sprawdzi mi ktos startupa prosze

[Gość: lukasz]

StartupList report, 2004-06-24, 13:20:46
StartupList version: 1.52
Started from : C:\WINDOWS\PULPIT\NOWY FOLDER\STARTUPLIST.EXE
Detected: Windows ME (Win9x 4.90.3000)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
C:\PROGRAM FILES\KERIO\PERSONAL FIREWALL\PERSFW.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\PCTVOICE.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\PULPIT\NOWY FOLDER\STARTUPLIST.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

internat.exe = internat.exe
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
SystemTray = SysTray.Exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
nwiz = nwiz.exe /install
CountrySelection = pctptt.exe
PCTVOICE = pctvoice.exe
ashMaiSv = C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
QuickTime Task = "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
KAZAA = "C:\PROGRAM FILES\KAZAA LITE K++\KPP.EXE" "C:\PROGRAM FILES\KAZAA
LITE K++\KAZAA.KPP" /SYSTRAY

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe
avast! = C:\Program Files\Alwil Software\Avast4\ashServ.exe
TrueVector = C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
PersFw = "C:\Program Files\Kerio\Personal Firewall\persfw.exe" /hide

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Gadu-Gadu = "C:\PROGRAM FILES\GADU-GADU\GG.EXE" /tray

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=
run=C:\WINDOWS\SYSTEM\SERVICES\WMPLAYER.EXE

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 22/6/2004, 9:3:28)

[Rename]
NUL=c:\windows\cookies\[e-mail][2].txt
NUL=c:\windows\cookies\[e-mail][1].txt
NUL=c:\windows\cookies\lukasz@atdmt[2].txt
NUL=c:\windows\cookies\lukasz@doubleclick[2].txt
NUL=c:\windows\cookies\lukasz@cgi-bin[1].txt

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP

--------------------------------------------------

C:\WINDOWS\WINSTART.BAT listing:

C:\WINDOWS\tmpcpyis.bat

--------------------------------------------------


Enumerating Task Scheduler jobs:

Rozpoczęcie aplikacji dostrajania.job
Harmonogram programu PCHealth dla zbierania danych.job

--------------------------------------------------

Enumerating Download Program Files:

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?
38071.5744907407

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = active.macromedia.com/flash2/cabs/swflash.cab

[MainControl Class]
InProcServer32 = C:\WINDOWS\SYSTEM\SKANERONLINE.DLL
CODEBASE = skaner.mks.com.pl/SkanerOnline.cab

[{33564D57-0000-0010-8000-00AA00389B71}]
CODEBASE = download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-
9F5F-94901338C922/wmv9VCM.CAB

[MailCfg Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\MAILCFG2.OCX
CODEBASE = poczta.wp.pl/autoryzacja/mailcfg2.ocx

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL
AUHook: C:\WINDOWS\SYSTEM\AUHOOK.DLL
System: C:\WINDOWS\system32\system32.dll

--------------------------------------------------
End of report, 5 341 bytes
Report generated in 0,075 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only