Logfile of random's system information tool 1.09 (written by random/random) Run by Damian at 2012-06-20 13:15:37 Microsoft Windows XP Professional Dodatek Service Pack 3 System drive C: has 54 GB (89%) free of 60 GB Total RAM: 2047 MB (65% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:16:22, on 2012-06-20 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\DialNet\winpppoverethernet.exe C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\WINDOWS\system32\nvsvc32.exe C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe C:\Program Files\DialNet\WrOS.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Opera\opera.exe C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe C:\Program Files\foobar2000\foobar2000.exe C:\Documents and Settings\Damian\Pulpit\RSIT.exe C:\Program Files\trend micro\Damian.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O4 - HKLM\..\Run: [a-winpoet-service] "C:\Program Files\DialNet\winpppoverethernet.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [AQQ] C:\PROGRA~1\WapSter\WAPSTE~1\AQQ.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-21-1123561945-823518204-1417001333-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{8EE0B2A2-3306-4A22-BAEA-F6ED455BD2FB}: NameServer = 217.30.129.149 217.30.137.200 O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe O23 - Service: WinPPPoverEthernet - Fine Point Technologies, Inc. - C:\Program Files\DialNet\WrOS.EXE -- End of file - 5193 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\Adobe Flash Player Updater.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-05-30 4014280] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "a-winpoet-service"=C:\Program Files\DialNet\winpppoverethernet.exe [2007-07-06 483328] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2012-05-15 15504192] "NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login [] "nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2012-05-15 1634112] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2012-04-24 20065896] "Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2012-04-04 462408] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "AQQ"=C:\PROGRA~1\WapSter\WAPSTE~1\AQQ.exe [2012-05-04 10591232] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2009-09-10 84992] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2009-09-10 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableLUA"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "NoDriveAutoRun"=67108863 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"=1 "NoDriveAutoRun"=67108863 "NoDriveTypeAutoRun"=323 "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe" "C:\Program Files\WapSter\WapSter AQQ\AQQ.exe"="C:\Program Files\WapSter\WapSter AQQ\AQQ.exe:*:Enabled:AQQ Instant Messenger" "C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper" "C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser" "C:\WINDOWS\SOUNDMAN.EXE"="C:\WINDOWS\SOUNDMAN.EXE:*:Enabled:ipsec" "C:\Program Files\DialNet\winpppoverethernet.exe"="C:\Program Files\DialNet\winpppoverethernet.exe:*:Enabled:ipsec" "C:\Program Files\DialNet\WrDialer.exe"="C:\Program Files\DialNet\WrDialer.exe:*:Enabled:ipsec" "C:\Program Files\foobar2000\foobar2000.exe"="C:\Program Files\foobar2000\foobar2000.exe:*:Enabled:ipsec" "C:\Program Files\Ventrilo\Ventrilo.exe"="C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:ipsec" "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"="C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe:*:Enabled:ipsec" "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe"="C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe:*:Enabled:ipsec" "C:\Program Files\DialNet\WrOS.EXE"="C:\Program Files\DialNet\WrOS.EXE:*:Enabled:ipsec" "C:\WINDOWS\system32\RUNDLL32.EXE"="C:\WINDOWS\system32\RUNDLL32.EXE:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.trspch"=tssoft32.acm "vidc.cvid"=iccvid.dll "vidc.I420"=msh263.drv "vidc.iv31"=ir32_32.dll "vidc.iv32"=ir32_32.dll "vidc.iv41"=ir41_32.ax "vidc.iyuv"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvu9"=tsbyuv.dll "vidc.yvyu"=msyuv.dll "wavemapper"=msacm32.drv "msacm.msg723"=msg723.acm "vidc.M263"=msh263.drv "vidc.M261"=msh261.drv "msacm.msaudio1"=msaud32.acm "msacm.sl_anet"=sl_anet.acm "msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax "vidc.iv50"=ir50_32.dll "msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm "msacm.vorbis"=vorbis.acm "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======List of files/folders created in the last 1 