sprzet to celeron 2,5 GHz, oraz 256 MB RAM a system win xp sp3. sprrawa przedstawia sie w taki sposob ze przy otwartym FF, GG6, IDM, praktycznie tyle, system strasznie muuli sie przejscie z jednego okna do drugiego zajmuje wieki... podaje logi poniewaz mysle ze komputer moze byc czyms zainfekowany... i wydaje mi sie iz dluga walka z nim przede mna, chociaz mysle ze moze po prostu to 256 MB Ramu moze byc przyczyna chociaz nie sadze by to dzialo sie w ten sposob gdyby ramu bylo niewystarczajaco duzo.
podam logi do sprawdzenia , aha przepraszam za brak polskich znakow, ale pisze z anglii...
LOGI OTL :
- Kod: Zaznacz wszystko
OTL Extras logfile created on: 02/09/2010 22:02:37 - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Documents and Settings\Administrator\My Documents\Downloads\Programs
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
247.00 Mb Total Physical Memory | 73.00 Mb Available Physical Memory | 29.00% Memory free
684.00 Mb Paging File | 407.00 Mb Available in Paging File | 60.00% Paging File free
Paging file location(s): C:\pagefile.sys 450 500 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 71.46 Gb Total Space | 46.74 Gb Free Space | 65.41% Space Free | Partition Type: NTFS
Drive D: | 109.60 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: ZANE-F00794A73B
Current User Name: Administrator
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
[HKEY_USERS\S-1-5-21-73586283-789336058-1417001333-500\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\Winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\Winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[color=#E56717]========== Authorized Applications List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program glowny -- (sms-express.com)
"C:\Program Files\WapSter\WapSter AQQ\AQQ.exe" = C:\Program Files\WapSter\WapSter AQQ\AQQ.exe:*:Enabled:AQQ Instant Messenger -- (Creative Team S.A.)
"C:\Program Files\Virgin Media\HUB\ServicepointService.exe" = C:\Program Files\Virgin Media\HUB\ServicepointService.exe:*:Enabled:Servicepoint Service -- (Radialpoint Inc.)
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0DFB3DE8-65B9-44FF-AA0A-3BECC5A2BFD1}" = Adobe Flash Player 10 Plugin
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 21
"{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 5.007.01
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics 2 Driver
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F6CE1230-A694-4B86-B21C-A11A112689DA}" = Trust WB-1400T Webcam
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"ALLPlayer_is1" = ALLPlayer V4.X
"AQQ" = WapSter AQQ
"DFX for Winamp" = DFX for Winamp
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"Driver Genius Professional Edition_is1" = Driver Genius Professional Edition
"DUMeter3_is1" = DU Meter
"Gadu-Gadu" = Gadu-Gadu 6.1
"Google Chrome" = Google Chrome
"Hot_MP3 Toolbar" = Hot_MP3 Toolbar
"ie8" = Windows Internet Explorer 8
"InstallShield_{F6CE1230-A694-4B86-B21C-A11A112689DA}" = Trust WB-1400T Webcam
"Internet Download Manager" = Internet Download Manager
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MjuiceWinamp" = Mjuice Components
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NeroMultiInstaller!UninstallKey" = Nero Suite
"PROSet" = Intel(R) PRO Network Adapters and Drivers
"RadialpointClientGateway_is1" = Virgin Media HUB 3.5.12
"RealAlt_is1" = Real Alternative 2.0.2
"SuperMp3Download" = Super Mp3 Download
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Winamp" = Winamp
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 24/08/2010 16:50:57 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 26/08/2010 09:44:07 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 26/08/2010 10:47:09 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 26/08/2010 16:44:12 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 27/08/2010 15:44:06 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 27/08/2010 22:44:18 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 29/08/2010 07:44:06 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 30/08/2010 06:44:36 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 30/08/2010 07:44:23 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
[ Application Events ]
Error - 24/08/2010 16:50:57 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 26/08/2010 09:44:07 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 26/08/2010 10:47:09 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 26/08/2010 16:44:12 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 27/08/2010 15:44:06 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 27/08/2010 22:44:18 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 29/08/2010 07:44:06 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 30/08/2010 06:44:36 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
Error - 30/08/2010 07:44:23 | Computer Name = ZANE-F00794A73B | Source = Google Update | ID = 20
Description =
[ System Events ]
Error - 02/09/2010 14:00:47 | Computer Name = ZANE-F00794A73B | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.10
on the Network Card with network address 001320ADA509.
