Zmniejszenie szybkości internetu przy filmach online

**Posty:** 2008 · przez **fibi07** 27 Gru 2010, 01:56

mam taki dziwny problem.
od dzisiaj zauważyłem spadek szybkości internetu, ale przy filmach na vimeo/megavide/yt itp. aby obejrzeć film 20minutowy, muszę czekać około 40minut do godziny, gdzie zwykle po 2-3 minutach oglądałem bez zacinania się,a teraz przerywa się po jakimś czasie i się buforuje. cały czas, denerwujące to jest,gdy normalnie internet hula normalnie. nic go nie obciąża. żaden domownik/aplikacja.

gmer:

Kod: Zaznacz wszystko: GMER 1.0.15.15530 - http://www.gmer.net Rootkit scan 2010-12-27 00:43:35 Windows 5.1.2600 Dodatek Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 Maxtor_6Y080P0 rev.YAR41BW0 Running: r3k0jglr.exe; Driver: C:\DOCUME~1\Fibi\USTAWI~1\Temp\pxtdypod.sys ---- Kernel code sections - GMER 1.0.15 ---- .text C:\WINDOWS\System32\DRIVERS\nv4_mini.sys section is writeable [0xF92C1360, 0x24526E, 0xE8000020] ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\Mozilla Firefox\firefox.exe[808] ntdll.dll!LdrLoadDll 7C9161CA 5 Bytes JMP 004013F0 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) .text C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe[1668] kernel32.dll!SetUnhandledExceptionFilter 7C810386 4 Bytes [C2, 04, 00, 00] .text C:\Program Files\Mozilla Firefox\plugin-container.exe[3648] USER32.dll!TrackPopupMenu 77D84F16 5 Bytes JMP 10402342 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) ---- Devices - GMER 1.0.15 ---- AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET) AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdir.sys (ESET Antivirus Network Redirector/ESET) AttachedDevice \FileSystem\Fastfat \Fat eamon.sys (Amon monitor/ESET) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xEB 0x1A 0x63 0xF7 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x2A 0x6D 0x7C 0x6C ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1 Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xEB 0x1A 0x63 0xF7 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x2A 0x6D 0x7C 0x6C ... Reg HKLM\SOFTWARE\Classes\CLSID\{5C082286-DD56-6B96-110FABAC317C22E3}\{17077DA0-F2D9-EF48-DBC13F521337D931}\{A783887F-564D-BBBA-662193019693FEBC} Reg HKLM\SOFTWARE\Classes\CLSID\{5C082286-DD56-6B96-110FABAC317C22E3}\{17077DA0-F2D9-EF48-DBC13F521337D931}\{A783887F-564D-BBBA-662193019693FEBC}@1D1OWFM6WKF6TLM3S2BGKKUUDG1 0x01 0x00 0x01 0x00 ... Reg HKLM\SOFTWARE\Classes\CLSID\{92E364B2-3C99-8131-FA38C55A9DF469B6}\{ED083C7B-BB22-E038-94448FA9BD51D19E}\{5592BF6F-6CA4-ED79-1454C42B0B348E21} Reg HKLM\SOFTWARE\Classes\CLSID\{92E364B2-3C99-8131-FA38C55A9DF469B6}\{ED083C7B-BB22-E038-94448FA9BD51D19E}\{5592BF6F-6CA4-ED79-1454C42B0B348E21}@1D1OWFM6WKF6TLM3S2BGKKUUDG1 0x01 0x00 0x01 0x00 ... Reg HKLM\SOFTWARE\Classes\CLSID\{99B3C19D-1110-E642-964288AEAF2709C8}\{40C615DA-7F31-9B5B-0DDF6E89F316E212}\{17EBF9A6-E64A-9733-B8ACE6C016E89E7C} Reg HKLM\SOFTWARE\Classes\CLSID\{99B3C19D-1110-E642-964288AEAF2709C8}\{40C615DA-7F31-9B5B-0DDF6E89F316E212}\{17EBF9A6-E64A-9733-B8ACE6C016E89E7C}@{3EE4C831-B7E0-4ed1-B9FC-EDC523C9612F}1 0x01 0x00 0x01 0x00 ... Reg HKLM\SOFTWARE\Classes\CLSID\{DCB42C02-2C7E-50EC-E2B5A792F7765BFB}\{38286259-1A12-EDE0-84E2CD6A1D76E8F7}\{2C2658AF-F73E-73C6-89D45D0D6FCCCFF2} Reg HKLM\SOFTWARE\Classes\CLSID\{DCB42C02-2C7E-50EC-E2B5A792F7765BFB}\{38286259-1A12-EDE0-84E2CD6A1D76E8F7}\{2C2658AF-F73E-73C6-89D45D0D6FCCCFF2}@{3EE4C831-B7E0-4ed1-B9FC-EDC523C9612F}1 0x01 0x00 0x01 0x00 ... Reg HKLM\SOFTWARE\Classes\CLSID\{E20DD46F-0CC4-5960-1B1F69E13D145F9C}\{B130274E-D0E8-282B-E7F07B1EE1210709}\{71D795F0-66AF-00D6-EF71DCAC5CDD95C3} Reg HKLM\SOFTWARE\Classes\CLSID\{E20DD46F-0CC4-5960-1B1F69E13D145F9C}\{B130274E-D0E8-282B-E7F07B1EE1210709}\{71D795F0-66AF-00D6-EF71DCAC5CDD95C3}@1D1OWFM6WKF6TLM3S2BGKKUUDG1 0x01 0x00 0x01 0x00 ... Reg HKLM\SOFTWARE\Classes\CLSID\{EDCF6AC6-CDE0-1F6D-043771A983FAB740}\{0B884C8F-0AAB-F925-A63B97C7F3A43931}\{965D33BD-6599-2D1D-7E8A152D666CAEE5} Reg HKLM\SOFTWARE\Classes\CLSID\{EDCF6AC6-CDE0-1F6D-043771A983FAB740}\{0B884C8F-0AAB-F925-A63B97C7F3A43931}\{965D33BD-6599-2D1D-7E8A152D666CAEE5}@{3EE4C831-B7E0-4ed1-B9FC-EDC523C9612F}1 0x01 0x00 0x01 0x00 ... ---- Disk sectors - GMER 1.0.15 ---- Disk \Device\Harddisk0\DR0 sector 61: malicious code @ sector 0x98a7fec size 0x1ca ---- EOF - GMER 1.0.15 ----

