proszę o sprawdzenie loga

**Posty:** 35 · przez **Wilk.** 29 Mar 2007, 19:03

Mam Bardzo duże ping. Mam neostrade 512 dzwoniłem ale oni iczywiście nie sa w stanie pomóc. Przy sciąganiu plików prędkość raczej ok. Ale gdy zaczynam grać w sieci [AA] ping mam powyżej 250 i do tego szybko rośnie bardzo skacze nie jest stały.

Logfile of HijackThis v1.99.1
Scan saved at 18:49:27, on 2007-03-29
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Neostrada TP\NeostradaTP.exe
C:\Program Files\Neostrada TP\ComComp.exe
C:\Program Files\Neostrada TP\Watch.exe
G:\Teamspeak2_RC2\TeamSpeak.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\DOCUME~1\Konrad\USTAWI~1\Temp\Rar$EX01.312\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [WinampAgent] G:\Winamp\winampa.exe
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Dodaj do Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{6F14A062-74DC-45F9-82BB-D906B7B577E0}: NameServer = 194.204.159.1 217.98.63.164
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: rpcc - C:\WINDOWS\
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

**Posty:** 18165 · przez **wojtas** 29 Mar 2007, 20:00

skasuj:

O20 - Winlogon Notify: rpcc - C:\WINDOWS\

daj loga z silent runners
http://forum.programosy.pl/hijackthis-amp-silent-runners-gtobsuga-i-umieszczanie-vt9452.html

i comboscana:

http://forum.programosy.pl/dodatkowe-narzedzia-do-usuwania-i-ochrony-vt42021.html

**Posty:** 35 · przez **Wilk.** 29 Mar 2007, 20:22

"Silent Runners.vbs", revision R50, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"

Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"WooCnxMon" = "C:\PROGRA~1\NEOSTR~1\CnxMon.exe" [empty string]
"SpeedTouch USB Diagnostics" = ""C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon" ["THOMSON Telecom Belgium"]
"WOOWATCH" = "C:\PROGRA~1\NEOSTR~1\Watch.exe" ["France Télécom R&D"]
"WOOTASKBARICON" = "C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe" ["France Télécom R&D"]
"SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."]
"kis" = ""C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"" ["Kaspersky Lab"]
"(Default)" = "(empty string)" [file not found]
"NeroFilterCheck" = "C:\WINDOWS\system32\NeroCheck.exe" ["Ahead Software Gmbh"]
"QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime" ["Apple Computer, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
-> {HKLM...CLSID} = "AcroIEHlprObj Class"
\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
-> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
-> {HKLM...CLSID} = "HyperTerminal Icon Ext"
\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\OFFICE11\msohev.dll" [MS]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{85E0B171-04FA-11D1-B7DA-00A0C90348D6}" = "Ochrona WWW"
-> {HKLM...CLSID} = "Ochrona WWW"
\InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll" ["Kaspersky Lab"]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\
<<!>> "AppInit_DLLs" = "C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll" ["Kaspersky Lab"]

HKLM\Software\Classes\PROTOCOLS\Filter\
<<!>> text/xml\CLSID = "{807553E5-5146-11D5-A672-00B0D022E945}"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL" [MS]

HKLM\Software\Classes\Folder\shellex\ColumnHandlers\
{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info"
-> {HKLM...CLSID} = "PDF Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\shellex.dll" ["Kaspersky Lab"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\shellex.dll" ["Kaspersky Lab"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

Group Policies {policy setting}:
--------------------------------

Note: detected settings may not have any effect.

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Devices: Allow undock without having to log on}

Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp"

Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]

Startup items in "Konrad" & "All Users" startup folders:
--------------------------------------------------------

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
"Adobe Reader Speed Launch" -> shortcut to: "C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe" ["Adobe Systems Incorporated"]

Enabled Scheduled Tasks:
------------------------

"AppleSoftwareUpdate" -> launches: "C:\Program Files\Apple Software Update\SoftwareUpdate.exe -Task" ["Apple Computer, Inc."]

Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 15
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05

Toolbars, Explorer Bars, Extensions:
------------------------------------

Explorer Bars

HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\

HKLM\Software\Classes\CLSID\{01002DB2-8170-4D9B-A8B1-DDC9DD114E03}\(Default) = "Volet Wanadoo"
Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar]
InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\audience\audience.dll" [empty string]

HKLM\Software\Classes\CLSID\{3BAF4A27-C764-4E1A-A6F4-62F7A7E5E51C}\(Default) = "ToolBand Class"
Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar]
InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\audience\audience.dll" [empty string]

HKLM\Software\Classes\CLSID\{5BF498C0-931E-4A4F-B33F-456D07137EAA}\(Default) = "Volet Wanadoo"
Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar]
InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\audience\audience.dll" [empty string]

HKLM\Software\Classes\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D6}\(Default) = "Ochrona WWW"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll" ["Kaspersky Lab"]

HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\(Default) = "&Badanie"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL" [MS]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}\
"ButtonText" = "Ochrona WWW"

{92780B25-18CC-41C8-B9BE-3C9C571A8263}\
"ButtonText" = "Badanie"

Miscellaneous IE Hijack Points
------------------------------

HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\
<<H>> "{08C06D61-F1F3-4799-86F8-BE1A89362C85}" = (no title provided)
-> {HKLM...CLSID} = "Search Class"
\InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL" [empty string]

Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Kaspersky Internet Security 6.0, AVP, ""C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r" ["Kaspersky Lab"]
LightScribeService Direct Disc Labeling Service, LightScribeService, ""C:\Program Files\Common Files\LightScribe\LSSrvc.exe"" ["Hewlett-Packard Company"]
PnkBstrA, PnkBstrA, "C:\WINDOWS\system32\PnkBstrA.exe" [null data]
Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS]

Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
Microsoft Document Imaging Writer Monitor\Driver = "mdimon.dll" [MS]

----------
<<!>>: Suspicious data at a malware launch point.
<<H>>: Suspicious data at a browser hijack point.

+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
DLL launch points, use the -supp parameter or answer "No" at the
first message box and "Yes" at the second message box.
---------- (total run time: 95 seconds, including 2 seconds for message boxes)

ComboScan v20070306.20 run by Konrad on 2007-03-29 at 20:11:52
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enable...success.

-- Last 1 Restore Point(s) --
1: 2007-03-29 18:12:27 UTC - RP1 - Punkt kontrolny systemu

Performed disk cleanup.

-- HijackThis (run as Konrad.exe) ----------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 20:12:43, on 2007-03-29
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Neostrada TP\NeostradaTP.exe
C:\Program Files\Neostrada TP\ComComp.exe
C:\Program Files\Neostrada TP\Watch.exe
G:\Teamspeak2_RC2\TeamSpeak.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Konrad\Pulpit\comboscan.exe
C:\WINDOWS\system32\wscntfy.exe
C:\DOCUME~1\Konrad\Pulpit\Konrad.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{6F14A062-74DC-45F9-82BB-D906B7B577E0}: NameServer = 194.204.159.1 217.98.63.164
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

-- HijackThis Fixed Entries (C:\DOCUME~1\Konrad\Pulpit\backups\) ---------------

backup-20070329-195938-324 O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll

-- File Associations -----------------------------------------------------------

.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
.reg - regfile - regedit.exe "%1"
.scr - scrfile - "%1" /S
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

3R alcan5wn (SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)) - C:\WINDOWS\system32\drivers\alcan5wn.sys
3R alcaudsl (SpeedTouch ADSL Modem ATM Transport) - C:\WINDOWS\system32\drivers\alcaudsl.sys
3R ALCXWDM (Service for Realtek AC97 Audio (WDM)) - C:\WINDOWS\system32\drivers\alcxwdm.sys
1R AmdK7 (Sterownik procesora AMD K7) - C:\WINDOWS\system32\drivers\amdk7.sys
3R ati2mtag - C:\WINDOWS\system32\drivers\ati2mtag.sys
0R kl1 - C:\WINDOWS\system32\drivers\kl1.sys
1R klif - C:\WINDOWS\system32\drivers\klif.sys
3S PnkBstrK - C:\WINDOWS\system32\drivers\PnkBstrK.sys
0R PxHelp20 - C:\WINDOWS\system32\drivers\PxHelp20.sys
3R SISNIC (Sterownik karty PCI Fast Ethernet SiS) - C:\WINDOWS\system32\drivers\sisnic.sys
0R uagp35 (Filtr AGPv3.5 firmy Microsoft) - C:\WINDOWS\system32\drivers\UAGP35.SYS
3R usbehci (Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft) - C:\WINDOWS\system32\drivers\usbehci.sys
3R usbohci (Sterownik Miniport otwartego kontrolera hosta USB Microsoft) - C:\WINDOWS\system32\drivers\usbohci.sys
3S usbscan (Sterownik skanera USB) - C:\WINDOWS\system32\drivers\usbscan.sys

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

2S AVP (Kaspersky Internet Security 6.0) - "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r
2R LightScribeService (LightScribeService Direct Disc Labeling Service) - "C:\Program Files\Common Files\LightScribe\LSSrvc.exe"
3S ose (Office Source Engine) - "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
2R PnkBstrA - C:\WINDOWS\system32\PnkBstrA.exe
3S PnkBstrB - C:\WINDOWS\system32\PnkBstrB.exe
2R UMWdf (Windows User Mode Driver Framework) - C:\WINDOWS\system32\wdfmgr.exe

-- Scheduled Tasks -------------------------------------------------------------

2007-03-29 08:59:59 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job<APPLES~1.JOB>

-- Files created between 2007-02-28 and 2007-03-29 -----------------------------

2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\zts2.exe
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\rundll16.exe
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\rundl132.dll
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\logo1_.exe
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\TASKMGR.COM
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\T.COM
2007-03-29 19:36:37 149504 --a------ C:\WINDOWS\REGEDIT.COM
2007-03-29 19:36:37 149504 --a------ C:\WINDOWS\R.COM
2007-03-29 09:00:12 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-03-29 08:59:55 0 d-------- C:\Program Files\Apple Software Update<APPLES~1>
2007-03-28 21:19:14 0 d-------- C:\Program Files\BrizVideoJoin<BRIZVI~1>
2007-03-28 21:17:23 0 d-------- C:\Program Files\AVI Codec Pack<AVICOD~1>
2007-03-28 21:02:56 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Real Alternative<REALAL~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1>
2007-03-28 21:01:51 0 d-------- C:\Program Files\AC3Filter<AC3FIL~1>
2007-03-28 21:01:30 0 d-------- C:\Program Files\DivX
2007-03-28 20:59:14 0 d-------- C:\Program Files\MarBit
2007-03-28 16:14:32 0 d-------- C:\Program Files\Common Files\LightScribe<LIGHTS~1>
2007-03-28 16:12:47 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll
2007-03-28 16:12:47 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2007-03-28 16:12:43 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll
2007-03-28 16:12:43 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll
2007-03-28 16:12:43 476320 -----n--- C:\WINDOWS\system32\ImagXpr7.dll
2007-03-28 16:12:43 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll
2007-03-28 16:12:42 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE>
2007-03-28 16:12:38 0 d-------- C:\Program Files\Common Files\Ahead
2007-03-28 16:12:36 0 d-------- C:\Program Files\Ahead
2007-03-27 20:37:04 63040 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2007-03-27 19:09:36 0 d-------- C:\Program Files\America's Army Server Manager<AMERIC~1>
2007-03-27 10:37:45 0 d-------- C:\Program Files\Kaspersky Lab<KASPER~1>
2007-03-27 10:37:43 39712 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-03-27 10:37:43 2464032 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-03-26 19:27:02 22584 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-03-26 16:57:55 99904 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2007-03-26 16:57:46 0 d-------- C:\WINDOWS\system32\LogFiles
2007-03-26 16:47:45 0 d-------- C:\Program Files\America's Army<AMERIC~2>
2007-03-26 16:44:45 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL>
2007-03-26 16:44:45 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL>
2007-03-22 15:40:20 17920 --a------ C:\WINDOWS\system32\mdimon.dll
2007-03-22 15:39:10 0 d-------- C:\WINDOWS\SHELLNEW
2007-03-22 15:30:28 0 d-------- C:\Program Files\Common Files\Adobe
2007-03-22 01:09:06 0 d-------- C:\Program Files\Common Files\Skype
2007-03-22 01:08:52 0 d-------- C:\Program Files\Skype
2007-03-21 09:31:49 5632 --a------ C:\WINDOWS\system32\ptpusb.dll
2007-03-21 09:31:47 159232 --a------ C:\WINDOWS\system32\ptpusd.dll
2007-03-21 09:31:46 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-03-20 21:36:26 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL>
2007-03-20 20:41:50 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-03-20 15:38:13 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe
2007-03-20 15:38:13 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-03-20 15:38:13 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-03-20 15:38:13 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-03-20 15:38:12 129784 -----n--- C:\WINDOWS\system32\pxafs.dll
2007-03-20 15:37:44 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2>
2007-03-20 15:36:11 0 d-------- C:\Program Files\Winamp
2007-03-20 15:29:05 3490 --a------ C:\WINDOWS\mozver.dat
2007-03-20 15:28:56 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~2>
2007-03-19 22:24:28 0 --a------ C:\WINDOWS\nsreg.dat
2007-03-19 22:24:20 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-03-19 00:20:15 49152 --a------ C:\WINDOWS\system32\ChCfg.exe
2007-03-19 00:20:14 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-03-19 00:20:12 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-03-19 00:20:10 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-03-19 00:20:04 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-03-19 00:20:02 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-03-19 00:20:00 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-03-19 00:19:59 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-03-19 00:19:57 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-03-19 00:19:56 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-03-19 00:19:54 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-03-19 00:19:51 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-03-19 00:19:47 4027456 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys
2007-03-19 00:19:45 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-03-19 00:19:45 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-03-19 00:19:45 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-03-19 00:19:39 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe
2007-03-19 00:19:39 0 d-------- C:\Program Files\Realtek AC97<REALTE~2>
2007-03-19 00:19:37 577536 --a------ C:\WINDOWS\soundman.exe
2007-03-19 00:19:36 147456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll
2007-03-19 00:19:36 315392 --a------ C:\WINDOWS\alcupd.exe
2007-03-19 00:19:36 217088 --a------ C:\WINDOWS\Alcrmv.exe
2007-03-18 22:58:20 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-03-18 22:58:20 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1>
2007-03-18 22:58:18 0 d--h----- C:\WINDOWS\$hf_mig$
2007-03-18 22:46:47 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\Realtek Sound Manager<REALTE~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\AvRack
2007-03-18 20:28:56 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1>
2007-03-18 20:26:43 32768 --a------ C:\WINDOWS\system32\UnAudioNT.dll<UNAUDI~1.DLL>
2007-03-18 20:26:43 0 d-------- C:\Program Files\VIA Technologies, Inc<VIATEC~1>
2007-03-18 20:26:39 306688 --a------ C:\WINDOWS\IsUninst.exe
2007-03-18 19:41:56 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-03-18 19:40:48 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-03-18 19:40:26 701440 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-03-18 19:40:26 516768 --a------ C:\WINDOWS\system32\ativvaxx.dll
2007-03-18 19:40:26 1888992 --a------ C:\WINDOWS\system32\ati3duag.dll
2007-03-18 19:40:26 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll
2007-03-18 19:40:25 201728 --a------ C:\WINDOWS\system32\ati2dvag.dll
2007-03-18 19:40:25 229376 --a------ C:\WINDOWS\system32\ati2cqag.dll
2007-03-18 19:40:06 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS
2007-03-18 19:40:02 32768 --a------ C:\WINDOWS\system32\drivers\sisnic.sys
2007-03-18 19:39:56 77312 --a------ C:\WINDOWS\system32\usbui.dll
2007-03-18 19:38:45 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1>
2007-03-18 19:38:44 0 d-------- C:\Program Files\Common Files\ODBC
2007-03-18 19:38:41 0 dr------- C:\Program Files<PROGRA~1>
2007-03-18 19:38:41 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-03-18 19:38:37 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-03-18 19:38:34 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-03-18 19:38:34 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdycl.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdro.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdhu.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll
2007-03-18 19:38:29 7168 --a------ C:\WINDOWS\system32\kbdcz.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcr.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL
2007-03-18 19:38:28 13312 --a------ C:\WINDOWS\system32\irclass.dll
2007-03-18 19:38:28 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-03-18 19:38:27 24661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-03-18 19:38:27 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-03-18 19:38:27 85532 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-03-18 19:38:27 9168 --a------ C:\WINDOWS\system\VER.DLL
2007-03-18 19:38:27 19200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-03-18 19:38:27 5120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-03-18 19:38:26 24064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-03-18 19:38:26 83456 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-03-18 19:38:26 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-03-18 19:38:26 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-03-18 19:38:26 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-03-18 19:38:26 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-03-18 19:38:26 70096 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-03-18 19:38:25 15360 --a------ C:\WINDOWS\TASKMAN.EXE
2007-03-18 19:38:25 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-03-18 19:38:25 8704 --a------ C:\WINDOWS\system32\batt.dll
2007-03-18 19:38:25 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2007-03-18 19:38:24 70144 --a------ C:\WINDOWS\NOTEPAD.EXE
2007-03-18 19:38:23 75776 --a------ C:\WINDOWS\system32\storprop.dll
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot2
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot
2007-03-18 19:37:37 0 d-------- C:\Documents and Settings<DOCUME~1>
2007-03-18 19:37:36 0 d--hs---- C:\System Volume Information<SYSTEM~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\WinSxS
2007-03-18 19:29:37 0 dr------- C:\WINDOWS\Web
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\twain_32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wins
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wbem
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\usmt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\spool
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ShellExt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\Setup
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ras
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\oobe
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\npp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\inetsrv
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\IME
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\icsxml
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ias
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\export
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\etc
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\disdn
2007-03-18 19:29:37 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\dhcp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3com_dmi
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3076
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\2052
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1054
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1045
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1042
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1041
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1037
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1033
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1031
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1028
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1025
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\security
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Resources<RESOUR~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\repair
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\PeerNet
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\pchealth
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msapps
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msagent
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Media
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\java
2007-03-18 19:29:37 0 d--h----- C:\WINDOWS\inf
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\ime
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Help
2007-03-18 19:29:37 0 dr--s---- C:\WINDOWS\Fonts
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Debug
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Cursors
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\AppPatch
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\addins
2007-03-18 19:08:28 32768 --a------ C:\WINDOWS\system32\WooDial2000.dll<WOODIA~1.DLL>
2007-03-18 19:06:22 5606 --a------ C:\WINDOWS\system32\stci.dll
2007-03-18 19:06:22 5280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys
2007-03-18 19:06:22 70688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys
2007-03-18 19:06:22 3968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys
2007-03-18 19:06:21 53600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys
2007-03-18 19:06:20 0 d-------- C:\Program Files\Thomson
2007-03-18 19:06:19 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-03-18 19:06:17 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2007-03-18 19:05:15 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1>
2007-03-18 18:53:40 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-03-18 18:53:39 0 d-------- C:\WINDOWS\Prefetch
2007-03-18 18:50:11 0 d-------- C:\WINDOWS\system32\xircom
2007-03-18 18:50:11 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1>
2007-03-18 18:50:02 0 -rahs---- C:\MSDOS.SYS
2007-03-18 18:50:02 0 -rahs---- C:\IO.SYS
2007-03-18 18:50:02 0 --a------ C:\CONFIG.SYS
2007-03-18 18:50:02 0 --a------ C:\AUTOEXEC.BAT
2007-03-18 18:49:44 112128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-03-18 18:48:53 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1>
2007-03-18 18:48:53 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1>
2007-03-18 18:48:41 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3>
2007-03-18 18:48:38 0 d-------- C:\Program Files\Usługi online<USUGIO~1>
2007-03-18 18:48:21 0 d-------- C:\WINDOWS\system32\DirectX
2007-03-18 18:48:01 11264 --a------ C:\WINDOWS\system32\atrace.dll
2007-03-18 18:47:53 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-03-18 18:47:52 67584 --a------ C:\WINDOWS\system32\acctres.dll
2007-03-18 18:47:49 0 d---s---- C:\WINDOWS\Tasks
2007-03-18 18:47:49 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-03-18 18:47:48 0 d-------- C:\Program Files\Common Files\MSSoap
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\system32\Macromed
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\srchasst
2007-03-18 18:47:41 173536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-03-18 18:47:41 128280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-03-18 18:47:41 6656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-03-18 18:47:41 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-03-18 18:47:41 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-03-18 18:47:40 41240 --a------ C:\WINDOWS\system32\wups.dll
2007-03-18 18:47:40 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-03-18 18:47:40 125208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-03-18 18:47:40 466200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-03-18 18:47:40 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-03-18 18:47:40 382464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-03-18 18:47:40 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2007-03-18 18:47:40 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2007-03-18 18:47:36 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2007-03-18 18:47:33 45568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-03-18 18:47:33 29696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-03-18 18:47:33 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-03-18 18:47:32 43520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-03-18 18:47:30 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-03-18 18:47:30 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-03-18 18:47:29 171008 --a------ C:\WINDOWS\system32\srsvc.dll
2007-03-18 18:47:29 240128 --a------ C:\WINDOWS\system32\srrstr.dll
2007-03-18 18:47:29 67584 --a------ C:\WINDOWS\system32\srclient.dll
2007-03-18 18:47:29 0 d-------- C:\WINDOWS\system32\Restore
2007-03-18 18:47:29 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-03-18 18:47:29 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2007-03-18 18:47:28 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-03-18 18:47:28 69632 --a------ C:\WINDOWS\system32\msconf.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-03-18 18:47:28 34560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-03-18 18:47:28 81920 --a------ C:\WINDOWS\system32\ils.dll
2007-03-18 18:47:25 105984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-03-18 18:47:25 252928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-03-18 18:47:24 49664 --a------ C:\WINDOWS\system32\inetres.dll
2007-03-18 18:47:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-03-18 18:47:22 192000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-03-18 18:47:22 12288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\mstask.dll
2007-03-18 18:47:22 86016 --a------ C:\WINDOWS\system32\isign32.dll
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-03-18 18:47:22 65536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-03-18 18:47:22 73728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-03-18 18:47:13 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2007-03-18 18:46:58 0 d-------- C:\WINDOWS\Registration<REGIST~1>
2007-03-18 18:46:18 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-03-18 18:46:15 5632 --a------ C:\WINDOWS\system32\write.exe
2007-03-18 18:46:15 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2007-03-18 18:46:06 139264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-03-18 18:46:06 44544 --a------ C:\WINDOWS\system32\hticons.dll
2007-03-18 18:46:05 35328 --a------ C:\WINDOWS\system32\winchat.exe
2007-03-18 18:46:05 73216 --a------ C:\WINDOWS\system32\avwav.dll
2007-03-18 18:46:05 231424 --a------ C:\WINDOWS\system32\avtapi.dll
2007-03-18 18:46:05 16384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-03-18 18:45:58 119808 --a------ C:\WINDOWS\system32\winmine.exe
2007-03-18 18:45:58 57344 --a------ C:\WINDOWS\system32\sol.exe
2007-03-18 18:45:58 605696 --a------ C:\WINDOWS\system32\getuname.dll
2007-03-18 18:45:58 80896 --a------ C:\WINDOWS\system32\charmap.exe
2007-03-18 18:45:58 115200 --a------ C:\WINDOWS\system32\calc.exe
2007-03-18 18:45:57 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-03-18 18:45:57 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-03-18 18:45:57 16384 --a------ C:\WINDOWS\system32\tskill.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tscon.exe
2007-03-18 18:45:57 9728 --a------ C:\WINDOWS\system32\reset.exe
2007-03-18 18:45:57 128000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-03-18 18:45:57 55808 --a------ C:\WINDOWS\system32\freecell.exe
2007-03-18 18:45:56 15360 --a------ C:\WINDOWS\system32\shadow.exe
2007-03-18 18:45:56 16384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-03-18 18:45:56 33792 --a------ C:\WINDOWS\system32\regini.exe
2007-03-18 18:45:56 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-03-18 18:45:56 17408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\msg.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\logoff.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-03-18 18:45:55 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-03-18 18:45:55 4096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-03-18 18:45:55 20480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-03-18 18:45:55 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-03-18 18:45:55 97792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-03-18 18:45:55 25600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-03-18 18:45:54 54272 --a------ C:\WINDOWS\system32\stclient.dll
2007-03-18 18:45:54 147456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-03-18 18:45:49 132608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-03-18 18:45:49 124928 --a------ C:\WINDOWS\system32\mplay32.exe
2007-03-18 18:45:49 351744 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-03-18 18:45:49 187904 --a------ C:\WINDOWS\system32\accwiz.exe
2007-03-18 18:45:48 539136 --a------ C:\WINDOWS\system32\spider.exe
2007-03-18 18:45:48 345088 --a------ C:\WINDOWS\system32\mspaint.exe
2007-03-18 18:45:48 103424 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-03-18 18:45:48 0 d-------- C:\Program Files\Windows NT<WINDOW~1>
2007-03-18 18:45:47 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-03-18 18:45:47 60928 --a------ C:\WINDOWS\system32\remotepg.dll
2007-03-18 18:45:47 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-03-18 18:45:47 655360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-03-18 18:45:47 408576 --a------ C:\WINDOWS\system32\mstsc.exe
2007-03-18 18:45:47 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-03-18 18:45:47 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-03-18 18:45:47 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-03-18 18:45:46 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-03-18 18:45:46 296448 --a------ C:\WINDOWS\system32\termsrv.dll
2007-03-18 18:45:46 141824 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-03-18 18:45:46 67072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-03-18 18:45:46 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-03-18 18:45:46 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-03-18 18:45:46 62464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-03-18 18:45:46 147968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-03-18 18:45:46 20992 --a------ C:\WINDOWS\system32\qprocess.exe
2007-03-18 18:45:46 11264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-03-18 18:45:45 11776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-03-18 18:45:45 91136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-03-18 18:45:45 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-03-18 18:45:45 956416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-03-18 18:45:45 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-03-18 18:45:45 58880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-03-18 18:45:45 0 d-------- C:\WINDOWS\system32\MsDtc
2007-03-18 18:45:45 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-03-18 18:45:44 6144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-03-18 18:45:44 0 d-------- C:\WINDOWS\system32\Com
2007-03-18 18:45:44 60416 --a------ C:\WINDOWS\system32\colbact.dll
2007-03-18 18:45:44 85504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-03-18 18:45:43 540160 --a------ C:\WINDOWS\system32\comuid.dll
2007-03-18 18:45:43 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-03-18 18:45:43 110080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-03-18 18:45:43 625152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-03-18 18:45:43 225792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-03-18 18:45:42 498688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-03-18 18:45:38 56320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-03-18 18:45:38 17920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-03-18 18:45:38 58880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-03-18 18:45:38 187904 --a------ C:\WINDOWS\system32\cmprops.dll
2007-03-18 18:45:32 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-03-18 18:45:32 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys

