Internet wolno chodzi.

**Posty:** 60 · przez **lukiassss** 11 Cze 2009, 14:08

Witam! wczoraj moja siostra chodzila po necie i nie wiem czy nie zlapala jakiegos wirusa:/ Bo dzis wlaczam internet wolno chodzi zamiast 1mb to 512:/ i mniej.Bo nigdy tak sie nie robilo:/ I nie wiem czy to wina internetu czy jakas infekcja..

Oto logi:

RSIT:

Kod: Zaznacz wszystko: Logfile of random's system information tool 1.06 (written by random/random) Run by Lukas at 2009-06-11 14:02:37 Microsoft Windows XP Professional Dodatek Service Pack 2 System drive C: has 9 GB (45%) free of 20 GB Total RAM: 1023 MB (29% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:02:54, on 2009-06-11 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe D:\PROGRAMY\Nexus Radio\Nexus Radio.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\DNA\btdna.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Nowe Gadu-Gadu\gg.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Documents and Settings\Lukas\Menu Start\Programy\Autostart\Super internet TV Updater.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe D:\gry\steam\steam.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\PROGRA~1\AVG\AVG8\avgam.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\Program Files\AVG\AVG8\avgui.exe C:\Program Files\AVG\AVG8\avgscanx.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Lukas\Pulpit\RSIT.exe C:\Program Files\trend micro\Lukas.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O1 - Hosts: 94.23.32.138 l2authd.lineage2.com O1 - Hosts: 216.107.250.194 nprotect.lineage2.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Lukas\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [Nexus Radio] D:\PROGRAMY\Nexus Radio\Nexus Radio.exe -0 O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" O4 - HKCU\..\Run: [Steam] "d:\gry\steam\steam.exe" -silent O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [USDownloader] "D:\PROGRAMY\USDownloader\USDownloader.exe" O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Super internet TV Updater.exe O4 - Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: &Pobierz wszystko przez FlashGet - D:\PROGRAMY\FlashGet universal\ComDlls\Bhoall.htm O8 - Extra context menu item: &Pobrane przez FlashGet - D:\PROGRAMY\FlashGet universal\ComDlls\Bholink.htm O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 8413 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-04-30 1107224] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}] AVG Security Toolbar BHO - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-06-02 1004800] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}] IEPluginBHO Class - C:\Documents and Settings\Lukas\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll [2009-05-26 42088] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-06-02 1004800] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-06-11 1948440] "WinampAgent"=C:\Program Files\Winamp\winampa.exe [] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-05-03 13529088] "nwiz"=nwiz.exe /install [] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-05-03 86016] "RemoteControl"=C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe [2004-11-02 32768] "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648] "GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016] "SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-11-17 577536] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-04-02 342312] "KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k [] "Nexus Radio"=D:\PROGRAMY\Nexus Radio\Nexus Radio.exe [2009-04-26 4681216] "UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360] "ALLUpdate"=C:\Program Files\ALLPlayer\ALLUpdate.exe [2008-11-24 869888] "Steam"=d:\gry\steam\steam.exe [2009-06-11 1217784] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-04-01 486856] "BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-04-07 321344] "USDownloader"=D:\PROGRAMY\USDownloader\USDownloader.exe [2008-07-29 529408] "Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-04-21 24264488] "Nowe Gadu-Gadu"=C:\Program Files\Nowe Gadu-Gadu\gg.exe [2009-05-28 10486376] C:\Documents and Settings\Lukas\Menu Start\Programy\Autostart Super internet TV Updater.exe Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter] C:\WINDOWS\system32\avgrsstx.dll [2009-04-30 11952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "D:\GRY\Steam\SteamApps\lukiassss\counter-strike\hl.exe"="D:\GRY\Steam\SteamApps\lukiassss\counter-strike\hl.exe:*:Enabled:Half-Life Launcher" "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove" "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote" "C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox" "C:\Program Files\Nowe Gadu-Gadu\gg.exe"="C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu" "D:\GRY\Croteam\Serious Sam - The Second Encounter\Bin\SeriousSam.exe"="D:\GRY\Croteam\Serious Sam - The Second Encounter\Bin\SeriousSam.exe:*:Enabled:SeriousSam" "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA" "D:\PROGRAMY\BitTorrent\bittorrent.exe"="D:\PROGRAMY\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent" "D:\PROGRAMY\FlashGet universal\FlashGet.exe"="D:\PROGRAMY\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2" "D:\PROGRAMY\FlashGet universal\LiveUpdate.exe"="D:\PROGRAMY\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate" "D:\PROGRAMY\FlashGet universal\LiveUpdateEx.exe"="D:\PROGRAMY\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx" "C:\Program Files\Java\jre6\launch4j-tmp\JDownloader.exe"="C:\Program Files\Java\jre6\launch4j-tmp\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" "D:\PROGRAMY\EuroPlus+ Angielski z Cambridge\data\fscommand\flashex.exe"="D:\PROGRAMY\EuroPlus+ Angielski z Cambridge\data\fscommand\flashex.exe:*:Enabled:flashex" "D:\PROGRAMY\EuroPlus+ Angielski z Cambridge\data\fscommand\flchk.exe"="D:\PROGRAMY\EuroPlus+ Angielski z Cambridge\data\fscommand\flchk.exe:*:Enabled:flchk" "D:\PROGRAMY\Super Internet TV\OnlineTV.exe"="D:\PROGRAMY\Super Internet TV\OnlineTV.exe:*:Enabled:Super Internet TV" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" ======File associations====== .reg - open - "regedit.exe" "%1" ======List of files/folders created in the last 1 months====== 2009-06-11 14:02:37 ----D---- C:\rsit 2009-06-11 11:18:00 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar 2009-06-03 16:27:35 ----A---- C:\WINDOWS\ago.INI 