Po uruchomieniu komputera, zaraz przed ładowaniem systemy (Windows XP) wyświetla sią komunikat: "Dwa razy na dzień zawartość dysku C: jest czyszczona. Wszystkie dane proszą zapisywać na dysku D:"

Jak to wyłączyć?? To jest komputer służbowy i niektóre dane muszą zapisywać na C.

Proszą o pomoc!

Pokaż screena z tym komunikatem.

[quote name='KamilJB' timestamp='1339492424' post='5869']
Pokaż screena z tym komunikatem.
[/quote]

Nie mogą zrobić screena tego komunikatu. Jednak ten komunikat pojawia sią zaraz bo ładowaniu systemu.
Okno jest standardowe dla Windows w nagłówku jest napisane UWAGA a dalej tak jak pisałem już jest.

Pierwszy raz sią spotykam z czymś takim.
Daj może logi z OTL -> http://www.forumkomputerowe.com/topic/19...2#entry752

to pewnie komunikat admina , może ma ustawione jakiś backup danych z D

[quote name='KamilJB' timestamp='1339507615' post='5874']
Pierwszy raz sią spotykam z czymś takim.
Daj może logi z OTL -> http://www.forumkomp...d__752#entry752
[/quote]


Taki raport mi wyświetliło.


Results of screen317's Security Check version 0.99.41
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Java™ 6 Update 24
Java version out of date!
Adobe Flash Player 10 Flash Player out of date!
Adobe Flash Player 10.1.102.64 Flash Player out of Date!
Adobe Reader 9 Adobe Reader out of date!
Mozilla Firefox (3.6.12) Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C::
````````````````````End of Log``````````````````````

Poprosiłem o log z OTL a nie z Security Check.

[quote name='KamilJB' timestamp='1339596688' post='5922']
Poprosiłem o log z OTL a nie z Security Check.
[/quote]


SORRY już sią poprawiam....

EXTRAS.txt:

OTL Extras logfile created on: 2012-06-14 11:30:01 - Run 1
OTL by OldTimer - Version 3.2.48.0 Folder = C:\Documents and Settings\Kursant\Moje dokumenty\Pobieranie
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

989,89 Mb Total Physical Memory | 518,91 Mb Available Physical Memory | 52,42% Memory free
2,33 Gb Paging File | 1,97 Gb Available in Paging File | 84,49% Paging File free
Paging file location(s): C:\pagefile.sys 1488 2976 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 29,12 Gb Free Space | 74,54% Space Free | Partition Type: NTFS
Drive D: | 35,44 Gb Total Space | 34,63 Gb Free Space | 97,73% Space Free | Partition Type: NTFS

Computer Name: STANOWISKO_11 | User Name: Kursant | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_USERS\S-1-5-21-484763869-515967899-1177238915-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabledxpsp2res.dll,-22009

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabledxpsp2res.dll,-22009

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\WINDOWS\system32\ezDeskCtrl.exe" = C:\WINDOWS\system32\ezDeskCtrl.exe:*:Enabled:ezDeskCtrl -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05381030-963D-4779-BECA-0D7D49268EDB}" = Płatnik 8.01.001
"{1EB9429A-A874-4BF0-961D-BDAAFB1641A6}" = Microsoft SQL Server 2005 Backward compatibility
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java™ 6 Update 24
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (INSERTGT)
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{56B4002F-671C-49F4-984C-C760FE3806B5}" = Microsoft SQL Server VSS Writer
"{58B785A2-D2CA-40AA-AE89-FCC49326CDC4}" = OpenOffice.org 3.2
"{612B9183-67A9-4B44-9877-2F059E35B86A}" = Broadcom 440x 10/100 Integrated Controller
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser
"{AC76BA86-7AD7-1045-7B44-A94000000001}" = Adobe Reader 9.4.4 - Polish
"{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}" = Microsoft SQL Server Native Client
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E23CCB2B-5D54-4478-88BC-AD32F98F4C7C}" = InsERT GT
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"All ATI Software" = ATI - Software Uninstall Utility
"Analizy Finansowe" = Analizy Finansowe
"ATI Display Driver" = ATI Display Driver
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"ezDrv" = Goliath Windows Driver 9.10
"FileZilla Client" = FileZilla Client 3.3.5.1
"ie8" = Windows Internet Explorer 8
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"PDF-XChange 3_is1" = PDF-XChange 3
"Symfonia Finanse i Ksiągowość" = Symfonia Finanse i Ksiągowość
"Symfonia Handel" = Symfonia Handel
"Symfonia Kadry i Płace" = Symfonia Kadry i Płace
"Symfonia Mała Ksiągowość" = Symfonia Mała Ksiągowość
"Symfonia Åšrodki Trwałe" = Symfonia Åšrodki Trwałe
"SYMFONIA® Faktura Premium" = SYMFONIA® Faktura Premium
"SYMFONIA® Płace Premium" = SYMFONIA® Płace Premium
"Zajączek 4.1" = Zajączek 4.1

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-484763869-515967899-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2010-12-06 05:27:00 | Computer Name = ZWOLEN01 | Source = EventSystem | ID = 4614
Description = System zdarzeń modelu COM+ wykrył niespójność w stanie wewnątrznym.
Potwierdzenie "GetLastError() == 122L" zwróciło błąd w wierszu 201 z f:\xpsp3\com\com1x\src\events\shared\sectools.cpp.
