driven Opublikowano 29 Września 2010 Zgłoś Udostępnij Opublikowano 29 Września 2010 witam. Skanów jakichś specjalnych nie robiłem, po prostu zajrzałem w msconfig i zastałem wpis AMVO w zakładce uruchamianie. Do tego dwa razy ten sam wpis 0FA4F9.exe z jakby losową nazwą zagnieżdżone w system32. Zrobiłem logi z OTL. GMER się wiesza, więc uruchomiłem w trybie awaryjnym ale niczego nie znalazł i log wynikowy był pusty, dlatego nie zamieszczam. Do tego jeszcze zainfekowało mi pendrive. OTL logfile created on: 2010-09-29 15:11:30 - Run 1 OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\Testowe\Pulpit Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1 022,00 Mb Total Physical Memory | 714,00 Mb Available Physical Memory | 70,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 89,00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 55,66 Gb Total Space | 37,36 Gb Free Space | 67,12% Space Free | Partition Type: NTFS Drive D: | 48,83 Gb Total Space | 2,10 Gb Free Space | 4,30% Space Free | Partition Type: NTFS Drive E: | 48,89 Gb Total Space | 10,28 Gb Free Space | 21,02% Space Free | Partition Type: NTFS Drive F: | 495,22 Mb Total Space | 246,85 Mb Free Space | 49,85% Space Free | Partition Type: FAT G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: WIN-7B18EF599D2 Current User Name: Testowe Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-09-29 15:05:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Testowe\Pulpit\OTL.exe PRC - [2010-07-05 20:03:29 | 001,406,935 | RHS- | M] () -- C:\WINDOWS\system32\3600FB\0FA4F9.EXE PRC - [2006-12-23 18:05:20 | 000,143,360 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe PRC - [2006-12-23 18:04:42 | 000,905,216 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe PRC - [2006-09-25 09:12:20 | 000,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe PRC - [2006-03-02 14:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2004-04-13 06:07:18 | 000,069,632 | ---- | M] (InstallShield Software Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe ========== Modules (SafeList) ========== MOD - [2010-09-29 15:05:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Testowe\Pulpit\OTL.exe MOD - [2010-09-29 14:47:52 | 000,054,784 | RHS- | M] () -- C:\WINDOWS\system32\amvo0.dll MOD - [2006-05-03 22:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll MOD - [2006-03-02 14:00:00 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll MOD - [2006-03-02 14:00:00 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx ========== Win32 Services (SafeList) ========== SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ) SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt) SRV - [2008-04-07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | Unknown | Running] -- -- (zxsderfbukjfyshlhdfrstdzh) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys -- (hwdatacard) DRV - [2009-03-31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2009-03-20 10:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2009-03-20 10:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM) DRV - [2009-03-20 10:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) DRV - [2007-09-17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2006-12-17 04:50:29 | 001,918,464 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2004-10-27 15:21:36 | 000,138,240 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus) DRV - [2004-10-27 15:21:30 | 000,145,920 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService) DRV - [2004-08-03 22:32:32 | 000,084,480 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ac97via.sys -- (VIAudio) Kontroler VIA AC'97 Audio (WDM) DRV - [2001-08-17 22:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\S-1-5-21-436374069-1580436667-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2006-03-02 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O4 - HKLM..\Run: [0FA4F9] C:\WINDOWS\system32\3600FB\0FA4F9.EXE () O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe () O4 - HKLM..\Run: [iSUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation) O4 - HKLM..\Run: [iSUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NVMixerTray] C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe File not found O4 - HKU\S-1-5-21-436374069-1580436667-839522115-1005..\Run: [amva] C:\WINDOWS\system32\amvo.exe () O4 - HKU\S-1-5-21-436374069-1580436667-839522115-1005..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) O4 - Startup: C:\Documents and Settings\Testowe\Menu Start\Programy\Autostart\0FA4F9.lnk = C:\WINDOWS\system32\3600FB\0FA4F9.EXE () O4 - Startup: C:\Documents and Settings\win xp\Menu Start\Programy\Autostart\0FA4F9.lnk = C:\WINDOWS\system32\3600FB\0FA4F9.EXE () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-436374069-1580436667-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-05-06 17:20:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010-09-29 15:11:19 | 000,000,505 | RHS- | M] () - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-09-29 15:11:19 | 000,000,505 | RHS- | M] () - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-09-29 15:11:19 | 000,000,505 | RHS- | M] () - E:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-09-29 15:11:20 | 000,000,505 | RHS- | M] () - F:\autorun.inf -- [ FAT ] O33 - MountPoints2\{cdb9e5c5-5930-11df-9563-806d6172696f}\Shell\AutoRun\command - "" = C:\i.cmd -- [2008-02-02 18:16:20 | 000,104,644 | RHS- | M] () O33 - MountPoints2\{cdb9e5c5-5930-11df-9563-806d6172696f}\Shell\explore\Command - "" = C:\i.cmd -- [2008-02-02 18:16:20 | 000,104,644 | RHS- | M] () O33 - MountPoints2\{cdb9e5c5-5930-11df-9563-806d6172696f}\Shell\open\Command - "" = C:\i.cmd -- [2008-02-02 18:16:20 | 000,104,644 | RHS- | M] () O33 - MountPoints2\{cdb9e5c6-5930-11df-9563-806d6172696f}\Shell\AutoRun\command - "" = D:\i.cmd -- [2008-02-02 18:16:20 | 000,104,644 | RHS- | M] () O33 - MountPoints2\{cdb9e5c6-5930-11df-9563-806d6172696f}\Shell\explore\Command - "" = D:\i.cmd -- [2008-02-02 18:16:20 | 000,104,644 | RHS- | M] () O33 - MountPoints2\{cdb9e5c6-5930-11df-9563-806d6172696f}\Shell\open\Command - "" = D:\i.cmd -- [2008-02-02 18:16:20 | 000,104,644 | RHS- | M] () O33 - MountPoints2\{cdb9e5c7-5930-11df-9563-806d6172696f}\Shell\AutoRun\command - "" = E:\i.cmd -- [2008-02-02 18:16:20 | 000,104,644 | RHS- | M] () O33 - MountPoints2\{cdb9e5c7-5930-11df-9563-806d6172696f}\Shell\explore\Command - "" = E:\i.cmd -- [2008-02-02 18:16:20 | 000,104,644 | RHS- | M] () O33 - MountPoints2\{cdb9e5c7-5930-11df-9563-806d6172696f}\Shell\open\Command - "" = E:\i.cmd -- [2008-02-02 18:16:20 | 000,104,644 | RHS- | M] () O33 - MountPoints2\{f04b0f4c-cbca-11df-95db-9beb8a3c4d1c}\Shell - "" = AutoRun O33 - MountPoints2\{f04b0f4c-cbca-11df-95db-9beb8a3c4d1c}\Shell\1\Command - "" = F:\Recycle.exe -- [2010-09-29 15:10:40 | 001,406,935 | RHS- | M] () O33 - MountPoints2\{f04b0f4c-cbca-11df-95db-9beb8a3c4d1c}\Shell\2\Command - "" = F:\Recycle.exe -- [2010-09-29 15:10:40 | 001,406,935 | RHS- | M] () O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010-09-29 15:10:57 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Testowe\Pulpit\OTL.exe [2010-09-29 14:49:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2010-09-29 14:46:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Ustawienia lokalne\Dane aplikacji\Ahead [2010-09-29 14:46:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Ustawienia lokalne\Dane aplikacji\ATI [2010-09-29 14:46:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Dane aplikacji\ATI [2010-09-29 14:46:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Dane aplikacji\Identities [2010-09-29 14:46:41 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Moje dokumenty\Moje obrazy [2010-09-29 14:46:41 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Moje dokumenty\Moja muzyka [2010-09-29 14:46:23 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Testowe\Dane aplikacji\Microsoft [2010-09-29 14:46:23 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Testowe\Cookies [2010-09-29 14:46:23 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Testowe\SendTo [2010-09-29 14:46:23 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Testowe\Recent [2010-09-29 14:46:23 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Testowe\Dane aplikacji [2010-09-29 14:46:23 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Ulubione [2010-09-29 14:46:23 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Moje dokumenty [2010-09-29 14:46:23 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Menu Start [2010-09-29 14:46:23 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Testowe\Ustawienia lokalne [2010-09-29 14:46:23 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Testowe\Szablony [2010-09-29 14:46:23 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Testowe\PrintHood [2010-09-29 14:46:23 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Testowe\NetHood [2010-09-29 14:46:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Pulpit [2010-09-29 14:46:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-08-30 19:36:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2008-10-27 10:38:54 | 000,095,056 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll [2008-10-27 10:37:34 | 001,692,496 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll [2008-10-27 10:36:58 | 000,526,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DXSETUP.exe [2004-11-24 21:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010-09-29 15:12:10 | 000,000,505 | RHS- | M] () -- C:\autorun.inf [2010-09-29 15:11:01 | 000,524,288 | -H-- | M] () -- C:\Documents and Settings\Testowe\NTUSER.DAT [2010-09-29 15:05:48 | 000,293,376 | ---- | M] () -- C:\Documents and Settings\Testowe\Pulpit\bj49e58k.exe [2010-09-29 15:05:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Testowe\Pulpit\OTL.exe [2010-09-29 15:01:51 | 000,000,677 | ---- | M] () -- C:\Documents and Settings\Testowe\Menu Start\Programy\Autostart\0FA4F9.lnk [2010-09-29 14:47:52 | 000,054,784 | RHS- | M] () -- C:\WINDOWS\System32\amvo0.dll [2010-09-29 14:46:53 | 000,012,328 | ---- | M] () -- C:\Documents and Settings\Testowe\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-09-29 14:46:24 | 000,000,020 | -HS- | M] () -- C:\Documents and Settings\Testowe\ntuser.ini [2010-09-29 14:46:15 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-09-29 14:46:14 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-09-29 14:30:27 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-08-31 08:32:25 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-08-30 19:30:05 | 000,000,151 | ---- | M] () -- C:\WINDOWS\PhotoSnapViewer.INI [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2010-09-29 15:11:00 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\Testowe\Pulpit\bj49e58k.exe [2010-09-29 14:46:51 | 000,000,677 | ---- | C] () -- C:\Documents and Settings\Testowe\Menu Start\Programy\Autostart\0FA4F9.lnk [2010-09-29 14:46:24 | 000,000,020 | -HS- | C] () -- C:\Documents and Settings\Testowe\ntuser.ini [2010-09-29 14:46:23 | 000,524,288 | -H-- | C] () -- C:\Documents and Settings\Testowe\NTUSER.DAT [2010-09-29 14:46:23 | 000,020,480 | -H-- | C] () -- C:\Documents and Settings\Testowe\NtUser.dat.LOG [2010-08-30 19:30:05 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2010-08-27 15:39:36 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-08-27 08:14:01 | 000,000,587 | ---- | C] () -- C:\WINDOWS\ClockTraySkins.ini [2010-07-24 15:42:07 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI [2010-07-23 16:07:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SETUP32.INI [2010-07-07 14:09:18 | 000,054,784 | RHS- | C] () -- C:\WINDOWS\System32\amvo0.dll [2010-06-08 12:02:38 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2010-06-08 12:02:38 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2010-05-15 15:23:24 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt [2010-05-15 15:22:36 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2008-12-19 17:15:58 | 004,338,246 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2008-12-17 19:41:18 | 000,884,237 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll [2008-12-17 19:22:58 | 000,093,184 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2008-12-17 19:22:48 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-12-17 19:17:34 | 000,239,247 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll [2008-12-17 18:59:54 | 000,560,802 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2008-12-11 13:27:02 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-10-27 10:38:20 | 013,265,184 | ---- | C] () -- C:\Program Files\dxnt.cab [2008-10-27 10:38:20 | 004,163,646 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86_Archive.cab [2008-10-27 10:38:20 | 001,907,944 | ---- | C] () -- C:\Program Files\Nov2008_d3dx9_40_x64.cab [2008-10-27 10:38:20 | 001,803,074 | ---- | C] () -- C:\Program Files\Nov2007_d3dx9_36_x64.cab [2008-10-27 10:38:18 | 001,801,176 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x64.cab [2008-10-27 10:38:18 | 001,795,100 | ---- | C] () -- C:\Program Files\Aug2008_d3dx9_39_x64.cab [2008-10-27 10:38:18 | 001,793,624 | ---- | C] () -- C:\Program Files\JUN2008_d3dx9_38_x64.cab [2008-10-27 10:38:18 | 001,770,878 | ---- | C] () -- C:\Program Files\Mar2008_d3dx9_37_x64.cab [2008-10-27 10:38:18 | 001,710,376 | ---- | C] () -- C:\Program Files\Nov2007_d3dx9_36_x86.cab [2008-10-27 10:38:18 | 001,709,168 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x86.cab [2008-10-27 10:38:18 | 001,608,374 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x64.cab [2008-10-27 10:38:16 | 001,608,790 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x64.cab [2008-10-27 10:38:16 | 001,608,302 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x86.cab [2008-10-27 10:38:16 | 001,607,055 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x86.cab [2008-10-27 10:38:16 | 001,575,392 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x86.cab [2008-10-27 10:38:16 | 001,572,170 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x64.cab [2008-10-27 10:38:14 | 001,551,228 | ---- | C] () -- C:\Program Files\Nov2008_d3dx9_40_x86.cab [2008-10-27 10:38:14 | 001,465,688 | ---- | C] () -- C:\Program Files\Aug2008_d3dx9_39_x86.cab [2008-10-27 10:38:14 | 001,464,894 | ---- | C] () -- C:\Program Files\JUN2008_d3dx9_38_x86.cab [2008-10-27 10:38:14 | 001,413,918 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x64.cab [2008-10-27 10:38:14 | 001,363,812 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x64.cab [2008-10-27 10:38:14 | 001,358,992 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x64.cab [2008-10-27 10:38:12 | 001,444,298 | ---- | C] () -- C:\Program Files\Mar2008_d3dx9_37_x86.cab [2008-10-27 10:38:12 | 001,398,846 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x64.cab [2008-10-27 10:38:12 | 001,351,558 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x64.cab [2008-10-27 10:38:10 | 001,348,370 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x64.cab [2008-10-27 10:38:10 | 001,337,018 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x64.cab [2008-10-27 10:38:10 | 001,248,515 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x64.cab [2008-10-27 10:38:10 | 001,156,507 | ---- | C] () -- C:\Program Files\BDANT.cab [2008-10-27 10:38:10 | 001,128,233 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x86.cab [2008-10-27 10:38:10 | 001,116,237 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x86.cab [2008-10-27 10:38:10 | 001,080,472 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x86.cab [2008-10-27 10:38:08 | 001,085,736 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x86.cab [2008-10-27 10:38:08 | 001,079,978 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x86.cab [2008-10-27 10:38:08 | 001,078,660 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x86.cab [2008-10-27 10:38:08 | 001,065,941 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x86.cab [2008-10-27 10:38:08 | 001,014,241 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x86.cab [2008-10-27 10:38:08 | 000,995,154 | ---- | C] () -- C:\Program Files\Nov2008_d3dx10_40_x64.cab [2008-10-27 10:38:08 | 000,122,810 | ---- | C] () -- C:\Program Files\Nov2008_XACT_x64.cab [2008-10-27 10:38:08 | 000,097,833 | ---- | C] () -- C:\Program Files\APR2007_xinput_x64.cab [2008-10-27 10:38:08 | 000,094,750 | ---- | C] () -- C:\Program Files\Mar2008_XACT_x86.cab [2008-10-27 10:38:04 | 000,976,164 | ---- | C] () -- C:\Program Files\BDAXP.cab [2008-10-27 10:38:04 | 000,966,445 | ---- | C] () -- C:\Program Files\Nov2008_d3dx10_40_x86.cab [2008-10-27 10:38:04 | 000,917,446 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86.cab [2008-10-27 10:38:04 | 000,868,844 | ---- | C] () -- C:\Program Files\JUN2008_d3dx10_38_x64.cab [2008-10-27 10:38:04 | 000,868,628 | ---- | C] () -- C:\Program Files\Aug2008_d3dx10_39_x64.cab [2008-10-27 10:38:04 | 000,865,616 | ---- | C] () -- C:\Program Files\Nov2007_d3dx10_36_x64.cab [2008-10-27 10:38:04 | 000,853,302 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x64.cab [2008-10-27 10:38:04 | 000,850,935 | ---- | C] () -- C:\Program Files\JUN2008_d3dx10_38_x86.cab [2008-10-27 10:38:04 | 000,096,053 | ---- | C] () -- C:\Program Files\dxupdate.cab [2008-10-27 10:38:04 | 000,094,144 | ---- | C] () -- C:\Program Files\JUN2008_XACT_x86.cab [2008-10-27 10:38:04 | 000,055,538 | ---- | C] () -- C:\Program Files\Nov2008_X3DAudio_x64.cab [2008-10-27 10:38:04 | 000,045,464 | ---- | C] () -- C:\Program Files\dxdllreg_x86.cab [2008-10-27 10:38:02 | 000,850,183 | ---- | C] () -- C:\Program Files\Aug2008_d3dx10_39_x86.cab [2008-10-27 10:38:02 | 000,845,900 | ---- | C] () -- C:\Program Files\Mar2008_d3dx10_37_x64.cab [2008-10-27 10:38:02 | 000,819,276 | ---- | C] () -- C:\Program Files\Mar2008_d3dx10_37_x86.cab [2008-10-27 10:38:02 | 000,094,028 | ---- | C] () -- C:\Program Files\Aug2008_XACT_x86.cab [2008-10-27 10:38:02 | 000,093,700 | ---- | C] () -- C:\Program Files\Nov2008_XACT_x86.cab [2008-10-27 10:38:02 | 000,088,158 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x64.cab [2008-10-27 10:38:02 | 000,088,117 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x64.cab [2008-10-27 10:38:02 | 000,087,053 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x64.cab [2008-10-27 10:38:02 | 000,056,170 | ---- | C] () -- C:\Program Files\JUN2008_X3DAudio_x64.cab [2008-10-27 10:38:02 | 000,056,074 | ---- | C] () -- C:\Program Files\Mar2008_X3DAudio_x64.cab [2008-10-27 10:38:02 | 000,054,318 | ---- | C] () -- C:\Program Files\APR2007_xinput_x86.cab [2008-10-27 10:38:02 | 000,047,160 | ---- | C] () -- C:\Program Files\NOV2007_X3DAudio_x64.cab [2008-10-27 10:38:02 | 000,047,074 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x86.cab [2008-10-27 10:38:02 | 000,046,375 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x86.cab [2008-10-27 10:38:02 | 000,022,921 | ---- | C] () -- C:\Program Files\JUN2008_X3DAudio_x86.cab [2008-10-27 10:38:02 | 000,022,867 | ---- | C] () -- C:\Program Files\Nov2008_X3DAudio_x86.cab [2008-10-27 10:38:02 | 000,019,512 | ---- | C] () -- C:\Program Files\NOV2007_X3DAudio_x86.cab [2008-10-27 10:38:00 | 000,804,900 | ---- | C] () -- C:\Program Files\Nov2007_d3dx10_36_x86.cab [2008-10-27 10:38:00 | 000,797,883 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x86.cab [2008-10-27 10:38:00 | 000,700,060 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x64.cab [2008-10-27 10:38:00 | 000,699,628 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x64.cab [2008-10-27 10:38:00 | 000,047,026 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x86.cab [2008-10-27 10:38:00 | 000,022,883 | ---- | C] () -- C:\Program Files\Mar2008_X3DAudio_x86.cab [2008-10-27 10:37:58 | 000,699,488 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x86.cab [2008-10-27 10:37:58 | 000,696,881 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x86.cab [2008-10-27 10:37:58 | 000,272,384 | ---- | C] () -- C:\Program Files\Aug2008_XAudio_x64.cab [2008-10-27 10:37:58 | 000,270,858 | ---- | C] () -- C:\Program Files\Aug2008_XAudio_x86.cab [2008-10-27 10:37:58 | 000,270,644 | ---- | C] () -- C:\Program Files\JUN2008_XAudio_x64.cab [2008-10-27 10:37:54 | 000,274,976 | ---- | C] () -- C:\Program Files\Nov2008_XAudio_x64.cab [2008-10-27 10:37:54 | 000,273,627 | ---- | C] () -- C:\Program Files\Nov2008_XAudio_x86.cab [2008-10-27 10:37:52 | 000,270,040 | ---- | C] () -- C:\Program Files\JUN2008_XAudio_x86.cab [2008-10-27 10:37:52 | 000,252,210 | ---- | C] () -- C:\Program Files\Mar2008_XAudio_x64.cab [2008-10-27 10:37:52 | 000,227,266 | ---- | C] () -- C:\Program Files\Mar2008_XAudio_x86.cab [2008-10-27 10:37:52 | 000,199,112 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x64.cab [2008-10-27 10:37:50 | 000,213,823 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x64.cab [2008-10-27 10:37:50 | 000,198,138 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x64.cab [2008-10-27 10:37:50 | 000,193,491 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x64.cab [2008-10-27 10:37:48 | 000,197,778 | ---- | C] () -- C:\Program Files\NOV2007_XACT_x64.cab [2008-10-27 10:37:48 | 000,196,782 | ---- | C] () -- C:\Program Files\APR2007_XACT_x64.cab [2008-10-27 10:37:48 | 000,195,691 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x64.cab [2008-10-27 10:37:48 | 000,192,736 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x86.cab [2008-10-27 10:37:48 | 000,183,919 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x64.cab [2008-10-27 10:37:48 | 000,183,377 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x64.cab [2008-10-27 10:37:46 | 000,181,801 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x64.cab [2008-10-27 10:37:46 | 000,180,149 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x64.cab [2008-10-27 10:37:46 | 000,179,375 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x64.cab [2008-10-27 10:37:46 | 000,154,028 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x86.cab [2008-10-27 10:37:44 | 000,153,925 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x86.cab [2008-10-27 