Manager 2010\fm.exe"="C:\Program Files\Football Manager 2010\fm.exe:*:Disabled:Football Manager 2010"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5ef1f94c-e055-11de-9ad3-0008029795a2}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d76f8000-e425-11de-9ada-0008029795a2}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
======List of files/folders created in the last 1 months======
2010-01-10 15:46:03 ----D---- C:\rsit
2010-01-10 15:43:31 ----D---- C:\baza
2010-01-10 14:07:16 ----D---- C:\untitled folder
2010-01-10 11:52:58 ----A---- C:\List.txt
2010-01-10 11:49:28 ----D---- C:\WINDOWS\Minidump
2010-01-10 10:09:25 ----D---- C:\Documents and Settings\Administrator\Dane aplikacji\Gadu-Gadu
2010-01-10 10:01:46 ----D---- C:\Program Files\RegCleaner
2010-01-10 10:00:26 ----D---- C:\Documents and Settings\Administrator\Dane aplikacji\Smart PC Solutions
2010-01-10 10:00:25 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
2010-01-09 23:34:38 ----D---- C:\Program Files\ArcaBit
2010-01-09 23:34:38 ----D---- C:\Documents and Settings\Administrator\Dane aplikacji\ArcaBit
2010-01-09 23:31:28 ----A---- C:\plik.txt
2010-01-09 23:26:43 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-01-09 18:38:27 ----D---- C:\Program Files\VP Suite 4.0
2010-01-09 18:24:58 ----D---- C:\Visual_Paradigm_Suite_4.0__TPB_
2009-12-20 11:46:40 ----D---- C:\Automapa
2009-12-19 16:53:59 ----A---- C:\WINDOWS\system32\SIntfNT.dll
2009-12-19 16:53:59 ----A---- C:\WINDOWS\system32\SIntf32.dll
2009-12-19 16:53:59 ----A---- C:\WINDOWS\system32\SIntf16.dll
2009-12-17 07:55:44 ----D---- C:\Program Files\WinSCP
2009-12-16 23:27:44 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
2009-12-16 23:27:30 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
2009-12-16 23:27:29 ----D---- C:\Program Files\PDFCreator
2009-12-15 23:08:24 ----RHD---- C:\Documents and Settings\Administrator\Dane aplikacji\SecuROM
2009-12-15 16:27:51 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\TrueCrypt
2009-12-14 23:39:52 ----D---- C:\swsetup
2009-12-12 20:19:48 ----D---- C:\Documents and Settings\Administrator\Dane aplikacji\MathWorks
2009-12-12 18:23:47 ----D---- C:\WINDOWS\pss
2009-12-11 23:01:41 ----D---- C:\WINDOWS\system32\appmgmt
2009-12-11 22:59:46 ----D---- C:\Program Files\Common Files\NetDragon
2009-12-11 22:46:46 ----D---- C:\Documents and Settings\Administrator\Dane aplikacji\WinRAR
2009-12-11 22:46:36 ----D---- C:\Program Files\WinRAR
2009-12-11 22:43:29 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2009-12-11 22:42:57 ----D---- C:\Documents and Settings\Administrator\Dane aplikacji\Apple Computer
2009-12-11 22:42:49 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2009-12-11 22:42:36 ----D---- C:\Program Files\iPod
2009-12-11 22:42:34 ----D---- C:\Program Files\iTunes
2009-12-11 22:42:34 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-12-11 22:42:23 ----D---- C:\Program Files\Bonjour
2009-12-11 22:42:00 ----D---- C:\Program Files\QuickTime
2009-12-11 22:41:58 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2009-12-11 22:41:43 ----D---- C:\Program Files\Apple Software Update
2009-12-11 22:41:36 ----A---- C:\WINDOWS\system32\usbaaplrc.dll
2009-12-11 22:41:35 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-11 22:41:26 ----D---- C:\Program Files\Common Files\Apple
2009-12-11 22:41:25 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Apple
2009-12-11 22:38:09 ----D---- C:\WINDOWS\system32\XPSViewer
2009-12-11 22:38:06 ----D---- C:\Program Files\MSBuild
2009-12-11 22:38:04 ----D---- C:\WINDOWS\system32\en-US
2009-12-11 22:38:00 ----D---- C:\Program Files\Reference Assemblies
2009-12-11 22:37:38 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-12-11 22:37:38 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-12-11 22:37:38 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-12-11 22:37:03 ----RSD---- C:\WINDOWS\assembly
2009-12-11 22:36:35 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-11 22:35:09 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-12-11 22:35:07 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2009-12-11 22:35:01 ----D---- C:\Program Files\MSXML 6.0
2009-12-11 22:26:31 ----D---- C:\Program Files\iPhone PC Suite 2.3.1.86
======List of files/folders modified in the last 1 months======
2010-01-10 14:34:29 ----D---- C:\WINDOWS\system32
2010-01-10 11:53:24 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-10 11:49:36 ----D---- C:\WINDOWS
2010-01-10 11:21:13 ----D---- C:\WINDOWS\Temp
2010-01-10 11:21:13 ----D---- C:\WINDOWS\system32\drivers
2010-01-10 11:20:49 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-10 11:12:15 ----RD---- C:\Program Files
2010-01-10 10:22:10 ----D---- C:\Program Files\Mozilla Firefox
2010-01-10 00:14:38 ----D---- C:\Program Files\Common Files\InstallShield