Skontaktuj sią z Pomocą techniczną firmy Microsoft i zgłoś ten błą

Error - 2010-12-06 05:47:58 | Computer Name = ZWOLEN01 | Source = MsiInstaller | ID = 11722
Description = Produkt: ATI Catalyst Control Center -- Błąd 1722. Wystąpił problem
z tym pakietem Instalatora Windows. Program uruchamiany jako fragment instalacji
nie zakończył sią zgodnie z oczekiwaniami. Skontaktuj sią z personelem pomocy technicznej
lub dostawcą pakietu. Akcja: nonetMessageBox, lokalizacja: C:\WINDOWS\Installer\MSI187.tmp,
polecenie:

Error - 2010-12-06 07:08:51 | Computer Name = ZWOLEN01 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca iexplore.exe, wersja 8.0.6001.18702, moduł
zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

Error - 2010-12-06 07:09:35 | Computer Name = ZWOLEN01 | Source = MsiInstaller | ID = 11931
Description = Product: MSXML 6.0 Parser -- Error 1931. The Windows Installer service
cannot update the system file C:\WINDOWS\system32\msxml6r.dll because the file
is protected by Windows. You may need to update your operating system for this
program to work correctly. Package version: 6.0.3883.0, OS Protected version: 6.0.3883.0

Error - 2010-12-06 08:02:18 | Computer Name = ZWOLEN01 | Source = MsiInstaller | ID = 11719
Description = Produkt: Microsoft .NET Framework 3.5 SP1 -- Error 1719.Nie można
uzyskać dostąpu do usługi Instalatora Windows. Może sią to zdarzyć, jeśli system
Windows działa w trybie awaryjnym lub jeśli Instalator Windows nie jest poprawnie
zainstalowany. Skontaktuj sią z personelem pomocy technicznej.

Error - 2010-12-06 09:57:16 | Computer Name = ZWOLEN01 | Source = Userenv | ID = 1082
Description = System Windows nie może ustawić czasomierza dla odświeżania zasad
grupy w tle. WaitForMultipleObjects (Nieprawidłowe dojście. ). Przetwarzanie zasad
grupy zostało przerwane.

Error - 2011-01-27 08:44:31 | Computer Name = STANOWISKO_11 | Source = MsiInstaller | ID = 11500
Description = Product: Macromedia Flash 8 -- Error 1500.Another installation is
in progress. You must complete that installation before continuing this one.

[ System Events ]
Error - 2011-01-27 08:48:28 | Computer Name = STANOWISKO_11 | Source = W32Time | ID = 39452689
Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera
DNS rącznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi
próbą wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji,
wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751)

Error - 2011-01-27 08:48:28 | Computer Name = STANOWISKO_11 | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostąpne.
Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu.

Error - 2011-01-27 08:48:28 | Computer Name = STANOWISKO_11 | Source = W32Time | ID = 39452689
Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera
DNS rącznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi
próbą wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji,
wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751)

Error - 2011-01-27 08:48:28 | Computer Name = STANOWISKO_11 | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostąpne.
Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu.

Error - 2011-01-27 08:50:40 | Computer Name = STANOWISKO_11 | Source = W32Time | ID = 39452718
Description = Usługa czasu napotkała błąd i została zmuszona do zamkniącia. Wystąpił
błąd: 0x80070522

Error - 2011-01-27 08:50:42 | Computer Name = STANOWISKO_11 | Source = Service Control Manager | ID = 7023
Description = Usługa Usługa Czas systemu Windows zakończyła działanie; wystąpił
nastąpujący błąd: %%1314

Error - 2011-05-11 05:35:16 | Computer Name = STANOWISKO_11 | Source = W32Time | ID = 39452718
Description = Usługa czasu napotkała błąd i została zmuszona do zamkniącia. Wystąpił
błąd: 0x80070522

Error - 2011-05-11 05:35:17 | Computer Name = STANOWISKO_11 | Source = Service Control Manager | ID = 7023
Description = Usługa Usługa Czas systemu Windows zakończyła działanie; wystąpił
nastąpujący błąd: %%1314

Error - 2012-06-14 04:54:49 | Computer Name = STANOWISKO_11 | Source = W32Time | ID = 39452718
Description = Usługa czasu napotkała błąd i została zmuszona do zamkniącia. Wystąpił
błąd: 0x80070522

Error - 2012-06-14 04:54:50 | Computer Name = STANOWISKO_11 | Source = Service Control Manager | ID = 7023
Description = Usługa Usługa Czas systemu Windows zakończyła działanie; wystąpił
nastąpujący błąd: %%1314


< End of report >


OTL.txt

OTL logfile created on: 2012-06-14 11:30:01 - Run 1
OTL by OldTimer - Version 3.2.48.0 Folder = C:\Documents and Settings\Kursant\Moje dokumenty\Pobieranie
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

989,89 Mb Total Physical Memory | 518,91 Mb Available Physical Memory | 52,42% Memory free
2,33 Gb Paging File | 1,97 Gb Available in Paging File | 84,49% Paging File free
Paging file location(s): C:\pagefile.sys 1488 2976 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 29,12 Gb Free Space | 74,54% Space Free | Partition Type: NTFS
