Internet wolno działa

**Posty:** 639 · przez **Pustelnik** 03 Cze 2009, 12:17

Nie wiem czy to wina syfu na kompie, czy może dostawcy, bo kiedyś chodził dużo szybciej, a powinien w godzinach porannych bo wtedy mało ludzi jest(bo ja mam to na lanie zależy ile ludzi taka szybkość) a i tak mam szybkość 100-300kb a kiedyś miałem 1mb/s, 2/mb/s rano albo późno wieczorem, proszę o sprawdzenie loga.

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:15:15, on 2009-06-03 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe D:\war\Warcraft III\w3dr.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\cFosSpeed Updater.exe C:\Program Files\cFosSpeed\spd.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [w3dr.exe] D:\war\Warcraft III\w3dr.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - S-1-5-18 Startup: cFosSpeed Updater.exe (User 'SYSTEM') O4 - S-1-5-18 Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: cFosSpeed Updater.exe (User 'Default user') O4 - .DEFAULT Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user') O4 - Startup: cFosSpeed Updater.exe O4 - Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe O8 - Extra context menu item: &Download All by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm O8 - Extra context menu item: &Download by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_srl.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{40B5179A-3E41-4241-B764-9DE7766DFBA6}: NameServer = 194.205.159.1,194.204.152.34 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\cFosSpeed\spd.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe O23 - Service: MySql - Unknown owner - c:\usr/MYSQL/bin/mysqld.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: wampapache - Apache Software Foundation - c:\wamp\apache2\bin\httpd.exe O23 - Service: wampmysqld - Unknown owner - c:\wamp\mysql\bin\mysqld-nt.exe -- End of file - 7301 bytes