2009-06-03 16:26:32 ----D---- C:\Program Files\Advanced GIF Optimizer 2009-06-03 15:49:21 ----D---- C:\Program Files\Native Instruments 2009-05-30 11:04:18 ----D---- C:\Program Files\Lavalys 2009-05-27 21:38:40 ----D---- C:\Program Files\trend micro 2009-05-27 15:18:38 ----D---- C:\Program Files\Nowe Gadu-Gadu 2009-05-27 14:42:03 ----D---- C:\totalcmd 2009-05-27 14:42:03 ----A---- C:\WINDOWS\wincmd.ini 2009-05-27 14:28:34 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\Desktopicon 2009-05-27 14:28:33 ----D---- C:\Program Files\Unlocker 2009-05-26 17:38:03 ----D---- C:\Program Files\Common Files\NSV 2009-05-26 16:56:16 ----A---- C:\WINDOWS\meong.txt 2009-05-26 16:50:56 ----AD---- C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2009-05-23 14:49:59 ----D---- C:\WINDOWS\system32\Nexus Radio 2009-05-23 14:49:59 ----D---- C:\Program Files\Nexus Radio 2009-05-22 14:43:51 ----D---- C:\Program Files\Image-Line 2009-05-22 14:43:49 ----D---- C:\Program Files\Outsim 2009-05-19 13:53:32 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\ipla 2009-05-19 13:53:32 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\ipla 2009-05-14 01:03:47 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\Apple Computer 2009-05-14 01:03:38 ----A---- C:\WINDOWS\system32\GEARAspi.dll 2009-05-14 01:03:19 ----D---- C:\Program Files\iPod 2009-05-14 01:03:16 ----D---- C:\Program Files\iTunes 2009-05-14 01:03:16 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} 2009-05-14 01:01:54 ----D---- C:\Program Files\QuickTime 2009-05-14 01:01:53 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer 2009-05-14 01:01:35 ----D---- C:\Program Files\Apple Software Update 2009-05-14 01:01:28 ----DC---- C:\WINDOWS\system32\DRVSTORE 2009-05-14 01:01:10 ----D---- C:\Program Files\Common Files\Apple 2009-05-14 01:01:10 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Apple 2009-05-12 12:10:29 ----A---- C:\WINDOWS\system32\SNWValid.dll 2009-05-12 12:10:29 ----A---- C:\WINDOWS\system32\SierraNW.dll 2009-05-12 12:10:28 ----D---- C:\WINDOWS\solcache ======List of files/folders modified in the last 1 months====== 2009-06-11 14:02:39 ----D---- C:\WINDOWS\Temp 2009-06-11 13:57:58 ----D---- C:\Program Files\Mozilla Firefox 2009-06-11 13:54:19 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\DNA 2009-06-11 11:23:55 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\Skype 2009-06-11 11:18:40 ----D---- C:\WINDOWS\system32\drivers 2009-06-11 11:18:37 ----D---- C:\WINDOWS\Prefetch 2009-06-11 11:13:59 ----D---- C:\Program Files\DNA 2009-06-11 00:33:24 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-06-10 22:16:47 ----D---- C:\WINDOWS\system32\CatRoot2 2009-06-10 13:54:06 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\skypePM 2009-06-09 19:23:03 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\Nowe Gadu-Gadu 2009-06-03 16:27:35 ----D---- C:\WINDOWS 2009-06-03 16:26:32 ----RD---- C:\Program Files 2009-06-03 15:49:36 ----D---- C:\WINDOWS\system32 2009-06-01 12:24:16 ----SHD---- C:\WINDOWS\Installer 2009-06-01 11:23:20 ----HD---- C:\WINDOWS\inf 2009-05-30 15:42:55 ----HD---- C:\Program Files\InstallShield Installation Information 2009-05-28 20:35:20 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\AVGTOOLBAR 2009-05-27 18:52:24 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\uTorrent 2009-05-27 15:02:26 ----D---- C:\Program Files\Common Files 2009-05-27 15:02:23 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Corel 2009-05-27 14:59:40 ----D---- C:\WINDOWS\WinSxS 2009-05-27 13:08:13 ----D---- C:\Program Files\Common Files\YDP 2009-05-27 13:02:10 ----D---- C:\Program Files\Opera 2009-05-26 17:38:05 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-05-26 16:54:22 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\Real 2009-05-24 23:03:54 ----D---- C:\Documents and Settings\Lukas\Dane aplikacji\BITS 2009-05-24 22:54:38 ----A---- C:\WINDOWS\NeroDigital.ini 2009-05-24 12:05:03 ----D---- C:\WINDOWS\system32\Restore 2009-05-23 14:50:06 ----SD---- C:\Documents and Settings\Lukas\Dane aplikacji\Microsoft 2009-05-22 14:45:22 ----HD---- C:\$AVG8.VAULT$ 2009-05-16 18:01:12 ----D---- C:\Program Files\ALLPlayer 2009-05-14 15:14:51 ----D---- C:\WINDOWS\Minidump 2009-05-14 01:03:00 ----D---- C:\Program Files\Bonjour 2009-05-14 01:02:21 ----D---- C:\Program Files\Internet Explorer 2009-05-14 01:01:40 ----SD---- C:\WINDOWS\Tasks 2009-05-12 12:10:40 ----A---- C:\WINDOWS\SIERRA.INI 2009-05-12 12:10:29 ----D---- C:\Program Files\Sierra On-Line ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-06-11 327688] R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-04-30 27784] R1 AvgTdiX;AVG8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-04-30 108552] R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 40320] R1 kbdhid;Sterownik klawiatury HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848] R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400] R3 hidusb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600] R3 mouhid;Sterownik myszy HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-05-03 6554496] R3 rtl8139;Sterownik NT karty Realtek RTL8139(A/B/C)-based PCI Fast Ethernet; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992] R3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616] R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624] R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-04 57600] R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480] S2 npkcrypt;npkcrypt; \??\D:\GRY\Lineage II\system\npkcrypt.sys [] S3 a573vorw;a573vorw; C:\WINDOWS\system32\drivers\a573vorw.sys [] S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS [] S3 npkcusb;npkcusb; \??\D:\GRY\Lineage II\system\npkcusb.sys [] S3 RT61;Ralink Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [] S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-26 132424] R2 avg8emc;AVG8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2009-04-30 908568] R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-05-19 298776] R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-05-03 159812] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912] R3 iPod Service;Usługa iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-04-02 656168] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-02-18 654848] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336] -----------------EOF-----------------

