Jeszcze raz byteseeker.com

**Posty:** 190 · przez **mirekg1963** 19 Sty 2010, 19:41

Pisałem temat z tym problemem ale jeszcze mam u koleżanki w domku to samo. A tak na marginesie to skąd to pochodzi bo coraz częściej o tym czytam?

Kod: Zaznacz wszystko: OTL logfile created on: 2010-01-19 18:32:12 - Run 3 OTL by OldTimer - Version 3.1.25.2 Folder = C:\Documents and Settings\Admin\Pulpit Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 510,00 Mb Total Physical Memory | 117,00 Mb Available Physical Memory | 23,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 72,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 68,36 Gb Total Space | 1,31 Gb Free Space | 1,91% Space Free | Partition Type: NTFS Drive D: | 80,68 Gb Total Space | 80,50 Gb Free Space | 99,77% Space Free | Partition Type: NTFS Drive E: | 4,19 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DOM1 Current User Name: Admin Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-01-19 18:32:00 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe PRC - [2010-01-09 12:38:00 | 00,307,672 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-10-09 13:11:12 | 25,623,336 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe PRC - [2009-07-21 13:34:33 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2009-07-13 12:33:03 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\GoogleUpdate.exe PRC - [2009-05-13 15:48:22 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2009-03-02 12:08:47 | 00,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2008-04-14 18:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-01-19 18:32:00 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-07-21 13:34:33 | 00,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-07-13 12:33:03 | 00,133,104 | ---- | M] (Google Inc.) [Disabled | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate) Usługa Google Update (gupdate) SRV - [2009-05-13 15:48:22 | 00,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-02-25 22:27:41 | 00,602,112 | ---- | M] (ATI Technologies Inc.) [Disabled | Stopped] -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller) SRV - [2009-02-25 14:15:00 | 00,593,920 | ---- | M] () [Disabled | Stopped] -- C:\WINDOWS\system32\ati2sgag.exe -- (ATI Smart) SRV - [2006-10-26 23:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2006-10-26 18:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2006-10-26 12:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2004-10-22 03:24:18 | 00,073,728 | ---- | M] (Macrovision Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-11-25 11:19:02 | 00,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009-10-13 16:21:41 | 00,279,712 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2009-10-13 16:21:40 | 00,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009-05-11 09:12:24 | 00,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009-03-30 09:33:07 | 00,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2009-02-25 23:58:57 | 03,565,568 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2009-02-13 11:35:05 | 00,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008-09-04 05:28:22 | 00,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2008-09-04 05:27:54 | 00,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2008-09-04 05:27:28 | 00,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2008-08-20 18:58:58 | 00,044,944 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2008-04-13 17:39:16 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2008-04-13 17:36:05 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2006-06-27 10:42:14 | 03,972,672 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2006-03-02 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2005-11-03 15:40:07 | 00,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x) DRV - [2005-09-30 05:52:22 | 00,013,056 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2005-09-30 05:52:20 | 00,034,048 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2005-08-18 09:52:06 | 00,093,568 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata) DRV - [2005-08-10 13:44:04 | 00,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x) DRV - [2005-05-16 14:20:39 | 00,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x) DRV - [2004-08-13 03:56:20 | 00,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.onet.pl" FF - prefs.js..extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.2.0.5360 FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.08 FF - prefs.js..extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:4.2.0.2050 FF - prefs.js..extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:4.2.0.2150 FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.2.0.2150\FF [2010-01-09 09:03:31 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF [2010-01-09 09:03:39 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF [2010-01-09 09:03:47 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-01-09 12:38:02 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-01-09 12:38:02 | 00,000,000 | ---D | M] [2009-06-07 17:14:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Extensions [2010-01-18 14:19:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\yhpex5vk.default\extensions [2009-06-14 10:47:25 | 00,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\yhpex5vk.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2009-06-03 10:28:29 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2008-11-11 08:38:54 | 00,663,552 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll [2009-07-31 12:28:52 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2008-04-03 18:19:08 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2007-03-31 18:11:54 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2006-06-03 17:43:22 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2008-03-28 22:36:04 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2007-01-05 12:40:56 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-03-02 13:00:00 | 00,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet) O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found. O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Magda\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [Internet Today Task] C:\Program Files\Internet Today\1.2.0.1420\InternetToday.exe File not found O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 