Logfile of random's system information tool 1.02 (written by random/random)
Run by osama at 2008-10-19 16:00:51
Microsoft Windows XP Professional Dodatek Service Pack 3
System drive C: has 4 GB (23%) free of 15 GB
Total RAM: 1023 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:01:02, on 2008-10-19
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Comodo\Firewall\CPF.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
E:\Program Files\FastStone Capture\FSCapture.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Nvu\nvu.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Documents and Settings\osama\Pulpit\RSIT.exe
C:\Program Files\trend micro\osama.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.pekao24.pl/
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [Comodo Firewall] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: FastStone Capture.lnk = E:\Program Files\FastStone Capture\FSCapture.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 4240 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Comodo Firewall"=C:\Program Files\Comodo\Firewall\CPF.exe [2008-02-10 1115728]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-07-19 78008]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2008-05-10 1817600]

C:\Documents and Settings\osama\Menu Start\Programy\Autostart
ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE
FastStone Capture.lnk - E:\Program Files\FastStone Capture\FSCapture.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableChangePassword"=0
"DisableLockWorkstation"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=FFFFFFFF
"NoTrayContextMenu"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.reg - open - regedit.exe "%1" %*

======List of files/folders created in the last 1 months======

2008-10-18 20:35:23 ----D---- C:\rsit
2008-10-17 19:03:07 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-10-17 19:02:58 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-17 19:02:45 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-10-17 19:02:09 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-10-17 19:01:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-10-11 00:35:10 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-10-11 00:34:45 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2008-10-08 20:01:53 ----A---- C:\WINDOWS\OEWABLog.txt
2008-10-08 20:00:47 ----D---- C:\WINDOWS\Prefetch
2008-10-08 19:56:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-10-08 19:56:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-10-08 19:56:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-10-08 19:56:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-10-08 19:56:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-10-08 19:55:52 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2008-10-08 19:55:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-10-08 19:55:32 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-10-08 19:55:23 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-10-08 19:55:13 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-10-08 19:51:55 ----A---- C:\WINDOWS\setuplog.txt
2008-10-08 19:51:10 ----D---- C:\Program Files\Messenger
2008-10-08 19:51:03 ----D---- C:\WINDOWS\system32\pl
2008-10-08 19:51:03 ----D---- C:\WINDOWS\l2schemas
2008-10-07 17:37:14 ----N---- C:\WINDOWS\system32\wmphoto.dll
2008-10-07 17:37:11 ----N---- C:\WINDOWS\system32\wlanapi.dll
2008-10-07 17:37:09 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2008-10-07 17:37:08 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2008-10-07 17:36:58 ----N---- C:\WINDOWS\system32\tspkg.dll