month====== 2012-06-20 13:15:38 ----D---- C:\Program Files\trend micro 2012-06-20 13:15:37 ----D---- C:\rsit 2012-06-20 12:23:13 ----SHD---- C:\RECYCLER 2012-06-20 12:23:11 ----A---- C:\ljqpb.pif 2012-06-20 12:07:00 ----D---- C:\WINDOWS\temp 2012-06-20 12:06:59 ----A---- C:\ComboFix.txt 2012-06-20 02:06:09 ----A---- C:\WINDOWS\ntbtlog.txt 2012-06-20 02:03:31 ----A---- C:\SAFEBOOT_REPAIR.TXT 2012-06-20 01:24:41 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\Malwarebytes 2012-06-20 01:22:11 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes 2012-06-20 01:22:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2012-06-20 01:22:10 ----A---- C:\WINDOWS\system32\drivers\mbam.sys 2012-06-20 00:43:34 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\Ventrilo 2012-06-20 00:43:26 ----D---- C:\Program Files\Ventrilo 2012-06-20 00:43:22 ----A---- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini 2012-06-20 00:43:06 ----D---- C:\Program Files\Common Files\Wise Installation Wizard 2012-06-20 00:28:08 ----A---- C:\Boot.bak 2012-06-20 00:28:04 ----RASHD---- C:\cmdcons 2012-06-20 00:27:35 ----A---- C:\WINDOWS\zip.exe 2012-06-20 00:27:35 ----A---- C:\WINDOWS\SWXCACLS.exe 2012-06-20 00:27:35 ----A---- C:\WINDOWS\SWSC.exe 2012-06-20 00:27:35 ----A---- C:\WINDOWS\SWREG.exe 2012-06-20 00:27:35 ----A---- C:\WINDOWS\sed.exe 2012-06-20 00:27:35 ----A---- C:\WINDOWS\PEV.exe 2012-06-20 00:27:35 ----A---- C:\WINDOWS\NIRCMD.exe 2012-06-20 00:27:35 ----A---- C:\WINDOWS\MBR.exe 2012-06-20 00:27:35 ----A---- C:\WINDOWS\grep.exe 2012-06-20 00:27:28 ----AD---- C:\Qoobox 2012-06-20 00:27:18 ----D---- C:\WINDOWS\erdnt 2012-06-19 23:49:57 ----A---- C:\WINDOWS\vncutil.exe 2012-06-19 23:49:57 ----A---- C:\WINDOWS\system32\RtkCoLDRXP.dll 2012-06-19 23:49:57 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT 2012-06-19 23:49:57 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys 2012-06-19 23:49:56 ----DC---- C:\WINDOWS\system32\DRVSTORE 2012-06-19 23:49:56 ----A---- C:\WINDOWS\system32\RtkCoInstIIXP.dll 2012-06-19 23:49:56 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys 2012-06-19 23:49:56 ----A---- C:\WINDOWS\RtkAudioService.exe 2012-06-19 23:47:22 ----D---- C:\Program Files\7-Zip 2012-06-19 23:39:33 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\Adobe 2012-06-19 23:39:29 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe 2012-06-19 23:34:12 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\Opera 2012-06-19 23:34:07 ----D---- C:\Program Files\Opera 2012-06-19 23:28:01 ----D---- C:\Program Files\WapSter 2012-06-19 23:26:54 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\foobar2000 2012-06-19 23:26:48 ----D---- C:\Program Files\foobar2000 2012-06-19 21:04:27 ----A---- C:\WINDOWS\system32\h323log.txt 2012-06-19 21:03:26 ----A---- C:\WINDOWS\system32\drivers\audstub.sys 2012-06-19 21:02:57 ----A---- C:\WINDOWS\system32\drivers\redbook.sys 2012-06-19 21:02:09 ----A---- C:\WINDOWS\system32\usbui.dll 2012-06-19 21:01:06 ----SHD---- C:\WINDOWS\Installer 2012-06-19 21:01:06 ----D---- C:\Program Files\Common Files\ODBC 2012-06-19 21:01:06 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2012-06-19 21:01:06 ----A---- C:\WINDOWS\ODBCINST.INI 2012-06-19 21:01:03 ----RD---- C:\Program Files 2012-06-19 21:01:03 ----D---- C:\Program Files\Common Files\SpeechEngines 2012-06-19 21:01:03 ----D---- C:\Program Files\Common Files\Microsoft Shared 2012-06-19 21:01:03 ----D---- C:\Program Files\Common Files 2012-06-19 21:00:52 ----RA---- C:\WINDOWS\system32\kbdtuq.dll 2012-06-19 21:00:52 ----RA---- C:\WINDOWS\system32\kbdtuf.dll 2012-06-19 21:00:52 ----RA---- C:\WINDOWS\system32\kbdazel.dll 2012-06-19 21:00:51 ----RA---- C:\WINDOWS\system32\kbdtat.dll 2012-06-19 21:00:51 ----RA---- C:\WINDOWS\system32\kbdmon.dll 2012-06-19 21:00:51 ----RA---- C:\WINDOWS\system32\kbdkyr.dll 2012-06-19 21:00:51 ----RA---- C:\WINDOWS\system32\kbdaze.dll 2012-06-19 21:00:50 ----RA---- C:\WINDOWS\system32\kbdycc.dll 2012-06-19 21:00:50 ----RA---- C:\WINDOWS\system32\kbduzb.dll 2012-06-19 21:00:50 ----RA---- C:\WINDOWS\system32\kbdur.dll 2012-06-19 21:00:50 ----RA---- C:\WINDOWS\system32\kbdru1.dll 2012-06-19 21:00:50 ----RA---- C:\WINDOWS\system32\kbdru.dll 2012-06-19 21:00:50 ----RA---- C:\WINDOWS\system32\kbdkaz.dll 2012-06-19 21:00:50 ----RA---- C:\WINDOWS\system32\kbdbu.dll 2012-06-19 21:00:50 ----RA---- C:\WINDOWS\system32\kbdblr.dll 2012-06-19 21:00:49 ----RA---- C:\WINDOWS\system32\kbdhept.dll 2012-06-19 21:00:48 ----RA---- C:\WINDOWS\system32\kbdhela3.dll 2012-06-19 21:00:48 ----RA---- C:\WINDOWS\system32\kbdhela2.dll 2012-06-19 21:00:48 ----RA---- C:\WINDOWS\system32\kbdhe319.dll 2012-06-19 21:00:48 ----RA---- C:\WINDOWS\system32\kbdhe220.dll 2012-06-19 21:00:48 ----RA---- C:\WINDOWS\system32\kbdhe.dll 2012-06-19 21:00:48 ----RA---- C:\WINDOWS\system32\kbdgkl.dll 2012-06-19 21:00:47 ----RA---- C:\WINDOWS\system32\kbdlv1.dll 2012-06-19 21:00:47 ----RA---- C:\WINDOWS\system32\kbdlv.dll 2012-06-19 21:00:47 ----RA---- C:\WINDOWS\system32\kbdlt1.dll 2012-06-19 21:00:47 ----RA---- C:\WINDOWS\system32\kbdlt.dll 2012-06-19 21:00:47 ----RA---- C:\WINDOWS\system32\kbdest.