proszę o sprawdzenie loga

[rondzio]

Na komputerze przestała działać przegladarka Internet Explorer (innej przegladarki nie instalowałem)
Po wpisaniu adresu wyskakuje komunikat. Nie można otworzyć strony wyszukania.
Sama neostrada działa, przy pingowaniu np. onet.pl wszystko jest poprawnie...

oto log z programu

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 16:22:23, on 2006-06-15
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\skeys.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ULI5289\ALi5289.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\NEOSTR~1\taskbaricon.exe
C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe
C:\WINDOWS\system32\rsvp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\hIJACKTHIS\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - <default> - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,SKEYS /I
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [ALi5289] C:\Program Files\ULI5289\ALi5289.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\taskbaricon.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe" /tray
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone - szybkie uruchamianie.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe
O4 - Global Startup: Trust 730S LCD PowerC@M ZOOM Monitor.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O18 - Filter: text/html - {03974811-C15F-462c-B6B0-2D2336AA57D0} - C:\WINDOWS\system32\hlwin.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

[Tom@szek]

Proszę przeskanować system http://www.spywarefri.dk/downloads1/ewido-setup.exe
usunąć wszystko i podać ponownie log-a z ewido oraz hijackthis.

[rondzio]

System przeskanowałem ewido.
oto log po zakończonym skanowaniu

Kod: Zaznacz wszystko

---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on:         19:38:16, 2006-06-15
+ Report-Checksum:      312E5967

+ Scan result:

   HKLM\SOFTWARE\Classes\CLSID\{014DA6C5-189F-421a-88CD-07CFE51CFF10} -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\CLSID\{014DA6C5-189F-421a-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\CLSID\{014DA6C7-189F-421a-88CD-07CFE51CFF10} -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\CLSID\{014DA6C7-189F-421a-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\CLSID\{014DA6C9-189F-421a-88CD-07CFE51CFF10} -> Spyware.MySearch : Cleaned with backup
   HKLM\SOFTWARE\Classes\CLSID\{014DA6C9-189F-421a-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\CLSID\{014DA6CB-189F-421a-88CD-07CFE51CFF10} -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\CLSID\{014DA6CB-189F-421a-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Spyware.MyWebSearch : Cleaned with backup
   HKLM\SOFTWARE\Classes\Interface\{014DA6C4-189F-421A-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\Interface\{014DA6C6-189F-421A-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\Interface\{014DA6CA-189F-421A-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\Interface\{014DA6CC-189F-421A-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\LinkMaker.LinkMakerFilter -> Spyware.LinkMaker : Cleaned with backup
   HKLM\SOFTWARE\Classes\LinkMaker.LinkMakerFilter\CLSID -> Spyware.LinkMaker : Cleaned with backup
   HKLM\SOFTWARE\Classes\LinkMaker.LinkMakerFilter.1 -> Spyware.LinkMaker : Cleaned with backup
   HKLM\SOFTWARE\Classes\LinkMaker.LinkTracker -> Spyware.LinkMaker : Cleaned with backup
   HKLM\SOFTWARE\Classes\LinkMaker.LinkTracker\CLSID -> Spyware.LinkMaker : Cleaned with backup
   HKLM\SOFTWARE\Classes\LinkMaker.LinkTracker.1 -> Spyware.LinkMaker : Cleaned with backup
   HKLM\SOFTWARE\Classes\MySearchToolBar.NetscapeShutdown\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\MySearchToolBar.NetscapeShutdown.1\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\MySearchToolBar.NetscapeStartup\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\MySearchToolBar.NetscapeStartup.1\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\MySearchToolBar.SettingsPlugin\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\MySearchToolBar.SettingsPlugin.1\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\Classes\TypeLib\{014DA6C0-189F-421A-88CD-07CFE51CFF10} -> Spyware.BargainBuddy : Cleaned with backup
   HKLM\SOFTWARE\FocusInteractive\Outlook\\MyWebSearch.OutlookAddin -> Spyware.MyWebSearch : Cleaned with backup
   HKU\S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{014DA6C9-189F-421A-88CD-07CFE51CFF10} -> Spyware.MySearch : Cleaned with backup
   HKU\S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{04079851-5845-4DEA-848C-3ECD647AA554} -> Spyware.MySearchBar : Cleaned with backup
   HKU\S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{04079851-5845-4DEA-848C-3ECD647AA554} -> Spyware.MySearchBar : Cleaned with backup
   :mozilla.66:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
   :mozilla.93:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Weborama : Cleaned with backup
   :mozilla.107:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
   :mozilla.108:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.109:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.110:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.111:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.112:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.113:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.114:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.115:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.116:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.117:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
   :mozilla.124:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
   :mozilla.125:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
   :mozilla.126:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
   :mozilla.127:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
   :mozilla.128:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
   :mozilla.133:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup
   :mozilla.134:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup
   :mozilla.135:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup
   :mozilla.137:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
   :mozilla.138:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Spylog : Cleaned with backup
   :mozilla.146:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
   :mozilla.147:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
   :mozilla.148:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
   :mozilla.149:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
   :mozilla.150:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
   :mozilla.151:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
   :mozilla.157:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Paycounter : Cleaned with backup
   :mozilla.229:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Popularix : Cleaned with backup
   :mozilla.238:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
   :mozilla.239:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
   :mozilla.244:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
   :mozilla.247:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
   :mozilla.256:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
   :mozilla.294:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Masterstats : Cleaned with backup
   :mozilla.319:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
   :mozilla.320:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
   :mozilla.332:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hotlog : Cleaned with backup
   :mozilla.337:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Findwhat : Cleaned with backup
   :mozilla.339:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Ivwbox : Cleaned with backup
   :mozilla.352:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
   :mozilla.354:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
   :mozilla.355:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
   :mozilla.359:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
   :mozilla.360:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
   :mozilla.363:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
   :mozilla.372:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
   :mozilla.374:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
   :mozilla.387:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
   :mozilla.391:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
   :mozilla.392:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
   :mozilla.393:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
   :mozilla.394:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
   :mozilla.409:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
   :mozilla.410:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
   :mozilla.411:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
   :mozilla.414:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
   :mozilla.417:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
   :mozilla.433:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
   :mozilla.434:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
   :mozilla.436:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
   :mozilla.437:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
   :mozilla.438:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
   :mozilla.452:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
   :mozilla.453:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
   :mozilla.454:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup
   :mozilla.455:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup
   :mozilla.458:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   :mozilla.466:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
   :mozilla.467:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
   :mozilla.484:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
   :mozilla.486:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
   :mozilla.490:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
   :mozilla.491:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
   :mozilla.492:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
   :mozilla.493:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
   :mozilla.495:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
   :mozilla.496:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
   :mozilla.500:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
   :mozilla.527:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
   :mozilla.528:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
   :mozilla.529:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
   :mozilla.536:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   :mozilla.537:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   :mozilla.538:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   :mozilla.542:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
   :mozilla.543:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.247realmedia : Cleaned with backup
   :mozilla.551:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
   :mozilla.552:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
   :mozilla.553:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
   :mozilla.554:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
   :mozilla.558:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   :mozilla.559:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   :mozilla.560:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   :mozilla.561:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
   :mozilla.562:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
   :mozilla.563:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
   :mozilla.567:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
   :mozilla.568:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
   :mozilla.569:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
   :mozilla.570:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   :mozilla.571:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   :mozilla.572:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
   :mozilla.575:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc8\bar\1.bin\NPMYSRCH.DLL -> Spyware.MyWay : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc8\bar\1.bin\S42NS.EXE -> Spyware.MyWay : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3CJPEG.DLL -> Spyware.FunWeb : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3HISTSW.DLL -> Spyware.MyWebSearch : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3PSSAVR.SCR -> Spyware.MyWebSearch : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3RESTUB.DLL -> Spyware.MyWebSearch : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3SCHMON.EXE -> Spyware.MyWebSearch : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3SCRCTR.DLL -> Spyware.MyWebSearch : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3WPHOOK.DLL -> Spyware.Wesbar : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\M3OUTLCN.DLL -> Spyware.MyWebSearch : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\M3PLUGIN.DLL -> Spyware.MyWebSearch : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\MWSOEMON.EXE -> Spyware.Wesbar : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\MWSOESTB.DLL -> Spyware.MyWebSearch : Cleaned with backup
   C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\NPMYWEBS.DLL -> Spyware.MyWebSearch : Cleaned with backup
   C:\WINDOWS\NDNuninstall6_38.exe -> Spyware.NewDotNet : Cleaned with backup
   C:\WINDOWS\system32\f3PSSavr.scr -> Spyware.MyWebSearch : Cleaned with backup
   C:\WINDOWS\system32\MRT.exe -> Heuristic.Win32.AVKiller : Cleaned with backup


::Report End

Chyba niepotrzebnie go wrzuciłem, bo to wsumie jest już wszystko usunięte.