2008-10-07 17:36:58 ----N---- C:\WINDOWS\system32\tsgqec.dll
2008-10-07 17:36:43 ----N---- C:\WINDOWS\system32\setupn.exe
2008-10-07 17:36:37 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2008-10-07 17:36:36 ----N---- C:\WINDOWS\system32\rasqec.dll
2008-10-07 17:36:35 ----N---- C:\WINDOWS\system32\qutil.dll
2008-10-07 17:36:33 ----N---- C:\WINDOWS\system32\qcliprov.dll
2008-10-07 17:36:32 ----N---- C:\WINDOWS\system32\qagentrt.dll
2008-10-07 17:36:32 ----N---- C:\WINDOWS\system32\qagent.dll
2008-10-07 17:36:28 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2008-10-07 17:36:22 ----N---- C:\WINDOWS\system32\onex.dll
2008-10-07 17:35:58 ----N---- C:\WINDOWS\system32\napstat.exe
2008-10-07 17:35:58 ----N---- C:\WINDOWS\system32\napmontr.dll
2008-10-07 17:35:58 ----N---- C:\WINDOWS\system32\napipsec.dll
2008-10-07 17:35:56 ----N---- C:\WINDOWS\system32\msxml6r.dll
2008-10-07 17:35:56 ----N---- C:\WINDOWS\system32\msxml6.dll
2008-10-07 17:35:52 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2008-10-07 17:35:52 ----N---- C:\WINDOWS\system32\mssha.dll
2008-10-07 17:35:38 ----N---- C:\WINDOWS\system32\mmcperf.exe
2008-10-07 17:35:37 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2008-10-07 17:35:37 ----N---- C:\WINDOWS\system32\mmcex.dll
2008-10-07 17:35:37 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2008-10-07 17:35:23 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2008-10-07 17:35:23 ----N---- C:\WINDOWS\system32\kmsvc.dll
2008-10-07 17:35:22 ----N---- C:\WINDOWS\system32\kbdpash.dll
2008-10-07 17:35:22 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2008-10-07 17:35:22 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2008-10-07 17:35:22 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2008-10-07 17:35:19 ----N---- C:\WINDOWS\system32\smtpapi.dll
2008-10-07 17:35:18 ----N---- C:\WINDOWS\system32\rwnh.dll
2008-10-07 17:35:09 ----A---- C:\WINDOWS\005637_.tmp
2008-10-07 17:35:08 ----N---- C:\WINDOWS\system32\eapsvc.dll
2008-10-07 17:35:08 ----N---- C:\WINDOWS\system32\eapqec.dll
2008-10-07 17:35:08 ----N---- C:\WINDOWS\system32\eappprxy.dll
2008-10-07 17:35:08 ----N---- C:\WINDOWS\system32\eapphost.dll
2008-10-07 17:35:08 ----N---- C:\WINDOWS\system32\eappgnui.dll
2008-10-07 17:35:07 ----N---- C:\WINDOWS\system32\eappcfg.dll
2008-10-07 17:35:07 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2008-10-07 17:35:07 ----N---- C:\WINDOWS\system32\eapolqec.dll
2008-10-07 17:35:05 ----N---- C:\WINDOWS\system32\dot3ui.dll
2008-10-07 17:35:05 ----N---- C:\WINDOWS\system32\dot3svc.dll
2008-10-07 17:35:05 ----N---- C:\WINDOWS\system32\dot3msm.dll
2008-10-07 17:35:05 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2008-10-07 17:35:05 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2008-10-07 17:35:05 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2008-10-07 17:35:05 ----N---- C:\WINDOWS\system32\dot3api.dll
2008-10-07 17:35:04 ----N---- C:\WINDOWS\system32\dimsroam.dll
2008-10-07 17:35:04 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2008-10-07 17:35:04 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2008-10-07 17:35:01 ----N---- C:\WINDOWS\system32\credssp.dll
2008-10-07 17:34:56 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2008-10-07 17:34:56 ----N---- C:\WINDOWS\system32\azroles.dll
2008-10-07 17:34:48 ----N---- C:\WINDOWS\system32\aaclient.dll
2008-10-05 10:13:23 ----D---- C:\Program Files\Grupa IMAGE