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdsl1.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdsl.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdro.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdhu1.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdhu.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdcz2.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdcz1.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll 2012-06-19 21:00:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL 2012-06-19 21:00:39 ----A---- C:\WINDOWS\system32\spxcoins.dll 2012-06-19 21:00:39 ----A---- C:\WINDOWS\system32\irclass.dll 2012-06-19 21:00:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll 2012-06-19 21:00:39 ----A---- C:\WINDOWS\system32\dgsetup.dll 2012-06-19 21:00:39 ----A---- C:\WINDOWS\system32\dgrpsetu.dll 2012-06-19 21:00:37 ----N---- C:\WINDOWS\system32\CONFIG.TMP 2012-06-19 21:00:37 ----A---- C:\WINDOWS\TASKMAN.EXE 2012-06-19 21:00:36 ----A---- C:\WINDOWS\system32\drivers\irenum.sys 2012-06-19 21:00:36 ----A---- C:\WINDOWS\system32\batt.dll 2012-06-19 21:00:35 ----A---- C:\WINDOWS\system32\storprop.dll 2012-06-19 21:00:35 ----A---- C:\WINDOWS\NOTEPAD.EXE 2012-06-19 21:00:28 ----ASH---- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini 2012-06-19 21:00:15 ----D---- C:\WINDOWS\system32\CatRoot2 2012-06-19 21:00:15 ----D---- C:\WINDOWS\system32\CatRoot 2012-06-19 21:00:09 ----SD---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft 2012-06-19 20:59:55 ----A---- C:\WINDOWS\setuplog.txt 2012-06-19 20:59:52 ----D---- C:\Documents and Settings 2012-06-19 20:59:51 ----SHD---- C:\System Volume Information 2012-06-19 20:59:51 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT 2012-06-19 20:59:05 ----RASH---- C:\boot.ini 2012-06-19 20:56:19 ----SD---- C:\WINDOWS\Offline Web Pages 2012-06-19 20:56:19 ----SD---- C:\WINDOWS\Downloaded Program Files 2012-06-19 20:56:19 ----RSHDC---- C:\WINDOWS\system32\dllcache 2012-06-19 20:56:19 ----RSD---- C:\WINDOWS\Fonts 2012-06-19 20:56:19 ----RD---- C:\WINDOWS\Web 2012-06-19 20:56:19 ----HD---- C:\WINDOWS\inf 2012-06-19 20:56:19 ----D---- C:\WINDOWS\WinSxS 2012-06-19 20:56:19 ----D---- C:\WINDOWS\WBEM 2012-06-19 20:56:19 ----D---- C:\WINDOWS\twain_32 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\wins 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\wbem 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\usmt 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\spool 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\ShellExt 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\Setup 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\ras 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\pl-pl 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\pl 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\oobe 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\npp 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\mui 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\inetsrv 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\IME 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\icsxml 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\ias 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\export 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\drivers\UMDF 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\drivers\etc 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\drivers\disdn 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\drivers 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\dhcp 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\config 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\3com_dmi 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\3076 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\2052 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\1054 