Po przeskanowaniu jeszcze raz nic nie zostało znalezione (brak raportu)

Oto log z hijackthis po wykonanym skanowaniu w ewido.

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 19:43:09, on 2006-06-15
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\skeys.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ULI5289\ALi5289.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\NEOSTR~1\taskbaricon.exe
C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe
C:\WINDOWS\system32\rsvp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\ewido\security suite\SecuritySuite.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\hIJACKTHIS\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,SKEYS /I
O4 - HKLM\..\Run: [ALi5289] C:\Program Files\ULI5289\ALi5289.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\taskbaricon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe" /tray
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone - szybkie uruchamianie.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe
O4 - Global Startup: Trust 730S LCD PowerC@M ZOOM Monitor.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe


Niestety jak przeglądarka nie działała tak nie działa. Zainstalowałem nawet operę ale to samo się dzieje.
Tak jak pisałem wcześniej ping i tracert na zewnątrz działają, czyli z połączeniem neo wszystko dobrze. Odinstalowałem nawet program antywirusowy lecz nic nie pomogo. Z tego co jeszcze zauważyłem nie ma dostępu do zapory wina XP z SP2. Przeszłości komputera nie znam więc nie wiem jak długo już zapora jest niedostępna...

Pozdrawiam i z góry dzięki za pomoc.

[$HiJackThis$]

Ściągnij EasyCleaner:
http://www.idg.pl/ftp/download/pc_6053/EClea2_0.exe
Kliknij w REJESTR, potem ZNAJDŹ i gdy skonczy, znajdź wpis z końcówką StashInfo i wykasuj go. Zresetuj komputer i spróbuj wejść np. na www.google.pl

[rondzio]

Niestety nie znalazło żadnego wpisu z tego typu wyrażeniem.

Wklejam jeszcze log po zakończonej pracy programem EasyCleaner:

Kod: Zaznacz wszystko

HKEY_CURRENT_USER  Software\Microsoft\Windows\ShellNoRoam\MUICache  2006-06-16 17:40:25  C:\DOCUME~1\oem\USTAWI~1\Temp\_av_sfx.tm~a02788\avast.setup  avast! antivirus Update 
HKEY_USERS  S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Windows\ShellNoRoam\MUICache  2006-06-16 17:40:25  C:\DOCUME~1\oem\USTAWI~1\Temp\_av_sfx.tm~a02788\avast.setup  avast! antivirus Update 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Uninstall\{F5346614-B7C4-4E94-826A-E2363155233D}  2006-06-16 17:15:02  InstallSource  C:\DOCUME~1\oem\USTAWI~1\Temp\bye2.tmp\Disk1\ 
HKEY_CURRENT_USER  Software\Macromedia\FlashPlayerUpdate  2005-11-26 21:08:31  Path  C:\DOCUME~1\oem\USTAWI~1\Temp\FlashPlayerUpdate.exe 
HKEY_USERS  S-1-5-21-448539723-1993962763-839522115-1004\Software\Macromedia\FlashPlayerUpdate  2005-11-26 21:08:31  Path  C:\DOCUME~1\oem\USTAWI~1\Temp\FlashPlayerUpdate.exe 
HKEY_LOCAL_MACHINE  Software\Classes\Installer\Products\F5511245330BBD94B933F8082F334D5D\SourceList\Net  2006-04-08 14:05:42  1  C:\DOCUME~1\oem\USTAWI~1\Temp\GdiplusUpgrade\ 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F5511245330BBD94B933F8082F334D5D\InstallProperties  2006-04-08 14:05:42  InstallSource  C:\DOCUME~1\oem\USTAWI~1\Temp\GdiplusUpgrade\ 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Uninstall\{5421155F-B033-49DB-9B33-8F80F233D4D5}  2006-04-08 14:05:42  InstallSource  C:\DOCUME~1\oem\USTAWI~1\Temp\GdiplusUpgrade\ 
HKEY_LOCAL_MACHINE  Software\Classes\CLSID\{56336BCA-3D8A-11d6-A00B-0050DA18DE71}\InprocServer32  2005-10-02 19:26:34   C:\DOCUME~1\oem\USTAWI~1\Temp\InfoWindow.dll 
HKEY_LOCAL_MACHINE  Software\Classes\TypeLib\{7AF322C5-AB43-11D4-A00B-0050DA18DE71}\1.0\0\win32  2005-10-02 19:26:34   C:\DOCUME~1\oem\USTAWI~1\Temp\InfoWindow.dll 
HKEY_LOCAL_MACHINE  Software\Classes\Installer\Products\AA75334BD6A349D45BE6344CD4905E84\SourceList\Net  2005-09-06 20:27:09  1  C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ 
HKEY_LOCAL_MACHINE  Software\Classes\Installer\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\SourceList\Net  2005-09-06 15:21:03  1  C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AA75334BD6A349D45BE6344CD4905E84\InstallProperties  2005-09-06 20:27:09  InstallSource  C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\InstallProperties  2005-09-06 15:21:03  InstallSource  C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Uninstall\{B43357AA-3A6D-4D94-B56E-43C44D09E548}  2005-09-06 20:27:09  InstallSource  C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Uninstall\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}  2005-09-06 15:21:03  InstallSource  C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ 
HKEY_LOCAL_MACHINE  Software\Classes\Installer\Products\3552BC46901C2314AA15F124B115F51D\SourceList\Net  2005-09-06 18:09:27  1  C:\DOCUME~1\oem\USTAWI~1\Temp\Langpacks\PLK\ 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3552BC46901C2314AA15F124B115F51D\InstallProperties  2005-09-06 18:09:27  InstallSource  C:\DOCUME~1\oem\USTAWI~1\Temp\Langpacks\PLK\ 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Uninstall\{64CB2553-C109-4132-AA51-1F421B515FD1}  2005-09-06 18:09:27  InstallSource  C:\DOCUME~1\oem\USTAWI~1\Temp\Langpacks\PLK\ 
HKEY_LOCAL_MACHINE  Software\Hewlett-Packard\Install\{C2B755A8-8D78-4694-BF12-4AC0ADCD4CE2}  2005-09-06 18:11:24  Filename  C:\DOCUME~1\oem\USTAWI~1\Temp\Langpacks\PLK\langpack.msi 
HKEY_CURRENT_USER  Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source  2005-11-25 18:13:58  0  C:\DOCUME~1\oem\USTAWI~1\Temp\setb0.tmp 
HKEY_USERS  S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source  2005-11-25 18:13:58  0  C:\DOCUME~1\oem\USTAWI~1\Temp\setb0.tmp 
HKEY_CURRENT_USER  Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source  2005-11-25 18:13:58  1  C:\DOCUME~1\oem\USTAWI~1\Temp\setb1.tmp 
HKEY_USERS  S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source  2005-11-25 18:13:58  1  C:\DOCUME~1\oem\USTAWI~1\Temp\setb1.tmp 
HKEY_CURRENT_USER  Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source  2005-11-25 18:13:58  2  C:\DOCUME~1\oem\USTAWI~1\Temp\setb2.tmp 
HKEY_USERS  S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source  2005-11-25 18:13:58  2  C:\DOCUME~1\oem\USTAWI~1\Temp\setb2.tmp 
HKEY_CURRENT_USER  Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source  2005-11-25 18:13:58  3  C:\DOCUME~1\oem\USTAWI~1\Temp\setb3.tmp 