Error - 02/09/2010 14:01:03 | Computer Name = ZANE-F00794A73B | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.10
on the Network Card with network address 001320ADA509.
Error - 02/09/2010 14:01:20 | Computer Name = ZANE-F00794A73B | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.10
on the Network Card with network address 001320ADA509.
Error - 02/09/2010 14:02:40 | Computer Name = ZANE-F00794A73B | Source = Dhcp | ID = 1002
Description = The IP address lease 82.4.157.86 for the Network Card with network
address 001320ADA509 has been denied by the DHCP server 0.0.0.0 (The DHCP Server
sent a DHCPNACK message).
Error - 02/09/2010 14:03:02 | Computer Name = ZANE-F00794A73B | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.10
on the Network Card with network address 001320ADA509.
Error - 02/09/2010 14:16:17 | Computer Name = ZANE-F00794A73B | Source = Dhcp | ID = 1002
Description = The IP address lease 82.4.157.86 for the Network Card with network
address 001320ADA509 has been denied by the DHCP server 0.0.0.0 (The DHCP Server
sent a DHCPNACK message).
Error - 02/09/2010 14:16:42 | Computer Name = ZANE-F00794A73B | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.10
on the Network Card with network address 001320ADA509.
Error - 02/09/2010 14:22:53 | Computer Name = ZANE-F00794A73B | Source = Service Control Manager | ID = 7034
Description = The DU Meter Service service terminated unexpectedly. It has done
this 1 time(s).
Error - 02/09/2010 15:10:58 | Computer Name = ZANE-F00794A73B | Source = Service Control Manager | ID = 7023
Description = The Client Service for NetWare service terminated with the following
error: %%2
Error - 02/09/2010 15:52:08 | Computer Name = ZANE-F00794A73B | Source = Service Control Manager | ID = 7023
Description = The Client Service for NetWare service terminated with the following
error: %%2
< End of report >
- Kod: Zaznacz wszystko
OTL logfile created on: 02/09/2010 22:02:37 - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Documents and Settings\Administrator\My Documents\Downloads\Programs
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
247.00 Mb Total Physical Memory | 73.00 Mb Available Physical Memory | 29.00% Memory free
684.00 Mb Paging File | 407.00 Mb Available in Paging File | 60.00% Paging File free
Paging file location(s): C:\pagefile.sys 450 500 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 71.46 Gb Total Space | 46.74 Gb Free Space | 65.41% Space Free | Partition Type: NTFS
Drive D: | 109.60 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: ZANE-F00794A73B
Current User Name: Administrator
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010/09/02 22:01:06 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\My Documents\Downloads\Programs\OTL.exe
PRC - [2010/09/02 20:03:54 | 002,815,408 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe
PRC - [2010/08/21 21:58:11 | 001,411,616 | ---- | M] (Hagel Technologies Ltd.) -- C:\Program Files\DU Meter\DUMeterSvc.exe
PRC - [2010/08/21 21:58:04 | 002,931,744 | ---- | M] (Hagel Technologies Ltd.) -- C:\Program Files\DU Meter\DUMeter.exe
PRC - [2010/08/18 02:58:17 | 000,945,720 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2009/12/14 11:26:02 | 000,668,912 | ---- | M] (Radialpoint Inc.) -- C:\Program Files\Virgin Media\HUB\ServicepointService.exe
PRC - [2008/04/14 11:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005/03/31 10:18:49 | 000,790,528 | ---- | M] (sms-express.com) -- C:\Program Files\Gadu-Gadu\gg.exe
PRC - [2005/01/14 10:32:38 | 000,053,248 | ---- | M] () -- C:\WINDOWS\system32\PAStiSvc.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010/09/02 22:01:06 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\My Documents\Downloads\Programs\OTL.exe
MOD - [2008/04/14 11:40:22 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2000/07/07 17:42:56 | 000,032,768 | ---- | M] () -- C:\Program Files\Gadu-Gadu\ggwhook.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2010/08/21 21:58:11 | 001,411,616 | ---- | M] (Hagel Technologies Ltd.) [Auto | Running] -- C:\Program Files\DU Meter\DUMeterSvc.exe -- (DUMeterSvc)
SRV - [2009/12/14 11:26:02 | 000,668,912 | ---- | M] (Radialpoint Inc.) [Auto | Running] -- C:\Program Files\Virgin Media\HUB\ServicepointService.exe -- (ServicepointService)
SRV - [2005/01/14 10:32:38 | 000,053,248 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\PAStiSvc.exe -- (STI Simulator)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2010/08/19 12:13:52 | 000,016,424 | ---- | M] (Hagel Technologies Ltd.) [Kernel | On_Demand | Stopped] -- C:\Program Files\DU Meter\DUM_XP32.sys -- (DUMeterDrv)