======List of files/folders modified in the last 1 months======

2008-10-19 16:00:56 ----D---- C:\Program Files\Trend Micro
2008-10-19 16:00:55 ----D---- C:\temp
2008-10-19 15:27:10 ----A---- C:\WINDOWS\wincmd.ini
2008-10-19 15:27:10 ----A---- C:\WINDOWS\wcx_ftp.ini
2008-10-19 12:33:15 ----D---- C:\Documents and Settings\osama\Dane aplikacji\Spyware Terminator
2008-10-19 09:18:05 ----D---- C:\Program Files\Mozilla Firefox
2008-10-18 23:56:38 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-10-18 13:42:44 ----AD---- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
2008-10-18 13:39:53 ----D---- C:\Program Files\SpywareBlaster
2008-10-18 08:51:46 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Spyware Terminator
2008-10-18 08:50:55 ----D---- C:\WINDOWS
2008-10-18 08:49:45 ----D---- C:\WINDOWS\system32
2008-10-17 23:23:33 ----D---- C:\WINDOWS\system32\CatRoot2
2008-10-17 19:03:10 ----HD---- C:\WINDOWS\inf
2008-10-17 19:03:09 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-10-17 19:03:09 ----D---- C:\WINDOWS\system32\drivers
2008-10-17 19:03:05 ----HD---- C:\WINDOWS\$hf_mig$
2008-10-17 19:03:02 ----A---- C:\WINDOWS\imsins.BAK
2008-10-17 19:02:32 ----D---- C:\Program Files\Internet Explorer
2008-10-17 19:02:23 ----D---- C:\WINDOWS\ie7updates
2008-10-13 23:02:02 ----D---- C:\Program Files\Spyware Terminator
2008-10-12 21:12:10 ----D---- C:\Program Files\WinClamAVShield
2008-10-11 09:47:30 ----D---- C:\Documents and Settings\osama\Dane aplikacji\OpenOffice.org2
2008-10-08 20:02:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-08 20:01:27 ----D---- C:\WINDOWS\Debug
2008-10-08 20:00:18 ----D---- C:\WINDOWS\system32\Setup
2008-10-08 20:00:17 ----RSD---- C:\WINDOWS\Fonts
2008-10-08 20:00:17 ----D---- C:\WINDOWS\system32\wbem
2008-10-08 20:00:17 ----D---- C:\WINDOWS\AppPatch
2008-10-08 19:59:34 ----D---- C:\WINDOWS\security
2008-10-08 19:57:20 ----D---- C:\WINDOWS\system32\CatRoot
2008-10-08 19:51:15 ----D---- C:\WINDOWS\WinSxS
2008-10-08 19:51:10 ----RD---- C:\Program Files
2008-10-08 19:51:10 ----D---- C:\WINDOWS\ServicePackFiles
2008-10-08 19:51:10 ----D---- C:\WINDOWS\EHome
2008-10-08 19:51:09 ----D---- C:\WINDOWS\system32\inetsrv
2008-10-08 19:51:09 ----D---- C:\WINDOWS\network diagnostic
2008-10-08 19:51:09 ----D---- C:\WINDOWS\ime
2008-10-08 19:51:09 ----D---- C:\WINDOWS\Help
2008-10-08 19:51:04 ----D---- C:\WINDOWS\system32\usmt
2008-10-08 19:51:04 ----D---- C:\WINDOWS\system32\pl-pl
2008-10-08 19:51:03 ----SHD---- C:\WINDOWS\Installer
2008-10-08 19:51:03 ----D---- C:\WINDOWS\system32\bits
2008-10-08 19:51:03 ----D---- C:\WINDOWS\peernet
2008-10-08 19:51:03 ----D---- C:\Program Files\Movie Maker
2008-10-08 19:49:41 ----D---- C:\WINDOWS\system32\Restore
2008-10-08 19:49:41 ----D---- C:\WINDOWS\system32\npp
2008-10-08 19:49:41 ----D---- C:\WINDOWS\msagent
2008-10-08 19:49:40 ----D---- C:\WINDOWS\srchasst
2008-10-08 19:49:40 ----D---- C:\Program Files\NetMeeting
2008-10-08 19:49:39 ----D---- C:\WINDOWS\system32\Com
2008-10-08 19:49:37 ----D---- C:\Program Files\Windows Media Player
2008-10-08 19:49:36 ----D---- C:\Program Files\Windows NT
2008-10-08 19:49:36 ----D---- C:\Program Files\Outlook Express
2008-10-08 19:49:34 ----D---- C:\Program Files\Common Files\System
2008-10-08 19:49:25 ----D---- C:\WINDOWS\system32\oobe
2008-10-08 19:49:24 ----D---- C:\WINDOWS\system
2008-10-08 19:47:24 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-10-08 19:47:14 ----D---- C:\WINDOWS\temp
2008-10-08 19:47:13 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-10-07 21:19:40 ----A---- C:\WINDOWS\system32\MRT.exe
2008-10-03 19:26:30 ----A---- C:\WINDOWS\system32\ieframe.dll
2008-09-21 21:26:26 ----D---- C:\WINDOWS\system32\config

