Firefox traci ustawienia, bsody

**Posty:** 934 · przez **AragornXT** 15 Kwi 2009, 21:02

Witam.
Od jakiegoś czasu nie mogę korzystać spokojnie z mojego peceta. Po pierwsze: często w niespodziewanych i nieregularnych odstępach pojawiają się Bluescreeny. Najczęściej: 0x00000050. Po drugie, Firefox traci ustawienia, hasła itp. Przypuszczam ingerencję wirusa, wobec czego wklejam logi:

Kod: Zaznacz wszystko: ComboFix 09-04-04.01 - Michał -Lordi- 2009-04-07 15:59:15.8 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1023.687 [GMT 2:00] Uruchomiony z: c:\documents and settings\Michał -Lordi-\Pulpit\ComboFix.exe AV: System Antywirusowy NOD32 2.50 *On-access scanning enabled* (Updated) * Utworzono nowy punkt przywracania * Resident AV is active . ((((((((((((((((((((((((( Pliki utworzone od 2009-03-07 do 2009-04-07 ))))))))))))))))))))))))))))))) . 2009-04-03 19:51 . 2009-04-03 19:51 <DIR> d-------- C:\spoolerlogs 2009-03-28 18:02 . 2009-03-28 18:08 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\NexonEU 2009-03-28 16:15 . 2009-03-29 14:32 <DIR> d-------- C:\download 2009-03-28 16:15 . 2009-04-04 18:59 421,888 --a------ c:\windows\NEXON_EU_DownloaderUpdater.exe 2009-03-21 12:35 . 2009-03-28 16:15 <DIR> d-------- C:\Nexon 2009-03-21 12:35 . 2009-03-21 12:35 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\NexonUS 2009-03-20 19:46 . 2009-03-27 17:07 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\PMB Files 2009-03-20 19:45 . 2009-03-20 19:45 <DIR> d-------- c:\program files\Pando Networks . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-04-07 13:23 --------- d-----w c:\documents and settings\Michał -Lordi-\Dane aplikacji\Skype 2009-04-07 13:22 --------- d-----w c:\documents and settings\Michał -Lordi-\Dane aplikacji\skypePM 2009-04-06 18:19 --------- d-----w c:\documents and settings\Michał -Lordi-\Dane aplikacji\foobar2000 2009-04-06 14:45 98,304 ----a-w c:\windows\DUMP469e.tmp 2009-04-02 17:23 --------- d-----w c:\program files\Opera 2009-03-27 21:04 --------- d-----w c:\program files\Counter-Strike 2009-03-22 11:39 --------- d-----w c:\program files\Teamspeak2_RC2 2009-03-20 20:15 --------- d-----w c:\documents and settings\Michał -Lordi-\Dane aplikacji\uTorrent 2009-03-09 18:32 --------- d-----w c:\program files\Lexmark 1200 Series 2009-03-07 17:32 --------- d-----w c:\program files\Gadu-Gadu 2009-02-27 06:51 --------- d-----w c:\program files\Foxit Software 2009-02-27 06:51 --------- d-----w c:\program files\AskBarDis 2009-02-27 06:51 --------- d-----w c:\documents and settings\Michał -Lordi-\Dane aplikacji\Foxit 2009-02-19 16:27 410,984 ----a-w c:\windows\system32\deploytk.dll 2009-02-19 16:27 --------- d-----w c:\program files\Java 2009-02-17 16:24 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf 2009-02-17 16:24 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ggsemc_01007.Wdf 2009-02-17 16:14 24,616 ----a-w c:\windows\system32\drivers\ggsemc.sys 2009-02-17 16:14 13,224 ----a-w c:\windows\system32\drivers\ggflt.sys 2009-02-17 16:14 1,107,296 ----a-w c:\windows\system32\WdfCoInstaller01007.dll 2009-02-17 16:14 --------- d-----w c:\program files\Sony Ericsson 2009-02-14 16:34 --------- d-----w c:\program files\Common Files\Skype 2009-02-14 16:34 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Skype 2009-02-14 16:34 --------- d-----r c:\program files\Skype 2009-02-11 19:50 36,792 ----a-w c:\documents and settings\Michał -Lordi-\Dane aplikacji\GDIPFONTCACHEV1.DAT 2009-02-01 17:06 48,913 ----a-w c:\windows\UninstVeetleTVPlayer.exe 2008-03-17 11:56 32,048 ----a-w c:\documents and settings\House\Dane aplikacji\GDIPFONTCACHEV1.DAT 