Bds/pcclient.gv.176 i inne

**Posty:** 10 · przez **TLS4** 27 Lip 2009, 14:49

Witam! Od jakiegoś czasu Avira znajduje mi trojany/wirusy które niby naprawia, usuwa lub przenosi do kwarantanny, jednak po ponownym włączeniu skanowaniu od nowa je znajduje i coś z nimi robi (choć tak na prawdę pewnie nic z nimi nie robi). Podczas gdy włącza mi się wygaszacz ekranu Avira czesto krzyczy, że znalazła wirusa. jeżeli szybko odblokuję komputer to zobaczę co tam znalazła, ale jeżeli poczekam parę sekund dłużej okno samo znika... tutaj daję log ze skanowania http://wklej.org/id/126741/ . wyskakują mi zawsze takie komunikaty podczas skanowania, co ciekawe te same "wirusy" mam na obydwu komputerach:

i

Druga sprawa to fakt, że ostatnio po przeskanowaniu obydwu komputerów a-squaredem i usunięciu tego samego trojana zniknął mi windowsowy kalkulator. Jest jakaś możliwość by go odzyskać? Prosze o pomoc

**Posty:** 2183 · przez **NieWiem** 27 Lip 2009, 15:00

TLS4, bez loga to Ci tutaj nikt nic nie powie.