OTL

Kod: Zaznacz wszystko: OTL logfile created on: 2010-12-26 22:33:58 - Run 4 OTL by OldTimer - Version 3.2.18.0 Folder = C:\Documents and Settings\Fibi\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 255,00 Mb Total Physical Memory | 52,00 Mb Available Physical Memory | 21,00% Memory free 628,00 Mb Paging File | 210,00 Mb Available in Paging File | 33,00% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 38,16 Gb Total Space | 22,23 Gb Free Space | 58,24% Space Free | Partition Type: NTFS Drive D: | 19,08 Gb Total Space | 3,23 Gb Free Space | 16,93% Space Free | Partition Type: NTFS Drive E: | 19,07 Gb Total Space | 14,89 Gb Free Space | 78,07% Space Free | Partition Type: FAT32 Computer Name: FIBI | User Name: Fibi | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-12-26 22:32:18 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Fibi\Pulpit\OTL.exe PRC - [2010-12-11 11:28:05 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe PRC - [2010-12-11 11:28:02 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010-10-27 20:21:54 | 001,155,072 | ---- | M] (Last.fm) -- C:\Program Files\Last.fm\LastFM.exe PRC - [2009-11-16 09:04:30 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2009-11-16 09:03:32 | 002,054,360 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2009-07-07 14:48:44 | 000,647,216 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe PRC - [2008-12-01 15:45:26 | 001,155,072 | ---- | M] () -- C:\Program Files\foobar2000\foobar2000.exe PRC - [2004-08-03 23:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-12-26 22:32:18 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Fibi\Pulpit\OTL.exe MOD - [2004-08-03 23:42:34 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-11-16 09:12:54 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv) SRV - [2009-11-16 09:04:30 | 000,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn) SRV - [2009-07-07 14:48:44 | 000,647,216 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe -- (nmservice) SRV - [2006-04-12 10:36:56 | 000,176,640 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe -- (ServiceLayer) SRV - [2001-10-26 18:30:00 | 000,003,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\System32\regedt32.exe -- (NOD32FiXTemDono) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\SynasUSB.sys -- (SynasUSB) DRV - File not found [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\adiusbaw.sys -- (adiusbaw) DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\Drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys) DRV - [2009-11-16 09:06:50 | 000,096,408 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir) DRV - [2009-11-16 09:03:36 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2009-11-16 08:56:12 | 000,116,520 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2009-07-07 14:48:44 | 000,026,672 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\purendis.sys -- (purendis) DRV - [2009-07-07 14:48:44 | 000,025,392 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\pnarp.sys -- (pnarp) DRV - [2008-06-10 20:05:20 | 000,223,128 | ---- | M] (DT Soft Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\dtscsi.sys -- (dtscsi) DRV - [2008-05-16 17:30:57 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2007-03-08 13:34:46 | 004,027,840 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2006-09-24 14:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan) DRV - [2006-08-11 14:42:42 | 003,958,496 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2006-03-24 07:32:00 | 000,127,488 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (Nokia USB Phone Parent) DRV - [2006-03-24 07:32:00 | 000,013,312 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcj.sys -- (Nokia USB Port) DRV - [2006-03-24 07:32:00 | 000,013,312 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (Nokia USB Modem) DRV - [2006-03-24 07:32:00 | 000,008,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (Nokia USB Generic) DRV - [2005-08-10 11:43:22 | 000,041,984 | R--- | M] (D-Link ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\dlkfet5b.sys -- (FETNDISB) DRV - [2004-08-03 23:07:56 | 000,059,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2004-08-03 22:08:22 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2001-08-17 22:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) DRV - [1996-04-03 20:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = wyborcza.pl/0,0.html?p=030 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2025429265-789336058-1060284298-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = wyborcza.pl/0,0.html?p=030 IE - HKU\S-1-5-21-2025429265-789336058-1060284298-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2025429265-789336058-1060284298-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "wyborcza.pl/0,0.html?p=030" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3 FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.11 FF - prefs.js..extensions.enabledItems: {c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.8 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-12 13:43:35 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-12-11 11:28:11 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-10-02 10:54:53 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2008-12-20 18:16:28 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010-01-25 20:01:40 | 000,000,000 | ---D | M] [2010-09-14 15:52:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Extensions [2010-09-14 15:52:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010-12-26 14:20:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\extensions [2010-08-14 21:54:09 | 000,000,000 | ---D | M] (Stylish) -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} [2010-03-24 16:14:44 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\extensions\{7694c49c-9fbd-11dc-8314-0800200c9a66} [2009-09-27 13:57:47 | 000,000,000 | ---D | M] (Web Developer) -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12} [2010-12-24 15:46:13 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009-01-31 16:23:43 | 000,004,431 | ---- | M] () -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\searchplugins\lingpl.xml [2008-05-07 18:11:15 | 000,001,779 | ---- | M] () -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\searchplugins\torrentz-search.xml [2010-01-09 21:16:28 | 000,001,979 | ---- | M] () -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\searchplugins\wrzuta.xml [2008-05-06 18:27:00 | 000,002,126 | ---- | M] () -- C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml [2010-12-26 14:20:23 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010-05-31 19:47:16 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-05-31 19:46:11 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2010-10-22 21:12:30 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-10-22 21:12:30 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-10-22 21:12:30 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-10-22 21:12:30 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-10-22 21:12:30 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-10-22 21:12:30 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2008-07-08 21:53:28 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2025429265-789336058-1060284298-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-2025429265-789336058-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-2025429265-789336058-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-2025429265-789336058-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Fibi\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Fibi\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-05-05 23:19:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-12-26 22:31:37 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Fibi\Pulpit\OTL.exe [2010-12-25 14:31:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Fibi\Pulpit\Fugazi [2010-12-25 14:30:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Fibi\Pulpit\The Abyssinians [2010-12-24 14:24:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Fibi\Pulpit\The Skatalites [2010-12-24 12:00:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Fibi\Pulpit\Cypress Hill - Discography [2010-12-23 22:08:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Fibi\Pulpit\Cypress Hill - Los Grandes Exitos En Español (320kbps) [LaMara8] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-12-26 22:32:33 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Fibi\Pulpit\r3k0jglr.exe [2010-12-26 22:32:18 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Fibi\Pulpit\OTL.exe [2010-12-26 20:13:20 | 002,580,062 | ---- | M] () -- C:\Documents and Settings\Fibi\Pulpit\pomysł7.mp3 [2010-12-26 12:09:22 | 000,081,191 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2010-12-26 12:09:16 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-12-26 12:09:12 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-12-26 02:37:28 | 006,291,456 | -H-- | M] () -- C:\Documents and Settings\Fibi\NTUSER.DAT [2010-12-26 02:37:28 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Fibi\ntuser.ini [2010-12-26 02:36:59 | 003,089,830 | -H-- | M] () -- C:\Documents and Settings\Fibi\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-12-25 20:45:29 | 000,000,416 | ---- | M] () -- C:\Documents and Settings\Fibi\Moje dokumenty\spider.sav [2010-12-25 11:59:00 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-12-04 15:51:23 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-12-26 22:32:28 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\Fibi\Pulpit\r3k0jglr.exe [2010-12-26 19:57:59 | 002,580,062 | ---- | C] () -- C:\Documents and Settings\Fibi\Pulpit\pomysł7.mp3 [2010-12-25 20:45:22 | 000,000,416 | ---- | C] () -- C:\Documents and Settings\Fibi\Moje dokumenty\spider.sav [2010-09-05 11:37:02 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2010-06-01 18:04:23 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2010-06-01 17:51:38 