87.239.176.2 87.239.176.23 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-03-30 18:45:44 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2005-11-21 18:26:21 | 00,000,057 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{879ded6e-2f2e-11de-bb11-0060b33c61ed}\Shell - "" = AutoRun O33 - MountPoints2\{879ded6e-2f2e-11de-bb11-0060b33c61ed}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found O33 - MountPoints2\{879ded6f-2f2e-11de-bb11-0060b33c61ed}\Shell\AutoRun\command - "" = cahpcg.cmd O33 - MountPoints2\{879ded6f-2f2e-11de-bb11-0060b33c61ed}\Shell\open\Command - "" = cahpcg.cmd O33 - MountPoints2\{907179a1-84c8-11de-bbbd-0060b33c61ed}\Shell - "" = AutoRun O33 - MountPoints2\{907179a1-84c8-11de-bbbd-0060b33c61ed}\Shell\AutoRun\command - "" = F:\USBAutoRun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-01-19 18:31:59 | 00,547,328 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe [2010-01-19 17:49:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\kropa [2010-01-17 18:55:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Zdjęcia Magda [2010-01-17 18:54:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Zdjęcia Mirek [2010-01-17 18:51:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Zdjęcia allegro [2010-01-17 18:49:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Oli [2010-01-17 18:47:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Kotka Zofia [2010-01-17 18:46:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Mstów 2010 [2010-01-17 18:44:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Sylwester 2010 [2010-01-17 13:26:51 | 00,000,000 | ---D | C] -- C:\Program Files\Odkurzacz [2010-01-17 12:53:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-01-17 12:51:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Adobe [2010-01-16 19:17:45 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Admin\Pulpit\Moja muzyka [2010-01-15 17:08:51 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\SecuROM [2010-01-12 19:57:41 | 00,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll [2010-01-11 14:31:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\skypePM [2010-01-11 14:26:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Skype [2010-01-11 14:26:00 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2010-01-11 14:25:57 | 00,000,000 | R--D | C] -- C:\Program Files\Skype [2010-01-11 14:25:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2010-01-11 14:24:49 | 02,020,136 | ---- | C] (Skype Technologies S.A.) -- C:\Documents and Settings\Admin\Pulpit\SkypeSetup.exe [2010-01-11 13:52:45 | 00,000,000 | ---D | C] -- C:\Program Files\Celestia [2010-01-11 13:35:41 | 00,000,000 | ---D | C] -- C:\Program Files\Planetarium0250 [2010-01-11 12:56:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\moje filmy zdjęcia itp [2010-01-09 12:45:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Web Search Operator [2010-01-09 12:45:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\PornaZtar Toolbar [2010-01-09 12:45:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer [2010-01-09 12:45:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer [2010-01-09 11:54:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Internet Today [2010-01-09 09:05:01 | 00,000,000 | ---D | C] -- C:\Program Files\BrowserZinc [2010-01-09 09:05:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\BrowserZinc [2010-01-09 09:04:24 | 00,000,000 | ---D | C] -- C:\Program Files\Textual Content Provider [2010-01-09 09:04:12 | 00,000,000 | ---D | C] -- C:\Program Files\Content Management Wizard [2010-01-09 09:03:57 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Today [2010-01-09 09:03:46 | 00,000,000 | ---D | C] -- C:\Program Files\Customized Platform Advancer [2010-01-09 09:03:38 | 00,000,000 | ---D | C] -- C:\Program Files\Automated Content Enhancer [2010-01-09 09:03:30 | 00,000,000 | ---D | C] -- C:\Program Files\Web Search Operator [2010-01-09 09:03:03 | 00,000,000 | ---D | C] -- C:\Program Files\PornaZtar Toolbar [2010-01-06 16:54:51 | 00,202,240 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\fdco1ins.dll [2010-01-06 16:54:51 | 00,202,240 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\fdco1.dll [2010-01-06 16:54:50 | 00,034,048 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\NVENETFD.sys [2010-01-06 16:54:49 | 00,101,632 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvtcp.sys [2010-01-06 16:54:48 | 00,176,128 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvunrm.exe [2010-01-06 16:54:48 | 00,034,304 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvconrm.dll [2010-01-06 16:54:48 | 00,000,000 | ---D | C] -- C:\WINDOWS\NV2442332.TMP [2010-01-06 16:54:47 | 00,301,312 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvnrm.sys [2010-01-06 16:54:47 | 00,222,464 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvsnpu.sys [2010-01-06 16:54:47 | 00,009,728 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\bdco1ins.dll [2010-01-06 16:54:47 | 00,009,728 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\bdco1.dll [2010-01-06 16:54:46 | 00,013,056 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvnetbus.sys [2010-01-02 17:40:28 | 00,000,000 | ---D | C] -- C:\Program Files\Giant [2010-01-02 16:33:43 | 00,096,104 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys [2010-01-02 16:33:43 | 00,056,816 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys [2010-01-02 16:33:43 | 00,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys [2010-01-02 16:33:43 | 00,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys [2010-01-02 16:33:42 | 00,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys [2010-01-02 16:33:41 | 00,000,000 | ---D | C] -- C:\Program Files\Avira [2010-01-02 16:33:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Avira [2010-01-02 16:10:58 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy [2010-01-02 16:10:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy [2010-01-02 15:56:57 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2010-01-02 15:56:57 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [2010-01-02 15:56:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2009-12-22 12:28:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\LucasArts [2009-12-22 12:27:24 | 01,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll [2009-12-22 12:27:24 | 00,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll [2009-12-22 12:27:23 | 04,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll [2009-12-22 12:27:22 | 00,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll [2009-12-22 12:27:22 | 00,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll [2009-12-22 12:27:22 | 00,069,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll [2009-12-22 12:27:21 | 00,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll [2009-07-13 12:38:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google [2009-07-13 12:33:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-01-19 18:33:00 | 00,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010-01-19 18:32:00 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe [2010-01-19 18:24:13 | 00,000,645 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\RegCleaner.lnk [2010-01-19 18:20:26 | 00,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010-01-19 18:20:13 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-01-19 18:20:12 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-01-19 18:05:17 | 04,718,592 | ---- | M] () -- C:\Documents and Settings\Admin\NTUSER.DAT [2010-01-19 17:10:30 | 00,010,837 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\death note.docx [2010-01-18 22:32:02 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\Admin\ntuser.ini [2010-01-17 13:43:17 | 00,000,552 | ---- | M] () -- C:\WINDOWS\win.ini [2010-01-17 13:43:17 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2010-01-17 13:43:17 | 00,000,211 | -HS- | M] () -- C:\boot.ini [2010-01-15 17:26:55 | 00,001,805 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Oblivion.lnk [2010-01-15 17:00:47 | 03,530,501 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\bum-kanikuly.mp3 [2010-01-15 16:59:29 | 03,274,710 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\lucky twice_ i'm so lucky lucky.mp3 [2010-01-15 15:49:48 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-01-14 14:59:44 | 00,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-01-13 14:26:26 | 00,010,386 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\kropka kropka kropka.docx [2010-01-11 20:34:00 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2010-01-11 14:31:34 | 00,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat [2010-01-11 14:26:51 | 00,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2010-01-11 14:24:51 | 02,020,136 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\Admin\Pulpit\SkypeSetup.exe [2010-01-11 13:24:23 | 03,261,367 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\jeanette - porque te vas.mp3 [2010-01-11 12:55:19 | 00,000,724 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Skrót do firefox.lnk [2010-01-06 16:54:21 | 00,020,194 | ---- | M] () -- C:\WINDOWS\Ascd_tmp.ini [2010-01-02 16:33:51 | 00,001,707 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Avira AntiVir Control Center.lnk [2010-01-02 15:43:36 | 52,948,680 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\SWC_082b.zip [2009-12-26 20:18:55 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\Admin\Pulpit\~$jap nk.docx [2009-12-22 12:14:52 | 00,000,173 | ---- | M] () -- C:\WINDOWS\disney.ini [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-01-19 18:24:13 | 00,000,645 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\RegCleaner.lnk [2010-01-19 17:10:03 | 00,010,837 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\death note.docx [2010-01-15 17:26:55 | 00,001,805 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Oblivion.lnk [2010-01-15 16:58:23 | 03,530,501 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\bum-kanikuly.mp3 [2010-01-15 16:56:48 | 03,274,710 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\lucky twice_ i'm so lucky lucky.mp3 [2010-01-11 20:26:23 | 00,010,386 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\kropka kropka kropka.docx [2010-01-11 14:31:34 | 00,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2010-01-11 14:26:01 | 00,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2010-01-11 13:24:22 | 03,261,367 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\jeanette - porque te vas.mp3 [2010-01-11 12:55:19 | 00,000,724 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Skrót do firefox.lnk [2010-01-06 16:54:49 | 00,003,632 | ---- | C] () -- C:\WINDOWS\System32\nvnrm.nvu [2010-01-06 16:54:10 | 00,020,194 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2010-01-02 16:33:50 | 00,001,707 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Avira AntiVir Control Center.lnk [2010-01-02 15:25:40 | 52,948,680 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\SWC_082b.zip [2009-12-26 20:18:55 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\Admin\Pulpit\~$jap nk.docx [2009-10-24 18:55:49 | 00,000,173 | ---- | C] () -- C:\WINDOWS\disney.ini [2009-10-24 18:55:30 | 00,000,200 | ---- | C] () -- C:\WINDOWS\disneysy.ini [2009-10-12 12:42:35 | 00,279,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2009-10-12 12:42:35 | 00,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2009-07-14 16:15:00 | 00,178,432 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat [2009-06-19 19:06:22 | 00,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2009-06-07 17:19:58 | 00,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-06-07 17:19:57 | 00,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-06-07 17:19:57 | 00,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-06-07 17:19:56 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-06-07 17:19:55 | 00,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-06-07 17:19:55 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-06-07 16:40:11 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-05-08 15:24:35 | 00,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini [2009-04-22 12:21:22 | 00,000,206 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2009-04-08 18:26:02 | 00,030,720 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-03-31 15:54:44 | 00,040,960 | ---- | C] () -- C:\Program Files\Uninstall_CDS.exe [2009-03-30 19:03:03 | 00,143,360 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2009-03-30 18:58:57 | 00,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys [2009-03-30 18:58:48 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2009-03-30 18:50:38 | 00,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:CF778051 < End of report >