-- Find3M Report ---------------------------------------------------------------

2007-03-29 20:08:06 0 d---s---- C:\Documents and Settings\Konrad\Dane aplikacji\Microsoft<MICROS~1>
2007-03-29 20:04:51 355486 --a------ C:\WINDOWS\system32\perfh015.dat
2007-03-29 20:04:51 49492 --a------ C:\WINDOWS\system32\perfc015.dat
2007-03-29 17:00:48 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\teamspeak2<TEAMSP~1>
2007-03-29 15:36:15 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\uTorrent
2007-03-29 09:02:26 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Apple Computer<APPLEC~1>
2007-03-28 21:16:46 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Media Player Classic<MEDIAP~1>
2007-03-28 21:02:37 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Real
2007-03-27 23:03:07 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Skype
2007-03-22 15:31:15 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\AdobeUM
2007-03-22 15:30:47 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Adobe
2007-03-20 15:29:27 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Mozilla
2007-03-20 15:29:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Thunderbird<THUNDE~1>
2007-03-19 22:24:33 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Talkback
2007-03-18 23:29:11 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Macromedia<MACROM~1>
2007-03-18 19:38:16 62 --ahs---- C:\Documents and Settings\Konrad\Dane aplikacji\desktop.ini
2007-03-18 19:04:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Identities<IDENTI~1>
2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe

-- Registry Dump ---------------------------------------------------------------

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"WooCnxMon"="C:\\PROGRA~1\\NEOSTR~1\\CnxMon.exe"
"SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon"
"WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe"
"WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe"
"SoundMan"="SOUNDMAN.EXE"
"kis"="\"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe\""
@=""
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"="C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0

-- End of ComboScan: finished at 2007-03-29 at 20:13:15 ------------------------

[quote]ComboScan v20070306.20 run by Konrad on 2007-03-29 at 20:11:52
Supplementary logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: Polish

CPU 0: AMD Sempron(tm) 2400+
Percentage of Memory in Use: 34%
Physical Memory (total/avail): 1023.48 MiB / 670.38 MiB
Pagefile Memory (total/avail): 2462.36 MiB / 2242.23 MiB
Virtual Memory (total/avail): 2047.88 MiB / 2003.53 MiB

A: is Removable (No Media)
C: is Fixed (NTFS) - 19.53 GiB total, 10.09 GiB free.
D: is Fixed (NTFS) - 19.53 GiB total, 11.22 GiB free.
E: is Fixed (NTFS) - 19.53 GiB total, 15.54 GiB free.
F: is Fixed (NTFS) - 7.83 GiB total, 6.18 GiB free.
G: is Fixed (NTFS) - 8.09 GiB total, 7.99 GiB free.
H: is CDROM (No Media)

-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Konrad\Dane aplikacji
CLASSPATH=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=DOM
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Konrad
LOGONSERVER=\\DOM
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\Program Files\Mozilla Firefox;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 8 Stepping 1, AuthenticAMD
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0801
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\QuickTime\QTSystem\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\Konrad\USTAWI~1\Temp
TMP=C:\DOCUME~1\Konrad\USTAWI~1\Temp
USERDOMAIN=DOM
USERNAME=Konrad
USERPROFILE=C:\Documents and Settings\Konrad
windir=C:\WINDOWS

-- User Profiles ---------------------------------------------------------------

Konrad (admin)
Administrator (new local, admin)

-- Add/Remove Programs ---------------------------------------------------------

--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
"SubEdit-Player + CodecPack" --> C:\Program Files\SubEdit-Player\Odinstaluj.exe
AC3Filter (remove only) --> C:\Program Files\AC3Filter\uninstall.exe
Adobe Reader 7.0 - Polish --> MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A70000000000}
Aktualizacja dla systemu Windows XP (KB894391) --> "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB898461) --> "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB900485) --> "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB908531) --> "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB910437) --> "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB911280) --> "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB916595) --> "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB920872) --> "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB922582) --> "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB929338) --> "C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB931836) --> "C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB893756) --> "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB896358) --> "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB896423) --> "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB896424) --> "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB896428) --> "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB899587) --> "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB899591) --> "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB900725) --> "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB901017) --> "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB901214) --> "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB902400) --> "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB904706) --> "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB905414) --> "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB905749) --> "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB908519) --> "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB911562) --> "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB911927) --> "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB912919) --> "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB913580) --> "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB914388) --> "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB914389) --> "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB917344) --> "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB917422) --> "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB917953) --> "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB918118) --> "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB918439) --> "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB919007) --> "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB920213) --> "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB920670) --> "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB920683) --> "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB920685) --> "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB922819) --> "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB923191) --> "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB923414) --> "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB923694) --> "C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB923789) --> C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Aktualizacja zabezpieczeń dla systemu Windows XP (KB923980) --> "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB924191) --> "C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB924270) --> "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB924496) --> "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB924667) --> "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB926255) --> "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB926436) --> "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB927779) --> "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB927802) --> "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB928090) --> "C:\WINDOWS\$NtUninstallKB928090$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB928255) --> "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB928843) --> "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB929969) --> "C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla Windows XP (KB923689) --> "C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
ALLPlayer V2.3.1 --> "C:\Program Files\MarBit\ALLPlayer\unins000.exe"
America's Army --> MsiExec.exe /I{6778954C-13C2-4333-AF77-F5C885EB280F}
Apple Software Update --> MsiExec.exe /I{A260B422-70E1-41E2-957D-F76FA21266D5}
Archiwizator WinRAR --> C:\Program Files\WinRAR\uninstall.exe
AVI Codec Pack --> C:\Program Files\AVI Codec Pack\uninstall.exe
Briz Video Joiner --> "C:\Program Files\BrizVideoJoin\unins000.exe"
Gadu-Gadu 7.6 --> C:\Program Files\Gadu-Gadu\Setup.exe
Heroes of Might and Magic III - Złota Edycja --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8B743AA0-53B2-11D2-808A-00600895FB43}\setup.exe" -l0x15
HijackThis 1.99.1 --> C:\DOCUME~1\Konrad\USTAWI~1\Temp\Rar$EX01.312\HijackThis.exe /uninstall
Hitman - Krwawa Forsa --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A804B134-F03D-4EFD-9BC0-DCD257AA1B22}\setup.exe" -l0x15 -removeonly
Kaspersky Internet Security 6.0 --> MsiExec.exe /I{D0DCD54F-C829-41A5-AF32-71E632BB0E2C}
Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{91110415-6000-11D3-8CFE-0150048383C9}
Mozilla Firefox (2.0.0.2) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Firefox (2.0.0.3) --> C:\PROGRA~1\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (1.5) --> C:\Program Files\Mozilla Thunderbird\uninstall\uninstall.exe /ua "1.5 (pl)"
Neostrada TP --> C:\PROGRA~1\NEOSTR~1\SondageDesinstallation.exe
Nero OEM --> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Poprawka systemu Windows XP - KB873339 --> C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Poprawka systemu Win

**Posty:** 18165 · przez **wojtas** 29 Mar 2007, 21:26

Pobierz i uruchom narzędzie : The Avenger
http://swandog46.geekstogo.com/avenger.zip
Zaznacz opcję Input script manually i kliknij na Lupkę z prawej strony. W okienku, które się otworzy wklejasz:

Files to delete:

C:\WINDOWS\zts2.exe
C:\WINDOWS\system32\vcmgcd32.dll
C:\WINDOWS\system32\iifgfgf.dll
C:\WINDOWS\rundll16.exe
C:\WINDOWS\rundl132.dll
C:\WINDOWS\logo1_.exe
C:\WINDOWS\REGEDIT.COM

Klikasz Done, a następnie zielone światełko i zgadzasz się na restart klikając OK.

Kasujesz ręcznie z dysku plik: C:\Avenger\backup.zip i wklejasz na forum raport: C:\avenger.txt + log z combo

**Posty:** 35 · przez **Wilk.** 29 Mar 2007, 21:48

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\negqmfdc

*******************

Script file located at: \??\C:\WINDOWS\system32\avcnoowj.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Error: C:\WINDOWS\zts2.exe is a folder, not a file!
Deletion of file C:\WINDOWS\zts2.exe failed!

Could not process line:
C:\WINDOWS\zts2.exe
Status: 0xc00000ba

Error: C:\WINDOWS\system32\vcmgcd32.dll is a folder, not a file!
Deletion of file C:\WINDOWS\system32\vcmgcd32.dll failed!

Could not process line:
C:\WINDOWS\system32\vcmgcd32.dll
Status: 0xc00000ba

Error: C:\WINDOWS\system32\iifgfgf.dll is a folder, not a file!
Deletion of file C:\WINDOWS\system32\iifgfgf.dll failed!

Could not process line:
C:\WINDOWS\system32\iifgfgf.dll
Status: 0xc00000ba

Error: C:\WINDOWS\rundll16.exe is a folder, not a file!
Deletion of file C:\WINDOWS\rundll16.exe failed!

Could not process line:
C:\WINDOWS\rundll16.exe
Status: 0xc00000ba

Error: C:\WINDOWS\rundl132.dll is a folder, not a file!
Deletion of file C:\WINDOWS\rundl132.dll failed!

Could not process line:
C:\WINDOWS\rundl132.dll
Status: 0xc00000ba

Error: C:\WINDOWS\logo1_.exe is a folder, not a file!
Deletion of file C:\WINDOWS\logo1_.exe failed!