2007-12-10 20:10 32 ----a-w c:\documents and settings\All Users\Dane aplikacji\ezsid.dat 2007-11-08 14:12 4,057 ----a-w c:\program files\Mozilla FirefoxPEX.PhoneExplorer.txt 2007-08-27 21:05 1,554 ----a-w c:\program files\KonnektPEX.PhoneExplorer.txt 2007-05-04 16:45 1,563 ----a-w c:\program files\SpoX Editor 2007PEX.PhoneExplorer.txt . ------- Sigcheck ------- 2005-03-02 20:21 578560 6a93565be9b8422eb7538c66ac732d76 c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll 2001-10-26 19:29 562688 c30a1860fb4608a73023bb417acc93ba c:\windows\$NtServicePackUninstall$\user32.dll 2004-08-04 01:44 578560 0c81764f50f32d376e6e4b9e9f4b01a0 c:\windows\$NtUninstallKB890859$\user32.dll 2005-03-02 20:18 550400 215fcb47ec6b9a4f023278cf5b14d833 c:\windows\ServicePackFiles\i386\user32.dll 2005-03-02 20:18 578560 b7eeb1a1af740306049241ddf61f21ff c:\windows\SoftwareDistribution\Download\ef0eb4021a89170edd4d57c53df1dbef\sp2gdr\user32.dll 2005-03-02 20:21 578560 6a93565be9b8422eb7538c66ac732d76 c:\windows\SoftwareDistribution\Download\ef0eb4021a89170edd4d57c53df1dbef\sp2qfe\user32.dll 2005-03-02 20:18 578560 b7eeb1a1af740306049241ddf61f21ff c:\windows\Super Turbo Tango Patcher\Backup\user32.dll 2005-03-02 20:18 550400 215fcb47ec6b9a4f023278cf5b14d833 c:\windows\system32\user32.dll 2008-10-14 15:36 550400 215fcb47ec6b9a4f023278cf5b14d833 c:\windows\system32\dllcache\user32.dll 2006-04-20 14:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys 2001-08-18 08:24 327168 e7774698bb0d14b0710a9a31e209f9b6 c:\windows\$NtServicePackUninstall$\tcpip.sys 2004-08-04 00:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB917953$\tcpip.sys 2007-06-17 17:56 359040 c81d6a930a7805f6daa0c7902b99037e c:\windows\ServicePackFiles\i386\tcpip.sys 2006-04-20 13:51 359808 1dbf125862891817f374f407626967f4 c:\windows\SoftwareDistribution\Download\9f3c06013c349f7f3e9f976705c500f5\sp2gdr\tcpip.sys 2006-04-20 14:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 c:\windows\SoftwareDistribution\Download\9f3c06013c349f7f3e9f976705c500f5\sp2qfe\tcpip.sys 2007-06-17 17:56 359808 de891ad282e856acfd40990094a63b6f c:\windows\system32\dllcache\tcpip.sys 2007-06-17 17:56 359808 b4e29943b4b04bd5e7381546848e6669 c:\windows\system32\drivers\tcpip.sys 2005-03-02 20:14 2058240 35d11fdc381536ab95e3005489131f44 c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe 2001-10-26 20:03 1898112 0bf3b27c8df71e13d1759a7c820c21fc c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe 2004-08-04 01:38 2058112 44d1bc1b05e0c7c82e81687b79c653c7 c:\windows\$NtUninstallKB890859$\ntkrnlpa.exe 2005-03-02 20:08 2058112 0f6990820c6ce0a7a911fae5937ef1f6 c:\windows\Driver Cache\i386\ntkrnlpa.exe 2005-03-02 20:08 2230144 c3d87ce5161e894980c66ba6cd884683 c:\windows\ServicePackFiles\i386\ntkrnlpa.exe 2005-03-02 20:08 2058112 0f6990820c6ce0a7a911fae5937ef1f6 c:\windows\SoftwareDistribution\Download\ef0eb4021a89170edd4d57c53df1dbef\sp2gdr\ntkrnlpa.exe 2005-03-02 20:14 2058240 35d11fdc381536ab95e3005489131f44 c:\windows\SoftwareDistribution\Download\ef0eb4021a89170edd4d57c53df1dbef\sp2qfe\ntkrnlpa.exe 2005-03-02 20:08 2058112 0f6990820c6ce0a7a911fae5937ef1f6 c:\windows\Super Turbo Tango Patcher\Backup\ntkrnlpa.exe 2007-08-25 23:10 2230144 7a77d2169735d00323ea24859f78e89e c:\windows\system32\ntkrnlpa.exe 2005-03-02 20:14 2180864 dba3e4215279c8012b37d2135b531258 c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe 2001-10-26 18:51 1983616 7be0777d592cbb55712cead4598da88e c:\windows\$NtServicePackUninstall$\ntoskrnl.exe 2004-08-04 01:39 2182272 dcf53422b7edded3b7431fbae4a7ee3f c:\windows\$NtUninstallKB890859$\ntoskrnl.exe 2005-03-02 