DRV - [2009/11/20 21:41:55 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2009/11/20 21:41:55 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt)
DRV - [2008/10/21 09:22:48 | 000,114,600 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017mdm.sys -- (s0017mdm)
DRV - [2008/10/21 09:22:48 | 000,109,736 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017unic.sys -- (s0017unic) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM)
DRV - [2008/10/21 09:22:48 | 000,108,328 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017mgmt.sys -- (s0017mgmt) Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM)
DRV - [2008/10/21 09:22:48 | 000,104,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017obex.sys -- (s0017obex)
DRV - [2008/10/21 09:22:48 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017bus.sys -- (s0017bus) Sony Ericsson Device 0017 driver (WDM)
DRV - [2008/10/21 09:22:48 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017nd5.sys -- (s0017nd5) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS)
DRV - [2008/10/21 09:22:48 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017mdfl.sys -- (s0017mdfl)
DRV - [2005/11/10 11:54:56 | 000,402,944 | R--- | M] (Belkin Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BLKWGU.sys -- (BLKWGU(Belkin)) Belkin Wireless G USB Network Adapter(Belkin)
DRV - [2005/02/24 13:29:14 | 000,162,176 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PFC027.sys -- (PAC207)
DRV - [2004/09/17 09:02:54 | 000,732,928 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (senfilt)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-73586283-789336058-1417001333-500\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-73586283-789336058-1417001333-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.tattoodle.com?tid={E27C19B9-6863-48ab-BE32-F5AE5201A1FD}
IE - HKU\S-1-5-21-73586283-789336058-1417001333-500\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-73586283-789336058-1417001333-500\..\URLSearchHook: {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - C:\Program Files\Hot_MP3\tbHot_.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-73586283-789336058-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "google.pl"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {3d7eb24f-2740-49df-8937-200b1cc08f8a}:1.5.13
FF - prefs.js..extensions.enabledItems: pl@dictionaries.addons.mozilla.org:1.0.20100405
FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:6.4
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/08/24 22:29:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/08/24 22:29:04 | 000,000,000 | ---D | M]
[2009/12/11 11:08:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions
[2009/10/26 13:51:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2010/09/02 19:43:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\c4zv3ze2.default\extensions
[2009/12/22 19:30:01 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\c4zv3ze2.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/08/24 21:46:30 | 000,000,000 | ---D | M] (Flashblock) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\c4zv3ze2.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2010/08/24 21:46:30 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\c4zv3ze2.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/08/28 14:31:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\c4zv3ze2.default\extensions\pl@dictionaries.addons.mozilla.org
[2010/04/12 20:20:59 | 000,002,428 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\c4zv3ze2.default\searchplugins\askcom.xml
[2010/08/24 20:53:10 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
O1 HOSTS File: ([2010/09/02 20:53:27 | 000,356,680 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 12237 more lines...
O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (BrowserHelper Class) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - C:\Program Files\SGPSA\SearchAssistant.dll (Make The Web Better, LLC)
O2 - BHO: (Hot MP3 Toolbar) - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - C:\Program Files\Hot_MP3\tbHot_.dll (Conduit Ltd.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (Hot MP3 Toolbar) - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - C:\Program Files\Hot_MP3\tbHot_.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-73586283-789336058-1417001333-500\..\Toolbar\WebBrowser: (Hot MP3 Toolbar) - {9384BD4C-DD14-4BE9-80F7-F6277511E4F5} - C:\Program Files\Hot_MP3\tbHot_.dll (Conduit Ltd.)