Drive D: | 35,44 Gb Total Space | 34,63 Gb Free Space | 97,73% Space Free | Partition Type: NTFS

Computer Name: STANOWISKO_11 | User Name: Kursant | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012-06-14 11:28:56 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kursant\Moje dokumenty\Pobieranie\OTL.exe
PRC - [2010-10-29 14:49:28 | 000,505,064 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
PRC - [2010-10-27 08:21:28 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-05-21 01:29:12 | 011,312,128 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2010-05-21 01:29:08 | 011,318,784 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-11-23 10:33:58 | 000,045,056 | ---- | M] () -- C:\WINDOWS\system32\ezDeskCtrl.exe
PRC - [2007-11-23 10:33:48 | 000,122,880 | ---- | M] () -- C:\WINDOWS\system32\ezCtrl.exe
PRC - [2004-06-16 07:02:54 | 000,471,040 | ---- | M] (InstallShield Software Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe


========== Modules (No Company Name) ==========

MOD - [2010-10-27 08:21:28 | 001,018,840 | ---- | M] () -- C:\Program Files\Mozilla Firefox\js3250.dll
MOD - [2010-05-04 16:36:28 | 000,970,752 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2009-02-27 21:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL
MOD - [2007-11-23 10:33:58 | 000,045,056 | ---- | M] () -- C:\WINDOWS\system32\ezDeskCtrl.exe
MOD - [2007-11-23 10:33:48 | 000,122,880 | ---- | M] () -- C:\WINDOWS\system32\ezCtrl.exe
MOD - [2006-02-07 04:48:04 | 000,090,112 | ---- | M] () -- C:\WINDOWS\system32\ezCtrl.dll


========== Win32 Services (SafeList) ==========

SRV - [2007-11-23 10:33:48 | 000,122,880 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\ezCtrl.exe -- (ezCtrl)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2009-10-21 11:32:34 | 000,030,848 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\DiskPws.SYS -- (diskpws)
DRV - [2007-07-28 00:30:26 | 002,371,584 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006-11-21 05:25:44 | 000,045,568 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2006-09-13 20:01:48 | 000,003,456 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\atiide.sys -- (atiide)
DRV - [2006-03-17 19:18:58 | 000,392,960 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (SenFiltService)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={s...rer:source?}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-484763869-515967899-1177238915-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://szukaj.zdz.kielce.pl/
IE - HKU\S-1-5-21-484763869-515967899-1177238915-1004\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-484763869-515967899-1177238915-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerm...ORM=IE8SRC
IE - HKU\S-1-5-21-484763869-515967899-1177238915-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "szukaj.zdz.kielce.pl"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-09 09:04:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-05-11 12:18:28 | 000,000,000 | ---D | M]

[2010-12-09 09:05:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kursant\Dane aplikacji\Mozilla\Extensions
[2012-06-14 11:12:32 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kursant\Dane aplikacji\Mozilla\Firefox\Profiles\sx6kuuw4.default\extensions
[2010-12-09 09:06:57 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Kursant\Dane aplikacji\Mozilla\Firefox\Profiles\sx6kuuw4.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011-05-11 12:18:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-05-11 12:18:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2010-12-06 12:09:49 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011-02-02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010-10-27 07:37:26 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2010-10-27 07:37:26 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2010-10-27 07:37:26 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2010-10-27 07:37:26 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2010-10-27 07:37:26 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-10-27 07:37:26 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\11.0.696.65\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\11.0.696.65\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\11.0.696.65\gcswf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\Google\Update\1.2.183.23\npGoogleOneClick8.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin

O1 HOSTS File: ([2004-08-04 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\PL\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=052611 serial=DR12CEB-1929663-CQS lang=PL File not found
O4 - HKLM..\Run: [ezDeskCtrl] C:\WINDOWS\System32\ezDeskCtrl.exe ()
O4 - HKLM..\Run: [ezIPSet] C:\WINDOWS\System32\ezIPSet.exe (ezIPSet)
