Komp zamula, dziwne zachowanie sieci

**Posty:** 7 · przez **Tarzanisko** 15 Maj 2009, 16:02

witam,
od paru dni mam problem z tym, iż rozłącza mi połączenie z moim dostawcą internetu (mam radiówkę 5Ghz). Objawami są praktycznie tylko to że gdy pinguje to pisze że "Upłynął limit czasu żądania". Żadnych objawów więcej nie ma, ip zostaje, połączenie w tray też widoczne, tylko oto że nic nie odbiera. I tak przerwanie na około minutkę, dosłownie minutkę. Tylko mi ta minutka starczy żeby dednąć w grach MMORPG. Tak parę razy przerywa w ciągu dnia. Dzwoniłem do providera, przyjechali serwisanci wywalili mi mojego NODa i zapore systemową, zainstalowali AVG i powiedzieli że może to pomoże. Dziś 3 razy znów rozłączyło. Może wy coś pomożecie. Dołączam logi z DDS'a.

Kod: Zaznacz wszystko: DDS (Ver_09-05-14.01) - NTFSx86 Run by T@rz@N at 15:49:36,15 on 2009-05-15 Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_07 Microsoft Windows XP Home Edition 5.1.2600.3.1250.48.1045.18.1023.552 [GMT 2:00] AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\VDOTool\TBPanel.exe C:\WINDOWS\RTHDCPL.EXE C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\T@rz@N\Pulpit\Programs\DDS\dds.com ============== Pseudo HJT Report =============== uStart Page = hxxp://www.neostrada.pl/ BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll BHO: AVG Security Toolbar: {a057a204-bacc-4d26-9990-79a187e2698e} - c:\progra~1\avg\avg8\AVGTOO~1.DLL BHO: PDFCreator Toolbar Helper: {c451c08a-ec37-45df-aaad-18b51ab5e837} - c:\program files\pdfcreator toolbar\v3.3.0.1\PDFCreator_Toolbar.dll TB: PDFCreator Toolbar: {31cf9ebe-5755-4a1d-ac25-2834d952d9b4} - c:\program files\pdfcreator toolbar\v3.3.0.1\PDFCreator_Toolbar.dll TB: AVG Security Toolbar: {a057a204-bacc-4d26-9990-79a187e2698e} - c:\progra~1\avg\avg8\AVGTOO~1.DLL uRun: [Gadu-Gadu] "c:\program files\gadu-gadu\gg.exe" /tray uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [Gainward] c:\program files\vdotool\TBPanel.exe /A mRun: [RTHDCPL] RTHDCPL.EXE mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll Notify: avgrsstarter - avgrsstx.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\t@rz@n\daneap~1\mozilla\firefox\profiles\22j4wksj.default\ FF - component: c:\program files\avg\avg8\firefox\components\avgssff.dll FF - component: c:\program files\avg\avg8\toolbarff\components\vmAVGConnector.dll ============= SERVICES / DRIVERS =============== R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-5-14 325896] R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-5-14 27784] R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-5-14 108552] R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-5-14 298776] S3 Ad-Watch Connect Filter;Ad-Watch Connect Kernel Filter;\??