Could not process line:
C:\WINDOWS\logo1_.exe
Status: 0xc00000ba

File C:\WINDOWS\REGEDIT.COM deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

ComboScan v20070306.20 run by Konrad on 2007-03-29 at 21:38:41
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- HijackThis (run as Konrad.exe) ----------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 21:38:44, on 2007-03-29
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Neostrada TP\NeostradaTP.exe
C:\Program Files\Neostrada TP\ComComp.exe
C:\Program Files\Neostrada TP\Watch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Konrad\Pulpit\comboscan.exe
C:\DOCUME~1\Konrad\Pulpit\Konrad.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Dodaj do Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{6F14A062-74DC-45F9-82BB-D906B7B577E0}: NameServer = 194.204.159.1 217.98.63.164
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

-- Files created between 2007-02-28 and 2007-03-29 -----------------------------

2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\zts2.exe
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\rundll16.exe
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\rundl132.dll
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\logo1_.exe
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\TASKMGR.COM
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\T.COM
2007-03-29 19:36:37 149504 --a------ C:\WINDOWS\R.COM
2007-03-29 09:00:12 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-03-29 08:59:55 0 d-------- C:\Program Files\Apple Software Update<APPLES~1>
2007-03-28 21:19:14 0 d-------- C:\Program Files\BrizVideoJoin<BRIZVI~1>
2007-03-28 21:17:23 0 d-------- C:\Program Files\AVI Codec Pack<AVICOD~1>
2007-03-28 21:02:56 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Real Alternative<REALAL~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1>
2007-03-28 21:01:51 0 d-------- C:\Program Files\AC3Filter<AC3FIL~1>
2007-03-28 21:01:30 0 d-------- C:\Program Files\DivX
2007-03-28 20:59:14 0 d-------- C:\Program Files\MarBit
2007-03-28 16:14:32 0 d-------- C:\Program Files\Common Files\LightScribe<LIGHTS~1>
2007-03-28 16:12:47 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll
2007-03-28 16:12:47 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2007-03-28 16:12:43 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll
2007-03-28 16:12:43 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll
2007-03-28 16:12:43 476320 -----n--- C:\WINDOWS\system32\ImagXpr7.dll
2007-03-28 16:12:43 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll
2007-03-28 16:12:42 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE>
2007-03-28 16:12:38 0 d-------- C:\Program Files\Common Files\Ahead
2007-03-28 16:12:36 0 d-------- C:\Program Files\Ahead
2007-03-27 20:37:04 63040 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2007-03-27 19:09:36 0 d-------- C:\Program Files\America's Army Server Manager<AMERIC~1>
2007-03-27 10:37:45 0 d-------- C:\Program Files\Kaspersky Lab<KASPER~1>
2007-03-27 10:37:43 44576 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-03-27 10:37:43 2528544 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-03-26 19:27:02 22584 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-03-26 16:57:55 99904 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2007-03-26 16:57:46 0 d-------- C:\WINDOWS\system32\LogFiles
2007-03-26 16:47:45 0 d-------- C:\Program Files\America's Army<AMERIC~2>
2007-03-26 16:44:45 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL>
2007-03-26 16:44:45 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL>
2007-03-22 15:40:20 17920 --a------ C:\WINDOWS\system32\mdimon.dll
2007-03-22 15:39:10 0 d-------- C:\WINDOWS\SHELLNEW
2007-03-22 15:30:28 0 d-------- C:\Program Files\Common Files\Adobe
2007-03-22 01:09:06 0 d-------- C:\Program Files\Common Files\Skype
2007-03-22 01:08:52 0 d-------- C:\Program Files\Skype
2007-03-21 09:31:49 5632 --a------ C:\WINDOWS\system32\ptpusb.dll
2007-03-21 09:31:47 159232 --a------ C:\WINDOWS\system32\ptpusd.dll
2007-03-21 09:31:46 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-03-20 21:36:26 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL>
2007-03-20 20:41:50 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-03-20 15:38:13 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe
2007-03-20 15:38:13 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-03-20 15:38:13 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-03-20 15:38:13 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-03-20 15:38:12 129784 -----n--- C:\WINDOWS\system32\pxafs.dll
2007-03-20 15:37:44 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2>
2007-03-20 15:36:11 0 d-------- C:\Program Files\Winamp
2007-03-20 15:29:05 3490 --a------ C:\WINDOWS\mozver.dat
2007-03-20 15:28:56 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~2>
2007-03-19 22:24:28 0 --a------ C:\WINDOWS\nsreg.dat
2007-03-19 22:24:20 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-03-19 00:20:15 49152 --a------ C:\WINDOWS\system32\ChCfg.exe
2007-03-19 00:20:14 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-03-19 00:20:12 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-03-19 00:20:10 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-03-19 00:20:04 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-03-19 00:20:02 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-03-19 00:20:00 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-03-19 00:19:59 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-03-19 00:19:57 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-03-19 00:19:56 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-03-19 00:19:54 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-03-19 00:19:51 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-03-19 00:19:47 4027456 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys
2007-03-19 00:19:45 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-03-19 00:19:45 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-03-19 00:19:45 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-03-19 00:19:39 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe
2007-03-19 00:19:39 0 d-------- C:\Program Files\Realtek AC97<REALTE~2>
2007-03-19 00:19:37 577536 --a------ C:\WINDOWS\soundman.exe
2007-03-19 00:19:36 147456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll
2007-03-19 00:19:36 315392 --a------ C:\WINDOWS\alcupd.exe
2007-03-19 00:19:36 217088 --a------ C:\WINDOWS\Alcrmv.exe
2007-03-18 22:58:20 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-03-18 22:58:20 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1>
2007-03-18 22:58:18 0 d--h----- C:\WINDOWS\$hf_mig$
2007-03-18 22:46:47 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\Realtek Sound Manager<REALTE~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\AvRack
2007-03-18 20:28:56 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1>
2007-03-18 20:26:43 32768 --a------ C:\WINDOWS\system32\UnAudioNT.dll<UNAUDI~1.DLL>
2007-03-18 20:26:43 0 d-------- C:\Program Files\VIA Technologies, Inc<VIATEC~1>
2007-03-18 20:26:39 306688 --a------ C:\WINDOWS\IsUninst.exe
2007-03-18 19:41:56 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-03-18 19:40:48 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-03-18 19:40:26 701440 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-03-18 19:40:26 516768 --a------ C:\WINDOWS\system32\ativvaxx.dll
2007-03-18 19:40:26 1888992 --a------ C:\WINDOWS\system32\ati3duag.dll
2007-03-18 19:40:26 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll
2007-03-18 19:40:25 201728 --a------ C:\WINDOWS\system32\ati2dvag.dll
2007-03-18 19:40:25 229376 --a------ C:\WINDOWS\system32\ati2cqag.dll
2007-03-18 19:40:06 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS
2007-03-18 19:40:02 32768 --a------ C:\WINDOWS\system32\drivers\sisnic.sys
2007-03-18 19:39:56 77312 --a------ C:\WINDOWS\system32\usbui.dll
2007-03-18 19:38:45 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1>
2007-03-18 19:38:44 0 d-------- C:\Program Files\Common Files\ODBC
2007-03-18 19:38:41 0 dr------- C:\Program Files<PROGRA~1>
2007-03-18 19:38:41 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-03-18 19:38:37 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-03-18 19:38:34 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-03-18 19:38:34 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdycl.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdro.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdhu.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll
2007-03-18 19:38:29 7168 --a------ C:\WINDOWS\system32\kbdcz.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcr.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL
2007-03-18 19:38:28 13312 --a------ C:\WINDOWS\system32\irclass.dll
2007-03-18 19:38:28 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-03-18 19:38:27 24661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-03-18 19:38:27 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-03-18 19:38:27 85532 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-03-18 19:38:27 9168 --a------ C:\WINDOWS\system\VER.DLL
2007-03-18 19:38:27 19200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-03-18 19:38:27 5120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-03-18 19:38:26 24064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-03-18 19:38:26 83456 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-03-18 19:38:26 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-03-18 19:38:26 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-03-18 19:38:26 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-03-18 19:38:26 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-03-18 19:38:26 70096 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-03-18 19:38:25 15360 --a------ C:\WINDOWS\TASKMAN.EXE
2007-03-18 19:38:25 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-03-18 19:38:25 8704 --a------ C:\WINDOWS\system32\batt.dll
2007-03-18 19:38:25 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2007-03-18 19:38:24 70144 --a------ C:\WINDOWS\NOTEPAD.EXE
2007-03-18 19:38:23 75776 --a------ C:\WINDOWS\system32\storprop.dll
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot2
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot
2007-03-18 19:37:37 0 d-------- C:\Documents and Settings<DOCUME~1>
2007-03-18 19:37:36 0 d--hs---- C:\System Volume Information<SYSTEM~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\WinSxS
2007-03-18 19:29:37 0 dr------- C:\WINDOWS\Web
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\twain_32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wins
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wbem
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\usmt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\spool
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ShellExt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\Setup
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ras
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\oobe
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\npp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\inetsrv
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\IME
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\icsxml
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ias
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\export
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\etc
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\disdn
2007-03-18 19:29:37 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\dhcp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3com_dmi
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3076
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\2052
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1054
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1045
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1042
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1041
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1037
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1033
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1031
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1028
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1025
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\security
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Resources<RESOUR~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\repair
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\PeerNet
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\pchealth
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msapps
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msagent
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Media
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\java
2007-03-18 19:29:37 0 d--h----- C:\WINDOWS\inf
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\ime
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Help
2007-03-18 19:29:37 0 dr--s---- C:\WINDOWS\Fonts
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Debug
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Cursors
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\AppPatch
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\addins
2007-03-18 19:08:28 32768 --a------ C:\WINDOWS\system32\WooDial2000.dll<WOODIA~1.DLL>
2007-03-18 19:06:22 5606 --a------ C:\WINDOWS\system32\stci.dll
2007-03-18 19:06:22 5280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys
2007-03-18 19:06:22 70688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys
2007-03-18 19:06:22 3968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys
2007-03-18 19:06:21 53600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys
2007-03-18 19:06:20 0 d-------- C:\Program Files\Thomson
2007-03-18 19:06:19 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-03-18 19:06:17 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2007-03-18 19:05:15 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1>
2007-03-18 18:53:40 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-03-18 18:53:39 0 d-------- C:\WINDOWS\Prefetch
2007-03-18 18:50:11 0 d-------- C:\WINDOWS\system32\xircom
2007-03-18 18:50:11 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1>
2007-03-18 18:50:02 0 -rahs---- C:\MSDOS.SYS
2007-03-18 18:50:02 0 -rahs---- C:\IO.SYS
2007-03-18 18:50:02 0 --a------ C:\CONFIG.SYS
2007-03-18 18:50:02 0 -----n--- C:\AUTOEXEC.BAT
2007-03-18 18:49:44 112128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-03-18 18:48:53 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1>
2007-03-18 18:48:53 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1>
2007-03-18 18:48:41 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3>
2007-03-18 18:48:38 0 d-------- C:\Program Files\Usługi online<USUGIO~1>
2007-03-18 18:48:21 0 d-------- C:\WINDOWS\system32\DirectX
2007-03-18 18:48:01 11264 --a------ C:\WINDOWS\system32\atrace.dll
2007-03-18 18:47:53 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-03-18 18:47:52 67584 --a------ C:\WINDOWS\system32\acctres.dll
2007-03-18 18:47:49 0 d---s---- C:\WINDOWS\Tasks
2007-03-18 18:47:49 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-03-18 18:47:48 0 d-------- C:\Program Files\Common Files\MSSoap
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\system32\Macromed
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\srchasst
2007-03-18 18:47:41 173536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-03-18 18:47:41 128280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-03-18 18:47:41 6656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-03-18 18:47:41 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-03-18 18:47:41 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-03-18 18:47:40 41240 --a------ C:\WINDOWS\system32\wups.dll
2007-03-18 18:47:40 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-03-18 18:47:40 125208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-03-18 18:47:40 466200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-03-18 18:47:40 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-03-18 18:47:40 382464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-03-18 18:47:40 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2007-03-18 18:47:40 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2007-03-18 18:47:36 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2007-03-18 18:47:33 45568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-03-18 18:47:33 29696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-03-18 18:47:33 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-03-18 18:47:32 43520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-03-18 18:47:30 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-03-18 18:47:30 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-03-18 18:47:29 171008 --a------ C:\WINDOWS\system32\srsvc.dll
2007-03-18 18:47:29 240128 --a------ C:\WINDOWS\system32\srrstr.dll
2007-03-18 18:47:29 67584 --a------ C:\WINDOWS\system32\srclient.dll
2007-03-18 18:47:29 0 d-------- C:\WINDOWS\system32\Restore
2007-03-18 18:47:29 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-03-18 18:47:29 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2007-03-18 18:47:28 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-03-18 18:47:28 69632 --a------ C:\WINDOWS\system32\msconf.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-03-18 18:47:28 34560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-03-18 18:47:28 81920 --a------ C:\WINDOWS\system32\ils.dll
2007-03-18 18:47:25 105984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-03-18 18:47:25 252928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-03-18 18:47:24 49664 --a------ C:\WINDOWS\system32\inetres.dll
2007-03-18 18:47:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-03-18 18:47:22 192000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-03-18 18:47:22 12288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\mstask.dll
2007-03-18 18:47:22 86016 --a------ C:\WINDOWS\system32\isign32.dll
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-03-18 18:47:22 65536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-03-18 18:47:22 73728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-03-18 18:47:13 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2007-03-18 18:46:58 0 d-------- C:\WINDOWS\Registration<REGIST~1>
2007-03-18 18:46:18 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-03-18 18:46:15 5632 --a------ C:\WINDOWS\system32\write.exe
2007-03-18 18:46:15 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2007-03-18 18:46:06 139264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-03-18 18:46:06 44544 --a------ C:\WINDOWS\system32\hticons.dll
2007-03-18 18:46:05 35328 --a------ C:\WINDOWS\system32\winchat.exe
2007-03-18 18:46:05 73216 --a------ C:\WINDOWS\system32\avwav.dll
2007-03-18 18:46:05 231424 --a------ C:\WINDOWS\system32\avtapi.dll
2007-03-18 18:46:05 16384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-03-18 18:45:58 119808 --a------ C:\WINDOWS\system32\winmine.exe
2007-03-18 18:45:58 57344 --a------ C:\WINDOWS\system32\sol.exe
2007-03-18 18:45:58 605696 --a------ C:\WINDOWS\system32\getuname.dll
2007-03-18 18:45:58 80896 --a------ C:\WINDOWS\system32\charmap.exe
2007-03-18 18:45:58 115200 --a------ C:\WINDOWS\system32\calc.exe
2007-03-18 18:45:57 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-03-18 18:45:57 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-03-18 18:45:57 16384 --a------ C:\WINDOWS\system32\tskill.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tscon.exe
2007-03-18 18:45:57 9728 --a------ C:\WINDOWS\system32\reset.exe
2007-03-18 18:45:57 128000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-03-18 18:45:57 55808 --a------ C:\WINDOWS\system32\freecell.exe
2007-03-18 18:45:56 15360 --a------ C:\WINDOWS\system32\shadow.exe
2007-03-18 18:45:56 16384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-03-18 18:45:56 33792 --a------ C:\WINDOWS\system32\regini.exe
2007-03-18 18:45:56 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-03-18 18:45:56 17408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\msg.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\logoff.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-03-18 18:45:55 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-03-18 18:45:55 4096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-03-18 18:45:55 20480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-03-18 18:45:55 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-03-18 18:45:55 97792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-03-18 18:45:55 25600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-03-18 18:45:54 54272 --a------ C:\WINDOWS\system32\stclient.dll
2007-03-18 18:45:54 147456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-03-18 18:45:49 132608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-03-18 18:45:49 124928 --a------ C:\WINDOWS\system32\mplay32.exe
2007-03-18 18:45:49 351744 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-03-18 18:45:49 187904 --a------ C:\WINDOWS\system32\accwiz.exe
2007-03-18 18:45:48 539136 --a------ C:\WINDOWS\system32\spider.exe
2007-03-18 18:45:48 345088 --a------ C:\WINDOWS\system32\mspaint.exe
2007-03-18 18:45:48 103424 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-03-18 18:45:48 0 d-------- C:\Program Files\Windows NT<WINDOW~1>
2007-03-18 18:45:47 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-03-18 18:45:47 60928 --a------ C:\WINDOWS\system32\remotepg.dll
2007-03-18 18:45:47 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-03-18 18:45:47 655360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-03-18 18:45:47 408576 --a------ C:\WINDOWS\system32\mstsc.exe
2007-03-18 18:45:47 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-03-18 18:45:47 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-03-18 18:45:47 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-03-18 18:45:46 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-03-18 18:45:46 296448 --a------ C:\WINDOWS\system32\termsrv.dll
2007-03-18 18:45:46 141824 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-03-18 18:45:46 67072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-03-18 18:45:46 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-03-18 18:45:46 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-03-18 18:45:46 62464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-03-18 18:45:46 147968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-03-18 18:45:46 20992 --a------ C:\WINDOWS\system32\qprocess.exe
2007-03-18 18:45:46 11264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-03-18 18:45:45 11776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-03-18 18:45:45 91136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-03-18 18:45:45 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-03-18 18:45:45 956416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-03-18 18:45:45 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-03-18 18:45:45 58880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-03-18 18:45:45 0 d-------- C:\WINDOWS\system32\MsDtc
2007-03-18 18:45:45 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-03-18 18:45:44 6144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-03-18 18:45:44 0 d-------- C:\WINDOWS\system32\Com
2007-03-18 18:45:44 60416 --a------ C:\WINDOWS\system32\colbact.dll
2007-03-18 18:45:44 85504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-03-18 18:45:43 540160 --a------ C:\WINDOWS\system32\comuid.dll
2007-03-18 18:45:43 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-03-18 18:45:43 110080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-03-18 18:45:43 625152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-03-18 18:45:43 225792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-03-18 18:45:42 498688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-03-18 18:45:38 56320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-03-18 18:45:38 17920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-03-18 18:45:38 58880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-03-18 18:45:38 187904 --a------ C:\WINDOWS\system32\cmprops.dll
2007-03-18 18:45:32 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-03-18 18:45:32 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys

-- Find3M Report ---------------------------------------------------------------

2007-03-29 21:37:26 355486 --a------ C:\WINDOWS\system32\perfh015.dat
2007-03-29 21:37:26 49492 --a------ C:\WINDOWS\system32\perfc015.dat
2007-03-29 20:54:52 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\uTorrent
2007-03-29 20:08:06 0 d---s---- C:\Documents and Settings\Konrad\Dane aplikacji\Microsoft<MICROS~1>
2007-03-29 17:00:48 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\teamspeak2<TEAMSP~1>
2007-03-29 09:02:26 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Apple Computer<APPLEC~1>
2007-03-28 21:16:46 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Media Player Classic<MEDIAP~1>
2007-03-28 21:02:37 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Real
2007-03-27 23:03:07 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Skype
2007-03-22 15:31:15 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\AdobeUM
2007-03-22 15:30:47 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Adobe
2007-03-20 15:29:27 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Mozilla
2007-03-20 15:29:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Thunderbird<THUNDE~1>
2007-03-19 22:24:33 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Talkback
2007-03-18 23:29:11 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Macromedia<MACROM~1>
2007-03-18 19:38:16 62 --ahs---- C:\Documents and Settings\Konrad\Dane aplikacji\desktop.ini
2007-03-18 19:04:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Identities<IDENTI~1>
2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe

-- Registry Dump ---------------------------------------------------------------

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"WooCnxMon"="C:\\PROGRA~1\\NEOSTR~1\\CnxMon.exe"
"SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon"
"WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe"
"WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe"
"SoundMan"="SOUNDMAN.EXE"
"kis"="\"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe\""
@=""
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"="C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0