Info RIST:

Kod: Zaznacz wszystko: info.txt logfile of random's system information tool 1.06 2009-06-11 14:03:08 ======Uninstall list====== -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf AC3Filter (remove only)-->C:\Program Files\AC3Filter\uninstall.exe Adobe Acrobat 5.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.dll" Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95} Adobe Asset Services CS3-->MsiExec.exe /I{6D12B99F-EAAA-49D8-8E2F-74FA7459CCB2} Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394} Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23} Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C} Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C} Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E} Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9} Adobe Color EU Recommended Settings-->MsiExec.exe /I{BD087F50-46B2-43E4-BD73-5DB3DC20B47C} Adobe Color JA Extra Settings-->MsiExec.exe /I{D92B72E2-C854-4738-8ED6-4C3661CC17AE} Adobe Color NA Extra Settings-->MsiExec.exe /I{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871} Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D} Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD} Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2} Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B} Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245} Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078} Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C} Adobe Photoshop CS3-->C:\Program Files\Common Files\Adobe\Installers\678cd98c8365a5647f9a2e539d120a8\Setup.exe Adobe Photoshop CS3-->MsiExec.exe /I{78EFD06D-7583-42F1-9E77-671D8782EB70} Adobe Setup-->MsiExec.exe /I{CBF4DADD-974D-49C8-BC83-C6F31554001E} Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183} Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312} Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8} Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5} Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6} Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923} Advanced GIF Optimizer-->"C:\Program Files\Advanced GIF Optimizer\uninstall.exe" ALLPlayer V3.X-->"C:\Program Files\ALLPlayer\unins000.exe" Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13} Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} Archiwizator WinRAR-->C:\Program Files\WinRAR\uninstall.exe ArtRage 2-->MsiExec.exe /X{13CB54D3-A7C9-4B23-89A4-6331368AFD30} AVG 8.5-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B} Cezar 3-->C:\WINDOWS\IsUn0415.exe -fd:\gry\SIERRA\Cezar3\Uninst.isu Counter-Strike Steamworks Beta-->"D:\GRY\Steam\steam.exe" steam://uninstall/150 Counter-Strike-->"D:\GRY\Steam\steam.exe" steam://uninstall/10 DVD Solution-->"C:\Program Files\Uninstall_CDS.exe" EuroPlus+ Angielski z Cambridge-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B8E09B53-B28F-4DDA-8AE0-490E3129EFFF}\setup.exe" -l0x15 -uninst EVEREST Ultimate Edition v5.01-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe" Faraon-->C:\WINDOWS\IsUn0415.exe -fd:\gry\sierra\faraon\Uninst.isu ffdshow [rev 2676] [2009-02-11]-->"C:\Program Files\ffdshow\unins000.exe" FL Studio 8-->D:\PROGRAMY\Image-Line\FL Studio 8\uninstall.exe Gadu-Gadu 7.7-->C:\Program Files\Gadu-Gadu\Setup.exe HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall IL Download Manager-->C:\Program Files\Image-Line\Downloader\uninstall.exe ipla 1.1.4-->D:\PROGRAMY\ipla\uninst.exe iTunes-->MsiExec.exe /I{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3} Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF} Lennar Digital Sylenth VSTi v1.2.1-->D:\PROGRAMY\IMAGE-~1\FLSTUD~1\VSTPLU~1\Sylenth1\UNINST~1\UNWISE.EXE D:\PROGRAMY\IMAGE-~1\FLSTUD~1\VSTPLU~1\Sylenth1\UNINST~1\INSTALL.LOG Microsoft Office Access MUI (Polish) 2007-->MsiExec.exe /X{90120000-0015-0415-0000-0000000FF1CE} Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE} Microsoft Office Excel MUI (Polish) 2007-->MsiExec.exe /X{90120000-0016-0415-0000-0000000FF1CE} Microsoft Office Groove MUI (Polish) 2007-->MsiExec.exe /X{90120000-00BA-0415-0000-0000000FF1CE} Microsoft Office InfoPath MUI (Polish) 2007-->MsiExec.exe /X{90120000-0044-0415-0000-0000000FF1CE} Microsoft Office OneNote MUI (Polish) 2007-->MsiExec.exe /X{90120000-00A1-0415-0000-0000000FF1CE} Microsoft Office Outlook MUI (Polish) 2007-->MsiExec.exe /X{90120000-001A-0415-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Polish) 2007-->MsiExec.exe /X{90120000-0018-0415-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Polish) 2007-->MsiExec.exe /X{90120000-001F-0415-0000-0000000FF1CE} Microsoft Office Proofing (Polish) 2007-->MsiExec.exe /X{90120000-002C-0415-0000-0000000FF1CE} Microsoft Office Publisher MUI (Polish) 2007-->MsiExec.exe /X{90120000-0019-0415-0000-0000000FF1CE} Microsoft Office Shared MUI (Polish) 2007-->MsiExec.exe /X{90120000-006E-0415-0000-0000000FF1CE} Microsoft Office Word MUI (Polish) 2007-->MsiExec.exe /X{90120000-001B-0415-0000-0000000FF1CE} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe Multimedia Launcher-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall Narzędzia Sierra-->C:\Program Files\Sierra On-Line\sutil32.exe uninstall Native Instruments Pro-53-->D:\PROGRAMY\IMAGE-~1\FLSTUD~1\VSTPLU~1\Pro-53\UNWISE.EXE D:\PROGRAMY\IMAGE-~1\FLSTUD~1\VSTPLU~1\Pro-53\INSTALL.LOG Nero OEM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL Nexus Radio-->MsiExec.exe /X{2C14CC9D-7815-493E-834B-1104EAF2DC21} Novation V-Station v1.20-H2O-->D:\PROGRAMY\IMAGE-~1\FLSTUD~1\VSTPLU~1\V-STAT~1\V-STAT~1\UNWISE.EXE D:\PROGRAMY\IMAGE-~1\FLSTUD~1\VSTPLU~1\V-STAT~1\V-STAT~1\INSTALL.LOG Nowe Gadu-Gadu-->C:\Program Files\Nowe Gadu-Gadu\Uninstall.exe NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI PDF Settings-->MsiExec.exe /I{293D5729-7C01-4FA4-A4DE-BB6A1587BBB9} PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall PowerProducer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F} Real Alternative 1.9.0-->"C:\Program Files\Real Alternative\unins000.exe" Realtek AC'97 Audio-->Alcrmv.exe -r -m reFX Nexus 1.0.0-->"D:\PROGRAMY\Image-Line\FL Studio 8\VstPlugins\Nexus\Nexus\Uninstall\unins000.exe" reFX Nexus 1.0.9-->"D:\PROGRAMY\Image-Line\FL Studio 8\VstPlugins\Nexus\VstPlugins\unins000.exe" reFX Vanguard VSTi RTAS v1.8.0-->"D:\PROGRAMY\Image-Line\FL Studio 8\VstPlugins\Vanguard\Uninstall\unins000.exe" Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D} Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3} Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe Virtual DJ - Atomix Productions-->D:\PROGRAMY\VIRTUA~1\UNWISE.EXE D:\PROGRAMY\VIRTUA~1\INSTALL.LOG Winamp-->"C:\Program Files\Winamp\UninstWA.exe" Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe" Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} XP Codec Pack-->C:\Program Files\XP Codec Pack\Uninstall.exe ======Hosts File====== 94.23.32.138 l2authd.lineage2.com 216.107.250.194 nprotect.lineage2.com ======System event log====== Computer Name: LUKAS-4369FBF58 Event Code: 7036 Message: Usługa Usługa bramy warstwy aplikacji weszła w stan uruchomienia. Record Number: 3996 Source Name: Service Control Manager Time Written: 20090426105313.000000+120 Event Type: informacje User: Computer Name: LUKAS-4369FBF58 Event Code: 7035 Message: Do usługi Usługa bramy warstwy aplikacji został pomyślnie wysłany kod sterowania uruchom. Record Number: 3995 Source Name: Service Control Manager Time Written: 20090426105313.000000+120 Event Type: informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: LUKAS-4369FBF58 Event Code: 7035 Message: Do usługi Menedżer połączeń usługi Dostęp zdalny został pomyślnie wysłany kod sterowania uruchom. Record Number: 3994 Source Name: Service Control Manager Time Written: 20090426105312.000000+120 Event Type: informacje User: LUKAS-4369FBF58\Lukas Computer Name: LUKAS-4369FBF58 Event Code: 7036 Message: Usługa Telefonia weszła w stan uruchomienia. Record Number: 3993 Source Name: Service Control Manager Time Written: 20090426105312.000000+120 Event Type: informacje User: Computer Name: LUKAS-4369FBF58 Event Code: 7036 Message: Usługa Usługa odnajdywania SSDP weszła w stan uruchomienia. Record Number: 3992 Source Name: Service Control Manager Time Written: 20090426105312.000000+120 Event Type: informacje User: =====Application event log===== Computer Name: LUKAS-4369FBF58 Event Code: 100 Message: wuauclt (2700) Aparat bazy danych 5.01.2600.2180 został uruchomiony. Record Number: 1623 Source Name: ESENT Time Written: 20090601112309.000000+120 Event Type: informacje User: Computer Name: LUKAS-4369FBF58 Event Code: 1 Message: Record Number: 1622 Source Name: avg8emc Time Written: 20090601112301.000000+120 Event Type: informacje User: Computer Name: LUKAS-4369FBF58 Event Code: 1800 Message: Usługa Centrum zabezpieczeń systemu Windows została uruchomiona. Record Number: 1621 Source Name: SecurityCenter Time Written: 20090601112223.000000+120 Event Type: informacje User: Computer Name: LUKAS-4369FBF58 Event Code: 1 Message: Record Number: 1620 Source Name: Bonjour Service Time Written: 20090601112203.000000+120 Event Type: informacje User: Computer Name: LUKAS-4369FBF58 Event Code: 1002 Message: Aplikacja zawieszająca winamp.exe, wersja 5.5.0.1640, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Record Number: 1619 Source Name: Application Hang Time Written: 20090531183353.000000+120 Event Type: błąd User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\ "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel "PROCESSOR_REVISION"=0304 "NUMBER_OF_PROCESSORS"=1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip -----------------EOF-----------------

