Komputer strasznie zamula i wysoki poziom pamieci

**Posty:** 177 · przez **roonnii** 18 Paź 2010, 20:48

komputer jest zamulony pamiec w menadzerze na poziomie 700mb i 70 procesow nie da sie zrobic loga z otl i jak robie z gmer to ns koniec skanowania ktore trwa ponad godz albo i lepiej nic nie wyskakuje to jest to co zapisalem

Kod: Zaznacz wszystko: GMER 1.0.15.15319 - http://www.gmer.net Rootkit scan 2010-10-17 23:21:40 Windows 5.1.2600 Service Pack 3 Running: xy9zwj9l.exe; Driver: C:\DOKUME~1\EWALUD~1\LOKALE~1\Temp\pwtiypod.sys ---- Kernel code sections - GMER 1.0.15 ---- .reloc C:\WINDOWS\system32\drivers\acedrv11.sys section is executable [0xAE43F480, 0x306DD, 0xE0000060] .text C:\WINDOWS\system32\DRIVERS\litsgt.sys section is writeable [0xADF6C300, 0x1F510, 0xE8000020] ---- User code sections - GMER 1.0.15 ---- .text C:\WINDOWS\system32\SearchIndexer.exe[2528] kernel32.dll!WriteFile 7C810E27 7 Bytes JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation) ---- Devices - GMER 1.0.15 ---- AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\HP Officejet Pro 8500 A909a Series@ChangeID 36969281 Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\HP Officejet Pro 8500 A909a Series (Kopie 1)@ChangeID 36946734 Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{CE027E53-AE7A-B5DF-1A40-9C12DF48F569} Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{CE027E53-AE7A-B5DF-1A40-9C12DF48F569}@hakiifomfjkpabil 0x61 0x61 0x00 0x7C Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{CE027E53-AE7A-B5DF-1A40-9C12DF48F569}@jakiifomfjkpabilehgo 0x63 0x61 0x6A 0x67 ... Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{CE027E53-AE7A-B5DF-1A40-9C12DF48F569}@pacjjhamnnehcjcbeaomopgdmkhlolen 0x64 0x61 0x6E 0x67 ... ---- EOF - GMER 1.0.15 ----

**Posty:** 18165 · przez **wojtas** 18 Paź 2010, 21:05

jak się nie da ? może w trybie awaryjnym sprobuj

**Posty:** 177 · przez **roonnii** 18 Paź 2010, 21:32

http://www.wklejto.pl/79568

Dodano 18.10.2010 20:35:02:

Kod: Zaznacz wszystko: OTL lo21:26 18.10.2010gfile created on: 18.10.2010 21:11:09 - Run 1 OTL by OldTimer - Version 3.2.15.2 Folder = F:\ Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1.023,00 Mb Total Physical Memory | 806,00 Mb Available Physical Memory | 79,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 97,00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 19,53 Gb Total Space | 3,31 Gb Free Space | 16,96% Space Free | Partition Type: NTFS Drive D: | 54,99 Gb Total Space | 41,59 Gb Free Space | 75,64% Space Free | Partition Type: NTFS Drive F: | 3,76 Gb Total Space | 2,25 Gb Free Space | 59,99% Space Free | Partition Type: FAT32 Computer Name: EWALUDWIK | User Name: Administrator | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010.10.18 21:10:14 | 000,574,464 | ---- | M] (OldTimer Tools) -- F:\OTL.exe PRC - [2010.07.19 19:27:10 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG9\avgchsvx.exe PRC - [2008.04.14 04:22:45 | 000,979,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010.10.18 21:10:14 | 000,574,464 | ---- | M] (OldTimer Tools) -- F:\OTL.exe MOD - [2010.08.23 18:11:46 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2008.04.14 04:21:06 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\WINDOWS\System32\sshnas21.dll -- (SSHNAS) SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt) SRV - [2010.07.19 19:27:58 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Programme\AVG\AVG9\avgwdsvc.exe -- (avg9wd) SRV - [2009.12.14 11:41:46 | 000,246,272 | ---- | M] () [Auto | Stopped] -- C:\Programme\Cyfrowy Polsat\AssistantServices.exe -- (UI Assistant Service) SRV - [2009.11.11 18:32:37 | 000,604,488 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\WINDOWS\system32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc) SRV - [2009.11.11 18:32:35 | 000,361,288 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - [2009.09.06 13:38:06 | 000,071,096 | ---- | M] () [Auto | Stopped] -- C:\Programme\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU) SRV - [2009.07.28 17:07:42 | 000,073,528 | ---- | M] (AVM Berlin) [Auto | Stopped] -- C:\Programme\FRITZ!DSL\IGDCTRL.EXE -- (IGDCTRL) SRV - [2009.07.15 12:48:20 | 000,029,000 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp) SRV - [2009.05.21 15:28:38 | 000,874,768 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2009.05.21 14:23:04 | 000,909,312 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel(R) SRV - [2009.05.21 14:04:14 | 000,473,360 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R) SRV - [2008.11.04 02:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2007.02.08 17:13:46 | 000,212,480 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2006.10.26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOKUME~1\EWALUD~1\LOKALE~1\Temp\GPU-Z.sys -- (GPU-Z) DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aspi32.sys -- (ASPI32) DRV - [2010.07.19 19:28:05 | 000,243,024 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX) DRV - [2010.07.19 19:27:12 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86) DRV - [2010.06.02 17:59:44 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86) DRV - [2009.12.11 18:05:22 | 000,114,688 | ---- | M] (ZTE Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnet.sys -- (ZTEusbnet) DRV - [2009.11.24 21:29:39 | 000,101,248 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avmaura.sys -- (avmaura) DRV - [2009.10.29 19:28:24 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k) DRV - [2009.10.29 19:28:24 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea) DRV - [2009.10.29 19:28:24 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k) DRV - [2009.10.29 19:28:24 | 000,009,216 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\massfilter.sys -- (massfilter) DRV - [2009.09.28 21:57:28 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009.02.20 19:09:16 | 000,044,032 | R--- | M] (Siemens Home and Office Communication Devices GmbH & Co. KG) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GigasetGenericUSB.sys -- (GigasetGenericUSB) DRV - [2008.10.29 18:18:34 | 000,137,344 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\litsgt.sys -- (litsgt) DRV - [2008.10.29 18:18:34 | 000,012,032 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\tansgt.sys -- (tansgt) DRV - [2008.08.13 18:23:56 | 000,011,904 | ---- | M] (Intel Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2008.04.13 20:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE) DRV - [2008.04.13 18:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008.01.23 10:19:44 | 000,501,560 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\ACEDRV11.sys -- (acedrv11) DRV - [2008.01.07 15:36:16 | 002,216,064 | R--- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Intel(R) DRV - [2007.02.22 11:15:56 | 000,137,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (nmwcd) DRV - [2007.02.22 11:15:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (nmwcdcm) DRV - [2007.02.22 11:15:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcj.sys -- (nmwcdcj) DRV - [2007.02.22 11:15:14 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (nmwcdc) DRV - [2005.09.14 22:58:30 | 001,339,392 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2005.03.23 16:08:52 | 002,547,008 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2005.03.18 15:22:46 | 000,188,928 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2004.12.02 17:36:08 | 000,070,912 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp) DRV - [2004.10.27 15:21:30 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService) DRV - [2004.10.15 12:50:20 | 000,015,295 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrScnUsb.sys -- (BrScnUsb) DRV - [2004.10.15 09:37:14 | 000,345,728 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snpstd.sys -- (snpstd) USB PC Camera (SN9C102) DRV - [2004.07.22 03:40:00 | 000,036,736 | R--- | M] (DTV-DVB) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\UDTT2BDA.sys -- (UDTT2BDA) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Programme\AVG\AVG9\Firefox [2010.09.23 13:34:03 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2010.10.07 19:23:32 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.02.10 20:20:56 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.10.10 09:52:16 | 000,000,000 | ---D | M] [2010.10.17 00:52:39 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2009.08.24 21:25:19 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2009.12.03 11:54:24 | 000,002,476 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\BearShareWebSearch.xml [2009.08.24 21:25:19 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2009.08.24 21:25:19 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2009.08.24 21:25:19 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2009.08.24 21:25:19 | 000,000,801 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009.11.11 18:53:23 | 000,352,067 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 12066 more lines... O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.) O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O4 - HKLM..\Run: [%RunKey%] C:\Programme\FRITZ!vox\FRITZ!vox.exe (AVM Berlin) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\ALCWZRD.EXE (RealTek Semicoductor Corp.) O4 - HKLM..\Run: [ATICCC] C:\Programme\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.) O4 - HKLM..\Run: [AVG9_TRAY] C:\Programme\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [AVMFBoxMonitor] C:\Programme\FRITZ!Box Monitor\FRITZBoxMonitor.exe (AVM Berlin) O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider) O4 - HKLM..