**Posty:** 18165 · przez **wojtas** 03 Cze 2009, 13:26

Pobierz OTListIt2 i daj z niego loga

**Posty:** 639 · przez **Pustelnik** 03 Cze 2009, 14:25

Kod: Zaznacz wszystko: OTListIt Extras logfile created on: 2009-06-03 14:20:48 - Run 2 OTListIt2 by OldTimer - Version 2.0.15.8 Folder = D:\ Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,23 Mb Total Physical Memory | 112,51 Mb Available Physical Memory | 22,01% Memory free 1,22 Gb Paging File | 0,80 Gb Available in Paging File | 65,67% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 30,46 Gb Total Space | 0,37 Gb Free Space | 1,22% Space Free | Partition Type: NTFS Drive D: | 115,40 Gb Total Space | 5,40 Gb Free Space | 4,68% Space Free | Partition Type: NTFS Drive E: | 20,44 Gb Total Space | 0,26 Gb Free Space | 1,26% Space Free | Partition Type: FAT32 Drive F: | 20,00 Gb Total Space | 1,16 Gb Free Space | 5,78% Space Free | Partition Type: FAT32 G: Drive not present or media not loaded H: Drive not present or media not loaded Drive I: | 2,67 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Drive J: | 7,38 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive K: | 558,29 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: MAKOS-B6866BC34 Current User Name: Administrator Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Output = Standard File Age = 30 Days Company Name Whitelist: On [color=orange]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = Opera.HTML] -- Reg Error: Key error. File not found .url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=orange]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "UpdatesDisableNotify" = 1 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiHacker] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List "6112:TCP" = 6112:TCP:*:Enabled:6112 TCP [color=orange]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [2007-01-10 00:17:24 | 00,020,539 | ---- | M] (Apache Software Foundation) -- C:\wamp\Apache2\bin\httpd.exe:*:Enabled:Apache HTTP Server [2008-01-18 01:37:26 | 00,024,635 | ---- | M] (Apache Software Foundation) -- D:\wamp\wamp\bin\apache\apache2.2.8\bin\httpd.exe:*:Enabled:Apache HTTP Server [2005-09-05 20:25:46 | 02,207,744 | ---- | M] () -- C:\Program Files\WebServ\mysql\bin\WebServ(mysqld).exe:*:Enabled:WebServ(mysqld) [2007-09-05 08:59:02 | 00,024,635 | ---- | M] (Apache Software Foundation) -- C:\Program Files\WebServ\apache2\bin\WebServ(apache).exe:*:Enabled:Apache HTTP Server File not found -- C:\Program Files\PHP Expert Editor 4.2\phpxedit.exe:*:Enabled:PHP Expert Editor File not found -- C:\Program Files\PHP Expert Editor 4.2\DBG\DbgListener.exe:*:Enabled:Listener for php debugger DBG [2008-07-28 14:49:34 | 04,378,624 | ---- | M] (Gabest) -- C:\Program Files\Real Alternative\Media Player Classic\mplayerc.exe:*:Enabled:Media Player Classic [2008-08-08 07:04:10 | 01,091,768 | ---- | M] (C. Ghisler & Co.) -- C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows File not found -- D:\Gry\cs source\Counter-Strike Source\hl2.exe:*:Enabled:hl2 [2004-12-04 02:38:52 | 03,366,912 | ---- | M] () -- F:\GLizdy\WF.exe:*:Enabled:WF File not found -- C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III [2008-08-19 09:47:38 | 01,795,656 | ---- | M] (FLASHGET) -- C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2 File not found -- C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate File not found -- C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx File not found -- C:\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III [2006-10-27 15:16:48 | 12,813,096 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook [2006-10-27 15:37:44 | 00,338,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove [2006-10-27 15:03:04 | 01,018,664 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote File not found -- C:\Program Files\VSD Software\Alacer\alacer.exe:*:Enabled:Alacer File not found -- C:\usr\SMTP Server\localsrv.exe:*:Enabled:localsrv File not found -- C:\usr\apache\Apache.exe:*:Enabled:Apache [2008-03-20 12:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny [2005-09-30 03:42:57 | 00,081,920 | ---- | M] (Valve) -- C:\Program Files\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher [2007-09-24 21:33:57 | 08,082,944 | ---- | M] () -- D:\FIFA\FIFA08.crack.imajteam-ByAYBERK\FIFA08.exe:*:Enabled:FIFA08 [2007-09-18 19:24:34 | 12,939,216 | ---- | M] () -- D:\heros5\Heroes of Might and Magic V - Tribes of the East\bin\H5_Game.exe:*:Enabled:Heroes of Might and Magic V [2001-04-23 22:01:40 | 00,163,840 | ---- | M] (Official homepage: http://www.republika.pl/lanchat) -- C:\Program Files\LANChat Pro\LANChat.exe:*:Enabled:LANChat Pro v2.20a executable file [2007-09-24 20:33:57 | 08,082,944 | ---- | M] () -- D:\fifka08\Fifa.Soccer.Full.2008-ByAYBERK\FIFA08.crack.imajteam-ByAYBERK\FIFA08.exe:*:Enabled:FIFA08 [2005-09-30 03:47:25 | 00,397,312 | ---- | M] (Valve) -- C:\Program Files\Counter-Strike 1.6\hlds.exe:*:Enabled:HLDS Launcher [2008-12-24 18:22:17 | 00,306,088 | ---- | M] (Take-Two Interactive Software, Inc.) -- D:\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club [2005-07-20 13:39:54 | 05,033,984 | ---- | M] (Team 17 Ltd) -- D:\worms 4 meyhem\Worms GRA\WORMS 4 MAYHEM.EXE:*:Enabled:Worms 4 Mayhem [2009-01-28 21:44:17 | 49,157,432 | ---- | M] (Konami Digital Entertainment Co., Ltd.) -- D:\Pes\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009 [2007-01-07 18:16:51 | 00,638,976 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Programy do wgrania aplikacji i gier na Samsunga E250\Softick PPP & Samsung Java Uploader\Samsung Java - Uploader.exe:*:Enabled:Samsung Java - Uploader [2002-05-05 11:47:00 | 03,092,480 | ---- | M] (Team17 Software Ltd) -- F:\ZRAPIDA\Worms World Party\1.1 PL WWP.exe:*:Enabled:Worms World Party [2004-12-04 19:00:36 | 03,366,912 | ---- | M] () -- C:\Program Files\Team17 Software Ltd\Worms Forts Under Siege\WF.exe:*:Enabled:WF File not found -- C:\Program Files\Quake III Arena\quake3.exe:*:Enabled:quake3 [2009-03-13 01:23:40 | 00,471,040 | ---- | M] (Blizzard Entertainment) -- D:\war\Warcraft III\war3.exe:*:Enabled:Warcraft III [2008-09-29 18:57:48 | 21,755,688 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype [color=orange]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR "{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III "{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club "{0A2A5039-B37F-489D-B1DC-A5258DF9E697}" = FIFA 08 "{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0 "{0F686B29-B2D7-4807-BA62-8892307C4572}" = Kaspersky Anti-Hacker "{105CFC7C-6992-11D5-BD9D-000102C10FD8}" = DjVu Browser Plug-in 3.5 "{15095BF3-A3D7-4DDF-B193-3A496881E003}" = Microsoft .NET Framework 3.0 "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{45E7C481-3EF4-4FCB-AF0B-19F70D618F0C}" = Worms 4 Mayhem "{491DD792-AD81-429C-9EB4-86DD3D22E333}" = Windows Communication Foundation "{578FA426-47C0-4A3F-98A4-01ACD26B7556}" = LEGO Star Wars II "{57ECFB4D-FE11-491A-9AA0-0AF7C3ABC51D}" = ESET NOD32 Antivirus "{594E434E-E4B7-4B2F-AE4A-E5B4B804B2DC}" = GPMapa 2007.3 oem "{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8 "{6094AB91-4CC8-498E-9DFF-134CC0B159DE}" = PC Connectivity Solution "{6444D9D9-CD6C-4464-B970-55C606C944DC}" = Logitech QuickCam "{66FF4C48-0083-4E60-8556-B883AB200092}" = Heroes of Might and Magic V - Tribes of the East "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com "{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}" = Windows Workflow Foundation "{83895843-3A51-4C93-9DF3-2BDB65C7E54A}" = DAEMON Tools "{8874FD36-7C9D-4573-8956-E368D6753D90}" = Worms 3D "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger "{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12 "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{917E73C2-C7DA-4C12-9774-A6A2730BCAAB}" = Worms Forts Under Siege "{972B1D9B-0EAD-49E8-B7D6-3B83FD5665B1}" = Nokia Connectivity Cable Driver "{A8DB611A-D80E-450D-85F6-3ACDD164BE31}" = Pro Evolution Soccer 2009 "{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9 "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "7-Zip" = 7-Zip 4.65 "Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player Plugin "Adobe Shockwave Player" = Adobe Shockwave Player "Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE "BeyondCompare3_is1" = Beyond Compare version 3.0.7 "cFosSpeed" = cFosSpeed v4.25 "com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com "Counter-Strike 1.6" = Counter-Strike 1.6 "CZATeriaKam" = CZATeriaKam 2.5.04 "ENTERPRISE" = Microsoft Office Enterprise 2007 "Eset NOD32 v3.0.642 FiX1.2 by TemDono_is1" = NOD32 v3.0.642 FiX1.2 by TemDono (31 days remaining forever up "Eurobattle.net Installer1.22" = Eurobattle.net Installer "Eurobattle.net2.0" = Eurobattle.net "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "F064B256B4A20996EA9E333B5E0F14B61AB3333D" = Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1) "FlashGet 2.0" = FlashGet 2.0 "Fraps" = Fraps (remove only) "Gadu-Gadu" = Gadu-Gadu 7.7 "Graphical Enhancement Textures" = Graphical Enhancement Textures 2.5 "GzegzolkaXP_is1" = Gżegżółka XP 7.1.2.1 "Hamachi" = Hamachi 1.0.3.0 "HijackThis" = HijackThis 2.0.2 "Imperium Romanum" = Imperium Romanum 1.01 "InstallShield_{578FA426-47C0-4A3F-98A4-01ACD26B7556}" = LEGO Star Wars II "IrfanView" = IrfanView (remove only) "kED_is1" = kED 2.1.4.0 "KLiteCodecPack_is1" = K-Lite Codec Pack 4.1.0 (Full) "LANView_is1" = LANView 2.7 build 1208 "lvdrivers_11.70" = Logitech QuickCam Driver Package "Magic ISO Maker v4.6 (build 0124)" = Magic ISO Maker v4.6 (build 