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll [2010-06-01 17:51:36 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll [2010-06-01 17:51:34 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll [2009-12-10 21:22:48 | 008,892,928 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\atscie.msi [2009-11-29 12:09:23 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-11-29 12:09:22 | 000,742,220 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-08-12 19:44:05 | 000,000,996 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log [2009-04-10 21:22:33 | 000,177,784 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2008-11-09 19:21:13 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.INI [2008-10-14 17:06:37 | 003,089,830 | -H-- | C] () -- C:\Documents and Settings\Fibi\Ustawienia lokalne\Dane aplikacji\IconCache.db [2008-07-11 20:37:03 | 001,867,776 | ---- | C] () -- C:\WINDOWS\System32\python24.dll [2008-06-25 09:17:52 | 000,000,031 | ---- | C] () -- C:\WINDOWS\GunzLauncher.INI [2008-05-07 22:18:02 | 000,171,520 | ---- | C] () -- C:\Documents and Settings\Fibi\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-05-07 22:18:01 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2008-05-06 11:36:24 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2008-05-06 11:13:02 | 000,000,784 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2008-05-06 08:24:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\lgfwup.ini [2008-05-06 08:19:23 | 000,000,046 | ---- | C] () -- C:\WINDOWS\adiras.ini [2008-05-06 00:08:03 | 001,089,268 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2008-05-06 00:08:02 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2008-05-06 00:07:29 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini [2008-05-05 23:58:56 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008-05-05 23:58:37 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-05-05 23:58:24 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-05-05 23:58:24 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-05-05 23:49:23 | 000,088,496 | ---- | C] () -- C:\Documents and Settings\Fibi\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2008-05-05 23:43:42 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2008-05-05 23:26:58 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2008-05-05 23:26:58 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2008-05-05 23:26:57 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2008-05-05 23:26:57 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2008-05-05 23:25:14 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\Fibi\Dane aplikacji\desktop.ini [2008-05-05 23:19:43 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2008-05-05 23:15:27 | 000,000,059 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2008-05-05 23:15:27 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2008-05-05 23:14:37 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2008-05-05 23:14:34 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2006-08-11 14:45:20 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2006-08-11 14:43:10 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2006-08-11 14:43:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2006-08-11 14:43:00 | 001,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2006-08-11 14:43:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2006-08-11 14:43:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2006-08-11 14:43:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2005-12-07 11:31:00 | 000,202,752 | R--- | C] () -- C:\WINDOWS\System32\CddbCdda.dll [2002-09-20 18:04:42 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2002-09-20 18:03:48 | 000,186,368 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2002-09-20 18:03:38 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2002-08-28 21:23:06 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2002-08-28 21:22:36 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2002-03-25 20:02:14 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [2001-10-26 18:29:40 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\scriptpw.dll [2001-10-26 18:29:32 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2001-10-26 18:28:34 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2001-10-26 18:27:02 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2001-10-26 17:15:04 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2001-10-26 17:14:52 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2001-10-26 17:14:32 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2001-10-26 17:12:52 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2001-10-26 16:45:26 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2001-10-26 16:45:26 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2001-10-26 16:45:24 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2001-10-26 16:42:08 | 000,020,629 | ---- | C] () -- C:\WINDOWS\System32\mqperf.ini [2001-10-26 16:42:08 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2001-10-26 16:42:08 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2001-10-26 16:42:08 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2001-08-17 22:31:56 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2001-08-17 22:31:56 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2001-08-17 22:31:50 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2001-08-17 22:31:46 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2001-08-17 22:31:46 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2001-08-17 22:31:44 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2001-08-17 22:31:38 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2001-08-17 22:31:38 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2001-08-17 22:31:36 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2001-08-17 22:13:24 | 000,002,656 | ---- | C] () -- C:\WINDOWS\System32\netware.drv [2001-08-17 20:55:06 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2001-07-22 04:43:48 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2001-07-22 03:25:18 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2001-07-21 23:16:20 | 000,000,658 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 23:15:52 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2001-07-21 23:15:50 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [1999-01-22 18:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL [1996-04-03 20:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys [1913-08-01 15:18:54 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll [color=#E56717]========== LOP Check ==========[/color] [2010-01-05 22:09:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ala\Dane aplikacji\foobar2000 [2009-12-22 09:17:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ala\Dane aplikacji\Thunderbird [2010-09-26 00:04:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2008-07-03 12:00:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations [2008-05-05 23:53:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2010-03-08 21:19:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GoldWave [2008-07-03 12:07:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2008-05-20 23:27:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm [2008-07-03 12:01:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2009-01-25 11:34:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Syncrosoft [2008-07-08 16:31:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2008-09-15 17:47:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems [2010-06-28 21:52:37 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\.# [2010-10-13 20:12:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\BESTplayer [2010-09-26 09:32:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\DAEMON Tools Lite [2008-07-03 12:13:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Datalayer [2010-06-14 10:28:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Facebook [2009-10-25 10:39:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\FMZilla [2010-12-26 01:21:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\foobar2000 [2008-08-12 22:40:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\GanymedeNet [2010-10-11 13:33:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\gtk-2.0 [2008-06-25 17:46:00 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\ijjigame [2008-07-03 12:12:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Nokia [2008-07-05 12:18:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Nokia Multimedia Player [2010-01-30 11:37:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Notepad++ [2009-09-25 20:38:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\OpenCandy [2009-09-06 16:39:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\OpenOffice.org [2010-02-05 20:03:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Opera [2008-07-03 12:02:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\PC Suite [2010-08-27 13:09:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\SanDisk [2010-01-30 11:38:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Spider Player [2009-04-09 14:44:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\STOIK [2009-12-19 16:44:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\streamripper [2008-05-21 19:12:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Styler [2010-09-14 15:52:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Thunderbird [2008-09-15 17:42:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\Ulead Systems [2010-12-25 20:06:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fibi\Dane aplikacji\uTorrent [2010-04-26 14:30:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rysiek\Dane aplikacji\foobar2000 [2009-11-02 18:10:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rysiek\Dane aplikacji\OpenOffice.org [2009-11-12 21:14:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rysiek\Dane aplikacji\PC Suite [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:E41EAF13 < End of report >