\Run: [IndexSearch] C:\Programme\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [InstantOn] C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe () O4 - HKLM..\Run: [IntelWireless] C:\Programme\Gemeinsame Dateien\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation) O4 - HKLM..\Run: [IntelZeroConfig] C:\Programme\Intel\WiFi\bin\ZCfgSvc.exe (Intel(R) Corporation) O4 - HKLM..\Run: [PaperPort PTD] C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [RaidTool] C:\Programme\VIA\RAID\raid_tool.exe (VIA Technologies) O4 - HKLM..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe () O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.) O4 - HKLM..\Run: [UIExec] C:\Programme\Cyfrowy Polsat\UIExec.exe () O4 - HKU\.DEFAULT..\Run: [FRITZ!protect] File not found O4 - HKU\S-1-5-18..\Run: [FRITZ!protect] File not found O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\ATI CATALYST System Tray.lnk = C:\Programme\ATI Technologies\ATI.ACE\CLI.exe (ATI Technologies Inc.) O4 - Startup: C:\Dokumente und Einstellungen\Ewa Ludwik\Startmenü\Programme\Autostart\RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-790525478-602162358-839522115-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O9 - Extra Button: HP Intelligente Auswahl - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008.09.17 19:34:30 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010.10.18 21:06:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Opera [2010.10.18 21:06:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Opera [2010.10.18 21:06:21 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft [2010.10.18 21:06:21 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\SendTo [2010.10.18 21:06:21 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten [2010.10.18 21:06:21 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü [2010.10.18 21:06:21 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator\Cookies [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Vorlagen [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Recent [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Netzwerkumgebung [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Druckumgebung [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft Help [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Intel [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Favoriten [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Desktop [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\{3248F0A6-6813-11D6-A77B-00B0D0150000} [2010.10.17 02:09:35 | 000,044,032 | R--- | C] (Siemens Home and Office Communication Devices GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\GigasetGenericUSB.sys [2010.10.17 02:06:03 | 000,495,616 | ---- | C] (Gigaset Communications GmbH) -- C:\WINDOWS\System32\Gqstsp.tsp [2010.10.17 02:05:49 | 000,000,000 | ---D | C] -- C:\Programme\Gigaset QuickSync [2010.10.17 02:05:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Cached Installations [2010.10.16 21:40:51 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Gigaset QuickSync [2010.10.16 21:39:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations [2010.10.15 21:22:27 | 000,000,000 | ---D | C] -- C:\ERDNT [2010.10.15 21:22:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2010.10.15 21:22:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010.10.15 21:22:11 | 000,000,000 | ---D | C] -- C:\!FixIEDef [2010.10.15 19:50:58 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner [2010.10.13 11:38:48 | 000,954,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40.dll [2010.10.13 11:38:47 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll [2010.10.13 11:38:47 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll [2010.10.13 11:38:21 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll [2010.10.10 09:51:55 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Adobe [2010.10.09 20:52:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HPSSUPPLY [2010.10.07 21:47:50 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\serscan.sys [2010.10.07 19:28:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WEBREG [2010.10.07 19:22:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HP Product Assistant [2010.10.07 19:18:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HP [2010.10.07 19:17:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\hpojp8500a909 [2010.10.07 19:16:04 | 000,271,704 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hpzids01.dll [2010.10.07 19:16:04 | 000,118,272 | ---- | C] (Hewlett-Packard Company) -- C:\WINDOWS\System32\hpf3l082.dll [2010.10.07 19:15:33 | 000,966,656 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpwtiop4.dll [2010.10.07 19:15:33 | 000,741,376 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hpwwiax5.dll [2010.10.07 19:15:33 | 000,364,544 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hppldcoi.dll [2010.10.07 19:15:33 | 000,309,760 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\difxapi.dll [2010.10.07 19:15:33 | 000,294,912 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpovst11.dll [2010.10.07 19:14:45 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\HP [2010.10.07 19:14:44 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Hewlett-Packard [2010.10.07 19:14:43 | 000,000,000 | ---D | C] -- C:\Programme\Hewlett-Packard [2010.10.07 19:13:21 | 000,000,000 | ---D | C] -- C:\Programme\HP [2008.09.17 23:17:21 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd.dll [2008.09.17 23:17:21 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd.dll [2008.09.17 23:17:21 | 000,036,864 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd.dll [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010.10.18 21:06:05 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.10.18 20:51:00 | 000,000,250 | -H-- | M] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job [2010.10.18 20:27:01 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010.10.18 20:11:00 | 000,000,298 | -H-- | M] () -- C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job [2010.10.18 19:54:35 | 066,526,646 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2010.10.18 19:52:29 | 000,487,124 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.10.18 19:52:29 | 000,444,362 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.10.18 19:52:29 | 000,072,238 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.10.18 19:52:28 | 000,095,372 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.10.18 19:48:10 | 000,001,084 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010.10.18 19:47:29 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.10.17 16:29:41 | 000,002,397 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Gigaset QuickSync.lnk [2010.10.17 02:05:06 | 000,495,616 | ---- | M] (Gigaset Communications GmbH) -- C:\WINDOWS\System32\Gqstsp.tsp [2010.10.16 22:48:39 | 000,000,350 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk [2010.10.15 12:06:18 | 000,294,864 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.10.10 09:52:18 | 000,001,709 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk [2010.10.07 21:51:52 | 000,216,942 | ---- | M] () -- C:\WINDOWS\hpwins22.dat [2010.10.07 19:32:56 | 000,000,000 | ---- | M] () -- C:\WINDOWS\hpqEmlSz.INI [2010.10.07 19:22:00 | 000,001,026 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\HP Solution Center.lnk [2010.10.07 19:19:49 | 000,001,788 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Digital Imaging Monitor.lnk [2010.10.07 18:50:24 | 000,267,370 | ---- | M] () -- C:\WINDOWS\hpwins22.dat.temp [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010.10.18 21:06:22 | 000,002,184 