Jak się pozbyć desot.exe?

**Posty:** 2 · przez **luk07** 03 Wrz 2009, 12:35

kamiledi15 napisał(a):po uruchomieniu komputera mam często komunikat, że nie można odnaleźć pliku tapi.nfo. Z tego, co wyczytałem, to to też jakiś trojan, ale antywirus mi go nie znajduje.

Mam podobny problem. Wczoraj po raz pierwszy pojawił mi się taki komunikat. Mam antywirusa AVG, który nic nie znajduje. Zresztą jeszcze nigdy nic nie znalazł. Może zainstalować Avasta albo cos innego.

Zainstalowalem program SUPERAntiSpyware, bo wyczytalem, ze sporo osob go poleca. Wykry mi sporo cookies i jednego trojana. Usunalem to paskudztwo, ale po uruchomieniu komputera nadal pojawia sie ten komunikat tapi.nfo

wojtas napisał(a):daj loga z OTL

Z tego co widze to przydalby sie Wam log z tego programu aby pomoc mi z rozwiazaniem problemu. Nie znam tego programu ale postaram sie to zrobic.

Prosze o pomoc. Jakie kolejne kroki mam podejmowac. Nie wiem, moze np. praca tego OTl koliduje z programami ktore mam zainstalowane.

Z gory dzieki za odpowiedz.

PS. Przepraszam za brak polskich znakow.

**Posty:** 14516 · przez **ToServeAndProtect** 03 Wrz 2009, 12:39

luk07

luk07 napisał(a):Avasta

nigdy, przenigdy nie instaluj tego śmiecia

przeniosłem tak byś miał swój temat.

jeżeli program koliduje z innymi to wyłącz resztę i wtedy uruchom OTL. żadnej filozofii w obsłudze tego programu nie ma, po prostu postępuj ze wskazówkami na ekranie

btw: przeczytaj-zanim-wstawisz-logi-na-forum-vt93842.html

Autor postu otrzymał pochwałę

**Posty:** 2 · przez **luk07** 03 Wrz 2009, 12:50

ToServeAndProtect napisał(a):luk07
luk07 napisał(a):Avasta

nigdy, przenigdy nie instaluj tego śmiecia

OK. Rozumiem.

ToServeAndProtect napisał(a):luk07
przeniosłem tak byś miał swój temat.

Dzieki.

ToServeAndProtect napisał(a):luk07
jeżeli program koliduje z innymi to wyłącz resztę i wtedy uruchom OTL. żadnej filozofii w obsłudze tego programu nie ma, po prostu postępuj ze wskazówkami na ekranie

btw: przeczytaj-zanim-wstawisz-logi-na-forum-vt93842.html

OK. Zaraz to zrobie.

Dodano Dzisiaj, 13:22:
Wyskoczyły mi 2 pliki tekstowe:

- Extras.Txt
- OLT. Txt

Wkleje je w takiej kolejności.

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2009-09-03 13:01:24 - Run 1 OTL by OldTimer - Version 3.0.10.7 Folder = C:\Documents and Settings\Lukas\Pulpit Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.11) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 255,46 Mb Total Physical Memory | 73,51 Mb Available Physical Memory | 28,78% Memory free 752,29 Mb Paging File | 187,59 Mb Available in Paging File | 24,94% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 7,41 Gb Free Space | 37,95% Space Free | Partition Type: NTFS Drive D: | 19,53 Gb Total Space | 19,00 Gb Free Space | 97,29% Space Free | Partition Type: NTFS Drive E: | 35,45 Gb Total Space | 35,35 Gb Free Space | 99,71% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: LUKASZ Current User Name: Lukas Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny -- (Gadu-Gadu S.A.) "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "C:\Program Files\Internet Explorer\iexplore.exe" = C:\Program Files\Internet Explorer\iexplore.exe:*:Disabled:Internet Explorer -- (Microsoft Corporation) "C:\Program Files\uTorrent\utorrent.exe" = C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent -- File not found "C:\Program Files\eMule\emule.exe" = C:\Program Files\eMule\emule.exe:*:Disabled:eMule -- File not found "C:\Program Files\SopCast\adv\SopAdver.exe" = C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- File not found "C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- File not found "C:\Program Files\Winamp Remote\bin\Orb.exe" = C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb -- File not found "C:\Program Files\Winamp Remote\bin\OrbTray.exe" = C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray -- File not found "C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe" = C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client -- File not found "C:\xampp\apache\bin\apache.exe" = C:\xampp\apache\bin\apache.exe:*:Enabled:Apache HTTP Server -- File not found "C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox -- (Mozilla Corporation) "C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\AVG\AVG8\avgnsx.exe" = C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{07DEC7A1-F8D2-4DBB-900B-A2F9302647BB}" = Wireless LAN Utility "{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3 "{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{5265664F-6128-405C-9225-9782A85954FD}" = Plustek USB Scanner "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{AC76BA86-7AD7-1038-7B44-CEA000000001}" = Adobe Reader 6.0.2 CE "{cddcbbf1-2703-46bc-938b-bcc81a1eeaaa}" = SUPERAntiSpyware Free Edition "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "AVG8Uninstall" = AVG Free 8.5 "Convert Image To PDF_is1" = Convert Image To PDF "Dziobas Rar Player_is1" = Dziobas Rar Player 0.007PL "Gadu-Gadu" = Gadu-Gadu 7.7 "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "IrfanView" = IrfanView (remove only) "MjuiceWinamp" = Mjuice Components "Mozilla Firefox (3.0.13)" = Mozilla Firefox (3.0.13) "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "Polish Your English - Kurs" = Polish Your English - Kurs "Teachmaster 3.9" = Teachmaster 3.9 (remove only) "Totalcmd" = Total Commander (Remove or Repair) "WIC" = Windows Imaging Component "Winamp" = Winamp "Winamp Toolbar for Firefox" = Winamp Toolbar for Firefox "Windows Media Format Runtime" = Windows Media Format Runtime "WinRAR archiver" = Archiwizator WinRAR "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2009-02-09 16:20:44 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd acrord32.exe, wersja 6.0.2.0, moduł powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x3f7353f8. Error - 2009-02-10 16:01:21 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd acrord32.exe, wersja 6.0.2.0, moduł powodujący błąd acrord32.exe, wersja 6.0.2.0, adres błędu 0x0014a883. Error - 2009-04-15 10:17:35 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd acrord32.exe, wersja 6.0.2.0, moduł powodujący błąd acrord32.exe, wersja 6.0.2.0, adres błędu 0x0014a883. Error - 2009-04-17 06:14:54 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd firefox.exe, wersja 1.9.0.3372, moduł powodujący błąd xul.dll, wersja 1.9.0.3372, adres błędu 0x000fca16. Error - 2009-07-02 14:12:55 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd acrord32.exe, wersja 6.0.2.0, moduł powodujący błąd acrord32.exe, wersja 6.0.2.0, adres błędu 0x001901ab. Error - 2009-07-02 14:13:06 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd drwtsn32.exe, wersja 5.1.2600.0, moduł powodujący błąd dbghelp.dll, wersja 5.1.2600.2180, adres błędu 0x0001295d. Error - 2009-07-03 07:50:59 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd acrord32.exe, wersja 6.0.2.0, moduł powodujący błąd acrord32.exe, wersja 6.0.2.0, adres błędu 0x001901ab. Error - 2009-07-10 15:12:50 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd acrord32.exe, wersja 6.0.2.0, moduł powodujący błąd acrord32.exe, wersja 6.0.2.0, adres błędu 0x001901ab. Error - 2009-08-05 09:38:27 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd acrord32.exe, wersja 6.0.2.0, moduł powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x3f7353f8. Error - 2009-08-17 16:44:56 | Computer Name = LUKASZ | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd acrord32.exe, wersja 6.0.2.0, moduł powodujący błąd acrord32.exe, wersja 6.0.2.0, adres błędu 0x000e2e21. [ System Events ] Error - 2009-09-02 13:25:24 | Computer Name = LUKASZ | Source = Server | ID = 2505 Description = Serwer nie mógł utworzyć powiązania do transportu \Device\NetbiosSmb, ponieważ inny komputer w sieci ma tę samą nazwę. Nie można uruchomić serwera. Error - 2009-09-02 15:32:26 | Computer Name = LUKASZ | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi USB Scanner Driver z powodu następującego błędu: %%1058 Error - 2009-09-02 15:34:48 | Computer Name = LUKASZ | Source = Server | ID = 2505 Description = Serwer nie mógł utworzyć powiązania do transportu \Device\NetbiosSmb, ponieważ inny komputer w sieci ma tę samą nazwę. Nie można uruchomić serwera. Error - 2009-09-02 16:55:33 | Computer Name = LUKASZ | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi USB Scanner Driver z powodu następującego błędu: %%1058 Error - 2009-09-02 16:57:47 | Computer Name = LUKASZ | Source = W32Time | ID = 39452689 Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera DNS ręcznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi próbę wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji, wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751) Error - 2009-09-02 16:57:47 | Computer Name = LUKASZ | Source = W32Time | ID = 39452701 Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne. Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego czasu. Error - 2009-09-02 17:14:33 | Computer Name = LUKASZ | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi USB Scanner Driver z powodu następującego błędu: %%1058 Error - 2009-09-02 17:17:53 | Computer Name = LUKASZ | Source = Server | ID = 2505 Description = Serwer nie mógł utworzyć powiązania do transportu \Device\NetbiosSmb, ponieważ inny komputer w sieci ma tę samą nazwę. Nie można uruchomić serwera. Error - 2009-09-02 17:20:15 | Computer Name = LUKASZ | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi USB Scanner Driver z powodu następującego błędu: %%1058 Error - 2009-09-03 05:03:37 | Computer Name = LUKASZ | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi USB Scanner Driver z powodu następującego błędu: %%1058 < End of report >

Kod: Zaznacz wszystko: OTL logfile created on: 2009-09-03 13:01:24 - Run 1 OTL by OldTimer - Version 3.0.10.7 Folder = C:\Documents and Settings\Lukas\Pulpit Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.11) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 255,46 Mb Total Physical Memory | 73,51 Mb Available Physical Memory | 28,78% Memory free 752,29 Mb Paging File | 187,59 Mb Available in Paging File | 24,94% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 7,41 Gb Free Space | 37,95% Space Free | Partition Type: NTFS Drive D: | 19,53 Gb Total Space | 19,00 Gb Free Space | 97,29% Space Free | Partition Type: NTFS Drive E: | 35,45 Gb Total Space | 35,35 Gb Free Space | 99,71% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: LUKASZ Current User Name: Lukas Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-08-22 09:54:53 | 00,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe PRC - [2004-12-01 19:29:30 | 00,049,152 | ---- | M] () -- C:\Program Files\Wirelwss LAN Utility\tiwlnsvc.exe PRC - [2005-01-28 14:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe PRC - [2007-06-13 15:23:49 | 01,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.exe PRC - [2009-08-22 09:56:11 | 00,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe PRC - [2009-08-22 09:55:19 | 00,595,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe PRC - [2009-08-22 09:56:04 | 00,693,016 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgcsrvx.exe PRC - [2004-12-09 17:49:26 | 01,150,976 | ---- | M] () -- C:\Program Files\Wirelwss LAN Utility\TIWLANCu.exe PRC - [2003-12-19 11:53:18 | 00,065,024 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2007-10-10 07:28:32 | 00,036,352 | ---- | M] () -- C:\Program Files\Winamp\winampa.exe PRC - [2008-02-22 05:25:21 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe PRC - [2009-08-22 09:55:38 | 02,007,832 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe PRC - [2004-10-13 18:24:37 | 01,694,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2008-03-20 12:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe PRC - [2009-08-05 16:06:26 | 01,830,128 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe PRC - [2007-10-10 07:29:14 | 01,250,816 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe PRC - [2007-10-10 07:29:14 | 01,250,816 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe PRC - [2009-08-04 14:55:17 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-09-03 12:57:57 | 00,514,048 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lukas\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found -- -- (aspnet_state [On_Demand | Stopped]) SRV - [2009-08-22 09:54:53 | 00,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd [Auto | Running]) SRV - [2006-03-02 14:00:00 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2003-07-28 20:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2004-12-01 19:29:30 | 00,049,152 | ---- | M] () -- C:\Program Files\Wirelwss LAN Utility\tiwlnsvc.exe -- (tiwlnsvc [Auto | Running]) SRV - [2005-01-28 14:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe -- (UMWdf [Auto | Running]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2003-12-11 17:54:14 | 00,391,424 | ---- | M] (Sensaura Ltd) -- C:\WINDOWS\System32\drivers\ALCXSENS.SYS -- (ALCXSENS [On_Demand | Running]) DRV - [2003-12-19 14:07:50 | 00,541,548 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running]) DRV - [2004-08-04 02:35:04 | 00,701,440 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running]) DRV - [2009-08-22 09:56:06 | 00,335,240 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86 [System | Running]) DRV - [2009-08-22 09:56:07 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86 [System | Running]) DRV - [2009-07-24 10:52:46 | 00,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX [System | Running]) DRV - [2001-08-17 22:13:08 | 00,027,165 | ---- | M] (VIA Technologies, Inc. ) -- C:\WINDOWS\System32\DRIVERS\fetnd5.sys -- (FETNDIS [On_Demand | Stopped]) DRV - [2006-03-02 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2009-08-05 16:06:28 | 00,009,968 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (sasdifsv [System | Running]) DRV - [2009-08-05 16:06:30 | 00,007,408 | R--- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (sasenum [On_Demand | Running]) DRV - [2009-08-05 16:06:28 | 00,074,480 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys -- (saskutil [System | Running]) DRV - [2007-11-13 12:25:55 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2004-12-01 19:35:16 | 00,438,912 | ---- | M] (Texas Instruments) -- C:\WINDOWS\System32\DRIVERS\TNET1130.sys -- (TNET1130 [On_Demand | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - URLSearchHook: *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Reg Error: Key error. File not found IE - URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Yahoo! Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5 FF - prefs.js..extensions.enabledItems: avg@igeared:2.507.024.001 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.13 FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009-07-24 10:52:09 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG8\Toolbar\Firefox\avg@igeared [2009-08-24 12:06:58 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-08-13 16:07:45 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-08-04 14:55:26 | 00,000,000 | ---D | M] [2008-06-30 22:28:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Extensions [2008-06-30 22:28:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-09-02 19:36:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Firefox\Profiles\46e78dvc.default\extensions [2007-12-28 19:34:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Lukas\Dane aplikacji\mozilla\Firefox\Profiles\46e78dvc.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2007-12-28 19:41:20 | 00,001,878 | ---- | M] () -- C:\Documents and Settings\Lukas\Dane aplikacji\Mozilla\FireFox\Profiles\46e78dvc.default\searchplugins\aolsearch.xml [2009-09-02 19:36:05 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-08-04 14:55:26 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2007-12-23 11:10:11 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} [2008-03-15 15:49:37 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} [2009-08-04 14:55:15 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-08-04 14:55:15 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-08-04 14:55:18 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2009-07-22 15:14:09 | 00,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-07-24 10:57:39 | 00,001,489 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml [2009-05-01 19:19:44 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2009-05-01 19:19:45 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2009-05-01 19:19:45 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2009-05-01 19:19:45 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2009-05-01 19:19:45 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-05-01 19:19:45 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O2 - BHO: (QUICKfind BHO Object) - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\PROGRA~1\TEXTware\QUICKF~1\PlugIns\IEHelp.dll File not found O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll () O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [CafeNews] C:\Program Files\CafeNews\CN.exe File not found O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [TI WLAN] C:\Program Files\Wirelwss LAN Utility\TIWLANCu.exe () O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe () O4 - HKCU..\Run: [fsm] File not found O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKCU..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0 O8 - Extra context menu item: E&ksport do programu Microsoft Excel - C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\npjpi160_05.dll (Sun Microsystems, Inc.) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKCU\..Trusted Domains: 8 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\textwareilluminatorbase {CE5CD329-1650-414A-8DB0-4CBF72FAED87} - C:\WINDOWS\System32\textwareilluminatorbaseProtocol.dll () O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (rundll32.exe) - File not found O20 - HKLM Winlogon: Shell - (tapi.nfo) - File not found O20 - HKLM Winlogon: Shell - (beforeglav) - File not found O20 - Winlogon\Notify\!saswinlogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-01-21 16:38:36 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{416bbd82-4503-11dd-9afa-00120e2c696a}\Shell\Auto\command - "" = I:\Windows.scr -- File not found O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [4 C:\WINDOWS\*.tmp files] [2009-09-03 12:57:45 | 00,514,048 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Lukas\Pulpit\OTL.exe [2009-09-02 22:58:02 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss [2009-09-02 20:22:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\SUPERAntiSpyware.com [2009-09-02 20:22:25 | 00,000,780 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\SUPERAntiSpyware Free Edition.lnk [2009-09-02 20:22:04 | 00,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware [2009-09-02 20:22:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lukas\Dane aplikacji\SUPERAntiSpyware.com [2009-09-02 20:21:21 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2009-08-18 12:08:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lukas\Pulpit\SKN Inwestor UŁ [2009-08-14 11:31:15 | 00,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpns.dll [2009-08-14 11:23:42 | 00,000,127 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2009-08-14 11:13:30 | 00,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles [2009-07-23 11:12:13 | 00,000,057 | ---- | C] () -- C:\WINDOWS\wininit.ini [2008-03-26 23:45:16 | 00,000,025 | ---- | C] () -- C:\WINDOWS\SW_Win2000X24.DLL [2008-03-26 23:43:50 | 00,001,649 | ---- | C] () -- C:\WINDOWS\CITP_SearchHistory.INI [2008-03-26 23:43:19 | 00,761,856 | ---- | C] () -- C:\WINDOWS\System32\FreeImage3.dll [2008-03-26 23:43:18 | 00,761,856 | ---- | C] () -- C:\WINDOWS\System32\FreeImage.dll [2008-02-10 17:16:58 | 00,000,613 | ---- | C] () -- C:\WINDOWS\if40le.ini [2008-02-10 17:16:47 | 00,000,114 | ---- | C] () -- C:\WINDOWS\SCNDRVU.INI [2008-02-10 17:16:44 | 00,017,332 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\Uscanner.sys [2008-02-10 17:16:13 | 00,001,256 | ---- | C] () -- C:\WINDOWS\If42le.ini [2008-02-10 17:16:12 | 00,000,241 | ---- | C] () -- C:\WINDOWS\PEXPLORE.INI [2008-02-10 17:16:08 | 00,011,776 | ---- | C] () -- C:\WINDOWS\System32\pmsbfn32.dll [2008-02-10 17:15:59 | 00,000,403 | ---- | C] () -- C:\WINDOWS\umxaddin.ini [2008-01-21 12:10:59 | 00,000,067 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini [2008-01-21 12:05:48 | 00,000,536 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2007-12-22 17:35:29 | 00,000,133 | ---- | C] () -- C:\WINDOWS\ete40.ini [2007-12-22 17:30:51 | 00,000,013 | ---- | C] () -- C:\WINDOWS\TEXTware.ini [2007-12-22 17:30:44 | 00,321,024 | ---- | C] () -- C:\WINDOWS\System32\textwareilluminatorbaseProtocol.dll [2007-12-22 17:30:44 | 00,143,360 | ---- | C] () -- C:\WINDOWS\System32\ILXTBS.DLL [2007-12-22 17:30:44 | 00,113,288 | ---- | C] () -- C:\WINDOWS\System32\bass.dll [2007-12-22 17:30:43 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\Twavbx32.dll [2007-12-22 17:30:42 | 00,018,432 | ---- | C] () -- C:\WINDOWS\System32\TWAIED02.DLL [2007-12-22 17:13:36 | 00,089,088 | ---- | C] () -- C:\WINDOWS\System32\Zlib.dll [2007-12-22 17:12:43 | 00,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2007-11-27 17:57:15 | 00,000,000 | ---- | C] () -- C:\WINDOWS\FCE.INI [2007-07-14 17:10:20 | 00,001,100 | ---- | C] () -- C:\WINDOWS\bestplayer.ini [2007-05-21 17:25:44 | 00,000,020 | ---- | C] () -- C:\WINDOWS\naglos.INI [2007-04-15 16:59:08 | 00,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-04-02 22:44:13 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2007-02-17 19:57:12 | 00,001,065 | ---- | C] () -- C:\WINDOWS\winamp.ini [2007-01-26 21:23:40 | 00,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2007-01-26 21:21:54 | 00,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2007-01-26 21:21:50 | 00,155,648 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2007-01-26 20:51:16 | 00,005,632 | ---- | C] () -- C:\WINDOWS\System32\CNMVS50.DLL [2007-01-21 16:50:10 | 00,069,632 | ---- | C] () -- C:\WINDOWS\System32\TnetWCoInst.dll [2006-03-02 14:00:00 | 00,000,841 | ---- | C] () -- C:\WINDOWS\win.ini [2006-03-02 14:00:00 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini [2003-04-08 11:40:22 | 00,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [2000-07-05 18:53:06 | 00,088,064 | ---- | C] () -- C:\WINDOWS\System32\AudioExCtl.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [4 C:\WINDOWS\*.tmp files] [2060-08-18 20:02:32 | 02,023,424 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\VCL50.BPL [2060-08-18 20:02:22 | 01,496,064 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\CC3250MT.DLL [2060-08-18 20:02:12 | 00,248,832 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\VCLX50.BPL [2060-08-18 19:40:44 | 00,909,824 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\CP3245MT.DLL [2060-08-18 19:40:44 | 00,024,064 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\BORLNDMM.DLL [2009-09-03 12:57:57 | 00,514,048 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lukas\Pulpit\OTL.exe [2009-09-03 11:04:02 | 00,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-09-03 11:03:07 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-09-03 11:03:04 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-09-03 11:03:01 | 26,793,9840 | -HS- | M] () -- C:\hiberfil.sys [2009-09-02 23:18:16 | 06,426,012 | -H-- | M] () -- C:\Documents and Settings\Lukas\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-09-02 20:22:25 | 00,000,780 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\SUPERAntiSpyware Free Edition.lnk [2009-09-02 11:56:57 | 40,545,176 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2009-09-02 11:56:57 | 00,076,683 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg [2009-08-22 09:56:11 | 00,011,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll [2009-08-22 09:56:07 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys [2009-08-22 09:56:06 | 00,335,240 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2009-08-15 12:23:16 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009-08-14 11:23:42 | 00,000,127 | ---- | M] () -- C:\WINDOWS\System32\MRT.INI [2009-08-05 11:08:09 | 00,205,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mswebdvd.dll [2009-08-05 11:08:09 | 00,205,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mswebdvd.dll < End of report >

**Posty:** 18165 · przez **wojtas** 03 Wrz 2009, 16:01

Daj loga z combofixa ale zainstaluj wraz z nim konsolę odzyskiwania ( instrukcja programu )