20:09 2180608 3f3612846d67352468d2286fc23fb0c2 c:\windows\Driver Cache\i386\ntoskrnl.exe 2005-03-02 20:09 2352640 a2ff45236dc319eeceaf2707b35ce879 c:\windows\ServicePackFiles\i386\ntoskrnl.exe 2005-03-02 20:09 2180608 3f3612846d67352468d2286fc23fb0c2 c:\windows\SoftwareDistribution\Download\ef0eb4021a89170edd4d57c53df1dbef\sp2gdr\ntoskrnl.exe 2005-03-02 20:14 2180864 dba3e4215279c8012b37d2135b531258 c:\windows\SoftwareDistribution\Download\ef0eb4021a89170edd4d57c53df1dbef\sp2qfe\ntoskrnl.exe 2005-03-02 20:09 2180608 3f3612846d67352468d2286fc23fb0c2 c:\windows\Super Turbo Tango Patcher\Backup\ntoskrnl.exe 2007-08-25 23:10 2352640 79c6f38a8d7a74ffde7e1c361ca376b1 c:\windows\system32\ntoskrnl.exe 2004-08-04 01:44 998912 84e92f81a03897acd3d3880f9b418c6f c:\windows\explorer.exe 2001-10-26 19:29 1002496 0b6cb4abb3166e1717bda7895f2029d8 c:\windows\$NtServicePackUninstall$\explorer.exe 2004-08-04 01:44 998912 84e92f81a03897acd3d3880f9b418c6f c:\windows\ServicePackFiles\i386\explorer.exe 2004-08-04 01:44 1033728 379098a96e6c165b659de7e4328010ea c:\windows\Super Turbo Tango Patcher\Backup\explorer.exe 2001-10-26 19:30 113664 19da7b79649993cc2668dac80092ca44 c:\windows\$NtServicePackUninstall$\wuauclt.exe 2005-05-26 05:16 114968 ffdf3419ddcbf64e24d22f3172e8d59b c:\windows\ServicePackFiles\i386\wuauclt.exe 2005-05-26 05:16 125208 ab6d4996ada75ef2f0393411cfe634f4 c:\windows\Super Turbo Tango Patcher\Backup\wuauclt.exe 2005-05-26 05:16 114968 ffdf3419ddcbf64e24d22f3172e8d59b c:\windows\system32\wuauclt.exe . ((((((((((((((((((((((((((((( SnapShot@2009-02-17_14.09.06,01 ))))))))))))))))))))))))))))))))))))))))) . + 2008-03-21 12:57:18 221,488 -c----w c:\windows\$NtUninstallWdf01007$\spuninst\spuninst.exe + 2008-03-21 12:57:18 379,184 -c----w c:\windows\$NtUninstallWdf01007$\spuninst\updspapi.dll - 2005-10-20 19:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE + 2005-10-20 18:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE - 2000-08-31 07:00:00 89,504 ----a-w c:\windows\fdsv.exe + 2000-08-31 06:00:00 89,504 ----a-w c:\windows\fdsv.exe - 2000-08-31 07:00:00 80,412 ----a-w c:\windows\grep.exe + 2000-08-31 06:00:00 80,412 ----a-w c:\windows\grep.exe - 2009-02-14 16:34:51 364,726 ----a-r c:\windows\Installer\{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}\SkypeIcon.exe + 2009-02-19 22:32:00 364,726 ----a-r c:\windows\Installer\{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}\SkypeIcon.exe - 2000-08-31 07:00:00 29,696 ----a-w c:\windows\NIRCMD.exe + 2000-08-31 06:00:00 29,696 ----a-w c:\windows\NIRCMD.exe - 2000-08-31 07:00:00 98,816 ----a-w c:\windows\sed.exe + 2000-08-31 06:00:00 98,816 ----a-w c:\windows\sed.exe - 2000-08-31 07:00:00 161,792 ----a-w c:\windows\SWREG.exe + 2000-08-31 06:00:00 161,792 ----a-w c:\windows\SWREG.exe - 2000-08-31 07:00:00 136,704 ----a-w c:\windows\SWSC.exe + 2000-08-31 06:00:00 136,704 ----a-w c:\windows\SWSC.exe - 2000-08-31 07:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe + 2000-08-31 06:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe + 2008-03-27 15:27:46 503,008 ------w c:\windows\system32\drivers\wdf01000.sys + 2008-03-27 15:27:48 35,040 ------w c:\windows\system32\drivers\wdfldr.sys + 2009-02-17 16:14:58 13,224 -c--a-w c:\windows\system32\DRVSTORE\ggsemc_64A4DD7DEFFA583EB61D3335216E513C3C7C189A\x86\ggflt.sys + 2009-02-17 16:14:58 24,616 -c--a-w c:\windows\system32\DRVSTORE\ggsemc_64A4DD7DEFFA583EB61D3335216E513C3C7C189A\x86\ggsemc.sys + 2009-02-17 16:14:58 1,107,296 -c--a-w c:\windows\system32\DRVSTORE\ggsemc_64A4DD7DEFFA583EB61D3335216E513C3C7C189A\x86\WdfCoInstaller01007.dll + 2009-02-17 16:14:58 