EXTRAS

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2010-12-26 22:33:58 - Run 4 OTL by OldTimer - Version 3.2.18.0 Folder = C:\Documents and Settings\Fibi\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 255,00 Mb Total Physical Memory | 52,00 Mb Available Physical Memory | 21,00% Memory free 628,00 Mb Paging File | 210,00 Mb Available in Paging File | 33,00% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 38,16 Gb Total Space | 22,23 Gb Free Space | 58,24% Space Free | Partition Type: NTFS Drive D: | 19,08 Gb Total Space | 3,23 Gb Free Space | 16,93% Space Free | Partition Type: NTFS Drive E: | 19,07 Gb Total Space | 14,89 Gb Free Space | 78,07% Space Free | Partition Type: FAT32 Computer Name: FIBI | User Name: Fibi | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) .txt [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-21-2025429265-789336058-1060284298-1003\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Java\jre1.6.0_05\bin\javaw.exe" = C:\Program Files\Java\jre1.6.0_05\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "C:\Program Files\Psi\psi.exe" = C:\Program Files\Psi\psi.exe:*:Enabled:psi -- () "C:\Program Files\Ipswitch\WS_FTP Professional\wsftpgui.exe" = C:\Program Files\Ipswitch\WS_FTP Professional\wsftpgui.exe:*:Enabled:WS_FTP Pro Application -- (Ipswitch, Inc. 10 Maguire Road - Suite 220 Lexington, MA 02421) "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.) "C:\Program Files\NAPI-PROJEKT\napisy.exe" = C:\Program Files\NAPI-PROJEKT\napisy.exe:*:Enabled:napisy.exe -- () "C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- File not found "C:\Program Files\SopCast\adv\SopAdver.exe" = C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com) "C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com) "C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation) "C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- File not found "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe" = C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe:LocalSubNet,0.0.0.0/255.255.255.255:Enabled:Pure Networks Platform Service -- (Cisco Systems, Inc.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00000415-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{036FD544-AED6-3F33-856D-A2292D0CF471}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - PLK "{08BF6EA5-120D-462D-ADE0-912A77DBCB2E}" = Cisco Network Magic "{0A2A5039-B37F-489D-B1DC-A5258DF9E697}" = FIFA 08 "{0CE5F45E-F6CC-4638-B0DD-BB7F6EF56713}" = HP Deskjet D1500 Printer Driver Software 10.0 Rel .3 "{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox "{1871FE54-36AA-478F-B374-A46BA54474CC}" = ESET NOD32 Antivirus "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20 "{2BA00471-0328-3743-93BD-FA813353A783}" = Microsoft .NET Framework 3.0 Service Pack 1 "{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5 "{305468A6-DE2D-43ba-A168-2F45A97A89DA}" = DJ_SF_03_D1500_Software_Min "{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840 "{588AA47B-9115-44D3-B2E5-4F10BC659D6C}" = Nokia PC Connectivity Solution "{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{77296E63-8C19-462B-ABA1-F510750A8C51}" = Nokia PC Suite "{7C77393F-8237-3825-A88A-AFAF3C69C072}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - PLK "{7E20EFE6-E604-48C6-8B39-BA4742F2CDB4}" = Zune Desktop Theme "{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan "{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport "{9E1BAB75-EB78-440D-94C0-A3857BE2E733}" = System Requirements Lab "{AB49B509-8FCA-45E6-9FB9-9E4AEEB8F148}" = System Requirements Lab CYRI "{AC76BA86-7AD7-1045-7B44-A81200000003}" = Adobe Reader 8 - Polish "{AD88355B-A4E0-4DA1-BAC3-EA4FEA930691}" = Ipswitch WS_FTP Professional 2007 "{B1421599-A42D-47ef-B512-B9B0317BD599}" = DJ_SF_03_D1500_Software "{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1 "{c6922d7f-c698-4d9e-9671-8b3de04d1511}" = DJ_AIO_03_F2200_Software_Min "{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg "{D77D43B5-ED55-426b-B67B-E21F804F6102}" = HP Deskjet F2200 All-In-One Driver Software 10.0 Rel .3 "{db18dc72-cd20-4801-be82-f5d2caeec4d7}" = DJ_AIO_03_F2200_Software "{E4DD8B33-6F9B-41C5-96FF-5DBF27ED23E7}" = Nokia