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\1045 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\1042 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\1041 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\1037 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\1033 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\1031 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\1028 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32\1025 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system32 2012-06-19 20:56:19 ----D---- C:\WINDOWS\system 2012-06-19 20:56:19 ----D---- C:\WINDOWS\security 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Resources 2012-06-19 20:56:19 ----D---- C:\WINDOWS\repair 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Provisioning 2012-06-19 20:56:19 ----D---- C:\WINDOWS\PeerNet 2012-06-19 20:56:19 ----D---- C:\WINDOWS\pchealth 2012-06-19 20:56:19 ----D---- C:\WINDOWS\NLDRV 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Network Diagnostic 2012-06-19 20:56:19 ----D---- C:\WINDOWS\mui 2012-06-19 20:56:19 ----D---- C:\WINDOWS\msapps 2012-06-19 20:56:19 ----D---- C:\WINDOWS\msagent 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Media 2012-06-19 20:56:19 ----D---- C:\WINDOWS\L2Schemas 2012-06-19 20:56:19 ----D---- C:\WINDOWS\java 2012-06-19 20:56:19 ----D---- C:\WINDOWS\ime 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Help 2012-06-19 20:56:19 ----D---- C:\WINDOWS\ehome 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Driver Cache 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Debug 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Cursors 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Connection Wizard 2012-06-19 20:56:19 ----D---- C:\WINDOWS\Config 2012-06-19 20:56:19 ----D---- C:\WINDOWS\AppPatch 2012-06-19 20:56:19 ----D---- C:\WINDOWS\addins 2012-06-19 20:56:19 ----D---- C:\WINDOWS 2012-06-19 20:56:19 ----ASH---- C:\pagefile.sys 2012-06-19 19:49:15 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\NVIDIA 2012-06-19 19:49:14 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\Tibia 2012-06-19 19:47:17 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\NVIDIA Corporation 2012-06-19 19:46:57 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\NVIDIA 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrszht.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrszhc.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrstr.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrsth.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrssv.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrssl.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrssk.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrsru.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrsptb.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrspt.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrspl.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrsno.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrsnl.dll 2012-06-19 19:46:46 ----A---- C:\WINDOWS\system32\nvrsko.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvsvc32.exe 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrsja.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrsit.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrshu.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrshe.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrsfr.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrsfi.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrsesm.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrses.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrseng.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrsel.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrsde.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrsda.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrscs.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvrsar.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvcpl.dll 2012-06-19 19:46:45 ----A---- C:\WINDOWS\system32\nvcolor.exe 2012-06-19 19:46:44 ----A---- C:\WINDOWS\system32\nvmctray.dll 2012-06-19 19:46:43 ----A---- C:\WINDOWS\system32\nvwddi.dll 2012-06-19 19:46:18 ----A---- C:\WINDOWS\system32\OpenCL.dll 2012-06-19 19:46:01 ----A---- C:\WINDOWS\system32\nvoglnt.dll 2012-06-19 19:46:01 ----A---- C:\WINDOWS\system32\nvgenco32.dll 2012-06-19 19:46:01 ----A---- C:\WINDOWS\system32\nvdispco32.dll 2012-06-19 19:46:01 ----A---- C:\WINDOWS\system32\nvcuvid.dll 2012-06-19 19:46:01 ----A---- C:\WINDOWS\system32\nvcuvenc.dll 2012-06-19 19:46:00 ----A---- C:\WINDOWS\system32\nvcuda.dll 2012-06-19 19:45:59 ----A---- C:\WINDOWS\system32\nvcompiler.dll 2012-06-19 19:45:59 ----A---- C:\WINDOWS\system32\nvapi.dll 2012-06-19 19:45:59 ----A---- C:\WINDOWS\system32\nv4_disp.dll 2012-06-19 19:45:59 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys 2012-06-19 19:45:24 ----D---- C:\Program Files\NVIDIA Corporation 2012-06-19 19:44:52 ----D---- C:\NVIDIA 2012-06-19 19:39:55 ----A---- C:\WINDOWS\system32\d3d9caps.dat 2012-06-19 19:39:53 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\Skype 2012-06-19 19:39:49 ----RD---- C:\Program Files\Skype 2012-06-19 19:39:49 ----D---- C:\Program Files\Common Files\Skype 2012-06-19 19:39:46 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Skype 2012-06-19 19:33:32 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\Macromedia 2012-06-19 19:29:21 ----RA---- C:\WINDOWS\system32\drivers\Rtenicxp.sys 2012-06-19 19:28:05 ----D---- C:\WINDOWS\system32\Lang 2012-06-19 19:27:04 ----R---- C:\WINDOWS\system32\ChCfg.exe 2012-06-19 19:27:03 ----A---- C:\WINDOWS\system32\drivers\splitter.sys 2012-06-19 19:27:02 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys 2012-06-19 19:27:01 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys 2012-06-19 19:27:00 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys 2012-06-19 19:27:00 ----A---- C:\WINDOWS\system32\drivers\aec.sys 2012-06-19 19:26:59 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys 2012-06-19 19:26:58 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys 2012-06-19 19:26:57 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys 2012-06-19 19:26:56 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys 2012-06-19 19:26:54 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys 2012-06-19 19:26:53 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2012-06-19 19:26:50 ----D---- C:\WINDOWS\system32\RTCOM 2012-06-19 19:26:48 ----A---- C:\WINDOWS\system32\ksuser.dll 2012-06-19 19:26:48 ----A---- C:\WINDOWS\system32\drivers\portcls.sys 2012-06-19 19:26:48 ----A---- C:\WINDOWS\system32\drivers\drmk.sys 2012-06-19 19:26:45 ----A---- C:\WINDOWS\SOUNDMAN.EXE 2012-06-19 19:26:44 ----A---- C:\WINDOWS\SkyTel.exe 2012-06-19 19:26:43 ----A---- C:\WINDOWS\RtlUpd.exe 2012-06-19 19:26:41 ----A---- C:\WINDOWS\RTLCPL.EXE 2012-06-19 19:26:40 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys 2012-06-19 19:26:35 ----A---- C:\WINDOWS\RTHDCPL.EXE 2012-06-19 19:26:34 ----A---- C:\WINDOWS\MicCal.exe 2012-06-19 19:26:31 ----A---- C:\WINDOWS\ALCMTR.EXE 2012-06-19 19:26:30 ----A---- C:\WINDOWS\ALCWZRD.EXE 2012-06-19 19:26:29 ----D---- C:\Program Files\Realtek 2012-06-19 19:26:23 ----R---- C:\WINDOWS\RtlExUpd.dll 2012-06-19 19:26:23 ----A---- C:\WINDOWS\HideWin.exe 2012-06-19 19:26:19 ----D---- C:\Program Files\Common Files\InstallShield 2012-06-19 19:24:05 ----D---- C:\WINDOWS\system32\ReinstallBackups 2012-06-19 19:24:02 ----D---- C:\Program Files\Intel 2012-06-19 19:17:38 ----A---- C:\WINDOWS\WinPoET_Runtime.txt 2012-06-19 19:17:38 ----A---- C:\WINDOWS\winpoet_postinstallation.txt 2012-06-19 19:17:37 ----A---- C:\WINDOWS\system32\drivers\fpd.sys 2012-06-19 19:16:18 ----A---- C:\WINDOWS\system32\ROBOEX32.DLL 2012-06-19 19:16:18 ----A---- C:\WINDOWS\system32\drivers\WrKPoETNic2000.sys 2012-06-19 19:16:18 ----A---- C:\WINDOWS\system32\drivers\WrKPoET2000.sys 2012-06-19 19:16:16 ----HD---- C:\Program Files\InstallShield Installation Information 2012-06-19 19:16:16 ----D---- C:\Program Files\DialNet 2012-06-19 19:16:09 ----A---- C:\WINDOWS\winpoet_preinstallation.txt 2012-06-19 19:16:05 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\InstallShield 2012-06-19 19:13:37 ----D---- C:\Documents and Settings\Damian\Dane aplikacji\Identities 2012-06-19 19:13:35 ----HD---- C:\Program Files\Uninstall Information 2012-06-19 19:13:33 ----ASH---- C:\Documents and Settings\Damian\Dane aplikacji\desktop.ini 2012-06-19 19:13:32 ----SD---- C:\Documents and Settings\Damian\Dane aplikacji\Microsoft 2012-06-19 19:13:00 ----D---- C:\WINDOWS\SoftwareDistribution 2012-06-19 19:12:58 ----D---- C:\WINDOWS\Prefetch 2012-06-19 19:12:57 ----SD---- C:\WINDOWS\system32\Microsoft 2012-06-19 19:12:57 ----A---- C:\WINDOWS\SchedLgU.Txt 2012-06-19 19:11:35 ----AS---- C:\WINDOWS\bootstat.dat 2012-06-19 19:10:07 ----D---- C:\WINDOWS\system32\xircom 2012-06-19 19:10:07 ----D---- C:\Program Files\xerox 2012-06-19 19:10:07 ----D---- C:\Program