wypełnienie ikon na pulpicie

[tymson]

Witam.
Otóż 2 mies. temu miałem kolejny atak spysheriff'a.
Usunąłem wszystko co mi na dysk rzucił, z rejestru tez wszystko wyrzucone.

Pozostał natomiast jeden problem.
Otóż ikony na pulpicie nie sa już przezroczyste (chodzi mi o tło dla czcionki) co ilustruje screen:

http://img480.imageshack.us/img480/6708/pulpit2tj.jpg

Dodam jeszcze ze nie uzywalem zadnego programu do podmiany ikon typu Microangelo czy Tune Up.
I chcialbym, zeby tak juz pozostalo i bez koniecznosci ich uzywania przywrocic wtglad ikon.

Z gory dziekuje za pomoc.

[Red]

prosze o log z :

otwierasz link>> http://www.silentrunners.org/Silent%20Runners.vbs >>zapisujesz jako na pulpicie>>klikasz dwa razy >>masz wybor i wybierasz no>>i czekasz troszke az wygeneruje sie cały log do konca
wrzucasz na forum

[JarekMk]

Ziomus mialem to siamo
Klikas zna plupicie PPM i Wybierasz Rozmieść ikony według ---> Zablokuj elementy sieci Web na pulpicie /\ i odznacz to. ;]

[tymson]

Kod: Zaznacz wszystko

"Silent Runners.vbs", revision 43, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"Gadu-Gadu" = ""E:\Programy\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu Sp. z oo"]
"MSMSGS" = ""C:\Program Files\Messenger\msmsgs.exe" /background" [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"ATIModeChange" = "Ati2mdxx.exe" ["ATI Technologies, Inc."]
"ATIPTA" = "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" ["ATI Technologies, Inc."]
"SoundMAXPnP" = "C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" ["Analog Devices, Inc."]
"SoundMAX" = ""C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray" ["Analog Devices, Inc."]
"BearShare" = ""E:\Programy\BearShare\BearShare.exe" /pause" ["Free Peers, Inc."]
"winsync" = "C:\WINDOWS\system32\qqkoky.exe reg_run" [null data]
"mRouterConfig for Siemens Data Suite SX1" = "C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterConfig.exe" ["Intuwave Ltd."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty string]
{1E1B2879-88FF-11D3-8D96-D7ACAC95951A}\(Default) = "PK IE Plugin"
  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\qwwb.dll" [null data]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = "SSVHelper Class" [from CLSID]
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
  -> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{23170F69-40C1-278A-1000-000100020000}" = "7-Zip Shell Extension"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\7-Zip\7-zipn.dll" ["Igor Pavlov"]
"{21569614-B795-46b1-85F4-E737A8DC09AD}" = "Shell Search Band"
  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\browseui.dll" [MS]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\MICROS~1\Office\OLKFSTUB.DLL" [MS]
"{ED65AC21-B24F-11d3-BA80-00C0CA16AA37}" = "Siemens SX1"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\Siemens Data Suite SX1\DES\DESShellExt.dll" ["Siemens AG"]
"{ED65AC22-B24F-11d3-BA80-00C0CA16AA37}" = "Siemens SX1 ContextMenuHandler"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\Siemens Data Suite SX1\DES\DESShellExt.dll" ["Siemens AG"]
"{ED65AC23-B24F-11d3-BA80-00C0CA16AA37}" = "Siemens SX1 PropertySheetHandler"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\Siemens Data Suite SX1\DES\DESShellExt.dll" ["Siemens AG"]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
INFECTION WARNING! wzcnotif\DLLName = "wzcdlg.dll" [MS]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
7-Zip\(Default) = "{23170F69-40C1-278A-1000-000100020000}"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\7-Zip\7-zipn.dll" ["Igor Pavlov"]
ssqkqgkn\(Default) = "{57e09265-6a9c-467a-81fa-679e139ad803}"
  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\qqlkl.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
7-Zip\(Default) = "{23170F69-40C1-278A-1000-000100020000}"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\7-Zip\7-zipn.dll" ["Igor Pavlov"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]


Group Policies [Description]:
-----------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
HIJACK WARNING! "ForceActiveDesktopOn"=dword:00000001
[enables Active Desktop and prevents disabling it]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop enabled via Group Policy.

HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\

HKCU\Software\Microsoft\Internet Explorer\Desktop\Components\0\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]


Startup items in "Kucharski" & "All Users" startup folders:
-----------------------------------------------------------

C:\Documents and Settings\Kucharski\Menu Start\Programy\Autostart
"Rejestrowanie produktów Corela" -> shortcut to: "D:\c\Register\Remind32.exe" [file not found]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
"Microsoft Office" -> shortcut to: "E:\Programy\Microsoft Office\Office\OSA9.EXE -b -l" [MS]
"NewShortcut35" -> shortcut to: "E:\Programy\Siemens Data Suite SX1\SDS\SDSScheduler.exe" [empty string]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 11
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"" [MS]
SoundMAX Agent Service, SoundMAX Agent Service (default), "C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe" ["Analog Devices, Inc."]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
hpzsnt10\Driver = "hpzsnt10.dll" ["HP"]
Monitor języka PJL\Driver = "PJLMON.DLL" [MS]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
  took 139 seconds.
+ The search for all Registry CLSIDs containing dormant Explorer Bars
  took 8 seconds.
---------- (total run time: 168 seconds)


[Red]

otworz notatnik windowsa i wklej w nim to co ponizej:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"ForceActiveDesktopOn"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"Wallpaper"=-

nastepnie w notatniku>>Plik >> Zapisz jako, zapisz jako typ: wszystkie pliki, nazwa pliku: Fix.reg
Klikasz dwa razy na powstały plik i potwierdzasz.

dodatkowo prosze wykonac:

Panel Sterowania >>> Właściwości Ekranu >>> Dostosuj Pulpit >>> Sieć Web >>> skasuj wejscie tam zlokalizowane

Prawy klik na Pulpit >>> Właściwości >>> Pulpit >>> Dostosuj Pulpit >>> Sieć Web >>> odznaczyć opcję Blokuj elementy pulpitu

panel sterowania >>> System >>> Zaawansowane >>> Wydajność >>>> Ustawienia >>>> Efekty Wizualne
I zaznacz Użyj cieni dla etykiet ikon pulpitu

Jesli bedzie jakis problem ,to prosze kolejny raz o log do sprawdzenia....

[tymson]

Niestety nie pomoglo.

Kod: Zaznacz wszystko

"Silent Runners.vbs", revision 43, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"Gadu-Gadu" = ""E:\Programy\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu Sp. z oo"]
"MSMSGS" = ""C:\Program Files\Messenger\msmsgs.exe" /background" [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"ATIModeChange" = "Ati2mdxx.exe" ["ATI Technologies, Inc."]
"ATIPTA" = "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" ["ATI Technologies, Inc."]
"SoundMAXPnP" = "C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" ["Analog Devices, Inc."]
"SoundMAX" = ""C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray" ["Analog Devices, Inc."]
"BearShare" = ""E:\Programy\BearShare\BearShare.exe" /pause" ["Free Peers, Inc."]
"winsync" = "C:\WINDOWS\system32\qqkoky.exe reg_run" [null data]
"mRouterConfig for Siemens Data Suite SX1" = "C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterConfig.exe" ["Intuwave Ltd."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty string]
{1E1B2879-88FF-11D3-8D96-D7ACAC95951A}\(Default) = "PK IE Plugin"
  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\qwwb.dll" [null data]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = "SSVHelper Class" [from CLSID]
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
  -> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{23170F69-40C1-278A-1000-000100020000}" = "7-Zip Shell Extension"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\7-Zip\7-zipn.dll" ["Igor Pavlov"]
"{21569614-B795-46b1-85F4-E737A8DC09AD}" = "Shell Search Band"
  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\browseui.dll" [MS]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\MICROS~1\Office\OLKFSTUB.DLL" [MS]
"{ED65AC21-B24F-11d3-BA80-00C0CA16AA37}" = "Siemens SX1"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\Siemens Data Suite SX1\DES\DESShellExt.dll" ["Siemens AG"]
"{ED65AC22-B24F-11d3-BA80-00C0CA16AA37}" = "Siemens SX1 ContextMenuHandler"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\Siemens Data Suite SX1\DES\DESShellExt.dll" ["Siemens AG"]
"{ED65AC23-B24F-11d3-BA80-00C0CA16AA37}" = "Siemens SX1 PropertySheetHandler"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\Siemens Data Suite SX1\DES\DESShellExt.dll" ["Siemens AG"]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
INFECTION WARNING! wzcnotif\DLLName = "wzcdlg.dll" [MS]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
7-Zip\(Default) = "{23170F69-40C1-278A-1000-000100020000}"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\7-Zip\7-zipn.dll" ["Igor Pavlov"]
ssqkqgkn\(Default) = "{57e09265-6a9c-467a-81fa-679e139ad803}"
  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\qqlkl.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
7-Zip\(Default) = "{23170F69-40C1-278A-1000-000100020000}"
  -> {CLSID}\InProcServer32\(Default) = "E:\Programy\7-Zip\7-zipn.dll" ["Igor Pavlov"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop is enabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\

HKCU\Software\Microsoft\Internet Explorer\Desktop\Components\0\
"SCRNSAVE.EXE" = "C:\WINDOWS\system32\logon.scr" [MS]


Startup items in "Kucharski" & "All Users" startup folders:
-----------------------------------------------------------