HijackThis:

http://wklej.org/hash/d7c54de688/

Silent Runners:

http://wklej.org/hash/5520be4355/

**Posty:** 18165 · przez **wojtas** 11 Cze 2009, 21:10

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z OTL

**Posty:** 60 · przez **lukiassss** 12 Cze 2009, 12:02

Kod: Zaznacz wszystko: [b]SDFix: Version 1.240 [/b] Run by Administrator on 2009-06-12 at 11:35 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-06-12 11:41:28 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:2df9c43f "s2"=dword:110480d0 "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:68,c4,54,03,df,08,68,3a,1d,73,cf,98,aa,5b,76,63,ce,30,66,14,91,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,a6,72,74,e8,ee,ce,f1,86,5a,a5,8e,d5,36,0f,01,c2,48,.. "khjeh"=hex:d1,41,22,36,5b,91,96,69,df,58,e0,2b,2f,12,2b,d4,08,af,62,2c,b4,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:a6,85,6f,a6,ff,ae,fc,fe,63,3a,05,8b,5a,96,ac,91,4c,49,be,06,74,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:52,61,5d,5a,1a,90,d7,9e,e1,c4,48,e2,11,45,e0,0c,52,b1,f4,4a,cd,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42] "khjeh"=hex:05,d3,04,0d,c9,33,a6,22,6d,27,eb,22,4d,af,b2,ea,59,e3,c5,d1,c2,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43] "khjeh"=hex:e8,92,1c,9d,d3,59,2f,2c,f5,56,26,3f,a1,af,0d,ef,9e,5b,81,84,c2,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:68,c4,54,03,df,08,68,3a,1d,73,cf,98,aa,5b,76,63,ce,30,66,14,91,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,a6,72,74,e8,ee,ce,f1,86,5a,a5,8e,d5,36,0f,01,c2,48,.. "khjeh"=hex:d1,41,22,36,5b,91,96,69,df,58,e0,2b,2f,12,2b,d4,08,af,62,2c,b4,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:a6,85,6f,a6,ff,ae,fc,fe,63,3a,05,8b,5a,96,ac,91,4c,49,be,06,74,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:52,61,5d,5a,1a,90,d7,9e,e1,c4,48,e2,11,45,e0,0c,52,b1,f4,4a,cd,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42] "khjeh"=hex:05,d3,04,0d,c9,33,a6,22,6d,27,eb,22,4d,af,b2,ea,59,e3,c5,d1,c2,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43] "khjeh"=hex:e8,92,1c,9d,d3,59,2f,2c,f5,56,26,3f,a1,af,0d,ef,9e,5b,81,84,c2,.. scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="" "DeviceNotSelectedTimeout"="15" "GDIProcessHandleQuota"=dword:00002710 "Spooler"="yes" "swapdisk"="" "TransmissionRetryTimeout"="90" "USERProcessHandleQuota"=dword:00002710 "LoadAppInit_DLLs"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{85BA1EBC-81F2-F45E-43D9-28D5CC730D16}] scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "D:\\GRY\\Steam\\SteamApps\\lukiassss\\counter-strike\\hl.exe"="D:\\GRY\\Steam\\SteamApps\\lukiassss\\counter-strike\\hl.exe:*:Enabled:Half-Life Launcher" "C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent" "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove" "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote" "C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox" "C:\\Program Files\\Nowe Gadu-Gadu\\gg.exe"="C:\\Program Files\\Nowe Gadu-Gadu\\gg.exe:*:Enabled:Nowe Gadu-Gadu" "D:\\GRY\\Croteam\\Serious Sam - The Second Encounter\\Bin\\SeriousSam.exe"="D:\\GRY\\Croteam\\Serious Sam - The Second Encounter\\Bin\\SeriousSam.exe:*:Enabled:SeriousSam" "C:\\Program Files\\DNA\\btdna.exe"="C:\\Program Files\\DNA\\btdna.exe:*:Enabled:DNA" "D:\\PROGRAMY\\BitTorrent\\bittorrent.exe"="D:\\PROGRAMY\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent" "D:\\PROGRAMY\\FlashGet universal\\FlashGet.exe"="D:\\PROGRAMY\\FlashGet universal\\FlashGet.exe:*:Enabled:Flashget2" "D:\\PROGRAMY\\FlashGet universal\\LiveUpdate.exe"="D:\\PROGRAMY\\FlashGet universal\\LiveUpdate.exe:*:Enabled:FGLiveUpdate" "D:\\PROGRAMY\\FlashGet universal\\LiveUpdateEx.exe"="D:\\PROGRAMY\\FlashGet universal\\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx" "C:\\Program Files\\Java\\jre6\\launch4j-tmp\\JDownloader.exe"="C:\\Program Files\\Java\\jre6\\launch4j-tmp\\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary" "C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour" "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes" "D:\\PROGRAMY\\EuroPlus+ Angielski z Cambridge\\data\\fscommand\\flashex.exe"="D:\\PROGRAMY\\EuroPlus+ Angielski z Cambridge\\data\\fscommand\\flashex.exe:*:Enabled:flashex" "D:\\PROGRAMY\\EuroPlus+ Angielski z Cambridge\\data\\fscommand\\flchk.exe"="D:\\PROGRAMY\\EuroPlus+ Angielski z Cambridge\\data\\fscommand\\flchk.exe:*:Enabled:flchk" "D:\\PROGRAMY\\Super Internet TV\\OnlineTV.exe"="D:\\PROGRAMY\\Super Internet TV\\OnlineTV.exe:*:Enabled:Super Internet TV" "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [b]Remaining Files [/b]: [b]Files with Hidden Attributes [/b]: Mon 30 Mar 2009 8 ..SHR --- "C:\Documents and Settings\All Users\Dane aplikacji\9D4D5AB722.sys" Wed 27 May 2009 2,516 A.SH. --- "C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys" Sat 23 May 2009 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak" Sat 14 Mar 2009 243,712 A..H. --- "C:\Documents and Settings\Lukas\Ustawienia lokalne\Temp\~11B.tmp" Tue 17 Feb 2009 243,712 A..H. --- "C:\Documents and Settings\Lukas\Ustawienia lokalne\Temp\~153.tmp" Thu 30 Apr 2009 243,712 A..H. --- "C:\Documents and Settings\Lukas\Ustawienia lokalne\Temp\~4.tmp" [b]Finished![/b]