O4 - Startup: C:\Documents and Settings\Kursant\Menu Start\Programy\Autostart\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-484763869-515967899-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E...ontrol.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstal...s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstal...s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstal...s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/sh...wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B3E5A1F8-796A-4D31-A8FC-58BD0ABDC9D3}: DhcpNameServer = 194.204.152.34 194.204.159.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-12-06 11:20:02 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011-09-16 13:20:29 | 000,000,061 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012-06-14 11:27:24 | 000,000,466 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{E1DB376D-6CFC-4155-8FD9-851A2A2C0CDF}.job
[2012-06-14 11:19:21 | 000,001,140 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-484763869-515967899-1177238915-1004UA.job
[2012-06-14 11:19:18 | 000,002,327 | ---- | M] () -- C:\Documents and Settings\Kursant\Pulpit\Google Chrome.lnk
[2012-06-14 11:18:00 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-484763869-515967899-1177238915-1004Core.job
[2012-06-14 11:11:37 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-06-14 10:54:36 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2012-06-14 10:54:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-06-14 10:54:30 | 000,276,560 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010-12-09 09:05:01 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010-12-08 15:55:05 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010-12-06 12:57:20 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010-12-06 12:44:06 | 000,000,085 | ---- | C] () -- C:\WINDOWS\AFP.INI
[2010-12-06 12:40:55 | 000,000,364 | ---- | C] () -- C:\WINDOWS\amfp.ini
[2010-12-06 12:39:05 | 000,000,536 | ---- | C] () -- C:\WINDOWS\AmFK.ini
[2010-12-06 12:37:22 | 000,000,307 | ---- | C] () -- C:\WINDOWS\amhm.ini
[2010-12-06 12:35:48 | 000,000,188 | ---- | C] () -- C:\WINDOWS\AmKd.ini
[2010-12-06 12:33:39 | 000,000,454 | ---- | C] () -- C:\WINDOWS\MKP.ini
[2010-12-06 12:31:58 | 000,000,400 | ---- | C] () -- C:\WINDOWS\mxreader.INI
[2010-12-06 12:31:37 | 000,000,188 | ---- | C] () -- C:\WINDOWS\AmKp.ini
[2010-12-06 12:30:35 | 000,000,966 | ---- | C] () -- C:\WINDOWS\amst.ini
[2010-12-06 12:28:17 | 000,101,888 | ---- | C] () -- C:\WINDOWS\System32\BUTIL.DLL
[2010-12-06 12:28:17 | 000,002,055 | R--- | C] () -- C:\WINDOWS\BTI.INI
[2010-12-06 12:06:25 | 001,218,810 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-12-06 12:06:24 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-12-06 12:05:08 | 000,276,560 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-12-06 11:51:21 | 000,072,096 | ---- | C] () -- C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2010-12-06 11:48:04 | 005,346,708 | -H-- | C] () -- C:\Documents and Settings\Kursant\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-12-06 11:43:48 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2010-12-06 11:43:25 | 000,001,028 | ---- | C] () -- C:\WINDOWS\ATICIM.INI
[2010-12-06 11:43:14 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2010-12-06 11:43:14 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2010-12-06 11:43:14 | 000,972,072 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2010-12-06 11:43:13 | 000,151,367 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2010-12-06 11:22:44 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-12-06 11:20:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini
[2010-12-06 11:19:01 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010-12-06 11:18:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010-12-06 11:16:40 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010-12-06 11:16:29 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini
[2010-12-06 11:16:29 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini
[2010-12-06 11:15:47 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini
[2010-12-06 11:15:46 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini

========== LOP Check ==========

[2010-12-06 13:14:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InsERT
[2010-12-06 12:30:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sage
[2010-12-06 12:30:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Symfonia
[2010-12-09 09:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kursant\Dane aplikacji\Dev-Cpp
[2010-12-06 12:15:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kursant\Dane aplikacji\FileZilla
[2010-12-06 13:06:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kursant\Dane aplikacji\OpenOffice.org
[2010-12-06 12:30:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kursant\Dane aplikacji\Sage
[2012-06-14 11:27:24 | 000,000,466 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{E1DB376D-6CFC-4155-8FD9-851A2A2C0CDF}.job

========== Purity Check ==========



< End of report >