**Posty:** 18165 · przez **wojtas** 19 Sty 2010, 21:50

gdy zainstalujesz jakieś oprogramowanie nieznane
Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
FF - prefs.js..extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.2.0.5360
FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.08
FF - prefs.js..extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:4.2.0.2050
FF - prefs.js..extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:4.2.0.2150
FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.2.0.2150\FF [2010-01-09 09:03:31 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF [2010-01-09 09:03:39 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF [2010-01-09 09:03:47 | 00,000,000 | ---D | M]
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O4 - HKLM..\Run: [Internet Today Task] C:\Program Files\Internet Today\1.2.0.1420\InternetToday.exe File not found
O32 - AutoRun File - [2005-11-21 18:26:21 | 00,000,057 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{879ded6e-2f2e-11de-bb11-0060b33c61ed}\Shell - "" = AutoRun
O33 - MountPoints2\{879ded6e-2f2e-11de-bb11-0060b33c61ed}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O33 - MountPoints2\{879ded6f-2f2e-11de-bb11-0060b33c61ed}\Shell\AutoRun\command - "" = cahpcg.cmd
O33 - MountPoints2\{879ded6f-2f2e-11de-bb11-0060b33c61ed}\Shell\open\Command - "" = cahpcg.cmd
O33 - MountPoints2\{907179a1-84c8-11de-bbbd-0060b33c61ed}\Shell - "" = AutoRun
O33 - MountPoints2\{907179a1-84c8-11de-bbbd-0060b33c61ed}\Shell\AutoRun\command - "" = F:\USBAutoRun.exe -- File not found

:Files
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Web Search Operator
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\PornaZtar Toolbar
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Internet Today
C:\Program Files\BrowserZinc
C:\Documents and Settings\All Users\Dane aplikacji\BrowserZinc
C:\Program Files\Textual Content Provider
C:\Program Files\Content Management Wizard
C:\Program Files\Internet Today
C:\Program Files\Customized Platform Advancer
C:\Program Files\Automated Content Enhancer
C:\Program Files\Web Search Operator
C:\Program Files\PornaZtar Toolbar