przeczytaj-zanim-wstawisz-logi-na-forum-vt93842.html

**Posty:** 10 · przez **TLS4** 27 Lip 2009, 16:02

Kod: Zaznacz wszystko: OTL logfile created on: 2009-07-27 15:46:00 - Run 1 OTL by OldTimer - Version 3.0.10.3 Folder = C:\Documents and Settings\User\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.11) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,87 Gb Available Physical Memory | 93,46% Memory free 4,00 Gb Paging File | 3,75 Gb Available in Paging File | 93,85% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,29 Gb Total Space | 3,78 Gb Free Space | 12,89% Space Free | Partition Type: NTFS Drive D: | 19,53 Gb Total Space | 12,35 Gb Free Space | 63,24% Space Free | Partition Type: NTFS Drive E: | 50,11 Gb Total Space | 21,01 Gb Free Space | 41,93% Space Free | Partition Type: NTFS Drive F: | 50,12 Gb Total Space | 8,77 Gb Free Space | 17,50% Space Free | Partition Type: NTFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: WINDOWSMX7F Current User Name: User Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2007-11-19 15:40:08 | 01,183,744 | ---- | M] (Intel Corporation ) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe PRC - [2009-02-16 01:10:22 | 02,402,184 | ---- | M] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\ZoneLabs\vsmon.exe PRC - [2009-06-09 18:03:22 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2009-07-24 23:49:36 | 00,719,392 | ---- | M] (Emsi Software GmbH) -- C:\Program Files\a-squared Free\a2service.exe PRC - [2007-03-21 14:42:38 | 00,364,629 | ---- | M] (Atheros) -- C:\WINDOWS\System32\acs.exe PRC - [2009-06-09 18:03:22 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2008-10-16 19:22:20 | 00,464,264 | ---- | M] () -- C:\Program Files\AskBarDis\bar\bin\AskService.exe PRC - [2006-02-28 13:42:38 | 00,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe PRC - [2007-11-19 16:00:38 | 00,794,624 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe PRC - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2007-11-19 15:35:46 | 00,483,328 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe PRC - [2008-10-23 01:23:12 | 00,241,734 | ---- | M] () -- C:\Program Files\Cyberlink\Shared files\RichVideo.exe PRC - [2006-01-23 04:06:10 | 00,204,800 | ---- | M] () -- C:\Program Files\MaxCrypt2\SysSrvc.exe PRC - [2008-05-14 17:21:16 | 00,037,416 | ---- | M] (Lenovo.) -- C:\WINDOWS\System32\TPHDEXLG.exe PRC - [2006-06-29 22:57:50 | 00,032,768 | ---- | M] () -- C:\WINDOWS\System32\TpKmpSVC.exe PRC - [2009-06-28 18:18:41 | 00,604,416 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe PRC - [2008-10-23 01:22:52 | 00,364,635 | ---- | M] () -- F:\PowerCinema 6\TV Enhance\Kernel\TV\TVECapSvc.exe PRC - [2008-07-29 01:43:00 | 00,094,208 | ---- | M] () -- C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE PRC - [2008-10-23 01:22:52 | 00,172,121 | ---- | M] () -- F:\PowerCinema 6\TV Enhance\Kernel\TV\TVESched.exe PRC - [2008-06-27 17:36:58 | 01,424,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2008-06-09 03:00:00 | 00,165,208 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE PRC - [2008-06-09 03:00:00 | 00,124,248 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXE PRC - [2008-06-06 19:21:04 | 00,181,536 | ---- | M] (Lenovo.) -- C:\WINDOWS\System32\TpShocks.exe PRC - [2008-03-07 20:21:54 | 00,167,936 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint2K\Apoint.exe PRC - [2008-03-05 14:48:34 | 00,141,848 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxtray.exe PRC - [2008-03-05 14:48:18 | 00,166,424 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\hkcmd.exe PRC - [2008-03-05 14:48:28 | 00,137,752 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxpers.exe PRC - [2006-10-27 01:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) -- F:\MS Office 2007\Office12\GrooveMonitor.exe PRC - [2009-02-16 01:10:22 | 00,981,384 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe PRC - [2008-03-05 14:48:30 | 00,256,536 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxsrvc.exe PRC - [2009-03-09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2008-02-08 20:34:36 | 00,050,472 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint2K\ApMsgFwd.exe PRC - [2009-03-02 12:08:47 | 00,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2006-09-08 15:06:08 | 00,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint2K\Apntex.exe PRC - [2009-04-23 15:51:38 | 00,691,656 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe PRC - [2009-03-04 19:33:00 | 00,270,128 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe PRC - [2008-08-19 09:47:38 | 01,795,656 | ---- | M] (FLASHGET) -- C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe PRC - [2009-07-27 15:29:08 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-07-24 23:49:36 | 00,719,392 | ---- | M] (Emsi Software GmbH) -- C:\Program Files\a-squared Free\a2service.exe -- (a2free [Auto | Running]) SRV - [2007-03-21 14:42:38 | 00,364,629 | ---- | M] (Atheros) -- C:\WINDOWS\System32\acs.exe -- (acs [Auto | Running]) SRV - File not found -- -- (ALG [On_Demand | Stopped]) SRV - [2009-06-09 18:03:22 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService [Auto | Running]) SRV - [2009-06-09 18:03:22 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService [Auto | Running]) SRV - [2008-10-16 19:22:20 | 00,464,264 | ---- | M] () -- C:\Program Files\AskBarDis\bar\bin\AskService.exe -- (ASKService [Auto | Running]) SRV - [2006-02-28 13:42:38 | 00,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Auto | Running]) SRV - File not found -- -- (CiSvc [On_Demand | Stopped]) SRV - [2007-11-19 16:00:38 | 00,794,624 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe -- (EvtEng [Auto | Running]) SRV - [2009-04-19 16:34:34 | 00,655,624 | ---- | M] (Acresso Software Inc.) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service [On_Demand | Stopped]) SRV - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2006-10-27 01:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- F:\MS Office 2007\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [On_Demand | Stopped]) SRV - [2006-10-26 20:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped]) SRV - [2006-10-26 14:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2008-07-29 01:43:00 | 00,094,208 | ---- | M] () -- C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE -- (Power Manager DBC Service [Auto | Running]) SRV - [2007-11-19 15:35:46 | 00,483,328 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe -- (RegSrvc [Auto | Running]) SRV - [2008-10-23 01:23:12 | 00,241,734 | ---- | M] () -- C:\Program Files\Cyberlink\Shared files\RichVideo.exe -- (RichVideo [Auto | Running]) SRV - [2007-11-19 15:40:08 | 01,183,744 | ---- | M] (Intel Corporation ) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe -- (S24EventMonitor [Auto | Running]) SRV - [2006-01-23 04:06:10 | 00,204,800 | ---- | M] () -- C:\Program Files\MaxCrypt2\SysSrvc.exe -- (SysSrvc [Auto | Running]) SRV - [2008-05-14 17:21:16 | 00,037,416 | ---- | M] (Lenovo.) -- C:\WINDOWS\System32\TPHDEXLG.exe -- (TPHDEXLGSVC [Auto | Running]) SRV - [2006-06-29 22:57:50 | 00,032,768 | ---- | M] () -- C:\WINDOWS\System32\TpKmpSVC.exe -- (TpKmpSVC [Auto | Running]) SRV - [2009-06-28 18:18:39 | 00,361,216 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe -- (TuneUp.Defrag [On_Demand | Stopped]) SRV - [2009-06-28 18:18:41 | 00,604,416 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc [Auto | Running]) SRV - [2008-10-23 01:22:52 | 00,364,635 | ---- | M] () -- F:\PowerCinema 6\TV Enhance\Kernel\TV\TVECapSvc.exe -- (TVECapSvc [Auto | Running]) SRV - [2008-10-23 01:22:52 | 00,172,121 | ---- | M] () -- F:\PowerCinema 6\TV Enhance\Kernel\TV\TVESched.exe -- (TVESched [Auto | Running]) SRV - [2009-04-27 14:21:36 | 00,028,928 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll -- (UxTuneUp [Auto | Running]) SRV - [2009-02-16 01:10:22 | 02,402,184 | ---- | M] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\ZoneLabs\vsmon.exe -- (vsmon [Auto | Running]) SRV - [2006-12-01 13:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2007-11-13 09:13:30 | 01,282,400 | R--- | M] (NXP Semiconductors Germany GmbH) -- C:\WINDOWS\System32\DRIVERS\3xHybrid.sys -- (3xHybrid [On_Demand | Running]) DRV - [2008-08-14 07:57:42 | 00,074,720 | ---- | M] (Adobe Systems, Inc.) -- C:\WINDOWS\System32\drivers\adfs.sys -- (adfs [Auto | Running]) DRV - [2008-10-28 21:26:08 | 00,021,361 | ---- | M] (Cisco Systems, Inc.) -- C:\WINDOWS\System32\DRIVERS\AegisP.sys -- (AegisP [Auto | Running]) DRV - [2008-03-07 19:08:08 | 00,154,672 | ---- | M] (Alps Electric Co., Ltd.) -- C:\WINDOWS\System32\DRIVERS\Apfiltr.sys -- (ApfiltrService [On_Demand | Running]) DRV - [2005-05-17 10:20:06 | 00,015,872 | ---- | M] (Atmel, Inc.) -- C:\WINDOWS\System32\DRIVERS\atmeltpm.sys -- (atmeltpm [On_Demand | Running]) DRV - [2009-02-13 11:35:05 | 00,011,608 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio [System | Running]) DRV - [2009-04-28 21:24:01 | 00,055,640 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\DRIVERS\avgntflt.sys -- (avgntflt [Auto | Running]) DRV - [2009-04-28 21:24:01 | 00,096,104 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\DRIVERS\avipbb.sys -- (avipbb [System | Running]) DRV - [2008-06-16 15:28:36 | 00,161,792 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\DRIVERS\b57xp32.sys -- (b57w2k [On_Demand | Stopped]) DRV - [2007-04-27 16:00:58 | 00,666,112 | ---- | M] (Conexant Systems Inc.) -- C:\WINDOWS\System32\drivers\CHDAudN.sys -- (HdAudAddService [On_Demand | Running]) DRV - [2004-08-12 18:45:54 | 00,137,728 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running]) DRV - [2007-03-25 22:43:00 | 00,210,688 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\DRIVERS\HSFHWAZL.sys -- (HSFHWAZL [On_Demand | Running]) DRV - [2007-03-25 22:43:00 | 00,988,032 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\DRIVERS\HSF_DPV.sys -- (HSF_DPV [On_Demand | Running]) DRV - [2008-02-15 13:12:06 | 05,854,752 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\DRIVERS\igxpmp32.sys -- (ialm [On_Demand | Running]) DRV - [2008-07-22 15:33:02 | 00,319,000 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\Drivers\iaStor.sys -- (iaStor [Boot | Running]) DRV - [2005-08-05 05:12:20 | 00,048,640 | ---- | M] (KinoCode, Inc.) -- C:\WINDOWS\System32\drivers\MC2_NT_DRV.sys -- (MC2_NT_DRV [System | Running]) DRV - [2006-06-19 15:26:00 | 00,012,672 | ---- | M] (Conexant) -- C:\WINDOWS\System32\DRIVERS\mdmxsdk.sys -- (mdmxsdk [Auto | Running]) DRV - [2008-04-13 20:16:24 | 00,015,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\MPE.sys -- (MPE [On_Demand | Stopped]) DRV - [2007-11-26 23:37:00 | 02,236,544 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\DRIVERS\NETw4x32.sys -- (NETw4x32 [On_Demand | Running]) DRV - [2008-06-16 15:28:36 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2008-02-21 04:05:38 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2007-11-20 17:39:56 | 00,012,288 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\DRIVERS\s24trans.sys -- (s24trans [Auto | Running]) DRV - [2008-06-16 15:28:36 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2008-05-14 17:21:16 | 00,114,728 | ---- | M] (Lenovo.) -- C:\WINDOWS\System32\DRIVERS\Apsx86.sys -- (Shockprf [Boot | Running]) DRV - [2008-06-16 15:28:36 | 00,062,208 | ---- | M] (Silicon Image, Inc.) -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112 [Boot | Running]) DRV - [2007-08-14 16:46:36 | 00,010,896 | ---- | M] (UPEK Inc.) -- C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys -- (smihlp [Auto | Running]) DRV - [2009-04-24 18:59:04 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2008-11-17 03:24:00 | 00,051,688 | ---- | M] (Check Point Software Technologies LTD) -- C:\WINDOWS\system32\ZoneLabs\srescan.sys -- (srescan [Boot | Running]) DRV - [2009-06-09 18:03:22 | 00,028,520 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\DRIVERS\ssmdrv.sys -- (ssmdrv [System | Running]) DRV - [2007-08-14 16:25:52 | 00,047,376 | ---- | M] (UPEK Inc.) -- C:\WINDOWS\System32\Drivers\tcusb.sys -- (TcUsb [On_Demand | Running]) DRV - [2008-05-14 17:21:16 | 00,019,496 | ---- | M] (Lenovo.) -- C:\WINDOWS\System32\DRIVERS\ApsHM86.sys -- (TPDIGIMN [Boot | Running]) DRV - [2008-07-29 01:43:00 | 00,004,442 | ---- | M] () -- C:\WINDOWS\System32\drivers\Tppwrif.sys -- (TPPWRIF [System | Running]) DRV - [2009-02-16 01:10:26 | 00,353,672 | ---- | M] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsdatant.sys -- (vsdatant [System | Running]) DRV - [2007-03-25 22:42:00 | 00,731,136 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\DRIVERS\HSF_CNXT.sys -- (winachsf [On_Demand | Running]) DRV - [2007-07-03 19:46:24 | 00,057,344 | ---- | M] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\DRIVERS\wsimd.sys -- (WSIMD [On_Demand | Running]) DRV - [2008-05-16 17:41:28 | 00,061,424 | ---- | M] (Cyberlink Corp.) -- F:\PowerCinema 6\PlayMovie\000.fcl -- ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796} [Auto | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.onet.pl" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1 FF - prefs.js..extensions.enabledItems: {E9A1DEE0-C623-4439-8932-001E7D17607D}:2.1.0.5 FF - prefs.js..extensions.enabledItems: {4BBDD651-70CF-4821-84F8-2B918CF89CA3}:6.1 FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.1.9.8 FF - prefs.js..extensions.enabledItems: {1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}:0.3.