-- End of ComboScan: finished at 2007-03-29 at 21:39:18 ------------------------

**Posty:** 18165 · przez **wojtas** 29 Mar 2007, 21:50

odpal SmitfraudFix z opcji 2

http://siri.urz.free.fr/Fix/SmitfraudFix.php
opis >>

http://forum.programosy.pl/trudne-przypadki-i-metody-usuwania-vt41947.html

i przejedź nim dysk.
potem nowy combo

**Posty:** 35 · przez **Wilk.** 29 Mar 2007, 22:05

SmitFraudFix v2.159

Scan done at 21:52:12,03, 2007-03-29
Run from C:\Documents and Settings\Konrad\Pulpit\SmitfraudFix
OS: Microsoft Windows XP [Wersja 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process

»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» End

ComboScan v20070306.20 run by Konrad on 2007-03-29 at 21:54:31
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- HijackThis (run as Konrad.exe) ----------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 21:54:34, on 2007-03-29
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Neostrada TP\NeostradaTP.exe
C:\Program Files\Neostrada TP\ComComp.exe
C:\Program Files\Neostrada TP\Watch.exe
C:\Documents and Settings\Konrad\Pulpit\comboscan.exe
C:\DOCUME~1\Konrad\Pulpit\Konrad.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Dodaj do Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

-- Files created between 2007-02-28 and 2007-03-29 -----------------------------

2007-03-29 21:48:38 2118 --a------ C:\WINDOWS\system32\tmp.reg
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\zts2.exe
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\rundll16.exe
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\rundl132.dll
2007-03-29 19:38:05 0 d-a------ C:\WINDOWS\logo1_.exe
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\TASKMGR.COM
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\T.COM
2007-03-29 19:36:37 149504 --a------ C:\WINDOWS\R.COM
2007-03-29 09:00:12 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-03-29 08:59:55 0 d-------- C:\Program Files\Apple Software Update<APPLES~1>
2007-03-28 21:19:14 0 d-------- C:\Program Files\BrizVideoJoin<BRIZVI~1>
2007-03-28 21:17:23 0 d-------- C:\Program Files\AVI Codec Pack<AVICOD~1>
2007-03-28 21:02:56 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Real Alternative<REALAL~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1>
2007-03-28 21:01:51 0 d-------- C:\Program Files\AC3Filter<AC3FIL~1>
2007-03-28 21:01:30 0 d-------- C:\Program Files\DivX
2007-03-28 20:59:14 0 d-------- C:\Program Files\MarBit
2007-03-28 16:14:32 0 d-------- C:\Program Files\Common Files\LightScribe<LIGHTS~1>
2007-03-28 16:12:47 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll
2007-03-28 16:12:47 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2007-03-28 16:12:43 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll
2007-03-28 16:12:43 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll
2007-03-28 16:12:43 476320 -----n--- C:\WINDOWS\system32\ImagXpr7.dll
2007-03-28 16:12:43 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll
2007-03-28 16:12:42 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE>
2007-03-28 16:12:38 0 d-------- C:\Program Files\Common Files\Ahead
2007-03-28 16:12:36 0 d-------- C:\Program Files\Ahead
2007-03-27 20:37:04 63040 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2007-03-27 19:09:36 0 d-------- C:\Program Files\America's Army Server Manager<AMERIC~1>
2007-03-27 10:37:45 0 d-------- C:\Program Files\Kaspersky Lab<KASPER~1>
2007-03-27 10:37:43 45344 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-03-27 10:37:43 2541088 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-03-26 19:27:02 22584 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-03-26 16:57:55 99904 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2007-03-26 16:57:46 0 d-------- C:\WINDOWS\system32\LogFiles
2007-03-26 16:47:45 0 d-------- C:\Program Files\America's Army<AMERIC~2>
2007-03-26 16:44:45 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL>
2007-03-26 16:44:45 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL>
2007-03-22 15:40:20 17920 --a------ C:\WINDOWS\system32\mdimon.dll
2007-03-22 15:39:10 0 d-------- C:\WINDOWS\SHELLNEW
2007-03-22 15:30:28 0 d-------- C:\Program Files\Common Files\Adobe
2007-03-22 01:09:06 0 d-------- C:\Program Files\Common Files\Skype
2007-03-22 01:08:52 0 d-------- C:\Program Files\Skype
2007-03-21 09:31:49 5632 --a------ C:\WINDOWS\system32\ptpusb.dll
2007-03-21 09:31:47 159232 --a------ C:\WINDOWS\system32\ptpusd.dll
2007-03-21 09:31:46 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-03-20 21:36:26 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL>
2007-03-20 20:41:50 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-03-20 15:38:13 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe
2007-03-20 15:38:13 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-03-20 15:38:13 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-03-20 15:38:13 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-03-20 15:38:12 129784 -----n--- C:\WINDOWS\system32\pxafs.dll
2007-03-20 15:37:44 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2>
2007-03-20 15:36:11 0 d-------- C:\Program Files\Winamp
2007-03-20 15:29:05 3490 --a------ C:\WINDOWS\mozver.dat
2007-03-20 15:28:56 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~2>
2007-03-19 22:24:28 0 --a------ C:\WINDOWS\nsreg.dat
2007-03-19 22:24:20 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-03-19 00:20:15 49152 --a------ C:\WINDOWS\system32\ChCfg.exe
2007-03-19 00:20:14 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-03-19 00:20:12 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-03-19 00:20:10 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-03-19 00:20:04 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-03-19 00:20:02 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-03-19 00:20:00 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-03-19 00:19:59 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-03-19 00:19:57 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-03-19 00:19:56 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-03-19 00:19:54 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-03-19 00:19:51 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-03-19 00:19:47 4027456 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys
2007-03-19 00:19:45 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-03-19 00:19:45 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-03-19 00:19:45 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-03-19 00:19:39 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe
2007-03-19 00:19:39 0 d-------- C:\Program Files\Realtek AC97<REALTE~2>
2007-03-19 00:19:37 577536 --a------ C:\WINDOWS\soundman.exe
2007-03-19 00:19:36 147456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll
2007-03-19 00:19:36 315392 --a------ C:\WINDOWS\alcupd.exe
2007-03-19 00:19:36 217088 --a------ C:\WINDOWS\Alcrmv.exe
2007-03-18 22:58:20 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-03-18 22:58:20 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1>
2007-03-18 22:58:18 0 d--h----- C:\WINDOWS\$hf_mig$
2007-03-18 22:46:47 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\Realtek Sound Manager<REALTE~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\AvRack
2007-03-18 20:28:56 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1>
2007-03-18 20:26:43 32768 --a------ C:\WINDOWS\system32\UnAudioNT.dll<UNAUDI~1.DLL>
2007-03-18 20:26:43 0 d-------- C:\Program Files\VIA Technologies, Inc<VIATEC~1>
2007-03-18 20:26:39 306688 --a------ C:\WINDOWS\IsUninst.exe
2007-03-18 19:41:56 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-03-18 19:40:48 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-03-18 19:40:26 701440 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-03-18 19:40:26 516768 --a------ C:\WINDOWS\system32\ativvaxx.dll
2007-03-18 19:40:26 1888992 --a------ C:\WINDOWS\system32\ati3duag.dll
2007-03-18 19:40:26 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll
2007-03-18 19:40:25 201728 --a------ C:\WINDOWS\system32\ati2dvag.dll
2007-03-18 19:40:25 229376 --a------ C:\WINDOWS\system32\ati2cqag.dll
2007-03-18 19:40:06 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS
2007-03-18 19:40:02 32768 --a------ C:\WINDOWS\system32\drivers\sisnic.sys
2007-03-18 19:39:56 77312 --a------ C:\WINDOWS\system32\usbui.dll
2007-03-18 19:38:45 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1>
2007-03-18 19:38:44 0 d-------- C:\Program Files\Common Files\ODBC
2007-03-18 19:38:41 0 dr------- C:\Program Files<PROGRA~1>
2007-03-18 19:38:41 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-03-18 19:38:37 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-03-18 19:38:34 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-03-18 19:38:34 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdycl.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdro.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdhu.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll
2007-03-18 19:38:29 7168 --a------ C:\WINDOWS\system32\kbdcz.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcr.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL
2007-03-18 19:38:28 13312 --a------ C:\WINDOWS\system32\irclass.dll
2007-03-18 19:38:28 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-03-18 19:38:27 24661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-03-18 19:38:27 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-03-18 19:38:27 85532 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-03-18 19:38:27 9168 --a------ C:\WINDOWS\system\VER.DLL
2007-03-18 19:38:27 19200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-03-18 19:38:27 5120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-03-18 19:38:26 24064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-03-18 19:38:26 83456 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-03-18 19:38:26 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-03-18 19:38:26 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-03-18 19:38:26 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-03-18 19:38:26 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-03-18 19:38:26 70096 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-03-18 19:38:25 15360 --a------ C:\WINDOWS\TASKMAN.EXE
2007-03-18 19:38:25 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-03-18 19:38:25 8704 --a------ C:\WINDOWS\system32\batt.dll
2007-03-18 19:38:25 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2007-03-18 19:38:24 70144 --a------ C:\WINDOWS\NOTEPAD.EXE
2007-03-18 19:38:23 75776 --a------ C:\WINDOWS\system32\storprop.dll
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot2
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot
2007-03-18 19:37:37 0 d-------- C:\Documents and Settings<DOCUME~1>
2007-03-18 19:37:36 0 d--hs---- C:\System Volume Information<SYSTEM~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\WinSxS
2007-03-18 19:29:37 0 dr------- C:\WINDOWS\Web
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\twain_32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wins
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wbem
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\usmt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\spool
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ShellExt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\Setup
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ras
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\oobe
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\npp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\inetsrv
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\IME
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\icsxml
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ias
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\export
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\etc
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\disdn
2007-03-18 19:29:37 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\dhcp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3com_dmi
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3076
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\2052
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1054
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1045
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1042
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1041
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1037
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1033
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1031
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1028
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1025
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\security
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Resources<RESOUR~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\repair
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\PeerNet
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\pchealth
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msapps
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msagent
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Media
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\java
2007-03-18 19:29:37 0 d--h----- C:\WINDOWS\inf
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\ime
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Help
2007-03-18 19:29:37 0 dr--s---- C:\WINDOWS\Fonts
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Debug
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Cursors
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\AppPatch
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\addins
2007-03-18 19:08:28 32768 --a------ C:\WINDOWS\system32\WooDial2000.dll<WOODIA~1.DLL>
2007-03-18 19:06:22 5606 --a------ C:\WINDOWS\system32\stci.dll
2007-03-18 19:06:22 5280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys
2007-03-18 19:06:22 70688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys
2007-03-18 19:06:22 3968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys
2007-03-18 19:06:21 53600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys
2007-03-18 19:06:20 0 d-------- C:\Program Files\Thomson
2007-03-18 19:06:19 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-03-18 19:06:17 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2007-03-18 19:05:15 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1>
2007-03-18 18:53:40 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-03-18 18:53:39 0 d-------- C:\WINDOWS\Prefetch
2007-03-18 18:50:11 0 d-------- C:\WINDOWS\system32\xircom
2007-03-18 18:50:11 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1>
2007-03-18 18:50:02 0 -rahs---- C:\MSDOS.SYS
2007-03-18 18:50:02 0 -rahs---- C:\IO.SYS
2007-03-18 18:50:02 0 --a------ C:\CONFIG.SYS
2007-03-18 18:50:02 0 -----n--- C:\AUTOEXEC.BAT
2007-03-18 18:49:44 112128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-03-18 18:48:53 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1>
2007-03-18 18:48:53 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1>
2007-03-18 18:48:41 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3>
2007-03-18 18:48:38 0 d-------- C:\Program Files\Usługi online<USUGIO~1>
2007-03-18 18:48:21 0 d-------- C:\WINDOWS\system32\DirectX
2007-03-18 18:48:01 11264 --a------ C:\WINDOWS\system32\atrace.dll
2007-03-18 18:47:53 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-03-18 18:47:52 67584 --a------ C:\WINDOWS\system32\acctres.dll
2007-03-18 18:47:49 0 d---s---- C:\WINDOWS\Tasks
2007-03-18 18:47:49 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-03-18 18:47:48 0 d-------- C:\Program Files\Common Files\MSSoap
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\system32\Macromed
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\srchasst
2007-03-18 18:47:41 173536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-03-18 18:47:41 128280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-03-18 18:47:41 6656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-03-18 18:47:41 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-03-18 18:47:41 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-03-18 18:47:40 41240 --a------ C:\WINDOWS\system32\wups.dll
2007-03-18 18:47:40 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-03-18 18:47:40 125208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-03-18 18:47:40 466200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-03-18 18:47:40 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-03-18 18:47:40 382464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-03-18 18:47:40 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2007-03-18 18:47:40 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2007-03-18 18:47:36 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2007-03-18 18:47:33 45568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-03-18 18:47:33 29696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-03-18 18:47:33 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-03-18 18:47:32 43520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-03-18 18:47:30 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-03-18 18:47:30 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-03-18 18:47:29 171008 --a------ C:\WINDOWS\system32\srsvc.dll
2007-03-18 18:47:29 240128 --a------ C:\WINDOWS\system32\srrstr.dll
2007-03-18 18:47:29 67584 --a------ C:\WINDOWS\system32\srclient.dll
2007-03-18 18:47:29 0 d-------- C:\WINDOWS\system32\Restore
2007-03-18 18:47:29 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-03-18 18:47:29 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2007-03-18 18:47:28 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-03-18 18:47:28 69632 --a------ C:\WINDOWS\system32\msconf.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-03-18 18:47:28 34560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-03-18 18:47:28 81920 --a------ C:\WINDOWS\system32\ils.dll
2007-03-18 18:47:25 105984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-03-18 18:47:25 252928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-03-18 18:47:24 49664 --a------ C:\WINDOWS\system32\inetres.dll
2007-03-18 18:47:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-03-18 18:47:22 192000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-03-18 18:47:22 12288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\mstask.dll
2007-03-18 18:47:22 86016 --a------ C:\WINDOWS\system32\isign32.dll
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-03-18 18:47:22 65536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-03-18 18:47:22 73728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-03-18 18:47:13 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2007-03-18 18:46:58 0 d-------- C:\WINDOWS\Registration<REGIST~1>
2007-03-18 18:46:18 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-03-18 18:46:15 5632 --a------ C:\WINDOWS\system32\write.exe
2007-03-18 18:46:15 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2007-03-18 18:46:06 139264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-03-18 18:46:06 44544 --a------ C:\WINDOWS\system32\hticons.dll
2007-03-18 18:46:05 35328 --a------ C:\WINDOWS\system32\winchat.exe
2007-03-18 18:46:05 73216 --a------ C:\WINDOWS\system32\avwav.dll
2007-03-18 18:46:05 231424 --a------ C:\WINDOWS\system32\avtapi.dll
2007-03-18 18:46:05 16384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-03-18 18:45:58 119808 --a------ C:\WINDOWS\system32\winmine.exe
2007-03-18 18:45:58 57344 --a------ C:\WINDOWS\system32\sol.exe
2007-03-18 18:45:58 605696 --a------ C:\WINDOWS\system32\getuname.dll
2007-03-18 18:45:58 80896 --a------ C:\WINDOWS\system32\charmap.exe
2007-03-18 18:45:58 115200 --a------ C:\WINDOWS\system32\calc.exe
2007-03-18 18:45:57 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-03-18 18:45:57 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-03-18 18:45:57 16384 --a------ C:\WINDOWS\system32\tskill.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tscon.exe
2007-03-18 18:45:57 9728 --a------ C:\WINDOWS\system32\reset.exe
2007-03-18 18:45:57 128000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-03-18 18:45:57 55808 --a------ C:\WINDOWS\system32\freecell.exe
2007-03-18 18:45:56 15360 --a------ C:\WINDOWS\system32\shadow.exe
2007-03-18 18:45:56 16384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-03-18 18:45:56 33792 --a------ C:\WINDOWS\system32\regini.exe
2007-03-18 18:45:56 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-03-18 18:45:56 17408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\msg.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\logoff.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-03-18 18:45:55 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-03-18 18:45:55 4096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-03-18 18:45:55 20480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-03-18 18:45:55 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-03-18 18:45:55 97792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-03-18 18:45:55 25600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-03-18 18:45:54 54272 --a------ C:\WINDOWS\system32\stclient.dll
2007-03-18 18:45:54 147456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-03-18 18:45:49 132608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-03-18 18:45:49 124928 --a------ C:\WINDOWS\system32\mplay32.exe
2007-03-18 18:45:49 351744 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-03-18 18:45:49 187904 --a------ C:\WINDOWS\system32\accwiz.exe
2007-03-18 18:45:48 539136 --a------ C:\WINDOWS\system32\spider.exe
2007-03-18 18:45:48 345088 --a------ C:\WINDOWS\system32\mspaint.exe
2007-03-18 18:45:48 103424 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-03-18 18:45:48 0 d-------- C:\Program Files\Windows NT<WINDOW~1>
2007-03-18 18:45:47 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-03-18 18:45:47 60928 --a------ C:\WINDOWS\system32\remotepg.dll
2007-03-18 18:45:47 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-03-18 18:45:47 655360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-03-18 18:45:47 408576 --a------ C:\WINDOWS\system32\mstsc.exe
2007-03-18 18:45:47 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-03-18 18:45:47 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-03-18 18:45:47 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-03-18 18:45:46 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-03-18 18:45:46 296448 --a------ C:\WINDOWS\system32\termsrv.dll
2007-03-18 18:45:46 141824 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-03-18 18:45:46 67072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-03-18 18:45:46 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-03-18 18:45:46 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-03-18 18:45:46 62464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-03-18 18:45:46 147968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-03-18 18:45:46 20992 --a------ C:\WINDOWS\system32\qprocess.exe
2007-03-18 18:45:46 11264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-03-18 18:45:45 11776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-03-18 18:45:45 91136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-03-18 18:45:45 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-03-18 18:45:45 956416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-03-18 18:45:45 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-03-18 18:45:45 58880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-03-18 18:45:45 0 d-------- C:\WINDOWS\system32\MsDtc
2007-03-18 18:45:45 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-03-18 18:45:44 6144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-03-18 18:45:44 0 d-------- C:\WINDOWS\system32\Com
2007-03-18 18:45:44 60416 --a------ C:\WINDOWS\system32\colbact.dll
2007-03-18 18:45:44 85504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-03-18 18:45:43 540160 --a------ C:\WINDOWS\system32\comuid.dll
2007-03-18 18:45:43 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-03-18 18:45:43 110080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-03-18 18:45:43 625152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-03-18 18:45:43 225792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-03-18 18:45:42 498688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-03-18 18:45:38 56320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-03-18 18:45:38 17920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-03-18 18:45:38 58880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-03-18 18:45:38 187904 --a------ C:\WINDOWS\system32\cmprops.dll
2007-03-18 18:45:32 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-03-18 18:45:32 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys

-- Find3M Report ---------------------------------------------------------------

2007-03-29 21:37:26 355486 --a------ C:\WINDOWS\system32\perfh015.dat
2007-03-29 21:37:26 49492 --a------ C:\WINDOWS\system32\perfc015.dat
2007-03-29 20:54:52 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\uTorrent
2007-03-29 20:08:06 0 d---s---- C:\Documents and Settings\Konrad\Dane aplikacji\Microsoft<MICROS~1>
2007-03-29 17:00:48 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\teamspeak2<TEAMSP~1>
2007-03-29 09:02:26 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Apple Computer<APPLEC~1>
2007-03-28 21:16:46 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Media Player Classic<MEDIAP~1>
2007-03-28 21:02:37 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Real
2007-03-27 23:03:07 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Skype
2007-03-22 15:31:15 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\AdobeUM
2007-03-22 15:30:47 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Adobe
2007-03-20 15:29:27 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Mozilla
2007-03-20 15:29:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Thunderbird<THUNDE~1>
2007-03-19 22:24:33 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Talkback
2007-03-18 23:29:11 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Macromedia<MACROM~1>
2007-03-18 19:38:16 62 --ahs---- C:\Documents and Settings\Konrad\Dane aplikacji\desktop.ini
2007-03-18 19:04:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Identities<IDENTI~1>
2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe

-- Registry Dump ---------------------------------------------------------------

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"WooCnxMon"="C:\\PROGRA~1\\NEOSTR~1\\CnxMon.exe"
"SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon"
"WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe"
"WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe"
"SoundMan"="SOUNDMAN.EXE"
"kis"="\"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe\""
@=""
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"="C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0

-- End of ComboScan: finished at 2007-03-29 at 21:55:11 ------------------------

[ Dodano: Dzisiaj o 21:06 ]
i co teraz?

