Ie sam się załącza.

**Posty:** 503 · przez **Lucky17** 19 Sie 2011, 19:18

Witam,
Dziewczyna nieswiadomie weszla na link z prywatnej wiadomosci z facebooka od kolezanki co jak sie okazalo nie bylo wyslane przez nia tylko przez jakis spam. od tej pory IE co minute wywala jej jakas losową stronkę, jest to bardzo uciążliwe, Oprócz tego Avira wywala komunikaty o wirach, które po usunięciu znów pojawiają się na nowo. Chcę wyczyścić jej cały komp więc proszę Was o pomoc.

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-08-19 19:08:11 - Run 1 OTL by OldTimer - Version 3.2.26.5 Folder = C:\Users\oem\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,45 Gb Available Physical Memory | 61,23% Memory free 7,99 Gb Paging File | 6,12 Gb Available in Paging File | 76,59% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 452,67 Gb Total Space | 282,29 Gb Free Space | 62,36% Space Free | Partition Type: NTFS Drive D: | 12,80 Gb Total Space | 2,14 Gb Free Space | 16,71% Space Free | Partition Type: NTFS Computer Name: OEM-KOMPUTER | User Name: oem | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{26A24AE4-039D-4CA4-87B4-2F86416014FF}" = Java(TM) 6 Update 14 (64-bit) "{33B18075-C7DF-4839-8517-C6E9338D84F2}" = HP 3D DriveGuard "{62A20ECA-920E-4052-BF77-88C78DD20FAA}" = Validity Sensors DDK "{69ADE77E-8D0F-4FD9-8F4A-37BA2CCC011E}" = CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit "{6C47240C-016E-03B5-D13E-AECAED09F2E3}" = ATI Catalyst Install Manager "{88E60521-1E4E-4785-B9F1-1798A4BD0C30}" = HP MediaSmart SmartMenu "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{930831EE-EA8B-4CD5-9586-9905E42ED065}" = BlueSoleil 8.0.338.0 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{ADEB3402-CFBD-00E2-0EE6-F6A3F1AFACF0}" = ccc-utility64 "{AF4CD5A3-7D69-445E-B0C0-A6A575793B94}" = Soluto "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 "{DD3BF908-F6B0-45A5-BED3-79E8888DDA93}" = DigitalPersona Personal 4.10 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "CCleaner" = CCleaner "EPSON Printer and Utilities" = Oprogramowanie drukarki EPSON "FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) "FFE7D41DF3C645075BB149E21988B63996C34187" = ENE CIR Receiver Driver "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "SynTPDeinstKey" = Synaptics Pointing Device Driver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "_{65094424-9351-40B8-939B-3676D67E48E0}" = Corel Graphics - Windows Shell Extension "_{7F05E704-30A6-421A-97A7-8EEB1C7FF010}" = CorelDRAW(R) Graphics Suite X4 "_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW(R) Graphics Suite X5 "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam "{05D18A0F-ED9D-4FBD-9BF5-AF632EB09CB3}" = CGS15_IPM_T2 "{07A540AB-D785-11D5-8E89-0090275862A0}" = Corel Graphics Suite 11 "{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM) "{09CC0D0E-061D-3C7B-3881-D2EB53A8AAFC}" = CCC Help Polish "{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM) "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}" = Nero MediaHub 10 "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Narzędzie do przekazywania usługi Windows Live "{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback "{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10 "{24D9A3E0-D086-4B62-AF93-63CF6B05CB48}" = CorelDRAW Graphics Suite X5 - Custom Data "{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library "{260ED378-2B8C-4831-ADAE-D0712D119AC5}" = CorelDRAW Graphics Suite X5 - VSTA "{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron Flash Media Controller Driver "{26606D8F-3133-DBE2-8AF5-AB28F300860A}" = CCC Help Chinese Standard "{266D0EEA-E5A6-4A08-A0EE-5391D4EA44A7}" = Catalyst Control Center - Branding "{26945917-E053-45F6-AF98-309730CFC318}" = Visual Basic for Applications (R) Core "{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 17 "{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10 "{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime "{2A5FBE73-76DA-4A31-BD86-1B0E01DC33F8}" = Windows Live Messenger "{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant "{2EBA8202-FBD5-4004-81EA-BDC38C054CE2}" = HP User Guides 0153 "{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App "{3023EBDA-BF1B-4831-B347-E5018555F26E}" = HP MediaSmart Movie Themes "{306B39C9-3AB1-4161-8567-9C7E50B41AE3}" = Microsoft Works "{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM) "{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM) "{33C17B75-EA9C-0687-9CED-03D92637B042}" = CCC Help Hungarian "{3472C84E-2FD0-439F-B27F-C290C1E4CD8B}" = CorelDRAW Graphics Suite X5 - Filters "{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform "{3FBDB7B8-7472-E895-2E5D-99D190B2D1B6}" = Catalyst Control Center InstallProxy "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{44A27085-0616-4181-A0C3-81C7ECA17F73}" = CorelDRAW Graphics Suite X4 "{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = PowerRecover "{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}" = Junk Mail filter update "{4F46FDB9-B906-47BF-B3D5-C62E01B3C5EE}" = HP Support Assistant "{51958BA7-21E4-4A8B-9098-CD8375BD17B2}" = Asystent rejestracji usługi Windows Live "{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM) "{5271C0D4-24E4-4C3D-A782-C012033FD3CF}" = AMD USB Filter Driver "{546937C5-0529-333E-0D5E-FE3C53108806}" = CCC Help Japanese "{54B8F4A1-02B0-4D32-8F37-925526C0EEC6}" = CorelDRAW Graphics Suite X5 - Connect "{54CC7901-804D-4155-B353-21F0CC9112AB}" = HP Wireless Assistant "{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01) "{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM) "{55C70B62-5EF1-D527-7CAB-E50D8B3B4990}" = Catalyst Control Center Graphics Full New "{57400C1E-BC51-4ECE-AD2A-A6096204DDEC}" = CorelDRAW Graphics Suite X5 - VBA "{577ED77E-25D9-1A76-4EF0-773B9C173758}" = CCC Help Portuguese "{59123CCF-FED2-46FF-9293-D1DC80042219}" = CorelDRAW Graphics Suite X5 - Redist "{5B295588-59C1-4386-9F85-BB4BEDCB0D22}" = HP Customer Experience Enhancements "{5DB4EA68-A509-D408-585C-C9D045FADF72}" = Catalyst Control Center Graphics Previews Vista "{62978C1C-FE2E-4A4E-851D-3EB406C9EBC2}" = CorelDRAW Graphics Suite X5 - Draw "{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic "{65094424-9351-40B8-939B-3676D67E48E0}" = Corel Graphics - Windows Shell Extension "{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update "{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM) "{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library "{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart Live TV "{67EDD823-135A-4D59-87BD-950616D6E857}" = EPSON Copy Utility 3 "{6834B8AE-D23B-4B26-A919-6515844CF2BA}" = CorelDRAW Graphics Suite X4 - Lang PL "{6D12B99F-EAAA-49D8-8E2F-74FA7459CCB2}" = Adobe Asset Services CS3 "{6D335F78-1F4F-7826-56DD-4F350EA6EADD}" = CCC Help Greek "{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10 "{6EF04EAE-0354-9919-E757-F1203E6F422B}" = CCC Help Italian "{7028B245-30A2-BD8C-31B9-6008216FBDC2}" = CCC Help French "{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp" = WildTangent Games App (HP Games) "{71828142-5A24-4BD0-97E7-976DA08CE6CF}" = The Sims™ 3 Nowoczesny apartament Akcesoria "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{779D3256-84D0-936F-18F9-A154DC85B4B4}" = Catalyst Control Center Localization All "{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM) "{7F05E704-30A6-421A-97A7-8EEB1C7FF010}" = CorelDRAW Graphics SUite X4 - ICA "{7F05E704-30A6-421A-97A7-8EEB1C7FF012}" = CorelDRAW Graphics Suite X4 - Capture "{7F05E704-30A6-421A-97A7-8EEB1C7FF013}" = CorelDRAW Graphics Suite X4 - Draw "{7F05E704-30A6-421A-97A7-8EEB1C7FF014}" = CorelDRAW Graphics Suite X4 - PP "{7F05E704-30A6-421A-97A7-8EEB1C7FF016}" = CorelDRAW Graphics Suite X4 - Content "{7F05E704-30A6-421A-97A7-8EEB1C7FF017}" = CorelDRAW Graphics Suite X4 - Filters "{7F05E704-30A6-421A-97A7-8EEB1C7FF019}" = CorelDRAW Graphics Suite X4 - FontNav "{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page "{7F4DA5B8-6884-47F2-AEBA-D9111E420C63}" = CCC Help Danish "{7F9A8D27-A1B9-164F-FCB1-0B64C88629CF}" = CCC Help Norwegian "{803263F7-8CAC-DC6D-3288-8128865A7472}" = CCC Help German "{82EF29B1-9B60-4142-A155-0599216DD053}" = LightScribe System Software "{83258E90-1F76-4E13-9F60-A0F8ED41E76F}" = PC Connectivity Solution "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{83BEEFB4-8C28-4F4F-8A9D-E0D1ADCE335B}" = The Sims Średniowiecze "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver "{8CC47AA0-5774-61FC-6A59-7E1C936DB753}" = ccc-core-static "{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10 "{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3 "{9244E956-5939-4B88-930C-0699D4AB2B95}" = CorelDRAW Graphics Suite X5 - WT "{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM) "{938C2383-A692-4D2C-AE45-024F91EF7B1D}" = CorelDRAW Graphics Suite X5 - PL "{983F7145-CABF-4EDD-9F3D-E06B2F024BD3}" = CorelDRAW Graphics Suite X5 - FontNav "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A28867B-109A-5BBF-85C0-FC1BAA98CA1C}" = CCC Help Russian "{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10 "{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM) "{9D0798D0-AF6C-4E62-94B1-AEBF1A43E00A}" = CorelDRAW Graphics Suite X4 - IPM "{A1B04B6B-25BB-48AD-8BD9-D31A86E89F3E}" = CorelDRAW Graphics Suite X5 - PHOTO-PAINT "{A8BCC9E4-9036-3029-F2BC-AA73A62DA73D}" = CCC Help Turkish "{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU "{AC76BA86-7AD7-1045-7B44-A91000000001}" = Adobe Reader 9.1 - Polish "{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video "{B399C91E-96F2-4265-9884-1C9A10E9FCF4}" = CorelDRAW Graphics Suite X5 "{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6 "{B53E61D7-7C80-40DF-82D2-CF5390D6D20A}" = HP Advisor "{B5C746E6-D961-445C-3768-5B6FAF6A1A31}" = CCC Help Spanish "{B61D21B6-469D-4423-B161-62DB20B8A70E}" = Visual Basic for Applications (R) Core - English "{B6892A3F-51F5-4BA4-92E5-3F4A1A10720D}" = Podstawowe programy Windows Live "{B90450DF-E781-46FD-B1F1-0C86DA40E443}" = PIF DESIGNER "{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}" = EPSON Easy Photo Print "{BF439B41-0252-48DE-8B8B-0430CB26A181}" = CorelDRAW Graphics Suite X4 - VBA "{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3 "{C0769946-2CF1-9E8D-009B-5C413B3F01D1}" = CCC Help Czech "{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM) "{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM) "{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10 "{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program "{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}" = Nokia Connectivity Cable Driver "{C4F7EEE5-3D99-8552-7483-B2F412838B2A}" = Catalyst Control Center Graphics Previews Common "{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "{CA3861BA-1D96-4D66-B577-318E1602C4F3}" = CorelDRAW Graphics Suite X5 - Common "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "{CBF4DADD-974D-49C8-BC83-C6F31554001E}" = Adobe Setup "{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW Graphics Suite X5 - Setup Files "{D46D081B-F60E-467E-A7C4-117B70D76731}" = HP Update "{D4C41D27-A2D5-94C6-1D08-3D470A12EAF0}" = CCC Help Swedish "{D596EEA2-C6C8-45D3-89DF-FA2DBE99F829}" = Visual Basic for Applications (R) Core - English "{D642FF8D-438D-4545-A1D5-2EDB4BCAE3BA}" = CorelDRAW Graphics Suite X5 - Photozoom Plugin "{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3 "{D9D6A848-1BFD-592B-5F9D-0BA8692FDF0B}" = CCC Help Finnish "{DA95E878-B181-4366-A433-6145592707A8}" = SweetIM for Messenger 3.1 "{DB4690C5-9015-401D-A96C-A49909B7C372}" = Poczta usługi Windows Live "{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM) "{DB81779E-7CC5-4630-BCFC-754004956444}" = Visual Basic for Applications (R) Core "{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD "{DCD91C2F-3A86-B328-59A0-5EED6190D983}" = Catalyst Control Center Graphics Full Existing "{DD49053A-0140-44EF-AE75-C4BC1FDB8286}" = Windows Live Writer "{E0404B63-D977-4C92-933E-422B278734CA}" = myMousePainter "{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10 "{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10 "{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant "{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5}" = HP MediaSmart Internet TV "{E5F5CAA5-84ED-DE41-40D0-8926FE7E5F4D}" = Catalyst Control Center Graphics Light "{E6CE345D-BF83-1242-9E4D-3D60A5036D87}" = CCC Help English "{E86BC406-944E-41F6-ADE6-2C136734C96B}" = EPSON File Manager "{EC155897-712F-5637-A5DA-6C7CE7CB5521}" = CCC Help Korean "{EDB98D5A-A6FB-425C-BFB7-51A0924B762D}" = CorelDRAW Graphics Suite X5 - Capture "{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10 "{F0580F64-44A1-C607-9364-887912B74F4D}" = CCC Help Thai "{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL "{F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}" = HP Setup "{F3F9A4E5-CD9F-4657-CF99-5CE3F7729909}" = Catalyst Control Center Core Implementation "{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10 "{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM) "{F5B1D41A-05B9-98E2-C350-E69D4A444CB4}" = CCC Help Chinese Traditional "{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic "{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM) "{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10 "{FCF0F615-6E70-B949-028F-88D32C55C2BC}" = CCC Help Dutch "{FE4B83DE-85CF-4DE5-90CE-A2735A0E1F21}" = CorelDRAW Graphics Suite X5 - VideoBrowser "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe_678cd98c8365a5647f9a2e539d120a8" = Adobe Photoshop CS3 "ALLPlayer_is1" = ALLPlayer V4.X "AOL Toolbar" = Pasek narzędzi AOL 5.0 "AP Tuner 3.08" = AP Tuner 3.08 "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "conduitEngine" = Conduit Engine "Crescendo" = Crescendo Music Notation Editor "EarMaster Pro 5_is1" = EarMaster Pro 5 "Emurayden PSX Emulator v2.2" = Emurayden PSX Emulator v2.2 "ESDX6000_CX5900 Przew. użyt." = ESDX6000_CX5900 Przew. użyt. "ExpressBurn" = Express Burn Disc Burning Software "ExpressRip" = Express Rip "facemoods" = facemoods "Gadu-Gadu 10" = Gadu-Gadu 10 "Generic USB 106 Sound" = USB Multi-Channel Audio Device "Guitar Pro 5_is1" = Guitar Pro 5.2 "Icy Tower v1.4_is1" = Icy Tower v1.4 "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam "InstallShield_{07A540AB-D785-11D5-8E89-0090275862A0}" = Corel Graphics Suite 11 "InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite "InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email "InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = HP MediaSmart Movie Themes "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart Live TV "InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video "InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD "InstallShield_{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5}" = HP MediaSmart Internet TV "Jazz Jackrabbit 2-The Secret Files" = Jazz Jackrabbit 2-The Secret Files "MixPad" = MixPad Audio Mixer "Mozilla Firefox (3.6.20)" = Mozilla Firefox (3.6.20) "NapiProjekt_is1" = NapiProjekt 1.0.6.9 "NCH Toolbar" = NCH Toolbar "Opera 11.50.1074" = Opera 11.50 "pcsx2-r4600" = PCSX2 - Playstation 2 Emulator "Purmo OZC 4.0_is1" = Purmo OZC - Deinstalacja programu "RealAlt_is1" = Real Alternative 2.0.2 "Re-Volt" = Re-Volt "Shockwave" = Shockwave "Softonic-Polska Toolbar" = Softonic-Polska Toolbar "Switch" = Switch Sound File Converter "Tomb Raider: Legend" = Tomb Raider: Legend 1.0 "UltraISO_is1" = UltraISO Premium V9.36 "uTorrent" = µTorrent "WavePad" = WavePad Sound Editor "WildTangent hp Master Uninstall" = HP Games "WinGimp-2.0_is1" = GIMP 2.6.10 "WinLiveSuite_Wave3" = Podstawowe programy Windows Live "WinRAR archiver" = Archiwizator WinRAR "WorldUnlock Codes Calculator" = WorldUnlock Codes Calculator [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-03-15 08:09:31 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2011-03-15 08:09:31 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2011-03-15 08:13:25 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2011-03-15 09:14:33 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2011-03-15 