10:37:44 | 000,152,241 | ---- | C] () -- C:\Program Files\APR2007_XACT_x86.cab [2008-10-27 10:37:42 | 000,149,280 | ---- | C] () -- C:\Program Files\NOV2007_XACT_x86.cab [2008-10-27 10:37:42 | 000,148,999 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x86.cab [2008-10-27 10:37:42 | 000,146,615 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x86.cab [2008-10-27 10:37:42 | 000,139,033 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x86.cab [2008-10-27 10:37:42 | 000,138,251 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x86.cab [2008-10-27 10:37:40 | 000,134,687 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x86.cab [2008-10-27 10:37:40 | 000,133,425 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x86.cab [2008-10-27 10:37:40 | 000,123,352 | ---- | C] () -- C:\Program Files\Mar2008_XACT_x64.cab [2008-10-27 10:37:40 | 000,122,840 | ---- | C] () -- C:\Program Files\Aug2008_XACT_x64.cab [2008-10-27 10:37:40 | 000,122,070 | ---- | C] () -- C:\Program Files\JUN2008_XACT_x64.cab [2008-10-27 10:37:38 | 000,134,119 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x86.cab [2006-03-02 14:00:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2006-03-02 14:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [2004-10-03 19:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll ========== LOP Check ========== [2010-08-27 12:57:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LightScribe [2010-06-08 12:06:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2010-08-07 11:00:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\Codeton [2010-08-07 11:03:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\iPlus [2010-06-08 12:06:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\PC Suite [2010-06-08 12:02:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\Samsung [2010-07-20 12:10:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\Thinstall ========== Purity Check ========== < End of report > OTL Extras logfile created on: 2010-09-29 15:11:30 - Run 1 OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\Testowe\Pulpit Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1 022,00 Mb Total Physical Memory | 714,00 Mb Available Physical Memory | 70,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 89,00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 55,66 Gb Total Space | 37,36 Gb Free Space | 67,12% Space Free | Partition Type: NTFS Drive D: | 48,83 Gb Total Space | 2,10 Gb Free Space | 4,30% Space Free | Partition Type: NTFS Drive E: | 48,89 Gb Total Space | 10,28 Gb Free Space | 21,02% Space Free | Partition Type: NTFS Drive F: | 495,22 Mb Total Space | 246,85 Mb Free Space | 49,85% Space Free | Partition Type: FAT G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: WIN-7B18EF599D2 Current User Name: Testowe Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 1 "FirewallOverride" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server -- File not found "C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server -- File not found ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java 6 Update 20 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder "{685755F8-C74B-4613-8137-C90AF458228D}" = ATI Catalyst Control Center "{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0 "{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A87B11AC-4344-4E5D-8B12-8F471A87DAD9}" = LightScribe 1.4.136.1 "{AC599724-5755-48C1-ABE7-ABB857652930}" = PC Connectivity Solution "{AC76BA86-7AD7-1045-7B44-A90000000001}" = Adobe Reader 9 - Polish "{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer "{B28B351F-1232-46EA-85EF-B8EA91641045}" = Nero 7 Essentials "{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}" = AVIVO Codecs "3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0) "6194C28A8F62DD817EA1B918E6E46E806A21B452" = Pakiet sterowników systemu Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0) "65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Pakiet sterowników systemu Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0) "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI "ATI Display Driver" = ATI Display Driver "Clock Tray Skins_is1" = Clock Tray Skins 3.91 "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń "InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer "InterActual Player" = InterActual Player "Kurka Wodna 2" = Kurka Wodna 2 "Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0 "Moorhuhn 2 V1.1" = Moorhuhn 2 V1.1 "Paseczek_is1" = Informator 1.2.0.413 "QuickTime" = QuickTime "Samsung Mobile Modem Device" = Samsung Mobile Modem Device Software "Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software "SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software "SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software "SAMSUNG USB Mobile Device" = SAMSUNG USB Mobile Device Software "SuperTux_is1" = SuperTux 0.1.3 "Turtix_is1" = Turtix "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format Runtime "XP Codec Pack" = XP Codec Pack ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 2010-06-20 05:07:03 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd bloomooweb.dll, wersja 0.0.0.0, adres błędu 0x0009c600. Error - 2010-06-20 05:18:49 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd bloomooweb.dll, wersja 0.0.0.0, adres błędu 0x0009c600. Error - 2010-06-20 05:55:19 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:27 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:29 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:29 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:29 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:29 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-21 05:48:50 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd bloomooweb.dll, wersja 0.0.0.0, adres błędu 0x0009c600. Error - 2010-07-06 05:44:44 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd winamp.exe, wersja 5.5.7.2792, moduł powodujący błąd winamp.exe, wersja 5.5.7.2792, adres błędu 0x0002f154. [ System Events ] Error - 2010-09-29 08:37:11 | Computer Name = WIN-7B18EF599D2 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd "%1084" podczas próby uruchomienia usługi EventSystem z argumentami "" w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 2010-09-29 08:41:08 | Computer Name = WIN-7B18EF599D2 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd "%1084" podczas próby uruchomienia usługi netman z argumentami "" w celu uruchomienia serwera: {BA126AE5-2166-11D1-B1D0-00805FC1270E} Error - 2010-09-29 08:41:17 | Computer Name = WIN-7B18EF599D2 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd "%1084" podczas próby uruchomienia usługi EventSystem z argumentami "" w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 2010-09-29 08:42:13 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2010-09-29 08:42:13 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DNS zależy od usługi Sterownik protokołu TCP/IP, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2010-09-29 08:42:13 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi AFD, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2010-09-29 08:42:13 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7001 Description = Usługa Usługi IPSEC zależy od usługi Sterownik IPSEC, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2010-09-29 08:42:13 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss StarOpen Tcpip Error - 2010-09-29 08:42:27 | Computer Name = WIN-7B18EF599D2 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd "%1084" podczas próby uruchomienia usługi ntmssvc z argumentami "-Service" w celu uruchomienia serwera: {D61A27C6-8F53-11D0-BFA0-00A024151983} Error - 2010-09-29 08:45:27 | Computer Name = WIN-7B18EF599D2 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd "%1084" podczas próby uruchomienia usługi EventSystem z argumentami "" w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} < End of report > Odnośnik do komentarza
Landuss Opublikowano 29 Września 2010 Zgłoś Udostępnij Opublikowano 29 Września 2010 Przy podpiętym urządzeniu przenośnym, uruchom USBFix z opcji Listing i pokaż wynikowy raport. Odnośnik do komentarza
driven Opublikowano 29 Września 2010 Autor Zgłoś Udostępnij Opublikowano 29 Września 2010 ############################## | UsbFix 7.027 | [Listing] User: Testowe (Administrator) # WIN-7B18EF599D2 [ ] Updated 28/09/10 by El Desaparecido / C_XX Started at 21:44:42 | 29/09/2010 Website: http://www.teamxscript.org Contact: FindyKill.Contact@gmail.com CPU: Intel® Pentium® Dual CPU E2160 @ 1.80GHz CPU 2: Intel® Pentium® Dual CPU E2160 @ 1.80GHz Microsoft Windows XP Home Edition (5.1.2600 32-Bit) # Dodatek Service Pack 2 Internet Explorer 6.0.2900.2180 Windows Firewall: Disabled /!\ RAM -> 1022 Mb C:\ (%systemdrive%) -> Fixed drive # 56 Gb (38 Mb free - 68%) [] # NTFS D:\ -> Fixed drive # 49 Gb (2 Mb free - 4%) [] # NTFS E:\ -> Fixed drive # 49 Gb (10 Mb free - 21%) [ Karolina] # NTFS F:\ -> Removable drive # 495 Mb (321 Mb free - 65%) [secure II] # FAT K:\ -> CD-ROM ################## | Listing | [06/05/2010 - 17:20:28 | A | 0] C:\AUTOEXEC.BAT [29/09/2010 - 21:44:43 | RSH | 505] C:\autorun.inf [06/05/2010 - 17:16:31 | SH | 211] C:\boot.ini [02/03/2006 - 14:00:00 | RASH | 4952] C:\Bootfont.bin [13/06/2010 - 15:24:52 | D ] C:\ChronoShutDown [15/05/2010 - 15:23:43 | A | 74] C:\CMLoader.log [29/09/2010 - 14:46:47 | D ] C:\Config.Msi [06/05/2010 - 17:20:28 | A | 0] C:\CONFIG.SYS [29/09/2010 - 14:46:23 | D ] C:\Documents and Settings [07/08/2010 - 16:04:31 | D ] C:\Gratka [02/02/2008 - 18:16:20 | RSH | 104644] C:\i.cmd [06/05/2010 - 17:20:28 | RASH | 0] C:\IO.SYS [06/05/2010 - 17:20:28 | RASH | 0] C:\MSDOS.SYS [02/03/2006 - 14:00:00 | RASH | 47564] C:\NTDETECT.COM [02/03/2006 - 14:00:00 | RASH | 250624] C:\ntldr [08/05/2010 - 18:39:17 | D ] C:\NVIDIA [29/09/2010 - 18:26:50 | ASH | 1610612736] C:\pagefile.sys [27/08/2010 - 12:43:05 | RD ] C:\Program Files [08/05/2010 - 13:51:52 | SHD ] C:\RECYCLER [06/05/2010 - 17:23:18 | SHD ] C:\System Volume Information [29/09/2010 - 21:44:32 | D ] C:\UsbFix [29/09/2010 - 21:44:48 | A | 1904] C:\UsbFix.txt [29/09/2010 - 14:49:26 | D ] C:\WINDOWS [26/05/2010 - 15:59:46 | A | 69044] D:\1274125231_by_fifekpopierdek_500[1].jpg [26/05/2010 - 15:59:37 | A | 105148] D:\1274559297_by_kraton_500[1].jpg [26/05/2010 - 15:57:37 | A | 46451] D:\1274559679_by_przemm1993_500[1].jpg [26/05/2010 - 15:31:58 | A | 90006] D:\1274724083_by_Pudi122_500[1].jpg [29/09/2010 - 21:44:43 | RSH | 505] D:\autorun.inf [25/08/2010 - 16:54:57 | D ] D:\Bajki [12/12/2007 - 19:02:48 | A | 32240] D:\COLLAGE-001.jpg [08/05/2010 - 13:31:13 | D ] D:\filmy [20/05/2010 - 14:11:31 | A | 3219989] D:\habakuk - rytm serca (feat. junior stress).mp31274357436_[mp3.teledyski.info].mp3 [02/02/2008 - 18:16:20 | RSH | 104644] D:\i.cmd [22/06/2010 - 23:08:19 | RD ] D:\KAROLINKA [28/08/2010 - 12:44:59 | D ] D:\Muzyka [03/10/2008 - 15:10:35 | A | 1289059] D:\na NKKK.jpg [01/01/2007 - 17:23:48 | AH | 57635] D:\nsa1B3.tmp [25/02/2007 - 07:34:00 | AH | 