Bardzo mała wydajnośc komputera.

**Posty:** 174 · przez **tekladg** 13 Wrz 2009, 11:58

Witam
Mam problem z moim komputerem od 2-3 dni jego wydajnosc spadła drastycznie. Nie da sie juz np. ogladac filmów bo klatkuje przy wiekszosci i nie wspomne o grach czy inncyh rzeczach :cry:

Logi:
HijackThis

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:48:16, on 2009-09-13 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Tekla\Pulpit\OTL.exe C:\WINDOWS\notepad.exe C:\Documents and Settings\Tekla\Pulpit\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.alot.com?client_id=1065B22001CA0AE1000EA544&install_time=22-07-2009:17:27&src_id=11125&camp_id=-6&tb_version=1.2.7.291 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.alot.com/sidebar?pr=asst&client_id=1065B22001CA0AE1000EA544&install_time=22-07-2009:17:27&src_id=11125&camp_id=-6&tb_version=1.2.7.291&&url=http://home.alot.com?client_id=1065B22001CA0AE1000EA544&install_time=22-07-2009:17:27&src_id=11125&camp_id=-6&tb_version=1.2.7.291 (obfuscated) R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O2 - BHO: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Tekla\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll O3 - Toolbar: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Download all 4shared files - C:\Program Files\4shared Desktop\down_all.htm O8 - Extra context menu item: &Download using 4shared Desktop - C:\Program Files\4shared Desktop\down_link.htm O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe -- End of file - 4626 bytes

OTL
http://wklej.org/hash/deea262a70/

Silent Runners

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision 59, http://www.silentrunners.org/ Operating System: Windows XP Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "ATICCC" = ""C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay" [null data] "MSConfig" = "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto" [MS] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {0055C089-8582-441B-A0BF-17B458C2A3A8}\(Default) = "IDM Helper" -> {HKLM...CLSID} = "IDMIEHlprObj Class" \InProcServer32\(Default) = "C:\Program Files\Internet Download Manager\IDMIECC.dll" ["Tonec Inc."] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "Adobe PDF Reader Link Helper" \InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {201f27d4-3704-41d6-89c1-aa35e39143ed}\(Default) = "AskBar BHO" -> {HKLM...CLSID} = "AskBar BHO" \InProcServer32\(Default) = "C:\Program Files\AskBarDis\bar\bin\askBar.dll" ["Ask.com"] {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7}\(Default) = (no title provided) -> {HKLM...CLSID} = "ALOT Toolbar" \InProcServer32\(Default) = "C:\Program Files\alot\bin\alot.dll" ["Miva"] {DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided) -> {HKLM...CLSID} = "Java(tm) Plug-In 2 SSV Helper" \InProcServer32\(Default) = "C:\Program Files\Java\jre6\bin\jp2ssv.dll" ["Sun Microsystems, Inc."] {E7E6F031-17CE-4C07-BC86-EABFE594F69C}\(Default) = "JQSIEStartDetectorImpl" -> {HKLM...CLSID} = "JQSIEStartDetectorImpl Class" \InProcServer32\(Default) = "C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll" ["Sun Microsystems, Inc."] {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\(Default) = "IEPluginBHO" -> {HKLM...CLSID} = "IEPluginBHO Class" \InProcServer32\(Default) = "C:\Documents and Settings\Tekla\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll" ["GG Network S.A."] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{5E2121EE-0300-11D4-8D3B-444553540000}" = "Catalyst Context Menu extension" -> {HKLM...CLSID} = "SimpleShlExt Class" \InProcServer32\(Default) = "C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll" [empty string] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] "{09bffb91-ecda-4149-bcfd-d87a345c219e}" = "InCDShellExt extension" -> {HKLM...CLSID} = "InCDShellExt Class" \InProcServer32\(Default) = "C:\Program Files\Nero\Nero 9\InCD\InCDshx.dll" ["Nero AG"] "{692eb3b0-d034-403e-b742-2407bd43bf9b}" = "InCDUdfPerm extension" -> {HKLM...CLSID} = "InCDUdfPerm Class" \InProcServer32\(Default) = "C:\Program Files\Nero\Nero 9\InCD\InCDUP.dll" ["Nero AG"] "{8D2223A2-B3C6-4e32-B096-CDD11F628C60}" = "NBHShellExt extension" -> {HKLM...CLSID} = "NBHShellExt Class" \InProcServer32\(Default) = "C:\Program Files\Nero\Nero 9\InCD\NBHshx.dll" ["Nero AG"] "{EBDF1F20-C829-11D1-8233-0020AF3E97A9}" = "4shsared_Desktop" -> {HKLM...CLSID} = "4shared_Desktop" \InProcServer32\(Default) = "C:\PROGRA~1\4SHARE~1\CMenu.dll" [null data] "{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office12\msohevi.dll" [MS] "{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}" = "Microsoft Office Metadata Handler" -> {HKLM...CLSID} = "Microsoft Office Metadata Handler" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll" [MS] "{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}" = "Microsoft Office Thumbnail Handler" -> {HKLM...CLSID} = "Microsoft Office Thumbnail Handler" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll" [MS] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ <<!>> AtiExtEvent\DLLName = "Ati2evxx.dll" ["ATI Technologies Inc."] HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\ <<!>> text/xml\CLSID = "{807563E5-5146-11D5-A672-00B0D022E945}" -> {HKLM...CLSID} = "Microsoft Office InfoPath XML Mime Filter" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL" [MS] HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\ {F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info" -> {HKLM...CLSID} = "PDF Shell Extension" \InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."] HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ 4shared_Desktop\(Default) = "{EBDF1F20-C829-11D1-8233-0020AF3E97A9}" -> {HKLM...CLSID} = "4shared_Desktop" \InProcServer32\(Default) = "C:\PROGRA~1\4SHARE~1\CMenu.dll" [null data] NBHShellExt\(Default) = "{8D2223A2-B3C6-4e32-B096-CDD11F628C60}" -> {HKLM...CLSID} = "NBHShellExt Class" \InProcServer32\(Default) = "C:\Program Files\Nero\Nero 9\InCD\NBHshx.dll" ["Nero AG"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ 4shared_Desktop\(Default) = "{EBDF1F20-C829-11D1-8233-0020AF3E97A9}" -> {HKLM...CLSID} = "4shared_Desktop" \InProcServer32\(Default) = "C:\PROGRA~1\4SHARE~1\CMenu.dll" [null data] NBHShellExt\(Default) = "{8D2223A2-B3C6-4e32-B096-CDD11F628C60}" -> {HKLM...CLSID} = "NBHShellExt Class" \InProcServer32\(Default) = "C:\Program Files\Nero\Nero 9\InCD\NBHshx.dll" ["Nero AG"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\ NBHShellExt\(Default) = "{8D2223A2-B3C6-4e32-B096-CDD11F628C60}" -> {HKLM...CLSID} = "NBHShellExt Class" \InProcServer32\(Default) = "C:\Program Files\Nero\Nero 9\InCD\NBHshx.dll" ["Nero AG"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] Group Policies {GPedit.msc branch and setting}: ----------------------------------------------- Note: detected settings may not have any effect. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) dword:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) dword:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Enabled Screen Saver: --------------------- HKCU\Control Panel\Desktop\ "SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS] Windows Portable Device AutoPlay Handlers ----------------------------------------- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ WinampMTPHandler\ "Provider" = "Winamp" "ProgID" = "Shell.HWEventHandlerShellExecute" "InitCmdLine" = "C:\Program Files\Winamp\winamp.exe" HKLM\SOFTWARE\Classes\Shell.HWEventHandlerShellExecute\CLSID\(Default) = "{FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}" -> {HKLM...CLSID} = "ShellExecute HW Event Handler" \LocalServer32\(Default) = "rundll32.exe shell32.dll,SHCreateLocalServerRunDll {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}" [MS] WinampPlayMediaOnArrival\ "Provider" = "Winamp" "InvokeProgID" = "Winamp.File" "InvokeVerb" = "Play" HKLM\SOFTWARE\Classes\Winamp.File\shell\Play\command\(Default) = ""C:\Program Files\Winamp\winamp.exe" "%1"" ["Nullsoft"] HKLM\SOFTWARE\Classes\Winamp.File\shell\Play\DropTarget\CLSID = "{46986115-84D6-459c-8F95-52DD653E532E}" -> {HKLM...CLSID} = (no title provided) \LocalServer32\(Default) = ""C:\Program Files\Winamp\winamp.exe"" ["Nullsoft"] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 11 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ "{3041D03E-FD4B-44E0-B742-2D9B88305F98}" -> {HKLM...CLSID} = "Ask Toolbar" \InProcServer32\(Default) = "C:\Program Files\AskBarDis\bar\bin\askBar.dll" ["Ask.com"] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ "{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}" = "ALOT Toolbar" -> {HKLM...CLSID} = "ALOT Toolbar" \InProcServer32\(Default) = "C:\Program Files\alot\bin\alot.dll" ["Miva"] "{3041D03E-FD4B-44E0-B742-2D9B88305F98}" = (no title provided) -> {HKLM...CLSID} = "Ask Toolbar" \InProcServer32\(Default) = "C:\Program Files\AskBarDis\bar\bin\askBar.dll" ["Ask.com"] Explorer Bars HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ HKLM\SOFTWARE\Classes\CLSID\{B0DE3308-5D5A-470D-81B9-634FC078393B}\(Default) = "Ask Toolbar Quick View" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\WINDOWS\system32\shdocvw.dll" [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\ {E2E2DD38-D088-4134-82B7-F2BA38496583}\ "MenuText" = "@xpsp3res.dll,-20001" "Exec" = "%windir%\Network Diagnostic\xpnetdiag.exe" [MS] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ Ati HotKey Poller, Ati HotKey Poller, "C:\WINDOWS\system32\Ati2evxx.exe" ["ATI Technologies Inc."] Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS] ---------- (launch time: 2009-09-13 12:26:43) <<!>>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points, use the -supp parameter or answer "No" at the first message box and "Yes" at the second message box. ---------- (total run time: 48 seconds, including 7 seconds for message boxes)