10:06:22 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2011-03-15 11:38:35 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2011-03-15 11:38:35 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2011-03-15 11:45:27 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2011-03-15 12:04:17 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . Error - 2011-03-15 13:00:26 | Computer Name = oem-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . [ DigitalPersona Pro Events ] Error - 2011-02-04 09:41:53 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. Error - 2011-02-04 09:41:55 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. Error - 2011-02-04 09:42:02 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. Error - 2011-02-04 09:42:03 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. Error - 2011-02-04 09:42:09 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. Error - 2011-05-29 10:09:02 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. Error - 2011-05-29 10:09:16 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. Error - 2011-05-29 10:09:19 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. Error - 2011-07-24 10:45:20 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. Error - 2011-07-24 10:45:27 | Computer Name = oem-Komputer | Source = DigitalPersona Pro | ID = 17827841 Description = One-to-one fingerprint match failed. [ Hewlett-Packard Events ] Error - 2010-02-22 06:14:16 | Computer Name = oem-Komputer | Source = Hewlett-Packard | ID = 0 Description = pl-PL Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu. HPSF w HPAssistant.Pages.MaintainAnalyzing.MaintainAnalyzing_Unloaded(Object sender, RoutedEventArgs e) w System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs) w System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised) w System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args) w System.Windows.UIElement.RaiseEvent(RoutedEventArgs e) w System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root, RoutedEvent routedEvent) w System.Windows.BroadcastEventHelper.BroadcastUnloadedEvent(Object root) w MS.Internal.LoadedOrUnloadedOperation.DoWork() w System.Windows.Media.MediaContext.FireLoadedPendingCallbacks() w System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks() w System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget) w System.Windows.Media.MediaContext.AnimatedRenderMessageHandler(Object resizedCompositionTarget) w System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Boolean isSingleParameter) w System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler) Error - 2010-03-29 05:59:05 | Computer Name = oem-Komputer | Source = Hewlett-Packard | ID = 0 Description = pl-PL Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu. HPSF w HPAssistant.Pages.MaintainAnalyzing.MaintainAnalyzing_Unloaded(Object sender, RoutedEventArgs e) w System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs) w System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised) w System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args) w System.Windows.UIElement.RaiseEvent(RoutedEventArgs e) w System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root, RoutedEvent routedEvent) w System.Windows.BroadcastEventHelper.BroadcastUnloadedEvent(Object root) w MS.Internal.LoadedOrUnloadedOperation.DoWork() w System.Windows.Media.MediaContext.FireLoadedPendingCallbacks() w System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks() w System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget) w System.Windows.Media.MediaContext.RenderMessageHandler(Object resizedCompositionTarget) w System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Boolean isSingleParameter) w System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler) Error - 2010-05-10 04:19:08 | Computer Name = oem-Komputer | Source = Hewlett-Packard | ID = 0 Description = pl-PL Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu. HPSF w HPAssistant.Pages.MaintainAnalyzing.MaintainAnalyzing_Unloaded(Object sender, RoutedEventArgs e) w System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs) w System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised) w System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args) w System.Windows.UIElement.RaiseEvent(RoutedEventArgs e) w System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root, RoutedEvent routedEvent) w System.Windows.BroadcastEventHelper.BroadcastUnloadedEvent(Object root) w MS.Internal.LoadedOrUnloadedOperation.DoWork() w System.Windows.Media.MediaContext.FireLoadedPendingCallbacks() w System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks() w System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget) w System.Windows.Media.MediaContext.RenderMessageHandler(Object resizedCompositionTarget) w System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Boolean isSingleParameter) w System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler) Error - 2010-07-06 05:40:35 | Computer Name = oem-Komputer | Source = Hewlett-Packard | ID = 0 Description = pl-PL Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu. HPSF w HPAssistant.Pages.MaintainAnalyzing.MaintainAnalyzing_Unloaded(Object sender, RoutedEventArgs e) w System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs) w System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised) w System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args) w System.Windows.UIElement.RaiseEvent(RoutedEventArgs e) w System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root, RoutedEvent routedEvent) w System.Windows.BroadcastEventHelper.BroadcastUnloadedEvent(Object root) w MS.Internal.LoadedOrUnloadedOperation.DoWork() w System.Windows.Media.MediaContext.FireLoadedPendingCallbacks() w System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks() w System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget) w System.Windows.Media.MediaContext.AnimatedRenderMessageHandler(Object resizedCompositionTarget) w System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Boolean isSingleParameter) w System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler) Error - 2010-10-04 06:07:18 | Computer Name = oem-Komputer | Source = Hewlett-Packard | ID = 0 Description = pl-PL Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu. HPSF w HPAssistant.Pages.MaintainAnalyzing.MaintainAnalyzing_Unloaded(Object sender, RoutedEventArgs e) w System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs) w System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised) w System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args) w System.Windows.UIElement.RaiseEvent(RoutedEventArgs e) w System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root, RoutedEvent routedEvent) w System.Windows.BroadcastEventHelper.BroadcastUnloadedEvent(Object root) w MS.Internal.LoadedOrUnloadedOperation.DoWork() w System.Windows.Media.MediaContext.FireLoadedPendingCallbacks() w System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks() w System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget) w System.Windows.Media.MediaContext.RenderMessageHandler(Object resizedCompositionTarget) w System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Boolean isSingleParameter) w System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler) Error - 2010-10-25 16:33:49 | Computer Name = oem-Komputer | Source = Hewlett-Packard | ID = 0 Description = pl-PL Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu. HPSF w HPAssistant.Pages.MaintainAnalyzing.MaintainAnalyzing_Unloaded(Object sender, RoutedEventArgs e) w System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs) w System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised) w System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args) w System.Windows.UIElement.RaiseEvent(RoutedEventArgs e) w System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root, RoutedEvent routedEvent) w System.Windows.BroadcastEventHelper.BroadcastUnloadedEvent(Object