2010-01-10 00:14:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-10 00:14:04 ----D---- C:\WINDOWS\Help
2010-01-10 00:14:00 ----D---- C:\WINDOWS\Cursors
2010-01-10 00:04:07 ----D---- C:\Pobierane
2010-01-09 23:35:48 ----SH---- C:\boot.ini
2010-01-09 23:35:48 ----A---- C:\WINDOWS\win.ini
2010-01-09 23:35:48 ----A---- C:\WINDOWS\system.ini
2010-01-09 23:35:10 ----HD---- C:\WINDOWS\inf
2010-01-09 23:35:06 ----SHD---- C:\WINDOWS\Installer
2010-01-09 23:27:46 ----D---- C:\WINDOWS\WinSxS
2010-01-09 23:27:46 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-01-09 23:26:43 ----D---- C:\Program Files\Common Files
2010-01-09 21:01:18 ----D---- C:\Documents and Settings\Administrator\Dane aplikacji\foobar2000
2010-01-05 09:02:16 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-22 13:10:16 ----D---- C:\WINDOWS\Prefetch
2009-12-19 16:57:15 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-16 22:51:41 ----D---- C:\Andrzej
2009-12-15 23:16:01 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-12-15 15:24:54 ----SD---- C:\Documents and Settings\Administrator\Dane aplikacji\Microsoft
2009-12-11 22:42:16 ----D---- C:\Program Files\Internet Explorer
2009-12-11 22:41:46 ----SD---- C:\WINDOWS\Tasks
2009-12-11 22:38:03 ----RSD---- C:\WINDOWS\Fonts
2009-12-11 22:37:45 ----D---- C:\WINDOWS\system32\spool
2009-12-11 22:36:39 ----D---- C:\WINDOWS\system32\mui
2009-12-11 22:35:27 ----A---- C:\WINDOWS\imsins.BAK
2009-12-11 22:24:40 ----D---- C:\WINDOWS\system32\Macromed
2009-12-11 22:24:32 ----D---- C:\WINDOWS\system32\DirectX
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ABTDI;ArcaBit Network Driver; \??\C:\Program Files\ArcaBit\ArcaVir\ABTDI.sys []
R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2006-03-02 40320]
R2 irda;Protokó³ IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424]
R3 ABFLT;ArcaBit File Monitor Driver; \??\C:\Program Files\ArcaBit\ArcaVir\ABFLT.sys []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2003-10-23 100384]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-06-07 1201152]
R3 CmBatt;Sterownik baterii Microsoft o metodzie kontroli ACPI; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 ltmodem5;LT Modem Driver; C:\WINDOWS\system32\DRIVERS\ltmdmnt.sys [2004-08-04 607068]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SMCIRDA;Sterownik urz¹dzenia SMC IrCC Miniport; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-10-26 36425]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-12-17 591936]
R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2006-03-02 26624]
R3 usbhub;Koncentrator z obs³ug¹ USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2006-03-02 57600]
R3 usbohci;Sterownik Miniport otwartego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2006-03-02 17024]
S3 a89d7n23;a89d7n23; C:\WINDOWS\system32\drivers\a89d7n23.sys []
S3 ABndis;ABndis Service; C:\WINDOWS\system32\DRIVERS\abndis.sys []
S3 ABndisMP;ABndisMP; C:\WINDOWS\system32\DRIVERS\abndis.sys []
S3 ac97intc;Us³uga instalacyjna sterownika audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
S3 E100B;Sterownik karty Intel(R) PRO; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-10-26 117760]
S3 HidUsb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-05-29 39424]
S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S4 sr;Sterownik filtru Przywracania systemu; C:\WINDOWS\system32\DRIVERS\sr.sys [2006-03-02 73472]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ABMainSV;ArcaBit Main Service; C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe [2009-10-20 122152]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-05-29 144712]
R2 ArcaRemoteService;ArcaBit Control; C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe [2009-09-11 277072]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-06-07 368640]
R2 AVBackup;ArcaBit Backup Service; C:\Program Files\ArcaBit\ArcaTools\arcabackup\ArcaBackupService.exe [2009-09-11 178768]
R2 AVTasks2;ArcaBit Tasks Service; C:\Program Files\ArcaBit\Common\ArcaTasksService.exe [2009-09-11 96848]
R2 AVUpdate;ArcaBit Update Service; C:\Program Files\ArcaBit\ArcaUpdate\update.exe [2009-10-05 113232]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 Irmon;Monitor podczerwieni; C:\WINDOWS\system32\svchost.exe [2006-03-02 14336]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R3 ArcaBit.Core.Configurator;ArcaBit.Core.Configurator; C:\Program Files\ArcaBit\Common\ArcaBit.Core.Configurator2.exe [2009-09-11 207440]
R3 iPod Service;Us³uga iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-05-30 541992]
S3 ArcaBit.Core.LoggingService;ArcaBit.Core.LoggingService; C:\Program Files\ArcaBit\Common\ArcaBit.Core.LoggingService.exe [2009-09-11 248400]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