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\dotNetFx.log [2010.10.18 21:06:22 | 000,001,392 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Desktop\Recovery-Info.lnk [2010.10.18 21:06:22 | 000,001,082 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\langpackSetup.log [2010.10.17 02:05:50 | 000,002,397 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Gigaset QuickSync.lnk [2010.10.16 22:48:39 | 000,000,350 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk [2010.10.10 09:52:18 | 000,001,709 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk [2010.10.07 19:32:56 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI [2010.10.07 19:22:00 | 000,001,026 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\HP Solution Center.lnk [2010.10.07 19:19:49 | 000,001,788 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Digital Imaging Monitor.lnk [2010.10.07 19:11:15 | 000,267,370 | ---- | C] () -- C:\WINDOWS\hpwins22.dat.temp [2010.10.07 19:11:14 | 000,002,979 | ---- | C] () -- C:\WINDOWS\hpwmdl22.dat.temp [2010.10.07 18:48:34 | 000,216,942 | ---- | C] () -- C:\WINDOWS\hpwins22.dat [2010.10.07 18:48:34 | 000,002,217 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpzinstall.log [2010.10.07 18:48:32 | 000,002,979 | ---- | C] () -- C:\WINDOWS\hpwmdl22.dat [2010.06.30 22:17:36 | 000,169,424 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2009.11.11 17:59:35 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2009.11.11 17:58:16 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll [2009.11.11 17:55:55 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib1.dll [2009.11.11 17:55:54 | 000,394,752 | ---- | C] () -- C:\WINDOWS\System32\cygwinb19.dll [2009.11.11 17:55:54 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\libpng13.dll [2009.04.19 18:53:23 | 000,000,160 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2008.11.05 09:21:57 | 000,001,919 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2008.10.29 18:18:34 | 000,137,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\litsgt.sys [2008.10.29 18:18:34 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\tansgt.sys [2008.09.18 00:03:47 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008.09.18 00:03:47 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2008.09.18 00:03:45 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008.09.18 00:03:45 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008.09.18 00:03:45 | 000,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008.09.18 00:03:44 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008.09.17 23:17:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\dsnpstd.dll [2008.09.17 23:17:28 | 000,015,541 | ---- | C] () -- C:\WINDOWS\snpstd.ini [2008.09.17 23:17:26 | 000,345,728 | ---- | C] () -- C:\WINDOWS\System32\drivers\snpstd.sys [2008.09.17 23:02:49 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll [2008.09.17 22:44:48 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2008.09.17 21:44:33 | 000,000,425 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2008.09.17 21:44:33 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2008.09.17 21:04:45 | 000,031,664 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2008.09.17 20:56:52 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2008.09.17 20:24:34 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2008.09.17 19:37:50 | 000,001,082 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2008.05.26 23:23:36 | 000,016,834 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini [2008.05.26 23:23:34 | 000,024,188 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini [2008.05.26 23:23:32 | 000,016,568 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini [color=#E56717]========== LOP Check ==========[/color] [2010.10.18 21:06:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Opera [2008.09.18 20:06:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ashampoo [2010.02.09 01:54:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avery [2009.11.11 20:09:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\avg9 [2009.01.14 22:40:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Azureus [2010.10.17 02:05:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Cached Installations [2009.11.11 18:00:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Canneverbe Limited [2009.11.11 17:57:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FreePDF [2010.10.16 21:40:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Gigaset QuickSync [2008.11.23 19:57:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\iolo [2010.02.07 21:28:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ipla [2009.11.24 19:24:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ISDNWatch [2009.03.11 16:22:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nokia [2009.03.11 16:23:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite [2008.09.28 12:03:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ScanSoft [2009.11.11 18:31:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software [2009.01.15 18:13:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Vogel Verlag [2009.11.11 18:03:18 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{55A29068-F2CE-456C-9148-C869879E2357} [2009.03.11 18:41:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Any Video Converter [2010.06.13 00:04:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\ArcSyncConfig [2008.09.18 20:07:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Ashampoo [2009.01.14 22:45:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Azureus [2009.11.11 18:00:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Canneverbe_Limited [2008.09.17 23:22:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2009.01.25 18:26:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\DVD2AVI Ripper Professional [2009.11.27 21:27:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\FRITZ! [2009.11.24 19:24:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\FRITZ!fax für FRITZ!Box [2008.11.23 19:57:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\iolo [2010.02.07 21:28:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\ipla [2009.03.11 18:24:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Leadertech [2010.02.08 23:26:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\mojosoft [2009.03.11 16:44:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Nokia [2009.08.30 15:44:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\NSeries [2008.09.17 23:59:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Opera [2009.03.11 16:20:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\PC Suite [2009.01.15 18:13:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\ProtectDisc [2008.09.22 14:06:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\ScanSoft [2008.09.22 10:51:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Thinking Minds Budiling Bytes [2009.11.11 18:32:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\TuneUp Software [2009.01.21 15:25:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\uTorrent [2010.10.18 19:55:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Vista Start Menu [2010.03.07 11:00:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Windows Desktop Search [2009.10.08 11:11:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ewa Ludwik\Anwendungsdaten\Windows Search [2010.10.18 20:51:00 | 000,000,250 | -H-- | M] () -- C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job [2010.10.18 20:11:00 | 000,000,298 | -H-- | M] () -- C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 18165 · przez **wojtas** 18 Paź 2010, 22:42