Z góry dzięki :ok:

**Posty:** 584 · przez **Andziorka** 13 Wrz 2009, 12:48

W okienko OTL wklej poniższy skrypt i klik na Run Fix:

:Processes
explorer.exe

:OTL
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O32 - AutoRun File - [2008-12-19 15:19:06 | 00,000,000 | ---D | M] - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2008-12-19 15:19:07 | 00,000,000 | ---D | M] - E:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2008-12-19 15:19:07 | 00,000,000 | ---D | M] - F:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{b3ee0c6b-81a7-11de-ad06-00104b195a98}\Shell\AutoRun\command - "" = RECYCLER\lassas.exe
O33 - MountPoints2\{b3ee0c6b-81a7-11de-ad06-00104b195a98}\Shell\OpEn\CoMmAnD - "" = RECYCLER\lassas.exe

:Files
C:\Program Files\AskBarDis

:Reg
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2]

:Commands
[emptytemp]
[start explorer]
[Reboot]

Daj loga, który powstanie po usuwaniu + nowego.

Autor postu otrzymał pochwałę

**Posty:** 174 · przez **tekladg** 13 Wrz 2009, 13:00

po usunięciu

Kod: Zaznacz wszystko: All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ deleted successfully. C:\Program Files\AskBarDis\bar\bin\askBar.dll unregistered successfully. C:\Program Files\AskBarDis\bar\bin\askBar.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}\ not found. File C:\Program Files\AskBarDis\bar\bin\askBar.dll not found. Registry value HKEY_USERS\S-1-5-21-1229272821-2077806209-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041D03E-FD4B-44E0-B742-2D9B88305F98} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}\ not found. File C:\Program Files\AskBarDis\bar\bin\askBar.dll not found. File not found. File not found. File not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b3ee0c6b-81a7-11de-ad06-00104b195a98}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b3ee0c6b-81a7-11de-ad06-00104b195a98}\ not found. File C:\RECYCLER\lassas.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b3ee0c6b-81a7-11de-ad06-00104b195a98}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b3ee0c6b-81a7-11de-ad06-00104b195a98}\ not found. File C:\RECYCLER\lassas.exe not found. ========== FILES ========== C:\Program Files\AskBarDis\bar\Settings moved successfully. C:\Program Files\AskBarDis\bar\History moved successfully. C:\Program Files\AskBarDis\bar\Cache moved successfully. C:\Program Files\AskBarDis\bar\bin moved successfully. C:\Program Files\AskBarDis\bar moved successfully. C:\Program Files\AskBarDis moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 0 bytes File delete failed. C:\Documents and Settings\LocalService\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 402 bytes User: Tekla ->Temp folder emptied: 152865699 bytes ->Temporary Internet Files folder emptied: 43386458 bytes ->Java cache emptied: 13445448 bytes ->FireFox cache emptied: 51660323 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2134153 bytes %systemroot%\System32 .tmp files removed: 2596 bytes Windows Temp folder emptied: 1261568 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 252,55 mb OTL by OldTimer - Version 3.0.11.0 log created on 09132009_125424 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