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-07-19 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-07-19 42912]
R1 CmdMon;Comodo Application Engine; C:\WINDOWS\System32\DRIVERS\cmdmon.sys [2008-02-10 75520]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 WS2IFSL;Środowisko wspomagające dostawcę usług innych niż IFS - Windows Socket 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-09-29 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-07-19 94416]
R2 DgiVecp;Team MFP Comm Driver; C:\WINDOWS\System32\Drivers\DgiVecp.sys [2003-07-29 40448]
R2 NwlnkIpx;Protokół transportowy zgodny z NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;System NetBIOS NWLink; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2002-09-29 63232]
R2 NwlnkSpx;Protokół NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2002-09-29 55936]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-07-19 23152]
R3 hidusb;Sterownik Microsoft klasy HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Sterownik myszy HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-09-29 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-08-17 6842208]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 SiS7012;Service for AC'97 Sample Driver (WDM); C:\WINDOWS\system32\drivers\sis7012.sys [2004-11-03 267136]
R3 SISNICXP;SiS PCI Fast Ethernet Adapter Driver for NDIS51; C:\WINDOWS\system32\DRIVERS\sisnicxp.sys [2004-06-30 32768]
R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Sterownik Miniport otwartego kontrolera hosta USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 61883;Urządzenie jednostkowe 61883; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 Arp1394;Protokół klienta 1394 ARP; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 Avc;Urządzenie AVC; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 CCDECODE;Dekoder napisów; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 mbr;mbr; \??\c:\temp\mbr.sys []
S3 ms_mpu401;Sterownik portu MIDI UART Microsoft MPU-401; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Koder-dekoder NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Połączenie TV/wideo firmy Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NETMDUSB;Net MD; C:\WINDOWS\System32\Drivers\NETMD031.sys [2003-04-01 35319]
S3 NIC1394;Sterownik sieci 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 rkhdrv10;Rootkit Unhooker Driver; C:\WINDOWS\system32\drivers\rkhdrv10.sys []
S3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\System32\DRIVERS\sisnic.sys [2004-08-04 32768]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbprint;Klasa PRINTER USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Sterownik skanera USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys [2005-11-18 9600]
S3 vncdrv;vncdrv; C:\WINDOWS\system32\DRIVERS\vncdrv.sys [2004-06-26 4736]
S3 WSTCODEC;Kodery-dekodery teletekstu w standardzie światowym; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-07-19 16056]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-07-19 147640]
R2 CmdAgent;Comodo Application Agent; C:\Program Files\Comodo\Firewall\cmdagent.exe [2008-02-10 361040]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2008-05-10 606720]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-07-19 250040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-07-23 348344]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912]
S4 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-08-17 155716]
S4 SPTISRV;Sony SPTI Service; C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe [2002-12-24 65536]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.02 2008-10-18 20:36:00