27513] D:\nsa1B6.tmp [21/01/2007 - 05:09:52 | AH | 80989] D:\nsa1EF.tmp [01/01/2007 - 17:24:04 | AH | 25931] D:\nsa1F6.tmp [01/01/2007 - 17:24:16 | AH | 1077] D:\nsa230.tmp [01/01/2007 - 17:24:16 | AH | 315] D:\nsa232.tmp [15/04/2007 - 16:01:00 | AH | 19364] D:\nsa26D.tmp [15/04/2007 - 19:11:00 | AH | 63830] D:\nsa270.tmp [01/01/2007 - 17:24:52 | AH | 811] D:\nsa2A4.tmp [01/01/2007 - 17:24:52 | AH | 3263] D:\nsa2A6.tmp [01/01/2007 - 17:24:54 | AH | 74] D:\nsa2A8.tmp [01/01/2007 - 17:24:56 | AH | 230] D:\nsa2AA.tmp [01/01/2007 - 17:24:58 | AH | 565] D:\nsa2AC.tmp [01/01/2007 - 17:24:58 | AH | 8774] D:\nsa2AE.tmp [01/01/2007 - 17:25:00 | AH | 63] D:\nsa2B0.tmp [01/01/2007 - 17:25:28 | AH | 24788] D:\nsa2EE.tmp [21/05/2006 - 09:43:08 | AH | 3614] D:\nsa329.tmp [21/05/2006 - 09:43:04 | AH | 6148] D:\nsa32C.tmp [21/05/2006 - 09:43:04 | AH | 205] D:\nsa32E.tmp [21/04/2007 - 19:59:46 | AH | 47] D:\nsa367.tmp [01/01/2007 - 17:23:50 | AH | 34012] D:\nsb1B9.tmp [29/01/2007 - 12:03:14 | AH | 243] D:\nsb1BE.tmp [01/01/2007 - 22:59:38 | AH | 3189] D:\nsb1C1.tmp [23/01/2007 - 06:55:36 | AH | 151208] D:\nsb1C3.tmp [20/01/2007 - 15:09:44 | AH | 40745] D:\nsb1C4.tmp [07/02/2007 - 21:39:20 | AH | 19195] D:\nsb203.tmp [07/02/2007 - 19:52:42 | AH | 28194] D:\nsb205.tmp [29/01/2007 - 06:17:36 | AH | 95175] D:\nsb23C.tmp [01/02/2007 - 03:03:36 | AH | 71649] D:\nsb23F.tmp [15/03/2007 - 21:37:56 | AH | 8592] D:\nsb277.tmp [18/03/2007 - 21:14:24 | AH | 9126] D:\nsb279.tmp [11/01/2007 - 18:21:54 | AH | 7168] D:\nsb27C.tmp [01/01/2007 - 17:25:06 | AH | 9427] D:\nsb2BE.tmp [01/01/2007 - 17:25:36 | AH | 63] D:\nsb300.tmp [01/01/2007 - 17:25:38 | AH | 29625] D:\nsb302.tmp [01/01/2007 - 17:25:38 | AH | 63] D:\nsb304.tmp [01/01/2007 - 17:25:40 | AH | 69] D:\nsb306.tmp [01/01/2007 - 17:25:40 | AH | 895] D:\nsb308.tmp [21/05/2006 - 09:43:06 | AH | 1990] D:\nsb330.tmp [20/04/2007 - 20:57:00 | AH | 292707] D:\nsc17B.tmp [23/01/2007 - 06:06:38 | AH | 66040] D:\nsc1C7.tmp [23/01/2007 - 06:02:30 | AH | 64587] D:\nsc1CC.tmp [07/02/2007 - 21:34:28 | AH | 21996] D:\nsc20A.tmp [20/01/2007 - 15:09:44 | AH | 40745] D:\nsc20E.tmp [22/01/2007 - 17:41:52 | AH | 49503] D:\nsc20F.tmp [05/03/2007 - 22:41:32 | AH | 81201] D:\nsc248.tmp [20/01/2007 - 15:09:44 | AH | 40745] D:\nsc24B.tmp [28/01/2007 - 13:47:36 | AH | 33861] D:\nsc24D.tmp [22/01/2007 - 13:15:10 | AH | 8148] D:\nsc280.tmp [07/01/2007 - 16:46:22 | AH | 3156] D:\nsc287.tmp [18/03/2007 - 08:36:58 | AH | 8296] D:\nsc289.tmp [01/01/2007 - 17:25:08 | AH | 9066] D:\nsc2C2.tmp [01/01/2007 - 17:25:08 | AH | 63] D:\nsc2C4.tmp [01/01/2007 - 17:25:10 | AH | 2832] D:\nsc2C6.tmp [01/01/2007 - 17:25:10 | AH | 2816] D:\nsc2C8.tmp [01/01/2007 - 17:25:12 | AH | 9144] D:\nsc2CA.tmp [01/01/2007 - 17:25:12 | AH | 453] D:\nsc2CC.tmp [01/01/2007 - 17:25:14 | AH | 5453] D:\nsc2CE.tmp [01/01/2007 - 17:25:42 | AH | 69] D:\nsc30A.tmp [01/01/2007 - 17:25:42 | AH | 6051] D:\nsc30C.tmp [01/01/2007 - 17:25:44 | AH | 69] D:\nsc30E.tmp [01/01/2007 - 17:25:44 | AH | 4866] D:\nsc310.tmp [01/01/2007 - 17:25:46 | AH | 69] D:\nsc312.tmp [01/01/2007 - 17:25:46 | AH | 219] D:\nsc315.tmp [21/05/2006 - 09:43:06 | AH | 1910] D:\nsc33F.tmp [21/05/2006 - 09:43:06 | AH | 1984] D:\nsc341.tmp [21/05/2006 - 09:43:06 | AH | 2012] D:\nsc343.tmp [21/05/2006 - 09:43:06 | AH | 2004] D:\nsc345.tmp [21/05/2006 - 09:43:14 | AH | 8184] D:\nsd19F.tmp [21/05/2006 - 09:43:14 | AH | 768] D:\nsd1A2.tmp [23/01/2007 - 05:14:08 | AH | 28678] D:\nsd1D4.tmp [23/01/2007 - 05:14:28 | AH | 30076] D:\nsd1D6.tmp [23/01/2007 - 05:23:04 | AH | 18287] D:\nsd1D7.tmp [22/01/2007 - 17:25:56 | AH | 39406] D:\nsd214.tmp [22/01/2007 - 17:33:24 | AH | 80207] D:\nsd217.tmp [22/01/2007 - 17:38:12 | AH | 34806] D:\nsd219.tmp [28/01/2007 - 13:39:34 | AH | 16115] D:\nsd255.tmp [01/01/2007 - 17:24:00 | AH | 22379] D:\nsd25F.tmp [16/03/2007 - 08:57:22 | AH | 8598] D:\nsd28C.tmp [07/01/2007 - 11:47:56 | AH | 3482] D:\nsd28E.tmp [01/01/2007 - 17:24:44 | AH | 5304] D:\nsd293.tmp [01/01/2007 - 17:24:44 | AH | 5334] D:\nsd295.tmp [01/01/2007 - 17:25:14 | AH | 63] D:\nsd2D0.tmp [21/05/2006 - 09:43:06 | AH | 1592] D:\nsd349.tmp [21/05/2006 - 09:43:06 | AH | 129] D:\nsd34B.tmp [21/05/2006 - 09:43:06 | AH | 813] D:\nsd34D.tmp [21/05/2006 - 09:43:06 | AH | 3486] D:\nsd352.tmp [21/05/2006 - 09:43:06 | AH | 10704] D:\nsd355.tmp [21/04/2007 - 18:02:52 | AH | 13656] D:\nse182.tmp [01/01/2007 - 17:23:54 | AH | 1645320] D:\nse1A8.tmp [23/01/2007 - 05:13:50 | AH | 28178] D:\nse1DF.tmp [21/01/2007 - 05:09:42 | AH | 45995] D:\nse1E6.tmp [21/01/2007 - 23:47:22 | AH | 45089] D:\nse1E7.tmp [23/01/2007 - 18:00:02 | AH | 69839] D:\nse22A.tmp [01/01/2007 - 17:24:44 | AH | 5638] D:\nse297.tmp [17/01/2007 - 20:49:18 | AH | 6876] D:\nse29F.tmp [01/01/2007 - 17:25:24 | AH | 629] D:\nse2E4.tmp [01/01/2007 - 17:25:24 | AH | 6575] D:\nse2E6.tmp [01/01/2007 - 17:25:26 | AH | 223] D:\nse2E9.tmp [21/05/2006 - 09:43:08 | AH | 9728] D:\nse360.tmp [28/05/2007 - 16:55:28 | AH | 4125] D:\nsf1AE.tmp [01/01/2007 - 17:23:46 | AH | 50571] D:\nsf1B2.tmp [01/01/2007 - 17:23:48 | AH | 28104] D:\nsf1B5.tmp [21/01/2007 - 05:13:08 | AH | 53434] D:\nsf1E9.tmp [01/01/2007 - 17:24:02 | AH | 28067] D:\nsf1F3.tmp [01/01/2007 - 17:24:04 | AH | 24160] D:\nsf1F5.tmp [22/01/2007 - 07:13:00 | AH | 352] D:\nsf22F.tmp [01/01/2007 - 17:24:16 | AH | 937] D:\nsf231.tmp [15/04/2007 - 15:50:00 | AH | 67940] D:\nsf26B.tmp [15/04/2007 - 15:50:00 | AH | 50239] D:\nsf26C.tmp [01/01/2007 - 17:24:00 | AH | 22833] D:\nsf26F.tmp [01/01/2007 - 17:24:50 | AH | 1022] D:\nsf2A3.tmp [01/01/2007 - 17:24:52 | AH | 830] D:\nsf2A5.tmp [01/01/2007 - 17:24:52 | AH | 3486] D:\nsf2A7.tmp [01/01/2007 - 17:24:56 | AH | 4267] D:\nsf2A9.tmp [21/05/2006 - 09:43:08 | AH | 65536] D:\nsf328.tmp [21/05/2006 - 09:43:08 | AH | 35328] D:\nsf32A.tmp [21/05/2006 - 09:43:08 | AH | 2145] D:\nsf365.tmp [01/06/2005 - 21:41:18 | AH | 65536] D:\nsf366.tmp [01/01/2007 - 17:23:50 | AH | 2844] D:\nsg1B8.tmp [01/01/2007 - 17:23:52 | AH | 63] D:\nsg1BD.tmp [04/03/2007 - 09:48:16 | AH | 106496] D:\nsg1BF.tmp [01/01/2007 - 17:24:06 | AH | 22369] D:\nsg1FA.tmp [21/01/2007 - 05:09:44 | AH | 40745] D:\nsg1FF.tmp [07/02/2007 - 20:40:16 | AH | 41409] D:\nsg202.tmp [29/01/2007 - 05:56:46 | AH | 49770] D:\nsg23E.tmp [17/03/2007 - 14:00:46 | AH | 4399] D:\nsg274.tmp [05/03/2007 - 22:24:02 | AH | 6210] D:\nsg276.tmp [01/01/2007 - 17:25:04 | AH | 233] D:\nsg2BB.tmp [01/01/2007 - 17:25:06 | AH | 223] D:\nsg2BD.tmp [01/01/2007 - 17:25:34 | AH | 15672] D:\nsg2FA.tmp [01/01/2007 - 17:25:36 | AH | 63] D:\nsg2FC.tmp [01/01/2007 - 17:25:36 | AH | 21577] D:\nsg2FE.tmp [01/01/2007 - 17:25:36 | AH | 5747] D:\nsg2FF.tmp [01/01/2007 - 17:25:38 | AH | 223] D:\nsg301.tmp [01/01/2007 - 17:25:38 | AH | 5992] D:\nsg303.tmp [01/01/2007 - 17:25:40 | AH | 219] D:\nsg305.tmp [21/05/2006 - 09:43:04 | AH | 67283] D:\nsg32F.tmp [20/04/2007 - 20:56:00 | AH | 372048] D:\nsh17A.tmp [23/01/2007 - 06:02:00 | AH | 78581] D:\nsh1CB.tmp [23/01/2007 - 06:03:10 | AH | 102875] D:\nsh1CD.tmp [07/02/2007 - 21:22:52 | AH | 14700] D:\nsh209.tmp [07/02/2007 - 20:35:10 | AH | 45071] D:\nsh20C.tmp [05/03/2007 - 22:47:12 | AH | 16108] D:\nsh247.tmp [28/01/2007 - 14:32:30 | AH | 55690] D:\nsh24A.tmp [05/03/2007 - 05:59:08 | AH | 8346] D:\nsh27E.tmp [01/01/2007 - 17:24:34 | AH | 4426] D:\nsh27F.tmp [23/01/2007 - 11:39:20 | AH | 6760] D:\nsh286.tmp [01/01/2007 - 17:25:06 | AH | 146] D:\nsh2BF.tmp [01/01/2007 - 17:25:08 | AH | 223] D:\nsh2C1.tmp [01/01/2007 - 17:25:08 | AH | 233] D:\nsh2C3.tmp [01/01/2007 - 17:25:10 | AH | 222] D:\nsh2C5.tmp [01/01/2007 - 17:25:12 | AH | 69] D:\nsh2CB.tmp [01/01/2007 - 17:25:40 | AH | 413] D:\nsh307.tmp [01/01/2007 - 17:25:42 | AH | 223] D:\nsh309.tmp [01/01/2007 - 17:25:42 | AH | 1482] D:\nsh30B.tmp [21/05/2006 - 09:43:06 | AH | 2094] D:\nsh33B.tmp [21/05/2006 - 09:43:06 | AH | 2018] D:\nsh33D.tmp [21/05/2006 - 09:43:14 | AH | 155648] D:\nsi1A1.tmp [23/01/2007 - 05:40:06 | AH | 25150] D:\nsi1D9.tmp [22/01/2007 - 17:51:20 | AH | 32359] D:\nsi213.tmp [22/01/2007 - 17:28:42 | AH | 40707] D:\nsi215.tmp [22/01/2007 - 17:30:48 | AH | 34954] D:\nsi216.tmp [28/01/2007 - 13:38:20 | AH | 53983] D:\nsi254.tmp [15/04/2007 - 15:42:00 | AH | 72553] D:\nsi25C.tmp [01/01/2007 - 17:24:40 | AH | 5240] D:\nsi28D.tmp [26/01/2007 - 17:04:48 | AH | 8220] D:\nsi292.tmp [01/01/2007 - 17:25:12 | AH | 219] D:\nsi2CD.tmp [01/01/2007 - 17:25:14 | AH | 2850] D:\nsi2CF.tmp [01/01/2007 - 17:25:14 | AH | 229] D:\nsi2D1.tmp [01/01/2007 - 17:25:16 | AH | 69] D:\nsi2D3.tmp [01/01/2007 - 17:25:16 | AH | 221] D:\nsi2D5.tmp [01/01/2007 - 17:25:18 | AH | 69] D:\nsi2D7.tmp [01/01/2007 - 17:25:18 | AH | 218] D:\nsi2D9.tmp [01/01/2007 - 17:25:46 | AH | 3091] D:\nsi314.tmp [21/05/2006 - 09:43:06 | AH | 3263] D:\nsi351.tmp [21/04/2007 - 15:06:00 | AH | 522070] D:\nsj181.tmp [15/02/2007 - 00:24:14 | AH | 1532] D:\nsj1A7.tmp [23/01/2007 - 05:25:30 | AH | 17661] D:\nsj1DE.tmp [23/01/2007 - 05:13:58 | AH | 35007] D:\nsj1E0.tmp [21/01/2007 - 05:22:32 | AH | 82460] D:\nsj1E4.tmp [23/01/2007 - 18:15:20 | AH | 29901] D:\nsj223.tmp [01/01/2007 - 17:25:20 | AH | 69] D:\nsj2DB.tmp [01/01/2007 - 17:25:20 | AH | 218] D:\nsj2DD.tmp [01/01/2007 - 17:25:22 | AH | 69] D:\nsj2DF.tmp [01/01/2007 - 17:25:22 | AH | 220] D:\nsj2E1.tmp [01/01/2007 - 17:25:24 | AH | 69] D:\nsj2E3.tmp [01/01/2007 - 17:25:24 | AH | 221] D:\nsj2E5.tmp [01/01/2007 - 17:25:26 | AH | 69] D:\nsj2E7.tmp [01/01/2007 - 17:25:26 | AH | 1499] D:\nsj2E8.tmp [01/01/2007 - 17:24:48 | AH | 6144] D:\nsj322.tmp [21/05/2006 - 09:43:04 | AH | 2564] D:\nsj323.tmp [21/04/2007 - 16:02:00 | AH | 1296] D:\nsk184.tmp [21/04/2007 - 16:02:00 | AH | 2091] D:\nsk185.tmp [21/01/2007 - 05:09:32 | AH | 47381] D:\nsk1ED.tmp [01/01/2007 - 17:24:02 | AH | 27016] D:\nsk1F2.tmp [23/01/2007 - 18:00:26 | AH | 56455] D:\nsk229.tmp [22/01/2007 - 17:55:20 | AH | 556] D:\nsk233.tmp [26/01/2007 - 08:07:02 | AH | 316] D:\nsk235.tmp [21/03/2007 - 21:46:00 | AH | 68512] D:\nsk267.tmp [15/04/2007 - 15:59:00 | AH | 44537] D:\nsk269.tmp [01/01/2007 - 17:24:48 | AH | 129] D:\nsk2A1.tmp [01/01/2007 - 17:25:26 | AH | 14663] D:\nsk2EA.tmp [01/01/2007 - 17:25:28 | AH | 5739] D:\nsk2EB.tmp [01/01/2007 - 17:25:30 | AH | 3762] D:\nsk2EF.tmp [01/01/2007 - 17:25:30 | AH | 223] D:\nsk2F1.tmp [01/01/2007 - 17:25:30 | AH | 5660] D:\nsk2F3.tmp [01/01/2007 - 17:25:32 | AH | 223] D:\nsk2F5.tmp [21/05/2006 - 09:43:06 | AH | 17688] D:\nsk325.tmp [21/05/2006 - 09:43:06 | AH | 7085] D:\nsk326.tmp [01/01/2007 - 17:23:52 | AH | 2843] D:\nsl1BC.tmp [01/01/2007 - 17:24:02 | AH | 18825] D:\nsl1F4.tmp [01/01/2007 - 17:24:04 | AH | 48143] D:\nsl1F9.tmp [01/01/2007 - 17:24:06 | AH | 27111] D:\nsl1FC.tmp [19/03/2007 - 00:25:48 | AH | 23788] D:\nsl1FE.tmp [28/01/2007 - 14:29:40 | AH | 549] D:\nsl237.tmp [20/01/2007 - 15:09:44 | AH | 40745] D:\nsl239.tmp [29/01/2007 - 06:29:22 | AH | 59404] D:\nsl23D.tmp [29/01/2007 - 05:07:36 | AH | 138844] D:\nsl242.tmp [01/01/2007 - 17:24:30 | AH | 2680] D:\nsl275.tmp [01/01/2007 - 17:25:02 | AH | 233] D:\nsl2B7.tmp [01/01/2007 - 17:25:04 | AH | 223] D:\nsl2B9.tmp [01/01/2007 - 17:25:04 | AH | 