O4 - HKLM..\Run: [VirginMediaHUB.exe] C:\Program Files\Virgin Media\HUB\VirginMediaHUB.exe (Virgin Media)
O4 - HKU\S-1-5-21-73586283-789336058-1417001333-500..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-73586283-789336058-1417001333-500..\Run: [AQQ] C:\Program Files\WapSter\WapSter AQQ\AQQ.exe (Creative Team S.A.)
O4 - HKU\S-1-5-21-73586283-789336058-1417001333-500..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe (Hagel Technologies Ltd.)
O4 - HKU\S-1-5-21-73586283-789336058-1417001333-500..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (sms-express.com)
O4 - HKU\S-1-5-21-73586283-789336058-1417001333-500..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-21-73586283-789336058-1417001333-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-73586283-789336058-1417001333-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\System32\idmmbc.dll (Tonec Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\System32\idmmbc.dll (Tonec Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\System32\idmmbc.dll (Tonec Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\idmmbc.dll (Tonec Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\idmmbc.dll (Tonec Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\WINDOWS\System32\idmmbc.dll (Tonec Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.168.4.100 194.168.8.100
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\Antiwpa: DllName - antiwpa.dll - C:\WINDOWS\System32\antiwpa.dll ()
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - File not found
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/24 19:25:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008/10/06 15:35:58 | 000,000,053 | R--- | M] () - D:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{da4b2283-c0d0-11de-9d0d-001cdfdd9892}\Shell - "" = AutoRun
O33 - MountPoints2\{da4b2283-c0d0-11de-9d0d-001cdfdd9892}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{da4b2283-c0d0-11de-9d0d-001cdfdd9892}\Shell\AutoRun\command - "" = D:\DWizard615.exe -- [2009/03/02 02:44:26 | 000,541,952 | R--- | M] (D-Link Corp.)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2010/09/02 21:46:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\HOUSE Sezon 1
[2010/09/02 20:53:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
[2010/09/02 20:53:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2010/09/02 20:28:08 | 000,016,792 | ---- | C] (NTWind Software) -- C:\Documents and Settings\Administrator\Local Settings\Application Data\hide.exe
[2010/09/02 19:42:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\IDM
[2010/09/02 19:42:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\DMCache
[2010/09/02 19:41:06 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager
[2010/09/02 19:21:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Hagel Technologies
[2010/09/02 19:21:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Hagel Technologies
[2010/09/02 19:21:34 | 000,000,000 | ---D | C] -- C:\Program Files\DU Meter
[2010/09/02 18:57:42 | 000,000,000 | ---D | C] -- C:\Program Files\Virgin Media
[2010/08/28 15:20:23 | 000,000,000 | R--D | C] -- C:\muzzzzaaa
[2010/08/28 15:14:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DFX
[2010/08/28 15:14:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Winamp
[2010/08/28 15:09:00 | 000,000,000 | ---D | C] -- C:\Winamp_Pro_5.552_Build_2460
[2010/08/28 14:49:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\DFX
[2010/08/28 14:49:40 | 000,000,000 | ---D | C] -- C:\Program Files\DFX
[2010/08/28 14:49:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DFX
[2010/08/28 14:48:04 | 000,000,000 | ---D | C] -- C:\riga___rc_27_08_2010
[2010/08/28 14:47:49 | 000,000,000 | ---D | C] -- C:\DFX9.012_-_up.dla.EXSite
[2010/08/28 12:48:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SuperMP3Download
[2010/08/28 12:48:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\SuperMP3Download
[2010/08/28 12:46:36 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit
[2010/08/28 12:46:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Conduit
[2010/08/28 12:46:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Hot_MP3
[2010/08/28 12:46:31 | 000,000,000 | ---D | C] -- C:\Program Files\Hot_MP3
[2010/08/28 12:46:16 | 000,000,000 | ---D | C] -- C:\Program Files\SuperMp3Download
[2010/08/28 12:45:41 | 000,000,000 | ---D | C] -- C:\Super_MP3_Download_4.6.0.2
[2010/08/24 23:05:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\WapSter
[2010/08/24 22:59:28 | 000,000,000 | ---D | C] -- C:\Program Files\WapSter
[2010/08/24 22:30:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Media Player Classic
[2010/08/24 22:28:59 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2010/08/24 22:28:59 | 000,185,920 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll
[2010/08/24 22:28:59 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll
[2010/08/24 22:28:59 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll
[2010/08/24 22:28:56 | 000,000,000 | ---D | C] -- C:\Program Files\Real Alternative
[2010/08/24 22:14:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\DivX