Files\microsoft frontpage 2012-06-19 19:09:39 ----D---- C:\WINDOWS\system32\PreInstall 2012-06-19 19:09:38 ----A---- C:\WINDOWS\system32\spupdsvc.exe 2012-06-19 19:09:37 ----HD---- C:\WINDOWS\$hf_mig$ 2012-06-19 19:09:34 ----N---- C:\WINDOWS\system32\spmsg.dll 2012-06-19 19:09:24 ----RASH---- C:\MSDOS.SYS 2012-06-19 19:09:24 ----RASH---- C:\IO.SYS 2012-06-19 19:09:24 ----A---- C:\WINDOWS\control.ini 2012-06-19 19:09:24 ----A---- C:\CONFIG.SYS 2012-06-19 19:09:24 ----A---- C:\AUTOEXEC.BAT 2012-06-19 19:09:12 ----A---- C:\WINDOWS\OEWABLog.txt 2012-06-19 19:09:08 ----A---- C:\WINDOWS\system32\mapi32.dll 2012-06-19 19:08:22 ----HD---- C:\Program Files\WindowsUpdate 2012-06-19 19:08:18 ----D---- C:\Program Files\Usługi online 2012-06-19 19:08:00 ----D---- C:\WINDOWS\system32\DirectX 2012-06-19 19:07:54 ----A---- C:\WINDOWS\system32\atrace.dll 2012-06-19 19:07:52 ----A---- C:\WINDOWS\system32\desktop.ini 2012-06-19 19:07:51 ----A---- C:\WINDOWS\desktop.ini 2012-06-19 19:07:46 ----A---- C:\WINDOWS\system32\nmevtmsg.dll 2012-06-19 19:07:45 ----A---- C:\WINDOWS\system32\acctres.dll 2012-06-19 19:07:44 ----D---- C:\Program Files\Common Files\Services 2012-06-19 19:07:42 ----SD---- C:\WINDOWS\Tasks 2012-06-19 19:07:42 ----A---- C:\WINDOWS\system32\icfgnt5.dll 2012-06-19 19:07:41 ----D---- C:\Program Files\Common Files\MSSoap 2012-06-19 19:07:34 ----D---- C:\WINDOWS\system32\Macromed 2012-06-19 19:07:34 ----D---- C:\WINDOWS\srchasst 2012-06-19 19:07:32 ----A---- C:\WINDOWS\system32\wuweb.dll 2012-06-19 19:07:32 ----A---- C:\WINDOWS\system32\wups.dll 2012-06-19 19:07:32 ----A---- C:\WINDOWS\system32\wucltui.dll 2012-06-19 19:07:32 ----A---- C:\WINDOWS\system32\wuauserv.dll 2012-06-19 19:07:32 ----A---- C:\WINDOWS\system32\wuaueng1.dll 2012-06-19 19:07:32 ----A---- C:\WINDOWS\system32\wuaueng.dll 2012-06-19 19:07:32 ----A---- C:\WINDOWS\system32\wuauclt1.exe 2012-06-19 19:07:32 ----A---- C:\WINDOWS\system32\wuauclt.exe 2012-06-19 19:07:31 ----A---- C:\WINDOWS\system32\wuapi.dll 2012-06-19 19:07:31 ----A---- C:\WINDOWS\system32\qmgrprxy.dll 2012-06-19 19:07:31 ----A---- C:\WINDOWS\system32\qmgr.dll 2012-06-19 19:07:31 ----A---- C:\WINDOWS\system32\bitsprx4.dll 2012-06-19 19:07:31 ----A---- C:\WINDOWS\system32\bitsprx3.dll 2012-06-19 19:07:31 ----A---- C:\WINDOWS\system32\bitsprx2.dll 2012-06-19 19:07:28 ----D---- C:\Program Files\Movie Maker 2012-06-19 19:07:12 ----A---- C:\WINDOWS\system32\safrslv.dll 2012-06-19 19:07:12 ----A---- C:\WINDOWS\system32\safrdm.dll 2012-06-19 19:07:12 ----A---- C:\WINDOWS\system32\safrcdlg.dll 2012-06-19 19:07:12 ----A---- C:\WINDOWS\system32\racpldlg.dll 2012-06-19 19:07:09 ----A---- C:\WINDOWS\system32\fltMc.exe 2012-06-19 19:07:09 ----A---- C:\WINDOWS\system32\fltlib.dll 2012-06-19 19:07:08 ----D---- C:\WINDOWS\system32\Restore 2012-06-19 19:07:08 ----A---- C:\WINDOWS\system32\srsvc.dll 2012-06-19 19:07:08 ----A---- C:\WINDOWS\system32\srrstr.dll 2012-06-19 19:07:08 ----A---- C:\WINDOWS\system32\srclient.dll 2012-06-19 19:07:08 ----A---- C:\WINDOWS\system32\drivers\sr.sys 2012-06-19 19:07:08 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys 2012-06-19 19:07:07 ----A---- C:\WINDOWS\system32\nmmkcert.dll 2012-06-19 19:07:07 ----A---- C:\WINDOWS\system32\msconf.dll 2012-06-19 19:07:07 ----A---- C:\WINDOWS\system32\mnmsrvc.exe 2012-06-19 19:07:07 ----A---- C:\WINDOWS\system32\mnmdd.dll 2012-06-19 19:07:07 ----A---- C:\WINDOWS\system32\isrdbg32.dll 2012-06-19 19:07:07 ----A---- C:\WINDOWS\system32\ils.dll 2012-06-19 19:07:05 ----D---- C:\Program Files\NetMeeting 2012-06-19 19:07:04 ----A---- C:\WINDOWS\system32\msoert2.dll 2012-06-19 19:07:04 ----A---- C:\WINDOWS\system32\msoeacct.dll 2012-06-19 19:07:03 ----A---- C:\WINDOWS\system32\inetres.dll 2012-06-19 19:07:03 ----A---- C:\WINDOWS\system32\inetcomm.dll 2012-06-19 19:07:02 ----D---- C:\Program Files\Outlook Express 2012-06-19 19:07:02 ----A---- C:\WINDOWS\system32\schedsvc.dll 2012-06-19 19:07:01 ----A---- C:\WINDOWS\system32\mstinit.exe 2012-06-19 19:07:01 ----A---- C:\WINDOWS\system32\mstask.dll 2012-06-19 19:07:01 ----A---- C:\WINDOWS\system32\isign32.dll 2012-06-19 19:07:01 ----A---- C:\WINDOWS\system32\inetcfg.dll 2012-06-19 19:07:01 ----A---- C:\WINDOWS\system32\icwphbk.dll 2012-06-19 19:07:01 ----A---- C:\WINDOWS\system32\icwdial.dll 2012-06-19 19:06:56 ----D---- C:\Program Files\Common Files\System 2012-06-19 19:06:55 ----D---- C:\Program Files\Internet Explorer 2012-06-19 19:06:30 ----A---- C:\WINDOWS\system32\emptyregdb.dat 2012-06-19 19:06:22 ----D---- C:\Program