Nowy Log

Kod: Zaznacz wszystko: OTL logfile created on: 2009-09-13 12:57:53 - Run 2 OTL by OldTimer - Version 3.0.11.0 Folder = C:\Documents and Settings\Tekla\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,48 Mb Total Physical Memory | 738,20 Mb Available Physical Memory | 72,13% Memory free 1,92 Gb Paging File | 1,73 Gb Available in Paging File | 90,21% Paging File free Paging file location(s): C:\pagefile.sys 1036 2072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 9,77 Gb Total Space | 2,61 Gb Free Space | 26,69% Space Free | Partition Type: NTFS Drive D: | 11,72 Gb Total Space | 2,19 Gb Free Space | 18,67% Space Free | Partition Type: NTFS Drive E: | 27,34 Gb Total Space | 3,19 Gb Free Space | 11,66% Space Free | Partition Type: NTFS Drive F: | 27,49 Gb Total Space | 1,03 Gb Free Space | 3,73% Space Free | Partition Type: NTFS Drive G: | 4,36 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: TEKLA-6E33FAC39 Current User Name: Tekla Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2006-05-03 18:43:46 | 00,413,696 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2006-05-03 18:43:46 | 00,413,696 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2008-04-14 22:51:18 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2005-01-28 13:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe PRC - [2008-04-14 22:51:52 | 00,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\wmiprvse.exe PRC - [2006-01-02 16:41:22 | 00,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe PRC - [2008-04-14 22:51:52 | 00,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\wmiprvse.exe PRC - [2006-01-02 16:41:22 | 00,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe PRC - [2006-01-02 16:41:22 | 00,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe PRC - [2009-09-13 11:43:44 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Tekla\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found -- -- (ASKUpgrade [Disabled | Stopped]) SRV - [2005-09-23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2006-05-03 18:43:46 | 00,413,696 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running]) SRV - [2006-05-03 11:57:00 | 00,520,192 | ---- | M] () -- C:\WINDOWS\System32\ati2sgag.exe -- (ATI Smart [Auto | Stopped]) SRV - [2005-09-23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-04-14 22:50:46 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2008-09-19 16:53:18 | 01,483,800 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 9\InCD\InCDSrv.exe -- (InCDSrv [Disabled | Stopped]) SRV - [2009-09-02 20:15:37 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Disabled | Stopped]) SRV - [2008-09-19 16:53:16 | 00,108,568 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe -- (NeroRegInCDSrv [Disabled | Stopped]) SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [Disabled | Stopped]) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [Disabled | Stopped]) SRV - [2005-01-28 13:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe -- (UMWdf [Auto | Running]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2006-05-03 18:50:42 | 01,540,608 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running]) DRV - [2003-05-01 12:08:52 | 00,743,367 | ---- | M] (C-Media Inc) -- C:\WINDOWS\System32\drivers\cmuda.sys -- (cmuda [On_Demand | Running]) DRV - [2004-08-22 16:31:10 | 00,155,136 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus [Boot | Running]) DRV - [2004-08-22 16:31:48 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt [Boot | Running]) DRV - [2001-08-17 22:11:06 | 00,066,591 | ---- | M] (3Com Corporation) -- C:\WINDOWS\System32\DRIVERS\el90xbc5.sys -- (EL90XBC [On_Demand | Running]) DRV - [2008-09-19 16:53:16 | 00,129,560 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\DRIVERS\InCDFs.sys -- (InCDFs [On_Demand | Running]) DRV - [2008-09-19 16:53:16 | 00,040,216 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\DRIVERS\InCDPass.sys -- (InCDPass [System | Running]) DRV - [2008-09-19 16:53:18 | 00,041,752 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\DRIVERS\InCDRm.sys -- (InCDRm [System | Running]) DRV - [2001-08-17 21:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-04-13 22:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2009-09-01 14:28:29 | 00,023,600 | ---- | M] (EnTech Taiwan) -- C:\WINDOWS\System32\DRIVERS\TVICHW32.SYS -- (TVICHW32 [On_Demand | Stopped]) DRV - [2002-12-27 04:41:00 | 00,026,880 | ---- | M] (VIA Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1 [Boot | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.alot.com/sidebar?pr=asst&client_id=1065B22001CA0AE1000EA544&install_time=22-07-2009:17:27&src_id=11125&camp_id=-6&tb_version=1.2.7.291&&url=http%3A%2F%2Fhome%2Ealot%2Ecom%3Fclient%5Fid%3D1065B22001CA0AE1000EA544%26install%5Ftime%3D22%2D07%2D2009%3A17%3A27%26src%5Fid%3D11125%26camp%5Fid%3D%2D6%26tb%5Fversion%3D1%2E2%2E7%2E291 IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.alot.com?client_id=1065B22001CA0AE1000EA544&install_time=22-07-2009:17:27&src_id=11125&camp_id=-6&tb_version=1.2.7.291 IE - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\S-1-5-21-1229272821-2077806209-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledItems: {E9A1DEE0-C623-4439-8932-001E7D17607D}:2.1.0.5 FF - prefs.js..extensions.enabledItems: amin.eft_Shutdown@gmail.com:3.5.1A FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.2.0.2 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {eaf8a4ef-d221-45ca-9deb-d0934b45fa34}:1.3.0.3 FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.10.1 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.3 FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-09-02 20:15:39 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-09-13 11:31:26 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-09-10 17:03:09 | 00,000,000 | ---D | M] [2009-07-22 17:24:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Extensions [2009-07-22 17:24:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-09-13 00:07:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions [2009-07-22 17:29:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2009-09-02 20:29:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2009-07-26 16:30:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2009-08-15 20:46:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\{eaf8a4ef-d221-45ca-9deb-d0934b45fa34} [2009-07-26 00:33:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\amin.eft_Shutdown@gmail.com [2009-07-22 17:29:47 | 00,001,201 | ---- | M] () -- C:\Documents and Settings\Tekla\Dane aplikacji\Mozilla\FireFox\Profiles\1g7v9k1x.default\searchplugins\winamp-search.xml [2009-09-13 00:07:31 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-09-10 17:03:09 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009-09-02 20:15:58 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} [2009-09-10 17:02:59 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-09-10 17:02:59 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-08-27 18:37:48 | 00,873,976 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPCARDS.dll [2009-09-02 20:15:37 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll [2009-09-10 17:03:03 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2006-10-26 20:12:16 | 00,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2009-01-28 20:46:54 | 00,307,200 | ---- | M] (ESKA) -- C:\Program Files\mozilla firefox\plugins\npOggX.dll [2008-09-10 21:56:44 | 00,144,960 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2008-09-10 21:37:54 | 00,094,208 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2009-07-15 21:00:25 | 00,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-07-15 21:00:25 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2009-07-15 21:00:25 | 00,002,371 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2009-07-15 21:00:25 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2009-07-15 21:00:25 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2009-07-15 21:00:25 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-07-15 21:00:25 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (ALOT Toolbar) - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (Miva) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Tekla\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O3 - HKLM\..