[2010/08/24 22:10:15 | 000,000,000 | ---D | C] -- C:\Program Files\NAPI-PROJEKT
[2010/08/24 22:10:12 | 000,000,000 | ---D | C] -- C:\Program Files\ALLPlayer
[2010/08/24 18:41:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/08/24 18:41:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010/08/24 18:38:52 | 000,423,656 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010/08/24 18:38:52 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/08/24 18:38:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/08/24 18:38:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/08/24 16:37:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\New Folder (2)
[2010/08/24 16:22:08 | 000,000,000 | ---D | C] -- C:\My Music
[2010/08/24 16:21:58 | 000,000,000 | ---D | C] -- C:\Program Files\Mjuice Media Player
[2010/08/24 16:21:45 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp
[2010/08/24 16:12:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Gadu-Gadu
[2010/08/24 16:12:27 | 000,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu
[2010/08/24 15:59:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\My Documents\Sony Ericsson
[2010/08/24 15:41:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Sony Ericsson
[2010/08/24 15:41:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\BVRP Software
[2010/08/24 15:40:06 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\Documents and Settings\All Users\Application Data\hpe8.dll
[2010/08/24 15:39:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sony Ericsson
[2010/08/24 15:29:35 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidserv.dll
[2010/08/21 14:55:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Leadertech
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010/09/02 21:57:47 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/09/02 21:57:46 | 000,012,800 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/02 21:44:19 | 000,000,898 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/09/02 20:53:53 | 000,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/09/02 20:53:27 | 000,356,680 | RHS- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/09/02 20:50:29 | 000,000,894 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/09/02 20:50:27 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/09/02 20:50:26 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/09/02 20:49:29 | 007,340,032 | ---- | M] () -- C:\Documents and Settings\Administrator\ntuser.dat
[2010/09/02 20:49:29 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Administrator\ntuser.ini
[2010/09/02 20:28:08 | 000,016,792 | ---- | M] (NTWind Software) -- C:\Documents and Settings\Administrator\Local Settings\Application Data\hide.exe
[2010/09/02 20:07:49 | 000,000,781 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/09/02 20:07:49 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/09/02 20:07:49 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2010/09/02 11:30:41 | 000,017,288 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\get-the-fuck-out_inline.jpg
[2010/09/02 10:34:40 | 000,020,017 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\623c784110.jpeg
[2010/09/02 10:14:17 | 000,104,093 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\c67de6f6f5.jpeg
[2010/09/01 12:35:23 | 000,022,806 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\611a3d9eca.jpeg
[2010/08/28 23:17:16 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/08/28 15:10:40 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\WINAMP.LNK
[2010/08/28 15:10:40 | 000,000,664 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk
[2010/08/28 15:09:50 | 005,331,069 | ---- | M] () -- C:\DJ Gigi Smart - We Speak No Americano (Dirty Dutch Mix).mp3
[2010/08/28 15:08:46 | 000,000,095 | ---- | M] () -- C:\WINDOWS\winamp.ini
[2010/08/28 15:06:53 | 000,040,369 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\lolololool.m3u
[2010/08/28 13:05:34 | 004,908,313 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Satisfaction Vs We No Speak Americano.mp3
[2010/08/28 12:59:00 | 004,194,851 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\johnny crockett - e for electro.mp3
[2010/08/28 12:46:25 | 000,000,778 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Super Mp3 Download.lnk
[2010/08/27 02:04:10 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/08/27 02:03:32 | 000,000,653 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Gadu-Gadu.lnk
[2010/08/26 18:07:58 | 000,000,355 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\dj hazel - club reaktor 16.05.2010.mp3
[2010/08/25 15:00:40 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2010/08/24 23:00:44 | 000,000,591 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\AQQ.lnk
[2010/08/24 23:00:43 | 000,000,609 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Start AQQ.lnk
[2010/08/24 22:10:29 | 000,000,664 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Napi-projekt.lnk
[2010/08/24 22:10:29 | 000,000,640 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\ALLPlayer V4.4.lnk