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.1 FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-01-04 14:43:41 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-07-25 19:03:00 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-07-19 22:44:22 | 00,000,000 | ---D | M] [2008-10-29 01:01:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\mozilla\Extensions [2008-10-29 01:01:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-07-27 15:00:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\mozilla\Firefox\Profiles\8l6taxrw.default\extensions [2009-07-10 00:16:56 | 00,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\mozilla\Firefox\Profiles\8l6taxrw.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2008-10-29 13:35:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\mozilla\Firefox\Profiles\8l6taxrw.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68} [2009-06-26 16:16:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\mozilla\Firefox\Profiles\8l6taxrw.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2009-07-19 15:37:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\mozilla\Firefox\Profiles\8l6taxrw.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009-03-26 20:00:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\mozilla\Firefox\Profiles\8l6taxrw.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2009-07-21 11:28:07 | 00,002,086 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\deppl-pl-de.xml [2008-10-12 00:03:30 | 00,002,365 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\encyklopedia.xml [2009-07-21 11:28:08 | 00,001,984 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\mycroft-project.xml [2007-12-19 21:21:24 | 00,005,514 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\nonsensopedia-polski.xml [2009-07-21 11:28:08 | 00,001,023 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\slownik-synonimow.xml [2007-12-14 13:02:40 | 00,001,014 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\sownik.xml [2009-07-21 11:28:06 | 00,002,050 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\torrentyorg.xml [2009-07-16 22:53:50 | 00,002,471 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\torrentz-search.xml [2009-02-23 01:36:57 | 00,001,994 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\wrzuta.xml [2007-12-11 22:15:28 | 00,002,126 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\FireFox\Profiles\8l6taxrw.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml [2009-07-27 15:00:44 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-07-17 18:10:54 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2008-10-29 13:27:20 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [2009-01-04 14:43:57 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [2009-03-31 20:08:53 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} [2009-07-17 18:10:48 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-07-17 18:10:48 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-05-01 23:02:48 | 01,044,480 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\mozilla firefox\plugins\libdivx.dll [2007-04-10 18:21:08 | 00,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2009-03-09 05:19:09 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll [2009-05-12 20:46:20 | 01,650,992 | ---- | M] (DivX,Inc.) -- C:\Program Files\mozilla firefox\plugins\npdivx32.dll [2009-05-19 00:41:32 | 00,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll [2009-07-17 18:10:51 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2006-10-26 21:12:16 | 00,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2008-09-10 21:56:44 | 00,144,960 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2008-09-10 21:37:54 | 00,094,208 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2009-05-01 23:02:48 | 00,200,704 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\mozilla firefox\plugins\ssldivx.dll [2009-07-03 16:00:32 | 00,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-07-03 16:00:32 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2009-07-03 16:00:32 | 00,002,371 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2009-07-03 16:00:32 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2009-07-03 16:00:32 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2009-07-03 16:00:32 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-07-03 16:00:32 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (27 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (FG2CatchUrl) - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll (FlashGet) O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar1.dll (Ask.com) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - F:\MS Office 2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (ZoneAlarm Spy Blocker Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar1.dll (Ask.com) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Spy Blocker Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar1.dll (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [BLOG] C:\Program Files\ThinkPad\Utilities\BATLOGEX.DLL () O4 - HKLM..\Run: [GrooveMonitor] F:\MS Office 2007\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe (Intel Corporation) O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe (Intel Corporation) O4 - HKLM..\Run: [LPMailChecker] C:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [LPManager] C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [Persistence] C:\WINDOWS\System32\igfxpers.exe (Intel Corporation) O4 - HKLM..\Run: [PSQLLauncher] C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe (UPEK Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe (Lenovo) O4 - HKLM..\Run: [TpShocks] C:\WINDOWS\System32\TpShocks.exe (Lenovo.) O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD) O4 - HKCU..\Run: [AQQ] C:\Program Files\WapSter\WapSter AQQ\AQQ.exe (Creative Team S.A.) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 227 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0 O8 - Extra context menu item: &Download All by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm () O8 - Extra context menu item: &Download by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm () O8 - Extra context menu item: &Pobierz wszystko przez FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm () O8 - Extra context menu item: &Pobrane przez FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - F:\MS Office 2007\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\MS Office 2007\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\MS Office 2007\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\MS Office 2007\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O15 - HKCU\..Trusted Domains: internet ([]about in Internet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - F:\MS Office 2007\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: GinaDLL - (vrlogon.dll) - C:\WINDOWS\System32\vrlogon.dll (UPEK Inc.) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O20 - Winlogon\Notify\psfus: DllName - C:\WINDOWS\system32\psqlpwd.dll - C:\WINDOWS\System32\psqlpwd.dll (UPEK Inc.) O24 - Desktop Components:0 (Bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - F:\MS Office 2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-10-28 19:48:34 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [2009-07-27 15:28:57 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTL.exe [2009-07-27 14:22:34 | 00,023,663 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\wirus2.JPG [2009-07-27 13:25:31 | 00,027,399 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\wirus.JPG [2009-07-26 22:57:52 | 00,000,000 | ---D | C] -- C:\Program Files\Process Revealer Free Edition [2009-07-26 15:01:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVS4YOU [2009-07-26 15:00:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\AVS4YOU [2009-07-26 15:00:24 | 00,000,782 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\AVS TV Box.lnk [2009-07-26 15:00:21 | 00,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc70.dll [2009-07-26 15:00:21 | 00,413,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mpg4c32.dll [2009-07-26 15:00:21 | 00,261,632 | ---- | C] (MainConcept) -- C:\WINDOWS\System32\mcdvd_32.dll [2009-07-26 15:00:21 | 00,221,215 | ---- | C] (DivXNetworks, Inc.) -- C:\WINDOWS\System32\divxdec.ax [2009-07-26 15:00:21 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\xvid.ax [2009-07-26 15:00:20 | 01,700,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GdiPlus.dll [2009-07-26 15:00:20 | 00,536,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr70d.dll [2009-07-26 15:00:20 | 00,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp70.dll [2009-07-26 15:00:20 | 00,344,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr70.dll [2009-07-26 15:00:20 | 00,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll [2009-07-26 15:00:16 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\AVSMedia [2009-07-26 15:00:16 | 00,000,000 | ---D | C] -- C:\Program Files\AVS4YOU [2009-07-26 01:50:02 | 00,810,581 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\awaryjne.zip [2009-07-26 01:40:31 | 00,264,650 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\Counter_Emots.zip [2009-07-25 19:25:30 | 00,000,000 | ---D | C] -- C:\Program Files\Arkadiusz Jachnik [2009-07-25 19:25:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations [2009-07-25 19:24:38 | 07,458,513 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\akalk(dobreprogramy.pl).exe [2009-07-25 19:22:46 | 00,000,000 | ---D | C] -- C:\Program Files\Calculator Prompter [2009-07-25 00:58:33 | 00,000,772 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\AQQ.lnk [2009-07-24 16:49:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\iuLab [2009-07-24 14:53:30 | 00,000,037 | ---- | C] () -- C:\WINDOWS\Grappler.ini [2009-07-24 14:50:35 | 00,000,000 | ---D | C] -- C:\Program Files\FERRO Software [2009-07-24 14:50:28 | 00,007,758 | ---- | C] () -- C:\WINDOWS\Polish_PL.gpl [2009-07-24 14:50:27 | 00,796,672 | ---- | C] (Qsc) -- C:\WINDOWS\GPInstall.exe [2009-07-24 12:29:46 | 01,327,158 | ---- | C] () -- C:\capt0000.bmp [2009-07-24 12:18:25 | 