\Toolbar: (ALOT Toolbar) - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (Miva) O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.) O4 - HKLM..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Download all 4shared files - C:\Program Files\4shared Desktop\down_all.htm () O8 - Extra context menu item: &Download using 4shared Desktop - C:\Program Files\4shared Desktop\down_link.htm () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm () O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.2 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\Ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-07-22 16:44:23 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2008-12-19 15:19:06 | 00,000,000 | ---D | M] - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2008-12-19 15:19:07 | 00,000,000 | ---D | M] - E:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2008-12-19 15:19:07 | 00,000,000 | ---D | M] - F:\autorun.inf -- [ NTFS ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-09-13 12:58:15 | 00,000,000 | ---D | C] -- C:\Program Files\AskBardis [2009-09-13 12:25:45 | 00,400,192 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\Silent Runners.vbs [2009-09-13 11:46:06 | 00,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Tekla\Pulpit\HiJackThis.exe [2009-09-13 11:44:51 | 00,000,000 | ---D | C] -- C:\_OTL [2009-09-13 11:43:41 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Tekla\Pulpit\OTL.exe [2009-09-12 14:08:25 | 01,125,044 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\DVR-112D_FW122EU.EXE [2009-09-12 14:08:25 | 00,042,483 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\DVR-112D Supported Media List Ver122.pdf [2009-09-12 14:08:14 | 01,116,263 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\DVR112D_FW122EU.zip [2009-09-12 10:51:57 | 02,550,835 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\happysad- psychologa.mp3 [2009-09-11 15:59:31 | 00,000,000 | ---D | C] -- C:\Wspólnicy z przypadku (2009) PL [2009-09-09 17:32:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\Nowy folder (2) [2009-09-09 17:04:43 | 00,001,494 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\rapidshare_remote_uploads.zip [2009-09-09 13:39:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\cache [2009-09-09 08:04:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel [2009-09-07 20:28:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\spec_bd [2009-09-07 20:27:58 | 00,583,566 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\spec_bd.rar [2009-09-03 23:57:31 | 00,014,882 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\Ekspresjonizm w literaturze.docx [2009-09-03 23:53:53 | 00,017,946 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\Geneza Przedwiośnia jest ściśle związana z sytuacją społeczno.docx [2009-09-02 20:16:53 | 00,000,760 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\JDownloader.lnk [2009-09-02 18:01:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\RapidShare [2009-09-02 18:01:20 | 00,002,350 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\RapidShare Manager.lnk [2009-09-02 18:01:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\RapidShare_Managerv1.1_2008 [2009-09-02 18:00:48 | 01,058,752 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\RapidShare_Managerv1.1_2008.rar [2009-09-01 16:42:32 | 00,120,417 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\abc.jpg [2009-09-01 14:28:30 | 00,001,037 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\BiosAgent Plus.lnk [2009-09-01 14:28:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\eSupport.com [2009-09-01 14:27:43 | 00,431,800 | ---- | C] (Copyright © 2009 Phoenix Technologies LTD. All Rights Reserved.) -- C:\Documents and Settings\Tekla\Pulpit\biosagentplus_40.exe [2009-09-01 14:24:29 | 00,000,787 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\EVEREST Ultimate Edition.lnk [2009-09-01 14:24:25 | 00,000,000 | ---D | C] -- C:\Program Files\Lavalys [2009-08-28 17:35:07 | 00,041,984 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\formularz zgloszeniowy ESJO edycja wrzesniowa.doc [2009-08-28 16:08:37 | 07,559,689 | ---- | C] () -- C:\Documents and Settings\Tekla\Moje dokumenty\wmaut4.jpg [2009-08-28 12:48:01 | 03,206,196 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\antoine clamaran - gold.mp3 [2009-08-28 12:39:09 | 03,167,744 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\cobra starship - good girls go bad feat leighton meester.mp3 [2009-08-28 12:26:13 | 03,299,369 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\max farenthide take my hand.mp3 [2009-08-28 12:24:49 | 03,272,651 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\the ian carey project - get shaky.mp3 [2009-08-28 12:23:46 | 03,361,676 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\kendi - connected.mp3 [2009-08-28 12:15:34 | 05,389,196 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\atb - what about us .mp3 [2009-08-28 11:57:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\Nowy folder [2009-08-26 13:39:39 | 00,098,914 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\tCBBa.jpg [2009-08-25 12:29:36 | 00,071,092 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\aaaaaaa.jpg [2009-08-22 22:54:34 | 00,052,143 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\40 Days And 40 Nights.001.bak [2009-08-22 22:52:44 | 00,024,247 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\40_Days_and_40_Nights_(NAPiSY-41151).NS.zip [2009-08-20 18:41:27 | 00,161,240 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\screen8.jpg [2009-08-20 14:14:03 | 04,163,323 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\12. bezimienni - piona-wtf.mp3 [2009-08-20 13:06:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\Bezimienni%20Walka%202008%20-6 [2009-08-20 13:04:51 | 07,225,429 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\Bezimienni%20Walka%202008%20-6.rar [2009-08-18 18:19:17 | 00,038,522 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\familyguystewieyousuckb.jpg [2009-08-16 12:04:53 | 06,260,223 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\future_prophecies_-_september.mp3 [2009-08-15 00:49:23 | 03,836,897 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\flipsyde - someday.mp3 [2009-07-24 22:53:56 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-07-24 22:53:55 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-07-24 22:53:52 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-07-24 22:53:52 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-07-24 22:53:51 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-07-24 22:53:51 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-07-24 22:53:50 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-07-22 17:42:07 | 00,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys [2009-07-22 17:42:07 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys [2009-07-22 17:30:47 | 00,010,752 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2009-07-22 