Connectivity Cable Driver "{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer "{F31E509D-3597-324E-83CF-0C160B2320F0}" = Microsoft .NET Framework 3.5 Language Pack - plk "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "{FC467B61-F890-4E29-8585-365DAB66F13E}" = Pure Networks Platform "010D072E91408D6B7C6FC65489B6D30C027605F5" = Windows Driver Package - Nokia Modem (04/06/2006 6.8.0.17) "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player "AP Guitar Tuner 1.02" = AP Guitar Tuner 1.02 "Eset NOD32 v3.0.642 FiX1.2 by TemDono_is1" = NOD32 v3.0.642 FiX1.2 by TemDono (31 days remaining forever up "GoldWave v5.55" = GoldWave v5.55 "IrfanView" = IrfanView (remove only) "KLiteCodecPack_is1" = K-Lite Codec Pack 3.9.0 Full "LastFM_is1" = Last.fm 1.5.4.27091 "Linren CD Ripper" = Linren CD Ripper "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5 "Microsoft .NET Framework 3.5 Language Pack - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 — PLK "Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13) "Mozilla Thunderbird (3.1.4)" = Mozilla Thunderbird (3.1.4) "MPPL 08" = MPPL 08 "NapiProjekt_is1" = NapiProjekt 1.0.6.9 "Nero - Burning Rom!UninstallKey" = Nero OEM "Network MagicUninstall" = Network Magic "NVIDIA Drivers" = NVIDIA Drivers "Picasa 3" = Picasa 3 "Psi" = Psi (remove only) "PSPad editor_is1" = PSPad editor "SopCast" = SopCast 3.2.9 "Streamripper" = Streamripper (Remove only) "SystemRequirementsLab" = System Requirements Lab "Tibia Auto" = NSIS Example2 "uTorrent" = µTorrent "WIC" = Windows Imaging Component "Windows Media Format Runtime" = Windows Media Format Runtime "Windows XP Service Pack" = Windows XP Service Pack 2 "WinGimp-2.0_is1" = GIMP 2.6.11 "WinRAR archiver" = Archiwizator WinRAR "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2025429265-789336058-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Facebook Plug-In" = Facebook Plug-In "foobar2000" = foobar2000 v0.9.5.2 [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2010-11-12 06:18:18 | Computer Name = FIBI | Source = WmiAdapter | ID = 4099 Description = Otwarcie usługi nie powiodło się. Error - 2010-12-23 06:11:09 | Computer Name = FIBI | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fifa08.exe, wersja 0.0.0.0, moduł powodujący błąd fifa08.exe, wersja 0.0.0.0, adres błędu 0x001c659f. [ System Events ] Error - 2010-12-25 06:59:37 | Computer Name = FIBI | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys) z powodu następującego błędu: %%2 Error - 2010-12-25 06:59:37 | Computer Name = FIBI | Source = Service Control Manager | ID = 7009 Description = Limit czasu (30000 milisekund) podczas oczekiwania na połączenie się z usługą Eset Nod32 Boot. Error - 2010-12-25 06:59:37 | Computer Name = FIBI | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Eset Nod32 Boot z powodu następującego błędu: %%1053 Error - 2010-12-25 12:48:03 | Computer Name = FIBI | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys) z powodu następującego błędu: %%2 Error - 2010-12-25 12:48:03 | Computer Name = FIBI | Source = Service Control Manager | ID = 7009 Description = Limit czasu (30000 milisekund) podczas oczekiwania na połączenie się z usługą Eset Nod32 Boot. Error - 2010-12-25 12:48:03 | Computer Name = FIBI | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Eset Nod32 Boot z powodu następującego błędu: %%1053 Error - 2010-12-26 07:09:14 | Computer Name = FIBI | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 192.168.1.100 dla karty sieciowej o adresie 001B111632BB został zabroniony przez serwer DHCP 192.168.1.1 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2010-12-26 07:09:51 | Computer Name = FIBI | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi General Purpose USB Driver (adildr.sys) z powodu następującego błędu: %%2 Error - 2010-12-26 07:09:51 | Computer Name = FIBI | Source = Service Control Manager | ID = 7009 Description = Limit czasu (30000 milisekund) podczas oczekiwania na połączenie się z usługą Eset Nod32 Boot. Error - 2010-12-26 07:09:51 | Computer Name = FIBI | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Eset Nod32 Boot z powodu następującego błędu: %%1053 < End of report >