root) w MS.Internal.LoadedOrUnloadedOperation.DoWork() w System.Windows.Media.MediaContext.FireLoadedPendingCallbacks() w System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks() w System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget) w System.Windows.Media.MediaContext.AnimatedRenderMessageHandler(Object resizedCompositionTarget) w System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Boolean isSingleParameter) w System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler) Error - 2011-01-31 07:23:25 | Computer Name = oem-Komputer | Source = Hewlett-Packard | ID = 0 Description = pl-PL Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu. HPSF w HPAssistant.Pages.MaintainAnalyzing.MaintainAnalyzing_Unloaded(Object sender, RoutedEventArgs e) w System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs) w System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised) w System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args) w System.Windows.UIElement.RaiseEvent(RoutedEventArgs e) w System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root, RoutedEvent routedEvent) w System.Windows.BroadcastEventHelper.BroadcastUnloadedEvent(Object root) w MS.Internal.LoadedOrUnloadedOperation.DoWork() w System.Windows.Media.MediaContext.FireLoadedPendingCallbacks() w System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks() w System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget) w System.Windows.Media.MediaContext.RenderMessageHandler(Object resizedCompositionTarget) w System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Boolean isSingleParameter) w System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler) Error - 2011-04-20 15:39:12 | Computer Name = oem-Komputer | Source = Hewlett-Packard | ID = 0 Description = pl-PL Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu. HPSF w HPAssistant.Pages.MaintainAnalyzing.MaintainAnalyzing_Unloaded(Object sender, RoutedEventArgs e) w System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs) w System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised) w System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args) w System.Windows.UIElement.RaiseEvent(RoutedEventArgs e) w System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root, RoutedEvent routedEvent) w System.Windows.BroadcastEventHelper.BroadcastUnloadedEvent(Object root) w MS.Internal.LoadedOrUnloadedOperation.DoWork() w System.Windows.Media.MediaContext.FireLoadedPendingCallbacks() w System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks() w System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget) w System.Windows.Media.MediaContext.RenderMessageHandler(Object resizedCompositionTarget) w System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Boolean isSingleParameter) w System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler) [ Media Center Events ] Error - 2010-11-05 09:38:50 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 14:38:50 - Błąd podczas nawiązywania połączenia z Internetem. 14:38:50 - Nie można skontaktować się z serwerem.. Error - 2010-11-05 09:39:24 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 14:39:19 - Błąd podczas nawiązywania połączenia z Internetem. 14:39:19 - Nie można skontaktować się z serwerem.. Error - 2010-11-05 10:40:02 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 15:40:02 - Błąd podczas nawiązywania połączenia z Internetem. 15:40:02 - Nie można skontaktować się z serwerem.. Error - 2010-11-05 10:40:32 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 15:40:31 - Błąd podczas nawiązywania połączenia z Internetem. 15:40:31 - Nie można skontaktować się z serwerem.. Error - 2010-11-05 11:41:10 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 16:41:10 - Błąd podczas nawiązywania połączenia z Internetem. 16:41:10 - Nie można skontaktować się z serwerem.. Error - 2010-11-05 11:41:40 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 16:41:39 - Błąd podczas nawiązywania połączenia z Internetem. 16:41:39 - Nie można skontaktować się z serwerem.. Error - 2010-11-09 08:52:15 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 13:52:09 - Błąd podczas nawiązywania połączenia z Internetem. 13:52:09 - Nie można skontaktować się z serwerem.. Error - 2011-05-15 09:56:28 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 15:56:27 - Błąd podczas nawiązywania połączenia z Internetem. 15:56:28 - Nie można skontaktować się z serwerem.. Error - 2011-05-15 09:57:00 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 15:56:57 - Błąd podczas nawiązywania połączenia z Internetem. 15:56:57 - Nie można skontaktować się z serwerem.. Error - 2011-05-15 15:21:46 | Computer Name = oem-Komputer | Source = MCUpdate | ID = 0 Description = 21:21:46 - Błąd podczas nawiązywania połączenia z Internetem. 21:21:46 - Nie można skontaktować się z serwerem.. [ System Events ] Error - 2011-07-01 11:48:29 | Computer Name = oem-Komputer | Source = ACPI | ID = 327693 Description = : Kontroler osadzony nie odpowiedział przed upływem limitu czasu. Może to wskazywać, że wystąpił błąd w sprzęcie lub oprogramowaniu układowym kontrolera osadzonego albo że system BIOS uzyskuje dostęp do kontrolera osadzonego w niepoprawny sposób. Należy skontaktować się z producentem komputera w sprawie uaktualnionego systemu BIOS. W niektórych sytuacjach ten błąd może spowodować niepoprawne funkcjonowanie komputera. Error - 2011-07-01 12:28:09 | Computer Name = oem-Komputer | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 18:26:31 na ?2011-?07-?01 było nieoczekiwane. Error - 2011-07-01 12:28:13 | Computer Name = oem-Komputer | Source = ACPI | ID = 327693 Description = : Kontroler osadzony nie odpowiedział przed upływem limitu czasu. Może to wskazywać, że wystąpił błąd w sprzęcie lub oprogramowaniu układowym kontrolera osadzonego albo że system BIOS uzyskuje dostęp do kontrolera osadzonego w niepoprawny sposób. Należy skontaktować się z producentem komputera w sprawie uaktualnionego systemu BIOS. W niektórych sytuacjach ten błąd może spowodować niepoprawne funkcjonowanie komputera. Error - 2011-07-15 07:37:37 | Computer Name = oem-Komputer | Source = Service Control Manager | ID = 7006 Description = Wywołanie ScRegSetValueExW dla Start nie powiodło się i wystąpił następujący błąd: %%5. Error - 2011-07-15 07:39:07 | Computer Name = oem-Komputer | Source = ACPI | ID = 327693 Description = : Kontroler osadzony nie odpowiedział przed upływem limitu czasu. Może to wskazywać, że wystąpił błąd w sprzęcie lub oprogramowaniu układowym kontrolera osadzonego albo że system BIOS uzyskuje dostęp do kontrolera osadzonego w niepoprawny sposób. Należy skontaktować się z producentem komputera w sprawie uaktualnionego systemu BIOS. W niektórych sytuacjach ten błąd może spowodować niepoprawne funkcjonowanie komputera. Error - 2011-07-15 10:30:58 | Computer Name = oem-Komputer | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 15:45:54 na ?2011-?07-?15 było nieoczekiwane. Error - 2011-07-15 10:31:02 | Computer Name = oem-Komputer | Source = ACPI | ID = 327693 Description = : Kontroler osadzony nie odpowiedział przed upływem limitu czasu. Może to wskazywać, że wystąpił błąd w sprzęcie lub oprogramowaniu układowym kontrolera osadzonego albo że system BIOS uzyskuje dostęp do kontrolera osadzonego w niepoprawny sposób. Należy skontaktować się z producentem komputera w sprawie uaktualnionego systemu BIOS. W niektórych sytuacjach ten błąd może spowodować niepoprawne funkcjonowanie komputera. Error - 2011-07-18 04:40:07 | Computer Name = oem-Komputer | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 11:32:15 na ?2011-?07-?17 było nieoczekiwane. Error - 2011-08-07 12:12:48 | Computer Name = oem-Komputer | Source = Service Control Manager | ID = 7034 Description = Usługa Audio Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2011-08-19 13:11:55 | Computer Name = oem-Komputer | Source = Service Control Manager | ID = 7034 Description = Usługa AMD External Events Utility niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. < End of report >