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia komputera

**Posty:** 190 · przez **mirekg1963** 19 Sty 2010, 22:20

Daje logi z czyszczenia

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== No active process named explorer.exe was found! Prefs.js: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.2.0.5360 removed from extensions.enabledItems Prefs.js: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.08 removed from extensions.enabledItems Prefs.js: {E889F097-B0BE-471B-89AD-B86B6F04B506}:4.2.0.2050 removed from extensions.enabledItems Prefs.js: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:4.2.0.2150 removed from extensions.enabledItems Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E63605FC-D583-4C81-867F-9457BDB3EA1B}\ not found. C:\Program Files\Web Search Operator\4.2.0.2150\FF\components folder moved successfully. C:\Program Files\Web Search Operator\4.2.0.2150\FF\chrome\content folder moved successfully. C:\Program Files\Web Search Operator\4.2.0.2150\FF\chrome folder moved successfully. C:\Program Files\Web Search Operator\4.2.0.2150\FF folder moved successfully. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8141440E-08F0-4339-9959-5C31C6A69F23}\ not found. C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\components folder moved successfully. C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\chrome\content folder moved successfully. C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\chrome folder moved successfully. C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF folder moved successfully. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E889F097-B0BE-471B-89AD-B86B6F04B506}\ not found. C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\components folder moved successfully. C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\chrome\content folder moved successfully. C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\chrome folder moved successfully. C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF folder moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Internet Today Task deleted successfully. File move failed. E:\autorun.inf scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{879ded6e-2f2e-11de-bb11-0060b33c61ed}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{879ded6e-2f2e-11de-bb11-0060b33c61ed}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{879ded6e-2f2e-11de-bb11-0060b33c61ed}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{879ded6e-2f2e-11de-bb11-0060b33c61ed}\ not found. File F:\LaunchU3.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{879ded6f-2f2e-11de-bb11-0060b33c61ed}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{879ded6f-2f2e-11de-bb11-0060b33c61ed}\ not found. File cahpcg.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{879ded6f-2f2e-11de-bb11-0060b33c61ed}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{879ded6f-2f2e-11de-bb11-0060b33c61ed}\ not found. File cahpcg.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{907179a1-84c8-11de-bbbd-0060b33c61ed}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{907179a1-84c8-11de-bbbd-0060b33c61ed}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{907179a1-84c8-11de-bbbd-0060b33c61ed}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{907179a1-84c8-11de-bbbd-0060b33c61ed}\ not found. File F:\USBAutoRun.exe not found. ========== FILES ========== C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Web Search Operator\4.2.0.2150 folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Web Search Operator folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\PornaZtar Toolbar folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer\4.2.0.2050 folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer\4.2.0.5360 folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Internet Today folder moved successfully. C:\Program Files\BrowserZinc folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\BrowserZinc folder moved successfully. C:\Program Files\Textual Content Provider\1.2.0.2040\data folder moved successfully. C:\Program Files\Textual Content Provider\1.2.0.2040 folder moved successfully. C:\Program Files\Textual Content Provider folder moved successfully. C:\Program Files\Content Management Wizard\1.2.0.2080 folder moved successfully. C:\Program Files\Content Management Wizard folder moved successfully. C:\Program Files\Internet Today\1.2.0.1420 folder moved successfully. C:\Program Files\Internet Today folder moved successfully. C:\Program Files\Customized Platform Advancer\4.2.0.2050\Data folder moved successfully. C:\Program Files\Customized Platform Advancer\4.2.0.2050 folder moved successfully. C:\Program Files\Customized Platform Advancer folder moved successfully. C:\Program Files\Automated Content Enhancer\4.2.0.5360\Data folder moved successfully. C:\Program Files\Automated Content Enhancer\4.2.0.5360 folder moved successfully. C:\Program Files\Automated Content Enhancer folder moved successfully. C:\Program Files\Web Search Operator\4.2.0.2150\Data folder moved successfully. C:\Program Files\Web Search Operator\4.2.0.2150 folder moved successfully. C:\Program Files\Web Search Operator folder moved successfully. C:\Program Files\PornaZtar Toolbar folder moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Admin ->Temp folder emptied: 1151215289 bytes ->Temporary Internet Files folder emptied: 81795942 bytes ->FireFox cache emptied: 87324361 bytes ->Opera cache emptied: 63836396 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Magda ->Temp folder emptied: 236337814 bytes ->Temporary Internet Files folder emptied: 53058662 bytes ->FireFox cache emptied: 100000057 bytes ->Opera cache emptied: 49354247 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 257280 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 552775 bytes RecycleBin emptied: 198758387 bytes Total Files Cleaned = 1 929,00 mb OTL by OldTimer - Version 3.1.25.2 log created on 01192010_211008 Files\Folders moved on Reboot... File move failed. E:\autorun.inf scheduled to be moved on reboot. Registry entries deleted on Reboot...