11350] D:\nsl2BA.tmp [01/01/2007 - 17:25:32 | AH | 5818] D:\nsl2F7.tmp [01/01/2007 - 17:25:34 | AH | 223] D:\nsl2F9.tmp [01/01/2007 - 17:25:34 | AH | 4874] D:\nsl2FB.tmp [01/01/2007 - 17:25:36 | AH | 223] D:\nsl2FD.tmp [21/05/2006 - 09:43:06 | AH | 1916] D:\nsl334.tmp [21/05/2006 - 09:43:06 | AH | 2054] D:\nsl336.tmp [23/01/2007 - 06:00:10 | AH | 74590] D:\nsm1CA.tmp [07/02/2007 - 20:38:10 | AH | 43897] D:\nsm201.tmp [19/03/2007 - 01:19:44 | AH | 82970] D:\nsm208.tmp [19/03/2007 - 01:24:02 | AH | 40081] D:\nsm20B.tmp [29/01/2007 - 06:06:42 | AH | 109694] D:\nsm246.tmp [05/03/2007 - 22:42:56 | AH | 52353] D:\nsm249.tmp [01/01/2007 - 17:24:34 | AH | 5376] D:\nsm27D.tmp [22/01/2007 - 16:12:02 | AH | 5128] D:\nsm283.tmp [05/03/2007 - 09:08:56 | AH | 4759] D:\nsm285.tmp [01/01/2007 - 17:25:06 | AH | 63] D:\nsm2BC.tmp [01/01/2007 - 17:25:08 | AH | 63] D:\nsm2C0.tmp [21/05/2006 - 09:43:06 | AH | 2060] D:\nsm338.tmp [21/05/2006 - 09:43:06 | AH | 2046] D:\nsm33A.tmp [21/05/2006 - 09:43:06 | AH | 1692] D:\nsm33C.tmp [21/05/2006 - 09:43:06 | AH | 1730] D:\nsm33E.tmp [21/04/2007 - 15:05:56 | AH | 415059] D:\nsn17C.tmp [20/04/2007 - 20:56:00 | AH | 367732] D:\nsn17D.tmp [21/04/2007 - 15:06:00 | AH | 522070] D:\nsn17E.tmp [23/01/2007 - 06:04:04 | AH | 66335] D:\nsn1CF.tmp [23/01/2007 - 11:56:46 | AH | 16887] D:\nsn1D2.tmp [22/01/2007 - 17:49:12 | AH | 33828] D:\nsn212.tmp [28/01/2007 - 13:37:20 | AH | 18663] D:\nsn253.tmp [01/01/2007 - 17:24:00 | AH | 33738] D:\nsn25A.tmp [18/03/2007 - 20:46:46 | AH | 9498] D:\nsn28A.tmp [01/01/2007 - 17:25:16 | AH | 4462] D:\nsn2D2.tmp [01/01/2007 - 17:25:16 | AH | 710] D:\nsn2D4.tmp [01/01/2007 - 17:25:18 | AH | 4523] D:\nsn2D6.tmp [01/01/2007 - 17:25:46 | AH | 536] D:\nsn313.tmp [01/01/2007 - 17:25:48 | AH | 225] D:\nsn319.tmp [01/01/2007 - 17:25:50 | AH | 639] D:\nsn31B.tmp [01/01/2007 - 17:25:50 | AH | 220] D:\nsn31D.tmp [21/05/2006 - 09:43:06 | AH | 830] D:\nsn350.tmp [20/04/2007 - 20:58:00 | AH | 618744] D:\nso180.tmp [21/05/2006 - 09:43:14 | AH | 294912] D:\nso1A4.tmp [19/03/2007 - 00:31:24 | AH | 24173] D:\nso1A6.tmp [23/01/2007 - 05:55:46 | AH | 15265] D:\nso1D8.tmp [23/01/2007 - 05:49:02 | AH | 25560] D:\nso1DA.tmp [23/01/2007 - 05:42:48 | AH | 18838] D:\nso1DB.tmp [23/01/2007 - 05:57:02 | AH | 12632] D:\nso1DD.tmp [21/01/2007 - 05:09:44 | AH | 40745] D:\nso1E2.tmp [21/01/2007 - 05:09:38 | AH | 74465] D:\nso1E3.tmp [23/01/2007 - 19:04:08 | AH | 19065] D:\nso21C.tmp [01/01/2007 - 09:23:54 | AH | 12591] D:\nso21D.tmp [23/01/2007 - 17:58:46 | AH | 71450] D:\nso21F.tmp [23/01/2007 - 19:01:32 | AH | 22673] D:\nso222.tmp [23/01/2007 - 18:11:16 | AH | 35062] D:\nso224.tmp [23/01/2007 - 18:09:06 | AH | 28625] D:\nso225.tmp [15/04/2007 - 16:02:00 | AH | 28609] D:\nso260.tmp [15/04/2007 - 15:41:00 | AH | 44826] D:\nso263.tmp [17/03/2007 - 21:28:08 | AH | 8174] D:\nso291.tmp [01/01/2007 - 17:25:18 | AH | 1086] D:\nso2D8.tmp [01/01/2007 - 17:25:20 | AH | 1473] D:\nso2DA.tmp [01/01/2007 - 17:25:20 | AH | 673] D:\nso2DC.tmp [01/01/2007 - 17:25:22 | AH | 2236] D:\nso2DE.tmp [01/01/2007 - 17:25:22 | AH | 673] D:\nso2E0.tmp [01/01/2007 - 17:25:24 | AH | 6097] D:\nso2E2.tmp [01/01/2007 - 17:25:52 | AH | 555] D:\nso31F.tmp [19/03/2007 - 00:04:18 | AH | 69632] D:\nso321.tmp [21/05/2006 - 09:43:06 | AH | 396288] D:\nso356.tmp [21/05/2006 - 09:43:06 | AH | 4172] D:\nso359.tmp [21/05/2006 - 09:43:06 | AH | 775] D:\nso35B.tmp [21/05/2006 - 09:43:06 | AH | 11573] D:\nso35D.tmp [15/04/2007 - 14:44:00 | AH | 61173] D:\nsp186.tmp [15/04/2007 - 14:41:00 | AH | 9800] D:\nsp187.tmp [01/01/2007 - 17:24:50 | AH | 7085] D:\nsp1AA.tmp [21/01/2007 - 05:09:40 | AH | 43959] D:\nsp1EC.tmp [04/03/2007 - 09:59:22 | AH | 40488] D:\nsp1EE.tmp [23/01/2007 - 18:02:18 | AH | 28220] D:\nsp228.tmp [01/01/2007 - 17:24:48 | AH | 316] D:\nsp2A0.tmp [01/01/2007 - 17:25:28 | AH | 223] D:\nsp2ED.tmp [01/01/2007 - 17:25:30 | AH | 63] D:\nsp2F0.tmp [01/01/2007 - 17:25:30 | AH | 19369] D:\nsp2F2.tmp [21/05/2006 - 09:43:06 | AH | 420864] D:\nsp35E.tmp [21/05/2006 - 09:43:08 | AH | 4130] D:\nsp361.tmp [21/05/2006 - 09:43:08 | AH | 756] D:\nsp363.tmp [01/01/2007 - 17:23:50 | AH | 5430] D:\nsq1BB.tmp [01/01/2007 - 17:24:02 | AH | 12591] D:\nsq1F1.tmp [01/01/2007 - 17:24:04 | AH | 51413] D:\nsq1F8.tmp [01/01/2007 - 17:24:06 | AH | 29428] D:\nsq1FB.tmp [01/01/2007 - 17:24:06 | AH | 79] D:\nsq1FD.tmp [23/01/2007 - 18:24:58 | AH | 61] D:\nsq234.tmp [24/01/2007 - 08:05:10 | AH | 932] D:\nsq236.tmp [01/02/2007 - 03:59:34 | AH | 21520] D:\nsq238.tmp [29/01/2007 - 06:24:54 | AH | 126722] D:\nsq23B.tmp [15/04/2007 - 16:14:00 | AH | 24677] D:\nsq271.tmp [28/02/2007 - 22:45:04 | AH | 7354] D:\nsq273.tmp [01/01/2007 - 17:25:00 | AH | 8004] D:\nsq2B2.tmp [01/01/2007 - 17:25:02 | AH | 63] D:\nsq2B4.tmp [01/01/2007 - 17:25:02 | AH | 8588] D:\nsq2B6.tmp [01/01/2007 - 17:25:04 | AH | 63] D:\nsq2B8.tmp [01/01/2007 - 17:25:32 | AH | 63] D:\nsq2F4.tmp [01/01/2007 - 17:25:32 | AH | 22462] D:\nsq2F6.tmp [01/01/2007 - 17:25:34 | AH | 63] D:\nsq2F8.tmp [21/05/2006 - 09:43:06 | AH | 1964] D:\nsq333.tmp [20/04/2007 - 20:58:00 | AH | 237897] D:\nsr179.tmp [01/01/2007 - 22:59:26 | AH | 3208] D:\nsr1C0.tmp [23/01/2007 - 06:06:12 | AH | 73228] D:\nsr1C6.tmp [23/01/2007 - 06:07:40 | AH | 50943] D:\nsr1C9.tmp [07/02/2007 - 20:36:58 | AH | 36310] D:\nsr200.tmp [07/02/2007 - 20:09:18 | AH | 21473] D:\nsr207.tmp [29/01/2007 - 05:01:06 | AH | 63672] D:\nsr241.tmp [29/01/2007 - 05:23:44 | AH | 63628] D:\nsr244.tmp [29/01/2007 - 06:02:06 | AH | 112369] D:\nsr245.tmp [01/01/2007 - 17:24:32 | AH | 2783] D:\nsr27A.tmp [03/03/2007 - 13:46:22 | AH | 7856] D:\nsr27B.tmp [06/03/2007 - 07:47:48 | AH | 6212] D:\nsr282.tmp [21/05/2006 - 09:43:06 | AH | 2012] D:\nsr335.tmp [21/05/2006 - 09:43:06 | AH | 1926] D:\nsr337.tmp [21/05/2006 - 09:43:06 | AH | 1982] D:\nsr339.tmp [21/05/2006 - 09:43:14 | AH | 6679] D:\nss19E.tmp [23/01/2007 - 06:03:38 | AH | 52196] D:\nss1CE.tmp [23/01/2007 - 06:05:14 | AH | 74939] D:\nss1D1.tmp [20/01/2007 - 15:09:44 | AH | 40745] D:\nss1D3.tmp [23/01/2007 - 05:22:32 | AH | 17627] D:\nss20D.tmp [22/01/2007 - 17:43:04 | AH | 53887] D:\nss211.tmp [28/01/2007 - 13:49:30 | AH | 17711] D:\nss24F.tmp [28/01/2007 - 13:36:32 | AH | 23306] D:\nss252.tmp [28/01/2007 - 15:48:32 | AH | 27601] D:\nss257.tmp [01/01/2007 - 03:24:08 | AH | 79] D:\nss259.tmp [05/03/2007 - 07:05:04 | AH | 8566] D:\nss284.tmp [01/01/2007 - 17:25:12 | AH | 220] D:\nss2C9.tmp [01/01/2007 - 17:25:48 | AH | 4798] D:\nss316.tmp [01/01/2007 - 17:25:48 | AH | 63] D:\nss318.tmp [01/01/2007 - 17:25:50 | AH | 69] D:\nss31A.tmp [21/05/2006 - 09:43:06 | AH | 2038] D:\nss347.tmp [20/04/2007 - 20:57:00 | AH | 482866] D:\nst17F.tmp [23/01/2007 - 05:13:40 | AH | 56874] D:\nst1DC.tmp [18/03/2007 - 20:53:14 | AH | 20279] D:\nst1E1.tmp [22/01/2007 - 17:41:06 | AH | 56525] D:\nst21B.tmp [23/01/2007 - 17:59:38 | AH | 58793] D:\nst21E.tmp [23/01/2007 - 17:59:18 | AH | 62950] D:\nst221.tmp [29/07/2006 - 12:42:00 | AH | 86683] D:\nst25D.tmp [15/04/2007 - 16:03:00 | AH | 25086] D:\nst25E.tmp [15/04/2007 - 16:11:00 | AH | 81471] D:\nst262.tmp [09/03/2007 - 17:20:00 | AH | 8092] D:\nst290.tmp [01/01/2007 - 17:24:46 | AH | 5254] D:\nst29A.tmp [01/01/2007 - 17:25:50 | AH | 2870] D:\nst31C.tmp [01/01/2007 - 17:25:52 | AH | 69] D:\nst31E.tmp [01/01/2007 - 17:25:52 | AH | 7258] D:\nst320.tmp [21/05/2006 - 09:43:06 | AH | 811] D:\nst34F.tmp [21/05/2006 - 09:43:06 | AH | 53248] D:\nst354.tmp [21/05/2006 - 09:43:06 | AH | 8704] D:\nst358.tmp [21/05/2006 - 09:43:06 | AH | 303] D:\nst35A.tmp [22/04/2007 - 12:31:50 | AH | 147456] D:\nsu14D.tmp [21/04/2007 - 18:02:08 | AH | 12883] D:\nsu183.tmp [01/01/2007 - 17:24:50 | AH | 17688] D:\nsu1A9.tmp [18/04/2007 - 18:31:26 | AH | 53] D:\nsu1AB.tmp [19/03/2007 - 00:05:02 | AH | 630784] D:\nsu1AD.tmp [21/01/2007 - 05:09:48 | AH | 72706] D:\nsu1E5.tmp [04/03/2007 - 10:01:26 | AH | 70624] D:\nsu1EB.tmp [23/01/2007 - 18:05:44 | AH | 18525] D:\nsu227.tmp [28/01/2007 - 18:19:58 | AH | 1423] D:\nsu22C.tmp [23/01/2007 - 06:04:56 | AH | 3347] D:\nsu22E.tmp [21/03/2007 - 21:57:00 | AH | 59729] D:\nsu265.tmp [01/01/2007 - 17:24:00 | AH | 37083] D:\nsu26A.tmp [15/03/2007 - 17:23:10 | AH | 8126] D:\nsu29C.tmp [18/01/2007 - 12:07:48 | AH | 6710] D:\nsu29E.tmp [01/01/2007 - 17:24:50 | AH | 813] D:\nsu2A2.tmp [01/01/2007 - 17:25:28 | AH | 63] D:\nsu2EC.tmp [21/05/2006 - 09:43:06 | AH | 1645320] D:\nsu324.tmp [21/05/2006 - 09:43:06 | AH | 57344] D:\nsu35C.tmp [21/05/2006 - 09:43:06 | AH | 899] D:\nsu35F.tmp [21/05/2006 - 09:43:08 | AH | 303] D:\nsu362.tmp [21/05/2006 - 09:43:08 | AH | 37] D:\nsu364.tmp [21/05/2006 - 09:42:30 | AH | 20811] D:\nsv188.tmp [15/04/2007 - 14:37:00 | AH | 15396] D:\nsv189.tmp [15/03/2006 - 19:46:00 | AH | 427] D:\nsv18A.tmp [21/04/2007 - 13:55:00 | AH | 14007] D:\nsv18B.tmp [01/01/2007 - 17:23:46 | AH | 49927] D:\nsv1B0.tmp [01/01/2007 - 17:23:46 | AH | 28724] D:\nsv1B1.tmp [01/01/2007 - 17:23:48 | AH | 43277] D:\nsv1B4.tmp [01/01/2007 - 17:23:50 | AH | 28329] D:\nsv1B7.tmp [01/01/2007 - 17:23:50 | AH | 219] D:\nsv1BA.tmp [28/01/2007 - 07:18:50 | AH | 29472] D:\nsv1F0.tmp [01/01/2007 - 17:24:04 | AH | 22292] D:\nsv1F7.tmp [29/01/2007 - 06:09:26 | AH | 98087] D:\nsv23A.tmp [01/01/2007 - 17:24:00 | AH | 34433] D:\nsv26E.tmp [01/01/2007 - 17:24:00 | AH | 33787] D:\nsv272.tmp [01/01/2007 - 17:24:58 | AH | 69] D:\nsv2AB.tmp [01/01/2007 - 17:24:58 | AH | 223] D:\nsv2AD.tmp [01/01/2007 - 17:25:00 | AH | 146] D:\nsv2AF.tmp [01/01/2007 - 17:25:00 | AH | 223] D:\nsv2B1.tmp [01/01/2007 - 17:25:02 | AH | 146] D:\nsv2B3.tmp [01/01/2007 - 17:25:02 | AH | 223] D:\nsv2B5.tmp [21/05/2006 - 09:43:08 | AH | 180224] D:\nsv327.tmp [21/05/2006 - 09:43:08 | AH | 5990] D:\nsv32B.tmp [21/05/2006 - 09:43:04 | AH | 72708] D:\nsv32D.tmp [21/05/2006 - 09:43:06 | AH | 1972] D:\nsv331.tmp [01/01/2007 - 22:59:48 | AH | 3211] D:\nsw1C2.tmp [23/01/2007 - 06:05:48 | AH | 66437] D:\nsw1C5.tmp [08/02/2007 - 20:33:40 | AH | 13035] D:\nsw204.tmp [07/02/2007 - 20:00:14 | AH | 29106] D:\nsw206.tmp [29/01/2007 - 04:52:54 | AH | 60548] D:\nsw240.tmp [29/01/2007 - 05:18:44 | AH | 49141] D:\nsw243.tmp [01/01/2007 - 17:24:32 | AH | 4904] D:\nsw278.tmp [21/05/2006 - 09:43:06 | AH | 1610] D:\nsw332.tmp [23/01/2007 - 06:07:10 | AH | 57730] D:\nsx1C8.tmp [23/01/2007 - 06:04:48 | AH | 69459] D:\nsx1D0.tmp [22/01/2007 - 17:42:30 | AH | 56666] D:\nsx210.tmp [28/01/2007 - 13:44:34 | AH | 28115] D:\nsx24C.tmp [28/01/2007 - 13:48:28 | AH | 26249] D:\nsx24E.tmp [28/01/2007 - 13:52:46 | AH | 17562] D:\nsx250.tmp [28/01/2007 - 13:35:44 | AH | 22834] D:\nsx251.tmp [28/01/2007 - 13:41:28 | AH | 19953] D:\nsx256.tmp [05/03/2007 - 05:59:38 | AH | 8514] D:\nsx281.tmp [18/03/2007 - 08:36:44 | AH | 8296] D:\nsx288.tmp [26/01/2007 - 11:26:16 | AH | 7232] D:\nsx28B.tmp [01/01/2007 - 17:25:10 | AH | 69] D:\nsx2C7.tmp [01/01/2007 - 17:25:42 | AH | 221] D:\nsx30D.tmp [01/01/2007 - 17:25:44 | AH | 681] D:\nsx30F.tmp [01/01/2007 - 17:25:44 | AH | 218] D:\nsx311.tmp [01/01/2007 - 17:25:48 | AH | 2843] D:\nsx317.tmp [21/05/2006 - 09:43:06 | AH | 1070] D:\nsx340.tmp [21/05/2006 - 09:43:06 | AH | 2100] D:\nsx342.tmp [21/05/2006 - 09:43:06 | AH | 1964] D:\nsx344.tmp [21/05/2006 - 09:43:06 | AH | 1752] D:\nsx346.tmp [21/05/2006 - 09:43:06 | AH | 2044] D:\nsx348.tmp [21/05/2006 - 09:43:06 | AH | 316] D:\nsx34A.tmp [21/05/2006 - 09:43:14 | AH | 53248] D:\nsy1A0.tmp [21/05/2006 - 09:43:14 | AH | 294912] D:\nsy1A3.tmp [21/05/2006 - 09:43:14 | AH | 290816] D:\nsy1A5.tmp [23/01/2007 - 05:14:16 | AH | 30150] D:\nsy1D5.tmp [22/01/2007 - 17:35:40 | AH | 28898] D:\nsy218.tmp [22/01/2007 - 17:40:18 | AH | 53234] D:\nsy21A.tmp [23/01/2007 - 17:57:48 | AH | 23006] D:\nsy220.tmp [28/01/2007 - 13:43:54 | AH | 35012] D:\nsy258.tmp [01/01/2007 - 17:24:00 | AH | 34754] D:\nsy25B.tmp [15/04/2007 - 15:58:00 | AH | 63453] D:\nsy261.tmp [03/03/2007 - 19:39:02 | AH | 6104] D:\nsy28F.tmp [10/02/2007 - 18:26:32 | AH | 7256] D:\nsy294.tmp [01/01/2007 - 17:24:44 | AH | 2517] D:\nsy296.tmp [20/02/2007 - 21:43:36 | AH | 7544] D:\nsy298.tmp [21/05/2006 - 09:43:06 | AH | 6144] D:\nsy34C.tmp [21/05/2006 - 09:43:06 | AH | 1022] D:\nsy34E.tmp [21/05/2006 - 09:43:06 | AH | 74] D:\nsy353.tmp [21/05/2006 - 09:43:06 | AH | 903] D:\nsy357.tmp [19/03/2007 - 00:04:22 | AH | 69632] D:\nsz1AC.tmp [21/01/2007 - 05:09:36 | AH | 52467] D:\nsz1E8.tmp [21/01/2007 - 05:09:28 | AH | 47831] D:\nsz1EA.tmp [23/01/2007 - 18:07:40 | AH | 116372] D:\nsz226.tmp [01/01/2007 - 17:24:18 | AH | 4286] D:\nsz22B.tmp [27/01/2007 - 09:54:00 | AH | 331] D:\nsz22D.tmp [21/03/2007 - 22:02:00 | AH | 57010] D:\nsz264.tmp [15/04/2007 - 15:41:00 | AH | 69246] D:\nsz266.tmp [01/01/2007 - 17:24:00 | AH | 51499] D:\nsz268.tmp [01/01/2007 - 17:24:46 | AH | 5378] D:\nsz299.tmp [16/03/2007 - 08:56:56 | AH | 3398] D:\nsz29B.tmp [18/01/2007 - 12:07:36 | AH | 6756] D:\nsz29D.tmp [08/02/2009 - 12:15:00 | A | 31136] D:\P2061627 (Small).JPG [08/02/2009 - 12:15:02 | A | 34184] D:\P2061648 (Small).JPG [18/05/2009 - 17:25:23 | A | 84116] D:\P5162404.JPG [30/07/2008 - 11:21:12 | A | 1567357] D:\P7300392.JPG [28/08/2010 - 12:46:05 | D ] D:\Programy [24/04/2009 - 21:17:37 | RSHD ] D:\Recycled [08/05/2010 - 17:27:39 | SHD ] D:\RECYCLER [01/08/2008 - 17:43:10 | SHD ] D:\System Volume Information [06/06/2010 - 13:18:25 | ASH | 53760] D:\Thumbs.db [08/06/2010 - 12:40:35 | A | 3673859] D:\varius manx - dziekuje.mp31274358590_[mp3.teledyski.info].mp3 [29/09/2010 - 21:44:43 | RSH | 505] E:\autorun.inf [23/12/2009 - 22:30:23 | D ] E:\Filmy [12/07/2008 - 07:21:07 | AH | 480] E:\Herkules.dubbing.PL.(1997)..avi.ini [02/02/2008 - 18:16:20 | RSH | 104644] E:\i.cmd [24/04/2009 - 21:17:38 | RSHD ] E:\Recycled [08/05/2010 - 17:27:39 | SHD ] E:\RECYCLER [01/08/2008 - 17:43:10 | SHD ] E:\System Volume Information [07/06/2009 - 16:52:44 | D ] E:\Tapety [22/08/2008 - 12:29:53 | ASH | 4608] E:\Thumbs.db [19/08/2010 - 20:47:16 | D ] E:\zdj [15/04/2009 - 18:38:18 | HD ] F:\Luzem [22/04/2010 - 16:38:24 | HD ] F:\PortableApps [15/04/2009 - 18:38:26 | HD ] F:\Tools [10/11/2009 - 17:25:10 | A | 1027] F:\eData.txt [29/09/2010 - 21:44:10 | RSH | 1406935] F:\Recycle.exe [29/09/2010 - 21:44:44 | RSH | 505] F:\autorun.inf [02/02/2008 - 18:16:20 | RSH | 104644] F:\i.cmd [10/02/2010 - 21:36:00 | A | 1584] F:\Sterowniki ASUS UL30A.txt [18/02/1999 - 03:01:00 | A | 379392] F:\PTEDIT32.EXE [01/05/2008 - 16:28:04 | A | 42] F:\GG Lite.bat [29/07/2008 - 01:49:50 | A | 67] F:\mplayerc.bat [22/04/2010 - 16:44:56 | HD ] F:\Anty [12/02/2010 - 00:20:34 | A | 78450] F:\RECOVERY.JPG [26/06/2009 - 17:45:14 | A | 40] F:\Skype.bat [09/01/2009 - 13:15:32 | A | 4608] F:\starttc.exe [05/09/2010 - 21:36:08 | HD ] F:\vnc 454 [29/09/2010 - 21:44:10 | A | 1406935] F:\Luzem.exe [09/01/2009 - 13:06:02 | A | 58] F:\VNC.bat [01/05/2008 - 16:30:38 | A | 57] F:\WinRAR.bat [01/05/2008 - 16:31:02 | A | 36] F:\X-Chat.bat [29/09/2010 - 21:44:10 | A | 1406935] F:\PortableApps.exe [29/09/2010 - 21:44:12 | A | 1406935] F:\Tools.exe [29/09/2010 - 21:44:12 | A | 1406935] F:\Anty.exe [15/08/2010 - 09:20:58 | A | 52] F:\Opera.bat [29/09/2010 - 21:44:12 | A | 1406935] F:\vnc 454.exe [06/11/2009 - 09:47:26 | D ] F:\SubEdit-Player ################## | E.O.F | Odnośnik do komentarza
Landuss Opublikowano 29 Września 2010 Zgłoś Udostępnij Opublikowano 29 Września 2010 W porządku, przechodzimy do usuwania. Zastanawiają mnie też te dziwne pliki .tmp na partycji D i to też usuwam. Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej następujący tekst: :OTL DRV - File not found [Kernel | Unknown | Running] -- -- (zxsderfbukjfyshlhdfrstdzh) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys -- (hwdatacard) O4 - HKLM..\Run: [0FA4F9] C:\WINDOWS\system32\3600FB\0FA4F9.EXE () O4 - HKLM..\Run: [NVMixerTray] C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe File not found O4 - HKU\S-1-5-21-436374069-1580436667-839522115-1005..\Run: [amva] C:\WINDOWS\system32\amvo.exe () O4 - Startup: C:\Documents and Settings\Testowe\Menu Start\Programy\Autostart\0FA4F9.lnk = C:\WINDOWS\system32\3600FB\0FA4F9.EXE () O4 - Startup: C:\Documents and Settings\win xp\Menu Start\Programy\Autostart\0FA4F9.lnk = C:\WINDOWS\system32\3600FB\0FA4F9.EXE () :Files autorun.inf /alldrives RECYCLER /alldrives Recycled /alldrives i.cmd /alldrives D:\n*.tmp C:\WINDOWS\system32\3600FB C:\WINDOWS\system32\amvo0.dll C:\Documents and Settings\Testowe\Menu Start\Programy\Autostart\0FA4F9.lnk C:\Documents and Settings\win xp\Menu Start\Programy\Autostart\0FA4F9.lnk :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "SuperHidden"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "Hidden"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "ShowSuperHidden"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] "CheckedValue"=dword:00000001 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] @="" :Commands [emptyflash] [emptytemp] Kliknij w Wykonaj skrypt. Zatwierdź restart komputera. Następnie uruchamiasz OTL ponownie, tym razem wywołujesz opcję Skanuj. Pokazujesz nowe logi z OTL. Odnośnik do komentarza
driven Opublikowano 29 Września 2010 Autor Zgłoś Udostępnij Opublikowano 29 Września 2010 OTL logfile created on: 2010-09-29 23:41:36 - Run 2 OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\Testowe\Pulpit Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1 022,00 Mb Total Physical Memory | 734,00 Mb Available Physical Memory | 72,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 89,00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 55,66 Gb Total Space | 39,06 Gb Free Space | 70,18% Space Free | Partition Type: NTFS Drive D: | 48,83 Gb Total Space | 3,04 Gb Free Space | 6,23% Space Free | Partition Type: NTFS Drive E: | 48,89 Gb Total Space | 10,28 Gb Free Space | 21,02% Space Free | Partition Type: NTFS Drive F: | 495,22 Mb Total Space | 321,41 Mb Free Space | 64,90% Space Free | Partition Type: FAT G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: WIN-7B18EF599D2 Current User Name: Testowe Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-09-29 15:05:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Testowe\Pulpit\OTL.exe PRC - [2006-12-23 18:05:20 | 000,143,360 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe PRC - [2006-12-23 18:04:42 | 000,905,216 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe PRC - [2006-09-25 09:12:20 | 000,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe PRC - [2006-03-02 14:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2004-04-13 06:07:18 | 000,069,632 | ---- | M] (InstallShield Software Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe ========== Modules (SafeList) ========== MOD - [2010-09-29 15:05:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Testowe\Pulpit\OTL.exe MOD - [2006-05-03 22:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll MOD - [2006-03-02 14:00:00 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll MOD - [2006-03-02 14:00:00 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx ========== Win32 Services (SafeList) ========== SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ) SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt) SRV - [2008-04-07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) ========== Driver Services (SafeList) ========== DRV - [2009-03-31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2009-03-20 10:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2009-03-20 10:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM) DRV - [2009-03-20 10:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) DRV - [2007-09-17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2006-12-17 04:50:29 | 001,918,464 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2004-10-27 15:21:36 | 000,138,240 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus) DRV - [2004-10-27 15:21:30 | 000,145,920 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService) DRV - [2004-08-03 22:32:32 | 000,084,480 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ac97via.sys -- (VIAudio) Kontroler VIA AC'97 Audio (WDM) DRV - [2001-08-17 22:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\S-1-5-21-436374069-1580436667-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2006-03-02 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe () O4 - HKLM..\Run: [iSUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation) O4 - HKLM..\Run: [iSUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKU\S-1-5-21-436374069-1580436667-839522115-1005..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-436374069-1580436667-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-05-06 17:20:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010-09-29 23:37:26 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2010-09-29 23:34:51 | 000,000,000 | ---D | C] -- C:\_OTL [2010-09-29 21:44:32 | 000,000,000 | ---D | C] -- C:\UsbFix [2010-09-29 15:10:57 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Testowe\Pulpit\OTL.exe [2010-09-29 14:49:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2010-09-29 14:46:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Ustawienia lokalne\Dane aplikacji\Ahead [2010-09-29 14:46:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Ustawienia lokalne\Dane aplikacji\ATI [2010-09-29 14:46:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Dane aplikacji\ATI [2010-09-29 14:46:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Dane aplikacji\Identities [2010-09-29 14:46:41 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Moje dokumenty\Moje obrazy [2010-09-29 14:46:41 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Moje dokumenty\Moja muzyka [2010-09-29 14:46:23 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Testowe\Dane aplikacji\Microsoft [2010-09-29 14:46:23 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Testowe\Cookies [2010-09-29 14:46:23 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Testowe\SendTo [2010-09-29 14:46:23 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Testowe\Recent [2010-09-29 14:46:23 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Testowe\Dane aplikacji [2010-09-29 14:46:23 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Ulubione [2010-09-29 