**Posty:** 18165 · przez **wojtas** 27 Gru 2010, 18:17

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:E41EAF13

:Commands
[emptytemp]
[emptyflash]
[clearallrestorepoints]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

daj loga z MBRCheck
http://www.fixitpc.pl/topic/8-dezynfekcja-zbior-narzedzi-usuwajacych/page__p__6557&#entry6557

**Posty:** 2008 · przez **fibi07** 27 Gru 2010, 20:39

otl

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found. Starting removal of ActiveX control DirectAnimation Java Classes Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF . Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found. File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found. Starting removal of ActiveX control Microsoft XML Parser for Java Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF . Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found. ADS C:\Documents and Settings\All Users\Dane aplikacji\TEMP:E41EAF13 deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Ala ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Fibi ->Temp folder emptied: 107462617 bytes ->Temporary Internet Files folder emptied: 23713390 bytes ->Java cache emptied: 283418 bytes ->FireFox cache emptied: 62145812 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 13129 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Rysiek ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 32768 bytes RecycleBin emptied: 31414136 bytes Total Files Cleaned = 215,00 mb [EMPTYFLASH] User: Ala ->Flash cache emptied: 0 bytes User: All Users User: Default User User: Fibi ->Flash cache emptied: 0 bytes User: LocalService User: NetworkService User: Rysiek ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0,00 mb Restore points cleared and new OTL Restore Point set! OTL by OldTimer - Version 3.2.18.0 log created on 12272010_192140 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

mbr:

Kod: Zaznacz wszystko: MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows XP Professional Windows Information: Dodatek Service Pack 2 (build 2600) Logical Drives Mask: 0x0000017d Kernel Drivers (total 116): 0x804D7000 \WINDOWS\system32\ntoskrnl.exe 0x806EC000 \WINDOWS\system32\hal.dll 0xF9F32000 \WINDOWS\system32\KDCOM.DLL 0xF9E42000 \WINDOWS\system32\BOOTVID.dll 0xF99E2000 ACPI.sys 0xF9F34000 \WINDOWS\System32\DRIVERS\WMILIB.SYS 0xF99D1000 pci.sys 0xF9A32000 isapnp.sys 0xF9F36000 viaide.sys 0xF9CB2000 \WINDOWS\System32\DRIVERS\PCIIDEX.SYS 0xF9A42000 MountMgr.sys 0xF99B2000 ftdisk.sys 0xF9F38000 dmload.sys 0xF998C000 dmio.sys 0xF9CBA000 PartMgr.sys 0xF9A52000 VolSnap.sys 0xF9974000 atapi.sys 0xF9A62000 disk.sys 0xF9A72000 \WINDOWS\System32\DRIVERS\CLASSPNP.SYS 0xF9955000 fltmgr.sys 0xF9943000 sr.sys 0xF9A82000 PxHelp20.sys 0xF992C000 KSecDD.sys 0xF989F000 Ntfs.sys 0xF9872000 NDIS.sys 0xF9A92000 viaagp.sys 0xF9F3A000 speedfan.sys 0xF9857000 Mup.sys 0xF9FFA000 giveio.sys 0xF9BA2000 \SystemRoot\System32\DRIVERS\amdk7.sys 0xF92C1000 \SystemRoot\System32\DRIVERS\nv4_mini.sys 0xF92AD000 \SystemRoot\System32\DRIVERS\VIDEOPRT.SYS 0xF9BB2000 \SystemRoot\system32\DRIVERS\dlkfet5b.sys 0xF9BC2000 \SystemRoot\System32\DRIVERS\imapi.sys 0xF9BD2000 \SystemRoot\System32\DRIVERS\cdrom.sys 0xF9BE2000 \SystemRoot\System32\DRIVERS\redbook.sys 0xF928A000 \SystemRoot\System32\DRIVERS\ks.sys 0xF9D3A000 \SystemRoot\System32\DRIVERS\usbuhci.sys 0xF9267000 \SystemRoot\System32\DRIVERS\USBPORT.SYS 0xF8E8F000 \SystemRoot\system32\drivers\ALCXWDM.SYS 0xF8E6B000 \SystemRoot\system32\drivers\portcls.sys 0xF9BF2000 \SystemRoot\system32\drivers\drmk.sys 0xF9D42000 \SystemRoot\System32\DRIVERS\fdc.sys 0xF8E5A000 \SystemRoot\System32\DRIVERS\serial.sys 0xF9ED6000 \SystemRoot\System32\DRIVERS\serenum.sys 0xF8E46000 \SystemRoot\System32\DRIVERS\parport.sys 0xF9C02000 \SystemRoot\System32\DRIVERS\i8042prt.sys 0xF9D4A000 \SystemRoot\System32\DRIVERS\mouclass.sys 0xF9D52000 \SystemRoot\System32\DRIVERS\kbdclass.sys 0xFA137000 \SystemRoot\system32\drivers\msmpu401.sys 0xF9EDA000 \SystemRoot\System32\DRIVERS\gameenum.sys 0xFA138000 \SystemRoot\System32\DRIVERS\audstub.sys 0xF9C12000 \SystemRoot\System32\DRIVERS\rasl2tp.sys 0xF9EDE000 \SystemRoot\System32\DRIVERS\ndistapi.sys 0xF8E2F000 \SystemRoot\System32\DRIVERS\ndiswan.sys 0xF9C22000 \SystemRoot\System32\DRIVERS\raspppoe.sys 0xF9C32000 \SystemRoot\System32\DRIVERS\raspptp.sys 0xF9D5A000 \SystemRoot\System32\DRIVERS\TDI.SYS 0xF8E1E000 \SystemRoot\System32\DRIVERS\psched.sys 0xF9C42000 \SystemRoot\System32\DRIVERS\msgpc.sys 0xF9D62000 \SystemRoot\System32\DRIVERS\ptilink.sys 0xF9D6A000 \SystemRoot\System32\DRIVERS\raspti.sys 0xF8C15000 \SystemRoot\System32\DRIVERS\rdpdr.sys 0xF9C52000 \SystemRoot\System32\DRIVERS\termdd.sys 0xF9F48000 \SystemRoot\System32\DRIVERS\swenum.sys 0xF8B41000 \SystemRoot\System32\DRIVERS\update.sys 0xF9F02000 \SystemRoot\System32\DRIVERS\mssmbios.sys 0xF9C62000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xF9C72000 \SystemRoot\System32\DRIVERS\usbhub.sys 0xF9F4A000 \SystemRoot\System32\DRIVERS\USBD.SYS 0xF9D72000 \SystemRoot\System32\DRIVERS\flpydisk.sys 0xF9F4C000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xFA09C000 \SystemRoot\System32\Drivers\Null.SYS 0xF9F4E000 \SystemRoot\System32\Drivers\Beep.SYS 0xF69FC000 \SystemRoot\system32\DRIVERS\ehdrv.sys 0xF9D82000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0xF9D8A000 \SystemRoot\System32\drivers\vga.sys 0xF9F52000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xF9F54000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xF9D92000 \SystemRoot\System32\Drivers\Msfs.SYS 0xF9D9A000 \SystemRoot\System32\Drivers\Npfs.SYS 0xF9823000 \SystemRoot\System32\DRIVERS\rasacd.sys 