**Posty:** 18165 · przez **wojtas** 29 Mar 2007, 22:17

Użyj WWDC :
http://www.firewallleaktester.com/wwdc.htm
Zmień opcje z disable na enable. Uruchom ponownie komputer.
Tak powinny wyglądać porty (NetBIOS może być żółty) :
http://www.firewallleaktester.com/images_site/wwdc.jpg

sciagnij gmera:
http://gmer.net/gmer.zip
1) Rootkit >>> zaznaczone Pokaż wszystko >>> wskazane tylko Usługi >>> Szukaj >>> Kopiuj >>> CTRL+V do posta
2) Rootkit >>> odznaczone Pokaż wszystko >>> wskazane wszystkie obiekty do skanu >>> Szukaj >>> Kopiuj >>> CTRL+V do posta

**Posty:** 35 · przez **Wilk.** 29 Mar 2007, 22:29

GMER 1.0.12.12086 - http://www.gmer.net
Rootkit scan 2007-03-29 22:21:19
Windows 5.1.2600 Dodatek Service Pack 2

---- Services - GMER 1.0.12 ----

Service [DISABLED] Abiosdsk
Service [DISABLED] abp480n5
Service C:\WINDOWS\system32\DRIVERS\ACPI.sys [BOOT] ACPI
Service [DISABLED] ACPIEC
Service [DISABLED] adpu160m
Service C:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec
Service C:\WINDOWS\System32\drivers\afd.sys [SYSTEM] AFD
Service [DISABLED] Aha154x
Service [DISABLED] aic78u2
Service [DISABLED] aic78xx
Service C:\WINDOWS\system32\DRIVERS\alcan5wn.sys [MANUAL] alcan5wn
Service C:\WINDOWS\system32\DRIVERS\alcaudsl.sys [MANUAL] alcaudsl
Service C:\WINDOWS\system32\drivers\ALCXWDM.SYS [MANUAL] ALCXWDM
Service C:\WINDOWS\system32\svchost.exe [DISABLED] Alerter
Service C:\WINDOWS\System32\alg.exe [MANUAL] ALG
Service [DISABLED] AliIde
Service C:\WINDOWS\system32\DRIVERS\amdk7.sys [SYSTEM] AmdK7
Service [DISABLED] amsint
Service C:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt
Service [DISABLED] asc
Service [DISABLED] asc3350p
Service [DISABLED] asc3550
Service C:\WINDOWS\system32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac
Service C:\WINDOWS\system32\DRIVERS\atapi.sys [BOOT] atapi
Service [DISABLED] Atdisk
Service C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [MANUAL] ati2mtag
Service C:\WINDOWS\system32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc
Service C:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv
Service C:\WINDOWS\system32\DRIVERS\audstub.sys [MANUAL] audstub
Service C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe [AUTO] AVP
Service BattC
Service [SYSTEM] Beep
Service C:\WINDOWS\system32\svchost.exe [MANUAL] BITS
Service C:\WINDOWS\system32\svchost.exe [AUTO] Browser
Service [DISABLED] cbidf2k
Service [DISABLED] cd20xrnt
Service [SYSTEM] Cdaudio
Service [DISABLED] Cdfs
Service C:\WINDOWS\system32\DRIVERS\cdrom.sys [SYSTEM] Cdrom
Service [SYSTEM] Changer
Service C:\WINDOWS\system32\cisvc.exe [MANUAL] CiSvc
Service C:\WINDOWS\system32\clipsrv.exe [DISABLED] ClipSrv
Service [DISABLED] CmdIde
Service C:\WINDOWS\system32\dllhost.exe [MANUAL] COMSysApp
Service ContentFilter
Service ContentIndex
Service [DISABLED] Cpqarray
Service C:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc
Service [DISABLED] dac2w2k
Service [DISABLED] dac960nt
Service C:\WINDOWS\system32\svchost.exe [AUTO] DcomLaunch
Service C:\WINDOWS\system32\svchost.exe [AUTO] Dhcp
Service C:\WINDOWS\system32\DRIVERS\disk.sys [BOOT] Disk
Service C:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin
Service C:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot
Service C:\WINDOWS\System32\drivers\dmio.sys [DISABLED] dmio
Service C:\WINDOWS\System32\drivers\dmload.sys [DISABLED] dmload
Service C:\WINDOWS\System32\svchost.exe [MANUAL] dmserver
Service C:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic
Service C:\WINDOWS\system32\svchost.exe [AUTO] Dnscache
Service [DISABLED] dpti2o
Service C:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud
Service C:\WINDOWS\System32\svchost.exe [AUTO] ERSvc
Service C:\WINDOWS\system32\services.exe [AUTO] Eventlog
Service C:\WINDOWS\system32\svchost.exe [MANUAL] EventSystem
Service [DISABLED] Fastfat
Service C:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility
Service C:\WINDOWS\system32\DRIVERS\fdc.sys [MANUAL] Fdc
Service [SYSTEM] Fips
Service C:\WINDOWS\system32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk
Service C:\WINDOWS\system32\DRIVERS\fltMgr.sys [BOOT] FltMgr
Service [SYSTEM] Fs_Rec
Service C:\WINDOWS\system32\DRIVERS\ftdisk.sys [BOOT] Ftdisk
Service C:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] gmer
Service C:\WINDOWS\system32\DRIVERS\msgpc.sys [MANUAL] Gpc
Service C:\WINDOWS\System32\svchost.exe [AUTO] helpsvc
Service C:\WINDOWS\System32\svchost.exe [DISABLED] HidServ
Service [DISABLED] hpn
Service C:\WINDOWS\System32\Drivers\HTTP.sys [MANUAL] HTTP
Service C:\WINDOWS\System32\svchost.exe [MANUAL] HTTPFilter
Service [SYSTEM] i2omgmt
Service [DISABLED] i2omp
Service C:\WINDOWS\system32\DRIVERS\i8042prt.sys [SYSTEM] i8042prt
Service C:\WINDOWS\system32\DRIVERS\imapi.sys [SYSTEM] Imapi
Service C:\WINDOWS\system32\imapi.exe [MANUAL] ImapiService
Service inetaccs
Service [DISABLED] ini910u
Service Inport
Service [DISABLED] IntelIde
Service C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys [MANUAL] Ip6Fw
Service C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver
Service C:\WINDOWS\system32\DRIVERS\ipinip.sys [MANUAL] IpInIp
Service C:\WINDOWS\system32\DRIVERS\ipnat.sys [MANUAL] IpNat
Service C:\WINDOWS\system32\DRIVERS\ipsec.sys [SYSTEM] IPSec
Service C:\WINDOWS\system32\DRIVERS\irenum.sys [MANUAL] IRENUM
Service ISAPISearch
Service C:\WINDOWS\system32\DRIVERS\isapnp.sys [BOOT] isapnp
Service C:\WINDOWS\system32\DRIVERS\kbdclass.sys [SYSTEM] Kbdclass
Service C:\WINDOWS\system32\drivers\kl1.sys [BOOT] kl1
Service C:\WINDOWS\system32\drivers\klif.sys [SYSTEM] klif
Service C:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer
Service [BOOT] KSecDD
Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanserver
Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanworkstation
Service [SYSTEM] lbrtfdc
Service ldap
Service LicenseService
Service C:\Program Files\Common Files\LightScribe\LSSrvc.exe [AUTO] LightScribeService
Service C:\WINDOWS\system32\svchost.exe [AUTO] LmHosts
Service C:\WINDOWS\system32\svchost.exe [DISABLED] Messenger
Service [SYSTEM] mnmdd
Service C:\WINDOWS\system32\mnmsrvc.exe [MANUAL] mnmsrvc
Service [MANUAL] Modem
Service C:\WINDOWS\system32\DRIVERS\mouclass.sys [SYSTEM] Mouclass
Service [BOOT] MountMgr
Service [DISABLED] mraid35x
Service C:\WINDOWS\system32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV
Service C:\WINDOWS\system32\DRIVERS\mrxsmb.sys [SYSTEM] MRxSmb
Service C:\WINDOWS\system32\msdtc.exe [MANUAL] MSDTC
Service [SYSTEM] Msfs
Service C:\WINDOWS\system32\msiexec.exe [MANUAL] MSIServer
Service C:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV
Service C:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK
Service C:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM
Service C:\WINDOWS\system32\DRIVERS\mssmbios.sys [MANUAL] mssmbios
Service [BOOT] Mup
Service [BOOT] NDIS
Service C:\WINDOWS\system32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi
Service C:\WINDOWS\system32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio
Service C:\WINDOWS\system32\DRIVERS\ndiswan.sys [MANUAL] NdisWan
Service [MANUAL] NDProxy
Service C:\WINDOWS\system32\DRIVERS\netbios.sys [SYSTEM] NetBIOS
Service C:\WINDOWS\system32\DRIVERS\netbt.sys [MANUAL] NetBT
Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDE
Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDEdsdm
Service C:\WINDOWS\system32\lsass.exe [MANUAL] Netlogon
Service C:\WINDOWS\System32\svchost.exe [MANUAL] Netman
Service C:\WINDOWS\system32\svchost.exe [MANUAL] Nla
Service [SYSTEM] Npfs
Service [DISABLED] Ntfs
Service C:\WINDOWS\system32\lsass.exe [MANUAL] NtLmSsp
Service C:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc
Service [SYSTEM] Null
Service C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt
Service C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd
Service C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [MANUAL] ose
Service C:\WINDOWS\system32\DRIVERS\parport.sys [MANUAL] Parport
Service [BOOT] PartMgr
Service [AUTO] ParVdm
Service C:\WINDOWS\system32\DRIVERS\pci.sys [BOOT] PCI
Service [SYSTEM] PCIDump
Service C:\WINDOWS\system32\DRIVERS\pciide.sys [BOOT] PCIIde
Service [DISABLED] Pcmcia
Service [MANUAL] PDCOMP
Service [MANUAL] PDFRAME
Service [MANUAL] PDRELI
Service [MANUAL] PDRFRAME
Service [DISABLED] perc2
Service [DISABLED] perc2hib
Service PerfDisk
Service PerfNet
Service PerfOS
Service PerfProc
Service C:\WINDOWS\system32\services.exe [AUTO] PlugPlay
Service C:\WINDOWS\system32\PnkBstrA.exe [AUTO] PnkBstrA
Service C:\WINDOWS\system32\PnkBstrB.exe [MANUAL] PnkBstrB
Service C:\WINDOWS\system32\drivers\PnkBstrK.sys [MANUAL] PnkBstrK
Service C:\WINDOWS\system32\lsass.exe [AUTO] PolicyAgent
Service C:\WINDOWS\system32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport
Service C:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage
Service C:\WINDOWS\system32\DRIVERS\psched.sys [MANUAL] PSched
Service C:\WINDOWS\system32\DRIVERS\ptilink.sys [MANUAL] Ptilink
Service C:\WINDOWS\System32\Drivers\PxHelp20.sys [BOOT] PxHelp20
Service [DISABLED] ql1080
Service [DISABLED] Ql10wnt
Service [DISABLED] ql12160
Service [DISABLED] ql1240
Service [DISABLED] ql1280
Service C:\WINDOWS\system32\DRIVERS\rasacd.sys [SYSTEM] RasAcd
Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasAuto
Service C:\WINDOWS\system32\DRIVERS\rasl2tp.sys [MANUAL] Rasl2tp
Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasMan
Service C:\WINDOWS\system32\DRIVERS\raspppoe.sys [MANUAL] RasPppoe
Service C:\WINDOWS\system32\DRIVERS\raspti.sys [MANUAL] Raspti
Service C:\WINDOWS\system32\DRIVERS\rdbss.sys [SYSTEM] Rdbss
Service C:\WINDOWS\System32\DRIVERS\RDPCDD.sys [SYSTEM] RDPCDD
Service RDPDD
Service RDPNP
Service [MANUAL] RDPWD
Service C:\WINDOWS\system32\sessmgr.exe [MANUAL] RDSessMgr
Service C:\WINDOWS\system32\DRIVERS\redbook.sys [SYSTEM] redbook
Service C:\WINDOWS\system32\svchost.exe [DISABLED] RemoteAccess
Service C:\WINDOWS\system32\locator.exe [MANUAL] RpcLocator
Service C:\WINDOWS\system32\svchost.exe [AUTO] RpcSs
Service C:\WINDOWS\system32\rsvp.exe [MANUAL] RSVP
Service C:\WINDOWS\system32\lsass.exe [AUTO] SamSs
Service C:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardSvr
Service C:\WINDOWS\System32\svchost.exe [AUTO] Schedule
Service C:\WINDOWS\system32\DRIVERS\secdrv.sys [MANUAL] Secdrv
Service C:\WINDOWS\System32\svchost.exe [AUTO] seclogon
Service C:\WINDOWS\system32\svchost.exe [AUTO] SENS
Service C:\WINDOWS\system32\DRIVERS\serenum.sys [MANUAL] serenum
Service C:\WINDOWS\system32\DRIVERS\serial.sys [SYSTEM] Serial
Service [SYSTEM] Sfloppy
Service C:\WINDOWS\system32\svchost.exe [AUTO] SharedAccess
Service C:\WINDOWS\System32\svchost.exe [AUTO] ShellHWDetection
Service [DISABLED] Simbad
Service C:\WINDOWS\system32\DRIVERS\sisnic.sys [MANUAL] SISNIC
Service C:\Program Files\Sygate\SPF\smc.exe [AUTO] SmcService
Service [DISABLED] Sparrow
Service C:\WINDOWS\system32\drivers\splitter.sys [MANUAL] splitter
Service C:\WINDOWS\system32\spoolsv.exe [AUTO] Spooler
Service C:\WINDOWS\system32\DRIVERS\sr.sys [BOOT] sr
Service C:\WINDOWS\system32\svchost.exe [AUTO] srservice
Service C:\WINDOWS\system32\DRIVERS\srv.sys [MANUAL] Srv
Service C:\WINDOWS\system32\svchost.exe [MANUAL] SSDPSRV
Service C:\WINDOWS\system32\svchost.exe [AUTO] stisvc
Service C:\WINDOWS\system32\DRIVERS\swenum.sys [MANUAL] swenum
Service C:\WINDOWS\system32\drivers\swmidi.sys [MANUAL] swmidi
Service C:\WINDOWS\system32\dllhost.exe [MANUAL] SwPrv
Service [DISABLED] symc810
Service [DISABLED] symc8xx
Service [DISABLED] sym_hi
Service [DISABLED] sym_u3
Service C:\WINDOWS\system32\drivers\sysaudio.sys [MANUAL] sysaudio
Service C:\WINDOWS\system32\smlogsvc.exe [MANUAL] SysmonLog
Service C:\WINDOWS\System32\svchost.exe [MANUAL] TapiSrv
Service C:\WINDOWS\system32\DRIVERS\tcpip.sys [SYSTEM] Tcpip
Service [MANUAL] TDPIPE
Service [MANUAL] TDTCP
Service C:\WINDOWS\SYSTEM32\Drivers\Teefer.sys [BOOT] Teefer
Service C:\WINDOWS\system32\DRIVERS\termdd.sys [SYSTEM] TermDD
Service C:\WINDOWS\System32\svchost.exe [MANUAL] TermService
Service C:\WINDOWS\System32\svchost.exe [AUTO] Themes
Service [DISABLED] TosIde
Service C:\WINDOWS\system32\svchost.exe [AUTO] TrkWks
Service TSDDD
Service C:\WINDOWS\system32\DRIVERS\uagp35.sys [BOOT] uagp35
Service [DISABLED] Udfs
Service [DISABLED] ultra
Service C:\WINDOWS\system32\wdfmgr.exe [AUTO] UMWdf
Service C:\WINDOWS\system32\DRIVERS\update.sys [MANUAL] Update
Service C:\WINDOWS\system32\svchost.exe [MANUAL] upnphost
Service C:\WINDOWS\System32\ups.exe [MANUAL] UPS
Service C:\WINDOWS\system32\DRIVERS\usbehci.sys [MANUAL] usbehci
Service C:\WINDOWS\system32\DRIVERS\usbhub.sys [MANUAL] usbhub
Service C:\WINDOWS\system32\DRIVERS\usbohci.sys [MANUAL] usbohci
Service C:\WINDOWS\system32\DRIVERS\usbscan.sys [MANUAL] usbscan
Service C:\WINDOWS\System32\drivers\vga.sys [SYSTEM] VgaSave
Service [DISABLED] ViaIde
Service [BOOT] VolSnap
Service [DISABLED] vsdatant
Service C:\WINDOWS\System32\vssvc.exe [MANUAL] VSS
Service C:\WINDOWS\System32\svchost.exe [AUTO] W32Time
Service W3SVC
Service C:\WINDOWS\system32\DRIVERS\wanarp.sys [MANUAL] Wanarp
Service [MANUAL] WDICA
Service C:\WINDOWS\system32\drivers\wdmaud.sys [MANUAL] wdmaud
Service C:\WINDOWS\system32\svchost.exe [AUTO] WebClient
Service C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [AUTO] wg3n
Service C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys [AUTO] wg4n
Service C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys [AUTO] wg5n
Service C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys [AUTO] wg6n
Service C:\WINDOWS\system32\svchost.exe [AUTO] winmgmt
Service [MANUAL] Winsock
Service WinSock2
Service WinTrust
Service C:\WINDOWS\System32\svchost.exe [MANUAL] WmdmPmSN
Service WmiApRpl
Service C:\WINDOWS\system32\wbem\wmiapsrv.exe [MANUAL] WmiApSrv
Service C:\WINDOWS\system32\drivers\wpsdrvnt.sys [SYSTEM] wpsdrvnt
Service [SYSTEM] WS2IFSL
Service C:\WINDOWS\System32\svchost.exe [AUTO] wscsvc
Service C:\WINDOWS\system32\svchost.exe [AUTO] wuauserv
Service C:\WINDOWS\System32\svchost.exe [AUTO] WZCSVC
Service C:\WINDOWS\System32\svchost.exe [MANUAL] xmlprov
Service {06E6A357-5CA4-4DE2-A137-6ABD34937548}

