Vista i ciągłe zwiechy

[musashi_007]

Witam.

Vistę mam od roku, i jak dotychczas nie musiałem przy niej nic grzebać - działała jak marzenie. Dzisiaj niestety zaczęła świrować - cokolwiek robię powoduje zwiech jakiegoś programu, czy to gg, skype, firefox, czasem zwiesza się też pulpit czy menedżer zadań. Usunąłem gadu-gadu, bo antywirus (COMODO Internet Security) wyłapał w pliku uninstallera jakiś syf. Niby chodzi lepiej, ale dalej przymula. Zauważyłem też, że w procesach mam 3 razy uruchomiony rundll.exe. Zrobiłem więc loga w HiJackThis:

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:53:49, on 2009-08-08
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Creative\SBAudigy\Volume Panel\VolPanlu.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\AIMP2\AIMP2.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Nistarok\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Users\Nistarok\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [w3dr.exe] D:\Gry\Warcraft III\\w3dr.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\SBAudigy\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [SRS Audio Sandbox] "C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe" /hideme
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep"
O4 - HKCU\..\Run: [CTRegRun] C:\Windows\CTRegRun.EXE
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15108/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\iEvony\Skype4COM.dll
O20 - AppInit_DLLs:    C:\Windows\system32\guard32.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

--
End of file - 6797 bytes


Proszę o przejrzenie i jakąś diagnozę ; ) Z góry dzięki.

[Okocza]

musashi_007, podaj pełen konfig kompa razem z marką i mocą zasilacza, do tego daj log z RSIT

[kahoona]

Wyłącz te usługi - oraz Nero z autostartu:

Kod: Zaznacz wszystko

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

Indeksowanie plików na komputerze pod kątem kopii zapasowej.

[musashi_007]

Kod: Zaznacz wszystko

Logfile of random's system information tool 1.06 (written by random/random)
Run by Nistarok at 2009-08-08 23:42:02
Microsoft® Windows Vista™ Ultimate  Service Pack 1
System drive C: has 6 GB (14%) free of 40 GB
Total RAM: 3070 MB (60% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{82347D1C-BCE0-438B-86D9-D7C6742C6763}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}]
IEPluginBHO Class - C:\Users\Nistarok\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll [2009-05-28 42088]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-03-26 5369856]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe []
"w3dr.exe"=D:\Gry\Warcraft III\\w3dr.exe [2008-08-03 61440]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-12-10 49152]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-03-27 13687328]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2009-03-27 92704]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2009-07-15 1793808]
"P17RunE"=RunDll32 P17RunE.dll,RunDLLEntry []
"VolPanel"=C:\Program Files\Creative\SBAudigy\Volume Panel\VolPanlu.exe [2007-02-28 180224]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]
"SRS Audio Sandbox"=C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe /hideme []
"AdobeBridge"= []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-07-16 25604904]
"ALLUpdate"=C:\Program Files\ALLPlayer\ALLUpdate.exe [2009-06-04 869888]
"CTRegRun"=C:\Windows\CTRegRun.EXE [2006-10-06 53248]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe ASO-616B5711-6DAE-4795-A05F-39A1E5104020 []
"Nowe Gadu-Gadu"=C:\Program Files\Nowe Gadu-Gadu\gg.exe [2009-07-27 10719848]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="   C:\Windows\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f12d4026-eb00-11dd-83d1-806e6f6e6963}]
shell\AutoRun\command - E:\CTRun\Start.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f4ccf35c-eb14-11dd-b07c-001060ebad16}]
shell\AutoRun\command - F:\FrameworkCheck.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.reg - open - "regedit.exe" "%1"