Kod: Zaznacz wszystko: OTL logfile created on: 2011-08-19 19:08:11 - Run 1 OTL by OldTimer - Version 3.2.26.5 Folder = C:\Users\oem\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,45 Gb Available Physical Memory | 61,23% Memory free 7,99 Gb Paging File | 6,12 Gb Available in Paging File | 76,59% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 452,67 Gb Total Space | 282,29 Gb Free Space | 62,36% Space Free | Partition Type: NTFS Drive D: | 12,80 Gb Total Space | 2,14 Gb Free Space | 16,71% Space Free | Partition Type: NTFS Computer Name: OEM-KOMPUTER | User Name: oem | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-08-19 19:02:36 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\oem\Desktop\OTL.exe PRC - [2011-07-17 11:03:10 | 000,947,056 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2011-07-15 13:28:58 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2011-04-27 15:19:13 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2011-04-15 18:04:08 | 000,399,736 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe PRC - [2010-11-03 19:20:45 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2010-05-04 12:07:22 | 000,503,080 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe PRC - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2009-07-24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe PRC - [2009-07-24 18:24:02 | 000,427,304 | ---- | M] (CyberLink Corp.) -- c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\TVAgent.exe PRC - [2009-07-23 20:45:52 | 000,128,296 | ---- | M] (CyberLink Corp.) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe PRC - [2009-07-23 11:37:16 | 000,206,120 | ---- | M] (CyberLink) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe PRC - [2009-07-01 18:43:54 | 000,842,816 | ---- | M] (DigitalPersona, Inc.) -- C:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exe PRC - [2009-07-01 18:43:54 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) -- C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe PRC - [2008-05-20 12:18:32 | 000,221,184 | R--- | M] () -- C:\Windows\system\cm106eye.exe PRC - [2007-06-05 13:20:32 | 000,177,704 | ---- | M] () -- C:\Windows\SysWOW64\PSIService.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2009-07-24 18:24:16 | 000,275,848 | ---- | M] () -- c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\Kernel\TV\CLCapEngine.dll MOD - [2009-07-24 18:24:16 | 000,124,288 | ---- | M] () -- c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\Kernel\TV\CLSchMgr.dll MOD - [2009-07-24 18:24:14 | 000,349,480 | ---- | M] () -- c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\Kernel\TV\CLTinyDB.dll MOD - [2009-07-23 11:37:14 | 000,931,112 | ---- | M] () -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMediaLibrary.dll MOD - [2009-06-17 11:40:16 | 007,745,536 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll MOD - [2009-06-17 11:40:16 | 002,121,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll MOD - [2009-06-17 11:40:16 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll MOD - [2008-05-20 12:18:32 | 000,221,184 | R--- | M] () -- C:\Windows\system\cm106eye.exe MOD - [2006-09-13 07:08:00 | 000,491,520 | R--- | M] () -- C:\Windows\system\cmau106.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2011-07-07 08:49:42 | 000,376,352 | ---- | M] (Soluto) [Auto | Running] -- C:\Program Files\Soluto\SolutoService.exe -- (SolutoService) SRV:[b]64bit:[/b] - [2009-07-22 03:33:32 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe -- (STacSV) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-12 22:18:24 | 001,924,400 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\SysNative\vcsFPService.exe -- (vcsFPService) SRV:[b]64bit:[/b] - [2009-07-08 13:49:02 | 000,030,520 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv) SRV:[b]64bit:[/b] - [2009-07-02 20:16:06 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-03-02 23:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe -- (AESTFilters) SRV - [2011-07-17 11:31:33 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011-07-15 13:28:58 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011-04-27 15:19:13 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2010-10-12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService) SRV - [2010-09-02 12:52:12 | 000,989,184 | ---- | M] (IVT Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe -- (BlueSoleilCS) SRV - [2010-08-31 15:26:36 | 000,192,000 | ---- | M] (IVT Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe -- (BsHelpCS) SRV - [2010-08-31 15:20:20 | 000,147,563 | ---- | M] (IVT Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe -- (BsMobileCS) SRV - [2010-05-04 12:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-07-24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2009-07-12 22:04:26 | 001,656,112 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vcsFPService.exe -- (vcsFPService) SRV - [2009-07-01 18:43:54 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) [Auto | Running] -- C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe -- (DpHost) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008-09-08 08:59:00 | 000,575,488 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2007-06-05 13:20:32 | 000,177,704 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PSIService.exe -- (ProtexisLicensing) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011-08-19 19:00:36 | 000,526,392 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2011-07-15 13:28:59 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb) DRV:[b]64bit:[/b] - [2011-07-15 13:28:59 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:[b]64bit:[/b] - [2011-07-07 08:34:08 | 000,054,728 | ---- | M] (Soluto LTD.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\Soluto.sys -- (Soluto) DRV:[b]64bit:[/b] - [2010-08-26 22:29:30 | 000,025,352 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btcombus.sys -- (BTCOMBUS) DRV:[b]64bit:[/b] - [2010-08-26 22:29:28 | 000,029,448 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btcomport.sys -- (BTCOM) DRV:[b]64bit:[/b] - [2010-08-18 23:19:46 | 000,020,488 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btnetdrv.sys -- (BT) DRV:[b]64bit:[/b] - [2010-06-24 12:35:04 | 000,042,888 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btcusb.sys -- (Btcsrusb) DRV:[b]64bit:[/b] - [2010-04-06 19:33:10 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btnetBus.sys -- (btnetBUs) DRV:[b]64bit:[/b] - [2010-04-06 19:32:48 | 000,027,016 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IvtBtBus.sys -- (IvtBtBUs) DRV:[b]64bit:[/b] - [2010-04-06 19:32:46 | 000,023,944 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BtHidBus.sys -- (BtHidBus) DRV:[b]64bit:[/b] - [2009-09-22 03:47:14 | 001,484,800 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-07-22 03:33:32 | 000,487,936 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA) DRV:[b]64bit:[/b] - [2009-07-21 05:39:22 | 000,140,712 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR) DRV:[b]64bit:[/b] - [2009-07-15 01:16:34 | 000,273,456 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009-07-08 13:49:08 | 000,030,008 | ---- | M] (Hewlett-Packard) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt) DRV:[b]64bit:[/b] - [2009-07-08 13:48:50 | 000,041,272 | ---- | M] (Hewlett-Packard) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer) DRV:[b]64bit:[/b] - [2009-07-02 20:51:30 | 006,036,480 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2009-06-29 20:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir) DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009-06-10 23:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2009-06-10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2009-06-10 22:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-06-05 12:20:26 | 000,114,192 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2009-05-23 08:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-05-05 07:30:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO) DRV:[b]64bit:[/b] - [2009-04-29 08:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV:[b]64bit:[/b] - [2009-03-09 06:49:08 | 000,036,408 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter) DRV:[b]64bit:[/b] - [2008-10-13 14:20:38 | 001,451,008 | ---- | M] (C-Media Electronics Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CM10664.sys -- (USBMULCD) DRV:[b]64bit:[/b] - [2008-08-28 13:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV - [2010-01-29 11:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_PL&c=94&bd=Pavilion&pf=cnnb IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_PL&c=94&bd=Pavilion&pf=cnnb IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_PL&c=94&bd=Pavilion&pf=cnnb IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_PL&c=94&bd=Pavilion&pf=cnnb IE - HKLM\..