\c:\windows\system32\drivers\nsdriver.sys --> c:\windows\system32\drivers\NSDriver.sys [?] S3 SetupNTGLM7X;SetupNTGLM7X;\??\f:\ntglm7x.sys --> f:\NTGLM7X.sys [?] =============== Created Last 30 ================ 2009-05-15 15:48 <DIR> --d-h--- c:\windows\PIF 2009-05-15 15:29 <DIR> a-dshr-- C:\cmdcons 2009-05-15 15:25 161,792 a------- c:\windows\SWREG.exe 2009-05-15 15:25 98,816 a------- c:\windows\sed.exe 2009-05-14 21:09 <DIR> --d----- c:\program files\PingPlotter Standard 2009-05-14 13:05 <DIR> --d-h--- C:\$AVG8.VAULT$ 2009-05-14 10:38 108,552 a------- c:\windows\system32\drivers\avgtdix.sys 2009-05-14 10:38 11,952 a------- c:\windows\system32\avgrsstx.dll 2009-05-14 10:38 325,896 a------- c:\windows\system32\drivers\avgldx86.sys 2009-05-14 10:38 <DIR> --d----- c:\windows\system32\drivers\Avg 2009-05-14 10:38 <DIR> --d----- c:\docume~1\t@rz@n\daneap~1\AVGTOOLBAR 2009-05-14 10:38 <DIR> --d----- c:\program files\AVG 2009-05-14 10:37 <DIR> --d----- c:\docume~1\alluse~1\daneap~1\avg8 2009-05-13 20:25 <DIR> --d----- c:\docume~1\alluse~1\daneap~1\America's Army Deploy Client 2009-05-13 20:25 <DIR> --d----- c:\program files\America's Army Deploy Client 2009-05-13 19:52 917,504 a------- c:\windows\Dream_Aquarium.scr 2009-05-13 10:44 <DIR> --d----- c:\program files\BMExtreme 2009-04-28 21:35 <DIR> --d----- c:\program files\SopCast 2009-04-17 22:20 <DIR> --d----- c:\program files\Ventrilo 2009-04-17 22:19 262 a------- c:\windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini 2009-04-17 06:59 227,840 -c------ c:\windows\system32\dllcache\wmiprvse.exe 2009-04-17 06:59 285,696 -c------ c:\windows\system32\dllcache\pdh.dll 2009-04-17 06:59 111,104 -c------ c:\windows\system32\dllcache\services.exe 2009-04-17 06:59 686,592 -c------ c:\windows\system32\dllcache\advapi32.dll 2009-04-17 06:59 473,600 -c------ c:\windows\system32\dllcache\fastprox.dll 2009-04-17 06:59 401,408 -c------ c:\windows\system32\dllcache\rpcss.dll 2009-04-17 06:59 731,136 -c------ c:\windows\system32\dllcache\lsasrv.dll 2009-04-17 06:59 722,944 -c------ c:\windows\system32\dllcache\ntdll.dll 2009-04-17 06:59 453,120 -c------ c:\windows\system32\dllcache\wmiprvsd.dll 2009-04-17 06:58 1,203,922 -c------ c:\windows\system32\dllcache\sysmain.sdb 2009-04-17 06:58 218,112 -c------ c:\windows\system32\dllcache\wordpad.exe ==================== Find3M ==================== 2009-05-13 09:09 44 ----h--- c:\program files\6b5e7881.tmp 2009-04-17 16:22 451,352 a------- c:\windows\system32\perfh015.dat 2009-04-17 16:22 75,486 a------- c:\windows\system32\perfc015.dat 2009-03-06 16:22 285,696 a------- c:\windows\system32\pdh.dll 2009-02-20 10:12 668,672 a------- c:\windows\system32\wininet.dll 2009-02-20 10:11 81,920 a------- c:\windows\system32\ieencode.dll ============= FINISH: 15:49:42,85 ===============