======List of files/folders created in the last 1 months======

2009-08-08 23:42:14 ----D---- C:\Program Files\trend micro
2009-08-08 23:42:02 ----D---- C:\rsit
2009-08-08 13:37:40 ----D---- C:\Program Files\Nowe Gadu-Gadu
2009-08-08 13:34:30 ----A---- C:\Windows\system32\ShellManager310E2D762.dll
2009-08-08 13:16:56 ----D---- C:\Program Files\Microsoft Silverlight
2009-08-08 12:25:27 ----A---- C:\Windows\ntbtlog.txt
2009-08-07 21:09:03 ----D---- C:\Users\Nistarok\AppData\Roaming\BSplayer Pro
2009-08-07 21:09:03 ----D---- C:\Users\Nistarok\AppData\Roaming\BSplayer
2009-08-07 21:09:03 ----D---- C:\Program Files\Webteh
2009-08-07 00:36:14 ----A---- C:\Windows\Irremote.ini
2009-08-07 00:31:47 ----A---- C:\Windows\system32\libFLAC.dll
2009-08-07 00:31:28 ----A---- C:\Windows\system32\mkunicode.dll
2009-08-07 00:28:58 ----A---- C:\Windows\system32\mkzlib.dll
2009-08-07 00:28:26 ----D---- C:\Program Files\Real Alternative
2009-08-07 00:25:02 ----A---- C:\Windows\system32\ole32.dll
2009-08-06 15:06:33 ----A---- C:\Windows\system32\wrap_oal.dll
2009-08-06 15:06:33 ----A---- C:\Windows\system32\OpenAL32.dll
2009-08-06 15:06:22 ----N---- C:\Windows\system32\Sens_oal.dll
2009-08-06 13:46:45 ----N---- C:\Windows\system32\AudioDrv.ini
2009-08-06 13:46:44 ----N---- C:\Windows\Updreg.EXE
2009-08-05 22:26:07 ----D---- C:\Program Files\kX Project
2009-08-05 22:13:36 ----D---- C:\Program Files\kX Audio Driver
2009-08-05 21:39:56 ----D---- C:\Program Files\Common Files\Creative Labs Shared
2009-08-05 11:09:46 ----D---- C:\Program Files\iEvony
2009-08-04 23:59:22 ----A---- C:\Windows\system32\xvidcore.dll
2009-08-04 23:55:51 ----D---- C:\ProgramData\ALLPlayer
2009-08-04 23:55:51 ----A---- C:\Windows\system32\iconv.dll
2009-08-04 23:55:40 ----D---- C:\Program Files\ALLPlayer
2009-08-04 17:42:59 ----D---- C:\Users\Nistarok\AppData\Roaming\Creative
2009-08-04 17:36:19 ----N---- C:\Windows\Ctregrun.exe
2009-08-04 17:33:52 ----D---- C:\Program Files\Common Files\Creative
2009-08-04 17:33:48 ----HD---- C:\Program Files\Creative Installation Information
2009-08-04 17:32:59 ----D---- C:\ProgramData\Creative
2009-08-04 17:31:59 ----A---- C:\Windows\system32\ctppld.dll
2009-08-04 17:31:58 ----A---- C:\Windows\system32\P17RunE.dll
2009-08-04 17:31:58 ----A---- C:\Windows\system32\OemSpiE.dll
2009-08-04 17:31:52 ----D---- C:\Windows\system32\Data
2009-08-04 17:31:36 ----A---- C:\Windows\system32\CmdRtr.DLL
2009-08-04 17:31:36 ----A---- C:\Windows\system32\APOMngr.DLL
2009-08-04 17:30:28 ----D---- C:\Program Files\Creative
2009-08-01 14:41:14 ----D---- C:\Program Files\VPX.PL Uploader
2009-08-01 11:15:00 ----D---- C:\Windows\system32\EventProviders
2009-07-31 15:25:16 ----D---- C:\Program Files\Easy GIF Animator
2009-07-29 10:05:43 ----A---- C:\Windows\system32\mshtml.dll
2009-07-29 10:05:42 ----A---- C:\Windows\system32\ieframe.dll
2009-07-29 10:05:41 ----A---- C:\Windows\system32\wininet.dll
2009-07-29 10:05:41 ----A---- C:\Windows\system32\urlmon.dll
2009-07-29 10:05:41 ----A---- C:\Windows\system32\msfeeds.dll
2009-07-29 10:05:41 ----A---- C:\Windows\system32\iertutil.dll
2009-07-29 10:05:40 ----A---- C:\Windows\system32\occache.dll
2009-07-29 10:05:40 ----A---- C:\Windows\system32\iedkcs32.dll
2009-07-29 10:05:39 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-07-29 10:05:39 ----A---- C:\Windows\system32\ieUnatt.exe
2009-07-29 10:05:39 ----A---- C:\Windows\system32\ieui.dll
2009-07-29 10:05:39 ----A---- C:\Windows\system32\iepeers.dll
2009-07-29 10:05:38 ----A---- C:\Windows\system32\msfeedssync.exe
2009-07-29 10:05:38 ----A---- C:\Windows\system32\jsproxy.dll
2009-07-29 10:05:38 ----A---- C:\Windows\system32\iesysprep.dll
2009-07-29 10:05:38 ----A---- C:\Windows\system32\iesetup.dll
2009-07-29 10:05:38 ----A---- C:\Windows\system32\iernonce.dll
2009-07-29 10:05:38 ----A---- C:\Windows\system32\ie4uinit.exe
2009-07-28 16:54:54 ----D---- C:\Users\Nistarok\AppData\Roaming\InstallShield Installation Information
2009-07-24 21:48:23 ----D---- C:\Program Files\ASIO4ALL v2
2009-07-21 22:25:09 ----D---- C:\Program Files\Common Files\Skype
2009-07-16 21:52:07 ----D---- C:\Windows\45235788142C44BE8A4DDDE9A84492E5.TMP
2009-07-16 20:24:16 ----D---- C:\ProgramData\Tages
2009-07-16 20:21:00 ----A---- C:\Windows\system32\XAudio2_4.dll
2009-07-16 20:21:00 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2009-07-16 20:21:00 ----A---- C:\Windows\system32\D3DX9_41.dll
2009-07-16 20:21:00 ----A---- C:\Windows\system32\d3dx10_41.dll
2009-07-16 20:21:00 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2009-07-16 20:20:59 ----A---- C:\Windows\system32\xactengine3_4.dll
2009-07-16 20:20:59 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2009-07-16 20:20:57 ----A---- C:\Windows\system32\d3dx10_40.dll
2009-07-16 20:20:57 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2009-07-16 20:20:54 ----A---- C:\Windows\system32\D3DX9_40.dll
2009-07-15 09:06:15 ----A---- C:\Windows\system32\t2embed.dll
2009-07-15 09:06:15 ----A---- C:\Windows\system32\fontsub.dll
2009-07-15 09:06:15 ----A---- C:\Windows\system32\atmfd.dll
2009-07-15 09:06:14 ----A---- C:\Windows\system32\dciman32.dll
2009-07-10 20:31:15 ----D---- C:\Program Files\Common Files\reFX