\URLSearchHook: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\prxtbNCH.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_PL&c=94&bd=Pavilion&pf=cnnb IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://174.37.200.81 IE - HKCU\..\URLSearchHook: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\prxtbNCH.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.defaultthis.engineName: "NCH Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2117678&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" FF - prefs.js..browser.search.selectedEngine: "NCH Customized Web Search" FF - prefs.js..browser.startup.homepage: "http://www.fullarticles.net" FF - prefs.js..extensions.enabledItems: ffxtlbr@Facemoods.com:1.1.0 FF - prefs.js..extensions.enabledItems: {ce18769b-c7fa-42d2-860d-17c4662c70ad}:2.7.2.0 FF - prefs.js..extensions.enabledItems: {c2db4fe6-8409-45ce-8010-189a7b5cce86}:2.7.2.0 FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2 FF - prefs.js..extensions.enabledItems: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}:3.2.5.2 FF - prefs.js..extensions.enabledItems: IplextoALL@ALLPlayer.org:0.1 FF - prefs.js..keyword.URL: "http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZCman000&fl=0&ptb=BMMpHcpD2upaK6Kxwa2xLQ&url=http://search.mywebsearch.com/mywebsearch/GGmain.jhtml&st=kwd&n=77ce56aa&searchfor=" FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ [2009-10-21 02:10:37 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.20\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011-08-17 15:42:59 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.20\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011-08-17 15:42:59 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files (x86)\DigitalPersona\Bin\firefoxext [2009-10-21 02:10:37 | 000,000,000 | ---D | M] [2010-06-04 12:46:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\oem\AppData\Roaming\mozilla\Extensions [2011-08-17 12:53:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions [2011-05-09 20:37:26 | 000,000,000 | ---D | M] (Mario Forever Toolbar) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\{707db484-2428-402d-afb5-d85b387544c7} [2011-03-14 12:50:08 | 000,000,000 | ---D | M] (NCH Toolbar) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\{c2db4fe6-8409-45ce-8010-189a7b5cce86} [2011-03-26 23:29:31 | 000,000,000 | ---D | M] (Softonic-Polska Community Toolbar) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} [2010-08-27 11:43:07 | 000,000,000 | ---D | M] (Babylon-English Toolbar) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\{ce18769b-c7fa-42d2-860d-17c4662c70ad} [2011-03-26 23:29:29 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\engine@conduit.com [2010-08-27 11:43:41 | 000,000,000 | ---D | M] (Facemoods) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\ffxtlbr@Facemoods.com [2011-05-29 20:31:08 | 000,000,000 | ---D | M] (Iplex to ALLPlayer) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\IplextoALL@ALLPlayer.org [2011-01-17 15:40:58 | 000,000,909 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\os212pm0.default\searchplugins\conduit.xml [2010-06-04 12:46:34 | 000,009,977 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\os212pm0.default\searchplugins\mywebsearch.xml [2011-01-26 22:30:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2011-06-09 17:01:52 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-09-24 18:41:11 | 000,002,226 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml [2011-06-09 17:01:52 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-03-28 18:56:18 | 000,002,035 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchFxt.xml [2011-06-09 17:01:52 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2011-06-09 17:01:53 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2011-06-09 17:01:53 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-06-09 17:01:53 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O2 - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.) O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.8.1\bh\facemoods.dll (facemoods.com BHO) O2 - BHO: (AOL Toolbar BHO) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll (AOL LLC) O2 - BHO: (NCH Toolbar) - {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\prxtbNCH.dll (Conduit Ltd.) O2 - BHO: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - File not found O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (NCH Toolbar) - {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\prxtbNCH.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll (AOL LLC) O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - File not found O3 - HKCU\..\Toolbar\WebBrowser: (NCH Toolbar) - {C2DB4FE6-8409-45CE-8010-189A7B5CCE86} - C:\Program Files (x86)\NCH\prxtbNCH.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll (AOL LLC) O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - File not found O4:[b]64bit:[/b] - HKLM..\Run: [Cm106Sound] C:\Windows\Syswow64\cm106.dll (C-Media Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [DpAgent] C:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exe (DigitalPersona, Inc.) O4 - HKLM..\Run: [Emurayden PSX Emulator] File not found O4 - HKLM..\Run: [facemoods] C:\Program Files (x86)\facemoods.com\facemoods\1.4.8.1\facemoodssrv.exe (facemoods.com) O4 - HKLM..\Run: [HPCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKCU..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [EPSON Stylus DX6000 Series] File not found O4 - HKCU..\Run: [EPSON Stylus DX6000 Series (Kopia 1)] File not found O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O4 - HKCU..\Run: [WMCOM] C:\Windows\wmcom.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2 O8:[b]64bit:[/b] - Extra context menu item: &Wyszukiwarka na pasku narzędzi AOL - C:\ProgramData\AOL\ieToolbar\resources\pl-PL\local\search.html () O8 - Extra context menu item: &Wyszukiwarka na pasku narzędzi AOL - C:\ProgramData\AOL\ieToolbar\resources\pl-PL\local\search.html () O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - Reg Error: Key error. File not found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Program Files\Soluto\soluto.exe /userinit) - C:\Program Files\Soluto\soluto.exe (Soluto) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{50549400-606e-11e0-b46c-00269e67181f}\Shell - "" = AutoRun O33 - MountPoints2\{50549400-606e-11e0-b46c-00269e67181f}\Shell\AutoRun\command - "" = H:\autorun.exe O33 - MountPoints2\{8e1f6312-c67f-11df-a1a5-002713390bd7}\Shell - "" = AutoRun O33 - MountPoints2\{8e1f6312-c67f-11df-a1a5-002713390bd7}\Shell\AutoRun\command - "" = F:\Setup.now.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-08-19 19:02:33 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\oem\Desktop\OTL.exe [2011-08-19 18:59:22 | 000,720,952 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\oem\Desktop\SPTDinst-v178-x64.exe [2011-08-19 18:52:56 | 000,499,008 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\oem\Desktop\SPTDinst-v178-x86.exe [2011-08-17 14:16:26 | 000,570,470 | ---- | C] (WH ) -- C:\Users\oem\AppData\Roaming\qghumeaylnlfdxfircvs85.exe [2011-08-17 10:21:05 | 000,000,000 | ---D | C] -- C:\Users\oem\AppData\Roaming\OwnRooms [2011-08-17 10:20:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dulux [2011-08-17 10:20:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AkzoNobel [2011-08-16 14:59:10 | 000,000,000 | ---D | C] -- C:\Windows\XSxS [2011-08-16 14:59:10 | 000,000,000 | ---D | C] -- C:\Users\oem\AppData\Local\Xenocode [2011-08-16 14:59:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xenocode [2011-08-16 14:56:41 | 000,000,000 | ---D | C] -- C:\h7a [2011-08-07 18:19:27 | 000,000,000 | ---D | C] -- C:\Users\oem\AppData\Roaming\Rovio [2011-08-07 18:18:12 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\AngryBirds RIO [2011-08-07 18:15:22 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\LIMBO.v1.0r4.multi9.cracked-THETA [2011-08-04 20:32:33 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\Documents\Tomb Raider - Legend [2011-08-04 20:25:52 | 000,098,304 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt.dll [2011-08-04 20:25:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eidos [2011-08-04 20:17:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tomb Raider - Legend [2011-08-04 10:36:54 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\pokój Lucka [2011-08-04 09:28:16 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\TOMB.RAIDER.ULTIMATE.COLLECTION.iNTERNAL- TorrentLeech [2011-08-01 13:10:43 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\garderoby [2011-07-29 11:51:17 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\PJ Harvey [2011-07-28 15:54:27 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\Documents\Recordpad [2011-07-28 15:54:25 | 000,000,000 | ---D | C] -- C:\Users\oem\AppData\Roaming\Recordpad [2011-07-28 15:54:22 | 000,000,000 | ---D | C] -- C:\ProgramData\NCH Software [2011-07-28 15:54:21 | 000,000,000 | ---D | C] -- C:\Users\oem\AppData\Roaming\NCH Software [2011-07-26 21:40:02 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\Dragon.Ball.Saga.PL.TVRip [2011-07-24 18:46:05 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\The.Last.House.On.The.Left.2009.PL.DVDRip.XViD-JB [2011-07-22 13:42:55 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\Documents\Programy [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-08-19 19:12:04 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-08-19 19:12:04 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-08-19 19:05:30 | 000,017,508 | ---- | M] () -- C:\Windows\SysNative\.rsp [2011-08-19 19:05:30 | 000,001,574 | ---- | M] () -- C:\Windows\SysNative\.lck [2011-08-19 19:03:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-08-19 19:03:34 | 3218,235,392 | -HS- | M] () -- C:\hiberfil.sys [2011-08-19 19:02:36 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\oem\Desktop\OTL.exe [2011-08-19 19:00:36 | 000,526,392 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys [2011-08-19 19:00:08 | 000,720,952 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\oem\Desktop\SPTDinst-v178-x64.exe [2011-08-19 18:53:06 | 000,499,008 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\oem\Desktop\SPTDinst-v178-x86.exe [2011-08-17 21:11:37 | 000,570,470 | ---- | M] (WH ) -- C:\Users\oem\AppData\Roaming\qghumeaylnlfdxfircvs85.exe [2011-08-17 20:46:03 | 000,012,057 | ---- | M] () -- C:\Users\oem\Desktop\Image1.jpg [2011-08-17 15:53:16 | 001,661,468 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-08-17 15:53:16 | 000,737,714 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-08-17 15:53:16 | 000,651,882 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-08-17 15:53:16 | 000,154,370 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-08-17 15:53:16 | 000,120,814 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-08-17 14:50:45 | 000,578,907 | ---- | M] () -- C:\Users\oem\Desktop\Mummy3.jar [2011-08-17 10:20:49 | 000,002,045 | ---- | M] () -- C:\Users\Public\Desktop\myMousePainter.lnk [2011-08-17 10:19:51 | 008,157,216 | ---- | M] () -- C:\Users\oem\Desktop\Documents\MyMousePainter-pl_PL-2.0.4720.exe [2011-08-16 13:28:48 | 000,000,326 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForoem.job [2011-08-07 20:27:44 | 000,000,558 | ---- | M] () -- C:\Windows\System\Cm106.ini [2011-08-06 10:27:09 | 000,117,283 | ---- | M] () -- C:\amk2.exe [2011-08-04 20:25:52 | 000,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt.dll [2011-08-02 18:22:40 | 002,027,216 | ---- | M] () -- C:\Users\oem\Desktop\DSC09528.JPG [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-08-17 20:46:03 | 000,012,057 | ---- | C] () -- C:\Users\oem\Desktop\Image1.jpg [2011-08-17 20:36:44 | 002,027,216 | ---- | C] () -- C:\Users\oem\Desktop\DSC09528.JPG [2011-08-17 14:50:44 | 000,578,907 | ---- | C] () -- C:\Users\oem\Desktop\Mummy3.jar [2011-08-17 14:16:39 | 000,053,248 | ---- | C] () -- C:\Users\oem\AppData\Roaming\chrtmp [2011-08-17 10:20:49 | 000,002,045 | ---- | C] () -- C:\Users\Public\Desktop\myMousePainter.lnk [2011-08-17 10:19:20 | 008,157,216 | ---- | C] () -- C:\Users\oem\Desktop\Documents\MyMousePainter-pl_PL-2.0.4720.exe [2011-08-16 14:59:18 | 009,121,280 | -H-- | C] () -- C:\Windows\wmcom.exe [2011-08-06 10:27:09 | 000,117,283 | ---- | C] () -- C:\amk2.exe [2011-06-19 18:38:33 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc [2011-05-29 20:31:35 | 000,810,496 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011-05-29 20:31:35 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2011-04-06 20:19:15 | 001,623,786 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-03-26 23:13:17 | 000,001,873 | ---- | C] () -- C:\Windows\SysWow64\SHORTCUT.INI [2011-03-26 23:13:13 | 000,000,124 | ---- | C] () -- C:\Windows\SysWow64\REMOTEDEVICE.INI [2011-03-26 23:13:09 | 000,006,495 | ---- | C] () -- C:\Windows\SysWow64\LOCALSERVICE.INI [2011-03-26 23:13:04 | 000,000,199 | ---- | C] () -- C:\Windows\SysWow64\LOCALDEVICE.INI [2011-03-26 23:10:07 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\BSPRINT.INI [2010-12-17 15:59:21 | 000,000,191 | ---- | C] () -- C:\Windows\Cm106.ini.cfl [2010-12-17 15:58:30 | 000,000,490 | R--- | C] () -- C:\Windows\cm106.ini [2010-12-17 15:57:52 | 000,001,249 | R--- | C] () -- C:\Windows\Cm106.ini.cfg [2010-12-08 17:00:49 | 000,111,932 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat [2010-12-08 17:00:49 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat [2010-12-08 17:00:49 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat [2010-12-08 17:00:49 | 000,026,154 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat [2010-12-08 17:00:49 | 000,024,903 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat [2010-12-08 17:00:49 | 000,021,390 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat [2010-12-08 17:00:49 | 000,020,148 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat [2010-12-08 17:00:49 | 000,011,811 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat [2010-12-08 17:00:49 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat [2010-12-08 17:00:49 | 000,001,146 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_DU.dat [2010-12-08 17:00:49 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat [2010-12-08 17:00:49 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat [2010-12-08 17:00:49 | 000,001,136 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat [2010-12-08 17:00:49 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat [2010-12-08 17:00:49 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat [2010-12-08 17:00:49 | 000,001,120 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_IT.dat [2010-12-08 17:00:49 | 000,001,107 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_GE.dat [2010-12-08 17:00:49 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat [2010-12-08 17:00:49 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini [2010-12-08 15:41:05 | 000,000,026 | ---- | C] () -- C:\Windows\CDE DX6000.ini [2010-09-02 12:52:18 | 000,001,206 | ---- | C] () -- C:\Windows\SysWow64\bscs.ini [2010-08-31 15:20:22 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\BsMobileCSps.dll [2010-08-25 17:40:38 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010-06-04 12:46:12 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2010-03-17 09:42:17 | 000,004,096 | -H-- | C] () -- C:\Users\oem\AppData\Local\keyfile3.drm [2010-02-10 19:31:57 | 000,014,336 | ---- | C] () -- C:\Users\oem\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-01-31 18:55:13 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2010-01-28 14:40:16 | 000,002,984 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2010-01-28 14:40:16 | 000,000,088 | RHS- | C] () -- C:\ProgramData\B07764CBF0.sys [2010-01-28 13:06:10 | 000,005,642 | -HS- | C] () -- C:\Windows\SysWow64\KGyGaAvL.sys [2010-01-28 13:06:10 | 000,000,088 | RHS- | C] () -- C:\Windows\SysWow64\B07764CBF0.sys [2010-01-22 11:04:30 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\BsVistaCommon.dll [2009-09-21 15:02:16 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2009-07-15 17:50:42 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL [2009-07-14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009-07-14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009-07-14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:59:36 | 001,498,564 | ---- | C] () -- C:\Windows\SysWow64\igkrng400.bin [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-06-10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2007-06-05 13:20:32 | 000,177,704 | ---- | C] () -- C:\Windows\SysWow64\PSIService.exe [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:B2836CDB < End of report >