C:\Documents and Settings\Kucharski\Menu Start\Programy\Autostart
"Rejestrowanie produktów Corela" -> shortcut to: "D:\c\Register\Remind32.exe" [file not found]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
"Microsoft Office" -> shortcut to: "E:\Programy\Microsoft Office\Office\OSA9.EXE -b -l" [MS]
"NewShortcut35" -> shortcut to: "E:\Programy\Siemens Data Suite SX1\SDS\SDSScheduler.exe" [empty string]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 11
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"" [MS]
SoundMAX Agent Service, SoundMAX Agent Service (default), "C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe" ["Analog Devices, Inc."]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
hpzsnt10\Driver = "hpzsnt10.dll" ["HP"]
Monitor języka PJL\Driver = "PJLMON.DLL" [MS]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
  took 87 seconds.
+ The search for all Registry CLSIDs containing dormant Explorer Bars
  took 8 seconds.
---------- (total run time: 115 seconds)


[Red]

ok i jeszcze prosze o jeden log:

z Qoologic:

http://downloads.subratam.org/Find-Qoologic.zip
rozpakuj i uruchom Find-Qoologic.bat ,klepnij 1 i potwierdz.Wrzuc log ktory sie wygeneruje.

[tymson]

Kod: Zaznacz wszystko

Find Qoologic last edited 01/08/2006
Running from
C:\Documents and Settings\Kucharski\Pulpit\Find-Qoologic\Find-Qoologic
PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, There WILL be LEGIT FILES LISTED PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
»»»»»»»»»»»»»»»»»» Search by size and name»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

C:\WINDOWS\SYSTEM32\VVCBCKB.EXE
C:\WINDOWS\SYSTEM32\QQKOKY.EXE
»»»»»»»»»»»»»»»»»»»»»»»» Checking Global Startup »»»»»»»»»»»»»»»»»»»»»»
.....
.....
SteelWerX Registry Console Tool RC-2
Written by Bobbi Flekman
.....
[HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\ssqkqgkn]
@="{57e09265-6a9c-467a-81fa-679e139ad803}"

[-HKEY_CLASSES_ROOT\CLSID\{incert csdl here}]
[-HKEY_CLASSES_ROOT\CLSID\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}]
[-HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebNexus]
.....
[HKEY_LOCAL_MACHINE\Software\qstat]
.....
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"winsync"="C:\\WINDOWS\\system32\\qqkoky.exe reg_run"
.....
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9E248641-0E24-4DDB-9A1F-705087832AD6}]


[kuba 123]

Ziomus mialem to siamo Razz
Klikas zna plupicie PPM i Wybierasz Rozmieść ikony według ---> Zablokuj elementy sieci Web na pulpicie /\ i odznacz to. ;]

ja zrobilem tak jak mowil jarek i to pomaga to jest to jak to moze nie dzialac??

[tymson]

Ziomus mialem to siamo Razz
Klikas zna plupicie PPM i Wybierasz Rozmieść ikony według ---> Zablokuj elementy sieci Web na pulpicie /\ i odznacz to. ;]

ja zrobilem tak jak mowil jarek i to pomaga to jest to jak to moze nie dzialac??

Ano tak nie dzial, ze mam akurat odznaczona ta opcje.

[Red]

otworz notatnik windowsa i wklej w nim to co ponizej:

Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\ssqkqgkn]

[-HKEY_CLASSES_ROOT\CLSID\{57e09265-6a9c-467a-81fa-679e139ad803}]

[-HKEY_CLASSES_ROOT\CLSID\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}]

[-HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebNexus]

[-HKEY_LOCAL_MACHINE\Software\qstat]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"winsync"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9E248641-0E24-4DDB-9A1F-705087832AD6}]

w notatniku>>>Plik >>> Zapisz jako >>> Ustaw rozszerzenie na Wszystkie pliki >>> Zapisz jako FIX.REG
Klikasz dwa razy na powstały plik i dodajesz go do rejestru

sciagasz nastepnie :

http://www.bleepingcomputer.com/files/killbox.php


zaznaczasz w nim opcje>>>Delete on reboot a w pustym polu wklej sciazki:
C:\WINDOWS\SYSTEM32\VVCBCKB.EXE
C:\WINDOWS\SYSTEM32\QQKOKY.EXE
wciskasz x w lillboxie i bedzie restart

Sprawdz jak wyglada sytuacja i ewentualnie luknij jeszcze w te opcje:

Panel Sterowania >>> Właściwości Ekranu >>> Dostosuj Pulpit >>> Sieć Web >>> skasuj wejscie tam zlokalizowane

Prawy klik na Pulpit >>> Właściwości >>> Pulpit >>> Dostosuj Pulpit >>> Sieć Web >>> odznaczyć opcję Blokuj elementy pulpitu

panel sterowania >>> System >>> Zaawansowane >>> Wydajność >>>> Ustawienia >>>> Efekty Wizualne
I zaznacz Użyj cieni dla etykiet ikon pulpitu

Autor postu otrzymał pochwałę