======List of files/folders modified in the last 1 months======

2009-08-08 23:42:41 ----D---- C:\Users\Nistarok\AppData\Roaming\Skype
2009-08-08 23:42:14 ----RD---- C:\Program Files
2009-08-08 23:42:01 ----D---- C:\Windows\Temp
2009-08-08 23:24:36 ----D---- C:\Windows\System32
2009-08-08 23:24:36 ----D---- C:\Windows\inf
2009-08-08 23:24:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-08-08 23:19:04 ----D---- C:\Users\Nistarok\AppData\Roaming\skypePM
2009-08-08 23:17:58 ----HD---- C:\Config.Msi
2009-08-08 15:43:51 ----SHD---- C:\System Volume Information
2009-08-08 13:38:11 ----SHD---- C:\Windows\Installer
2009-08-08 13:35:16 ----RSD---- C:\Windows\assembly
2009-08-08 13:35:16 ----D---- C:\Program Files\Common Files\Nero
2009-08-08 13:35:14 ----D---- C:\ProgramData\Nero
2009-08-08 13:34:59 ----A---- C:\Windows\system32\MsiExec.exe.log
2009-08-08 13:34:58 ----D---- C:\Windows
2009-08-08 13:30:39 ----D---- C:\Windows\system32\catroot2
2009-08-08 13:19:00 ----SD---- C:\Users\Nistarok\AppData\Roaming\Microsoft
2009-08-08 12:39:50 ----D---- C:\Program Files\Mozilla Firefox
2009-08-08 12:34:50 ----D---- C:\Program Files\Common Files\InstallShield
2009-08-08 12:34:48 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-08 12:33:35 ----D---- C:\ProgramData\Media Center Programs
2009-08-08 12:33:12 ----D---- C:\Users\Nistarok\AppData\Roaming\Any Video Converter
2009-08-08 00:54:09 ----D---- C:\Users\Nistarok\AppData\Roaming\BitTorrent
2009-08-07 20:52:07 ----D---- C:\Users\Nistarok\AppData\Roaming\Nero
2009-08-07 00:35:41 ----D---- C:\Program Files\Nero
2009-08-07 00:32:27 ----D---- C:\Program Files\NAPI-PROJEKT
2009-08-07 00:25:18 ----D---- C:\Windows\winsxs
2009-08-07 00:25:15 ----D---- C:\Windows\system32\catroot
2009-08-07 00:24:30 ----D---- C:\Windows\SoftwareDistribution
2009-08-07 00:24:22 ----D---- C:\Users\Nistarok\AppData\Roaming\Real
2009-08-07 00:24:00 ----D---- C:\Program Files\Common Files\Adobe
2009-08-06 15:04:08 ----D---- C:\Windows\system32\drivers
2009-08-06 13:56:08 ----SD---- C:\Windows\Downloaded Program Files
2009-08-05 22:40:33 ----D---- C:\Windows\system32\Tasks
2009-08-05 21:39:56 ----D---- C:\Program Files\Common Files
2009-08-04 23:55:51 ----HD---- C:\ProgramData
2009-08-01 00:13:13 ----D---- C:\Users\Nistarok\AppData\Roaming\Adobe
2009-07-31 17:23:19 ----D---- C:\Windows\Prefetch
2009-07-31 00:16:19 ----D---- C:\Windows\system32\migration
2009-07-31 00:16:14 ----D---- C:\Program Files\Internet Explorer
2009-07-28 18:46:47 ----D---- C:\Users\Nistarok\AppData\Roaming\Hamachi
2009-07-21 22:25:22 ----RD---- C:\Program Files\Skype
2009-07-21 22:25:05 ----D---- C:\ProgramData\Skype
2009-07-17 19:21:23 ----D---- C:\Users\Nistarok\AppData\Roaming\AIMP
2009-07-17 19:21:20 ----D---- C:\Program Files\AIMP2
2009-07-17 18:16:47 ----D---- C:\Users\Nistarok\AppData\Roaming\Nowe Gadu-Gadu
2009-07-16 21:52:06 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-07-16 20:25:07 ----D---- C:\Users\Nistarok\AppData\Roaming\Ubisoft
2009-07-16 10:05:31 ----D---- C:\Program Files\Windows Mail
2009-07-15 23:13:37 ----D---- C:\Program Files\COMODO
2009-07-15 18:44:40 ----A---- C:\Windows\system32\guard32.dll
2009-07-10 20:27:53 ----D---- C:\Program Files\Image-Line
2009-07-10 20:22:59 ----D---- C:\Windows\system32\appmgmt