00,000,000 | ---D | C] -- C:\Program Files\ChrisTV Lite [2009-07-24 01:26:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Powercinema [2009-07-24 01:24:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\CyberLink [2009-07-24 01:19:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\TVEnhance [2009-07-24 01:18:57 | 01,233,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4.dll [2009-07-24 01:18:57 | 00,095,232 | ---- | C] (CyberLink) -- C:\WINDOWS\System32\oCLWatson.exe [2009-07-24 01:18:57 | 00,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4r.dll [2009-07-24 01:18:57 | 00,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4a.dll [2009-07-24 01:18:57 | 00,000,917 | ---- | C] () -- C:\WINDOWS\System32\CLWatson.ini [2009-07-24 01:18:25 | 00,000,000 | ---D | C] -- C:\Program Files\Cyberlink [2009-07-24 01:18:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\PlayMovie [2009-07-24 01:17:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\PowerCinema [2009-07-24 01:17:37 | 00,000,740 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CyberLink PowerCinema.lnk [2009-07-24 01:16:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\CyberLink [2009-07-24 00:02:31 | 00,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MSTEE.sys [2009-07-24 00:02:31 | 00,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys [2009-07-24 00:02:29 | 00,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MPE.sys [2009-07-24 00:02:29 | 00,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys [2009-07-24 00:02:25 | 00,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\NdisIP.sys [2009-07-24 00:02:25 | 00,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys [2009-07-24 00:02:24 | 00,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\StreamIP.sys [2009-07-24 00:02:24 | 00,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys [2009-07-24 00:02:23 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax [2009-07-24 00:02:23 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax [2009-07-24 00:02:22 | 00,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\SLIP.sys [2009-07-24 00:02:22 | 00,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys [2009-07-24 00:02:18 | 00,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WSTCODEC.SYS [2009-07-24 00:02:18 | 00,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys [2009-07-24 00:02:15 | 00,085,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\NABTSFEC.sys [2009-07-24 00:02:15 | 00,085,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys [2009-07-24 00:02:12 | 00,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\CCDECODE.sys [2009-07-24 00:02:12 | 00,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys [2009-07-23 23:58:58 | 00,105,056 | R--- | C] (NXP Semiconductors Germany GmbH) -- C:\WINDOWS\System32\NXPMV32.dll [2009-07-23 23:58:58 | 00,009,824 | R--- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll [2009-07-23 23:58:57 | 01,282,400 | R--- | C] (NXP Semiconductors Germany GmbH) -- C:\WINDOWS\System32\drivers\3xHybrid.sys [2009-07-23 23:58:54 | 00,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll [2009-07-23 23:58:54 | 00,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll [2009-07-23 23:58:54 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax [2009-07-23 23:58:54 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vidcap.ax [2009-07-23 23:58:53 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll [2009-07-23 23:58:53 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll [2009-07-23 23:58:53 | 00,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax [2009-07-23 23:58:53 | 00,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax [2009-07-23 23:58:53 | 00,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax [2009-07-23 23:58:53 | 00,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax [2009-07-23 23:58:53 | 00,056,832 | ---- | C] () -- C:\WINDOWS\System32\MSDvbNP.ax [2009-07-23 23:58:53 | 00,056,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax [2009-07-23 23:58:53 | 00,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax [2009-07-23 23:58:53 | 00,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax [2009-07-23 23:58:53 | 00,033,280 | ---- | C] () -- C:\WINDOWS\System32\PsisRndr.ax [2009-07-23 23:58:53 | 00,033,280 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax [2009-07-23 23:58:52 | 00,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdaplgin.ax [2009-07-23 23:58:52 | 00,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BdaPlgIn.ax [2009-07-23 23:58:52 | 00,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\BdaSup.sys [2009-07-23 23:58:52 | 00,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdasup.sys [2009-07-22 16:43:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Pulpit\Notorious[2009]DvDrip[Eng]-FXG [2009-07-22 11:47:24 | 83,899,3920 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\Into the Wild[2007]DvDrip[Eng]-FXG.avi [2009-07-21 13:07:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX [2009-07-20 18:10:02 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-07-20 18:10:01 | 00,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2009-07-20 18:10:01 | 00,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml [2009-07-20 18:10:00 | 00,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-07-20 18:10:00 | 00,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll [2009-07-20 18:10:00 | 00,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-07-20 18:10:00 | 00,118,784 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2009-07-20 18:09:59 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-07-20 18:09:59 | 00,685,056 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx.dll [2009-07-20 18:09:59 | 00,090,112 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dpl100.dll [2009-07-20 18:09:57 | 00,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-07-20 18:09:57 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-07-20 17:56:29 | 00,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-07-20 17:56:25 | 00,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [2009-07-10 22:40:01 | 00,000,000 | ---D | C] -- C:\Program Files\GNU [2009-07-10 20:34:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Moje dokumenty\Pobieranie [2009-07-10 17:26:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\GetRightToGo [2009-07-10 16:20:57 | 00,001,908 | ---- | C] () -- C:\WINDOWS\diagwrn.xml [2009-07-10 16:20:57 | 00,001,908 | ---- | C] () -- C:\WINDOWS\diagerr.xml [2009-07-04 13:53:05 | 02,013,737 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\MOV00752.MP4 [2009-07-03 19:08:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Ares [2009-07-03 19:08:35 | 00,000,000 | ---D | C] -- C:\Program Files\Ares [2009-07-03 13:16:26 | 00,000,011 | R--- | C] () -- C:\WINDOWS\amunres.lsl [2009-06-28 18:18:41 | 00,604,416 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe [2009-06-28 18:18:40 | 00,028,928 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll [2009-06-28 18:18:40 | 00,000,528 | ---- | C] () -- C:\WINDOWS\tasks\Konserwacja 1 kliknięciem.job [2009-06-28 18:18:39 | 00,361,216 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe [2009-06-28 18:18:24 | 00,001,619 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\TuneUp Konserwacja 1 kliknięciem.lnk [2009-06-28 18:18:24 | 00,001,545 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\TuneUp Utilities 2009.lnk [2009-06-28 18:18:06 | 00,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2009 [2009-06-28 18:17:39 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{55A29068-F2CE-456C-9148-C869879E2357} [2009-04-24 20:11:36 | 00,000,032 | ---- | C] () -- C:\WINDOWS\CD_Start.INI [2008-10-29 01:11:08 | 00,796,048 | ---- | C] () -- C:\WINDOWS\System32\libeay32_0.9.6l.dll [2008-10-29 00:57:57 | 00,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2008-10-29 00:42:30 | 00,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2008-10-28 21:29:28 | 00,651,264 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll [2008-10-28 21:29:28 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll [2008-10-28 21:21:44 | 01,399,880 | ---- | C] () -- C:\WINDOWS\System32\igklg450.dll [2008-10-28 21:21:43 | 01,843,784 | ---- | C] () -- C:\WINDOWS\System32\igklg400.dll [2008-10-28 21:21:42 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll [2008-10-28 21:21:42 | 00,104,636 | ---- | C] () -- C:\WINDOWS\System32\igmedcompkrn.dll [2008-10-28 20:45:39 | 00,004,442 | ---- | C] () -- C:\WINDOWS\System32\drivers\TPPWRIF.SYS [2008-07-20 02:16:28 | 00,000,819 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2008-06-16 15:28:36 | 00,000,582 | ---- | C] () -- C:\WINDOWS\win.ini [2008-06-16 15:28:36 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2008-05-29 00:18:04 | 02,854,912 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [2009-07-27 15:29:08 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTL.exe [2009-07-27 15:00:04 | 00,000,528 | ---- | M] () -- C:\WINDOWS\tasks\Konserwacja 1 kliknięciem.job [2009-07-27 14:22:34 | 00,023,663 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\wirus2.JPG [2009-07-27 13:25:31 | 00,027,399 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\wirus.JPG [2009-07-27 11:11:39 | 00,350,192 | ---- | M] () -- C:\WINDOWS\System32\vsconfig.xml [2009-07-27 11:11:36 | 02,329,624 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-07-27 11:11:13 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-07-27 11:11:06 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-07-26 15:01:01 | 00,067,752 | ---- | M] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-07-26 15:00:24 | 00,000,782 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\AVS TV Box.lnk [2009-07-26 01:50:42 | 00,810,581 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\awaryjne.zip [2009-07-26 01:40:40 | 00,264,650 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Counter_Emots.zip [2009-07-25 19:25:05 | 07,458,513 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\akalk(dobreprogramy.pl).exe [2009-07-25 02:25:17 | 00,037,376 | ---- | M] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-07-25 00:58:33 | 00,000,772 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\AQQ.lnk [2009-07-24 16:28:48 | 00,000,037 | ---- | M] () -- C:\WINDOWS\Grappler.ini [2009-07-24 14:50:27 | 00,796,672 | ---- | M] (Qsc) -- C:\WINDOWS\GPInstall.exe [2009-07-24 12:29:47 | 01,327,158 | ---- | M] () -- C:\capt0000.bmp [2009-07-24 02:32:12 | 03,171,566 | -H-- | M] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-07-24 01:17:37 | 00,000,740 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CyberLink PowerCinema.lnk [2009-07-22 11:13:04 | 83,899,3920 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Into the Wild[2007]DvDrip[Eng]-FXG.avi [2009-07-18 22:53:18 | 00,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-07-12 16:00:39 | 00,016,971 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Sondaż przedwyborczy.xlsx [2009-07-10 16:21:00 | 00,001,908 | ---- | M] () -- C:\WINDOWS\diagwrn.xml [2009-07-10 16:21:00 | 00,001,908 | ---- | M] () -- C:\WINDOWS\diagerr.xml [2009-07-04 11:44:02 | 02,013,737 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\MOV00752.MP4 [2009-07-03 13:16:26 | 00,000,011 | R--- | M] () -- C:\WINDOWS\amunres.lsl [2009-06-28 18:18:41 | 00,604,416 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe [2009-06-28 18:18:39 | 00,361,216 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe [2009-06-28 18:18:24 | 00,001,619 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TuneUp Konserwacja 1 kliknięciem.lnk [2009-06-28 18:18:24 | 00,001,545 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TuneUp Utilities 2009.lnk [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:0B89BF7B < End of report >