Files\ComPlus Applications 2012-06-19 19:06:20 ----A---- C:\WINDOWS\vbaddin.ini 2012-06-19 19:06:20 ----A---- C:\WINDOWS\vb.ini 2012-06-19 19:06:16 ----D---- C:\WINDOWS\Registration 2012-06-19 19:05:58 ----D---- C:\Program Files\Windows Media Connect 2 2012-06-19 19:05:57 ----D---- C:\Program Files\Windows Media Player 2012-06-19 19:05:55 ----D---- C:\Program Files\Messenger 2012-06-19 19:05:53 ----D---- C:\Program Files\MSN Gaming Zone 2012-06-19 19:05:53 ----A---- C:\WINDOWS\system32\write.exe 2012-06-19 19:05:43 ----A---- C:\WINDOWS\system32\winchat.exe 2012-06-19 19:05:43 ----A---- C:\WINDOWS\system32\sndvol32.exe 2012-06-19 19:05:43 ----A---- C:\WINDOWS\system32\hticons.dll 2012-06-19 19:05:43 ----A---- C:\WINDOWS\system32\avwav.dll 2012-06-19 19:05:43 ----A---- C:\WINDOWS\system32\avtapi.dll 2012-06-19 19:05:43 ----A---- C:\WINDOWS\system32\avmeter.dll 2012-06-19 19:05:36 ----A---- C:\WINDOWS\system32\sol.exe 2012-06-19 19:05:36 ----A---- C:\WINDOWS\system32\getuname.dll 2012-06-19 19:05:36 ----A---- C:\WINDOWS\system32\charmap.exe 2012-06-19 19:05:36 ----A---- C:\WINDOWS\system32\calc.exe 2012-06-19 19:05:35 ----A---- C:\WINDOWS\system32\winmine.exe 2012-06-19 19:05:35 ----A---- C:\WINDOWS\system32\usrlogon.cmd 2012-06-19 19:05:35 ----A---- C:\WINDOWS\system32\tsshutdn.exe 2012-06-19 19:05:35 ----A---- C:\WINDOWS\system32\tskill.exe 2012-06-19 19:05:35 ----A---- C:\WINDOWS\system32\reset.exe 2012-06-19 19:05:35 ----A---- C:\WINDOWS\system32\mshearts.exe 2012-06-19 19:05:35 ----A---- C:\WINDOWS\system32\freecell.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\tslabels.ini 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\tsdiscon.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\tscon.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\shadow.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\rwinsta.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\regini.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\rdpcfgex.dll 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\qwinsta.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\qappsrv.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\msg.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\logoff.exe 2012-06-19 19:05:34 ----A---- C:\WINDOWS\system32\cdmodem.dll 2012-06-19 19:05:33 ----A---- C:\WINDOWS\system32\msdtcprf.ini 2012-06-19 19:05:28 ----A---- C:\WINDOWS\system32\wmimgmt.msc 2012-06-19 19:05:27 ----A---- C:\WINDOWS\system32\sndrec32.exe 2012-06-19 19:05:27 ----A---- C:\WINDOWS\system32\mplay32.exe 2012-06-19 19:05:27 ----A---- C:\WINDOWS\system32\hypertrm.dll 2012-06-19 19:05:27 ----A---- C:\WINDOWS\system32\accwiz.exe 2012-06-19 19:05:26 ----D---- C:\Program Files\Windows NT 2012-06-19 19:05:26 ----A---- C:\WINDOWS\system32\spider.exe 2012-06-19 19:05:26 ----A---- C:\WINDOWS\system32\mspaint.exe 2012-06-19 19:05:26 ----A---- C:\WINDOWS\system32\clipbrd.exe 2012-06-19 19:05:25 ----A---- C:\WINDOWS\system32\tsgqec.dll 2012-06-19 19:05:25 ----A---- C:\WINDOWS\system32\tscfgwmi.dll 2012-06-19 19:05:25 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys 2012-06-19 19:05:25 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys 2012-06-19 19:05:25 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys 2012-06-19 19:05:24 ----A---- C:\WINDOWS\system32\rhttpaa.dll 2012-06-19 19:05:24 ----A---- C:\WINDOWS\system32\remotepg.dll 2012-06-19 19:05:24 ----A---- C:\WINDOWS\system32\rdshost.exe 2012-06-19 19:05:24 ----A---- C:\WINDOWS\system32\rdsaddin.exe 2012-06-19 19:05:24 ----A---- C:\WINDOWS\system32\mstscax.dll 2012-06-19 19:05:24 ----A---- C:\WINDOWS\system32\mstsc.exe 2012-06-19 19:05:24 ----A---- C:\WINDOWS\system32\aaclient.dll 2012-06-19 19:05:23 ----A---- C:\WINDOWS\system32\termsrv.dll 2012-06-19 19:05:23 ----A---- C:\WINDOWS\system32\sessmgr.exe 2012-06-19 19:05:23 ----A---- C:\WINDOWS\system32\rdpwsx.dll 2012-06-19 19:05:23 ----A---- C:\WINDOWS\system32\rdpsnd.dll 2012-06-19 19:05:23 ----A---- C:\WINDOWS\system32\rdpclip.exe 2012-06-19 19:05:23 ----A---- C:\WINDOWS\system32\rdchost.dll 2012-06-19 19:05:23 ----A---- C:\WINDOWS\system32\qprocess.exe 2012-06-19 19:05:23 ----A---- C:\WINDOWS\system32\icaapi.dll 2012-06-19 19:05:23 ----A---- C:\WINDOWS\system32\cfgbkend.dll 2012-06-19 19:05:22 ----D---- C:\WINDOWS\system32\MsDtc 2012-06-19 19:05:22 ----A---- C:\WINDOWS\system32\xolehlp.dll 2012-06-19 19:05:22 ----A---- C:\WINDOWS\system32\mtxoci.dll 2012-06-19 19:05:22 ----A---- C:\WINDOWS\system32\msdtcuiu.dll 2012-06-19 19:05:22 ----A---- C:\WINDOWS\system32\msdtctm.dll 2012-06-19 19:05:22 ----A---- C:\WINDOWS\system32\msdtcprx.dll 2012-06-19 19:05:22 ----A---- C:\WINDOWS\system32\msdtclog.dll 2012-06-19 19:05:22 ----A---- C:\WINDOWS\system32\msdtc.exe 2012-06-19 19:05:21 ----D---- C:\WINDOWS\system32\Com 2012-06-19 19:05:21 ----A---- C:\WINDOWS\system32\mtxlegih.dll 2012-06-19 19:05:21 ----A---- C:\WINDOWS\system32\mtxex.dll 2012-06-19 19:05:21 ----A---- C:\WINDOWS\system32\mtxdm.dll 2012-06-19 19:05:21 ----A---- C:\WINDOWS\system32\dcomcnfg.exe 2012-06-19 19:05:21 ----A---- C:\WINDOWS\system32\comaddin.dll 2012-06-19 19:05:21 ----A---- C:\WINDOWS\system32\colbact.dll 2012-06-19 19:05:20 ----A---- C:\WINDOWS\system32\stclient.dll 2012-06-19 19:05:20 ----A---- C:\WINDOWS\system32\comsvcs.dll 2012-06-19 19:05:20 ----A---- C:\WINDOWS\system32\comrepl.dll 2012-06-19 19:05:20 ----A---- C:\WINDOWS\system32\clbcatex.dll 2012-06-19 19:05:20 ----A---- C:\WINDOWS\system32\catsrvut.dll 2012-06-19 19:05:20 ----A---- C:\WINDOWS\system32\catsrvps.dll 2012-06-19 19:05:20 ----A---- C:\WINDOWS\system32\catsrv.dll 2012-06-19 19:05:19 ----A---- C:\WINDOWS\system32\comuid.dll 2012-06-19 19:05:19 ----A---- C:\WINDOWS\system32\comsnap.dll 2012-06-19 19:05:19 ----A---- C:\WINDOWS\system32\clbcatq.dll 2012-06-19 19:05:14 ----A---- C:\WINDOWS\system32\servdeps.dll 2012-06-19 19:05:14 ----A---- C:\WINDOWS\system32\mmfutil.dll 2012-06-19 19:05:14 ----A---- C:\WINDOWS\system32\licwmi.dll 2012-06-19 19:05:13 ----A---- C:\WINDOWS\system32\cmprops.dll 2012-06-19 19:05:10 ----A---- C:\WINDOWS\system32\drivers\termdd.sys 2012-06-19 19:05:10 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys ======List of files/folders modified in the last 1 month====== 2012-06-20 12:21:16 ----A---- C:\WINDOWS\win.ini 2012-06-20 12:03:57 ----A---- C:\WINDOWS\system.ini 2012-06-19 19:08:59 ----ASH---- C:\WINDOWS\fonts\desktop.ini ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2009-09-10 40448] R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2009-09-10 12032] R2 TopWinPoETDriver;WinPoET PPPoE Optimized Driver; C:\WINDOWS\system32\DRIVERS\WrKPoET2000.sys [2007-07-04 52214] R3 amsint32;amsint32; \??\C:\WINDOWS\system32\drivers\kmqen.sys [] R3 FPD;Fine Point Packet Service; \??\C:\WINDOWS\system32\drivers\fpd.sys [] R3 HDAudBus;Sterownik magistrali Microsoft UAA dla High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2009-09-10 144384] R3 hidusb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2009-09-10 10368] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2012-05-31 6126736] R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [] R3 mouhid;Sterownik myszy HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2009-09-10 12160] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2012-05-15 14014656] R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-02-06 90880] R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 WrKPoET2000;WrKPoET2000; \??\C:\Program Files\DialNet\WrKPoET2000.sys [] R3 WRSWanDD;WinPoET PPPoE Adapter; C:\WINDOWS\system32\DRIVERS\WrKPoETNic2000.sys [2007-07-04 65604] S0 Si3112;Si3112; C:\WINDOWS\system32\drivers\Si3112.sys [2009-09-10 62336] S0 Si3114r5;Si3114r5; C:\WINDOWS\system32\drivers\Si3114r5.sys [2009-09-10 195072] S0 Si3124;Si3124; C:\WINDOWS\system32\drivers\Si3124.sys [2009-09-10 69248] S0 Si3132;Si3132; C:\WINDOWS\system32\drivers\Si3132.sys [2009-09-10 74672] S0 Si3132r5;Si3132r5; C:\WINDOWS\system32\drivers\Si3132r5.sys [2009-09-10 215856] S0 Si3531;Si3531; C:\WINDOWS\system32\drivers\Si3531.sys [2009-09-10 212520] S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480] S3 catchme;catchme; \??\C:\ComboFix\catchme.sys [] S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS [] S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-09-10 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-09-10 82944] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408] R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2012-05-15 164160] R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400] R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-05-30 3048136] R2 WinPPPoverEthernet;WinPPPoverEthernet; C:\Program Files\DialNet\WrOS.EXE [2007-07-04 204800] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-19 257224] S3 WMPNetworkSvc;Usługa udostępniania w sieci programu Windows Media Player; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-12-01 918016] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2009-09-10 14336] -----------------EOF-----------------