16:59:37 | 00,002,501 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-07-22 16:56:35 | 00,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI [2009-07-22 16:56:35 | 00,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI [2009-07-22 16:56:31 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Wininit.ini [2009-07-22 16:56:30 | 01,900,544 | ---- | C] () -- C:\WINDOWS\System32\cmiwcnfg.dll [2009-07-22 16:56:30 | 00,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll [2009-07-22 16:56:19 | 00,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll [2004-08-22 17:04:56 | 00,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll [2001-07-21 22:16:20 | 00,000,512 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 22:15:52 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-09-13 12:56:27 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-09-13 12:56:26 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-09-13 12:56:23 | 10,732,70784 | -HS- | M] () -- C:\hiberfil.sys [2009-09-13 12:30:17 | 00,002,501 | ---- | M] () -- C:\WINDOWS\wincmd.ini [2009-09-13 12:25:50 | 00,400,192 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Silent Runners.vbs [2009-09-13 12:22:02 | 00,030,208 | ---- | M] () -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-09-13 11:46:06 | 00,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Tekla\Pulpit\HiJackThis.exe [2009-09-13 11:43:44 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Tekla\Pulpit\OTL.exe [2009-09-13 11:34:49 | 04,805,676 | -H-- | M] () -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-09-13 11:34:43 | 00,000,512 | ---- | M] () -- C:\WINDOWS\win.ini [2009-09-13 11:34:43 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2009-09-13 11:34:43 | 00,000,211 | -HS- | M] () -- C:\boot.ini [2009-09-12 14:08:18 | 01,116,263 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\DVR112D_FW122EU.zip [2009-09-12 10:51:58 | 02,550,835 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\happysad- psychologa.mp3 [2009-09-10 06:50:46 | 00,283,505 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Suspect_Zero_(NAPiSY-63958).zip [2009-09-09 17:05:03 | 00,001,494 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\rapidshare_remote_uploads.zip [2009-09-08 15:24:45 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-09-07 20:28:01 | 00,583,566 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\spec_bd.rar [2009-09-05 12:41:51 | 00,009,299 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\ISO1_DVD.nri [2009-09-04 18:32:36 | 00,000,721 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\log.xml [2009-09-04 18:32:36 | 00,000,205 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\settings.ini [2009-09-03 23:57:31 | 00,014,882 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Ekspresjonizm w literaturze.docx [2009-09-03 23:53:54 | 00,017,946 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Geneza Przedwiośnia jest ściśle związana z sytuacją społeczno.docx [2009-09-02 20:16:51 | 00,000,760 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\JDownloader.lnk [2009-09-02 18:01:20 | 00,002,350 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\RapidShare Manager.lnk [2009-09-02 18:01:02 | 01,058,752 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\RapidShare_Managerv1.1_2008.rar [2009-09-02 17:56:13 | 00,020,480 | ---- | M] (RapidShare AG) -- C:\Documents and Settings\Tekla\Pulpit\RSMInit.exe [2009-09-01 16:42:33 | 00,120,417 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\abc.jpg [2009-09-01 14:28:30 | 00,001,037 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\BiosAgent Plus.lnk [2009-09-01 14:27:48 | 00,431,800 | ---- | M] (Copyright © 2009 Phoenix Technologies LTD. All Rights Reserved.) -- C:\Documents and Settings\Tekla\Pulpit\biosagentplus_40.exe [2009-09-01 14:24:29 | 00,000,787 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\EVEREST Ultimate Edition.lnk [2009-08-28 17:35:09 | 00,041,984 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\formularz zgloszeniowy ESJO edycja wrzesniowa.doc [2009-08-28 16:09:39 | 07,559,689 | ---- | M] () -- C:\Documents and Settings\Tekla\Moje dokumenty\wmaut4.jpg [2009-08-28 12:50:40 | 03,206,196 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\antoine clamaran - gold.mp3 [2009-08-28 12:41:48 | 03,167,744 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\cobra starship - good girls go bad feat leighton meester.mp3 [2009-08-28 12:28:57 | 03,299,369 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\max farenthide take my hand.mp3 [2009-08-28 12:27:32 | 03,272,651 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\the ian carey project - get shaky.mp3 [2009-08-28 12:26:43 | 03,361,676 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\kendi - connected.mp3 [2009-08-28 12:20:03 | 05,389,196 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\atb - what about us .mp3 [2009-08-26 13:39:40 | 00,098,914 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\tCBBa.jpg [2009-08-25 12:33:02 | 00,071,092 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\aaaaaaa.jpg [2009-08-22 22:52:46 | 00,024,247 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\40_Days_and_40_Nights_(NAPiSY-41151).NS.zip [2009-08-20 18:41:29 | 00,161,240 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\screen8.jpg [2009-08-20 14:17:48 | 04,163,323 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\12. bezimienni - piona-wtf.mp3 [2009-08-20 13:06:25 | 07,225,429 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Bezimienni%20Walka%202008%20-6.rar [2009-08-18 18:19:18 | 00,038,522 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\familyguystewieyousuckb.jpg [2009-08-16 12:05:44 | 06,260,223 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\future_prophecies_-_september.mp3 [2009-08-15 00:52:40 | 03,836,897 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\flipsyde - someday.mp3 [color=#E56717]========== LOP Check ==========[/color] [2009-08-06 18:18:03 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji [2009-07-22 17:28:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DFX [2009-08-16 20:47:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2009-07-22 18:30:08 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji [2009-07-22 16:49:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji [2009-07-22 16:49:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji [2009-08-10 20:01:53 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji [2009-07-23 11:18:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\4shared Desktop [2009-09-09 17:10:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\alot [2009-07-22 17:13:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\ATI [2009-09-12 13:49:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\DMCache [2009-07-22 17:21:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\Gadu-Gadu [2009-08-10 20:01:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\GanymedeNet [2009-08-06 15:38:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\IDM [2009-08-16 15:49:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\Nowe Gadu-Gadu [2009-07-24 01:12:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\OpenFM [2009-07-22 17:23:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\teamspeak2 [2009-07-22 22:01:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\Thinstall [2009-07-26 16:52:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\uTorrent [2001-07-21 22:17:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-09-13 12:56:27 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 584 · przez **Andziorka** 13 Wrz 2009, 13:12