OTL:

Kod: Zaznacz wszystko: OTL logfile created on: 2009-06-12 11:51:07 - Run 1 OTL by OldTimer - Version 2.1.1.0 Folder = C:\Documents and Settings\Lukas\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,48 Mb Total Physical Memory | 458,20 Mb Available Physical Memory | 44,77% Memory free 2,40 Gb Paging File | 1,92 Gb Available in Paging File | 80,02% Paging File free Paging file location(s): C:\pagefile.sys 1534 2000 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 8,81 Gb Free Space | 45,08% Space Free | Partition Type: NTFS Drive D: | 54,99 Gb Total Space | 9,59 Gb Free Space | 17,43% Space Free | Partition Type: NTFS Drive E: | 4,29 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: LUKAS-4369FBF58 Current User Name: Lukas Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Output = Standard File Age = 30 Days Company Name Whitelist: On [color=orange]========== Processes (SafeList) ==========[/color] PRC - [2004-08-04 00:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2009-03-26 15:31:20 | 00,132,424 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe PRC - [2009-05-19 12:14:40 | 00,298,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe PRC - [2008-12-12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe PRC - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2008-05-03 06:46:00 | 00,159,812 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe PRC - [2005-01-28 14:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe PRC - [2009-04-30 12:29:16 | 00,908,568 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe PRC - [2009-04-30 12:29:16 | 00,833,304 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgam.exe PRC - [2009-05-13 11:23:34 | 00,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe PRC - [2009-04-30 12:29:25 | 00,594,712 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe PRC - [2009-05-19 12:14:39 | 00,692,504 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgcsrvx.exe PRC - [2004-08-04 00:44:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2004-08-04 00:44:30 | 00,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiprvse.exe PRC - [2009-06-11 11:17:19 | 01,948,440 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe PRC - [2004-11-02 21:24:46 | 00,032,768 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe PRC - [2006-10-27 01:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2006-11-17 06:42:52 | 00,577,536 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2009-03-09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2009-04-02 16:11:02 | 00,342,312 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.exe PRC - [2009-04-26 10:15:14 | 04,681,216 | ---- | M] (Egisca Corporation) -- D:\PROGRAMY\Nexus Radio\Nexus Radio.exe PRC - [2009-06-11 11:14:46 | 01,217,784 | ---- | M] (Valve Corporation) -- D:\gry\steam\steam.exe PRC - [2008-04-01 11:39:48 | 00,486,856 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe PRC - [2009-04-07 16:54:14 | 00,321,344 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\DNA\btdna.exe PRC - [2008-07-29 12:49:13 | 00,529,408 | ---- | M] (Tiger grp (www.dimonius.ru)) -- D:\PROGRAMY\USDownloader\USDownloader.exe PRC - [2009-02-13 22:44:28 | 00,033,982 | ---- | M] () -- C:\Documents and Settings\Lukas\Menu Start\Programy\Autostart\Super internet TV Updater.exe PRC - [2009-04-02 16:10:56 | 00,656,168 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe PRC - [2009-05-07 13:24:01 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-06-12 11:28:08 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lukas\Pulpit\OTL.exe [color=orange]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-03-26 15:31:20 | 00,132,424 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device [Auto | Running]) SRV - [2009-04-30 12:29:16 | 00,908,568 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc [Auto | Running]) SRV - [2009-05-19 12:14:40 | 00,298,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd [Auto | Running]) SRV - [2008-12-12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Auto | Running]) SRV - [2009-02-18 01:09:41 | 00,654,848 | ---- | M] (Macrovision Europe Ltd.) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service [On_Demand | Stopped]) SRV - [2004-08-04 00:44:08 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2005-11-14 02:06:04 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped]) SRV - [2009-04-02 16:10:56 | 00,656,168 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service [On_Demand | Running]) SRV - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2006-10-27 01:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [On_Demand | Stopped]) SRV - [2008-05-03 06:46:00 | 00,159,812 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc [Auto | Running]) SRV - [2006-10-26 20:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped]) SRV - [2006-10-26 14:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2005-01-28 14:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe -- (UMWdf [Auto | Running]) [color=orange]========== Driver Services (SafeList) ==========[/color] DRV - [2007-03-08 15:34:46 | 04,027,840 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running]) DRV - [2009-06-11 11:17:23 | 00,327,688 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86 [System | Running]) DRV - [2009-04-30 12:29:36 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86 [System | Running]) DRV - [2009-04-30 12:29:32 | 00,012,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgrkx86.sys -- (AvgRkx86 [Boot | Running]) DRV - [2009-04-30 12:29:27 | 00,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX [System | Running]) DRV - File not found -- -- (catchme [On_Demand | Running]) DRV - [2009-03-19 16:32:48 | 00,023,400 | ---- | M] (GEAR Software Inc.) -- C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM [On_Demand | Running]) DRV - [2008-05-03 06:46:00 | 06,554,496 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running]) DRV - [2001-08-17 21:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2004-08-03 22:31:34 | 00,020,992 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\system32\DRIVERS\RTL8139.SYS -- (rtl8139 [On_Demand | Running]) DRV - [2009-04-16 17:22:05 | 00,163,644 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [Auto | Running]) DRV - [2009-02-15 21:41:50 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) [color=orange]========== Standard Registry (SafeList) ==========[/color] [color=orange]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1482476501-2000478354-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-1482476501-2000478354-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1 IE - HKU\S-1-5-21-1482476501-2000478354-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-1482476501-2000478354-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/ IE - HKU\S-1-5-21-1482476501-2000478354-682003330-1003\S-1-5-21-1482476501-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1482476501-2000478354-682003330-1003\S-1-5-21-1482476501-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=orange]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: djlounge@djlounge.tv:1.5.0.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.10 FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-02-15 01:20:35 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\avg@igeared: C:\PROGRAM FILES\AVG\AVG8\TOOLBAR\FIREFOX\AVG@IGEARED [2009-06-11 11:18:00 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009-05-28 19:06:11 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009-05-23 22:00:33 | 00,000,000 | ---D | M] [2009-05-05 12:25:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Extensions [2009-05-05 12:25:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-05-05 12:25:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Firefox\Profiles\bovkpw3j.default\extensions [2009-05-05 12:25:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Firefox\Profiles\bovkpw3j.