Proszę:P

**Posty:** 18165 · przez **wojtas** 27 Lip 2009, 17:12

odinstaluj AskBarDis

Daj loga z combofixa ale zainstaluj wraz z nim konsolę odzyskiwania ( instrukcja programu )

**Posty:** 10 · przez **TLS4** 28 Lip 2009, 00:49

Kod: Zaznacz wszystko: ComboFix 09-07-27.02 - User 2009-07-28 0:54.2.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.2550.1948 [GMT 2:00] Uruchomiony z: c:\documents and settings\User\Pulpit\ComboFix.exe . Następujące pliki zostały wyłączone z działania w czasie skanowania: c:\program files\MaxCrypt2\MCFUNC.DLL ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\User\Dane aplikacji\BITS c:\documents and settings\User\Dane aplikacji\BITS\BITS.ini c:\documents and settings\User\Dane aplikacji\BITS\DHTTable.dat c:\documents and settings\User\Dane aplikacji\BITS\ProxyList.ini c:\documents and settings\User\Dane aplikacji\EurekaLog c:\documents and settings\User\Dane aplikacji\EurekaLog\EurekaLog.ini c:\documents and settings\User\User.exe c:\program files\FlashGet Network c:\program files\FlashGet Network\FlashGet universal\btcore.dll c:\program files\FlashGet Network\FlashGet universal\btwrap.dll c:\program files\FlashGet Network\FlashGet universal\BugReport.dll c:\program files\FlashGet Network\FlashGet universal\BugReport.exe c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm c:\program files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bhocfg.ini c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm c:\program files\FlashGet Network\FlashGet universal\ComDlls\ComDlls.ini c:\program files\FlashGet Network\FlashGet universal\ComDlls\flashget.xpi c:\program files\FlashGet Network\FlashGet universal\ComDlls\FlashgetXpi.dll c:\program files\FlashGet Network\FlashGet universal\ComDlls\IFlashgetXpi.xpt c:\program files\FlashGet Network\FlashGet universal\dbghelp.dll c:\program files\FlashGet Network\FlashGet universal\DBTrans.dll c:\program files\FlashGet Network\FlashGet universal\dbtrans_verbose.log c:\program files\FlashGet Network\FlashGet universal\DBTransC.exe c:\program files\FlashGet Network\FlashGet universal\ed2kwrap.dll c:\program files\FlashGet Network\FlashGet universal\explorerbar.dll c:\program files\FlashGet Network\FlashGet universal\fgoption.ini c:\program files\FlashGet Network\FlashGet universal\FGVer.dll c:\program files\FlashGet Network\FlashGet universal\flashget.exe c:\program files\FlashGet Network\FlashGet universal\gt.exe c:\program files\FlashGet Network\FlashGet universal\hashgen.dll c:\program files\FlashGet Network\FlashGet universal\Help\license.txt c:\program files\FlashGet Network\FlashGet universal\Help\Readme.txt c:\program files\FlashGet Network\FlashGet universal\Help\WHATSNEW.TXT c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddBatchLinksDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddBTTask.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Added.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddEMTask.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddHpFpLink.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddLinksDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddLinksDlgEx.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddLinksModern.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\BrowserPlugins.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\BTOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\CategoryView.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ComfirmWhenExitDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\CommonDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ConfirmInvalidLinks.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ContextMenu.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\DefaultDownloadsDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\DeleteFilesDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\DetailStatus.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\EMOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\EMServers.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ExplorerPane.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ExtensionRuleDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FG2SearchTopPlugin.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FileListCtrl.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FileRemovedDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FindTaskDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FlashgetAbout.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FlashGetDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FSUStatusBar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\GarageLoginDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\GarageView.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\HotResource.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\HpFpOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Info.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\LogsOutput.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MACReader.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MainMenu.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MainToolbar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MonitorOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\NormalOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\NotifyOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Option.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\P4PPluginMain.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ProxySetting.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SearchBar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Security.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityScan.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityToolbar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Shutdown.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\StatusBar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskDefOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskListView.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskNotify.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\UserListCtrl.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\XpEnhance.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\AddBatchLinksDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\AddBTTask.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\Added.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\AddEMTask.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\AddHpFpLink.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\AddLinksDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\AddLinksDlgEx.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\AddLinksModern.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\BrowserPlugins.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\BTOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\CategoryView.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\ComfirmWhenExitDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\CommonDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\ConfirmInvalidLinks.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\ContextMenu.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\DefaultDownloadsDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\DeleteFilesDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\DetailStatus.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\EMOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\EMServers.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\ExplorerPane.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\ExtensionRuleDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\FG2SearchTopPlugin.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\FileListCtrl.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\FileRemovedDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\FindTaskDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\FlashgetAbout.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\FlashGetDlg.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\FSUStatusBar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\GarageLoginDialog.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\GarageView.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\HotResource.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\HpFpOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\Info.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\LogsOutput.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\MACReader.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\MainMenu.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\MainToolbar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\MonitorOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\NormalOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\NotifyOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\Option.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\P4PPluginMain.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\ProxySetting.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\SearchBar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\Security.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\SecurityOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\SecurityScan.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\SecurityToolbar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\Shutdown.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\StatusBar.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\TaskDefOption.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\TaskListView.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\TaskNotify.