1.znasz to ? ;

O4 - HKLM..\Run: [UIExec] C:\Programme\Cyfrowy Polsat\UIExec.exe ()

2. odinstaluj Google Toolbar

3. Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
SRV - File not found [Auto | Stopped] -- C:\WINDOWS\System32\sshnas21.dll -- (SSHNAS)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOKUME~1\EWALUD~1\LOKALE~1\Temp\GPU-Z.sys -- (GPU-Z)
DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aspi32.sys -- (ASPI32)
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found
O4 - HKU\.DEFAULT..\Run: [FRITZ!protect] File not found
O4 - HKU\S-1-5-18..\Run: [FRITZ!protect] File not found

:Files
C:\Programme\Mozilla Firefox\searchplugins\BearShareWebSearch.xml
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

:Commands
[emptytemp]
[emptyflash]
[clearallrestorepoints]
[resethosts]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

4. zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) zapisz raport

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie). + raport z Mbam

**Posty:** 177 · przez **roonnii** 19 Paź 2010, 22:38

Kod: Zaznacz wszystko: OTL logfile created on: 19.10.2010 22:27:59 - Run 2 OTL by OldTimer - Version 3.2.15.2 Folder = D:\ Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1.023,00 Mb Total Physical Memory | 809,00 Mb Available Physical Memory | 79,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 97,00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 19,53 Gb Total Space | 4,77 Gb Free Space | 24,40% Space Free | Partition Type: NTFS Drive D: | 54,99 Gb Total Space | 41,60 Gb Free Space | 75,66% Space Free | Partition Type: NTFS Drive F: | 3,76 Gb Total Space | 2,25 Gb Free Space | 59,97% Space Free | Partition Type: FAT32 Computer Name: EWALUDWIK | User Name: Administrator | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010.10.18 21:10:14 | 000,574,464 | ---- | M] (OldTimer Tools) -- D:\OTL.exe PRC - [2010.07.19 19:27:10 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG9\avgchsvx.exe PRC - [2008.04.14 04:22:45 | 000,979,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010.10.18 21:10:14 | 000,574,464 | ---- | M] (OldTimer Tools) -- D:\OTL.exe MOD - [2010.08.23 18:11:46 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2008.04.14 04:21:06 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2010.07.19 19:27:58 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Programme\AVG\AVG9\avgwdsvc.exe -- (avg9wd) SRV - [2009.11.11 18:32:37 | 000,604,488 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\WINDOWS\system32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc) SRV - [2009.11.11 18:32:35 | 000,361,288 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - [2009.09.06 13:38:06 | 000,071,096 | ---- | M] () [Auto | Stopped] -- C:\Programme\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU) SRV - [2009.07.28 17:07:42 | 000,073,528 | ---- | M] (AVM Berlin) [Auto | Stopped] -- C:\Programme\FRITZ!DSL\IGDCTRL.EXE -- (IGDCTRL) SRV - [2009.07.15 12:48:20 | 000,029,000 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp) SRV - [2009.05.21 15:28:38 | 000,874,768 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2009.05.21 14:23:04 | 000,909,312 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel(R) SRV - [2009.05.21 14:04:14 | 000,473,360 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R) SRV - [2008.11.04 02:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2007.02.08 17:13:46 | 000,212,480 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2006.10.26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\ZTEusbser6k.sys -- (ZTEusbser6k) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\ZTEusbnmea.sys -- (ZTEusbnmea) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\ZTEusbnet.sys -- (ZTEusbnet) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\ZTEusbmdm6k.sys -- (ZTEusbmdm6k) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\massfilter.sys -- (massfilter) DRV - [2010.07.19 19:28:05 | 000,243,024 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX) DRV - [2010.07.19 19:27:12 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86) DRV - [2010.06.02 17:59:44 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86) DRV - [2009.11.24 21:29:39 | 000,101,248 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avmaura.sys -- (avmaura) DRV - [2009.09.28 21:57:28 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009.02.20 19:09:16 | 000,044,032 | R--- | M] (Siemens Home and Office Communication Devices GmbH & Co. KG) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GigasetGenericUSB.sys -- (GigasetGenericUSB) DRV - [2008.10.29 18:18:34 | 000,137,344 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\litsgt.sys -- (litsgt) DRV - [2008.10.29 18:18:34 | 000,012,032 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\tansgt.sys -- (tansgt) DRV - [2008.08.13 18:23:56 | 000,011,904 | ---- | M] (Intel Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2008.04.13 20:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE) DRV - [2008.04.13 18:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008.01.23 10:19:44 | 000,501,560 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\ACEDRV11.sys -- (acedrv11) DRV - [2008.01.07 15:36:16 | 002,216,064 | R--- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Intel(R) DRV - [2007.02.22 11:15:56 | 000,137,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (nmwcd) DRV - [2007.02.22 11:15:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (nmwcdcm) DRV - [2007.02.22 11:15:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcj.sys -- (nmwcdcj) DRV - [2007.02.22 11:15:14 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (nmwcdc) DRV - [2005.09.14 22:58:30 | 001,339,392 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2005.03.23 16:08:52 | 002,547,008 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2005.03.18 15:22:46 | 000,188,928 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2004.12.02 17:36:08 | 000,070,912 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp) DRV - [2004.10.27 15:21:30 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService) DRV - [2004.10.15 12:50:20 | 000,015,295 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrScnUsb.sys -- (BrScnUsb) DRV - [2004.10.15 09:37:14 | 000,345,728 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snpstd.sys -- (snpstd) USB PC Camera (SN9C102) DRV - [2004.07.22 03:40:00 | 