oraz nowy z OTL

Kod: Zaznacz wszystko: OTL logfile created on: 2010-01-19 21:15:16 - Run 4 OTL by OldTimer - Version 3.1.25.2 Folder = C:\Documents and Settings\Admin\Pulpit Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 510,00 Mb Total Physical Memory | 216,00 Mb Available Physical Memory | 42,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 78,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 68,36 Gb Total Space | 3,03 Gb Free Space | 4,43% Space Free | Partition Type: NTFS Drive D: | 80,68 Gb Total Space | 80,50 Gb Free Space | 99,77% Space Free | Partition Type: NTFS Drive E: | 4,19 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DOM1 Current User Name: Admin Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-01-19 18:32:00 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe PRC - [2009-10-09 13:11:12 | 25,623,336 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe PRC - [2009-07-21 13:34:33 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2009-07-13 12:33:03 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\GoogleUpdate.exe PRC - [2009-05-13 15:48:22 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2009-03-02 12:08:47 | 00,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2008-04-14 18:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-01-19 18:32:00 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-07-21 13:34:33 | 00,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-07-13 12:33:03 | 00,133,104 | ---- | M] (Google Inc.) [Disabled | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate) Usługa Google Update (gupdate) SRV - [2009-05-13 15:48:22 | 00,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-02-25 22:27:41 | 00,602,112 | ---- | M] (ATI Technologies Inc.) [Disabled | Stopped] -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller) SRV - [2009-02-25 14:15:00 | 00,593,920 | ---- | M] () [Disabled | Stopped] -- C:\WINDOWS\system32\ati2sgag.exe -- (ATI Smart) SRV - [2006-10-26 23:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2006-10-26 18:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2006-10-26 12:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2004-10-22 03:24:18 | 00,073,728 | ---- | M] (Macrovision Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-11-25 11:19:02 | 00,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009-10-13 16:21:41 | 00,279,712 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2009-10-13 16:21:40 | 00,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009-05-11 09:12:24 | 00,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009-03-30 09:33:07 | 00,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2009-02-25 23:58:57 | 03,565,568 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2009-02-13 11:35:05 | 00,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008-09-04 05:28:22 | 00,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2008-09-04 05:27:54 | 00,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2008-09-04 05:27:28 | 00,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2008-08-20 18:58:58 | 00,044,944 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2008-04-13 17:39:16 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2008-04-13 17:36:05 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2006-06-27 10:42:14 | 03,972,672 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2006-03-02 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2005-11-03 15:40:07 | 00,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x) DRV - [2005-09-30 05:52:22 | 00,013,056 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2005-09-30 05:52:20 | 00,034,048 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2005-08-18 09:52:06 | 00,093,568 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata) DRV - [2005-08-10 13:44:04 | 00,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x) DRV - [2005-05-16 14:20:39 | 00,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x) DRV - [2004-08-13 03:56:20 | 00,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.onet.pl" FF - prefs.js..extensions.enabledItems: "" FF - prefs.js..extensions.enabledItems: "" FF - prefs.js..extensions.enabledItems: "" FF - prefs.js..extensions.enabledItems: "" FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-01-09 12:38:02 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-01-09 12:38:02 | 00,000,000 | ---D | M] [2009-06-07 17:14:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Extensions [2010-01-19 18:36:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\yhpex5vk.default\extensions [2009-06-14 10:47:25 | 00,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\yhpex5vk.