35,880 -c--a-w c:\windows\system32\DRVSTORE\semis06_951EEEC36412602D8ACC8E4FBFB724AC1ED1A5BF\semis06.sys + 2009-02-17 16:14:58 83,200 -c--a-w c:\windows\system32\DRVSTORE\zebrbus_36ECD4F36FFD1C8D7775CBB1D3C4EDC32416D158\i386\zebrbus.sys + 2009-02-17 16:14:58 12,160 -c--a-w c:\windows\system32\DRVSTORE\zebrbus_36ECD4F36FFD1C8D7775CBB1D3C4EDC32416D158\i386\zebrwhnt.sys + 2009-02-17 16:14:58 63,360 -c--a-w c:\windows\system32\DRVSTORE\zebrceb_5D3759B0FA9680671ED8714BBB53A24D3DD6D83E\i386\zebrceb.sys + 2009-02-17 16:14:58 12,160 -c--a-w c:\windows\system32\DRVSTORE\zebrceb_5D3759B0FA9680671ED8714BBB53A24D3DD6D83E\i386\zebrwhnt.sys + 2009-02-17 16:14:58 12,160 -c--a-w c:\windows\system32\DRVSTORE\zebrfse2_0A2847C94D1EE4DD06CE7DF36614D531DE0478E2\i386\zebrcmnt.sys + 2009-02-17 16:14:58 109,568 -c--a-w c:\windows\system32\DRVSTORE\zebrfse2_0A2847C94D1EE4DD06CE7DF36614D531DE0478E2\i386\zebrmdm.sys + 2009-02-17 16:14:58 12,160 -c--a-w c:\windows\system32\DRVSTORE\zebrmdm2_0A2847C94D1EE4DD06CE7DF36614D531DE0478E2\i386\zebrcmnt.sys + 2009-02-17 16:14:58 14,848 -c--a-w c:\windows\system32\DRVSTORE\zebrmdm2_0A2847C94D1EE4DD06CE7DF36614D531DE0478E2\i386\zebrmdfl.sys + 2009-02-17 16:14:58 109,568 -c--a-w c:\windows\system32\DRVSTORE\zebrmdm2_0A2847C94D1EE4DD06CE7DF36614D531DE0478E2\i386\zebrmdm.sys + 2009-02-17 16:14:58 12,160 -c--a-w c:\windows\system32\DRVSTORE\zebrmsc2_42356B4F0BD79AC6F18744A1833E5FF4F32976BD\i386\zebrcmnt.sys + 2009-02-17 16:14:58 109,568 -c--a-w c:\windows\system32\DRVSTORE\zebrmsc2_42356B4F0BD79AC6F18744A1833E5FF4F32976BD\i386\zebrmdmc.sys + 2009-02-17 16:14:58 12,160 -c--a-w c:\windows\system32\DRVSTORE\zebrobx2_5EC96C36227E872B2B260D203965ADA2987E0B39\i386\zebrcmnt.sys + 2009-02-17 16:14:58 99,712 -c--a-w c:\windows\system32\DRVSTORE\zebrobx2_5EC96C36227E872B2B260D203965ADA2987E0B39\i386\zebrobex.sys + 2009-02-17 16:14:58 12,160 -c--a-w c:\windows\system32\DRVSTORE\zebrscep_43CE4CE9917F4AB857191C8AF519514326FED3EB\i386\zebrcmnt.sys + 2009-02-17 16:14:58 91,264 -c--a-w c:\windows\system32\DRVSTORE\zebrscep_43CE4CE9917F4AB857191C8AF519514326FED3EB\i386\zebrsce.sys + 2009-02-17 16:14:58 12,160 -c--a-w c:\windows\system32\DRVSTORE\zebrser2_0A2847C94D1EE4DD06CE7DF36614D531DE0478E2\i386\zebrcmnt.sys + 2009-02-17 16:14:58 109,568 -c--a-w c:\windows\system32\DRVSTORE\zebrser2_0A2847C94D1EE4DD06CE7DF36614D531DE0478E2\i386\zebrmdm.sys - 2009-02-14 14:26:16 1,471,928 ----a-w c:\windows\system32\FNTCACHE.DAT + 2009-04-06 15:35:27 1,471,928 ----a-w c:\windows\system32\FNTCACHE.DAT - 2009-01-25 11:16:53 144,792 ----a-w c:\windows\system32\java.exe + 2009-02-19 16:27:18 144,792 ----a-w c:\windows\system32\java.exe - 2009-01-25 11:16:54 144,792 ----a-w c:\windows\system32\javaw.exe + 2009-02-19 16:27:18 144,792 ----a-w c:\windows\system32\javaw.exe - 2009-01-25 11:16:54 148,888 ----a-w c:\windows\system32\javaws.exe + 2009-02-19 16:27:18 148,888 ----a-w c:\windows\system32\javaws.exe + 2008-09-11 02:10:12 235,424 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil10a.exe - 2008-10-05 03:24:02 3,695,008 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll + 2009-02-03 02:15:28 3,771,296 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll - 2008-10-05 03:24:04 235,936 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe + 2009-02-03 02:15:30 240,544 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe + 2009-02-17 16:18:33 88,590 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe - 2009-02-01 17:16:37 84,661 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe + 2009-03-29 16:02:04 84,661 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe - 2008-11-13 14:03:48 58,596 ----a-w c:\windows\system32\perfc009.dat + 2009-04-07 13:25:09 58,596 ----a-w c:\windows\system32\perfc009.dat - 2008-11-13 14:03:48 74,230 ----a-w c:\windows\system32\perfc015.dat + 2009-04-07 13:25:09 74,230 ----a-w c:\windows\system32\perfc015.dat - 2008-11-13 14:03:48 392,296 ----a-w c:\windows\system32\perfh009.dat + 2009-04-07 13:25:09 392,274 ----a-w c:\windows\system32\perfh009.dat - 2008-11-13 14:03:48 448,004 ----a-w c:\windows\system32\perfh015.dat + 2009-04-07 13:25:09 448,004 ----a-w c:\windows\system32\perfh015.dat + 2008-03-21 12:57:18 14,640 ------w c:\windows\system32\spmsgXP_2k3.dll - 2006-09-25 15:58:48 23,856 ----a-w c:\windows\system32\spupdsvc.exe + 2008-03-21 12:57:18 23,856 ----a-w c:\windows\system32\spupdsvc.exe + 2009-04-07 13:20:52 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_6d8.dat - 2000-08-31 07:00:00 49,152 ----a-w c:\windows\VFIND.exe + 2000-08-31 06:00:00 49,152 ----a-w c:\windows\VFIND.exe - 2000-08-31 07:00:00 68,096 ----a-w c:\windows\zip.exe + 2000-08-31 06:00:00 68,096 ----a-w c:\windows\zip.exe . -- Migawka wyzerowana -- . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}] 2008-11-18 13:58 333192 --a------ c:\program files\AskBarDis\bar\bin\askBar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-11-18 333192] [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}] [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-11-18 333192] [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}] [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360] "Konnekt"="c:\program files\Konnekt\konnekt.exe" [2005-05-24 503808] "Google Update"="c:\documents and settings\Michał -Lordi-\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe" [2008-09-03 133104] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-02-04 23975720] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nod32kui"="c:\program files\Eset\nod32kui.exe" [2007-03-12 917504] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-05 81920] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-19 148888] "SoundMan"="SOUNDMAN.EXE" [2003-04-24 c:\windows\SOUNDMAN.EXE] "nwiz"="nwiz.exe" [2007-12-05 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-04 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="c:\windows\system32\logonui.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.CSCD"= camcodec.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\[u]0[/u]pgdfgsvc C 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^honestech Video Patrol 4.0 Trial Scheduler.lnk] path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\honestech Video Patrol 4.0 Trial Scheduler.lnk backup=c:\windows\pss\honestech Video Patrol 4.0 Trial Scheduler.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Kalendarz XP.lnk] path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\Kalendarz XP.lnk backup=c:\windows\pss\Kalendarz XP.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk] path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk backup=c:\windows\pss\Microsoft Office.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Super Turbo Tango Patcher Reloader.lnk] path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\Super Turbo Tango Patcher Reloader.lnk backup=c:\windows\pss\Super Turbo Tango Patcher Reloader.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Michał -Lordi-^Menu Start^Programy^Autostart^hamachi.lnk] path=c:\documents and settings\Michał -Lordi-\Menu Start\Programy\Autostart\hamachi.lnk backup=c:\windows\pss\hamachi.