HKEY_USERS  S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source  2005-11-25 18:13:58  3  C:\DOCUME~1\oem\USTAWI~1\Temp\setb3.tmp 
HKEY_LOCAL_MACHINE  Software\FocusInteractive\Email-IM\0  2005-09-29 19:09:49  Path  C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe 
HKEY_LOCAL_MACHINE  Software\Microsoft\Shared Tools\MSConfig\startupreg\MyWebSearch Email Plugin  2006-04-22 20:03:07  command  C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe 
HKEY_CURRENT_USER  Software\Microsoft\Internet Explorer\Toolbar  2006-06-10 20:41:32  SmBrandBitmap  C:\PROGRA~1\NEOSTR~1\neo-ikonka_16.bmp 
HKEY_USERS  S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Internet Explorer\Toolbar  2006-06-10 20:41:32  SmBrandBitmap  C:\PROGRA~1\NEOSTR~1\neo-ikonka_16.bmp 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders  2005-09-06 15:02:14  Folder  C:\WINDOWS\msdownld.tmp|?:\msdownld.tmp 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\Setup  2006-06-01 14:01:36  ServicePackCachePath  c:\windows\ServicePackFiles\ServicePackCache 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\WU  2005-09-27 17:15:23  CurrentCacheFile  C:\WINDOWS\SoftwareDistribution\EventCache\{283DD8D8-B43D-4266-810C-370ECF8C8E49}.bin 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\Sus  2005-09-27 17:15:08  CurrentCacheFile  C:\WINDOWS\SoftwareDistribution\EventCache\{49664F20-D563-4AB2-8A39-0106E0711353}.bin 
HKEY_CURRENT_USER  Software\Microsoft\Internet Explorer\Main  2006-06-16 13:17:14  Local Page  C:\WINDOWS\system32\blank.htm 
HKEY_USERS  S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Internet Explorer\Main  2006-06-16 13:17:14  Local Page  C:\WINDOWS\system32\blank.htm 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows\CurrentVersion\App Paths\cmmgr32.exe  2005-09-06 14:53:00   C:\WINDOWS\system32\cmmgr32.exe 
HKEY_LOCAL_MACHINE  Software\Microsoft\Multimedia\MPlayer2\Groups\Video\DVR-MS  2006-05-29 19:02:58  RequiredFile  C:\WINDOWS\system32\enable.dvd 
HKEY_LOCAL_MACHINE  Software\Classes\CLSID\{03974811-C15F-462c-B6B0-2D2336AA57D0}\InprocServer32  2005-11-04 14:28:04   C:\WINDOWS\system32\hlwin.dll 
HKEY_LOCAL_MACHINE  Software\Classes\CLSID\{85A77577-A8CA-41b7-AA1E-DDAD4C0B12B1}\InprocServer32  2005-11-04 14:28:04   C:\WINDOWS\system32\hlwin.dll 
HKEY_LOCAL_MACHINE  Software\Classes\TypeLib\{D3437C5B-EAB8-4CDA-8B36-583110A57A4F}\1.0\0\win32  2005-11-04 14:28:04   C:\WINDOWS\system32\hlwin.dll 
HKEY_LOCAL_MACHINE  Software\Classes\Software\Microsoft\Multimedia\Components\Informational\Codec_mp4sax\Definition\File0  2006-02-20 19:36:35   C:\WINDOWS\system32\mp4ds32.ax 
HKEY_LOCAL_MACHINE  Software\Classes\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\InprocServer32  2005-09-06 15:02:14   C:\WINDOWS\system32\plugin.ocx 
HKEY_LOCAL_MACHINE  Software\Classes\TypeLib\{06DD38D0-D187-11CF-A80D-00C04FD74AD8}\1.0\0\win32  2005-09-06 15:02:14   C:\WINDOWS\system32\plugin.ocx 
HKEY_LOCAL_MACHINE  Software\Classes\CLSID\{CC2C83A6-9BE4-11D0-98E7-00C04FC2CAF5}\InprocServer32  2005-09-06 15:02:20  SystemDB  C:\WINDOWS\system32\system.mdw 
HKEY_LOCAL_MACHINE  Software\Microsoft\Windows Media Device Manager  2006-06-01 14:01:34  Log.Filename  C:\WINDOWS\system32\Wmdm.log 
HKEY_LOCAL_MACHINE  Software\Classes\CLSID\{AAA288BA-9A4C-45B0-95D7-94D524869DB5}\InprocServer32  2006-05-29 19:03:30   C:\WINDOWS\system32\WPDShServiceObj.dll 
HKEY_LOCAL_MACHINE  Software\Classes\CLSID\{77F7F122-20B0-4117-A2FB-059D1FC88256}\InprocServer32  2006-06-01 14:01:35   C:\WINDOWS\system32\wpdsp.dll 
HKEY_LOCAL_MACHINE  Software\Classes\TypeLib\{B9B6535E-7706-490C-84A5-F40E125AD4B5}\1.0\0\win32  2005-11-25 18:14:07   C:\WINDOWS\system32\wpdsp.dll 
HKEY_USERS  .DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MUICache  2006-06-07 10:39:14  C:\Team17\Worms2\frontend.exe  Worms 2 Frontend 
HKEY_USERS  S-1-5-18\Software\Microsoft\Windows\ShellNoRoam\MUICache  2006-06-07 10:39:14  C:\Team17\Worms2\frontend.exe  Worms 2 Frontend 
HKEY_CURRENT_USER  Software\Netscape\Netscape Navigator\User Trusted External Applications  2006-05-29 19:03:15  C:\PROGRA~1\GAMESP~1\GSAPak.exe  Yes 
HKEY_USERS  S-1-5-21-448539723-1993962763-839522115-1004\Software\Netscape\Netscape Navigator\User Trusted External Applications  2006-05-29 19:03:15  C:\PROGRA~1\GAMESP~1\GSAPak.exe  Yes 