Co robić dalej?

**Posty:** 85 · przez **kominekl** 20 Sie 2011, 15:45

Odinstaluj -> Conduit Engine, AOL Toolbar, NCH Toolbar, Softonic-Polska Toolbar, facemoods, oraz (jesli nie używasz) to IplexToALLPlayer. Nalegam, abyś usunął jeszcze Soluto.

Następnie uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:Processes
killallprocesses

:OTL

IE - HKLM\..\URLSearchHook: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\prxtbNCH.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://174.37.200.81
IE - HKCU\..\URLSearchHook: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\prxtbNCH.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.)
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.defaultthis.engineName: "NCH Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2117678&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "NCH Customized Web Search"
FF - prefs.js..extensions.enabledItems: ffxtlbr@Facemoods.com:1.1.0
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..keyword.URL: "http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZCman000&fl=0&ptb=BMMpHcpD2upaK6Kxwa2xLQ&url=http://search.mywebsearch.com/mywebsearch/GGmain.jhtml&st=kwd&n=77ce56aa&searchfor="
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
[2011-05-09 20:37:26 | 000,000,000 | ---D | M] (Mario Forever Toolbar) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\{707db484-2428-402d-afb5-d85b387544c7}
[2011-03-14 12:50:08 | 000,000,000 | ---D | M] (NCH Toolbar) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\{c2db4fe6-8409-45ce-8010-189a7b5cce86}
[2011-03-26 23:29:31 | 000,000,000 | ---D | M] (Softonic-Polska Community Toolbar) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}
[2010-08-27 11:43:07 | 000,000,000 | ---D | M] (Babylon-English Toolbar) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\{ce18769b-c7fa-42d2-860d-17c4662c70ad}
[2011-03-26 23:29:29 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\engine@conduit.com
[2010-08-27 11:43:41 | 000,000,000 | ---D | M] (Facemoods) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\os212pm0.default\extensions\ffxtlbr@Facemoods.com
[2011-01-17 15:40:58 | 000,000,909 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\os212pm0.default\searchplugins\conduit.xml
[2010-06-04 12:46:34 | 000,009,977 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\os212pm0.default\searchplugins\mywebsearch.xml
[2010-09-24 18:41:11 | 000,002,226 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2010-03-28 18:56:18 | 000,002,035 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchFxt.xml
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - File not found
O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - File not found
O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - File not found
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Emurayden PSX Emulator] File not found
O4 - HKCU..\Run: [EPSON Stylus DX6000 Series] File not found
O4 - HKCU..\Run: [EPSON Stylus DX6000 Series (Kopia 1)] File not found
O4 - HKCU..\Run: [WMCOM] C:\Windows\wmcom.exe ()
[2011-08-16 13:28:48 | 000,000,326 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForoem.job
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:B2836CDB

:Files
C:\Users\oem\AppData\Roaming\qghumeaylnlfdxfircvs85.exe
C:\amk2.exe
C:\Windows\wmcom.exe

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"DpAgent"=-
"facemoods"=-
"StartCCC"=-
"UpdatePRCShortCut"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ALLUpdate"=-

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL. Skrypty podawaj na -> http://wklej.eu/, a Nam przysyłaj link.

**Posty:** 503 · przez **Lucky17** 20 Sie 2011, 19:32

http://wklej.eu/index.php?id=23ace10fee

http://wklej.eu/index.php?id=c127912a9c

Co dalej?

**Posty:** 85 · przez **kominekl** 20 Sie 2011, 20:48

Wykonaj pełne skanowanie Malwarebytes`em Anti-Malware -> http://www.instalki.pl/programy/download/Windows/antyspyware/Malwarebytes_Anti-Malware.html, jeśli coś znajdzie usuń i daj raport. Następnie podaj nowe logi z OTL.

**Posty:** 503 · przez **Lucky17** 05 Wrz 2011, 19:13

http://www.wklej.eu/index.php?id=e4581b0f89

http://www.wklej.eu/index.php?id=49572b4a5f

Co dalej?

**Posty:** 18165 · przez **wojtas** 07 Wrz 2011, 16:02

daj logi na http://www.wklej.org .., napisz jak sytuacja z kompem na tą chwilę wygląda

c:\program files (x86)\windows live\messenger\msimg32.dll (PUP.FunWebProducts) -> Not selected for removal.
c:\program files (x86)\windows live\messenger\riched20.dll (PUP.FunWebProducts) -> Not selected for removal.

wydaję mi się, że to też jest do kasacji

Autor postu otrzymał pochwałę

**Posty:** 503 · przez **Lucky17** 08 Wrz 2011, 10:58

Już jest w porządku.

Kto jest na forum