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Photoshop 6.0.1 CE-->C:\WINDOWS\ISUN0415.EXE -f"C:\Program Files\Adobe\Photoshop 6.0.1 CE\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 6.0.1 CE\Uninst.dll"
Adobe Reader 6.0 CE-->MsiExec.exe /I{AC76BA86-7AD7-1038-7646-CE0000000001}
Aktualizacja dla systemu Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Aktualizacja dla systemu Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla programu Windows Media Encoder (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla programu Windows Media Player 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla programu Windows Media Player 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla programu Windows Media Player 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla systemu Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Aktualizacja zabezpieczeń dla Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
C-Media WDM Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe
Comodo Firewall-->C:\Program Files\Comodo\Firewall\fwconfig.exe -uninstalln
ERUNT 1.1f-->"C:\Program Files\ERUNT\unins000.exe"
ESET Online Scanner-->C:\WINDOWS\system32\OnlineScannerUninstaller.exe
FileASSASSIN-->C:\Program Files\FileASSASSIN\uninst.exe
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
HijackThis 2.0.2-->"C:\Documents and Settings\osama\Pulpit\HijackThis.exe" /uninstall
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Kaspersky Online Scanner-->C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Malwarebytes' RogueRemover-->"C:\Program Files\RogueRemover FREE\unins000.exe"
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (1.5)-->C:\Program Files\Mozilla Thunderbird\uninstall\uninstall.exe /ua "1.5 (pl)"
Music Visualizer Library 1.4.00-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3B24B725-D81F-442D-8CE5-2AF05A4A4CC9}\Setup.exe" -l0x9
NTREGOPT 1.1j-->"C:\Program Files\NT Registry Optimizer\unins000.exe"
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
Nvidia Omega Drivers v2.169.21 Setup Files-->"C:\WINDOWS\Nvidia Omega Drivers v2.169.21 Uninstall.exe" "/U:C:\Program Files\Nvidia Omega Drivers\v2.169.21\Omega Uninstall.xml"
Nvu 1.0-->"C:\Program Files\Nvu\unins000.exe"
OpenMG Limited Patch 3.2-03-02-21-08-->C:\Program Files\Common Files\Sony Shared\OpenMG\HotFixes\HotFix3.2-03-02-21-08\HotFixSetup\setup.exe /u
OpenMG Limited Patch 3.2-03-04-14-02-->C:\Program Files\Common Files\Sony Shared\OpenMG\HotFixes\HotFix3.2-03-04-14-02\HotFixSetup\setup.exe /u
OpenMG Limited Patch 3.2-03-04-17-02-->C:\Program Files\Common Files\Sony Shared\OpenMG\HotFixes\HotFix3.2-03-04-17-02\HotFixSetup\setup.exe /u
OpenMG Secure Module 3.2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{62F33B80-6244-4A70-A233-0DA13B640364}\setup.exe" -l0x9 UNINSTALL
OpenOffice.org 2.4-->MsiExec.exe /I{4DB39959-75DC-444C-A351-6AB4C6C81AFA}
PITy2007 ver. 4.0.1.7-->"C:\Program Files\PITy2007\unins000.exe"
Poprawka dla systemu Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Poprawka dla systemu Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Registrar Lite 2.00-->"C:\Program Files\Registrar Lite\unwise.exe" C:\PROGRA~1\REGIST~2\INSTALL.LOG
Samsung ML-1520 Series-->C:\WINDOWS\Samsung\ML-1520\SETUP.EXE
SiS 900 PCI Fast Ethernet Adapter Driver-->C:\WINDOWS\SiS\900\Uninst.exe
SiS Audio Driver-->C:\Program Files\SiS7012\Uninst\uninst2k.exe PCI\VEN_1039&DEV_7012
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
SpywareBlaster 4.1-->"C:\Program Files\SpywareBlaster\unins000.exe"
Testy B 2007-->"C:\Program Files\Grupa IMAGE\Testy B 2007\unins000.exe"
ThreatExpert Memory Scanner 1.0-->"C:\Program Files\ThreatExpert Memory Scanner\unins000.exe"
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
VB2Java.Com Extension Manager-->MsiExec.exe /X{F751134E-CAC1-4FEC-B144-FDF2933E0730}
Windows Media Encoder 9 Series-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Windows Media Encoder 9 Series-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Hosts File======

127.0.0.1 localhost

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"NUMBER_OF_PROCESSORS"=1
"OS"=Windows_NT
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\PROGRAM FILES\COMMON FILES\ULEAD SYSTEMS\MPEG;C:\PROGRAM FILES\ULEAD SYSTEMS\ULEAD DVD MOVIEFACTORY 3 SE
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 4 Stepping 2, AuthenticAMD
"PROCESSOR_LEVEL"=6
"PROCESSOR_REVISION"=0402
"TEMP"=c:\temp
"TMP"=c:\temp
"windir"=%SystemRoot%

-----------------EOF-----------------