Jeszcze jeden log, tym razem z programu Silent Runners:

Kod: Zaznacz wszystko

"Silent Runners.vbs", revision 45, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"Gadu-Gadu" = ""C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu Sp. z oo"]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"ALi5289" = "C:\Program Files\ULI5289\ALi5289.exe" [empty string]
"SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."]
"ATIPTA" = "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" ["ATI Technologies, Inc."]
"ATICCC" = ""C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime" [null data]
"HPDJ Taskbar Utility" = "C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe" ["HP"]
"HPHUPD06" = "C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" ["Hewlett-Packard"]
"HP Component Manager" = ""C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"" ["Hewlett-Packard Company"]
"HPHmon06" = "C:\WINDOWS\system32\hphmon06.exe" ["Hewlett-Packard"]
"SunJavaUpdateSched" = "C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe" ["Sun Microsystems, Inc."]
"HP Software Update" = "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" ["Hewlett-Packard Co."]
"WooCnxMon" = "C:\PROGRA~1\NEOSTR~1\CnxMon.exe" [empty string]
"SpeedTouch USB Diagnostics" = ""C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon" ["THOMSON Telecom Belgium"]
"WOOWATCH" = "C:\PROGRA~1\NEOSTR~1\Watch.exe" ["France Télécom R&D"]
"WOOTASKBARICON" = "C:\PROGRA~1\NEOSTR~1\taskbaricon.exe" ["France Télécom R&D"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
  -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
                   \InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
  -> {HKLM...CLSID} = "HyperTerminal Icon Ext"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{5E2121EE-0300-11D4-8D3B-444553540000}" = "Catalyst Context Menu extension"
  -> {HKLM...CLSID} = "SimpleShlExt Class"
                   \InProcServer32\(Default) = "C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll" [empty string]
"{21569614-B795-46b1-85F4-E737A8DC09AD}" = "Shell Search Band"
  -> {HKLM...CLSID} = "Shell Search Band"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\browseui.dll" [MS]
"{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices"
  -> {HKLM...CLSID} = "Portable Media Devices"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]
"{35786D3C-B075-49b9-88DD-029876E11C01}" = "Portable Devices"
  -> {HKLM...CLSID} = "Portable Devices"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\wpdshext.dll" [MS]
"{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}" = "Portable Devices Menu"
  -> {HKLM...CLSID} = "Portable Devices Menu"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\wpdshext.dll" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\
INFECTION WARNING! "{54D9498B-CF93-414F-8984-8CE7FDE0D391}" = "ewido shell guard"
  -> {HKLM...CLSID} = "CShellExecuteHookImpl Object"
                   \InProcServer32\(Default) = "C:\Program Files\ewido\security suite\shellhook.dll" ["TODO: <Firmenname>"]

HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\
"WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"
  -> {HKLM...CLSID} = "WPDShServiceObj Class"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [file not found]