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2009-06-03 10:28:29 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2008-11-11 08:38:54 | 00,663,552 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll [2009-07-31 12:28:52 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2008-04-03 18:19:08 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2007-03-31 18:11:54 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2006-06-03 17:43:22 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2008-03-28 22:36:04 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2007-01-05 12:40:56 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-03-02 13:00:00 | 00,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Magda\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 87.239.176.2 87.239.176.23 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-03-30 18:45:44 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2005-11-21 18:26:21 | 00,000,057 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-01-19 21:10:08 | 00,000,000 | ---D | C] -- C:\_OTL [2010-01-19 18:31:59 | 00,547,328 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe [2010-01-19 17:49:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\kropa [2010-01-17 18:55:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Zdjęcia Magda [2010-01-17 18:54:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Zdjęcia Mirek [2010-01-17 18:51:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Zdjęcia allegro [2010-01-17 18:49:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Oli [2010-01-17 18:47:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Kotka Zofia [2010-01-17 18:46:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Mstów 2010 [2010-01-17 18:44:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Sylwester 2010 [2010-01-17 13:26:51 | 00,000,000 | ---D | C] -- C:\Program Files\Odkurzacz [2010-01-17 12:53:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-01-17 12:51:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Adobe [2010-01-16 19:17:45 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Admin\Pulpit\Moja muzyka [2010-01-15 17:08:51 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\SecuROM [2010-01-12 19:57:41 | 00,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll [2010-01-11 14:31:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\skypePM [2010-01-11 14:26:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Skype [2010-01-11 14:26:00 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2010-01-11 14:25:57 | 00,000,000 | R--D | C] -- C:\Program Files\Skype [2010-01-11 14:25:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2010-01-11 14:24:49 | 02,020,136 | ---- | C] (Skype Technologies S.A.) -- C:\Documents and Settings\Admin\Pulpit\SkypeSetup.exe [2010-01-11 13:52:45 | 00,000,000 | ---D | C] -- C:\Program Files\Celestia [2010-01-11 13:35:41 | 00,000,000 | ---D | C] -- C:\Program Files\Planetarium0250 [2010-01-11 12:56:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\moje filmy zdjęcia itp [2010-01-06 16:54:51 | 00,202,240 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\fdco1ins.dll [2010-01-06 16:54:51 | 00,202,240 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\fdco1.dll [2010-01-06 16:54:50 | 00,034,048 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\NVENETFD.sys [2010-01-06 16:54:49 | 00,101,632 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvtcp.sys [2010-01-06 16:54:48 | 00,176,128 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvunrm.exe [2010-01-06 16:54:48 | 00,034,304 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvconrm.dll [2010-01-06 16:54:47 | 00,301,312 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvnrm.sys [2010-01-06 16:54:47 | 00,222,464 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvsnpu.sys [2010-01-06 16:54:47 | 00,009,728 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\bdco1ins.dll [2010-01-06 16:54:47 | 00,009,728 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\bdco1.dll [2010-01-06 16:54:46 | 00,013,056 | R--- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvnetbus.sys [2010-01-02 17:40:28 | 00,000,000 | ---D | C] -- C:\Program Files\Giant [2010-01-02 16:33:43 | 00,096,104 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys [2010-01-02 16:33:43 | 00,056,816 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys [2010-01-02 16:33:43 | 00,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys [2010-01-02 16:33:43 | 00,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys [2010-01-02 16:33:42 | 00,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys [2010-01-02 16:33:41 | 00,000,000 | ---D | C] -- C:\Program Files\Avira [2010-01-02 16:33:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Avira [2010-01-02 16:10:58 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy [2010-01-02 16:10:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy [2010-01-02 15:56:57 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2010-01-02 15:56:57 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [2010-01-02 15:56:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2009-12-22 12:28:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\LucasArts [2009-12-22 12:27:24 | 01,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll [2009-12-22 12:27:24 | 00,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll [2009-12-22 12:27:23 | 04,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll [2009-12-22 12:27:22 | 00,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll [2009-12-22 12:27:22 | 00,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll [2009-12-22 12:27:22 | 00,069,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll [2009-12-22 12:27:21 | 00,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll [2009-07-13 12:38:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google [2009-07-13 12:33:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-01-19 21:13:24 | 00,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010-01-19 21:13:09 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-01-19 21:13:08 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-01-19 21:12:03 | 04,718,592 | ---- | M] () -- C:\Documents and Settings\Admin\NTUSER.DAT [2010-01-19 21:12:03 