W okienko OTL wklej poniższy skrypt i klik na Run Fix:

:Processes
explorer.exe

:OTL
O2 - BHO: (ALOT Toolbar) - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (Miva)
O3 - HKLM\..\Toolbar: (ALOT Toolbar) - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (Miva)

:Files
C:\RECYCLER
C:\Program Files\AskBardis
C:\Program Files\alot

Dajesz loga.

**Posty:** 174 · przez **tekladg** 13 Wrz 2009, 13:24

usuwanie

Kod: Zaznacz wszystko: ========== PROCESSES ========== Process explorer.exe killed successfully! ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5AA2BA46-9913-4dc7-9620-69AB0FA17AE7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5AA2BA46-9913-4dc7-9620-69AB0FA17AE7}\ deleted successfully. C:\Program Files\alot\bin\alot.dll unregistered successfully. C:\Program Files\alot\bin\alot.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5AA2BA46-9913-4dc7-9620-69AB0FA17AE7}\ not found. File C:\Program Files\alot\bin\alot.dll not found. ========== FILES ========== C:\RECYCLER\S-1-5-21-1229272821-2077806209-1801674531-1003 moved successfully. C:\RECYCLER moved successfully. C:\Program Files\AskBardis\bar\Settings moved successfully. C:\Program Files\AskBardis\bar moved successfully. C:\Program Files\AskBardis moved successfully. C:\Program Files\alot\bin moved successfully. C:\Program Files\alot moved successfully. OTL by OldTimer - Version 3.0.11.0 log created on 09132009_132018

Nowy:

Kod: Zaznacz wszystko: OTL logfile created on: 2009-09-13 13:20:50 - Run 3 OTL by OldTimer - Version 3.0.11.0 Folder = C:\Documents and Settings\Tekla\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,48 Mb Total Physical Memory | 639,52 Mb Available Physical Memory | 62,48% Memory free 1,92 Gb Paging File | 1,63 Gb Available in Paging File | 85,24% Paging File free Paging file location(s): C:\pagefile.sys 1036 2072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 9,77 Gb Total Space | 2,59 Gb Free Space | 26,47% Space Free | Partition Type: NTFS Drive D: | 11,72 Gb Total Space | 0,73 Gb Free Space | 6,20% Space Free | Partition Type: NTFS Drive E: | 27,34 Gb Total Space | 3,19 Gb Free Space | 11,66% Space Free | Partition Type: NTFS Drive F: | 27,49 Gb Total Space | 1,01 Gb Free Space | 3,68% Space Free | Partition Type: NTFS Drive G: | 4,36 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: TEKLA-6E33FAC39 Current User Name: Tekla Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2006-05-03 18:43:46 | 00,413,696 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2006-05-03 18:43:46 | 00,413,696 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2005-01-28 13:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe PRC - [2006-01-02 16:41:22 | 00,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe PRC - [2006-01-02 16:41:22 | 00,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe PRC - [2006-01-02 16:41:22 | 00,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe PRC - [2009-09-10 17:03:01 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-09-13 11:43:44 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Tekla\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found -- -- (ASKUpgrade [Disabled | Stopped]) SRV - [2005-09-23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2006-05-03 18:43:46 | 00,413,696 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running]) SRV - [2006-05-03 11:57:00 | 00,520,192 | ---- | M] () -- C:\WINDOWS\System32\ati2sgag.exe -- (ATI Smart [Auto | Stopped]) SRV - [2005-09-23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-04-14 22:50:46 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2008-09-19 16:53:18 | 01,483,800 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 9\InCD\InCDSrv.exe -- (InCDSrv [Disabled | Stopped]) SRV - [2009-09-02 20:15:37 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Disabled | Stopped]) SRV - [2008-09-19 16:53:16 | 00,108,568 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe -- (NeroRegInCDSrv [Disabled | Stopped]) SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [Disabled | Stopped]) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [Disabled | Stopped]) SRV - [2005-01-28 13:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe -- (UMWdf [Auto | Running]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2006-05-03 18:50:42 | 01,540,608 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running]) DRV - [2003-05-01 12:08:52 | 00,743,367 | ---- | M] (C-Media Inc) -- C:\WINDOWS\System32\drivers\cmuda.sys -- (cmuda [On_Demand | Running]) DRV - [2004-08-22 16:31:10 | 00,155,136 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus [Boot | Running]) DRV - [2004-08-22 16:31:48 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt [Boot | Running]) DRV - [2001-08-17 22:11:06 | 00,066,591 | ---- | M] (3Com Corporation) -- C:\WINDOWS\System32\DRIVERS\el90xbc5.sys -- (EL90XBC [On_Demand | Running]) DRV - [2008-09-19 16:53:16 | 00,129,560 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\DRIVERS\InCDFs.sys -- (InCDFs [On_Demand | Running]) DRV - [2008-09-19 16:53:16 | 00,040,216 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\DRIVERS\InCDPass.sys -- (InCDPass [System | Running]) DRV - [2008-09-19 16:53:18 | 00,041,752 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\DRIVERS\InCDRm.sys -- (InCDRm [System | Running]) DRV - [2001-08-17 21:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-04-13 22:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2009-09-01 14:28:29 | 00,023,600 | ---- | M] (EnTech Taiwan) -- C:\WINDOWS\System32\DRIVERS\TVICHW32.SYS -- (TVICHW32 [On_Demand | Stopped]) DRV - [2002-12-27 04:41:00 | 00,026,880 | ---- | M] (VIA Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1 [Boot | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\S-1-5-21-1229272821-2077806209-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledItems: {E9A1DEE0-C623-4439-8932-001E7D17607D}:2.1.0.5 FF - prefs.js..extensions.enabledItems: amin.eft_Shutdown@gmail.com:3.5.1A FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.2.0.2 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {eaf8a4ef-d221-45ca-9deb-d0934b45fa34}:1.3.0.3 FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.10.1 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.3 FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-09-02 20:15:39 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-09-13 11:31:26 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-09-10 17:03:09 | 00,000,000 | ---D | M] [2009-07-22 17:24:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Extensions [2009-07-22 17:24:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-09-13 00:07:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions [2009-07-22 17:29:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2009-09-02 20:29:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2009-07-26 16:30:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2009-08-15 20:46:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\{eaf8a4ef-d221-45ca-9deb-d0934b45fa34} [2009-07-26 00:33:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\mozilla\Firefox\Profiles\1g7v9k1x.default\extensions\amin.eft_Shutdown@gmail.com [2009-07-22 17:29:47 | 00,001,201 | ---- | M] () -- C:\Documents and Settings\Tekla\Dane aplikacji\Mozilla\FireFox\Profiles\1g7v9k1x.default\searchplugins\winamp-search.xml [2009-09-13 00:07:31 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-09-10 17:03:09 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009-09-02 20:15:58 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} [2009-09-10 17:02:59 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-09-10 17:02:59 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-08-27 18:37:48 | 00,873,976 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPCARDS.dll [2009-09-02 20:15:37 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll [2009-09-10 17:03:03 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2006-10-26 20:12:16 | 00,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2009-01-28 20:46:54 | 00,307,200 | ---- | M] (ESKA) -- C:\Program Files\mozilla firefox\plugins\npOggX.dll [2008-09-10 21:56:44 | 00,144,960 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2008-09-10 21:37:54 | 00,094,208 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2009-07-15 21:00:25 | 00,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-07-15 21:00:25 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2009-07-15 21:00:25 | 00,002,371 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2009-07-15 21:00:25 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2009-07-15 21:00:25 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2009-07-15 21:00:25 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-07-15 21:00:25 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Tekla\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.) O4 - HKLM..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1229272821-2077806209-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Download all 4shared files - C:\Program Files\4shared Desktop\down_all.htm () O8 - Extra context menu item: &Download using 4shared Desktop - C:\Program Files\4shared Desktop\down_link.htm () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm () O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.2 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\Ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-07-22 16:44:23 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2008-12-19 15:19:06 | 00,000,000 | ---D | M] - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2008-12-19 15:19:07 | 00,000,000 | ---D | M] - E:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2008-12-19 15:19:07 | 00,000,000 | ---D | M] - F:\autorun.inf -- [ NTFS ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-09-13 12:25:45 | 00,400,192 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\Silent Runners.vbs [2009-09-13 11:46:06 | 00,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Tekla\Pulpit\HiJackThis.exe [2009-09-13 11:44:51 | 00,000,000 | ---D | C] -- C:\_OTL [2009-09-13 11:43:41 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Tekla\Pulpit\OTL.exe [2009-09-12 14:08:25 | 01,125,044 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\DVR-112D_FW122EU.EXE [2009-09-12 14:08:25 | 00,042,483 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\DVR-112D Supported Media List Ver122.pdf [2009-09-12 14:08:14 | 01,116,263 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\DVR112D_FW122EU.zip [2009-09-12 10:51:57 | 02,550,835 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\happysad- psychologa.mp3 [2009-09-11 15:59:31 | 00,000,000 | ---D | C] -- C:\Wspólnicy z przypadku (2009) PL [2009-09-09 17:32:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\Nowy folder (2) [2009-09-09 17:04:43 | 00,001,494 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\rapidshare_remote_uploads.zip [2009-09-09 13:39:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\cache [2009-09-09 08:04:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel [2009-09-07 20:28:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\spec_bd [2009-09-07 20:27:58 | 00,583,566 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\spec_bd.rar [2009-09-03 23:57:31 | 00,014,882 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\Ekspresjonizm w literaturze.docx [2009-09-03 23:53:53 | 00,017,946 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\Geneza Przedwiośnia jest ściśle związana z sytuacją społeczno.docx [2009-09-02 20:16:53 | 00,000,760 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\JDownloader.lnk [2009-09-02 18:01:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\RapidShare [2009-09-02 18:01:20 | 00,002,350 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\RapidShare Manager.lnk [2009-09-02 18:01:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\RapidShare_Managerv1.1_2008 [2009-09-02 18:00:48 | 01,058,752 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\RapidShare_Managerv1.1_2008.rar [2009-09-01 16:42:32 | 00,120,417 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\abc.jpg [2009-09-01 14:28:30 | 00,001,037 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\BiosAgent Plus.lnk [2009-09-01 14:28:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\eSupport.com [2009-09-01 14:27:43 | 00,431,800 | ---- | C] (Copyright © 2009 Phoenix Technologies LTD. All Rights Reserved.) -- C:\Documents and Settings\Tekla\Pulpit\biosagentplus_40.exe [2009-09-01 14:24:29 | 00,000,787 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\EVEREST Ultimate Edition.lnk [2009-09-01 14:24:25 | 00,000,000 | ---D | C] -- C:\Program Files\Lavalys [2009-08-28 17:35:07 | 00,041,984 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\formularz zgloszeniowy ESJO edycja wrzesniowa.doc [2009-08-28 16:08:37 | 07,559,689 | ---- | C] () -- C:\Documents and Settings\Tekla\Moje dokumenty\wmaut4.jpg [2009-08-28 12:48:01 | 03,206,196 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\antoine clamaran - gold.mp3 [2009-08-28 12:39:09 | 03,167,744 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\cobra starship - good girls go bad feat leighton meester.mp3 [2009-08-28 12:26:13 | 03,299,369 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\max farenthide take my hand.mp3 [2009-08-28 12:24:49 | 03,272,651 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\the ian carey project - get shaky.mp3 [2009-08-28 12:23:46 | 03,361,676 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\kendi - connected.mp3 [2009-08-28 12:15:34 | 05,389,196 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\atb - what about us .mp3 [2009-08-28 11:57:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\Nowy folder [2009-08-26 13:39:39 | 00,098,914 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\tCBBa.jpg [2009-08-25 12:29:36 | 00,071,092 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\aaaaaaa.jpg [2009-08-22 22:54:34 | 00,052,143 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\40 Days And 40 Nights.001.bak [2009-08-22 22:52:44 | 00,024,247 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\40_Days_and_40_Nights_(NAPiSY-41151).NS.zip [2009-08-20 18:41:27 | 00,161,240 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\screen8.jpg [2009-08-20 14:14:03 | 04,163,323 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\12. bezimienni - piona-wtf.mp3 [2009-08-20 13:06:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Tekla\Pulpit\Bezimienni%20Walka%202008%20-6 [2009-08-20 13:04:51 | 07,225,429 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\Bezimienni%20Walka%202008%20-6.rar [2009-08-18 18:19:17 | 00,038,522 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\familyguystewieyousuckb.jpg [2009-08-16 12:04:53 | 06,260,223 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\future_prophecies_-_september.mp3 [2009-08-15 00:49:23 | 03,836,897 | ---- | C] () -- C:\Documents and Settings\Tekla\Pulpit\flipsyde - someday.mp3 [2009-07-24 22:53:56 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-07-24 22:53:55 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-07-24 22:53:52 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-07-24 22:53:52 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-07-24 22:53:51 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-07-24 22:53:51 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-07-24 22:53:50 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-07-22 17:42:07 | 00,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys [2009-07-22 17:42:07 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys [2009-07-22 17:30:47 | 00,010,752 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2009-07-22 16:59:37 | 00,002,501 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-07-22 16:56:35 | 00,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI [2009-07-22 16:56:35 | 00,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI [2009-07-22 16:56:31 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Wininit.ini [2009-07-22 16:56:30 | 01,900,544 | ---- | C] () -- C:\WINDOWS\System32\cmiwcnfg.dll [2009-07-22 16:56:30 | 00,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll [2009-07-22 16:56:19 | 00,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll [2004-08-22 17:04:56 | 00,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll [2001-07-21 22:16:20 | 00,000,512 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 22:15:52 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-09-13 13:14:54 | 00,030,208 | ---- | M] () -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-09-13 12:56:27 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-09-13 12:56:26 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-09-13 12:56:23 | 10,732,70784 | -HS- | M] () -- C:\hiberfil.sys [2009-09-13 12:30:17 | 00,002,501 | ---- | M] () -- C:\WINDOWS\wincmd.ini [2009-09-13 12:25:50 | 00,400,192 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Silent Runners.vbs [2009-09-13 11:46:06 | 00,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Tekla\Pulpit\HiJackThis.exe [2009-09-13 11:43:44 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Tekla\Pulpit\OTL.exe [2009-09-13 11:34:49 | 04,805,676 | -H-- | M] () -- C:\Documents and Settings\Tekla\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-09-13 11:34:43 | 00,000,512 | ---- | M] () -- C:\WINDOWS\win.ini [2009-09-13 11:34:43 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2009-09-13 11:34:43 | 00,000,211 | -HS- | M] () -- C:\boot.ini [2009-09-12 14:08:18 | 01,116,263 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\DVR112D_FW122EU.zip [2009-09-12 10:51:58 | 02,550,835 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\happysad- psychologa.mp3 [2009-09-10 06:50:46 | 00,283,505 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Suspect_Zero_(NAPiSY-63958).zip [2009-09-09 17:05:03 | 00,001,494 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\rapidshare_remote_uploads.zip [2009-09-08 15:24:45 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-09-07 20:28:01 | 00,583,566 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\spec_bd.rar [2009-09-05 12:41:51 | 00,009,299 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\ISO1_DVD.nri [2009-09-04 18:32:36 | 00,000,721 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\log.xml [2009-09-04 18:32:36 | 00,000,205 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\settings.ini [2009-09-03 23:57:31 | 00,014,882 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Ekspresjonizm w literaturze.docx [2009-09-03 23:53:54 | 00,017,946 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Geneza Przedwiośnia jest ściśle związana z sytuacją społeczno.docx [2009-09-02 20:16:51 | 00,000,760 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\JDownloader.lnk [2009-09-02 18:01:20 | 00,002,350 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\RapidShare Manager.lnk [2009-09-02 18:01:02 | 01,058,752 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\RapidShare_Managerv1.1_2008.rar [2009-09-02 17:56:13 | 00,020,480 | ---- | M] (RapidShare AG) -- C:\Documents and Settings\Tekla\Pulpit\RSMInit.exe [2009-09-01 16:42:33 | 00,120,417 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\abc.jpg [2009-09-01 14:28:30 | 00,001,037 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\BiosAgent Plus.lnk [2009-09-01 14:27:48 | 00,431,800 | ---- | M] (Copyright © 2009 Phoenix Technologies LTD. All Rights Reserved.) -- C:\Documents and Settings\Tekla\Pulpit\biosagentplus_40.exe [2009-09-01 14:24:29 | 00,000,787 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\EVEREST Ultimate Edition.lnk [2009-08-28 17:35:09 | 00,041,984 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\formularz zgloszeniowy ESJO edycja wrzesniowa.doc [2009-08-28 16:09:39 | 07,559,689 | ---- | M] () -- C:\Documents and Settings\Tekla\Moje dokumenty\wmaut4.jpg [2009-08-28 12:50:40 | 03,206,196 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\antoine clamaran - gold.mp3 [2009-08-28 12:41:48 | 03,167,744 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\cobra starship - good girls go bad feat leighton meester.mp3 [2009-08-28 12:28:57 | 03,299,369 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\max farenthide take my hand.mp3 [2009-08-28 12:27:32 | 03,272,651 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\the ian carey project - get shaky.mp3 [2009-08-28 12:26:43 | 03,361,676 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\kendi - connected.mp3 [2009-08-28 12:20:03 | 05,389,196 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\atb - what about us .mp3 [2009-08-26 13:39:40 | 00,098,914 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\tCBBa.jpg [2009-08-25 12:33:02 | 00,071,092 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\aaaaaaa.jpg [2009-08-22 22:52:46 | 00,024,247 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\40_Days_and_40_Nights_(NAPiSY-41151).NS.zip [2009-08-20 18:41:29 | 00,161,240 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\screen8.jpg [2009-08-20 14:17:48 | 04,163,323 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\12. bezimienni - piona-wtf.mp3 [2009-08-20 13:06:25 | 07,225,429 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\Bezimienni%20Walka%202008%20-6.rar [2009-08-18 18:19:18 | 00,038,522 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\familyguystewieyousuckb.jpg [2009-08-16 12:05:44 | 06,260,223 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\future_prophecies_-_september.mp3 [2009-08-15 00:52:40 | 03,836,897 | ---- | M] () -- C:\Documents and Settings\Tekla\Pulpit\flipsyde - someday.mp3 [color=#E56717]========== LOP Check ==========[/color] [2009-08-06 18:18:03 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji [2009-07-22 17:28:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DFX [2009-08-16 20:47:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2009-07-22 18:30:08 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji [2009-07-22 16:49:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji [2009-07-22 16:49:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji [2009-08-10 20:01:53 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji [2009-07-23 11:18:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\4shared Desktop [2009-09-09 17:10:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\alot [2009-07-22 17:13:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\ATI [2009-09-12 13:49:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\DMCache [2009-07-22 17:21:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\Gadu-Gadu [2009-08-10 20:01:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\GanymedeNet [2009-08-06 15:38:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\IDM [2009-08-16 15:49:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\Nowe Gadu-Gadu [2009-07-24 01:12:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\OpenFM [2009-07-22 17:23:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\teamspeak2 [2009-07-22 22:01:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\Thinstall [2009-07-26 16:52:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Tekla\Dane aplikacji\uTorrent [2001-07-21 22:17:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-09-13 12:56:27 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 584 · przez **Andziorka** 13 Wrz 2009, 13:31

Uruchom OTL, kliknij na CleanUp.
Przeskanuj komputer tym: http://www.programosy.pl/program,malwarebytes-anti-malware.html usuń wszystko co znajdzie i daj loga po kasowaniu (loga z Malware)

**Posty:** 174 · przez **tekladg** 13 Wrz 2009, 14:17

Szybkie skanowanie nic nie znalazło

Na wszelki robie Pełne

**Posty:** 584 · przez **Andziorka** 13 Wrz 2009, 15:03

Zrób pełne. Zapomniałam napisać.
Napisz też jak po skanowaniu zachowuje się komputer, czy widać poprawę.

Kto jest na forum