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
INFECTION WARNING! "Userinit" = "C:\WINDOWS\system32\userinit.exe,,SKEYS /I" [MS], [MS], [file not found]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
INFECTION WARNING! AtiExtEvent\DLLName = "Ati2evxx.dll" ["ATI Technologies Inc."]
INFECTION WARNING! WgaLogon\DLLName = "WgaLogon.dll" [MS]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}"
  -> {HKLM...CLSID} = "Ctest Object"
                   \InProcServer32\(Default) = "C:\Program Files\ewido\security suite\context.dll" ["ewido networks"]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}"
  -> {HKLM...CLSID} = "Ctest Object"
                   \InProcServer32\(Default) = "C:\Program Files\ewido\security suite\context.dll" ["ewido networks"]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop is disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Documents and Settings\oem\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\system32\ssstars.scr" [MS]


Startup items in "oem" & "All Users" startup folders:
-----------------------------------------------------

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
"ATI CATALYST System Tray" -> shortcut to: "C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe SystemTray" [null data]
"HP Digital Imaging Monitor" -> shortcut to: "C:\Program Files\HP\digital imaging\bin\hpqtra08.exe" ["Hewlett-Packard Co."]
"HP Image Zone - szybkie uruchamianie" -> shortcut to: "C:\Program Files\HP\digital imaging\bin\hpqthb08.exe -s" [null data]
"Trust 730S LCD PowerC@M ZOOM Monitor" -> shortcut to: "C:\Documents and Settings\oem\Pulpit\ICON.EXE" [file not found]


Enabled Scheduled Tasks:
------------------------

"HP Usg Daily" -> launches: "C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\pexpress\hphped05.exe" [empty string]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 02, 05 - 14
%SystemRoot%\system32\rsvpsp.dll [MS], 03 - 04


Toolbars, Explorer Bars, Extensions:
------------------------------------

Explorer Bars

HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\
{21569614-B795-46B1-85F4-E737A8DC09AD}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Shell Search Band"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\browseui.dll" [MS]

Dormant Explorer Bars in "View, Explorer Bar" menu

HKLM\Software\Classes\CLSID\{01002DB2-8170-4D9B-A8B1-DDC9DD114E03}\(Default) = "Volet Wanadoo"
Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar]
InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\audience\audience.dll" [empty string]

HKLM\Software\Classes\CLSID\{014DA6CE-189F-421A-88CD-07CFE51CFF10}\(Default) = "My Search Bar Quick View"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\WINDOWS\system32\shdocvw.dll" [MS]

HKLM\Software\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}\(Default) = "My Web Search Quick View"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\WINDOWS\system32\shdocvw.dll" [MS]

HKLM\Software\Classes\CLSID\{3BAF4A27-C764-4E1A-A6F4-62F7A7E5E51C}\(Default) = "ToolBand Class"
Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar]
InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\audience\audience.dll" [empty string]

HKLM\Software\Classes\CLSID\{5BF498C0-931E-4A4F-B33F-456D07137EAA}\(Default) = "Volet Wanadoo"
Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar]
InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\audience\audience.dll" [empty string]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}"
  -> {HKLM...CLSID} = "Java Plug-in 1.5.0_04"
                   \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll" ["Sun Microsystems, Inc."]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Ati HotKey Poller, Ati HotKey Poller, "C:\WINDOWS\system32\Ati2evxx.exe" ["ATI Technologies Inc."]
ewido security suite control, ewido security suite control, "C:\Program Files\ewido\security suite\ewidoctrl.exe" ["ewido networks"]
Pml Driver HPZ12, Pml Driver HPZ12, "C:\WINDOWS\system32\HPZipm12.exe" ["HP"]
SerialKeys, SerialKeys, "C:\WINDOWS\system32\skeys.exe" [MS]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
hpzlnt11\Driver = "hpzlnt11.dll" ["HP"]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
  took 45 seconds.
+ The search for all Registry CLSIDs containing dormant Explorer Bars
  took 9 seconds.
---------- (total run time: 72 seconds)

Może tutaj coś będzie widać.

Coś zaczynam przeczuwać, że jedynym sposobem poradzenia sobie z tym problemem będzie przeinstalowanie systemu (na które niestety nie mam czasu) więc dlatego zamieściłem mój problem na forum. Komputer nie jest mój więc chciałbym to w jak najprostszy i najszybszy spodób naprawić.