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2009-06-11 16:31:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Firefox\Profiles\kckrgcv2.default\extensions [2009-05-24 22:37:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Firefox\Profiles\kckrgcv2.default\extensions\{2f17f610-5e97-4fed-828f-9940b7b577a4} [2009-05-24 22:35:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Firefox\Profiles\kckrgcv2.default\extensions\djlounge@djlounge.tv [2009-06-12 11:46:41 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-05-07 13:24:11 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009-05-03 12:19:38 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED} [2009-02-15 01:20:46 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} [2009-04-01 09:11:10 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} [2009-05-07 13:23:56 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-05-07 13:23:56 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-05-07 13:24:06 | 00,000,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-06-11 11:19:48 | 00,001,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml [2009-05-07 13:24:06 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2009-05-07 13:24:06 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2009-05-07 13:24:06 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2009-05-07 13:24:06 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2009-05-07 13:24:06 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-05-07 13:24:06 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (686 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx () O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Lukas\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O3 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - Reg Error: Key error. File not found O4 - HKLM..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" (Microsoft Corporation) O4 - HKLM..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" (Apple Inc.) O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [Nexus Radio] D:\PROGRAMY\Nexus Radio\Nexus Radio.exe -0 (Egisca Corporation) O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime (Apple Inc.) O4 - HKLM..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" (Cyberlink Corp.) O4 - HKLM..\Run: [SoundMan] SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.) O4 - HKLM..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" File not found O4 - HKLM..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" File not found O4 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" () O4 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe" (BitTorrent, Inc.) O4 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun (DT Soft Ltd) O4 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe" (GG Network S.A.) O4 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (Skype Technologies S.A.) O4 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003..\Run: [Steam] "d:\gry\steam\steam.exe" -silent (Valve Corporation) O4 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003..\Run: [USDownloader] "D:\PROGRAMY\USDownloader\USDownloader.exe" (Tiger grp (www.dimonius.ru)) O4 - Startup: C:\Documents and Settings\Lukas\Menu Start\Programy\Autostart\Super internet TV Updater.exe () O4 - Startup: C:\Documents and Settings\Lukas\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1482476501-2000478354-682003330-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: &Pobierz wszystko przez FlashGet - D:\PROGRAMY\FlashGet universal\ComDlls\Bhoall.htm File not found O8 - Extra context menu item: &Pobrane przez FlashGet - D:\PROGRAMY\FlashGet universal\ComDlls\Bholink.htm File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab (NsvPlayX Control) O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-02-14 23:46:35 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-05-27 13:38:03 | 00,000,000 | ---D | M] - D:\AUTOBUSY -- [ NTFS ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - * [2009-06-12 11:43:34 | 00,000,000 | ---D | M] [color=orange]========== Files/Folders - Created Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [4 C:\WINDOWS\*.tmp files] [2009-06-12 11:39:56 | 10,732,70784 | -HS- | C] () -- C:\hiberfil.sys [2009-06-12 11:33:48 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2009-06-12 11:28:52 | 00,000,000 | ---D | C] -- C:\SDFix [2009-06-12 11:28:18 | 01,529,241 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\SDFix.exe [2009-06-12 11:28:04 | 00,501,760 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Lukas\Pulpit\OTL.exe [2009-06-11 17:06:07 | 00,000,694 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Skrót do Cleopatra.lnk [2009-06-11 14:04:42 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\HijackThis.lnk [2009-06-11 14:02:37 | 00,000,000 | ---D | C] -- C:\rsit [2009-06-11 14:00:03 | 00,781,909 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\RSIT.exe [2009-06-11 13:59:25 | 00,400,192 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Silent Runners.vbs [2009-06-11 13:58:52 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Lukas\Pulpit\HJTInstall.exe [2009-06-11 13:36:43 | 13,714,329 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Refresh - Summertime (Ekowraith Remix ).mp3 [2009-06-11 11:18:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar [2009-06-10 13:56:16 | 00,388,871 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Potwierdzenie Czerwiec 2009.JPG [2009-06-09 16:34:42 | 00,127,844 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\freefall_2.flp [2009-06-09 11:19:35 | 00,082,932 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\test1.jpg [2009-06-09 11:18:52 | 00,075,717 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\88.jpg [2009-06-08 12:13:12 | 05,625,880 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Lawrence - bad day (dj ozi rmx).mp3 [2009-06-08 11:58:08 | 07,286,699 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Powerbasse_[Powerbasse]-Powerbasse_-_-N-R-G-_(Power_Mix).mp3 [2009-06-07 22:16:41 | 00,108,295 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\partymusic(demo).flp [2009-06-07 22:15:27 | 00,124,602 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\gotechno.flp [2009-06-07 22:13:46 | 00,123,136 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\freefall.flp [2009-06-06 19:33:13 | 03,269,353 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\bel-mondo - the club is mine.mp3 [2009-06-06 14:12:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lukas\Pulpit\Nowy folder [2009-06-04 22:42:20 | 00,036,650 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\pi.htm [2009-06-03 19:31:03 | 00,035,281 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\1.jpeg [2009-06-03 19:16:25 | 00,003,114 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\111.jpg [2009-06-03 16:27:35 | 00,000,601 | ---- | C] () -- C:\WINDOWS\ago.INI [2009-06-03 16:26:40 | 00,000,669 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Advanced GIF Optimizer.lnk [2009-06-03 16:26:32 | 00,000,000 | ---D | C] -- C:\Program Files\Advanced GIF Optimizer [2009-06-03 15:49:21 | 00,000,000 | ---D | C] -- C:\Program Files\Native Instruments [2009-06-03 15:46:55 | 00,821,183 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\ago.exe [2009-06-03 15:06:28 | 02,605,400 | ---- | C] () -- C:\WINDOWS\dncefvr2q.wav [2009-06-01 12:25:13 | 00,004,631 | R--- | C] () -- C:\Documents and Settings\Lukas\Moje dokumenty\luka_config.cfg [2009-05-30 11:16:09 | 00,000,787 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\EVEREST Ultimate Edition.lnk [2009-05-30 11:04:18 | 00,000,000 | ---D | C] -- C:\Program Files\Lavalys [2009-05-27 