0124) "MagicDisc 2.5.79" = MagicDisc 2.5.79 "Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0 "Microsoft .NET Framework 3.0" = Microsoft .NET Framework 3.0 "Mount&Blade" = Mount&Blade "Mozilla Firefox (3.0.10)" = Mozilla Firefox (3.0.10) "NeroMultiInstaller!UninstallKey" = Nero Suite "NVIDIA Drivers" = NVIDIA Drivers "OpenSSL_is1" = OpenSSL 0.9.6m "PhotoFiltre Studio" = PhotoFiltre Studio "PHPExpertEditor_is1" = PHP Expert Editor 4.3 "PSPad editor_is1" = PSPad editor "Quake III Arena" = Quake III Arena "Quake III Arena Point Release 1.32" = Quake III Arena Point Release 1.32 "RealAlt_is1" = Real Alternative 1.8.2 "Recovery Toolbox for RAR_is1" = Recovery Toolbox for RAR 1.1 "Samsung ML-1520 Series" = Samsung ML-1520 Series "SpeedFan" = SpeedFan (remove only) "Spolszczenie" = Spolszczenie 1.0 "ST6UNST #1" = Karen's LAN Monitor "Steam" = Steam "SubEdit-Player_is1" = SubEdit-Player "sXe Injected" = sXe Injected "SystemRequirementsLab" = System Requirements Lab "Totalcmd" = Total Commander (Remove or Repair) "UltraISO_is1" = UltraISO Premium V9.32 "WAMP5_is1" = WAMP5 1.7.1 "WebServ_is1" = WebServ 2.0 "WIC" = Windows Imaging Component "Winamp" = Winamp "WinRAR archiver" = WinRAR archiver "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 [color=orange]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2009-05-14 09:28:46 | Computer Name = MAKOS-B6866BC34 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd W3DR.exe, wersja 1.4.0.3, moduł powodujący błąd mscorwks.dll, wersja 2.0.50727.42, adres błędu 0x0000b1eb. Error - 2009-05-14 10:20:03 | Computer Name = MAKOS-B6866BC34 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.0.3399, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2009-05-14 10:20:11 | Computer Name = MAKOS-B6866BC34 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.0.3399, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2009-05-23 14:20:56 | Computer Name = MAKOS-B6866BC34 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.0.3399, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2009-05-30 13:41:52 | Computer Name = MAKOS-B6866BC34 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.0.3399, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2009-06-01 15:07:17 | Computer Name = MAKOS-B6866BC34 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd rapget.exe, wersja 0.0.0.0, moduł powodujący błąd rapget.exe, wersja 0.0.0.0, adres błędu 0x0002596c. Error - 2009-06-01 15:21:17 | Computer Name = MAKOS-B6866BC34 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd phpxedit.exe, wersja 4.3.0.0, moduł powodujący błąd , wersja 0.0.0.0, adres błędu 0x00000000. Error - 2009-06-02 12:13:46 | Computer Name = MAKOS-B6866BC34 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd rapget.exe, wersja 0.0.0.0, moduł powodujący błąd rapget.exe, wersja 0.0.0.0, adres błędu 0x0002596c. Error - 2009-06-02 13:41:44 | Computer Name = MAKOS-B6866BC34 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca war3.exe, wersja 1.23.0.6352, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2009-06-02 13:48:59 | Computer Name = MAKOS-B6866BC34 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.0.3399, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. [ System Events ] Error - 2009-06-02 12:03:43 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Eset Nod32 Boot z powodu następującego błędu: %%1053 Error - 2009-06-02 14:30:54 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi MySql z powodu następującego błędu: %%3 Error - 2009-06-02 14:30:54 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7009 Description = Limit czasu (30000 milisekund) podczas oczekiwania na połączenie się z usługą Eset Nod32 Boot. Error - 2009-06-02 14:30:54 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Eset Nod32 Boot z powodu następującego błędu: %%1053 Error - 2009-06-03 06:03:48 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi MySql z powodu następującego błędu: %%3 Error - 2009-06-03 06:03:48 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7009 Description = Limit czasu (30000 milisekund) podczas oczekiwania na połączenie się z usługą Eset Nod32 Boot. Error - 2009-06-03 06:03:48 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Eset Nod32 Boot z powodu następującego błędu: %%1053 Error - 2009-06-03 07:40:42 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi MySql z powodu następującego błędu: %%3 Error - 2009-06-03 07:40:42 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7009 Description = Limit czasu (30000 milisekund) podczas oczekiwania na połączenie się z usługą Eset Nod32 Boot. Error - 2009-06-03 07:40:42 | Computer Name = MAKOS-B6866BC34 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Eset Nod32 Boot z powodu następującego błędu: %%1053 < End of report >