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Michał -Lordi-^Menu Start^Programy^Autostart^Last.fm Helper.lnk] path=c:\documents and settings\Michał -Lordi-\Menu Start\Programy\Autostart\Last.fm Helper.lnk backup=c:\windows\pss\Last.fm Helper.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Michał -Lordi-^Menu Start^Programy^Autostart^Rainlendar.lnk] path=c:\documents and settings\Michał -Lordi-\Menu Start\Programy\Autostart\Rainlendar.lnk backup=c:\windows\pss\Rainlendar.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Michał -Lordi-^Menu Start^Programy^Autostart^Rapidown.lnk] path=c:\documents and settings\Michał -Lordi-\Menu Start\Programy\Autostart\Rapidown.lnk backup=c:\windows\pss\Rapidown.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Michał -Lordi-^Menu Start^Programy^Autostart^Skrót do miranda32.exe.lnk] path=c:\documents and settings\Michał -Lordi-\Menu Start\Programy\Autostart\Skrót do miranda32.exe.lnk backup=c:\windows\pss\Skrót do miranda32.exe.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Michał -Lordi-^Menu Start^Programy^Autostart^Yahoo! Widget Engine.lnk] path=c:\documents and settings\Michał -Lordi-\Menu Start\Programy\Autostart\Yahoo! Widget Engine.lnk backup=c:\windows\pss\Yahoo! Widget Engine.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Michał -Lordi-^Menu Start^Programy^Autostart^Yahoo! Widgets.lnk] path=c:\documents and settings\Michał -Lordi-\Menu Start\Programy\Autostart\Yahoo! Widgets.lnk backup=c:\windows\pss\Yahoo! Widgets.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVFX Engine] --------- 2006-06-09 02:11 24576 c:\program files\Creative\Creative Live! Cam\VideoFX\StartFX.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative Live! Cam Manager] --------- 2006-05-31 17:00 143360 c:\program files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] --a------ 2005-12-10 16:57 133016 c:\program files\DAEMON Tools\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu] --a------ 2008-03-20 12:04 2127296 c:\program files\Gadu-Gadu\gg.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] --a----t- 2008-09-03 18:38 133104 c:\documents and settings\Michał -Lordi-\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDDHealth] --a------ 2008-06-15 13:14 1692672 c:\program files\HDD Health\hddhealth.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler] --a------ 2004-08-09 06:03 81920 c:\program files\Common Files\InstallShield\UpdateService\issch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Konnekt_6b95416a_Alex] --a------ 2005-05-24 23:41 503808 c:\program files\Konnekt\konnekt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark 1200 Series] --a------ 2006-07-13 07:33 57344 c:\program files\Lexmark 1200 Series\lxczbmgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --------- 2004-10-13 18:24 1694208 c:\program files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] --a------ 2007-12-05 02:41 8523776 c:\windows\system32\nvcpl.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odkurzacz-MCD] --a------ 2007-05-03 10:02 264704 c:\program files\Odkurzacz\odk_mcd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Openwares LiveUpdate] --a------ 2003-12-13 19:17 61440 c:\program files\LIVEUPDATE\LiveUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RocketDock] --a------ 2007-09-02 13:58 495616 c:\program files\RocketDock\RocketDock.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] -ra------ 2009-02-04 13:27 23975720 c:\program files\Skype\Phone\Skype.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\V0220Mon.exe] -ra------ 2006-06-28 19:01 32768 c:\windows\V0220Mon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] --a------ 2007-12-05 02:41 1626112 c:\windows\system32\nwiz.