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2009-07-15 128888]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2009-07-15 29520]
R1 CSC;Offline Files Driver; C:\Windows\system32\drivers\csc.sys [2008-01-19 350720]
R1 Inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2009-07-15 74328]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-07-16 281760]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-07-16 25888]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-02-14 25280]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x86.sys [2008-02-02 47616]
R3 MSPQM;Serwer proxy menedżera jakości Microsoft Streaming; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-18 7680]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-03-27 7738816]
R3 P1110VID;Creative WebCam NX; C:\Windows\system32\DRIVERS\P1110Vid.sys [2006-04-06 68608]
R3 P17;SB Audigy; C:\Windows\system32\drivers\P17.sys [2009-04-21 1147392]
R3 usbaudio;Sterownik audio USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-19 73088]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-10 17792]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S2 Nsynas32;Nsynas32; C:\Windows\system32\drivers\Nsynas32.sys [2001-04-09 17784]
S3 adb2sc2e;adb2sc2e; C:\Windows\system32\drivers\adb2sc2e.sys []
S3 ASPI;Advanced SCSI Programming Interface Driver; \??\C:\Windows\System32\DRIVERS\ASPI32.sys [2002-07-17 84832]
S3 BthEnum;Sterownik Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-01-26 19456]
S3 BthPan;Urządzenie Bluetooth (sieć osobista); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
S3 BTHPORT;Sterownik portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-01-26 220160]
S3 BTHUSB;Sterownik USB odbiornika radiowego Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-01-26 29184]
S3 Dot4;Sterownik MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
S3 Dot4Print;Sterownik klasy drukowania dla IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 gUSBSTOi;gUSBSTOi; \??\C:\Users\Nistarok\AppData\Local\Temp\gUSBSTOi.sys []
S3 HdAudAddService;Sterownik funkcji Microsoft 1.1 UAA dla usługi standardu High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-03-26 2103512]
S3 MSKSSRV;Serwer proxy usługi Microsoft Streaming; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Serwer proxy zegara Microsoft Streaming; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 RFCOMM;Urządzenie Bluetooth (Protokół TDI RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-19 49664]
S3 SRS_SSCFilter;SRS Labs Audio Sandbox (WDM); C:\Windows\system32\drivers\srs_sscfilter_i386.sys [2007-07-26 39808]
S3 usbscan;Sterownik skanera USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S3 Xponaut_WBD;Xponaut WaveBridge Device (WDM); C:\Windows\system32\drivers\xpntwbd.sys [2007-01-19 13184]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2009-07-15 707152]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2008-11-18 307200]
R2 hpqddsvc;Usługa HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-03-27 207392]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2009-08-06 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-08-05 79360]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2008-01-19 523776]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-04-06 655624]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2008-01-19 21504]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2008-01-19 917504]

-----------------EOF-----------------


A oto i log z RSIT'a.