---- EOF - GMER 1.0.12 ----

[ Dodano: Dzisiaj o 21:40 ]

GMER 1.0.12.12086 - http://www.gmer.net
Rootkit scan 2007-03-29 22:31:58
Windows 5.1.2600 Dodatek Service Pack 2

---- System - GMER 1.0.12 ----

SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwAllocateVirtualMemory
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwClose
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcessEx
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSection
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSymbolicLinkObject
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDeleteKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDeleteValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDuplicateObject
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwEnumerateKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwEnumerateValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwFlushKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwInitializeRegistry
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwLoadKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwLoadKey2
SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwMapViewOfSection
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwNotifyChangeKey
SSDT kl1.sys ZwOpenFile
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenSection
SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwProtectVirtualMemory
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryMultipleValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQuerySystemInformation
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwReplaceKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwRestoreKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwResumeThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSaveKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetContextThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationFile
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetValueKey
SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwShutdownSystem
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSuspendThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwTerminateProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwUnloadKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwWriteVirtualMemory
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[284]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[285]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[286]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[287]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[288]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[289]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[290]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[291]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[292]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[293]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[294]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[295]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[296]

Code \??\C:\WINDOWS\system32\drivers\klif.sys FsRtlCheckLockForReadAccess
Code \??\C:\WINDOWS\system32\drivers\klif.sys IoIsOperationSynchronous

---- Kernel code sections - GMER 1.0.12 ----

.text ntoskrnl.exe!KiDispatchInterrupt + BA 804DB92E 7 Bytes JMP B2C00E10 \??\C:\WINDOWS\system32\drivers\klif.sys
.text ntoskrnl.exe!IoIsOperationSynchronous 804E8752 5 Bytes JMP B2BFEB50 \??\C:\WINDOWS\system32\drivers\klif.sys
.text ntoskrnl.exe!FsRtlCheckLockForReadAccess 80503C29 5 Bytes JMP B2BFE6C0 \??\C:\WINDOWS\system32\drivers\klif.sys
.text tcpip.sys!IPTransmit + 10BC B2CDACFA 6 Bytes CALL F767FE50 Teefer.sys
.text tcpip.sys!IPTransmit + 2810 B2CDC44E 6 Bytes CALL F767FE50 Teefer.sys
.text tcpip.sys!ARPRcv + 506D B2CE14E0 6 Bytes CALL F767FE50 Teefer.sys
.text wanarp.sys F79043FD 4 Bytes CALL F767FFA0 Teefer.sys
.text wanarp.sys F7904402 2 Bytes [ 90, 90 ]

---- Devices - GMER 1.0.12 ----

Device \Driver\kl1 \Device\klick IRP_MJ_CREATE [F78C0220] wpsdrvnt.sys
Device \Driver\kl1 \Device\klick IRP_MJ_CLOSE [F78C0480] wpsdrvnt.sys
Device \Driver\kl1 \Device\klick IRP_MJ_DEVICE_CONTROL [F78C05A0] wpsdrvnt.sys
Device \Driver\kl1 \Device\klick IRP_MJ_INTERNAL_DEVICE_CONTROL [F78C05D0] wpsdrvnt.sys
Device \Driver\kl1 \Device\kl1 IRP_MJ_CREATE [F78C0220] wpsdrvnt.sys
Device \Driver\kl1 \Device\kl1 IRP_MJ_CLOSE [F78C0480] wpsdrvnt.sys
Device \Driver\kl1 \Device\kl1 IRP_MJ_DEVICE_CONTROL [F78C05A0] wpsdrvnt.sys
Device \Driver\kl1 \Device\kl1 IRP_MJ_INTERNAL_DEVICE_CONTROL [F78C05D0] wpsdrvnt.sys
Device \Driver\kl1 \Device\klop IRP_MJ_CREATE [F78C0220] wpsdrvnt.sys
Device \Driver\kl1 \Device\klop IRP_MJ_CLOSE [F78C0480] wpsdrvnt.sys
Device \Driver\kl1 \Device\klop IRP_MJ_DEVICE_CONTROL [F78C05A0] wpsdrvnt.sys
Device \Driver\kl1 \Device\klop IRP_MJ_INTERNAL_DEVICE_CONTROL [F78C05D0] wpsdrvnt.sys
Device \Driver\kl1 \Device\klin IRP_MJ_CREATE [F78C0220] wpsdrvnt.sys
Device \Driver\kl1 \Device\klin IRP_MJ_CLOSE [F78C0480] wpsdrvnt.sys
Device \Driver\kl1 \Device\klin IRP_MJ_DEVICE_CONTROL [F78C05A0] wpsdrvnt.sys
Device \Driver\kl1 \Device\klin IRP_MJ_INTERNAL_DEVICE_CONTROL [F78C05D0] wpsdrvnt.sys

---- Threads - GMER 1.0.12 ----

Thread 4:116 8645A8E0
Thread 4:120 8645A8E0
Thread 4:124 864318D0
Thread 4:128 864318D0
Thread 4:132 864318D0
Thread 4:348 8645A8E0
Thread 4:412 8645A8E0

---- EOF - GMER 1.0.12 ----

**Posty:** 18165 · przez **wojtas** 29 Mar 2007, 22:50

W Gmerze w zakładce CMD z zaznaczoną opcją CMD.EXE wklej:

gmer -killall
gmer -del file C:\WINDOWS\system32\tmp.reg
gmer -del file C:\WINDOWS\zts2.exe
gmer -del file C:\WINDOWS\system32\vcmgcd32.dll
gmer -del file C:\WINDOWS\system32\iifgfgf.dll
gmer -del file C:\WINDOWS\rundll16.exe
gmer -del file C:\WINDOWS\rundl132.dll
gmer -del file C:\WINDOWS\logo1_.exe
gmer -reboot

Po chwilce zostaną wykonane polecenia i komputer samoczynnie się zrestartuje.

Po wykonaniu wklej nowe logi z comboscana

**Posty:** 35 · przez **Wilk.** 29 Mar 2007, 22:56

ComboScan v20070306.20 run by Konrad on 2007-03-29 at 22:45:59
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- HijackThis (run as Konrad.exe) ----------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 22:46:01, on 2007-03-29
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Neostrada TP\NeostradaTP.exe
C:\Program Files\Neostrada TP\ComComp.exe
C:\Program Files\Neostrada TP\Watch.exe
C:\Documents and Settings\Konrad\Pulpit\comboscan.exe
C:\DOCUME~1\Konrad\Pulpit\Konrad.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Dodaj do Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

-- Files created between 2007-02-28 and 2007-03-29 -----------------------------

2007-03-29 22:15:44 80 --a------ C:\WINDOWS\gmer_uninstall.cmd<GMER_U~1.CMD>
2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg6n.sys
2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg5n.sys
2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg4n.sys
2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg3n.sys
2007-03-29 21:59:47 60496 --a------ C:\WINDOWS\system32\drivers\Teefer.sys
2007-03-29 21:59:46 21075 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys
2007-03-29 21:59:43 83096 --a------ C:\WINDOWS\system32\SSSensor.dll
2007-03-29 21:59:40 0 d-------- C:\Program Files\Sygate
2007-03-29 21:59:27 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard<WISEIN~1>
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\TASKMGR.COM
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\T.COM
2007-03-29 19:36:37 149504 --a------ C:\WINDOWS\R.COM
2007-03-29 09:00:12 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-03-29 08:59:55 0 d-------- C:\Program Files\Apple Software Update<APPLES~1>
2007-03-28 21:19:14 0 d-------- C:\Program Files\BrizVideoJoin<BRIZVI~1>
2007-03-28 21:17:23 0 d-------- C:\Program Files\AVI Codec Pack<AVICOD~1>
2007-03-28 21:02:56 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Real Alternative<REALAL~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1>
2007-03-28 21:01:51 0 d-------- C:\Program Files\AC3Filter<AC3FIL~1>
2007-03-28 21:01:30 0 d-------- C:\Program Files\DivX
2007-03-28 20:59:14 0 d-------- C:\Program Files\MarBit
2007-03-28 16:14:32 0 d-------- C:\Program Files\Common Files\LightScribe<LIGHTS~1>
2007-03-28 16:12:47 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll
2007-03-28 16:12:47 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2007-03-28 16:12:43 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll
2007-03-28 16:12:43 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll
2007-03-28 16:12:43 476320 -----n--- C:\WINDOWS\system32\ImagXpr7.dll
2007-03-28 16:12:43 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll
2007-03-28 16:12:42 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE>
2007-03-28 16:12:38 0 d-------- C:\Program Files\Common Files\Ahead
2007-03-28 16:12:36 0 d-------- C:\Program Files\Ahead
2007-03-27 20:37:04 63040 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2007-03-27 19:09:36 0 d-------- C:\Program Files\America's Army Server Manager<AMERIC~1>
2007-03-27 10:37:45 0 d-------- C:\Program Files\Kaspersky Lab<KASPER~1>
2007-03-27 10:37:43 48160 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-03-27 10:37:43 2610976 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-03-26 19:27:02 22584 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-03-26 16:57:55 99904 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2007-03-26 16:57:46 0 d-------- C:\WINDOWS\system32\LogFiles
2007-03-26 16:47:45 0 d-------- C:\Program Files\America's Army<AMERIC~2>
2007-03-26 16:44:45 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL>
2007-03-26 16:44:45 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL>
2007-03-22 15:40:20 17920 --a------ C:\WINDOWS\system32\mdimon.dll
2007-03-22 15:39:10 0 d-------- C:\WINDOWS\SHELLNEW
2007-03-22 15:30:28 0 d-------- C:\Program Files\Common Files\Adobe
2007-03-22 01:09:06 0 d-------- C:\Program Files\Common Files\Skype
2007-03-22 01:08:52 0 d-------- C:\Program Files\Skype
2007-03-21 09:31:49 5632 --a------ C:\WINDOWS\system32\ptpusb.dll
2007-03-21 09:31:47 159232 --a------ C:\WINDOWS\system32\ptpusd.dll
2007-03-21 09:31:46 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-03-20 21:36:26 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL>
2007-03-20 20:41:50 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-03-20 15:38:13 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe
2007-03-20 15:38:13 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-03-20 15:38:13 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-03-20 15:38:13 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-03-20 15:38:12 129784 -----n--- C:\WINDOWS\system32\pxafs.dll
2007-03-20 15:37:44 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2>
2007-03-20 15:36:11 0 d-------- C:\Program Files\Winamp
2007-03-20 15:29:05 3490 --a------ C:\WINDOWS\mozver.dat
2007-03-20 15:28:56 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~2>
2007-03-19 22:24:28 0 --a------ C:\WINDOWS\nsreg.dat
2007-03-19 22:24:20 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-03-19 00:20:15 49152 --a------ C:\WINDOWS\system32\ChCfg.exe
2007-03-19 00:20:14 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-03-19 00:20:12 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-03-19 00:20:10 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-03-19 00:20:04 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-03-19 00:20:02 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-03-19 00:20:00 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-03-19 00:19:59 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-03-19 00:19:57 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-03-19 00:19:56 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-03-19 00:19:54 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-03-19 00:19:51 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-03-19 00:19:47 4027456 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys
2007-03-19 00:19:45 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-03-19 00:19:45 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-03-19 00:19:45 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-03-19 00:19:39 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe
2007-03-19 00:19:39 0 d-------- C:\Program Files\Realtek AC97<REALTE~2>
2007-03-19 00:19:37 577536 --a------ C:\WINDOWS\soundman.exe
2007-03-19 00:19:36 147456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll
2007-03-19 00:19:36 315392 --a------ C:\WINDOWS\alcupd.exe
2007-03-19 00:19:36 217088 --a------ C:\WINDOWS\Alcrmv.exe
2007-03-18 22:58:20 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-03-18 22:58:20 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1>
2007-03-18 22:58:18 0 d--h----- C:\WINDOWS\$hf_mig$
2007-03-18 22:46:47 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\Realtek Sound Manager<REALTE~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\AvRack
2007-03-18 20:28:56 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1>
2007-03-18 20:26:43 32768 --a------ C:\WINDOWS\system32\UnAudioNT.dll<UNAUDI~1.DLL>
2007-03-18 20:26:43 0 d-------- C:\Program Files\VIA Technologies, Inc<VIATEC~1>
2007-03-18 20:26:39 306688 --a------ C:\WINDOWS\IsUninst.exe
2007-03-18 19:41:56 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-03-18 19:40:48 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-03-18 19:40:26 701440 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-03-18 19:40:26 516768 --a------ C:\WINDOWS\system32\ativvaxx.dll
2007-03-18 19:40:26 1888992 --a------ C:\WINDOWS\system32\ati3duag.dll
2007-03-18 19:40:26 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll
2007-03-18 19:40:25 201728 --a------ C:\WINDOWS\system32\ati2dvag.dll
2007-03-18 19:40:25 229376 --a------ C:\WINDOWS\system32\ati2cqag.dll
2007-03-18 19:40:06 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS
2007-03-18 19:40:02 32768 --a------ C:\WINDOWS\system32\drivers\sisnic.sys
2007-03-18 19:39:56 77312 --a------ C:\WINDOWS\system32\usbui.dll
2007-03-18 19:38:45 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1>
2007-03-18 19:38:44 0 d-------- C:\Program Files\Common Files\ODBC
2007-03-18 19:38:41 0 dr------- C:\Program Files<PROGRA~1>
2007-03-18 19:38:41 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-03-18 19:38:37 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-03-18 19:38:34 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-03-18 19:38:34 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdycl.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdro.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdhu.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll
2007-03-18 19:38:29 7168 --a------ C:\WINDOWS\system32\kbdcz.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcr.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL
2007-03-18 19:38:28 13312 --a------ C:\WINDOWS\system32\irclass.dll
2007-03-18 19:38:28 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-03-18 19:38:27 24661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-03-18 19:38:27 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-03-18 19:38:27 85532 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-03-18 19:38:27 9168 --a------ C:\WINDOWS\system\VER.DLL
2007-03-18 19:38:27 19200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-03-18 19:38:27 5120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-03-18 19:38:26 24064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-03-18 19:38:26 83456 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-03-18 19:38:26 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-03-18 19:38:26 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-03-18 19:38:26 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-03-18 19:38:26 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-03-18 19:38:26 70096 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-03-18 19:38:25 15360 --a------ C:\WINDOWS\TASKMAN.EXE
2007-03-18 19:38:25 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-03-18 19:38:25 8704 --a------ C:\WINDOWS\system32\batt.dll
2007-03-18 19:38:25 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2007-03-18 19:38:24 70144 --a------ C:\WINDOWS\NOTEPAD.EXE
2007-03-18 19:38:23 75776 --a------ C:\WINDOWS\system32\storprop.dll
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot2
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot
2007-03-18 19:37:37 0 d-------- C:\Documents and Settings<DOCUME~1>
2007-03-18 19:37:36 0 d--hs---- C:\System Volume Information<SYSTEM~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\WinSxS
2007-03-18 19:29:37 0 dr------- C:\WINDOWS\Web
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\twain_32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wins
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wbem
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\usmt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\spool
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ShellExt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\Setup
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ras
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\oobe
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\npp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\inetsrv
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\IME
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\icsxml
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ias
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\export
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\etc
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\disdn
2007-03-18 19:29:37 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\dhcp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3com_dmi
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3076
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\2052
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1054
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1045
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1042
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1041
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1037
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1033
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1031
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1028
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1025
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\security
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Resources<RESOUR~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\repair
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\PeerNet
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\pchealth
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msapps
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msagent
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Media
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\java
2007-03-18 19:29:37 0 d--h----- C:\WINDOWS\inf
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\ime
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Help
2007-03-18 19:29:37 0 dr--s---- C:\WINDOWS\Fonts
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Debug
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Cursors
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\AppPatch
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\addins
2007-03-18 19:08:28 32768 --a------ C:\WINDOWS\system32\WooDial2000.dll<WOODIA~1.DLL>
2007-03-18 19:06:22 5606 --a------ C:\WINDOWS\system32\stci.dll
2007-03-18 19:06:22 5280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys
2007-03-18 19:06:22 70688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys
2007-03-18 19:06:22 3968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys
2007-03-18 19:06:21 53600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys
2007-03-18 19:06:20 0 d-------- C:\Program Files\Thomson
2007-03-18 19:06:19 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-03-18 19:06:17 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2007-03-18 19:05:15 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1>
2007-03-18 18:53:40 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-03-18 18:53:39 0 d-------- C:\WINDOWS\Prefetch
2007-03-18 18:50:11 0 d-------- C:\WINDOWS\system32\xircom
2007-03-18 18:50:11 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1>
2007-03-18 18:50:02 0 -rahs---- C:\MSDOS.SYS
2007-03-18 18:50:02 0 -rahs---- C:\IO.SYS
2007-03-18 18:50:02 0 --a------ C:\CONFIG.SYS
2007-03-18 18:50:02 0 -----n--- C:\AUTOEXEC.BAT
2007-03-18 18:49:44 112128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-03-18 18:48:53 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1>
2007-03-18 18:48:53 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1>
2007-03-18 18:48:41 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3>
2007-03-18 18:48:38 0 d-------- C:\Program Files\Usługi online<USUGIO~1>
2007-03-18 18:48:21 0 d-------- C:\WINDOWS\system32\DirectX
2007-03-18 18:48:01 11264 --a------ C:\WINDOWS\system32\atrace.dll
2007-03-18 18:47:53 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-03-18 18:47:52 67584 --a------ C:\WINDOWS\system32\acctres.dll
2007-03-18 18:47:49 0 d---s---- C:\WINDOWS\Tasks
2007-03-18 18:47:49 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-03-18 18:47:48 0 d-------- C:\Program Files\Common Files\MSSoap
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\system32\Macromed
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\srchasst
2007-03-18 18:47:41 173536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-03-18 18:47:41 128280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-03-18 18:47:41 6656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-03-18 18:47:41 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-03-18 18:47:41 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-03-18 18:47:40 41240 --a------ C:\WINDOWS\system32\wups.dll
2007-03-18 18:47:40 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-03-18 18:47:40 125208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-03-18 18:47:40 466200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-03-18 18:47:40 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-03-18 18:47:40 382464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-03-18 18:47:40 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2007-03-18 18:47:40 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2007-03-18 18:47:36 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2007-03-18 18:47:33 45568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-03-18 18:47:33 29696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-03-18 18:47:33 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-03-18 18:47:32 43520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-03-18 18:47:30 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-03-18 18:47:30 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-03-18 18:47:29 171008 --a------ C:\WINDOWS\system32\srsvc.dll
2007-03-18 18:47:29 240128 --a------ C:\WINDOWS\system32\srrstr.dll
2007-03-18 18:47:29 67584 --a------ C:\WINDOWS\system32\srclient.dll
2007-03-18 18:47:29 0 d-------- C:\WINDOWS\system32\Restore
2007-03-18 18:47:29 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-03-18 18:47:29 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2007-03-18 18:47:28 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-03-18 18:47:28 69632 --a------ C:\WINDOWS\system32\msconf.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-03-18 18:47:28 34560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-03-18 18:47:28 81920 --a------ C:\WINDOWS\system32\ils.dll
2007-03-18 18:47:25 105984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-03-18 18:47:25 252928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-03-18 18:47:24 49664 --a------ C:\WINDOWS\system32\inetres.dll
2007-03-18 18:47:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-03-18 18:47:22 192000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-03-18 18:47:22 12288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\mstask.dll
2007-03-18 18:47:22 86016 --a------ C:\WINDOWS\system32\isign32.dll
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-03-18 18:47:22 65536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-03-18 18:47:22 73728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-03-18 18:47:13 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2007-03-18 18:46:58 0 d-------- C:\WINDOWS\Registration<REGIST~1>
2007-03-18 18:46:18 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-03-18 18:46:15 5632 --a------ C:\WINDOWS\system32\write.exe
2007-03-18 18:46:15 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2007-03-18 18:46:06 139264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-03-18 18:46:06 44544 --a------ C:\WINDOWS\system32\hticons.dll
2007-03-18 18:46:05 35328 --a------ C:\WINDOWS\system32\winchat.exe
2007-03-18 18:46:05 73216 --a------ C:\WINDOWS\system32\avwav.dll
2007-03-18 18:46:05 231424 --a------ C:\WINDOWS\system32\avtapi.dll
2007-03-18 18:46:05 16384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-03-18 18:45:58 119808 --a------ C:\WINDOWS\system32\winmine.exe
2007-03-18 18:45:58 57344 --a------ C:\WINDOWS\system32\sol.exe
2007-03-18 18:45:58 605696 --a------ C:\WINDOWS\system32\getuname.dll
2007-03-18 18:45:58 80896 --a------ C:\WINDOWS\system32\charmap.exe
2007-03-18 18:45:58 115200 --a------ C:\WINDOWS\system32\calc.exe
2007-03-18 18:45:57 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-03-18 18:45:57 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-03-18 18:45:57 16384 --a------ C:\WINDOWS\system32\tskill.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tscon.exe
2007-03-18 18:45:57 9728 --a------ C:\WINDOWS\system32\reset.exe
2007-03-18 18:45:57 128000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-03-18 18:45:57 55808 --a------ C:\WINDOWS\system32\freecell.exe
2007-03-18 18:45:56 15360 --a------ C:\WINDOWS\system32\shadow.exe
2007-03-18 18:45:56 16384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-03-18 18:45:56 33792 --a------ C:\WINDOWS\system32\regini.exe
2007-03-18 18:45:56 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-03-18 18:45:56 17408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\msg.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\logoff.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-03-18 18:45:55 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-03-18 18:45:55 4096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-03-18 18:45:55 20480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-03-18 18:45:55 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-03-18 18:45:55 97792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-03-18 18:45:55 25600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-03-18 18:45:54 54272 --a------ C:\WINDOWS\system32\stclient.dll
2007-03-18 18:45:54 147456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-03-18 18:45:49 132608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-03-18 18:45:49 124928 --a------ C:\WINDOWS\system32\mplay32.exe
2007-03-18 18:45:49 351744 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-03-18 18:45:49 187904 --a------ C:\WINDOWS\system32\accwiz.exe
2007-03-18 18:45:48 539136 --a------ C:\WINDOWS\system32\spider.exe
2007-03-18 18:45:48 345088 --a------ C:\WINDOWS\system32\mspaint.exe
2007-03-18 18:45:48 103424 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-03-18 18:45:48 0 d-------- C:\Program Files\Windows NT<WINDOW~1>
2007-03-18 18:45:47 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-03-18 18:45:47 60928 --a------ C:\WINDOWS\system32\remotepg.dll
2007-03-18 18:45:47 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-03-18 18:45:47 655360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-03-18 18:45:47 408576 --a------ C:\WINDOWS\system32\mstsc.exe
2007-03-18 18:45:47 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-03-18 18:45:47 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-03-18 18:45:47 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-03-18 18:45:46 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-03-18 18:45:46 296448 --a------ C:\WINDOWS\system32\termsrv.dll
2007-03-18 18:45:46 141824 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-03-18 18:45:46 67072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-03-18 18:45:46 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-03-18 18:45:46 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-03-18 18:45:46 62464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-03-18 18:45:46 147968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-03-18 18:45:46 20992 --a------ C:\WINDOWS\system32\qprocess.exe
2007-03-18 18:45:46 11264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-03-18 18:45:45 11776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-03-18 18:45:45 91136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-03-18 18:45:45 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-03-18 18:45:45 956416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-03-18 18:45:45 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-03-18 18:45:45 58880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-03-18 18:45:45 0 d-------- C:\WINDOWS\system32\MsDtc
2007-03-18 18:45:45 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-03-18 18:45:44 6144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-03-18 18:45:44 0 d-------- C:\WINDOWS\system32\Com
2007-03-18 18:45:44 60416 --a------ C:\WINDOWS\system32\colbact.dll
2007-03-18 18:45:44 85504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-03-18 18:45:43 540160 --a------ C:\WINDOWS\system32\comuid.dll
2007-03-18 18:45:43 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-03-18 18:45:43 110080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-03-18 18:45:43 625152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-03-18 18:45:43 225792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-03-18 18:45:42 498688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-03-18 18:45:38 56320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-03-18 18:45:38 17920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-03-18 18:45:38 58880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-03-18 18:45:38 187904 --a------ C:\WINDOWS\system32\cmprops.dll
2007-03-18 18:45:32 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-03-18 18:45:32 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys

-- Find3M Report ---------------------------------------------------------------

2007-03-29 22:16:15 355486 --a------ C:\WINDOWS\system32\perfh015.dat
2007-03-29 22:16:15 49492 --a------ C:\WINDOWS\system32\perfc015.dat
2007-03-29 20:54:52 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\uTorrent
2007-03-29 20:08:06 0 d---s---- C:\Documents and Settings\Konrad\Dane aplikacji\Microsoft<MICROS~1>
2007-03-29 17:00:48 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\teamspeak2<TEAMSP~1>
2007-03-29 09:02:26 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Apple Computer<APPLEC~1>
2007-03-28 21:16:46 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Media Player Classic<MEDIAP~1>
2007-03-28 21:02:37 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Real
2007-03-27 23:03:07 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Skype
2007-03-22 15:31:15 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\AdobeUM
2007-03-22 15:30:47 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Adobe
2007-03-20 15:29:27 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Mozilla
2007-03-20 15:29:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Thunderbird<THUNDE~1>
2007-03-19 22:24:33 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Talkback
2007-03-18 23:29:11 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Macromedia<MACROM~1>
2007-03-18 19:38:16 62 --ahs---- C:\Documents and Settings\Konrad\Dane aplikacji\desktop.ini
2007-03-18 19:04:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Identities<IDENTI~1>
2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe

-- Registry Dump ---------------------------------------------------------------

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"WooCnxMon"="C:\\PROGRA~1\\NEOSTR~1\\CnxMon.exe"
"SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon"
"WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe"
"WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe"
"SoundMan"="SOUNDMAN.EXE"
"kis"="\"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe\""
@=""
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"="C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0

-- End of ComboScan: finished at 2007-03-29 at 22:46:40 ------------------------

**Posty:** 18165 · przez **wojtas** 29 Mar 2007, 23:05

juz jest ok

Autor postu otrzymał pochwałę

**Posty:** 35 · przez **Wilk.** 29 Mar 2007, 23:18

dzieki za pomoc wbijam sie na serwa zobacze jak w praktyce

[ Dodano: Dzisiaj o 18:15 ]
od pewnego mometu podrosly mi pingi. a bylo juz tak pieknie. Ciekawi mnie czy syf mogl znowu sie zadomowic.

[ Dodano: Dzisiaj o 18:16 ]
ComboScan v20070306.20 run by Konrad on 2007-04-01 at 19:04:48
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of HijackThis v1.99.1
Scan saved at 2007-04-01 19:04:57
Platform: Windows XP Dodatek Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.0.2900.2180)

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sygate\SPF\Smc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Neostrada TP\CnxMon.exe
C:\Program Files\Thomson\SpeedTouch USB\dragdiag.exe
C:\Program Files\Neostrada TP\TaskBarIcon.exe
C:\WINDOWS\soundman.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Neostrada TP\NeostradaTP.exe
C:\Program Files\Neostrada TP\ComComp.exe
C:\Program Files\Neostrada TP\Watch.exe
G:\Teamspeak2_RC2\TeamSpeak.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Konrad\Pulpit\Nowy folder\comboscan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://home.microsoft.com/access/autosearch.asp?p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Neostrada TP\SearchPageURL.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - (file missing)
O9 - Extra 'Tools' menuitem: (no name) - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - (file missing)
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra 'Tools' menuitem: (no name) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O15 - ProtocolDefaults: Unknown 'about:' protocol is in Restricted Zone (HKLM)
O15 - ProtocolDefaults: Unknown 'about:' protocol is in Restricted Zone (HKCU)
O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{6F14A062-74DC-45F9-82BB-D906B7B577E0}: NameServer = 194.204.159.1 217.98.63.164
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Urządzenie alarmowe (Alerter) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Usługa bramy warstwy aplikacji (ALG) - C:\WINDOWS\system32\alg.exe
O23 - Service: Zarządzanie aplikacjami (AppMgmt) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Windows Audio (AudioSrv) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r
O23 - Service: Usługa inteligentnego transferu w tle (BITS) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Przeglądarka komputera (Browser) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa indeksowania (CiSvc) - C:\WINDOWS\system32\cisvc.exe
O23 - Service: ClipBook (ClipSrv) - C:\WINDOWS\system32\clipsrv.exe
O23 - Service: Aplikacja systemowa modelu COM+ (COMSysApp) - C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
O23 - Service: Usługi kryptograficzne (CryptSvc) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Program uruchamiający proces serwera DCOM (DcomLaunch) - C:\WINDOWS\system32\svchost -k DcomLaunch
O23 - Service: Klient DHCP (Dhcp) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa administracyjna Menedżera dysków logicznych (dmadmin) - C:\WINDOWS\System32\dmadmin.exe /com
O23 - Service: Menedżer dysków logicznych (dmserver) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Klient DNS (Dnscache) - C:\WINDOWS\system32\svchost.exe -k NetworkService
O23 - Service: Usługa raportowania błędów (ERSvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Dziennik zdarzeń (Eventlog) - C:\WINDOWS\system32\services.exe
O23 - Service: System zdarzeń COM+ (EventSystem) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Zgodność szybkiego przełączania użytkowników (FastUserSwitchingCompatibility) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Pomoc i obsługa techniczna (helpsvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Dostęp do urządzeń interfejsu HID (HidServ) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: HTTP SSL (HTTPFilter) - C:\WINDOWS\System32\svchost.exe -k HTTPFilter
O23 - Service: Usługa COM nagrywania dysków CD IMAPI (ImapiService) - C:\WINDOWS\system32\imapi.exe
O23 - Service: Serwer (lanmanserver) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Stacja robocza (lanmanworkstation) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - "C:\Program Files\Common Files\LightScribe\LSSrvc.exe"
O23 - Service: Pomoc TCP/IP NetBIOS (LmHosts) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Posłaniec (Messenger) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: NetMeeting Remote Desktop Sharing (mnmsrvc) - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - C:\WINDOWS\system32\msdtc.exe
O23 - Service: Instalator Windows (MSIServer) - C:\WINDOWS\system32\msiexec.exe /V
O23 - Service: DDE sieci (NetDDE) - C:\WINDOWS\system32\netdde.exe
O23 - Service: DSDM DDE sieci (NetDDEdsdm) - C:\WINDOWS\system32\netdde.exe
O23 - Service: Logowanie do sieci (Netlogon) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Połączenia sieciowe (Netman) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Rozpoznawanie lokalizacji w sieci (NLA) (Nla) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa NT LM Security Support Provider (NtLmSsp) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Magazyn wymienny (NtmsSvc) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Office Source Engine (ose) - "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
O23 - Service: Plug and Play (PlugPlay) - C:\WINDOWS\system32\services.exe
O23 - Service: PnkBstrA - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Usługi IPSEC (PolicyAgent) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Magazyn chroniony (ProtectedStorage) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Menedżer autopołączenia dostępu zdalnego (RasAuto) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Menedżer połączeń usługi Dostęp zdalny (RasMan) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Menedżer sesji pomocy pulpitu zdalnego (RDSessMgr) - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Routing i dostęp zdalny (RemoteAccess) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Lokalizator usługi zdalnego wywołania procedury (RPC) (RpcLocator) - C:\WINDOWS\system32\locator.exe
O23 - Service: Zdalne wywoływanie procedur (RPC) (RpcSs) - C:\WINDOWS\system32\svchost -k rpcss
O23 - Service: QoS RSVP (RSVP) - C:\WINDOWS\system32\rsvp.exe
O23 - Service: Menedżer kont zabezpieczeń (SamSs) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Karta inteligentna (SCardSvr) - C:\WINDOWS\system32\scardsvr.exe
O23 - Service: Harmonogram zadań (Schedule) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Logowanie pomocnicze (seclogon) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Zawiadomienie o zdarzeniu systemowym (SENS) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Zapora systemu Windows/Udostępnianie połączenia internetowego (SharedAccess) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Wykrywanie sprzętu powłoki (ShellHWDetection) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Sygate Personal Firewall (SmcService) - C:\Program Files\Sygate\SPF\Smc.exe
O23 - Service: Bufor wydruku (Spooler) - C:\WINDOWS\system32\spoolsv.exe
O23 - Service: Usługa przywracania systemu (srservice) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa odnajdywania SSDP (SSDPSRV) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Windows Image Acquisition (WIA) (stisvc) - C:\WINDOWS\system32\svchost.exe -k imgsvc
O23 - Service: MS Software Shadow Copy Provider (SwPrv) - C:\WINDOWS\system32\dllhost.exe /Processid:{06EE5FF5-430C-49ED-ACEB-637782AE22BD}
O23 - Service: Dzienniki wydajności i alerty (SysmonLog) - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Telefonia (TapiSrv) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Usługi terminalowe (TermService) - C:\WINDOWS\System32\svchost -k DComLaunch
O23 - Service: Kompozycje (Themes) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Klient śledzenia łączy rozproszonych (TrkWks) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Windows User Mode Driver Framework (UMWdf) - C:\WINDOWS\system32\wdfmgr.exe
O23 - Service: Host uniwersalnego urządzenia Plug and Play (upnphost) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Zasilacz awaryjny (UPS) (UPS) - C:\WINDOWS\system32\ups.exe
O23 - Service: Kopiowanie woluminów w tle (VSS) - C:\WINDOWS\system32\vssvc.exe
O23 - Service: Usługa Czas systemu Windows (W32Time) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: WebClient - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Instrumentacja zarządzania Windows (winmgmt) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Usługa numeru seryjnego multimediów przenośnych (WmdmPmSN) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Karta wydajności WMI (WmiApSrv) - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Centrum zabezpieczeń (wscsvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Aktualizacje automatyczne (wuauserv) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Konfiguracja zerowej sieci bezprzewodowej (WZCSVC) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Usługa dostarczania sieci (xmlprov) - C:\WINDOWS\System32\svchost.exe -k netsvcs