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\UserListCtrl.ini c:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_PL\XpEnhance.ini c:\program files\FlashGet Network\FlashGet universal\libupnp.dll c:\program files\FlashGet Network\FlashGet universal\LiveUpdateUI.dll c:\program files\FlashGet Network\FlashGet universal\modules\ComHelper\ComHelper.dll c:\program files\FlashGet Network\FlashGet universal\modules\ComHelper\Info.ini c:\program files\FlashGet Network\FlashGet universal\modules\Downstat\Downstat.dll c:\program files\FlashGet Network\FlashGet universal\modules\Downstat\Info.ini c:\program files\FlashGet Network\FlashGet universal\modules\P4pclient\Info.ini c:\program files\FlashGet Network\FlashGet universal\modules\P4pclient\P4pclient.dll c:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Info.ini c:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource.ini c:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\iexplorer.bmp c:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\resource.bmp c:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\resource.xml c:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\search.bmp c:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\subscribe.bmp c:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\SearchTop.dll c:\program files\FlashGet Network\FlashGet universal\modules\Security\FunctionalRepair.bmp c:\program files\FlashGet Network\FlashGet universal\modules\Security\Info.ini c:\program files\FlashGet Network\FlashGet universal\modules\Security\Scanning.bmp c:\program files\FlashGet Network\FlashGet universal\modules\Security\Security.bmp c:\program files\FlashGet Network\FlashGet universal\modules\Security\SECURITY.dll c:\program files\FlashGet Network\FlashGet universal\modules\Security\Security.xml c:\program files\FlashGet Network\FlashGet universal\modules\Security\SystemFix.bmp c:\program files\FlashGet Network\FlashGet universal\modules\SnapShot\Info.ini c:\program files\FlashGet Network\FlashGet universal\modules\SnapShot\SamplerCli.dll c:\program files\FlashGet Network\FlashGet universal\modules\SnapShot\SnapShot.dll c:\program files\FlashGet Network\FlashGet universal\modules\tasknotifier\Info.ini c:\program files\FlashGet Network\FlashGet universal\modules\tasknotifier\tasknotifier.dll c:\program files\FlashGet Network\FlashGet universal\P2PCfg.ini c:\program files\FlashGet Network\FlashGet universal\P2PCore.dll c:\program files\FlashGet Network\FlashGet universal\p2pprot.dll c:\program files\FlashGet Network\FlashGet universal\p2snetio.dll c:\program files\FlashGet Network\FlashGet universal\p2spmgr.dll c:\program files\FlashGet Network\FlashGet universal\p2spmgr.ini c:\program files\FlashGet Network\FlashGet universal\p2sprot.dll c:\program files\FlashGet Network\FlashGet universal\p2spwrap.dll c:\program files\FlashGet Network\FlashGet universal\p4spmgr.ini c:\program files\FlashGet Network\FlashGet universal\Profiles\config.dat c:\program files\FlashGet Network\FlashGet universal\Profiles\tasks.dat c:\program files\FlashGet Network\FlashGet universal\Skins\close_default.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\close_press.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\close_select.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\max_default.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\max_press.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\max_select.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\min_default.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\min_press.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\min_select.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\notify.wav c:\program files\FlashGet Network\FlashGet universal\Skins\notify_board.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\notify_icon.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Back.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Backward.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\BrowserBarCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\FlashgetResource.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Forward.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Home.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Backward.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\BrowserBarDisableCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Forward.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Home.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Resource.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Available.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\CategoryTreeCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Downloaded.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Downloading.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Favorite.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Flashget.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Release.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Rubbish.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Search.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\Expbar.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\garage.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\resource.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\transfer.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\BT.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\EM.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\GlobalOptionCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\HpFp.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Monitor.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Normal.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Notify.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Proxy.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\TaskDef.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Info.ini c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\About.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\DeleteTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\folder.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\MainMenuCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\MoveDownTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\MoveUpTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\NewTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\open.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\Option.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\PauseTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\Resource.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\StartTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\TaskProperties.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\About.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\DeleteTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Folder.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\MainToolbarCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\NewTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Open.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Option.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\PauseTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Resource.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\StartTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\TaskProperties.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\About.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\DeleteTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Folder.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\MainToolbarDisableCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\NewTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Open.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Option.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\PauseTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Resource.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\StartTask.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\TaskProperties.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Monitor\InfoBkg.Bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Monitor\MonitorBkg.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Down.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Error.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Normal.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\OutpuLogCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Up.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\All.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Book.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Bt.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Game.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Movie.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Music.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Phone.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Picture.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\SobarIconCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Software.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Error.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\hashing.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\OK.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Pause.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Pin.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Schedule.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Start.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\TaskListCT.xml c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Upload.bmp c:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Wait.bmp c:\program files\FlashGet Network\FlashGet universal\storage.dll c:\program files\FlashGet Network\FlashGet universal\SysOpt.exe c:\program files\FlashGet Network\FlashGet universal\transaction.log c:\program files\FlashGet Network\FlashGet universal\uninst.exe c:\program files\FlashGet Network\FlashGet universal\zlib.dll c:\windows\Installer\18289.msi c:\windows\Installer\518035.msi c:\windows\Installer\a71d4.msi c:\windows\system32\msconfig.exe . ((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_KAVSYS ((((((((((((((((((((((((( Pliki utworzone od 2009-06-27 do 2009-07-27 ))))))))))))))))))))))))))))))) . 2009-07-26 20:57 . 2009-07-26 21:26 -------- d-----w- c:\program files\Process Revealer Free Edition 2009-07-26 13:01 . 2009-07-26 13:01 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\AVS4YOU 2009-07-26 13:00 . 2009-07-26 13:00 -------- d-----w- c:\documents and settings\User\Dane aplikacji\AVS4YOU 2009-07-26 13:00 . 2003-05-21 22:50 261632 ----a-w- c:\windows\system32\mcdvd_32.dll 2009-07-26 13:00 . 2002-08-19 23:41 413760 ----a-w- c:\windows\system32\mpg4c32.dll 2009-07-26 13:00 . 2002-01-05 13:48 974848 ----a-w- c:\windows\system32\mfc70.dll 2009-07-26 13:00 . 2003-05-21 22:50 24576 ----a-w- c:\windows\system32\msxml3a.dll 2009-07-26 13:00 . 