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Konnekt\\konnekt.exe"= "c:\\Program Files\\Gadu-Gadu\\gg.exe"= "c:\\Documents and Settings\\Michał -Lordi-\\Moje dokumenty\\utorrent.exe"= "d:\\totalcmd\\TOTALCMD.EXE"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "c:\\Program Files\\Last.fm\\LastFM.exe"= "c:\\Program Files\\Opera\\Opera.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "c:\\WINDOWS\\system32\\dpvsetup.exe"= "c:\\Program Files\\Counter-Strike\\hl.exe"= "c:\\Program Files\\Counter-Strike\\hlds.exe"= "c:\\Program Files\\honestech Video Patrol 4.0\\scheduler.exe"= "c:\\Program Files\\SmartFTP Client\\SmartFTP.exe"= "c:\\Program Files\\Miranda GG\\miranda32.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"= "c:\\Documents and Settings\\All Users\\Dane aplikacji\\NexonUS\\NGM\\NGM.exe"= "c:\\Nexon\\NEXON_EU_Downloader\\NEXON_EU_Downloader_Engine.exe"= "c:\\Documents and Settings\\All Users\\Dane aplikacji\\NexonEU\\NGM\\NGM.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "56897:TCP"= 56897:TCP:Pando Media Booster "56897:UDP"= 56897:UDP:Pando Media Booster R0 xmasbus;xmasbus;c:\windows\system32\drivers\xmasbus.sys [2007-02-25 140800] R0 xmasscsi;xmasscsi;c:\windows\system32\drivers\xmasscsi.sys [2007-02-25 5504] S0 BootScreen;BootScreen;\SystemRoot\\SystemRoot\System32\drivers\vidstub.sys --> \SystemRoot\\SystemRoot\System32\drivers\vidstub.sys [?] S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [2009-02-17 13224] S3 IrUSB;ArkMicro USB Infrared Miniport Adapter;c:\windows\system32\DRIVERS\IrUSB.sys --> c:\windows\system32\DRIVERS\IrUSB.sys [?] S3 siusbmod;siusbmod;c:\windows\system32\DRIVERS\siusbmod.sys --> c:\windows\system32\DRIVERS\siusbmod.sys [?] S3 ultradfg;ultradfg;c:\windows\system32\drivers\ultradfg.sys [2007-10-08 23040] S3 V0220Dev;Live! Cam Video IM;c:\windows\system32\drivers\V0220Dev.sys [2007-12-23 146112] S3 V0220Vfx;V0220VFX;c:\windows\system32\drivers\V0220Vfx.sys [2007-12-23 6272] . . ------- Skan uzupełniający ------- . uStart Page = hxxp://www.google.pl/ mStart Page = hxxp://www.yahoo.com uSearchURL,(Default) = hxxp://www.google.com/keyword/%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&ksport do programu Microsoft Excel - d:\office\Office10\EXCEL.EXE/3000 LSP: imon.dll TCP: {D4713F27-2CF9-4EED-9D61-44E5B9D2F610} = 194.204.152.34,194.204.159.1 FF - ProfilePath - c:\documents and settings\Michał -Lordi-\Dane aplikacji\Mozilla\Firefox\Profiles\qv69k299.default\ FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll FF - plugin: c:\documents and settings\All Users\Dane aplikacji\NexonEU\NGM\npNxGameeu.dll FF - plugin: c:\documents and settings\All Users\Dane aplikacji\NexonUS\NGM\npNxGameUS.dll FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll FF - plugin: c:\program files\Veetle\VLC\npvlc.dll . ************************************************************************** catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-04-07 16:03:32 Windows 5.1.2600 Dodatek Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- [HKEY_USERS\S-1-5-21-73586283-1604221776-839522115-1003\Software\Microsoft\SystemCertificates\AddressBook*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) [HKEY_USERS\S-1-5-21-73586283-1604221776-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID] @Denied: (Full) (LocalSystem) . Czas ukończenia: 2009-04-07 16:05:54 ComboFix-quarantined-files.txt 2009-04-07 14:05:34 ComboFix2.txt 2009-02-17 14:40:37 ComboFix3.txt 2009-02-17 13:10:17 ComboFix4.txt 2009-02-16 22:01:06 Przed: 5*994*037*248 bajtów wolnych Po: 7,087,812,608 bajtów wolnych 365