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\Admin\ntuser.ini [2010-01-19 20:34:00 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2010-01-19 20:33:00 | 00,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010-01-19 18:32:00 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe [2010-01-19 18:24:13 | 00,000,645 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\RegCleaner.lnk [2010-01-19 17:10:30 | 00,010,837 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\death note.docx [2010-01-17 13:43:17 | 00,000,552 | ---- | M] () -- C:\WINDOWS\win.ini [2010-01-17 13:43:17 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2010-01-17 13:43:17 | 00,000,211 | -HS- | M] () -- C:\boot.ini [2010-01-15 17:26:55 | 00,001,805 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Oblivion.lnk [2010-01-15 17:00:47 | 03,530,501 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\bum-kanikuly.mp3 [2010-01-15 16:59:29 | 03,274,710 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\lucky twice_ i'm so lucky lucky.mp3 [2010-01-15 15:49:48 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-01-14 14:59:44 | 00,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-01-13 14:26:26 | 00,010,386 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\kropka kropka kropka.docx [2010-01-11 14:31:34 | 00,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat [2010-01-11 14:26:51 | 00,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2010-01-11 14:24:51 | 02,020,136 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\Admin\Pulpit\SkypeSetup.exe [2010-01-11 13:24:23 | 03,261,367 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\jeanette - porque te vas.mp3 [2010-01-11 12:55:19 | 00,000,724 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Skrót do firefox.lnk [2010-01-06 16:54:21 | 00,020,194 | ---- | M] () -- C:\WINDOWS\Ascd_tmp.ini [2010-01-02 16:33:51 | 00,001,707 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Avira AntiVir Control Center.lnk [2010-01-02 15:43:36 | 52,948,680 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\SWC_082b.zip [2009-12-22 12:14:52 | 00,000,173 | ---- | M] () -- C:\WINDOWS\disney.ini [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-01-19 18:24:13 | 00,000,645 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\RegCleaner.lnk [2010-01-19 17:10:03 | 00,010,837 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\death note.docx [2010-01-15 17:26:55 | 00,001,805 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Oblivion.lnk [2010-01-15 16:58:23 | 03,530,501 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\bum-kanikuly.mp3 [2010-01-15 16:56:48 | 03,274,710 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\lucky twice_ i'm so lucky lucky.mp3 [2010-01-11 20:26:23 | 00,010,386 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\kropka kropka kropka.docx [2010-01-11 14:31:34 | 00,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2010-01-11 14:26:01 | 00,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2010-01-11 13:24:22 | 03,261,367 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\jeanette - porque te vas.mp3 [2010-01-11 12:55:19 | 00,000,724 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Skrót do firefox.lnk [2010-01-06 16:54:49 | 00,003,632 | ---- | C] () -- C:\WINDOWS\System32\nvnrm.nvu [2010-01-06 16:54:10 | 00,020,194 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2010-01-02 16:33:50 | 00,001,707 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Avira AntiVir Control Center.lnk [2010-01-02 15:25:40 | 52,948,680 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\SWC_082b.zip [2009-10-24 18:55:49 | 00,000,173 | ---- | C] () -- C:\WINDOWS\disney.ini [2009-10-24 18:55:30 | 00,000,200 | ---- | C] () -- C:\WINDOWS\disneysy.ini [2009-10-12 12:42:35 | 00,279,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2009-10-12 12:42:35 | 00,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2009-07-14 16:15:00 | 00,178,432 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat [2009-06-19 19:06:22 | 00,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2009-06-19 19:06:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2009-06-07 17:19:58 | 00,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-06-07 17:19:57 | 00,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-06-07 17:19:57 | 00,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-06-07 17:19:56 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-06-07 17:19:55 | 00,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-06-07 17:19:55 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-06-07 16:40:11 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-05-08 15:24:35 | 00,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini [2009-04-22 12:21:22 | 00,000,206 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2009-04-08 18:26:02 | 00,030,720 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-03-31 15:54:44 | 00,040,960 | ---- | C] () -- C:\Program Files\Uninstall_CDS.exe [2009-03-30 19:03:03 | 00,143,360 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2009-03-30 18:58:57 | 00,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys [2009-03-30 18:58:48 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2009-03-30 18:50:38 | 00,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:CF778051 < End of report >

**Posty:** 18165 · przez **wojtas** 19 Sty 2010, 22:34

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) i daj raport ze skanu

Autor postu otrzymał pochwałę