2003-05-21 22:50 344064 ----a-w- c:\windows\system32\msvcr70.dll 2009-07-26 13:00 . 2003-05-21 22:50 1700352 ----a-w- c:\windows\system32\GdiPlus.dll 2009-07-26 13:00 . 2002-01-05 13:40 487424 ----a-w- c:\windows\system32\msvcp70.dll 2009-07-26 13:00 . 2002-01-05 12:16 536576 ----a-w- c:\windows\system32\msvcr70d.dll 2009-07-26 13:00 . 2009-07-26 13:00 -------- d-----w- c:\program files\AVS4YOU 2009-07-26 13:00 . 2009-07-26 13:00 -------- d-----w- c:\program files\Common Files\AVSMedia 2009-07-25 17:25 . 2009-07-25 17:25 65536 ----a-r- c:\documents and settings\User\Dane aplikacji\Microsoft\Installer\{0397B1DD-1474-40AE-9A20-6EB5BB999E8B}\NewShortcut1_0397B1DD147440AE9A206EB5BB999E8B.exe 2009-07-25 17:25 . 2009-07-25 17:25 10134 ----a-r- c:\documents and settings\User\Dane aplikacji\Microsoft\Installer\{0397B1DD-1474-40AE-9A20-6EB5BB999E8B}\ARPPRODUCTICON.exe 2009-07-25 17:25 . 2009-07-25 17:25 -------- d-----w- c:\program files\Arkadiusz Jachnik 2009-07-25 17:25 . 2009-07-25 17:25 -------- d-----w- c:\windows\Downloaded Installations 2009-07-25 17:22 . 2009-07-25 17:23 -------- d-----w- c:\program files\Calculator Prompter 2009-07-24 14:49 . 2009-07-24 14:49 -------- d-----w- c:\documents and settings\User\Dane aplikacji\iuLab 2009-07-24 12:50 . 2009-07-24 14:32 -------- d-----w- c:\program files\FERRO Software 2009-07-24 12:50 . 2009-07-24 12:50 796672 ----a-w- c:\windows\GPInstall.exe 2009-07-24 10:18 . 2009-07-24 12:33 -------- d-----w- c:\program files\ChrisTV Lite 2009-07-24 00:01 . 2009-07-24 00:01 -------- d-----w- c:\documents and settings\LocalService\Dane aplikacji\CyberLink 2009-07-23 23:26 . 2009-07-23 23:26 -------- d-----w- c:\documents and settings\User\Ustawienia lokalne\Dane aplikacji\Powercinema 2009-07-23 23:24 . 2009-07-23 23:24 -------- d-----w- c:\documents and settings\User\Dane aplikacji\CyberLink 2009-07-23 23:19 . 2009-07-24 00:04 -------- d-----w- c:\documents and settings\User\Ustawienia lokalne\Dane aplikacji\TVEnhance 2009-07-23 23:18 . 2008-10-22 23:22 95232 ----a-w- c:\windows\system32\oCLWatson.exe 2009-07-23 23:18 . 2008-10-22 23:22 82432 ----a-w- c:\windows\system32\msxml4r.dll 2009-07-23 23:18 . 2008-10-22 23:22 44544 ----a-w- c:\windows\system32\msxml4a.dll 2009-07-23 23:18 . 2008-10-22 23:22 1233920 ----a-w- c:\windows\system32\msxml4.dll 2009-07-23 23:18 . 2009-07-23 23:18 -------- d-----w- c:\program files\Cyberlink 2009-07-23 23:18 . 2009-07-24 10:07 -------- d-----w- c:\documents and settings\User\Ustawienia lokalne\Dane aplikacji\PlayMovie 2009-07-23 23:17 . 2009-07-23 23:22 -------- d-----w- c:\documents and settings\User\Dane aplikacji\PowerCinema 2009-07-23 23:16 . 2009-07-23 23:16 36864 ----a-w- c:\documents and settings\All Users\Dane aplikacji\TEMP\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\PostBuild.exe 2009-07-23 23:16 . 2009-07-24 00:00 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\CyberLink 2009-07-23 23:15 . 2009-07-23 23:15 53319 ----a-w- c:\documents and settings\All Users\Dane aplikacji\TEMP\{5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41}\PostBuild.exe 2009-07-23 21:58 . 2007-11-13 07:13 105056 ----a-r- c:\windows\system32\NXPMV32.dll 2009-07-23 21:58 . 2007-11-13 07:13 9824 ----a-r- c:\windows\system32\34CoInstaller.dll 2009-07-23 21:58 . 2007-11-13 07:13 1282400 ----a-r- c:\windows\system32\drivers\3xHybrid.sys 2009-07-23 21:58 . 2008-04-14 16:50 54784 ----a-w- c:\windows\system32\vfwwdm32.dll 2009-07-23 21:58 . 2008-04-14 16:50 54784 ----a-w- c:\windows\system32\dllcache\vfwwdm32.dll 2009-07-23 21:58 . 2008-04-14 16:50 363520 ----a-w- c:\windows\system32\PsisDecd.dll 2009-07-23 21:58 . 2008-04-14 16:50 363520 ----a-w- c:\windows\system32\dllcache\psisdecd.dll 2009-07-23 21:58 . 2008-04-13 18:16 11776 ----a-w- c:\windows\system32\drivers\BdaSup.sys 2009-07-23 21:58 . 2008-04-13 18:16 11776 ----a-w- c:\windows\system32\dllcache\bdasup.sys 2009-07-20 16:10 . 2004-07-03 20:08 139264 ----a-w- c:\windows\system32\xvidvfw.dll 2009-07-20 16:10 . 2004-07-03 19:59 524288 ----a-w- c:\windows\system32\xvidcore.dll 2009-07-20 16:10 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll 2009-07-20 16:09 . 2009-05-01 21:02 90112 ----a-w- c:\windows\system32\dpl100.dll 2009-07-20 16:09 . 2009-05-01 21:02 685056 ----a-w- c:\windows\system32\divx.dll 2009-07-20 16:09 . 2008-11-06 16:37 3596288 ----a-w- c:\windows\system32\qt-dx331.dll 2009-07-20 16:09 . 2009-06-02 16:11 85504 ----a-w- c:\windows\system32\ff_vfw.dll 2009-07-20 15:56 . 2008-09-16 19:23 168448 ----a-w- c:\windows\system32\unrar.dll 2009-07-20 15:56 . 2009-07-20 16:10 -------- d-----w- c:\program files\K-Lite Codec Pack 2009-07-10 20:40 . 2009-07-10 20:40 -------- d-----w- c:\program files\GNU 2009-07-10 15:26 . 2009-07-10 15:26 -------- d-----w- c:\documents and settings\User\Dane aplikacji\GetRightToGo 2009-07-03 17:08 . 2009-07-03 17:08 -------- d-----w- c:\documents and settings\User\Ustawienia lokalne\Dane aplikacji\Ares 2009-07-03 17:08 . 2009-07-03 17:08 -------- d-----w- c:\program files\Ares 2009-06-28 16:18 . 2009-06-28 16:18 604416 ----a-w- c:\windows\system32\TUProgSt.exe 2009-06-28 16:18 . 2009-04-27 12:21 28928 ----a-w- c:\windows\system32\uxtuneup.dll 2009-06-28 16:18 . 2009-06-28 16:18 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe 2009-06-28 16:18 . 2009-06-28 16:19 -------- d-----w- c:\program files\TuneUp Utilities 2009 2009-06-28 16:17 . 2009-06-28 16:17 -------- d-sh--w- c:\documents and settings\All Users\Dane aplikacji\{55A29068-F2CE-456C-9148-C869879E2357} . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-27 22:59 . 2008-11-02 13:08 -------- d-----w- c:\program files\MaxCrypt2 2009-07-27 22:12 . 2008-10-29 11:34 169936 ----a-w- c:\documents and settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\8l6taxrw.default\FlashGot.exe 2009-07-27 13:55 . 2008-10-28 22:59 -------- d-----w- c:\documents and settings\User\Dane aplikacji\uTorrent 2009-07-26 21:06 . 2008-11-02 13:10 -------- d---a-w- c:\documents and settings\All Users\Dane aplikacji\TEMP 2009-07-26 13:01 . 2008-10-28 19:24 67752 ----a-w- c:\documents and settings\User\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2009-07-26 12:30 . 2008-10-28 22:18 -------- d-----w- c:\program files\a-squared Free 2009-07-26 01:18 . 2009-07-26 10:08 50688 ----a-w- c:\windows\Internet Logs\xDB41.tmp 2009-07-25 17:05 . 2009-07-25 17:06 65024 ----a-w- c:\windows\Internet Logs\xDB40.tmp 2009-07-24 23:54 . 2008-10-31 17:46 16533086 ----a-w- c:\windows\Internet Logs\tvDebug.zip 2009-07-24 23:52 . 2009-07-24 23:54 80384 ----a-w- c:\windows\Internet Logs\xDB3F.tmp 2009-07-24 00:32 . 2009-07-24 10:06 56832 ----a-w- c:\windows\Internet Logs\xDB3E.tmp 2009-07-23 23:22 . 2008-10-28 18:39 -------- d--h--w- c:\program files\InstallShield Installation Information 2009-07-23 18:25 . 2009-07-23 21:47 48128 ----a-w- c:\windows\Internet Logs\xDB3D.tmp 2009-07-22 23:07 . 2009-07-23 00:07 2981888 ----a-w- c:\windows\Internet Logs\xDB3C.tmp 2009-07-21 11:08 . 2009-07-21 11:09 2328064 ----a-w- c:\windows\Internet Logs\xDB3B.tmp 2009-07-21 11:07 . 2009-07-21 11:09 3107840 ----a-w- c:\windows\Internet Logs\xDB3A.tmp 2009-07-20 16:09 . 2008-10-28 20:08 -------- d-----w- c:\program files\DivX 2009-07-20 16:01 . 2009-07-20 16:02 311296 ----a-w- c:\windows\Internet Logs\xDB38.tmp 2009-07-20 16:01 . 2009-07-20 16:02 2319360 ----a-w- c:\windows\Internet Logs\xDB39.tmp 2009-07-20 00:30 . 2009-07-20 08:51 339968 ----a-w- c:\windows\Internet Logs\xDB37.tmp 2009-07-19 20:44 . 2008-10-28 20:09 -------- d-----w- c:\program files\Real Alternative 2009-07-18 20:54 . 2009-07-18 21:18 17920 ----a-w- c:\windows\Internet Logs\xDB36.tmp 2009-07-17 22:34 . 2009-07-18 20:53 1713664 ----a-w- c:\windows\Internet Logs\xDB34.tmp 2009-07-17 22:33 . 2009-07-18 20:53 2305024 ----a-w- c:\windows\Internet Logs\xDB35.tmp 2009-07-17 16:29 . 2009-07-17 16:30 3130880 ----a-w- c:\windows\Internet Logs\xDB32.tmp 2009-07-17 16:29 . 2009-07-17 16:31 2320896 ----a-w- c:\windows\Internet Logs\xDB33.tmp 2009-07-17 16:28 . 2009-03-13 00:50 -------- d-----w- c:\program files\Common Files\DivX Shared 2009-07-16 15:28 . 2008-10-28 23:03 -------- d-----w- c:\documents and settings\User\Dane aplikacji\Winamp 2009-07-16 10:55 . 2008-10-28 23:03 -------- d-----w- c:\program files\Winamp 2009-07-16 00:54 . 2009-07-16 10:26 2817536 ----a-w- c:\windows\Internet Logs\xDB30.tmp 2009-07-16 00:54 . 2009-07-16 10:26 2298368 ----a-w- c:\windows\Internet Logs\xDB31.tmp 2009-07-15 21:31 . 2009-07-15 21:32 276480 ----a-w- c:\windows\Internet Logs\xDB2F.tmp 2009-07-15 18:51 . 2009-07-15 18:52 51200 ----a-w- c:\windows\Internet Logs\xDB2E.tmp 2009-07-15 00:15 . 2009-07-15 10:09 46592 ----a-w- c:\windows\Internet Logs\xDB2D.tmp 2009-07-13 01:34 . 2009-07-13 10:48 43520 ----a-w- c:\windows\Internet Logs\xDB2B.tmp 2009-07-13 01:33 . 2009-07-13 10:48 2293760 ----a-w- c:\windows\Internet Logs\xDB2C.tmp 2009-07-12 01:17 . 2009-07-12 10:33 39424 ----a-w- c:\windows\Internet Logs\xDB2A.tmp 2009-07-11 00:56 . 2009-07-11 09:36 45568 ----a-w- c:\windows\Internet Logs\xDB29.tmp 2009-07-10 18:51 . 2008-10-28 18:42 -------- d-----w- c:\program files\Common Files\InstallShield 2009-07-10 13:45 . 2009-07-10 13:47 54784 ----a-w- c:\windows\Internet Logs\xDB28.tmp 2009-07-09 00:25 . 2009-07-09 02:52 32768 ----a-w- c:\windows\Internet Logs\xDB27.tmp 2009-07-08 00:40 . 2009-07-08 09:49 38912 ----a-w- c:\windows\Internet Logs\xDB26.tmp 2009-07-07 14:15 . 2009-07-07 14:16 48128 ----a-w- c:\windows\Internet Logs\xDB25.tmp 2009-07-06 00:36 . 2009-07-06 10:41 81920 ----a-w- c:\windows\Internet Logs\xDB23.tmp 2009-07-06 00:36 . 2009-07-06 10:41 2277888 ----a-w- c:\windows\Internet Logs\xDB24.tmp 2009-07-04 00:25 . 2009-07-04 09:24 1160704 ----a-w- c:\windows\Internet Logs\xDB22.tmp 2009-07-03 05:46 . 2009-07-03 11:10 2266112 ----a-w- c:\windows\Internet Logs\xDB21.tmp 2009-07-02 12:57 . 2009-07-02 12:58 54272 ----a-w- c:\windows\Internet Logs\xDB20.tmp 2009-06-30 21:55 . 2009-07-01 10:08 76288 ----a-w- c:\windows\Internet Logs\xDB1F.tmp 2009-06-28 19:27 . 2009-06-28 23:01 2257408 ----a-w- c:\windows\Internet Logs\xDB1E.tmp 2009-06-28 16:38 . 2009-06-28 16:42 775680 ----a-w- c:\windows\Internet Logs\xDB1D.tmp 2009-06-26 17:04 . 2009-06-26 17:04 -------- d-----w- c:\program files\WapSter 2009-06-25 23:39 . 