000,036,736 | R--- | M] (DTV-DVB) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\UDTT2BDA.sys -- (UDTT2BDA) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Programme\AVG\AVG9\Firefox [2010.09.23 13:34:03 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2010.10.07 19:23:32 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.02.10 20:20:56 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.10.10 09:52:16 | 000,000,000 | ---D | M] [2010.10.17 00:52:39 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2009.08.24 21:25:19 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2009.08.24 21:25:19 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2009.08.24 21:25:19 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2009.08.24 21:25:19 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2009.08.24 21:25:19 | 000,000,801 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.10.19 21:08:16 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O4 - HKLM..\Run: [%RunKey%] C:\Programme\FRITZ!vox\FRITZ!vox.exe (AVM Berlin) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\ALCWZRD.EXE (RealTek Semicoductor Corp.) O4 - HKLM..\Run: [ATICCC] C:\Programme\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.) O4 - HKLM..\Run: [AVG9_TRAY] C:\Programme\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [AVMFBoxMonitor] C:\Programme\FRITZ!Box Monitor\FRITZBoxMonitor.exe (AVM Berlin) O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider) O4 - HKLM..\Run: [IndexSearch] C:\Programme\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [InstantOn] C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe () O4 - HKLM..\Run: [IntelWireless] C:\Programme\Gemeinsame Dateien\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation) O4 - HKLM..\Run: [IntelZeroConfig] C:\Programme\Intel\WiFi\bin\ZCfgSvc.exe (Intel(R) Corporation) O4 - HKLM..\Run: [PaperPort PTD] C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [RaidTool] C:\Programme\VIA\RAID\raid_tool.exe (VIA Technologies) O4 - HKLM..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe () O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.) O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\ATI CATALYST System Tray.lnk = C:\Programme\ATI Technologies\ATI.ACE\CLI.exe (ATI Technologies Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O9 - Extra Button: HP Intelligente Auswahl - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008.09.17 19:34:30 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010.10.19 21:17:15 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.10.19 21:17:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.10.19 21:17:12 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.10.19 21:17:12 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2010.10.18 21:45:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\WinRAR [2010.10.18 21:06:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Opera [2010.10.18 21:06:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Opera [2010.10.18 21:06:21 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft [2010.10.18 21:06:21 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\SendTo [2010.10.18 21:06:21 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten [2010.10.18 21:06:21 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü [2010.10.18 21:06:21 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator\Cookies [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Vorlagen [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Recent [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Netzwerkumgebung [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen [2010.10.18 21:06:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Druckumgebung [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft Help [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Intel [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Favoriten [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Desktop [2010.10.18 21:06:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\{3248F0A6-6813-11D6-A77B-00B0D0150000} [2010.10.17 02:09:35 | 000,044,032 | R--- | C] (Siemens Home and Office Communication Devices GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\GigasetGenericUSB.sys [2010.10.17 02:06:03 | 000,495,616 | ---- | C] (Gigaset Communications GmbH) -- C:\WINDOWS\System32\Gqstsp.tsp [2010.10.17 02:05:49 | 000,000,000 | ---D | C] -- C:\Programme\Gigaset QuickSync [2010.10.17 02:05:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Cached Installations [2010.10.16 21:40:51 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Gigaset QuickSync [2010.10.16 21:39:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations [2010.10.15 21:22:27 | 000,000,000 | ---D | C] -- C:\ERDNT [2010.10.15 21:22:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2010.10.15 21:22:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010.10.15 21:22:11 | 000,000,000 | ---D | C] -- C:\!FixIEDef [2010.10.15 19:50:58 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner [2010.10.13 11:38:48 | 000,954,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40.dll [2010.10.13 11:38:47 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll [2010.10.13 11:38:47 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll [2010.10.13 11:38:21 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll [2010.10.10 09:51:55 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Adobe [2010.10.09 20:52:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HPSSUPPLY [2010.10.07 21:47:50 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\serscan.sys [2010.10.07 19:28:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WEBREG [2010.10.07 19:22:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HP Product Assistant [2010.10.07 19:18:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HP [2010.10.07 19:17:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\hpojp8500a909 [2010.10.07 19:16:04 | 000,271,704 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hpzids01.dll [2010.10.07 19:16:04 | 000,118,272 | ---- | C] (Hewlett-Packard Company) -- C:\WINDOWS\System32\hpf3l082.dll [2010.10.07 19:15:33 | 000,966,656 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpwtiop4.dll [2010.10.07 19:15:33 | 000,741,376 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hpwwiax5.dll [2010.10.07 19:15:33 | 000,364,544 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hppldcoi.dll [2010.10.07 19:15:33 | 000,309,760 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\difxapi.dll [2010.10.07 19:15:33 | 000,294,912 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpovst11.dll [2010.10.07 19:14:45 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\HP [2010.10.07 19:14:44 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Hewlett-Packard [2010.10.07 19:14:43 | 000,000,000 | ---D | C] -- C:\Programme\Hewlett-Packard [2010.10.07 19:13:21 | 000,000,000 | ---D | C] -- C:\Programme\HP [2008.09.17 23:17:21 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd.dll [2008.09.17 23:17:21 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd.dll [2008.09.17 23:17:21 | 000,036,864 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010.10.19 22:25:53 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.10.19 21:17:17 | 000,000,676 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.10.19 21:09:51 | 000,001,084 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010.10.19 21:02:09 | 066,570,953 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2010.10.18 19:52:29 | 000,487,124 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.10.18 19:52:29 | 000,444,362 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.10.18 19:52:29 | 000,072,238 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.10.18 19:52:28 | 000,095,372 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.10.18 19:47:29 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.10.17 16:29:41 | 000,002,397 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Gigaset QuickSync.lnk [2010.10.17 02:05:06 | 000,495,616 | ---- | M] (Gigaset Communications GmbH) -- C:\WINDOWS\System32\Gqstsp.tsp [2010.10.16 22:48:39 | 000,000,350 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk [2010.10.15 12:06:18 | 000,294,864 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.10.10 09:52:18 | 000,001,709 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk [2010.10.07 21:51:52 | 000,216,942 | ---- | M] () -- C:\WINDOWS\hpwins22.dat [2010.10.07 19:32:56 | 000,000,000 | ---- | M] () -- C:\WINDOWS\hpqEmlSz.INI [2010.10.07 19:22:00 | 000,001,026 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\HP Solution Center.lnk [2010.10.07 19:19:49 | 000,001,788 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Digital Imaging Monitor.lnk [2010.10.07 18:50:24 | 000,267,370 | ---- | M] () -- C:\WINDOWS\hpwins22.dat.temp [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010.10.19 21:17:17 | 000,000,676 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.10.18 21:06:22 | 000,002,184 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\dotNetFx.log [2010.10.18 21:06:22 | 000,001,392 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Desktop\Recovery-Info.lnk [2010.10.18 21:06:22 | 000,001,082 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\langpackSetup.log [2010.10.17 02:05:50 | 000,002,397 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Gigaset QuickSync.lnk [2010.10.16 22:48:39 | 000,000,350 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk [2010.10.10 09:52:18 | 000,001,709 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk [2010.10.07 19:32:56 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI [2010.10.07 19:22:00 | 000,001,026 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\HP Solution Center.lnk [2010.10.07 19:19:49 | 000,001,788 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Digital Imaging Monitor.lnk [2010.10.07 19:11:15 | 000,267,370 | ---- | C] () -- C:\WINDOWS\hpwins22.dat.temp [2010.10.07 19:11:14 | 000,002,979 | ---- | C] () -- C:\WINDOWS\hpwmdl22.dat.temp [2010.10.07 18:48:34 | 000,216,942 | ---- | C] () -- C:\WINDOWS\hpwins22.dat [2010.10.07 18:48:34 | 000,002,217 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpzinstall.log [2010.10.07 18:48:32 | 000,002,979 | ---- | C] () -- C:\WINDOWS\hpwmdl22.dat [2010.06.30 22:17:36 | 000,169,424 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2009.11.11 17:59:35 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2009.11.11 17:58:16 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll [2009.11.11 17:55:55 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib1.dll [2009.11.11 17:55:54 | 000,394,752 | ---- | C] () -- C:\WINDOWS\System32\cygwinb19.dll [2009.11.11 17:55:54 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\libpng13.dll [2009.04.19 18:53:23 | 000,000,160 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2008.11.05 09:21:57 | 000,001,919 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2008.10.29 18:18:34 | 000,137,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\litsgt.sys [2008.10.29 18:18:34 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\tansgt.sys [2008.09.18 00:03:47 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008.09.18 00:03:47 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2008.09.18 00:03:45 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008.09.18 00:03:45 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008.09.18 00:03:45 | 000,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008.09.18 00:03:44 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008.09.17 23:17:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\dsnpstd.dll [2008.09.17 23:17:28 | 000,015,541 | ---- | C] () -- C:\WINDOWS\snpstd.ini [2008.09.17 23:17:26 | 000,345,728 | ---- | C] () -- C:\WINDOWS\System32\drivers\snpstd.sys [2008.09.17 23:02:49 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll [2008.09.17 22:44:48 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2008.09.17 21:44:33 | 000,000,425 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2008.09.17 21:44:33 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2008.09.17 21:04:45 | 000,031,664 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2008.09.17 20:56:52 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2008.09.17 20:24:34 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2008.09.17 19:37:50 | 000,001,082 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2008.05.26 23:23:36 | 000,016,834 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini [2008.05.26 23:23:34 | 000,024,188 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini [2008.05.26 23:23:32 | 000,016,568 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini < End of report >

Dodano 19.10.2010 21:39:29:

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== Service SSHNAS stopped successfully! Service SSHNAS deleted successfully! File C:\WINDOWS\System32\sshnas21.dll not found. Service AppMgmt stopped successfully! Service AppMgmt deleted successfully! File C:\WINDOWS\System32\appmgmts.dll not found. Service GPU-Z stopped successfully! Service GPU-Z deleted successfully! File C:\DOKUME~1\EWALUD~1\LOKALE~1\Temp\GPU-Z.sys not found. Service ASPI32 stopped successfully! Service ASPI32 deleted successfully! File C:\WINDOWS\System32\drivers\aspi32.sys not found. Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found. Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\\FRITZ!protect deleted successfully. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\FRITZ!protect not found. ========== FILES ========== C:\Programme\Mozilla Firefox\searchplugins\BearShareWebSearch.xml moved successfully. C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job moved successfully. C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully. C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 294912 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Opera cache emptied: 240 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Ewa Ludwik ->Temp folder emptied: 2876958 bytes ->Temporary Internet Files folder emptied: 148152 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 60477520 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 43199 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 2936317 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33237 bytes %systemdrive% .tmp files removed: 123436074 bytes %systemroot% .tmp files removed: 2195157 bytes %systemroot%\System32 .tmp files removed: 2833287 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 904945 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 187,00 mb [EMPTYFLASH] User: Administrator User: All Users User: Default User User: Ewa Ludwik ->Flash cache emptied: 0 bytes User: LocalService User: NetworkService Total Flash Files Cleaned = 0,00 mb Restore points cleared and new OTL Restore Point set! C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully OTL by OldTimer - Version 3.2.15.2 log created on 10192010_210754 Files\Folders moved on Reboot... File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\Y0M44TQ1\click2,4Z1bAMkpCgDRRUAAAAAAAH4gEQAAAAAAAgFMAAYAAAAAAP8AAAAFD395EQAAAAAALMgOAAAAAAABwhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABENwUAAAAAA[1].html,;1265896242 not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\Y0M44TQ1\click2,iRkAANeRCwDJTTMAAAAAAGVpCgAAAAAAAAAoAAYAAAAAAAgAAQAFDzkYFQAAAAAAs0kWAAAAAAAy2w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\Y0M44TQ1\click2,iRkAANiRCwBORhQAAAAAACNpBgAAAAAAAAAkAAoAAAAAAAYAAQAFDzkYFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\Y0M44TQ1\click2,iRkAANiRCwBORhQAAAAAACNpBgAAAAAAAgAcAAoAAAAAAP8AAAAFDzkYFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\Y0M44TQ1\click2,iRkAANiRCwDJTTMAAAAAAGVpCgAAAAAAAAA4AAYAAAAAAAYAAgAFDzkYFQAAAAAAs0kWAAAAAAAy2w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\Y0M44TQ1\click2,Q3pFAB2SCwA8LRUAAAAAACNpBgAAAAAAAAAIAAYAAAAAAAcAAwAFD5UYFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABN-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\Y0M44TQ1\click2,RDVMAM2eCwCi7jwAAAAAAF8EEQAAAAAAAgAAAAQAAAAAAP8AAAAFD1RIFQAAAAAAMbIVAAAAAACNnxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3AQY[2].com%2F,;ord=1265894323 not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\OPQRATCV\click2,eYAPAMWaCwA8LRUAAAAAACNpBgAAAAAAAgAAAAYAAAAAAP8AAAAFDxQ-FQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABlAAYAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\OPQRATCV\click2,iRkAANeRCwA8LRUAAAAAACNpBgAAAAAAAABEAAYAAAAAAAcABAAFDzkYFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\OPQRATCV\click2,iRkAANeRCwDJTTMAAAAAAGVpCgAAAAAAAgAUAAYAAAAAAP8AAAAFDzkYFQAAAAAAs0kWAAAAAAAy2w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\OPQRATCV\click2,iRkAANiRCwBORhQAAAAAACNpBgAAAAAAAAAwAAoAAAAAAAAAAwAFDzkYFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\OPQRATCV\click2,iRkAANiRCwBORhQAAAAAACNpBgAAAAAAAgCcAAoAAAAAAP8AAAAFEDkYFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\OPQRATCV\click2,iRkAANiRCwDJTTMAAAAAAGVpCgAAAAAAAgCYAAYAAAAAAP8AAAAFEDkYFQAAAAAAs0kWAAAAAAAy2w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\OPQRATCV\click2,RDVMANOeCwA8LRUAAAAAACNpBgAAAAAAAACkAAYAAAAAAAcAAQAFEGFIFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6AQYAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\OPQRATCV\click2,wNtKAK2KCwBtBj8AAAAAAMLREAAAAAAAAgCcAQEAAAAAAP8AAAAFEFj6FAAAAAAAlQsGAAAAAAAxYBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt9wU[2].com%2F,;ord=1265897014 not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\89W76HEX\adlink%7C59%7C1582023%7C0%7C225%7CAdId%3D2856482%3BBnId%3D3%3Bitime%3D895588855%3Bkey%3Dgaming%3Blink%3Dhttp%3A%2F%2Fad%2Ereduxmedia%2Ecom%2Fclick2%2CRDVMANOeCwA8LRUAAAA[2] not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\89W76HEX\click2,iRkAANiRCwBORhQAAAAAACNpBgAAAAAAAAAsAAoAAAAAAAYAAgAFDzkYFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\89W76HEX\click2,RDVMANOeCwA8LRUAAAAAACNpBgAAAAAAAgCYAAYAAAAAAP8AAAAFEGFIFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6AQYAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\0VWRYNO7\click2,eYAPAMWaCwA8LRUAAAAAACNpBgAAAAAAAAAwAAYAAAAAAAMAAgAFEBQ-FQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABlAAYAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\0VWRYNO7\click2,iRkAANiRCwDITTMAAAAAAGVpCgAAAAAAAABIAAIAAAAAAAkAAQAFEDkYFQAAAAAAs0kWAAAAAAAy2w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\0VWRYNO7\click2,iRkAANiRCwDITTMAAAAAAGVpCgAAAAAAAgAgAAIAAAAAAP8AAAAFDzkYFQAAAAAAs0kWAAAAAAAy2w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1-wUAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\0VWRYNO7\click2,RDVMANOeCwA8LRUAAAAAACNpBgAAAAAAAAAgAAYAAAAAAAMAAQAFD2FIFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6AQYAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\0VWRYNO7\click2,RDVMANOeCwA8LRUAAAAAACNpBgAAAAAAAAAoAAYAAAAAAAcAAgAFD2FIFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6AQYAAAAAAAIAAwAAAA[1].com%2F, not found! File\Folder C:\Dokumente und Einstellungen\Ewa Ludwik\Lokale Einstellungen\Temp\Temporary Internet Files\Content.IE5\0VWRYNO7\click2,RDVMANOeCwA8LRUAAAAAACNpBgAAAAAAAABMAAYAAAAAAAUABQAFD2FIFQAAAAAAs0kWAAAAAABzkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6AQYAAAAAAAIAAwAAAA[1].com%2F, not found! Registry entries deleted on Reboot..

**Posty:** 18165 · przez **wojtas** 20 Paź 2010, 20:05

gdzie odpowiedź na pytanie ? gdzie log z Mbam ?

**Posty:** 177 · przez **roonnii** 21 Paź 2010, 00:56

nie ma zapisalem tylko to bede musial jeszcze raz zeskanowac za niedlugo bedzie ale chcialem napisać że zauważyłem ze jak włanczam exele to odrazu komp caly zamula nic nie da sie na nim zrobic i ten sam problem z exelem mam na malym lapku

**Posty:** 18165 · przez **wojtas** 27 Paź 2010, 21:01

daj nowe logi

Kto jest na forum