-- Files created between 2007-03-01 and 2007-04-01 -----------------------------

2007-04-01 12:20:59 17480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys
2007-04-01 12:20:59 0 d-------- C:\Program Files\Hamachi
2007-04-01 12:20:37 13900 --a------ C:\WINDOWS\War3Unin.dat
2007-04-01 12:20:36 2829 --a------ C:\WINDOWS\War3Unin.pif
2007-04-01 12:20:36 126976 --a------ C:\WINDOWS\War3Unin.exe
2007-03-30 17:26:35 0 d-a------ C:\WINDOWS\zts2.exe
2007-03-30 17:26:35 0 d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-03-30 17:26:35 0 d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-03-30 17:26:35 0 d-a------ C:\WINDOWS\rundll16.exe
2007-03-30 17:26:35 0 d-a------ C:\WINDOWS\rundl132.dll
2007-03-30 17:26:35 0 d-a------ C:\WINDOWS\logo1_.exe
2007-03-30 17:26:04 149504 --a------ C:\WINDOWS\REGEDIT.COM
2007-03-29 22:15:44 80 --a------ C:\WINDOWS\gmer_uninstall.cmd<GMER_U~1.CMD>
2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg6n.sys
2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg5n.sys
2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg4n.sys
2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg3n.sys
2007-03-29 21:59:47 60496 --a------ C:\WINDOWS\system32\drivers\Teefer.sys
2007-03-29 21:59:46 21075 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys
2007-03-29 21:59:43 83096 --a------ C:\WINDOWS\system32\SSSensor.dll
2007-03-29 21:59:40 0 d-------- C:\Program Files\Sygate
2007-03-29 21:59:27 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard<WISEIN~1>
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\TASKMGR.COM
2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\T.COM
2007-03-29 19:36:37 149504 --a------ C:\WINDOWS\R.COM
2007-03-29 09:00:12 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-03-29 08:59:55 0 d-------- C:\Program Files\Apple Software Update<APPLES~1>
2007-03-28 21:19:14 0 d-------- C:\Program Files\BrizVideoJoin<BRIZVI~1>
2007-03-28 21:17:23 0 d-------- C:\Program Files\AVI Codec Pack<AVICOD~1>
2007-03-28 21:02:56 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Real Alternative<REALAL~1>
2007-03-28 21:02:37 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1>
2007-03-28 21:01:51 0 d-------- C:\Program Files\AC3Filter<AC3FIL~1>
2007-03-28 21:01:30 0 d-------- C:\Program Files\DivX
2007-03-28 20:59:14 0 d-------- C:\Program Files\MarBit
2007-03-28 16:14:32 0 d-------- C:\Program Files\Common Files\LightScribe<LIGHTS~1>
2007-03-28 16:12:47 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll
2007-03-28 16:12:47 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2007-03-28 16:12:43 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll
2007-03-28 16:12:43 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll
2007-03-28 16:12:43 476320 -----n--- C:\WINDOWS\system32\ImagXpr7.dll
2007-03-28 16:12:43 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll
2007-03-28 16:12:42 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE>
2007-03-28 16:12:38 0 d-------- C:\Program Files\Common Files\Ahead
2007-03-28 16:12:36 0 d-------- C:\Program Files\Ahead
2007-03-27 20:37:04 63040 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2007-03-27 19:09:36 0 d-------- C:\Program Files\America's Army Server Manager<AMERIC~1>
2007-03-27 10:37:45 0 d-------- C:\Program Files\Kaspersky Lab<KASPER~1>
2007-03-27 10:37:43 60704 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-03-27 10:37:43 3953184 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-03-26 19:27:02 22584 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-03-26 16:57:55 99904 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2007-03-26 16:57:46 0 d-------- C:\WINDOWS\system32\LogFiles
2007-03-26 16:47:45 0 d-------- C:\Program Files\America's Army<AMERIC~2>
2007-03-26 16:44:45 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL>
2007-03-26 16:44:45 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL>
2007-03-22 15:40:20 17920 --a------ C:\WINDOWS\system32\mdimon.dll
2007-03-22 15:39:10 0 d-------- C:\WINDOWS\SHELLNEW
2007-03-22 15:30:28 0 d-------- C:\Program Files\Common Files\Adobe
2007-03-22 01:09:06 0 d-------- C:\Program Files\Common Files\Skype
2007-03-22 01:08:52 0 d-------- C:\Program Files\Skype
2007-03-21 09:31:49 5632 --a------ C:\WINDOWS\system32\ptpusb.dll
2007-03-21 09:31:47 159232 --a------ C:\WINDOWS\system32\ptpusd.dll
2007-03-21 09:31:46 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-03-20 21:36:26 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL>
2007-03-20 20:41:50 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-03-20 15:38:13 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe
2007-03-20 15:38:13 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-03-20 15:38:13 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-03-20 15:38:13 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-03-20 15:38:12 129784 -----n--- C:\WINDOWS\system32\pxafs.dll
2007-03-20 15:37:44 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2>
2007-03-20 15:36:11 0 d-------- C:\Program Files\Winamp
2007-03-20 15:29:05 3490 --a------ C:\WINDOWS\mozver.dat
2007-03-20 15:28:56 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~2>
2007-03-19 22:24:28 0 --a------ C:\WINDOWS\nsreg.dat
2007-03-19 22:24:20 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-03-19 00:20:15 49152 --a------ C:\WINDOWS\system32\ChCfg.exe
2007-03-19 00:20:14 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-03-19 00:20:12 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-03-19 00:20:10 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-03-19 00:20:04 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-03-19 00:20:02 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-03-19 00:20:00 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-03-19 00:19:59 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-03-19 00:19:57 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-03-19 00:19:56 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-03-19 00:19:54 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-03-19 00:19:51 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-03-19 00:19:47 4027456 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys
2007-03-19 00:19:45 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-03-19 00:19:45 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-03-19 00:19:45 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-03-19 00:19:39 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe
2007-03-19 00:19:39 0 d-------- C:\Program Files\Realtek AC97<REALTE~2>
2007-03-19 00:19:37 577536 --a------ C:\WINDOWS\soundman.exe
2007-03-19 00:19:36 147456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll
2007-03-19 00:19:36 315392 --a------ C:\WINDOWS\alcupd.exe
2007-03-19 00:19:36 217088 --a------ C:\WINDOWS\Alcrmv.exe
2007-03-18 22:58:20 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-03-18 22:58:20 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1>
2007-03-18 22:58:18 0 d--h----- C:\WINDOWS\$hf_mig$
2007-03-18 22:46:47 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\Realtek Sound Manager<REALTE~1>
2007-03-18 22:41:28 0 d-------- C:\Program Files\AvRack
2007-03-18 20:28:56 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1>
2007-03-18 20:26:43 32768 --a------ C:\WINDOWS\system32\UnAudioNT.dll<UNAUDI~1.DLL>
2007-03-18 20:26:43 0 d-------- C:\Program Files\VIA Technologies, Inc<VIATEC~1>
2007-03-18 20:26:39 306688 --a------ C:\WINDOWS\IsUninst.exe
2007-03-18 19:41:56 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-03-18 19:40:48 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-03-18 19:40:26 701440 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-03-18 19:40:26 516768 --a------ C:\WINDOWS\system32\ativvaxx.dll
2007-03-18 19:40:26 1888992 --a------ C:\WINDOWS\system32\ati3duag.dll
2007-03-18 19:40:26 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll
2007-03-18 19:40:25 201728 --a------ C:\WINDOWS\system32\ati2dvag.dll
2007-03-18 19:40:25 229376 --a------ C:\WINDOWS\system32\ati2cqag.dll
2007-03-18 19:40:06 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS
2007-03-18 19:40:02 32768 --a------ C:\WINDOWS\system32\drivers\sisnic.sys
2007-03-18 19:39:56 77312 --a------ C:\WINDOWS\system32\usbui.dll
2007-03-18 19:38:45 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1>
2007-03-18 19:38:44 0 d-------- C:\Program Files\Common Files\ODBC
2007-03-18 19:38:41 0 dr------- C:\Program Files<PROGRA~1>
2007-03-18 19:38:41 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-03-18 19:38:37 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-03-18 19:38:34 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-03-18 19:38:34 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdycl.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdro.dll
2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdhu.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll
2007-03-18 19:38:29 7168 --a------ C:\WINDOWS\system32\kbdcz.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcr.dll
2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL
2007-03-18 19:38:28 13312 --a------ C:\WINDOWS\system32\irclass.dll
2007-03-18 19:38:28 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-03-18 19:38:27 24661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-03-18 19:38:27 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-03-18 19:38:27 85532 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-03-18 19:38:27 9168 --a------ C:\WINDOWS\system\VER.DLL
2007-03-18 19:38:27 19200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-03-18 19:38:27 5120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-03-18 19:38:26 24064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-03-18 19:38:26 83456 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-03-18 19:38:26 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-03-18 19:38:26 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-03-18 19:38:26 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-03-18 19:38:26 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-03-18 19:38:26 70096 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-03-18 19:38:25 15360 --a------ C:\WINDOWS\TASKMAN.EXE
2007-03-18 19:38:25 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-03-18 19:38:25 8704 --a------ C:\WINDOWS\system32\batt.dll
2007-03-18 19:38:25 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2007-03-18 19:38:24 70144 --a------ C:\WINDOWS\NOTEPAD.EXE
2007-03-18 19:38:23 75776 --a------ C:\WINDOWS\system32\storprop.dll
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot2
2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot
2007-03-18 19:37:37 0 d-------- C:\Documents and Settings<DOCUME~1>
2007-03-18 19:37:36 0 d--hs---- C:\System Volume Information<SYSTEM~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\WinSxS
2007-03-18 19:29:37 0 dr------- C:\WINDOWS\Web
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\twain_32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wins
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wbem
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\usmt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\spool
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ShellExt
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\Setup
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ras
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\oobe
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\npp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\inetsrv
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\IME
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\icsxml
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ias
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\export
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\etc
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\disdn
2007-03-18 19:29:37 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\dhcp
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3com_dmi
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3076
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\2052
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1054
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1045
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1042
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1041
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1037
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1033
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1031
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1028
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1025
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\security
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Resources<RESOUR~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\repair
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\PeerNet
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\pchealth
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\mui
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msapps
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msagent
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Media
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\java
2007-03-18 19:29:37 0 d--h----- C:\WINDOWS\inf
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\ime
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Help
2007-03-18 19:29:37 0 dr--s---- C:\WINDOWS\Fonts
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Debug
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Cursors
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1>
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Config
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\AppPatch
2007-03-18 19:29:37 0 d-------- C:\WINDOWS\addins
2007-03-18 19:08:28 32768 --a------ C:\WINDOWS\system32\WooDial2000.dll<WOODIA~1.DLL>
2007-03-18 19:06:22 5606 --a------ C:\WINDOWS\system32\stci.dll
2007-03-18 19:06:22 5280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys
2007-03-18 19:06:22 70688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys
2007-03-18 19:06:22 3968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys
2007-03-18 19:06:21 53600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys
2007-03-18 19:06:20 0 d-------- C:\Program Files\Thomson
2007-03-18 19:06:19 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-03-18 19:06:17 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2007-03-18 19:05:15 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1>
2007-03-18 18:53:40 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2007-03-18 18:53:39 0 d-------- C:\WINDOWS\Prefetch
2007-03-18 18:50:11 0 d-------- C:\WINDOWS\system32\xircom
2007-03-18 18:50:11 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1>
2007-03-18 18:50:02 0 -rahs---- C:\MSDOS.SYS
2007-03-18 18:50:02 0 -rahs---- C:\IO.SYS
2007-03-18 18:50:02 0 --a------ C:\CONFIG.SYS
2007-03-18 18:50:02 0 -----n--- C:\AUTOEXEC.BAT
2007-03-18 18:49:44 112128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-03-18 18:48:53 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1>
2007-03-18 18:48:53 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1>
2007-03-18 18:48:41 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3>
2007-03-18 18:48:38 0 d-------- C:\Program Files\Usługi online<USUGIO~1>
2007-03-18 18:48:21 0 d-------- C:\WINDOWS\system32\DirectX
2007-03-18 18:48:01 11264 --a------ C:\WINDOWS\system32\atrace.dll
2007-03-18 18:47:53 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-03-18 18:47:52 67584 --a------ C:\WINDOWS\system32\acctres.dll
2007-03-18 18:47:49 0 d---s---- C:\WINDOWS\Tasks
2007-03-18 18:47:49 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-03-18 18:47:48 0 d-------- C:\Program Files\Common Files\MSSoap
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\system32\Macromed
2007-03-18 18:47:44 0 d-------- C:\WINDOWS\srchasst
2007-03-18 18:47:41 173536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-03-18 18:47:41 128280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-03-18 18:47:41 6656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-03-18 18:47:41 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-03-18 18:47:41 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-03-18 18:47:40 41240 --a------ C:\WINDOWS\system32\wups.dll
2007-03-18 18:47:40 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-03-18 18:47:40 125208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-03-18 18:47:40 466200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-03-18 18:47:40 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-03-18 18:47:40 382464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-03-18 18:47:40 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2007-03-18 18:47:40 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2007-03-18 18:47:36 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2007-03-18 18:47:33 45568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-03-18 18:47:33 29696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-03-18 18:47:33 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-03-18 18:47:32 43520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-03-18 18:47:30 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-03-18 18:47:30 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-03-18 18:47:29 171008 --a------ C:\WINDOWS\system32\srsvc.dll
2007-03-18 18:47:29 240128 --a------ C:\WINDOWS\system32\srrstr.dll
2007-03-18 18:47:29 67584 --a------ C:\WINDOWS\system32\srclient.dll
2007-03-18 18:47:29 0 d-------- C:\WINDOWS\system32\Restore
2007-03-18 18:47:29 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-03-18 18:47:29 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2007-03-18 18:47:28 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-03-18 18:47:28 69632 --a------ C:\WINDOWS\system32\msconf.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-03-18 18:47:28 34560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-03-18 18:47:28 81920 --a------ C:\WINDOWS\system32\ils.dll
2007-03-18 18:47:25 105984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-03-18 18:47:25 252928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-03-18 18:47:24 49664 --a------ C:\WINDOWS\system32\inetres.dll
2007-03-18 18:47:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-03-18 18:47:22 192000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-03-18 18:47:22 12288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\mstask.dll
2007-03-18 18:47:22 86016 --a------ C:\WINDOWS\system32\isign32.dll
2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-03-18 18:47:22 65536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-03-18 18:47:22 73728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-03-18 18:47:13 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2007-03-18 18:46:58 0 d-------- C:\WINDOWS\Registration<REGIST~1>
2007-03-18 18:46:18 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-03-18 18:46:15 5632 --a------ C:\WINDOWS\system32\write.exe
2007-03-18 18:46:15 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2007-03-18 18:46:06 139264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-03-18 18:46:06 44544 --a------ C:\WINDOWS\system32\hticons.dll
2007-03-18 18:46:05 35328 --a------ C:\WINDOWS\system32\winchat.exe
2007-03-18 18:46:05 73216 --a------ C:\WINDOWS\system32\avwav.dll
2007-03-18 18:46:05 231424 --a------ C:\WINDOWS\system32\avtapi.dll
2007-03-18 18:46:05 16384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-03-18 18:45:58 119808 --a------ C:\WINDOWS\system32\winmine.exe
2007-03-18 18:45:58 57344 --a------ C:\WINDOWS\system32\sol.exe
2007-03-18 18:45:58 605696 --a------ C:\WINDOWS\system32\getuname.dll
2007-03-18 18:45:58 80896 --a------ C:\WINDOWS\system32\charmap.exe
2007-03-18 18:45:58 115200 --a------ C:\WINDOWS\system32\calc.exe
2007-03-18 18:45:57 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-03-18 18:45:57 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-03-18 18:45:57 16384 --a------ C:\WINDOWS\system32\tskill.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tscon.exe
2007-03-18 18:45:57 9728 --a------ C:\WINDOWS\system32\reset.exe
2007-03-18 18:45:57 128000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-03-18 18:45:57 55808 --a------ C:\WINDOWS\system32\freecell.exe
2007-03-18 18:45:56 15360 --a------ C:\WINDOWS\system32\shadow.exe
2007-03-18 18:45:56 16384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-03-18 18:45:56 33792 --a------ C:\WINDOWS\system32\regini.exe
2007-03-18 18:45:56 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-03-18 18:45:56 17408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\msg.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\logoff.exe
2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-03-18 18:45:55 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-03-18 18:45:55 4096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-03-18 18:45:55 20480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-03-18 18:45:55 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-03-18 18:45:55 97792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-03-18 18:45:55 25600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-03-18 18:45:54 54272 --a------ C:\WINDOWS\system32\stclient.dll
2007-03-18 18:45:54 147456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-03-18 18:45:49 132608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-03-18 18:45:49 124928 --a------ C:\WINDOWS\system32\mplay32.exe
2007-03-18 18:45:49 351744 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-03-18 18:45:49 187904 --a------ C:\WINDOWS\system32\accwiz.exe
2007-03-18 18:45:48 539136 --a------ C:\WINDOWS\system32\spider.exe
2007-03-18 18:45:48 345088 --a------ C:\WINDOWS\system32\mspaint.exe
2007-03-18 18:45:48 103424 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-03-18 18:45:48 0 d-------- C:\Program Files\Windows NT<WINDOW~1>
2007-03-18 18:45:47 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-03-18 18:45:47 60928 --a------ C:\WINDOWS\system32\remotepg.dll
2007-03-18 18:45:47 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-03-18 18:45:47 655360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-03-18 18:45:47 408576 --a------ C:\WINDOWS\system32\mstsc.exe
2007-03-18 18:45:47 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-03-18 18:45:47 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-03-18 18:45:47 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-03-18 18:45:46 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-03-18 18:45:46 296448 --a------ C:\WINDOWS\system32\termsrv.dll
2007-03-18 18:45:46 141824 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-03-18 18:45:46 67072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-03-18 18:45:46 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-03-18 18:45:46 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-03-18 18:45:46 62464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-03-18 18:45:46 147968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-03-18 18:45:46 20992 --a------ C:\WINDOWS\system32\qprocess.exe
2007-03-18 18:45:46 11264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-03-18 18:45:45 11776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-03-18 18:45:45 91136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-03-18 18:45:45 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-03-18 18:45:45 956416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-03-18 18:45:45 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-03-18 18:45:45 58880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-03-18 18:45:45 0 d-------- C:\WINDOWS\system32\MsDtc
2007-03-18 18:45:45 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-03-18 18:45:44 6144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-03-18 18:45:44 0 d-------- C:\WINDOWS\system32\Com
2007-03-18 18:45:44 60416 --a------ C:\WINDOWS\system32\colbact.dll
2007-03-18 18:45:44 85504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-03-18 18:45:43 540160 --a------ C:\WINDOWS\system32\comuid.dll
2007-03-18 18:45:43 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-03-18 18:45:43 110080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-03-18 18:45:43 625152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-03-18 18:45:43 225792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-03-18 18:45:42 498688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-03-18 18:45:38 56320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-03-18 18:45:38 17920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-03-18 18:45:38 58880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-03-18 18:45:38 187904 --a------ C:\WINDOWS\system32\cmprops.dll
2007-03-18 18:45:32 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-03-18 18:45:32 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys

-- Find3M Report ---------------------------------------------------------------

2007-04-01 18:56:24 355486 --a------ C:\WINDOWS\system32\perfh015.dat
2007-04-01 18:56:24 49492 --a------ C:\WINDOWS\system32\perfc015.dat
2007-04-01 14:01:59 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Hamachi
2007-04-01 10:57:04 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\teamspeak2<TEAMSP~1>
2007-03-31 22:07:54 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Skype
2007-03-29 20:54:52 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\uTorrent
2007-03-29 20:08:06 0 d---s---- C:\Documents and Settings\Konrad\Dane aplikacji\Microsoft<MICROS~1>
2007-03-29 09:02:26 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Apple Computer<APPLEC~1>
2007-03-28 21:16:46 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Media Player Classic<MEDIAP~1>
2007-03-28 21:02:37 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Real
2007-03-22 15:31:15 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\AdobeUM
2007-03-22 15:30:47 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Adobe
2007-03-20 15:29:27 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Mozilla
2007-03-20 15:29:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Thunderbird<THUNDE~1>
2007-03-19 22:24:33 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Talkback
2007-03-18 23:29:11 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Macromedia<MACROM~1>
2007-03-18 19:38:16 62 --ahs---- C:\Documents and Settings\Konrad\Dane aplikacji\desktop.ini
2007-03-18 19:04:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Identities<IDENTI~1>
2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe

-- Registry Dump ---------------------------------------------------------------

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"WooCnxMon"="C:\\PROGRA~1\\NEOSTR~1\\CnxMon.exe"
"SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon"
"WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe"
"WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe"
"SoundMan"="SOUNDMAN.EXE"
"kis"="\"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe\""
@=""
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"="C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0

-- End of ComboScan: finished at 2007-04-01 at 19:05:27 ------------------------

proszę o sprawdzenie loga

Proszę o sprawdzenie loga

Kto jest na forum