Kod: Zaznacz wszystko: OTListIt logfile created on: 2009-06-03 14:20:48 - Run 2 OTListIt2 by OldTimer - Version 2.0.15.8 Folder = D:\ Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,23 Mb Total Physical Memory | 112,51 Mb Available Physical Memory | 22,01% Memory free 1,22 Gb Paging File | 0,80 Gb Available in Paging File | 65,67% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 30,46 Gb Total Space | 0,37 Gb Free Space | 1,22% Space Free | Partition Type: NTFS Drive D: | 115,40 Gb Total Space | 5,40 Gb Free Space | 4,68% Space Free | Partition Type: NTFS Drive E: | 20,44 Gb Total Space | 0,26 Gb Free Space | 1,26% Space Free | Partition Type: FAT32 Drive F: | 20,00 Gb Total Space | 1,16 Gb Free Space | 5,78% Space Free | Partition Type: FAT32 G: Drive not present or media not loaded H: Drive not present or media not loaded Drive I: | 2,67 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Drive J: | 7,38 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive K: | 558,29 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: MAKOS-B6866BC34 Current User Name: Administrator Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Output = Standard File Age = 30 Days Company Name Whitelist: On [color=orange]========== Processes (SafeList) ==========[/color] PRC - [2004-08-04 00:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2004-11-15 12:20:20 | 00,077,824 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2005-01-12 03:01:32 | 00,032,768 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe PRC - [2007-12-21 08:21:06 | 01,443,072 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2008-06-10 04:27:04 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe PRC - [2008-08-03 17:38:34 | 00,061,440 | ---- | M] (VT Software) -- D:\war\Warcraft III\w3dr.exe PRC - [2008-09-12 18:45:48 | 00,036,352 | ---- | M] () -- C:\Program Files\Winamp\winampa.exe PRC - [2006-10-27 00:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2008-02-13 14:02:46 | 00,564,496 | ---- | M] () -- C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe PRC - [2008-08-02 15:56:03 | 02,195,583 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe PRC - [2008-12-12 20:40:16 | 00,030,046 | ---- | M] () -- C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\cFosSpeed Updater.exe PRC - [2008-07-18 16:23:42 | 00,314,584 | R--- | M] (cFos Software GmbH) -- C:\Program Files\cFosSpeed\spd.exe PRC - [2007-12-21 08:21:16 | 00,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2009-04-29 17:13:03 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2008-02-05 19:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe PRC - [2008-02-05 19:20:42 | 00,150,040 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe PRC - [2006-06-01 11:22:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe PRC - [2007-05-28 18:57:54 | 00,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2008-02-05 19:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe PRC - [2007-02-18 18:07:00 | 01,141,760 | ---- | M] (Aestan Software) -- C:\wamp\wampmanager.exe PRC - [2008-08-29 09:26:04 | 01,270,272 | ---- | M] (Ankord Development Group) -- C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe PRC - [2007-01-10 00:17:24 | 00,020,539 | ---- | M] (Apache Software Foundation) -- c:\wamp\apache2\bin\httpd.exe PRC - [2007-03-05 21:58:16 | 04,554,752 | ---- | M] () -- c:\wamp\mysql\bin\mysqld-nt.exe PRC - [2007-01-10 00:17:24 | 00,020,539 | ---- | M] (Apache Software Foundation) -- C:\wamp\apache2\bin\httpd.exe PRC - [2009-06-03 14:06:30 | 00,501,248 | ---- | M] (OldTimer Tools) -- D:\OTListIt2.exe [color=orange]========== Win32 Services (SafeList) ==========[/color] SRV - [2005-09-23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2008-07-18 16:23:42 | 00,314,584 | R--- | M] (cFos Software GmbH) -- C:\Program Files\cFosSpeed\spd.exe -- (cFosSpeedS [Auto | Running]) SRV - [2005-09-23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2007-12-21 08:22:44 | 00,019,200 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv [On_Demand | Stopped]) SRV - [2007-12-21 08:21:16 | 00,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn [Auto | Running]) SRV - [2006-10-20 22:21:24 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped]) SRV - [2004-08-04 00:44:08 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2006-10-30 04:33:58 | 00,741,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2008-02-05 19:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe -- (LVCOMSer [Auto | Running]) SRV - [2008-02-05 19:20:42 | 00,150,040 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv [Auto | Running]) SRV - [2008-02-05 19:22:36 | 00,141,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher [Auto | Stopped]) SRV - [2006-10-27 00:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [On_Demand | Stopped]) SRV - [2008-10-12 10:59:26 | 00,000,000 | ---D | M] -- c:\usr -- (MySql [Auto | Stopped]) SRV - [2006-10-30 04:34:02 | 00,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2001-10-26 17:30:00 | 00,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\regedt32.exe -- (NOD32FiXTemDono [Auto | Stopped]) SRV - [2006-06-01 11:22:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc [Auto | Running]) SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped]) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2007-02-08 16:13:46 | 00,212,480 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer [On_Demand | Stopped]) SRV - [2007-05-28 18:57:54 | 00,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE [Auto | Running]) SRV - [2007-01-10 00:17:24 | 00,020,539 | ---- | M] (Apache Software Foundation) -- c:\wamp\apache2\bin\httpd.exe -- (wampapache [On_Demand | Running]) SRV - [2007-03-05 21:58:16 | 04,554,752 | ---- | M] () -- c:\wamp\mysql\bin\mysqld-nt.exe -- (wampmysqld [On_Demand | Running]) [color=orange]========== Driver Services (SafeList) ==========[/color] DRV - [2004-11-17 13:05:38 | 02,297,664 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running]) DRV - [2009-05-23 15:28:46 | 00,271,360 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\atksgt.sys -- (atksgt [Auto | Running]) DRV - [2008-07-18 16:23:46 | 00,732,888 | R--- | M] (cFos Software GmbH) -- C:\WINDOWS\system32\DRIVERS\cfosspeed.sys -- (cFosSpeed [On_Demand | Running]) DRV - [2003-12-27 20:42:12 | 00,137,216 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\d344bus.sys -- (d344bus [Boot | Running]) DRV - [2003-12-27 02:38:10 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\System32\Drivers\d344prt.sys -- (d344prt [Boot | Running]) DRV - [2003-07-29 16:57:20 | 00,040,448 | ---- | M] (DeviceGuys, Inc.) -- C:\WINDOWS\System32\Drivers\DgiVecp.sys -- (DgiVecp [Auto | Running]) DRV - [2007-12-21 08:19:54 | 00,039,944 | ---- | M] (ESET) -- C:\WINDOWS\system32\DRIVERS\eamon.sys -- (eamon [Auto | Running]) DRV - [2007-12-21 08:20:14 | 00,030,216 | ---- | M] (ESET) -- C:\WINDOWS\system32\DRIVERS\easdrv.sys -- (easdrv [System | Running]) DRV - [2007-12-21 08:21:56 | 00,033,800 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\epfwtdir.sys -- (epfwtdir [System | Running]) DRV - [2004-08-04 01:08:22 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running]) DRV - [1996-04-03 21:33:26 | 00,005,248 | ---- | M] () -- C:\WINDOWS\system32\giveio.sys -- (giveio [Boot | Running]) DRV - [2009-01-04 21:03:27 | 00,025,280 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\system32\DRIVERS\hamachi.sys -- (hamachi [On_Demand | Running]) DRV - [2008-12-15 12:17:50 | 00,074,752 | ---- | M] (EZB Systems, Inc.) -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive [System | Running]) DRV - [2006-05-11 16:05:41 | 00,139,024 | ---- | M] (Kaspersky Labs) -- C:\WINDOWS\System32\drivers\klif.sys -- (Klif [System | Running]) DRV - [2006-05-11 16:05:54 | 00,028,979 | ---- | M] (KL) -- C:\WINDOWS\System32\drivers\Klpf.sys -- (Klpf [Boot | Running]) DRV - [2006-05-11 16:06:05 | 00,036,534 | ---- | M] (KL) -- C:\WINDOWS\System32\drivers\Klpid.sys -- (Klpid [Boot | Running]) DRV - [2009-05-23 15:28:45 | 00,018,048 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\lirsgt.sys -- (lirsgt [Auto | Running]) DRV - [2008-02-05 19:18:12 | 00,689,176 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\LVcKap.sys -- (LVcKap [On_Demand | Stopped]) DRV - [2008-02-05 19:20:08 | 00,025,624 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys -- (LVPr2Mon [On_Demand | Running]) DRV - [2008-02-06 04:21:25 | 00,041,752 | R--- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\LVUSBSta.sys -- (LVUSBSta [On_Demand | Stopped]) DRV - [2007-09-05 01:46:34 | 00,092,544 | ---- | M] (MagicISO, Inc.) -- C:\WINDOWS\system32\DRIVERS\mcdbus.sys -- (mcdbus [On_Demand | Running]) DRV - [2007-02-22 10:15:56 | 00,137,216 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (nmwcd [On_Demand | Stopped]) DRV - [2007-02-22 10:15:14 | 00,008,320 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (nmwcdc [On_Demand | Stopped]) DRV - [2007-02-22 10:15:14 | 00,012,288 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcdcj.sys -- (nmwcdcj [On_Demand | Stopped]) DRV - [2007-02-22 10:15:14 | 00,012,288 | ---- | M] (Nokia) -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (nmwcdcm [On_Demand | Stopped]) DRV - [2006-06-01 11:22:00 | 03,925,920 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running]) DRV - [2008-02-06 04:17:26 | 00,013,848 | R--- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\lv302af.sys -- (pepifilter [On_Demand | Stopped]) DRV - [2008-02-06 04:17:37 | 02,570,520 | R--- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\LV302V32.SYS -- (PID_PEPI [On_Demand | Stopped]) DRV - [2001-08-17 21:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2004-08-04 00:31:34 | 00,020,992 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\system32\DRIVERS\RTL8139.SYS -- (rtl8139 [On_Demand | Running]) DRV - [2008-12-26 00:50:19 | 00,163,644 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [Auto | Running]) DRV - [2006-09-24 15:28:46 | 00,005,248 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\system32\speedfan.sys -- (speedfan [Boot | Running]) DRV - [2009-01-01 21:24:07 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2004-08-04 00:07:56 | 00,059,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio [On_Demand | Stopped]) [color=orange]========== Standard Registry (SafeList) ==========[/color] [color=orange]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=orange]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.google.pl" FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.3.3 FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.1.8.7 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102 FF - prefs.js..extensions.enabledItems: {c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.6 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.10 FF - prefs.js..extensions.enabledItems: {5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}:1.8.50 FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009-05-05 20:16:54 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009-04-29 17:13:08 | 00,000,000 | ---D | M] [2008-08-01 11:48:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Extensions [2008-08-01 11:48:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-06-02 20:41:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Firefox\Profiles\dsn97547.default\extensions [2009-05-29 15:50:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Firefox\Profiles\dsn97547.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2009-05-29 15:50:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Firefox\Profiles\dsn97547.default\extensions\{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF} [2008-11-25 12:47:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Firefox\Profiles\dsn97547.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12} [2009-04-15 17:44:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Firefox\Profiles\dsn97547.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009-04-15 17:44:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\mozilla\Firefox\Profiles\dsn97547.default\extensions\firebug@software.joehewitt.com [2009-06-03 14:05:08 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-04-29 17:13:03 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2008-10-26 11:09:05 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED} [2008-08-08 20:44:49 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [2009-04-29 17:13:03 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-04-29 17:13:03 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2006-06-03 18:43:22 | 00,000,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2008-04-03 19:19:08 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2008-04-16 06:08:20 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2007-03-31 19:11:54 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2006-06-03 18:43:22 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2008-03-28 23:36:04 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2007-01-05 13:40:56 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (FG2CatchUrl) - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll (FlashGet) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated) O4 - HKLM..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice (ESET) O4 - HKLM..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" (Microsoft Corporation) O4 - HKLM..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" () O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit File not found O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found O4 - HKLM..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" (Cyberlink Corp.) O4 - HKLM..\Run: [SoundMan] SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" (Sun Microsystems, Inc.) O4 - HKLM..\Run: [w3dr.exe] D:\war\Warcraft III\w3dr.exe (VT Software) O4 - HKLM..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" () O4 - HKCU..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount (Alcohol Soft Development Team) O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\cFosSpeed Updater.exe () O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe (Kaspersky Lab) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Download All by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm () O8 - Extra context menu item: &Download by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} http://www.srtest.com/srl_bin/sysreqlab_srl.cab (System Requirements Lab Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Interfaces\{40B5179A-3E41-4241-B764-9DE7766DFBA6}\\NameServer = 194.205.159.1,194.204.152.34 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-07-31 21:36:51 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2007-08-14 02:30:58 | 00,402,696 | R--- | M] (Electronic Arts) - I:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2007-09-02 06:55:55 | 00,000,000 | R--D | M] - I:\Autorun -- [ CDFS ] O32 - AutoRun File - [2007-09-02 06:56:15 | 02,984,960 | R--- | M] () - I:\autorun.dat -- [ CDFS ] O32 - AutoRun File - [2007-09-02 06:50:18 | 00,000,136 | R--- | M] () - I:\autorun.inf -- [ CDFS ] O32 - AutoRun File - [2008-08-22 07:57:52 | 00,230,728 | R--- | M] (Konami Digital Entertainment Co., Ltd.) - J:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2008-05-30 08:54:04 | 00,000,047 | R--- | M] () - J:\Autorun.inf -- [ UDF ] O32 - AutoRun File - [2004-09-13 16:50:04 | 00,000,059 | R--- | M] () - K:\Autorun.inf -- [ CDFS ] O32 - AutoRun File - [2004-10-22 13:13:53 | 00,000,000 | R--D | M] - K:\AutorunEnglish -- [ CDFS ] O32 - AutoRun File - [2004-10-22 13:13:54 | 00,000,000 | R--D | M] - K:\AutorunFrench -- [ CDFS ] O32 - AutoRun File - [2004-10-22 13:13:54 | 00,000,000 | R--D | M] - K:\AutorunGerman -- [ CDFS ] O32 - AutoRun File - [2004-10-22 13:13:54 | 00,000,000 | R--D | M] - K:\AutorunItalian -- [ CDFS ] O32 - AutoRun File - [2004-10-22 13:13:55 | 00,000,000 | R--D | M] - K:\AutorunSpanish -- [ CDFS ] O33 - MountPoints2\J\Shell - "" = AutoRun O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\autorun.exe -- [2008-08-22 07:57:52 | 00,230,728 | R--- | M] (Konami Digital Entertainment Co., Ltd.) O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - * [2009-06-03 13:40:35 | 00,000,000 | ---D | M] [color=orange]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-06-03 12:13:07 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\HijackThis.lnk [2009-06-03 12:13:05 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2009-06-01 22:58:34 | 00,003,884 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\cleanxmltoarray-2008-03-01.zip [2009-06-01 18:01:15 | 00,585,249 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\PHPLogin_2.0.6_Incl_Keygen_www.iophp.com.rar [2009-05-31 23:24:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\PHPLogin2.0.6-NulledScriptz.com.pl [2009-05-30 13:23:13 | 02,359,350 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\pisanienaklw.bmp [2009-05-27 17:52:11 | 00,385,024 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\grupa b.doc [2009-05-27 17:52:11 | 00,385,024 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\grupa a.doc [2009-05-27 17:52:11 | 00,023,552 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\odpowiedzi.doc [2009-05-27 17:52:05 | 00,358,418 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\angol.rar [2009-05-23 15:36:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\gothic3 [2009-05-23 15:33:42 | 00,000,448 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Gothic III CP.lnk [2009-05-23 15:29:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Gothic_3_Community_Patch_v1.6_Full [2009-05-23 15:28:55 | 00,000,494 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Gothic III.lnk [2009-05-23 15:28:46 | 00,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2009-05-23 15:28:45 | 00,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2009-05-23 14:50:07 | 72,833,665 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Gothic_3_Community_Patch_v1.6_Full.zip [2009-05-19 21:48:30 | 00,398,254 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\PES2009.rar [2009-05-19 18:57:49 | 00,098,304 | ---- | C] (Info-ZIP) -- C:\Documents and Settings\Administrator\Pulpit\unzip32.dll [2009-05-19 18:57:49 | 00,077,824 | ---- | C] (Mango Enterprise - http://www.geocities.com/mangokun/) -- C:\Documents and Settings\Administrator\Pulpit\JADMaker.exe [2009-05-19 18:57:49 | 00,000,235 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\config.xml [2009-05-17 12:01:05 | 00,000,580 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Skrót do euroloader.lnk [2009-05-16 15:16:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Alcohol 120% [2009-05-14 15:14:49 | 01,872,435 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\newsl-zend421.zip [2009-05-08 15:50:52 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\Administrator\Pulpit\~$trzebne skrypty.doc [2009-05-08 15:50:33 | 00,033,280 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Potrzebne skrypty.doc [2009-02-28 19:31:50 | 00,000,871 | ---- | C] () -- C:\WINDOWS\QIII.INI [2009-02-04 12:38:41 | 00,066,482 | R--- | C] () -- C:\WINDOWS\System32\lvcoinst.ini [2009-01-01 21:24:07 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2008-09-21 17:33:51 | 00,155,648 | ---- | C] () -- C:\WINDOWS\System32\libssl32.dll [2008-08-20 17:33:57 | 00,137,216 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d344bus.sys [2008-08-20 17:33:57 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d344prt.sys [2008-08-20 13:05:20 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.INI [2008-08-09 17:14:44 | 00,001,067 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini [2008-08-09 17:10:24 | 00,002,770 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2008-08-01 12:26:19 | 00,000,049 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2008-08-01 12:25:27 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008-08-01 12:25:17 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-08-01 12:25:17 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008-08-01 12:25:16 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-08-01 12:25:10 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-08-01 12:25:10 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-08-01 11:12:16 | 00,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2008-08-01 11:12:13 | 00,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2008-08-01 11:08:35 | 00,002,660 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2008-08-01 11:08:34 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2008-02-05 19:20:08 | 00,025,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys [2007-12-21 08:21:56 | 00,033,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\epfwtdir.sys [2006-06-01 11:22:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2006-06-01 11:22:00 | 01,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2006-06-01 11:22:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2006-06-01 11:22:00 | 00,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2006-06-01 11:22:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2006-06-01 11:22:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2006-06-01 11:22:00 | 00,196,608 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2004-08-04 00:44:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2003-12-27 20:43:24 | 00,068,608 | ---- | C] () -- C:\WINDOWS\daemon.dll [2002-10-03 15:42:27 | 00,000,034 | ---- | C] () -- C:\WINDOWS\Q3version.ini [2001-07-21 22:16:20 | 00,000,552 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-21 22:15:52 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [1996-04-03 21:33:26 | 00,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys [color=orange]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] [2009-06-03 13:40:18 | 00,063,804 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2009-06-03 13:40:11 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\desktop.ini [2009-06-03 13:40:11 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-06-03 13:40:08 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-06-03 12:13:07 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\HijackThis.lnk [2009-06-01 22:58:13 | 00,003,884 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\cleanxmltoarray-2008-03-01.zip [2009-06-01 18:01:05 | 00,585,249 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\PHPLogin_2.0.6_Incl_Keygen_www.iophp.com.rar [2009-05-31 22:18:17 | 00,385,024 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\grupa b.doc [2009-05-31 12:06:45 | 00,385,024 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\grupa a.doc [2009-05-30 13:23:13 | 02,359,350 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\pisanienaklw.bmp [2009-05-27 17:51:55 | 00,358,418 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\angol.rar [2009-05-23 15:33:42 | 00,000,448 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gothic III CP.lnk [2009-05-23 15:28:55 | 00,000,494 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gothic III.lnk [2009-05-23 15:28:46 | 00,271,360 | ---- | M] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2009-05-23 15:28:45 | 00,018,048 | ---- | M] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2009-05-23 14:49:49 | 72,833,665 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Gothic_3_Community_Patch_v1.6_Full.zip [2009-05-19 22:52:45 | 00,000,235 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\config.xml [2009-05-19 21:48:01 | 00,398,254 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\PES2009.rar [2009-05-17 12:01:04 | 00,000,580 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Skrót do euroloader.lnk [2009-05-16 17:12:55 | 00,002,770 | ---- | M] () -- C:\WINDOWS\wincmd.ini [2009-05-15 20:56:21 | 00,001,067 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini [2009-05-14 15:15:13 | 01,872,435 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\newsl-zend421.zip [2009-05-08 15:50:52 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\Administrator\Pulpit\~$trzebne skrypty.doc [2009-05-08 15:50:34 | 00,033,280 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Potrzebne skrypty.doc [2009-05-07 18:47:51 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-05-05 13:03:22 | 00,000,049 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-05-04 19:36:16 | 00,271,784 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT < End of report >

**Posty:** 18165 · przez **wojtas** 03 Cze 2009, 15:39

Uruchom OTListIt2 i w oknie Custom Scans/Fixes wklej :

:OTLI
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O32 - AutoRun File - [2007-09-02 06:55:55 | 00,000,000 | R--D | M] - I:\Autorun -- [ CDFS ]
O32 - AutoRun File - [2007-09-02 06:56:15 | 02,984,960 | R--- | M] () - I:\autorun.dat -- [ CDFS ]
O32 - AutoRun File - [2007-09-02 06:50:18 | 00,000,136 | R--- | M] () - I:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2008-05-30 08:54:04 | 00,000,047 | R--- | M] () - J:\Autorun.inf -- [ UDF ]
O32 - AutoRun File - [2004-09-13 16:50:04 | 00,000,059 | R--- | M] () - K:\Autorun.inf -- [ CDFS ]

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

1.Uruchom OTListIt2 z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. Wykonaj skan Dr. Web CureIt
5. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym (skasuj co znajdzie)

Malwarebytes Anti-Malware

Jeśli masz Adobe Reader to zaaktualizuj go do najnowszej wersji

Autor postu otrzymał pochwałę