2009-06-25 16:51 -------- d-----w- c:\documents and settings\User\Dane aplikacji\Download Manager 2009-05-31 14:31 . 2009-05-31 14:38 2621440 ----a-w- c:\windows\Internet Logs\xDB1C.tmp 2009-05-13 16:01 . 2009-05-13 16:02 2163200 ----a-w- c:\windows\Internet Logs\xDB1B.tmp 2009-07-17 16:10 . 2008-10-28 22:52 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll 2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll 2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll . ------- Sigcheck ------- [-] 2007-07-11 05:06 642560 CE594E18FE0D0AF804F1F3694921CE62 c:\windows\system32\user32.dll [-] 2008-06-16 13:28 361344 030DC4D48CC2B894FEE2F390D8E66AD5 c:\windows\system32\drivers\tcpip.sys [-] 2008-06-16 13:28 549888 335813EACD16E84F3047A3326F6E5473 c:\windows\system32\winlogon.exe [-] 2008-07-19 00:33 2032128 2BC05E243B86AA8E569EE3C5D8B3C424 c:\windows\system32\ntkrnlpa.exe [-] 2008-07-07 09:44 2153472 04404B7F25984558AD3390BF84C4EB95 c:\windows\system32\ntoskrnl.exe [-] 2008-06-27 15:36 1424896 4EC7ED41D95D18B3CD1A2BD9DFEFB591 c:\windows\explorer.exe [-] 2008-06-16 13:28 112128 37ED43F3DEC4400586554D61C3129478 c:\windows\system32\wuauclt.exe [-] 2008-06-16 13:28 1420800 4678172D19476FA7D539682FCA42C942 c:\windows\system32\comres.dll [-] 2008-06-16 13:28 724992 7F059A93D251284A8BC758327ECD3D69 c:\windows\system32\comctl32.dll [7] 2008-06-16 13:28 921088 AEF3D788DBF40C7C4D204EA45EB0C505 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll [7] 2008-06-16 13:28 1054208 737739FACEAD60683AA8D7FF7602FD14 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [-] 2008-06-16 13:28 1571840 C8BDAD4065118558B3DC360FC96D81DB c:\windows\system32\sfcfiles.dll . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AQQ"="c:\progra~1\WapSter\WAPSTE~1\AQQ.exe" [2009-07-22 4777472] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LPManager"="c:\progra~1\THINKV~1\PrdCtr\LPMGR.exe" [2008-06-09 165208] "LPMailChecker"="c:\progra~1\THINKV~1\PrdCtr\LPMLCHK.exe" [2008-06-09 124248] "BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2008-07-28 208896] "TPKMAPHELPER"="c:\program files\ThinkPad\Utilities\TpKmapAp.exe" [2007-01-09 868352] "Apoint"="c:\program files\Apoint2K\Apoint.exe" [2008-03-07 167936] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-03-05 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-03-05 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-03-05 137752] "PSQLLauncher"="c:\program files\ThinkVantage Fingerprint Software\launcher.exe" [2007-08-14 48904] "GrooveMonitor"="f:\ms office 2007\Office12\GrooveMonitor.exe" [2006-10-26 31016] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153] "TpShocks"="TpShocks.exe" - c:\windows\system32\TpShocks.exe [2008-06-06 181536] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2008-06-16 124928] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "DisableStatusMessages"= 1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "NoSMMyPictures"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) "NoResolveTrack"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "NoSMMyPictures"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) "NoResolveTrack"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus] 2007-08-14 14:54 89600 ----a-w- c:\windows\system32\psqlpwd.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Notification Packages REG_MULTI_SZ scecli psqlpwd [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" "User"=c:\documents and settings\User\User.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "WinampAgent"="c:\program files\Winamp\winampa.exe" "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "PWRMGRTR"=rundll32 c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor "PlayMovie"="f:\powercinema 6\PlayMovie\PMVService.exe" "PCMAgent"="f:\powercinema 6\PowerCinema\PCMAgent.exe" "TVEService"="f:\powercinema 6\TV Enhance\TVEService.exe" "CLMLServer"="f:\powercinema 6\PowerCinema\Kernel\CLML\CLMLSvc.exe" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "f:\\MS Office 2007\\Office12\\OUTLOOK.EXE"= "f:\\MS Office 2007\\Office12\\GROOVE.EXE"= "f:\\MS Office 2007\\Office12\\ONENOTE.EXE"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"= "f:\\PowerCinema 6\\TV Enhance\\TVEnhance.exe"= "f:\\PowerCinema 6\\TV Enhance\\TVEService.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "5353:TCP"= 5353:TCP:Adobe CSI CS4 R0 Shockprf;Shockprf;c:\windows\system32\drivers\ApsX86.sys [2008-05-14 114728] R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [2008-05-14 19496] R1 MC2_NT_DRV;MC2_NT_DRV;c:\windows\system32\drivers\MC2_NT_DRV.sys [2005-08-05 48640] R1 TPPWRIF;TPPWRIF;c:\windows\system32\drivers\TPPWRIF.SYS [2008-10-28 4442] R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};f:\powercinema 6\PlayMovie\000.fcl [2009-07-24 61424] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-04-28 108289] R2 Power Manager DBC Service;Power Manager DBC Service;c:\program files\ThinkPad\Utilities\PWMDBSVC.exe [2008-10-28 94208] R2 smihlp;SMI Helper Driver (smihlp);c:\program files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [2007-08-14 10896] R2 SysSrvc;SysSrvc;c:\program files\MaxCrypt2\SysSrvc.exe [2006-01-23 204800] R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [2009-06-28 604416] R2 TVECapSvc;TVEnhance Background Capture Service (TBCS);f:\powercinema 6\TV Enhance\Kernel\TV\TVECapSvc.exe [2009-07-24 364635] R2 TVESched;TVEnhance Task Scheduler (TTS));f:\powercinema 6\TV Enhance\Kernel\TV\TVESched.exe [2009-07-24 172121] R3 3xHybrid;Philips SAA713x PCI Card;c:\windows\system32\drivers\3xHybrid.sys [2009-07-23 1282400] R3 WSIMD;wsimd Service;c:\windows\system32\drivers\wsimd.sys [2008-10-28 57344] --- Inne Usługi/Sterowniki w Pamięci --- *Deregistered* - mchInjDrv HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Zawartość folderu 'Zaplanowane zadania' 2009-07-27 c:\windows\Tasks\Konserwacja 1 kliknięciem.job - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-05-14 13:56] 2009-03-22 c:\windows\Tasks\PMTask.job - c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2008-10-28 23:43] . . ------- Skan uzupełniający ------- . uStart Page = hxxp://google.bearshare.com/pl uInternet Settings,ProxyOverride = *.local IE: &Download All by FlashGet - c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm IE: &Download by FlashGet - c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm IE: &Pobierz wszystko przez FlashGet - c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm IE: &Pobrane przez FlashGet - c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm IE: E&ksportuj do programu Microsoft Excel - f:\msoffi~1\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\documents and settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\8l6taxrw.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.onet.pl FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll ---- FIREFOX - SPOSÓB POSTĘPOWANIA ---- c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); . ************************************************************************** driver loading error catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-28 01:00 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}] "ImagePath"="\??\f:\powercinema 6\PlayMovie\000.fcl" . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- [HKEY_USERS\S-1-5-21-1801674531-413027322-1417001333-1001\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{97518992-7FE8-6065-F2F8-681298BF0A6F}*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) "kadnlgikphomkelpalohnh"=hex:62,61,70,6c,00,e5 . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(1684) c:\windows\system32\sfc_os.dll c:\windows\system32\vrlogon.dll c:\windows\system32\psqlpwd.dll c:\program files\ThinkVantage Fingerprint Software\homefus2.dll c:\program files\ThinkVantage Fingerprint Software\infra.dll c:\program files\ThinkVantage Fingerprint Software\homepass.dll c:\program files\ThinkVantage Fingerprint Software\bio.dll c:\program files\ThinkVantage Fingerprint Software\ps2css.dll c:\program files\ThinkVantage Fingerprint Software\remote.dll c:\program files\ThinkVantage Fingerprint Software\pscssint.dll c:\program files\ThinkVantage Fingerprint Software\crypto.dll c:\program files\MaxCrypt2\MCFUNC.DLL c:\windows\system32\cscui.dll c:\windows\system32\COMRes.dll - - - - - - - > 'lsass.exe'(1788) c:\windows\system32\scecli.dll c:\windows\system32\psqlpwd.dll c:\program files\ThinkVantage Fingerprint Software\homefus2.dll c:\program files\ThinkVantage Fingerprint Software\infra.dll c:\program files\MaxCrypt2\MCFUNC.DLL - - - - - - - > 'explorer.exe'(2484) c:\windows\system32\SHDOCVW.dll c:\program files\MaxCrypt2\MCFUNC.DLL c:\windows\system32\COMRes.dll c:\windows\System32\cscui.dll c:\windows\system32\LINKINFO.dll c:\windows\system32\ntshrui.dll c:\windows\system32\msi.dll c:\windows\system32\wpdshserviceobj.dll c:\windows\system32\portabledevicetypes.dll c:\windows\system32\portabledeviceapi.dll c:\windows\system32\NETSHELL.dll c:\windows\system32\credui.dll c:\windows\system32\MSVCP60.dll - - - - - - - > 'csrss.exe'(1588) c:\program files\MaxCrypt2\MCFUNC.DLL . ------------------------ Pozostałe uruchomione procesy ------------------------ . c:\program files\Intel\Wireless\Bin\S24EvMon.exe c:\windows\system32\ZoneLabs\vsmon.exe c:\program files\a-squared Free\a2service.exe c:\windows\system32\acs.exe c:\program files\Avira\AntiVir Desktop\avguard.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Intel\Wireless\Bin\EvtEng.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Intel\Wireless\Bin\RegSrvc.exe c:\program files\Cyberlink\Shared files\RichVideo.exe c:\windows\system32\TPHDEXLG.exe c:\windows\system32\TpKmpSvc.exe c:\windows\system32\wbem\wmiapsrv.exe c:\program files\ThinkVantage\PrdCtr\LPMGR.EXE c:\program files\ThinkVantage\PrdCtr\LPMLCHK.EXE c:\program files\Apoint2K\ApMsgFwd.exe c:\windows\system32\igfxsrvc.exe c:\program files\Apoint2K\ApntEx.exe . ************************************************************************** . Czas ukończenia: 2009-07-27 1:04 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2009-07-27 23:04 ComboFix2.txt 2008-10-31 17:48 Przed: 4 008 910 848 bajtów wolnych Po: 4 087 533 568 bajtów wolnych 697

wstawilbym jeszcze log z drugiego komputera ale post mialby za dużo znaków

**Posty:** 18165 · przez **wojtas** 28 Lip 2009, 15:53

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware