Potrzebna pomoc! system zamula podczas surfowania po necie.

**Posty:** 4 · przez **coyote24** 30 Gru 2009, 03:11

Witam!
Mam problem podobny do tego opisanego tu: http://forum.programosy.pl/uciazliwa-praca-w-systemie-vt115830.html . U mnie sprawa wygląda następująco: podczas przeglądania stron w internecie (zarówno przy użyciu internet explorera LUB firefoxa), a konkretnie zwykłego ładowania czy nawet przewijania strony użycie procesora wzrasta często do 100% (wykorzystuje to przeglądarka-obojętnie czy odpalam fireF czy IE). Określiłbym to jako chwilowe zawieszanie, lagowanie, przecinanie przeglądarki. Jest to bardzo uciążliwe nawet przy zwykłym przeglądaniu stron intern., nie mówiąc już o odtwarzaniu filmów np. z YouTube'a. Mój komp: AMD Athlon XP 1800+, ATI Radeon 9200 SE, 512 MB. Poczytałem coś niecoś na forum więc zamieszczam logi z HiJacka

:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 00:10:40, on 2009-12-30 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Online Armor\OAcat.exe C:\Program Files\Online Armor\oasrv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Active@ Hard Disk Monitor\DiskMonitorService.exe C:\Program Files\Avast4\aswUpdSv.exe C:\Program Files\Avast4\ashServ.exe C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe C:\WINDOWS\system32\UAService7.exe C:\Program Files\Avast4\ashWebSv.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\Program Files\Online Armor\oaui.exe C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe C:\PROGRA~1\Avast4\ashDisp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Online Armor\OAhlp.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\neostrada tp\neostradatp.exe C:\Program Files\neostrada tp\ComComp.exe C:\PROGRA~1\NEOSTR~1\Toaster.exe C:\PROGRA~1\NEOSTR~1\Inactivity.exe C:\PROGRA~1\NEOSTR~1\PollingModule.exe C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE C:\Program Files\neostrada tp\Watch.exe C:\Program Files\Gadu-Gadu 10\gg.exe C:\Program Files\Gadu-Gadu 10\spellchecker_gg.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = neostrada tp R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL F1 - win.ini: run= C:\REDALERT\INSTICON.EXE O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: (no name) - {6a90ac76-e3ee-2fb8-041f-d1879fd199dd} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [@OnlineArmor GUI] "C:\Program Files\Online Armor\oaui.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Natural Color Pro O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{F67CA537-5329-4219-AA68-29666F4D5F28}: NameServer = 194.204.152.34 194.204.159.1 O23 - Service: Active@ Disk Monitor - LSoft Technologies Inc - C:\Program Files\Active@ Hard Disk Monitor\DiskMonitorService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: Online Armor Helper Service (OAcat) - Tall Emu - C:\Program Files\Online Armor\OAcat.exe O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - C:\Program Files\Online Armor\oasrv.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe -- End of file - 8162 bytes

P.S Dodam tylko, że wcześniej robiłem skana programem Anti-Malware i znalazł 8 wirusów, usunąłem je lecz problem nie zniknął. Ciekawostką jest fakt, że problem pojawił się po zainstalowaniu i pierwszych użytkowaniach neostrady. Z góry dziękuję za pomoc i pozdrawiam!

**Posty:** 2183 · przez **NieWiem** 30 Gru 2009, 13:50

No raczej nie poczytałeś, skoro zamieszczasz HiJacka... HiJack to nie jest dobry program obecnie. Prawie nic nie widzi.

Wklej loga z OTL albo DDS albo RSIT.

**Posty:** 4 · przez **coyote24** 30 Gru 2009, 14:49

No fakt, OTL widzi więcej

oto logi:

Kod: Zaznacz wszystko: OTL logfile created on: 2009-12-30 13:23:42 - Run 1 OTL by OldTimer - Version 3.1.20.1 Folder = D:\download z NEO Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 54,00 Mb Available Physical Memory | 11,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 58,00% Paging File free Paging file location(s): C:\pagefile.sys 576 1152 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 100,47 Gb Total Space | 65,08 Gb Free Space | 64,77% Space Free | Partition Type: NTFS Drive D: | 197,62 Gb Total Space | 65,36 Gb Free Space | 33,07% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: GOSIA-EC687CE8C Current User Name: Henryk Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-12-30 13:23:12 | 00,513,536 | ---- | M] (OldTimer Tools) -- D:\download z NEO\OTL.exe PRC - [2009-12-30 03:38:25 | 00,141,936 | ---- | M] (Beijing Rising Information Technology Co., Ltd.) -- C:\Program Files\Rising PC Doctor\RSTray.exe PRC - [2009-12-29 17:16:28 | 00,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe PRC - [2009-12-05 07:53:40 | 03,042,504 | ---- | M] (Tall Emu) -- C:\Program Files\Online Armor\oahlp.exe PRC - [2009-12-05 07:53:38 | 06,622,920 | ---- | M] (Tall Emu) -- C:\Program Files\Online Armor\oaui.exe PRC - [2009-12-05 07:53:38 | 03,291,336 | ---- | M] (Tall Emu) -- C:\Program Files\Online Armor\oasrv.exe PRC - [2009-12-05 07:53:38 | 01,282,248 | ---- | M] (Tall Emu) -- C:\Program Files\Online Armor\oacat.exe PRC - [2009-12-02 15:26:07 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-11-25 00:51:40 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashDisp.exe PRC - [2009-11-25 00:51:35 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashServ.exe PRC - [2009-11-25 00:48:48 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashWebSv.exe PRC - [2009-11-25 00:43:56 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\aswUpdSv.exe PRC - [2009-08-26 09:15:38 | 01,127,944 | ---- | M] (LSoft Technologies Inc) -- C:\Program Files\Active@ Hard Disk Monitor\DiskMonitorService.exe PRC - [2009-04-14 14:09:50 | 00,122,880 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\system32\UAService7.exe PRC - [2008-04-14 18:21:50 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2008-04-14 18:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-08-08 09:25:08 | 00,836,904 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe PRC - [2005-12-06 13:53:30 | 00,819,200 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\neostradatp.exe PRC - [2005-11-22 11:54:18 | 00,249,856 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\ComComp.exe PRC - [2004-11-02 14:31:20 | 00,069,632 | ---- | M] (France Telecom R&D) -- C:\Program Files\neostrada tp\Toaster.exe PRC - [2004-10-27 10:30:44 | 00,032,768 | ---- | M] () -- C:\Program Files\neostrada tp\Inactivity.exe PRC - [2004-10-27 10:07:06 | 00,069,632 | ---- | M] () -- C:\Program Files\neostrada tp\PollingModule.exe PRC - [2004-10-21 07:50:52 | 00,045,056 | ---- | M] () -- C:\WINDOWS\system32\AlertModule\AlertModule.exe PRC - [2004-10-05 16:00:12 | 00,061,440 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\TaskBarIcon.exe PRC - [2004-08-23 13:49:56 | 00,040,960 | ---- | M] (France Telecom) -- C:\WINDOWS\system32\FTRTSVC.exe PRC - [2004-08-23 13:49:56 | 00,020,480 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\Watch.exe PRC - [2004-01-26 11:38:38 | 00,866,816 | ---- | M] (THOMSON Telecom Belgium) -- C:\Program Files\Thomson\SpeedTouch USB\dragdiag.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2009-12-30 13:23:12 | 00,513,536 | ---- | M] (OldTimer Tools) -- D:\download z NEO\OTL.exe MOD - [2009-12-30 03:38:25 | 00,100,976 | ---- | M] (Beijing Rising Information Technology Co., Ltd.) -- C:\Program Files\Rising PC Doctor\Syslay.dll MOD - [2009-12-30 03:38:24 | 00,637,592 | ---- | M] (Beijing Rising Information Technology Co., Ltd.) -- C:\WINDOWS\system32\kmon.dll MOD - [2009-12-30 03:38:24 | 00,182,896 | ---- | M] (Beijing Rising Information Technology Co., Ltd.) -- C:\Program Files\Rising PC Doctor\comx3.dll MOD - [2009-12-05 07:53:38 | 00,941,256 | ---- | M] (Tall Emu) -- C:\Program Files\Online Armor\oawatch.dll MOD - [2008-04-14 18:20:59 | 00,024,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wsock32.dll MOD - [2008-04-14 18:20:59 | 00,018,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wtsapi32.dll MOD - [2008-04-14 18:20:57 | 00,053,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winsta.dll MOD - [2004-10-26 08:49:34 | 00,028,672 | ---- | M] () -- C:\Program Files\neostrada tp\Inactivity.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-12-29 17:16:24 | 00,182,768 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc) SRV - [2009-12-25 19:10:05 | 01,181,328 | ---- | M] (Lavasoft) [On_Demand | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service) SRV - [2009-12-05 07:53:38 | 03,291,336 | ---- | M] (Tall Emu) [Auto | Running] -- C:\Program Files\Online Armor\oasrv.exe -- (SvcOnlineArmor) SRV - [2009-12-05 07:53:38 | 01,282,248 | ---- | M] (Tall Emu) [Auto | Running] -- C:\Program Files\Online Armor\OAcat.exe -- (OAcat) SRV - [2009-11-25 00:51:35 | 00,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\ashServ.exe -- (avast! Antivirus) SRV - [2009-11-25 00:51:21 | 00,254,040 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Avast4\ashMaiSv.exe -- (avast! Mail Scanner) SRV - [2009-11-25 00:48:48 | 00,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Avast4\ashWebSv.exe -- (avast! Web Scanner) SRV - [2009-11-25 00:43:56 | 00,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\aswUpdSv.exe -- (aswUpdSv) SRV - [2009-08-26 09:15:38 | 01,127,944 | ---- | M] (LSoft Technologies Inc) [Auto | Running] -- C:\Program Files\Active@ Hard Disk Monitor\DiskMonitorService.exe -- (Active@ Disk Monitor) SRV - [2009-04-14 14:09:50 | 00,122,880 | ---- | M] (Sony DADC Austria AG.) [Auto | Running] -- C:\WINDOWS\system32\UAService7.exe -- (UserAccess7) SecuROM User Access Service (V7) SRV - [2007-08-08 09:25:08 | 00,836,904 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe -- (Nero BackItUp Scheduler 3) SRV - [2007-08-03 12:51:18 | 00,382,248 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe -- (NMIndexingService) SRV - [2006-05-03 17:43:46 | 00,413,696 | ---- | M] (ATI Technologies Inc.) [Auto | Stopped] -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller) SRV - [2006-05-03 10:57:00 | 00,520,192 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\ati2sgag.exe -- (ATI Smart) SRV - [2004-08-23 13:49:56 | 00,040,960 | ---- | M] (France Telecom) [Auto | Running] -- C:\WINDOWS\system32\FTRTSVC.exe -- (FTRTSVC) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-12-30 01:00:55 | 00,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AFS2K.SYS -- (AFS2K) DRV - [2009-12-23 00:41:45 | 00,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2009-12-05 07:28:06 | 00,024,656 | ---- | M] (Tall Emu) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\OAmon.sys -- (OAmon) DRV - [2009-12-05 07:27:56 | 00,029,776 | ---- | M] (Tall Emu Pty Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\OAnet.sys -- (OAnet) DRV - [2009-12-05 07:27:52 | 00,223,312 | ---- | M] (Tall Emu) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\OADriver.sys -- (OADevice) DRV - [2009-12-02 14:19:06 | 00,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd) DRV - [2009-11-25 00:50:59 | 00,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2) DRV - [2009-11-25 00:50:12 | 00,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP) DRV - [2009-11-25 00:50:00 | 00,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2009-11-25 00:49:07 | 00,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi) DRV - [2009-11-25 00:48:57 | 00,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr) DRV - [2009-11-25 00:47:54 | 00,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2009-05-11 09:12:24 | 00,028,520 | ---- | M] (Avira GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2008-04-13 19:45:29 | 00,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2007-11-13 11:25:55 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2007-11-02 14:22:38 | 00,105,896 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s217unic.sys -- (s217unic) Sony Ericsson Device 217 USB Ethernet Emulation SEMC217 (WDM) DRV - [2007-11-02 14:22:38 | 00,103,976 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s217mgmt.sys -- (s217mgmt) Sony Ericsson Device 217 USB WMC Device Management Drivers (WDM) DRV - [2007-11-02 14:22:38 | 00,100,008 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s217obex.sys -- (s217obex) DRV - [2007-11-02 14:22:38 | 00,024,872 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s217nd5.sys -- (s217nd5) Sony Ericsson Device 217 USB Ethernet Emulation SEMC217 (NDIS) DRV - [2007-11-02 14:22:36 | 00,109,992 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s217mdm.sys -- (s217mdm) DRV - [2007-11-02 14:22:36 | 00,083,496 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s217bus.sys -- (s217bus) Sony Ericsson Device 217 driver (WDM) DRV - [2007-11-02 14:22:36 | 00,015,016 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s217mdfl.sys -- (s217mdfl) DRV - [2007-03-08 00:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\PxHelp20.sys -- (PxHelp20) DRV - [2007-01-07 16:22:56 | 00,271,360 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2007-01-07 16:22:56 | 00,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2006-10-07 21:30:27 | 00,009,856 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc) DRV - [2006-08-28 16:12:04 | 00,013,312 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\MTictwl.sys -- (NCPro) DRV - [2006-08-28 16:12:04 | 00,013,312 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MTictwl.sys -- (MagicTune) DRV - [2006-05-03 17:50:42 | 01,540,608 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2006-03-13 15:50:08 | 00,085,696 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300obex.sys -- (w300obex) DRV - [2006-03-13 15:50:06 | 00,087,824 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300mgmt.sys -- (w300mgmt) Sony Ericsson W300 USB WMC Device Management Drivers (WDM) DRV - [2006-03-13 15:50:02 | 00,096,352 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300mdm.sys -- (w300mdm) DRV - [2006-03-13 15:50:00 | 00,009,264 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300mdfl.sys -- (w300mdfl) DRV - [2006-03-13 15:49:54 | 00,060,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300bus.sys -- (w300bus) Sony Ericsson W300 Driver driver (WDM) DRV - [2005-10-24 13:59:04 | 00,065,024 | ---- | M] (iolo Technologies) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\IoloFltr.sys -- (IoloFilter) DRV - [2004-08-04 02:08:36 | 00,013,824 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\atinmdxx.sys -- (MVDCODEC) DRV - [2004-08-04 02:08:30 | 00,105,984 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\atinrvxx.sys -- (atinrvxx) DRV - [2004-08-03 23:31:34 | 00,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2004-05-29 04:15:12 | 00,009,728 | ---- | M] (iolo technologies, LLC (based on original work by Bo Brantén)) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\filedisk.sys -- (FileDisk) DRV - [2004-02-11 12:51:46 | 00,115,840 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\viaudios.sys -- (VIAudio) Vinyl AC'97 Audio Controller (WDM) DRV - [2003-12-08 11:53:48 | 00,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcan5wn.sys -- (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN) DRV - [2003-12-08 11:53:46 | 00,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl) DRV - [2003-08-04 13:22:44 | 00,016,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5) DRV - [2002-09-16 16:14:32 | 00,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\PQNTDRV.sys -- (PQNTDrv) DRV - [2001-08-18 00:57:36 | 00,005,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rootmdm.sys -- (ROOTMODEM) DRV - [2001-08-18 00:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/ IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\neostrada tp\SearchPageURL.dll () IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.update: false FF - prefs.js..browser.startup.homepage: "www.onet.pl" FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-12-21 21:22:07 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-12-21 21:17:12 | 00,000,000 | ---D | M] [2009-12-22 20:11:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Henryk\Dane aplikacji\Mozilla\Extensions [2009-12-22 20:11:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Henryk\Dane aplikacji\Mozilla\Firefox\Profiles\autba8vq.default\extensions [2009-12-21 21:17:12 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2009-12-02 09:23:35 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-12-02 09:23:35 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-12-02 09:23:35 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-12-02 09:23:35 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-12-02 09:23:35 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-12-02 09:23:35 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (no name) - {6a90ac76-e3ee-2fb8-041f-d1879fd199dd} - No CLSID value found. O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Rising PC Doctor) - {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} - C:\WINDOWS\system32\UrlFilter.dll (Beijing Rising Information Technology Co., Ltd.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [@OnlineArmor GUI] C:\Program Files\Online Armor\oaui.exe (Tall Emu) O4 - HKLM..\Run: [avast!] C:\Program Files\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [QD FastAndSafe] File not found O4 - HKLM..\Run: [runeip] C:\Program Files\Rising PC Doctor\rstray.exe (Beijing Rising Information Technology Co., Ltd.) O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe File not found O4 - HKLM..\Run: [WOOWATCH] C:\Program Files\neostrada tp\Watch.exe (France Télécom R&D) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Funkcja Google Sidewiki - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.) O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Java Plug-in 1.5.0_03) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Java Plug-in 1.5.0_09) O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Java Plug-in 1.5.0_10) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O20 - AppInit_DLLs: (kmon.dll) - C:\WINDOWS\System32\kmon.dll (Beijing Rising Information Technology Co., Ltd.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {4F07DA45-8170-4859-9B5F-037EF2970034} - C:\Program Files\Online Armor\oaevent.dll (Tall Emu) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-10-07 21:07:51 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe () O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-12-30 03:39:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Rising [2009-12-30 03:39:11 | 00,637,592 | ---- | C] (Beijing Rising Information Technology Co., Ltd.) -- C:\WINDOWS\System32\kmon.dll [2009-12-30 03:39:11 | 00,100,976 | ---- | C] (Beijing Rising Information Technology Co., Ltd.) -- C:\WINDOWS\System32\UrlFilter.dll [2009-12-30 03:39:11 | 00,096,880 | ---- | C] (Beijing Rising Information Technology Co., Ltd.) -- C:\WINDOWS\System32\KakaTool.dll [2009-12-30 03:39:11 | 00,015,776 | ---- | C] (Beijing Rising Information Technology Co., Ltd.) -- C:\WINDOWS\System32\kknative.exe [2009-12-30 03:38:57 | 00,000,000 | ---D | C] -- C:\Program Files\Rising PC Doctor [2009-12-30 01:01:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Malwarebytes [2009-12-30 01:00:39 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2009-12-30 01:00:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2009-12-30 01:00:36 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2009-12-30 01:00:36 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2009-12-30 00:09:57 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2009-12-29 17:50:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\AdobeUM [2009-12-29 17:25:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\Google [2009-12-29 17:25:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Google [2009-12-29 17:15:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Skype [2009-12-29 17:15:11 | 00,000,000 | ---D | C] -- C:\Program Files\Google [2009-12-29 17:15:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Google [2009-12-29 17:14:50 | 00,000,000 | R--D | C] -- C:\Program Files\Skype [2009-12-29 17:14:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2009-12-29 13:45:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Moje dokumenty\tata [2009-12-29 12:57:38 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Henryk\Recent [2009-12-26 22:22:42 | 00,000,000 | ---D | C] -- C:\Program Files\www_screensavers_com [2009-12-26 22:17:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\ACD Systems [2009-12-26 18:18:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Sun [2009-12-26 18:04:26 | 00,000,000 | ---D | C] -- C:\Program Files\MSBuild [2009-12-26 18:04:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer [2009-12-26 18:04:05 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en-us [2009-12-26 18:04:04 | 00,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies [2009-12-26 18:02:50 | 00,014,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg2.dll [2009-12-25 20:34:53 | 00,000,000 | ---D | C] -- C:\Program Files\Fifa Master-Creation Master 08 [2009-12-25 13:11:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\Adobe [2009-12-23 22:20:00 | 00,000,000 | ---D | C] -- C:\Program Files\Oxin's Style! [2009-12-23 17:41:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\WMTools Downloaded Files [2009-12-23 04:21:45 | 00,000,000 | ---D | C] -- C:\SWOS [2009-12-23 00:57:47 | 00,000,000 | ---D | C] -- C:\WESTWOOD [2009-12-23 00:44:46 | 00,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite [2009-12-22 22:14:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Moje dokumenty\Pobieranie [2009-12-22 21:53:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Winamp [2009-12-22 21:49:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Incomplete [2009-12-22 21:48:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\LimeWire [2009-12-22 21:40:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\URSoft [2009-12-22 20:11:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\Mozilla [2009-12-22 20:11:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Mozilla [2009-12-22 17:54:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\cache [2009-12-22 17:53:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Gadu-Gadu 10 [2009-12-22 17:49:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Macromedia [2009-12-22 17:49:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Adobe [2009-12-22 17:38:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\OnlineArmor [2009-12-22 01:36:55 | 00,048,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2009-12-22 01:36:55 | 00,023,120 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2009-12-22 01:36:54 | 00,027,408 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2009-12-22 01:36:53 | 00,097,480 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\AvastSS.scr [2009-12-22 01:36:51 | 00,114,768 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2009-12-22 01:36:51 | 00,094,160 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2009-12-22 01:36:51 | 00,093,424 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2009-12-22 01:36:51 | 00,020,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2009-12-22 01:36:26 | 01,280,480 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe [2009-12-22 01:36:24 | 00,000,000 | ---D | C] -- C:\Program Files\Avast4 [2009-12-21 21:17:10 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2009-12-21 20:18:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\OnlineArmor [2009-12-21 20:18:25 | 00,223,312 | ---- | C] (Tall Emu) -- C:\WINDOWS\System32\drivers\OADriver.sys [2009-12-21 20:18:25 | 00,029,776 | ---- | C] (Tall Emu Pty Ltd) -- C:\WINDOWS\System32\drivers\OAnet.sys [2009-12-21 20:18:25 | 00,024,656 | ---- | C] (Tall Emu) -- C:\WINDOWS\System32\drivers\OAmon.sys [2009-12-21 20:18:24 | 00,000,000 | ---D | C] -- C:\Program Files\Online Armor [2009-12-21 20:15:05 | 00,000,000 | ---D | C] -- C:\WINDOWS\Internet Logs [2009-12-21 20:07:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data [2009-12-21 19:54:34 | 00,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu 10 [2009-12-21 18:53:51 | 00,070,688 | ---- | C] (THOMSON) -- C:\WINDOWS\System32\drivers\alcaudsl.sys [2009-12-21 18:53:51 | 00,053,600 | ---- | C] (THOMSON) -- C:\WINDOWS\System32\drivers\alcan5wn.sys [2009-12-21 18:53:51 | 00,005,280 | ---- | C] (THOMSON) -- C:\WINDOWS\System32\drivers\alcawh.sys [2009-12-21 18:53:51 | 00,003,968 | ---- | C] (THOMSON) -- C:\WINDOWS\System32\drivers\alcacr.sys [2009-12-21 18:53:46 | 00,000,000 | ---D | C] -- C:\Program Files\Thomson [2009-12-21 18:15:28 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\AlertModule [2009-12-21 18:15:21 | 00,036,864 | ---- | C] (France Télécom R&D) -- C:\WINDOWS\System32\IfHelper.dll [2009-12-21 18:15:20 | 00,040,960 | ---- | C] (France Telecom) -- C:\WINDOWS\System32\FTRTSVC.exe [2009-12-21 14:41:12 | 00,032,768 | ---- | C] (France Télécom R&D) -- C:\WINDOWS\System32\WooDial2000.dll [2009-12-21 14:36:37 | 00,102,400 | R--- | C] (STMicroelectronics ) -- C:\WINDOWS\stmtrace.exe [2009-12-21 14:36:37 | 00,065,536 | R--- | C] (STMicroelectronics) -- C:\WINDOWS\DSLTest.exe [2009-12-21 14:36:34 | 00,446,464 | R--- | C] (STMicroelectronics ) -- C:\WINDOWS\System32\stmadsl.cpl [2009-12-21 14:36:34 | 00,060,255 | R--- | C] (STMicroelectronics ) -- C:\WINDOWS\System32\drivers\stmatm.sys [2009-12-21 14:35:13 | 00,425,984 | R--- | C] (STMicroelectronics ) -- C:\WINDOWS\System32\stmcfg32.dll [2009-12-21 14:35:13 | 00,151,552 | ---- | C] (STMicroelectronics ) -- C:\WINDOWS\System32\stmctrl.dll [2009-12-21 14:34:57 | 00,094,208 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\W32n50.dll [2009-12-21 14:34:57 | 00,016,128 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\PCANDIS5.SYS [2009-12-21 14:33:48 | 00,000,000 | ---D | C] -- C:\Program Files\neostrada tp [2009-12-21 02:00:46 | 00,064,288 | ---- | C] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys [2009-12-21 02:00:20 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9} [2009-12-21 01:59:46 | 00,000,000 | ---D | C] -- C:\Program Files\Lavasoft [2009-12-21 01:59:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft [2009-12-19 01:04:49 | 00,278,528 | ---- | C] (HP) -- C:\WINDOWS\System32\hpdj5100 [2009-12-18 17:46:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Pulpit\Nieużywane skróty pulpitu [2009-12-18 17:33:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\Identities [2009-12-18 17:22:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Nero [2009-12-18 17:22:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\ATI [2009-12-18 17:22:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\ATI [2009-12-18 17:22:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\ApplicationHistory [2009-12-18 17:21:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Identities [2009-12-18 17:21:24 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Henryk\Moje dokumenty\Moje obrazy [2009-12-18 17:21:24 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Henryk\Moje dokumenty\Moja muzyka [2009-12-18 17:21:20 | 00,000,000 | --SD | C] -- C:\Documents and Settings\Henryk\Dane aplikacji\Microsoft [2009-12-18 17:21:20 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Henryk\SendTo [2009-12-18 17:21:20 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Henryk\Dane aplikacji [2009-12-18 17:21:20 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Henryk\Ulubione [2009-12-18 17:21:20 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Henryk\Moje dokumenty [2009-12-18 17:21:20 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Henryk\Menu Start [2009-12-18 17:21:20 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\Henryk\Cookies [2009-12-18 17:21:20 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne [2009-12-18 17:21:20 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\Henryk\Szablony [2009-12-18 17:21:20 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\Henryk\PrintHood [2009-12-18 17:21:20 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\Henryk\NetHood [2009-12-18 17:21:20 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Pulpit [2009-12-18 17:21:20 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\Microsoft [2009-12-11 13:06:16 | 00,000,000 | ---D | C] -- C:\Program Files\City Interactive [2009-12-10 23:29:09 | 00,000,000 | ---D | C] -- C:\Program Files\Red Faction [2008-10-08 19:31:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2007-12-01 19:06:54 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2006-10-07 21:11:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2006-10-07 21:07:42 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-12-30 11:31:00 | 01,099,382 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-12-30 11:31:00 | 00,494,450 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2009-12-30 11:31:00 | 00,435,338 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009-12-30 11:31:00 | 00,086,210 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2009-12-30 11:31:00 | 00,069,076 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009-12-30 11:26:25 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-12-30 11:26:13 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-12-30 03:56:06 | 01,835,008 | -H-- | M] () -- C:\Documents and Settings\Henryk\NTUSER.DAT [2009-12-30 03:56:06 | 00,004,096 | ---- | M] () -- C:\Volume{52C8E4FE-B853-42c1-9528-92978438BBF3} [2009-12-30 03:56:06 | 00,004,096 | ---- | M] () -- C:\00007E00-F7F661AA [2009-12-30 03:56:02 | 00,000,292 | -HS- | M] () -- C:\Documents and Settings\Henryk\ntuser.ini [2009-12-30 03:51:51 | 00,002,527 | ---- | M] () -- C:\Documents and Settings\Henryk\Pulpit\ACDSee 6.0.lnk [2009-12-30 03:43:41 | 00,000,049 | ---- | M] () -- C:\WINDOWS\user.ini [2009-12-30 03:39:14 | 00,001,517 | ---- | M] () -- C:\Documents and Settings\Henryk\Pulpit\Rising PC Doctor.lnk [2009-12-30 03:38:25 | 00,100,976 | ---- | M] (Beijing Rising Information Technology Co., Ltd.) -- C:\WINDOWS\System32\UrlFilter.dll [2009-12-30 03:38:24 | 00,637,592 | ---- | M] (Beijing Rising Information Technology Co., Ltd.) -- C:\WINDOWS\System32\kmon.dll [2009-12-30 03:38:24 | 00,096,880 | ---- | M] (Beijing Rising Information Technology Co., Ltd.) -- C:\WINDOWS\System32\KakaTool.dll [2009-12-30 03:38:24 | 00,015,776 | ---- | M] (Beijing Rising Information Technology Co., Ltd.) -- C:\WINDOWS\System32\kknative.exe [2009-12-30 02:46:50 | 00,000,693 | ---- | M] () -- C:\WINDOWS\WIN.INI [2009-12-30 02:46:50 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2009-12-30 02:46:50 | 00,000,211 | -HS- | M] () -- C:\boot.ini [2009-12-30 01:19:00 | 00,165,912 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-12-30 01:00:55 | 00,082,380 | ---- | M] (Oak Technology Inc.) -- C:\WINDOWS\System32\drivers\AFS2K.SYS [2009-12-30 00:09:58 | 00,001,740 | ---- | M] () -- C:\Documents and Settings\Henryk\Pulpit\HijackThis.lnk [2009-12-29 19:54:37 | 02,457,654 | ---- | M] () -- C:\WINDOWS\ACD Wallpaper.bmp [2009-12-29 18:13:33 | 00,010,240 | ---- | M] () -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-12-29 15:18:55 | 00,035,552 | ---- | M] () -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-12-25 19:03:44 | 00,001,906 | ---- | M] () -- C:\WINDOWS\wincmd.ini [2009-12-25 15:38:40 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-12-24 22:34:40 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-12-23 16:58:07 | 00,000,688 | ---- | M] () -- C:\Documents and Settings\Henryk\Pulpit\LimeWire.lnk [2009-12-23 01:11:27 | 00,000,292 | ---- | M] () -- C:\WINDOWS\EReg072.dat [2009-12-23 00:44:46 | 00,000,739 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk [2009-12-23 00:41:45 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-12-22 17:39:40 | 00,002,321 | ---- | M] () -- C:\Documents and Settings\Henryk\Pulpit\Adobe Reader 7.0.lnk [2009-12-22 17:39:29 | 00,001,620 | ---- | M] () -- C:\Documents and Settings\Henryk\Pulpit\Mozilla Firefox.lnk [2009-12-22 01:36:56 | 00,001,534 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Antivirus.lnk [2009-12-22 01:36:51 | 00,002,636 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2009-12-21 21:22:10 | 00,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat [2009-12-21 20:18:44 | 00,000,044 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.idx [2009-12-21 19:39:03 | 00,004,212 | -H-- | M] () -- C:\WINDOWS\System32\zllictbl.dat [2009-12-21 19:10:54 | 00,001,553 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\neostrada tp.lnk [2009-12-21 18:15:33 | 00,000,614 | ---- | M] () -- C:\WINDOWS\stsetup.htm [2009-12-21 02:00:17 | 00,000,873 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ad-Aware.lnk [2009-12-19 01:04:59 | 00,028,805 | ---- | M] () -- C:\WINDOWS\hpdj5100.his [2009-12-19 01:04:59 | 00,004,599 | ---- | M] () -- C:\WINDOWS\hpdj5100.ini [2009-12-18 17:35:33 | 00,000,427 | ---- | M] () -- C:\WINDOWS\ODBC.INI [2009-12-18 17:30:00 | 00,002,521 | ---- | M] () -- C:\Documents and Settings\Henryk\Pulpit\Microsoft Word.lnk [2009-12-18 17:22:12 | 00,000,131 | ---- | M] () -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-12-18 17:22:08 | 00,000,744 | ---- | M] () -- C:\Documents and Settings\Henryk\Pulpit\Outlook Express.lnk [2009-12-05 07:28:06 | 00,024,656 | ---- | M] (Tall Emu) -- C:\WINDOWS\System32\drivers\OAmon.sys [2009-12-05 07:27:56 | 00,029,776 | ---- | M] (Tall Emu Pty Ltd) -- C:\WINDOWS\System32\drivers\OAnet.sys [2009-12-05 07:27:52 | 00,223,312 | ---- | M] (Tall Emu) -- C:\WINDOWS\System32\drivers\OADriver.sys [2009-12-03 16:14:06 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2009-12-03 16:13:56 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2009-12-02 14:19:06 | 00,064,288 | ---- | M] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys [2009-12-02 14:19:04 | 00,015,880 | ---- | M] () -- C:\WINDOWS\System32\lsdelete.exe [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2009-12-30 03:43:41 | 00,000,049 | ---- | C] () -- C:\WINDOWS\user.ini [2009-12-30 03:39:14 | 00,001,517 | ---- | C] () -- C:\Documents and Settings\Henryk\Pulpit\Rising PC Doctor.lnk [2009-12-30 00:09:57 | 00,001,740 | ---- | C] () -- C:\Documents and Settings\Henryk\Pulpit\HijackThis.lnk [2009-12-26 18:05:30 | 00,099,536 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2009-12-23 18:41:41 | 00,010,240 | ---- | C] () -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-12-23 16:58:07 | 00,000,688 | ---- | C] () -- C:\Documents and Settings\Henryk\Pulpit\LimeWire.lnk [2009-12-23 01:11:27 | 00,000,292 | ---- | C] () -- C:\WINDOWS\EReg072.dat [2009-12-23 00:57:53 | 00,069,632 | ---- | C] () -- C:\WINDOWS\RAUNINST.EXE [2009-12-23 00:44:46 | 00,000,739 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk [2009-12-22 17:39:40 | 00,002,321 | ---- | C] () -- C:\Documents and Settings\Henryk\Pulpit\Adobe Reader 7.0.lnk [2009-12-22 17:39:29 | 00,001,620 | ---- | C] () -- C:\Documents and Settings\Henryk\Pulpit\Mozilla Firefox.lnk [2009-12-22 01:36:56 | 00,001,534 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Antivirus.lnk [2009-12-22 01:36:26 | 00,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx [2009-12-21 21:22:10 | 00,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2009-12-21 19:39:03 | 00,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat [2009-12-21 19:10:54 | 00,001,553 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\neostrada tp.lnk [2009-12-21 18:53:51 | 00,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll [2009-12-21 18:15:33 | 00,000,614 | ---- | C] () -- C:\WINDOWS\stsetup.htm [2009-12-21 14:36:37 | 00,000,902 | R--- | C] () -- C:\WINDOWS\System32\setup.ini [2009-12-21 14:36:37 | 00,000,161 | R--- | C] () -- C:\WINDOWS\DSLSetup.ini [2009-12-21 14:36:36 | 00,000,766 | R--- | C] () -- C:\WINDOWS\System32\icShTx.ico [2009-12-21 14:36:36 | 00,000,766 | R--- | C] () -- C:\WINDOWS\System32\icShTR.ico [2009-12-21 14:36:36 | 00,000,766 | R--- | C] () -- C:\WINDOWS\System32\icShRx.ico [2009-12-21 14:36:36 | 00,000,766 | R--- | C] () -- C:\WINDOWS\System32\icShow.ico [2009-12-21 14:36:35 | 00,000,766 | R--- | C] () -- C:\WINDOWS\System32\icStop.ico [2009-12-21 14:36:35 | 00,000,766 | R--- | C] () -- C:\WINDOWS\System32\icInit.ico [2009-12-21 14:36:34 | 00,684,265 | R--- | C] () -- C:\WINDOWS\System32\drivers\torususb.sys [2009-12-21 14:36:34 | 00,036,864 | R--- | C] () -- C:\WINDOWS\System32\stmclean.exe [2009-12-21 14:36:34 | 00,018,498 | R--- | C] () -- C:\WINDOWS\System32\CSALogo.bmp [2009-12-21 14:36:34 | 00,000,766 | R--- | C] () -- C:\WINDOWS\System32\icNoMo.ico [2009-12-21 02:18:10 | 00,015,880 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe [2009-12-21 02:00:17 | 00,000,873 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ad-Aware.lnk [2009-12-19 01:04:15 | 00,159,579 | ---- | C] () -- C:\WINDOWS\hpdj5100.hi1 [2009-12-19 01:04:15 | 00,007,584 | ---- | C] () -- C:\WINDOWS\hpdj5100.bu1 [2009-12-18 17:34:42 | 00,000,744 | ---- | C] () -- C:\Documents and Settings\Henryk\Pulpit\Outlook Express.lnk [2009-12-18 17:30:00 | 00,002,521 | ---- | C] () -- C:\Documents and Settings\Henryk\Pulpit\Microsoft Word.lnk [2009-12-18 17:22:12 | 00,000,131 | ---- | C] () -- C:\Documents and Settings\Henryk\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-12-18 17:21:21 | 00,000,292 | -HS- | C] () -- C:\Documents and Settings\Henryk\ntuser.ini [2009-12-18 17:21:20 | 01,835,008 | -H-- | C] () -- C:\Documents and Settings\Henryk\NTUSER.DAT [2009-11-21 22:12:56 | 00,004,599 | ---- | C] () -- C:\WINDOWS\hpdj5100.ini [2009-11-21 22:12:30 | 00,000,478 | ---- | C] () -- C:\WINDOWS\hpbvspst.ini [2009-09-24 11:36:27 | 02,392,064 | ---- | C] () -- C:\WINDOWS\System32\videotrans.dll [2009-09-24 11:36:27 | 00,215,040 | ---- | C] () -- C:\WINDOWS\System32\videoformat.dll [2009-09-24 11:36:27 | 00,061,440 | ---- | C] () -- C:\WINDOWS\System32\imgscaler.dll [2009-09-24 11:36:27 | 00,022,016 | ---- | C] () -- C:\WINDOWS\System32\img_utils.dll [2009-09-24 11:36:24 | 00,128,512 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll [2009-08-17 00:49:24 | 00,000,114 | ---- | C] () -- C:\WINDOWS\wininit.ini [2009-08-12 22:39:40 | 00,000,287 | ---- | C] () -- C:\WINDOWS\game.ini [2009-05-03 18:11:15 | 00,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2009-02-27 18:38:30 | 00,000,028 | ---- | C] () -- C:\WINDOWS\Robota.INI [2009-02-27 18:37:03 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\mgxasio2.dll [2009-02-27 18:36:13 | 00,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll [2009-02-27 18:33:45 | 00,005,937 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini [2008-11-05 12:05:27 | 00,000,213 | ---- | C] () -- C:\WINDOWS\RomeTW.ini [2008-10-24 22:13:51 | 00,013,312 | ---- | C] () -- C:\WINDOWS\System32\drivers\MTictwl.sys [2008-10-12 12:41:46 | 00,000,085 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib [2008-10-12 12:35:19 | 00,000,004 | ---- | C] () -- C:\WINDOWS\System32\micr0st.dll [2008-04-04 17:50:27 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2008-01-13 13:32:14 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2007-06-15 21:35:05 | 00,004,089 | ---- | C] () -- C:\WINDOWS\SONYMAP.INI [2007-04-18 17:45:41 | 00,221,184 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2007-04-18 17:45:41 | 00,172,032 | ---- | C] () -- C:\WINDOWS\System32\MP2enc.dll [2007-01-07 16:22:56 | 00,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2007-01-07 16:22:56 | 00,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2006-10-08 19:20:05 | 00,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll [2006-10-08 19:02:54 | 00,001,439 | ---- | C] () -- C:\WINDOWS\VPlayer.INI [2006-10-08 18:43:09 | 00,000,155 | ---- | C] () -- C:\WINDOWS\winamp.ini [2006-10-08 18:27:53 | 00,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2006-10-08 18:00:06 | 00,036,864 | ---- | C] () -- C:\WINDOWS\System32\UnAudioNT.dll [2006-10-07 22:22:00 | 00,000,305 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\addr_file.html [2006-10-07 21:19:44 | 00,001,906 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2005-04-06 16:27:14 | 00,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2005-04-06 16:24:40 | 00,217,088 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2004-01-27 12:13:54 | 00,421,888 | ---- | C] () -- C:\WINDOWS\System32\OpenQuicktimeLib.dll [2002-10-06 19:42:58 | 00,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2002-10-05 00:04:26 | 00,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll [2002-10-05 00:04:26 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2002-10-05 00:04:18 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2002-06-17 21:36:10 | 00,482,816 | ---- | C] () -- C:\WINDOWS\System32\VFCodec.dll [2002-05-16 01:38:40 | 00,091,136 | ---- | C] () -- C:\WINDOWS\System32\mp4fil32.dll [2002-05-04 15:19:00 | 00,049,152 | ---- | C] () -- C:\WINDOWS\System32\avisynthEx.dll [2002-04-19 16:23:26 | 00,106,137 | ---- | C] () -- C:\WINDOWS\System32\libpostproc.dll [2002-04-19 15:51:04 | 00,211,760 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2002-03-21 14:39:02 | 00,073,728 | R--- | C] () -- C:\WINDOWS\System32\UNACEV2.DLL [2002-03-20 21:01:06 | 00,006,688 | R--- | C] () -- C:\WINDOWS\System32\Digita.sys [2002-03-20 21:00:20 | 00,049,152 | R--- | C] () -- C:\WINDOWS\System32\TransportUSB.dll [2002-03-20 21:00:20 | 00,049,152 | R--- | C] () -- C:\WINDOWS\System32\TransportSerial.dll [2002-03-20 21:00:20 | 00,049,152 | R--- | C] () -- C:\WINDOWS\System32\TransportIrDA.dll [2002-03-20 21:00:20 | 00,049,152 | R--- | C] () -- C:\WINDOWS\System32\TransportIrCOMM.dll [2001-09-17 12:20:02 | 00,009,216 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll [2001-06-22 13:06:02 | 00,167,936 | ---- | C] () -- C:\WINDOWS\System32\MPEG2DEC.dll [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:39413AC3 @Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:1AAB2E68 @Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C31F31E6 @Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2 < End of report >

Dodano Dzisiaj, 13:53:
Żeby nie być gołosłownym zamieszczam również wczorajszy raport z Anti-Malware. Oto co wykrył:

Kod: Zaznacz wszystko: Malwarebytes' Anti-Malware 1.42 Wersja bazy definicji: 3453 Windows 5.1.2600 Dodatek Service Pack 3 Internet Explorer 7.0.5730.13 2009-12-30 01:16:19 mbam-log-2009-12-30 (01-16-19).txt Typ skanowania: Szybkie skanowanie Przeskanowane obiekty: 124663 Upłynęło: 10 minute(s), 20 second(s) Zainfekowane procesy w pamięci: 0 Zainfekowane moduły pamięci: 0 Zainfekowane klucze rejestru: 4 Zainfekowane wartości rejestru: 0 Zainfekowane pliki rejestru: 2 Zainfekowane foldery: 0 Zainfekowane pliki: 3 Zainfekowane procesy w pamięci: (Nie wykryto groźnych plików) Zainfekowane moduły pamięci: (Nie wykryto groźnych plików) Zainfekowane klucze rejestru: HKEY_CLASSES_ROOT\Interface\{1601d447-7424-4866-8dcc-acf98a2a41e1} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\AppID\{8d71eeb8-a1a7-4733-8fa2-1cac015c967d} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\superiorads (Adware.AdRotator) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\AppID\Sidebar.dll (Trojan.BHO) -> Quarantined and deleted successfully. Zainfekowane wartości rejestru: (Nie wykryto groźnych plików) Zainfekowane pliki rejestru: HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: ("%1" /S) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully. Zainfekowane foldery: (Nie wykryto groźnych plików) Zainfekowane pliki: C:\WINDOWS\system32\videocore.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\superiorads-uninst.exe (Adware.AdRotator) -> Quarantined and deleted successfully. C:\WINDOWS\system32\WhoisCL.exe (Trojan.BHO) -> Quarantined and deleted successfully.

**Posty:** 2183 · przez **NieWiem** 30 Gru 2009, 16:01

No ok, ale tutaj nie ma tak naprawdę nic istotnego, ani w OTL ani w MBAM... W to, że było vundo jakoś nie wierzę, bo vundo się inaczej objawia.

Sugeruję stworzyć nowy profil w FF i sprawdzić, czy wtedy się będzie powtarzać sytuacja.

**Posty:** 4 · przez **coyote24** 30 Gru 2009, 18:22

Nie znam objaw VUNDO, wkleiłem tylko log ze skana

Niestety po utworzeniu nowego profilu w FF sytuacja się nie zmieniła. Zarówno FF czy IE przy przeglądaniu stron nadal zamulają... Wygląda to tak jakby banery, reklamy, animacje na stronach były powodem mulenia bo gdy odpalam gg10 użycie procka też jest na poziomie 40-60 proc., ale gdy gg (albo przeglądarke) zminimalizuje, wszystko wraca do normy (użycie proc. nie skacze i ma max. 5-15%) . Dla porównania przy odpalaniu innych programów korzystających z łącza (np. LimeWire) gdzie nie ma animacji, żadnej grafiki wszystko działa normalnie (nawet gdy Lime pobiera pliki wykorzystując całe łącze). Skoro w rejestrach nie ma żadnego syfu to może jest to problem ze sprzętem-modem usb na mojej specyfikacji PCta jest zainstalowany po raz 1. Wcześniej brat korzystał z neta bez usb i wszystko chodziło tip-top, żadnych problemów z czymkolwiek. Może to wina sterowników, portów usb na płycie głównej albo karty graficznej? Jeśli format to jedyne wyjście to chciałbym mieć pewność, że problem nie powtórzy się po ponownym zainstalowaniu neo z modemem i jego sterowników. Pisząc tego posta w FF, nic nie ruszając procek jest na poziomie 10%, a gdy lekko przewine rolką wzrasta do 40%

**Posty:** 18165 · przez **wojtas** 01 Sty 2010, 17:26

spróbuj przeinstalować sterowniki od karty graficznej, oraz zainstaluj to :
http://www.programosy.pl/program,flash-player.html

**Posty:** 4 · przez **coyote24** 02 Sty 2010, 00:55

Sterowniki przeinstalowane, Flash Player zainstalowany-sytuacja bez zmian. Powoli zaczynam się oswajać z muleniem przeglądarek

(tylko ten Youtube

). Póki co to lepsze niż tracąc cały dzień na formacie i instalowaniu systemu, programów i ich ustawienia od nowa... Są jeszcze jakieś inne opcje? jakieś rozwiązania tego problemu? jeśli nie bardzo to i tak dziękuje za pomoc!

I życzę wszystkiego co najlepsze w Nowym Roku!

Kto jest na forum