21:38:40 | 00,000,000 | ---D | C] -- C:\Program Files\trend micro [2009-05-27 15:19:29 | 00,000,717 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk [2009-05-27 15:19:28 | 00,000,688 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Nowe Gadu-Gadu.lnk [2009-05-27 15:18:38 | 00,000,000 | ---D | C] -- C:\Program Files\Nowe Gadu-Gadu [2009-05-27 15:14:43 | 19,850,552 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\nowegg.exe [2009-05-27 14:42:11 | 00,000,548 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Total Commander.lnk [2009-05-27 14:42:03 | 00,000,545 | ---- | C] () -- C:\WINDOWS\UC.PIF [2009-05-27 14:42:03 | 00,000,545 | ---- | C] () -- C:\WINDOWS\RAR.PIF [2009-05-27 14:42:03 | 00,000,545 | ---- | C] () -- C:\WINDOWS\PKZIP.PIF [2009-05-27 14:42:03 | 00,000,545 | ---- | C] () -- C:\WINDOWS\PKUNZIP.PIF [2009-05-27 14:42:03 | 00,000,545 | ---- | C] () -- C:\WINDOWS\NOCLOSE.PIF [2009-05-27 14:42:03 | 00,000,545 | ---- | C] () -- C:\WINDOWS\LHA.PIF [2009-05-27 14:42:03 | 00,000,545 | ---- | C] () -- C:\WINDOWS\ARJ.PIF [2009-05-27 14:42:03 | 00,000,496 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-05-27 14:42:03 | 00,000,000 | ---D | C] -- C:\totalcmd [2009-05-27 14:28:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lukas\Dane aplikacji\Desktopicon [2009-05-27 14:28:33 | 00,000,000 | ---D | C] -- C:\Program Files\Unlocker [2009-05-27 13:36:21 | 00,000,747 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Skrót do Photoshop.lnk [2009-05-26 17:38:03 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\NSV [2009-05-26 16:50:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2009-05-26 16:50:51 | 00,033,982 | ---- | C] () -- C:\Documents and Settings\Lukas\Menu Start\Programy\Autostart\Super internet TV Updater.exe [2009-05-23 14:50:04 | 00,001,699 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\Nexus Radio.lnk [2009-05-23 14:49:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Nexus Radio [2009-05-23 14:49:59 | 00,000,000 | ---D | C] -- C:\Program Files\Nexus Radio [2009-05-22 14:44:24 | 00,000,657 | ---- | C] () -- C:\Documents and Settings\Lukas\Pulpit\FL Studio 8.lnk [2009-05-22 14:43:51 | 00,000,000 | ---D | C] -- C:\Program Files\Image-Line [2009-05-22 14:43:49 | 00,000,000 | ---D | C] -- C:\Program Files\Outsim [2009-05-22 00:22:24 | 00,002,240 | ---- | C] () -- C:\WINDOWS\LENDIG.sys [2009-05-21 13:40:14 | 01,720,086 | ---- | C] () -- C:\WINDOWS\System32\TmpA5858171 [2009-05-19 13:53:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lukas\Dane aplikacji\ipla [2009-05-19 13:53:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2009-05-19 13:53:24 | 00,000,523 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\ipla.lnk [2009-05-14 01:03:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lukas\Dane aplikacji\Apple Computer [2009-05-14 01:03:41 | 00,002,137 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\iTunes.lnk [2009-05-14 01:03:19 | 00,000,000 | ---D | C] -- C:\Program Files\iPod [2009-05-14 01:03:16 | 00,000,000 | ---D | C] -- C:\Program Files\iTunes [2009-05-14 01:03:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [2009-05-14 01:01:54 | 00,000,000 | ---D | C] -- C:\Program Files\QuickTime [2009-05-14 01:01:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer [2009-05-14 01:01:40 | 00,000,284 | ---- | C] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2009-05-14 01:01:35 | 00,000,000 | ---D | C] -- C:\Program Files\Apple Software Update [2009-05-14 01:01:28 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE [2009-05-14 01:01:10 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2009-05-14 01:01:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple [2009-05-06 13:44:32 | 00,000,417 | ---- | C] () -- C:\WINDOWS\SIERRA.INI [2009-04-14 17:00:44 | 00,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI [2009-03-14 13:30:14 | 00,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2009-03-14 13:26:07 | 00,147,456 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2009-03-14 13:25:32 | 00,000,164 | R--- | C] () -- C:\WINDOWS\avrack.ini [2009-02-26 17:58:04 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-02-16 13:57:50 | 00,182,272 | ---- | C] () -- C:\WINDOWS\patchw32.dll [2009-02-16 13:54:32 | 00,000,032 | ---- | C] () -- C:\WINDOWS\CD_Start.INI [2009-02-15 21:41:50 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2008-05-03 06:46:00 | 01,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2008-05-03 06:46:00 | 01,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2008-05-03 06:46:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2008-05-03 06:46:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2008-05-03 06:46:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2007-12-24 12:47:52 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2007-12-24 12:40:26 | 00,404,992 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2007-12-22 21:02:50 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll [2007-12-22 20:27:22 | 03,104,256 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2007-12-03 15:34:32 | 00,026,624 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2007-12-01 12:43:30 | 00,520,192 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll [2007-11-29 11:52:36 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2004-11-24 20:25:52 | 00,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [2004-10-03 18:50:54 | 00,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll [2004-08-04 00:44:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2001-07-21 22:16:20 | 00,000,618 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 22:15:52 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini [color=orange]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [4 C:\WINDOWS\*.tmp files] [2009-06-12 11:43:45 | 00,182,765 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2009-06-12 11:40:05 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-06-12 11:40:01 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\Lukas\Ustawienia lokalne\desktop.ini [2009-06-12 11:39:59 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-06-12 11:39:56 | 10,732,70784 | -HS- | M] () -- C:\hiberfil.sys [2009-06-12 11:36:03 | 00,000,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS [2009-06-12 11:28:38 | 01,529,241 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\SDFix.exe [2009-06-12 11:28:08 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lukas\Pulpit\OTL.exe [2009-06-12 11:26:13 | 37,066,405 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2009-06-12 11:26:13 | 00,075,180 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg [2009-06-11 17:06:07 | 00,000,694 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\Skrót do Cleopatra.lnk [2009-06-11 16:55:58 | 00,000,417 | ---- | M] () -- C:\WINDOWS\SIERRA.INI [2009-06-11 14:04:42 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\HijackThis.lnk [2009-06-11 14:00:23 | 00,781,909 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\RSIT.exe [2009-06-11 13:59:37 | 00,400,192 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\Silent Runners.vbs [2009-06-11 13:59:00 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Lukas\Pulpit\HJTInstall.exe [2009-06-11 13:55:58 | 13,714,329 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\Refresh - Summertime (Ekowraith Remix ).mp3 [2009-06-11 11:17:23 | 00,327,688 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2009-06-10 14:24:17 | 03,269,353 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\bel-mondo - the club is mine.mp3 [2009-06-10 13:53:30 | 00,388,871 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\Potwierdzenie Czerwiec 2009.JPG [2009-06-09 16:34:42 | 00,127,844 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\freefall_2.flp [2009-06-09 11:23:12 | 00,082,932 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\test1.jpg [2009-06-08 18:23:05 | 00,075,717 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\88.jpg [2009-06-08 14:42:04 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2009-06-08 11:18:23 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-06-07 22:16:42 | 00,108,295 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\partymusic(demo).flp [2009-06-07 22:15:28 | 00,124,602 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\gotechno.flp [2009-06-07 22:13:48 | 00,123,136 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\freefall.flp [2009-06-04 22:42:21 | 00,036,650 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\pi.htm [2009-06-03 16:27:54 | 00,000,601 | ---- | M] () -- C:\WINDOWS\ago.INI [2009-06-03 16:26:40 | 00,000,669 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\Advanced GIF Optimizer.lnk [2009-06-03 15:47:08 | 00,821,183 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\ago.exe [2009-06-01 12:23:59 | 00,002,405 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Steam.lnk [2009-06-01 11:32:06 | 00,000,496 | ---- | M] () -- C:\WINDOWS\wincmd.ini [2009-05-30 11:16:09 | 00,000,787 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\EVEREST Ultimate Edition.lnk [2009-05-27 15:19:29 | 00,000,717 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk [2009-05-27 15:19:28 | 00,000,688 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Nowe Gadu-Gadu.lnk [2009-05-27 15:17:38 | 19,850,552 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\nowegg.exe [2009-05-27 14:42:11 | 00,000,548 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\Total Commander.lnk [2009-05-27 14:10:51 | 00,002,516 | -HS- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys [2009-05-27 13:36:21 | 00,000,747 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\Skrót do Photoshop.lnk [2009-05-24 22:54:38 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-05-23 14:50:04 | 00,001,699 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\Nexus Radio.lnk [2009-05-22 14:44:24 | 00,000,657 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\FL Studio 8.lnk [2009-05-21 13:40:14 | 01,720,086 | ---- | M] () -- C:\WINDOWS\System32\TmpA5858171 [2009-05-19 13:53:24 | 00,000,523 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\ipla.lnk [2009-05-16 15:44:57 | 00,003,114 | ---- | M] () -- C:\Documents and Settings\Lukas\Pulpit\111.jpg [2009-05-16 00:22:47 | 00,002,137 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\iTunes.lnk [color=orange]========== LOP Check ==========[/color] [2009-02-15 00:36:30 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji [2009-06-12 11:32:47 | 00,000,000 | --SD | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Microsoft [2009-06-11 11:18:00 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji [2009-05-14 01:03:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [2009-02-18 01:05:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe [2009-05-14 01:01:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple [2009-05-14 01:01:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer [2009-06-11 11:18:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar [2009-04-07 12:27:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\avg8 [2009-05-27 15:02:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Corel [2009-02-18 13:17:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FLEXnet [2009-04-16 15:51:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Google [2009-05-19 13:53:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2009-03-06 19:22:05 | 00,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft [2009-03-06 19:29:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help [2009-02-15 00:03:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Real [2009-05-03 12:19:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2009-05-26 17:24:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2009-02-15 00:36:30 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji [2009-02-14 23:46:26 | 00,000,000 | --SD | M] -- C:\Documents and Settings\Default User\Dane aplikacji\Microsoft [2009-06-11 11:17:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji [2009-06-11 11:17:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\AVGTOOLBAR [2009-04-07 12:28:04 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [2009-05-27 14:28:34 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji [2009-02-19 02:48:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Adobe [2009-03-30 12:41:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Ambient Design [2009-05-14 01:03:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Apple Computer [2009-05-28 20:35:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\AVGTOOLBAR [2009-05-24 23:03:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\BITS [2009-03-30 16:14:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Corel [2009-02-15 21:41:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\DAEMON Tools [2009-05-27 14:28:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Desktopicon [2009-06-12 11:44:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\DNA [2009-03-03 13:46:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Gadu-Gadu [2009-04-16 15:50:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Google [2009-03-29 15:28:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\gtk-2.0 [2009-02-15 01:49:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Help [2009-02-14 23:51:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Identities [2009-02-15 01:12:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\InterTrust [2009-06-05 12:40:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\ipla [2009-03-27 16:42:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Jasc [2009-02-15 00:09:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Macromedia [2009-04-17 12:50:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Media Player Classic [2009-05-23 14:50:06 | 00,000,000 | --SD | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Microsoft [2009-04-14 15:11:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Mount&Blade [2009-05-05 12:25:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Mozilla [2009-06-09 19:23:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Nowe Gadu-Gadu [2009-02-15 00:08:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Opera [2009-05-26 16:54:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Real [2009-06-12 11:45:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Skype [2009-06-12 11:24:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\skypePM [2009-02-15 01:19:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Sun [2009-05-27 18:52:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\uTorrent [2009-02-15 14:13:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\Winamp [2009-04-15 14:58:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\WinRAR [2009-02-14 23:50:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji [2009-04-07 12:28:04 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2009-06-08 14:42:04 | 00,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [2001-07-21 22:17:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-06-12 11:40:05 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [color=orange]========== Purity Check ==========[/color] [color=orange]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 177 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:0295CBF7 < End of report >

**Posty:** 18165 · przez **wojtas** 12 Cze 2009, 16:33

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. Wykonaj skan Dr. Web CureIt
5. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym (skasuj co znajdzie)

Malwarebytes Anti-Malware

Jeśli masz Adobe Reader to zaaktualizuj go do najnowszej wersji