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 21:36:56, on 2009-04-14 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\CTsvcCDA.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\ESET\ESET Smart Security\egui.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Konnekt\konnekt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Last.fm\LastFM.exe D:\instalki\przydatne\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Konnekt] "C:\Program Files\Konnekt\konnekt.exe" /autostart O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\Office\Office10\EXCEL.EXE/3000 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O15 - Trusted IP range: 192.168.1.1 O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{D4713F27-2CF9-4EED-9D61-44E5B9D2F610}: NameServer = 194.204.152.34,194.204.159.1 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing) O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

**Posty:** 3475 · przez **Dementor** 15 Kwi 2009, 21:06

na temat BSOD poczytaj tutaj
blad-0x00000050-win-xp-sp2-vp134675.html

**Posty:** 934 · przez **AragornXT** 15 Kwi 2009, 21:20

Prawdopodobnie ta pamięć pójdzie pod żyletki ^^ Kilka dobrych lat już ma. Sprawdzę to.
A co do Frajerfoksa? I zapomniałem dodać, że mi z Menu Start poleciały wszystkie foldery z Akcesoriów. Pomoże sfc/ scannow?

**Posty:** 18165 · przez **wojtas** 15 Kwi 2009, 21:23

nom sprobuj uzyc tego polecenia... przeinstaluj ff bo ja tu nic nie widze.

**Posty:** 934 · przez **AragornXT** 15 Kwi 2009, 21:30

FF był reinstalowany i kicha. W ustawieniach sprawdzałem, jest zaznaczona opcja o pamiętaniu haseł do witryn.

**Posty:** 18165 · przez **wojtas** 15 Kwi 2009, 21:38

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

oraz skasuj folder C:\Qoobox
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Wykonaj skan Dr. Web CureIt
6. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.