14:46:23 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Moje dokumenty [2010-09-29 14:46:23 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Testowe\Menu Start [2010-09-29 14:46:23 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Testowe\Ustawienia lokalne [2010-09-29 14:46:23 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Testowe\Szablony [2010-09-29 14:46:23 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Testowe\PrintHood [2010-09-29 14:46:23 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Testowe\NetHood [2010-09-29 14:46:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Pulpit [2010-09-29 14:46:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Testowe\Ustawienia lokalne\Dane aplikacji\Microsoft [2008-10-27 10:38:54 | 000,095,056 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll [2008-10-27 10:37:34 | 001,692,496 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll [2008-10-27 10:36:58 | 000,526,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DXSETUP.exe [2004-11-24 21:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll ========== Files - Modified Within 30 Days ========== [2010-09-29 23:39:05 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-09-29 23:39:03 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-09-29 23:38:02 | 000,786,432 | -H-- | M] () -- C:\Documents and Settings\Testowe\NTUSER.DAT [2010-09-29 23:37:39 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Testowe\ntuser.ini [2010-09-29 18:26:03 | 003,184,656 | -H-- | M] () -- C:\Documents and Settings\Testowe\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-09-29 15:05:48 | 000,293,376 | ---- | M] () -- C:\Documents and Settings\Testowe\Pulpit\bj49e58k.exe [2010-09-29 15:05:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Testowe\Pulpit\OTL.exe [2010-09-29 14:46:53 | 000,012,328 | ---- | M] () -- C:\Documents and Settings\Testowe\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-09-29 14:30:27 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-08-31 08:32:25 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini ========== Files Created - No Company Name ========== [2010-09-29 15:11:00 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\Testowe\Pulpit\bj49e58k.exe [2010-09-29 14:46:24 | 000,000,188 | -HS- | C] () -- C:\Documents and Settings\Testowe\ntuser.ini [2010-09-29 14:46:23 | 000,786,432 | -H-- | C] () -- C:\Documents and Settings\Testowe\NTUSER.DAT [2010-09-29 14:46:23 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\Testowe\NtUser.dat.LOG [2010-08-30 19:30:05 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2010-08-27 15:39:36 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-08-27 08:14:01 | 000,000,587 | ---- | C] () -- C:\WINDOWS\ClockTraySkins.ini [2010-07-24 15:42:07 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI [2010-07-23 16:07:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SETUP32.INI [2010-06-08 12:02:38 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2010-06-08 12:02:38 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2010-05-15 15:23:24 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt [2010-05-15 15:22:36 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2008-12-19 17:15:58 | 004,338,246 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2008-12-17 19:41:18 | 000,884,237 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll [2008-12-17 19:22:58 | 000,093,184 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2008-12-17 19:22:48 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-12-17 19:17:34 | 000,239,247 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll [2008-12-17 18:59:54 | 000,560,802 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2008-12-11 13:27:02 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-10-27 10:38:20 | 013,265,184 | ---- | C] () -- C:\Program Files\dxnt.cab [2008-10-27 10:38:20 | 004,163,646 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86_Archive.cab [2008-10-27 10:38:20 | 001,907,944 | ---- | C] () -- C:\Program Files\Nov2008_d3dx9_40_x64.cab [2008-10-27 10:38:20 | 001,803,074 | ---- | C] () -- C:\Program Files\Nov2007_d3dx9_36_x64.cab [2008-10-27 10:38:18 | 001,801,176 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x64.cab [2008-10-27 10:38:18 | 001,795,100 | ---- | C] () -- C:\Program Files\Aug2008_d3dx9_39_x64.cab [2008-10-27 10:38:18 | 001,793,624 | ---- | C] () -- C:\Program Files\JUN2008_d3dx9_38_x64.cab [2008-10-27 10:38:18 | 001,770,878 | ---- | C] () -- C:\Program Files\Mar2008_d3dx9_37_x64.cab [2008-10-27 10:38:18 | 001,710,376 | ---- | C] () -- C:\Program Files\Nov2007_d3dx9_36_x86.cab [2008-10-27 10:38:18 | 001,709,168 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x86.cab [2008-10-27 10:38:18 | 001,608,374 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x64.cab [2008-10-27 10:38:16 | 001,608,790 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x64.cab [2008-10-27 10:38:16 | 001,608,302 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x86.cab [2008-10-27 10:38:16 | 001,607,055 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x86.cab [2008-10-27 10:38:16 | 001,575,392 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x86.cab [2008-10-27 10:38:16 | 001,572,170 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x64.cab [2008-10-27 10:38:14 | 001,551,228 | ---- | C] () -- C:\Program Files\Nov2008_d3dx9_40_x86.cab [2008-10-27 10:38:14 | 001,465,688 | ---- | C] () -- C:\Program Files\Aug2008_d3dx9_39_x86.cab [2008-10-27 10:38:14 | 001,464,894 | ---- | C] () -- C:\Program Files\JUN2008_d3dx9_38_x86.cab [2008-10-27 10:38:14 | 001,413,918 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x64.cab [2008-10-27 10:38:14 | 001,363,812 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x64.cab [2008-10-27 10:38:14 | 001,358,992 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x64.cab [2008-10-27 10:38:12 | 001,444,298 | ---- | C] () -- C:\Program Files\Mar2008_d3dx9_37_x86.cab [2008-10-27 10:38:12 | 001,398,846 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x64.cab [2008-10-27 10:38:12 | 001,351,558 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x64.cab [2008-10-27 10:38:10 | 001,348,370 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x64.cab [2008-10-27 10:38:10 | 001,337,018 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x64.cab [2008-10-27 10:38:10 | 001,248,515 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x64.cab [2008-10-27 10:38:10 | 001,156,507 | ---- | C] () -- C:\Program Files\BDANT.cab [2008-10-27 10:38:10 | 001,128,233 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x86.cab [2008-10-27 10:38:10 | 001,116,237 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x86.cab [2008-10-27 10:38:10 | 001,080,472 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x86.cab [2008-10-27 10:38:08 | 001,085,736 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x86.cab [2008-10-27 10:38:08 | 001,079,978 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x86.cab [2008-10-27 10:38:08 | 001,078,660 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x86.cab [2008-10-27 10:38:08 | 001,065,941 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x86.cab [2008-10-27 10:38:08 | 001,014,241 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x86.cab [2008-10-27 10:38:08 | 000,995,154 | ---- | C] () -- C:\Program Files\Nov2008_d3dx10_40_x64.cab [2008-10-27 10:38:08 | 000,122,810 | ---- | C] () -- C:\Program Files\Nov2008_XACT_x64.cab [2008-10-27 10:38:08 | 000,097,833 | ---- | C] () -- C:\Program Files\APR2007_xinput_x64.cab [2008-10-27 10:38:08 | 000,094,750 | ---- | C] () -- C:\Program Files\Mar2008_XACT_x86.cab [2008-10-27 10:38:04 | 000,976,164 | ---- | C] () -- C:\Program Files\BDAXP.cab [2008-10-27 10:38:04 | 000,966,445 | ---- | C] () -- C:\Program Files\Nov2008_d3dx10_40_x86.cab [2008-10-27 10:38:04 | 000,917,446 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86.cab [2008-10-27 10:38:04 | 000,868,844 | ---- | C] () -- C:\Program Files\JUN2008_d3dx10_38_x64.cab [2008-10-27 10:38:04 | 000,868,628 | ---- | C] () -- C:\Program Files\Aug2008_d3dx10_39_x64.cab [2008-10-27 10:38:04 | 000,865,616 | ---- | C] () -- C:\Program Files\Nov2007_d3dx10_36_x64.cab [2008-10-27 10:38:04 | 000,853,302 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x64.cab [2008-10-27 10:38:04 | 000,850,935 | ---- | C] () -- C:\Program Files\JUN2008_d3dx10_38_x86.cab [2008-10-27 10:38:04 | 000,096,053 | ---- | C] () -- C:\Program Files\dxupdate.cab [2008-10-27 10:38:04 | 000,094,144 | ---- | C] () -- C:\Program Files\JUN2008_XACT_x86.cab [2008-10-27 10:38:04 | 000,055,538 | ---- | C] () -- C:\Program Files\Nov2008_X3DAudio_x64.cab [2008-10-27 10:38:04 | 000,045,464 | ---- | C] () -- C:\Program Files\dxdllreg_x86.cab [2008-10-27 10:38:02 | 000,850,183 | ---- | C] () -- C:\Program Files\Aug2008_d3dx10_39_x86.cab [2008-10-27 10:38:02 | 000,845,900 | ---- | C] () -- C:\Program Files\Mar2008_d3dx10_37_x64.cab [2008-10-27 10:38:02 | 000,819,276 | ---- | C] () -- C:\Program Files\Mar2008_d3dx10_37_x86.cab [2008-10-27 10:38:02 | 000,094,028 | ---- | C] () -- C:\Program Files\Aug2008_XACT_x86.cab [2008-10-27 10:38:02 | 000,093,700 | ---- | C] () -- C:\Program Files\Nov2008_XACT_x86.cab [2008-10-27 10:38:02 | 000,088,158 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x64.cab [2008-10-27 10:38:02 | 000,088,117 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x64.cab [2008-10-27 10:38:02 | 000,087,053 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x64.cab [2008-10-27 10:38:02 | 000,056,170 | ---- | C] () -- C:\Program Files\JUN2008_X3DAudio_x64.cab [2008-10-27 10:38:02 | 000,056,074 | ---- | C] () -- C:\Program Files\Mar2008_X3DAudio_x64.cab [2008-10-27 10:38:02 | 000,054,318 | ---- | C] () -- C:\Program Files\APR2007_xinput_x86.cab [2008-10-27 10:38:02 | 000,047,160 | ---- | C] () -- C:\Program Files\NOV2007_X3DAudio_x64.cab [2008-10-27 10:38:02 | 000,047,074 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x86.cab [2008-10-27 10:38:02 | 000,046,375 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x86.cab [2008-10-27 10:38:02 | 000,022,921 | ---- | C] () -- C:\Program Files\JUN2008_X3DAudio_x86.cab [2008-10-27 10:38:02 | 000,022,867 | ---- | C] () -- C:\Program Files\Nov2008_X3DAudio_x86.cab [2008-10-27 10:38:02 | 000,019,512 | ---- | C] () -- C:\Program Files\NOV2007_X3DAudio_x86.cab [2008-10-27 10:38:00 | 000,804,900 | ---- | C] () -- C:\Program Files\Nov2007_d3dx10_36_x86.cab [2008-10-27 10:38:00 | 000,797,883 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x86.cab [2008-10-27 10:38:00 | 000,700,060 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x64.cab [2008-10-27 10:38:00 | 000,699,628 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x64.cab [2008-10-27 10:38:00 | 000,047,026 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x86.cab [2008-10-27 10:38:00 | 000,022,883 | ---- | C] () -- C:\Program Files\Mar2008_X3DAudio_x86.cab [2008-10-27 10:37:58 | 000,699,488 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x86.cab [2008-10-27 10:37:58 | 000,696,881 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x86.cab [2008-10-27 10:37:58 | 000,272,384 | ---- | C] () -- C:\Program Files\Aug2008_XAudio_x64.cab [2008-10-27 10:37:58 | 000,270,858 | ---- | C] () -- C:\Program Files\Aug2008_XAudio_x86.cab [2008-10-27 10:37:58 | 000,270,644 | ---- | C] () -- C:\Program Files\JUN2008_XAudio_x64.cab [2008-10-27 10:37:54 | 000,274,976 | ---- | C] () -- C:\Program Files\Nov2008_XAudio_x64.cab [2008-10-27 10:37:54 | 000,273,627 | ---- | C] () -- C:\Program Files\Nov2008_XAudio_x86.cab [2008-10-27 10:37:52 | 000,270,040 | ---- | C] () -- C:\Program Files\JUN2008_XAudio_x86.cab [2008-10-27 10:37:52 | 000,252,210 | ---- | C] () -- C:\Program Files\Mar2008_XAudio_x64.cab [2008-10-27 10:37:52 | 000,227,266 | ---- | C] () -- C:\Program Files\Mar2008_XAudio_x86.cab [2008-10-27 10:37:52 | 000,199,112 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x64.cab [2008-10-27 10:37:50 | 000,213,823 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x64.cab [2008-10-27 10:37:50 | 000,198,138 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x64.cab [2008-10-27 10:37:50 | 000,193,491 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x64.cab [2008-10-27 10:37:48 | 000,197,778 | ---- | C] () -- C:\Program Files\NOV2007_XACT_x64.cab [2008-10-27 10:37:48 | 000,196,782 | ---- | C] () -- C:\Program Files\APR2007_XACT_x64.cab [2008-10-27 10:37:48 | 000,195,691 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x64.cab [2008-10-27 10:37:48 | 000,192,736 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x86.cab [2008-10-27 10:37:48 | 000,183,919 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x64.cab [2008-10-27 10:37:48 | 000,183,377 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x64.cab [2008-10-27 10:37:46 | 000,181,801 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x64.cab [2008-10-27 10:37:46 | 000,180,149 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x64.cab [2008-10-27 10:37:46 | 000,179,375 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x64.cab [2008-10-27 10:37:46 | 000,154,028 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x86.cab [2008-10-27 10:37:44 | 000,153,925 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x86.cab [2008-10-27 10:37:44 | 000,152,241 | ---- | C] () -- C:\Program Files\APR2007_XACT_x86.cab [2008-10-27 10:37:42 | 000,149,280 | ---- | C] () -- C:\Program Files\NOV2007_XACT_x86.cab [2008-10-27 10:37:42 | 000,148,999 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x86.cab [2008-10-27 10:37:42 | 000,146,615 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x86.cab [2008-10-27 10:37:42 | 000,139,033 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x86.cab [2008-10-27 10:37:42 | 000,138,251 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x86.cab [2008-10-27 10:37:40 | 000,134,687 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x86.cab [2008-10-27 10:37:40 | 000,133,425 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x86.cab [2008-10-27 10:37:40 | 000,123,352 | ---- | C] () -- C:\Program Files\Mar2008_XACT_x64.cab [2008-10-27 10:37:40 | 000,122,840 | ---- | C] () -- C:\Program Files\Aug2008_XACT_x64.cab [2008-10-27 10:37:40 | 000,122,070 | ---- | C] () -- C:\Program Files\JUN2008_XACT_x64.cab [2008-10-27 10:37:38 | 000,134,119 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x86.cab [2006-03-02 14:00:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2006-03-02 14:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [2004-10-03 19:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll ========== LOP Check ========== [2010-08-27 12:57:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LightScribe [2010-06-08 12:06:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2010-08-07 11:00:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\Codeton [2010-08-07 11:03:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\iPlus [2010-06-08 12:06:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\PC Suite [2010-06-08 12:02:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\Samsung [2010-07-20 12:10:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\win xp\Dane aplikacji\Thinstall ========== Purity Check ========== < End of report > OTL Extras logfile created on: 2010-09-29 23:41:36 - Run 2 OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\Testowe\Pulpit Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1 022,00 Mb Total Physical Memory | 734,00 Mb Available Physical Memory | 72,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 89,00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 55,66 Gb Total Space | 39,06 Gb Free Space | 70,18% Space Free | Partition Type: NTFS Drive D: | 48,83 Gb Total Space | 3,04 Gb Free Space | 6,23% Space Free | Partition Type: NTFS Drive E: | 48,89 Gb Total Space | 10,28 Gb Free Space | 21,02% Space Free | Partition Type: NTFS Drive F: | 495,22 Mb Total Space | 321,41 Mb Free Space | 64,90% Space Free | Partition Type: FAT G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: WIN-7B18EF599D2 Current User Name: Testowe Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 1 "FirewallOverride" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server -- File not found "C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server -- File not found ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java 6 Update 20 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder "{685755F8-C74B-4613-8137-C90AF458228D}" = ATI Catalyst Control Center "{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0 "{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A87B11AC-4344-4E5D-8B12-8F471A87DAD9}" = LightScribe 1.4.136.1 "{AC599724-5755-48C1-ABE7-ABB857652930}" = PC Connectivity Solution "{AC76BA86-7AD7-1045-7B44-A90000000001}" = Adobe Reader 9 - Polish "{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer "{B28B351F-1232-46EA-85EF-B8EA91641045}" = Nero 7 Essentials "{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}" = AVIVO Codecs "3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0) "6194C28A8F62DD817EA1B918E6E46E806A21B452" = Pakiet sterowników systemu Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0) "65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Pakiet sterowników systemu Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0) "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "All ATI Software" = Narzędzie Software Uninstall Utility firmy ATI "ATI Display Driver" = ATI Display Driver "Clock Tray Skins_is1" = Clock Tray Skins 3.91 "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń "InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer "InterActual Player" = InterActual Player "Kurka Wodna 2" = Kurka Wodna 2 "Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0 "Moorhuhn 2 V1.1" = Moorhuhn 2 V1.1 "Paseczek_is1" = Informator 1.2.0.413 "QuickTime" = QuickTime "Samsung Mobile Modem Device" = Samsung Mobile Modem Device Software "Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software "SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software "SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software "SAMSUNG USB Mobile Device" = SAMSUNG USB Mobile Device Software "SuperTux_is1" = SuperTux 0.1.3 "Turtix_is1" = Turtix "Usbfix" = UsbFix By El Desaparecido & C_XX "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format Runtime "XP Codec Pack" = XP Codec Pack ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 2010-06-20 05:18:49 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd bloomooweb.dll, wersja 0.0.0.0, adres błędu 0x0009c600. Error - 2010-06-20 05:55:19 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:27 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:29 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:29 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:29 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-20 05:55:29 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd sniezka.exe, wersja 0.0.0.0, adres błędu 0x00005c37. Error - 2010-06-21 05:48:50 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd sniezka.exe, wersja 0.0.0.0, moduł powodujący błąd bloomooweb.dll, wersja 0.0.0.0, adres błędu 0x0009c600. Error - 2010-07-06 05:44:44 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd winamp.exe, wersja 5.5.7.2792, moduł powodujący błąd winamp.exe, wersja 5.5.7.2792, adres błędu 0x0002f154. Error - 2010-07-15 14:57:50 | Computer Name = WIN-7B18EF599D2 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd winamp.exe, wersja 5.5.7.2792, moduł powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x072586c0. [ System Events ] Error - 2010-09-29 11:23:52 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DNS zależy od usługi Sterownik protokołu TCP/IP, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2010-09-29 11:23:52 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi AFD, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2010-09-29 11:23:52 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7001 Description = Usługa Usługi IPSEC zależy od usługi Sterownik IPSEC, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2010-09-29 11:23:52 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss StarOpen Tcpip Error - 2010-09-29 12:25:37 | Computer Name = WIN-7B18EF599D2 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd "%1084" podczas próby uruchomienia usługi StiSvc z argumentami "" w celu uruchomienia serwera: {A1F4E726-8CF1-11D1-BF92-0060081ED811} Error - 2010-09-29 12:26:05 | Computer Name = WIN-7B18EF599D2 | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd "%1084" podczas próby uruchomienia usługi EventSystem z argumentami "" w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 2010-09-29 17:34:51 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7034 Description = Usługa Ati HotKey Poller niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2010-09-29 17:34:51 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7034 Description = Usługa LightScribeService Direct Disc Labeling Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2010-09-29 17:34:52 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7034 Description = Usługa Java Quick Starter niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2010-09-29 17:34:52 | Computer Name = WIN-7B18EF599D2 | Source = Service Control Manager | ID = 7034 Description = Usługa NMIndexingService niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. < End of report > Odnośnik do komentarza
Landuss Opublikowano 30 Września 2010 Zgłoś Udostępnij Opublikowano 30 Września 2010 (edytowane) Wygląda, że się powiodło. Finalnie do wykonania pare rzeczy. 1. Użyj opcji Sprzątanie z OTL. 2. Użyj opcji Vaccinate z USBFix. 3. Wyzeruj stan przywracania systemu: INSTRUKCJE. 4. Obowiązkowa aktualizacja - Service Pack 3 + Internet Explorer 8 Edytowane 17 Października 2011 przez picasso 30.10.2010 - Temat zostaje zamknięty z powodu braku odpowiedzi. //picasso Odnośnik do komentarza
Rekomendowane odpowiedzi