0xF69C9000 \SystemRoot\System32\DRIVERS\ipsec.sys 0xF6971000 \SystemRoot\System32\DRIVERS\tcpip.sys 0xF6949000 \SystemRoot\System32\DRIVERS\netbt.sys 0xF6930000 \SystemRoot\system32\DRIVERS\epfwtdir.sys 0xF690E000 \SystemRoot\System32\drivers\afd.sys 0xF9AD2000 \SystemRoot\System32\DRIVERS\netbios.sys 0xF68E2000 \SystemRoot\System32\DRIVERS\rdbss.sys 0xF684B000 \SystemRoot\System32\DRIVERS\mrxsmb.sys 0xF9AE2000 \SystemRoot\System32\Drivers\Fips.SYS 0xF682A000 \SystemRoot\System32\DRIVERS\ipnat.sys 0xF9AF2000 \SystemRoot\System32\DRIVERS\wanarp.sys 0xF9DB2000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0xF6807000 \SystemRoot\System32\Drivers\Fastfat.SYS 0xF67EF000 \SystemRoot\System32\Drivers\dump_atapi.sys 0xF9F96000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS 0xBF800000 \SystemRoot\System32\win32k.sys 0xF9E02000 \SystemRoot\System32\watchdog.sys 0xF68DE000 \SystemRoot\System32\drivers\Dxapi.sys 0xBF9C1000 \SystemRoot\System32\drivers\dxg.sys 0xFA0C7000 \SystemRoot\System32\drivers\dxgthk.sys 0xBF9D3000 \SystemRoot\System32\nv4_disp.dll 0xBFFA0000 \SystemRoot\System32\ATMFD.DLL 0xF5E8A000 \SystemRoot\system32\DRIVERS\eamon.sys 0xF5F72000 \SystemRoot\System32\DRIVERS\ndisuio.sys 0xF9CD2000 \SystemRoot\system32\DRIVERS\pnarp.sys 0xF9CDA000 \SystemRoot\system32\DRIVERS\purendis.sys 0xF542D000 \SystemRoot\System32\DRIVERS\mrxdav.sys 0xF9F64000 \SystemRoot\System32\Drivers\ParVdm.SYS 0xF538A000 \SystemRoot\System32\DRIVERS\srv.sys 0xF4AAD000 \SystemRoot\system32\drivers\wdmaud.sys 0xF61CE000 \SystemRoot\system32\drivers\sysaudio.sys 0xF623E000 \SystemRoot\System32\Drivers\Cdfs.SYS 0xF4457000 \SystemRoot\System32\Drivers\HTTP.sys 0x7C900000 \WINDOWS\system32\ntdll.dll Processes (total 31): 0 System Idle Process 4 System 372 C:\WINDOWS\system32\smss.exe 428 csrss.exe 456 C:\WINDOWS\system32\winlogon.exe 500 C:\WINDOWS\system32\services.exe 512 C:\WINDOWS\system32\lsass.exe 664 C:\WINDOWS\system32\svchost.exe 720 svchost.exe 784 C:\WINDOWS\system32\svchost.exe 840 svchost.exe 920 svchost.exe 1144 C:\WINDOWS\system32\spoolsv.exe 1260 C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe 1304 C:\Program Files\Java\jre6\bin\jqs.exe 1332 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe 1412 C:\WINDOWS\system32\svchost.exe 1604 C:\WINDOWS\explorer.exe 1632 C:\WINDOWS\system32\nvsvc32.exe 1644 C:\WINDOWS\system32\svchost.exe 1692 C:\WINDOWS\system32\svchost.exe 1716 wdfmgr.exe 1868 C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe 1952 C:\WINDOWS\notepad.exe 288 C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe 632 wmiprvse.exe 1208 C:\WINDOWS\system32\wscntfy.exe 1824 alg.exe 3132 C:\WINDOWS\system32\wuauclt.exe 3384 C:\Program Files\Mozilla Firefox\firefox.exe 4072 C:\Documents and Settings\Fibi\Pulpit\MBRCheck.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x00000009`8a806a00 (NTFS) \\.\E: --> \\.\PhysicalDrive0 at offset 0x0000000e`4fc06000 (FAT32) PhysicalDrive0 Model Number: Maxtor6Y080P0, Rev: YAR41BW0 Size Device Name MBR Status -------------------------------------------- 76 GB \\.\PhysicalDrive0 Windows XP MBR code detected SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A Done!

**Posty:** 18165 · przez **wojtas** 27 Gru 2010, 20:45

1.Uruchom OTL z opcji sprzątanie.
2. wykonaj optymalizację Windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je z powrotem
4. zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )

Zaktualizuj zabezpieczenia:
>>> Adobe Reader (bez Free McAfee® Security Scan Plus)
>>> Internet Explorer 8
>>> Service Pack 3
>>> Java™ 6 Update 23

przeinstaluj noda32 bo coś się sypie wg. dziennika

Autor postu otrzymał pochwałę

**Posty:** 2008 · przez **fibi07** 27 Gru 2010, 21:01

dzięki