[2010/08/24 20:53:31 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/08/24 16:23:08 | 000,001,464 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\WINAMP.LNK
[2010/08/24 16:12:30 | 000,000,653 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Gadu-Gadu.lnk
[2010/08/24 15:40:09 | 000,001,853 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Sony Ericsson PC Suite 5.0.lnk
[2010/08/24 15:40:08 | 000,148,736 | ---- | M] (Avanquest Software) -- C:\Documents and Settings\All Users\Application Data\hpe8.dll
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010/09/02 20:53:05 | 000,060,416 | ---- | C] () -- C:\WINDOWS\System32\antiwpa.dll
[2010/09/02 11:30:31 | 000,017,288 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\get-the-fuck-out_inline.jpg
[2010/09/02 10:34:37 | 000,020,017 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\623c784110.jpeg
[2010/09/02 10:14:10 | 000,104,093 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\c67de6f6f5.jpeg
[2010/09/01 12:35:21 | 000,022,806 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\611a3d9eca.jpeg
[2010/08/28 15:10:40 | 000,000,664 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk
[2010/08/28 15:06:53 | 000,040,369 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\lolololool.m3u
[2010/08/28 15:06:15 | 005,331,069 | ---- | C] () -- C:\DJ Gigi Smart - We Speak No Americano (Dirty Dutch Mix).mp3
[2010/08/28 13:04:52 | 004,908,313 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Satisfaction Vs We No Speak Americano.mp3
[2010/08/28 12:58:37 | 004,194,851 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\johnny crockett - e for electro.mp3
[2010/08/28 12:46:25 | 000,000,778 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Super Mp3 Download.lnk
[2010/08/27 02:04:10 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/08/27 02:03:32 | 000,000,653 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Gadu-Gadu.lnk
[2010/08/26 18:07:43 | 000,000,355 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\dj hazel - club reaktor 16.05.2010.mp3
[2010/08/24 23:00:44 | 000,000,591 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\AQQ.lnk
[2010/08/24 23:00:42 | 000,000,609 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Start AQQ.lnk
[2010/08/24 22:10:29 | 000,000,664 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Napi-projekt.lnk
[2010/08/24 22:10:29 | 000,000,640 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\ALLPlayer V4.4.lnk
[2010/08/24 22:10:16 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/08/24 22:10:16 | 000,797,184 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.ax
[2010/08/24 22:10:16 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010/08/24 20:53:29 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/08/24 16:23:08 | 000,001,464 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\WINAMP.LNK
[2010/08/24 16:23:08 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\WINAMP.LNK
[2010/08/24 16:22:11 | 000,000,095 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2010/08/24 16:12:30 | 000,000,653 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Gadu-Gadu.lnk
[2010/08/24 15:40:09 | 000,001,853 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Sony Ericsson PC Suite 5.0.lnk
[2009/11/23 05:14:46 | 000,005,250 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2009/10/27 14:16:48 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009/10/24 20:15:16 | 000,012,800 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/10/24 20:01:06 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\e100bmsg.dll
[2005/02/24 13:29:14 | 000,162,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\PFC027.sys
[2005/01/25 16:15:42 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\PA207USD.DLL
[2000/07/05 17:53:06 | 000,088,064 | ---- | C] () -- C:\WINDOWS\System32\AudioExCtl.dll
[color=#E56717]========== LOP Check ==========[/color]
[2010/09/02 21:58:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\DMCache
[2010/09/02 21:30:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\IDM
[2010/08/21 14:55:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Leadertech
[2010/08/21 15:00:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Sony
[2010/08/28 12:48:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\SuperMP3Download
[2010/04/12 19:28:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\uTorrent
[2010/03/16 12:27:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Virgin Media
[2010/08/24 15:41:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software
[2010/08/28 14:49:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DFX
[2010/09/02 19:21:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Hagel Technologies
[2009/12/30 01:02:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
[2010/03/16 12:28:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Radialpoint
[2009/11/19 20:36:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sony
[2010/08/28 13:21:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SuperMP3Download
[2010/03/16 12:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Virgin Media
[color=#E56717]========== Purity Check ==========[/color]
< End of report >