I druga część log'a

Kod: Zaznacz wszystko: UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_09-05-14.01) Microsoft Windows XP Home Edition Boot Device: \Device\HarddiskVolume1 Install Date: 2008-07-28 23:13:39 System Uptime: 2009-05-15 15:31:13 (0 hours ago) Motherboard: MSI | | MS-7250 Processor: AMD Athlon(tm) 64 Processor 3800+ | CPU 1 | 2412/200mhz ==== Disk Partitions ========================= C: is FIXED (NTFS) - 49 GiB total, 6,09 GiB free. D: is FIXED (NTFS) - 49 GiB total, 20,903 GiB free. E: is FIXED (NTFS) - 51 GiB total, 2,585 GiB free. F: is CDROM () G: is CDROM () H: is CDROM () I: is CDROM () J: is CDROM () ==== Disabled Device Manager Items ============= Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318} Description: Standardowa klawiatura 101/102 klawisze lub Microsoft Natural Keyboard PS/2 Device ID: ACPI\PNP0303\4&D6E1DD7&0 Manufacturer: (Klawiatury standardowe) Name: Standardowa klawiatura 101/102 klawisze lub Microsoft Natural Keyboard PS/2 PNP Device ID: ACPI\PNP0303\4&D6E1DD7&0 Service: i8042prt Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: NVIDIA nForce Networking Controller Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&210CEC41&0&00 Manufacturer: NVIDIA Name: NVIDIA nForce Networking Controller #2 PNP Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&210CEC41&0&00 Service: NVENETFD Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: Bluetooth PAN Network Adapter Device ID: ROOT\NET\0000 Manufacturer: IVT Corporation Name: Bluetooth PAN Network Adapter PNP Device ID: ROOT\NET\0000 Service: BT Class GUID: {4D36E978-E325-11CE-BFC1-08002BE10318} Description: Device ID: ROOT\PORTS\0010 Manufacturer: Name: PNP Device ID: ROOT\PORTS\0010 Service: ==== System Restore Points =================== RP201: 2009-03-18 06:58:56 - Punkt kontrolny systemu RP202: 2009-03-19 14:50:05 - Punkt kontrolny systemu RP203: 2009-03-20 20:59:29 - Punkt kontrolny systemu RP204: 2009-03-21 22:25:37 - Punkt kontrolny systemu RP205: 2009-03-22 22:30:47 - Punkt kontrolny systemu RP206: 2009-03-24 07:02:56 - Punkt kontrolny systemu RP207: 2009-03-25 12:54:17 - Punkt kontrolny systemu RP208: 2009-03-26 18:24:43 - Punkt kontrolny systemu RP209: 2009-03-27 22:40:51 - Punkt kontrolny systemu RP210: 2009-03-28 19:42:45 - Removed Borland Delphi 7 RP211: 2009-03-29 11:13:54 - Zainstalowany program DirectX RP212: 2009-03-30 20:22:21 - Punkt kontrolny systemu RP213: 2009-04-01 22:08:18 - Punkt kontrolny systemu RP214: 2009-04-03 09:46:25 - Punkt kontrolny systemu RP215: 2009-04-04 10:07:17 - Punkt kontrolny systemu RP216: 2009-04-05 13:54:28 - Punkt kontrolny systemu RP217: 2009-04-06 19:06:26 - Punkt kontrolny systemu RP218: 2009-04-08 15:23:57 - Punkt kontrolny systemu RP219: 2009-04-10 16:42:49 - Punkt kontrolny systemu RP220: 2009-04-11 15:42:01 - Usunięto: Blackd Proxy RP221: 2009-04-12 21:03:43 - Punkt kontrolny systemu RP222: 2009-04-13 22:13:23 - Punkt kontrolny systemu RP223: 2009-04-14 16:20:31 - Installed Ad-Aware 2007 RP224: 2009-04-14 17:55:51 - Removed Ad-Aware 2007 RP225: 2009-04-14 21:55:10 - Installed Ad-Aware 2007 RP226: 2009-04-15 14:39:36 - Removed Ad-Aware 2007 RP227: 2009-04-15 15:10:29 - Installed Ad-Aware 2007 RP228: 2009-04-16 22:10:10 - Punkt kontrolny systemu RP229: 2009-04-17 07:10:46 - Software Distribution Service 3.0 RP230: 2009-04-17 22:20:02 - Installed Ventrilo Client RP231: 2009-04-19 16:59:52 - Punkt kontrolny systemu RP232: 2009-04-20 22:16:58 - Punkt kontrolny systemu RP233: 2009-04-22 16:55:59 - Punkt kontrolny systemu RP234: 2009-04-23 18:35:41 - Punkt kontrolny systemu RP235: 2009-04-24 19:18:50 - Punkt kontrolny systemu RP236: 2009-04-25 16:59:50 - Software Distribution Service 3.0 RP237: 2009-04-26 23:25:13 - Punkt kontrolny systemu RP238: 2009-04-28 20:18:27 - Punkt kontrolny systemu RP239: 2009-04-30 15:24:33 - Punkt kontrolny systemu RP240: 2009-05-01 22:43:03 - Punkt kontrolny systemu RP241: 2009-05-03 08:35:43 - Punkt kontrolny systemu RP242: 2009-05-04 14:49:19 - Punkt kontrolny systemu RP243: 2009-05-05 16:46:25 - Punkt kontrolny systemu RP244: 2009-05-06 17:41:48 - Punkt kontrolny systemu RP245: 2009-05-07 18:27:37 - Punkt kontrolny systemu RP246: 2009-05-08 18:53:24 - Punkt kontrolny systemu RP247: 2009-05-10 09:05:36 - Punkt kontrolny systemu RP248: 2009-05-11 16:08:45 - Punkt kontrolny systemu RP249: 2009-05-12 16:42:26 - Punkt kontrolny systemu RP250: 2009-05-13 07:53:02 - Software Distribution Service 3.0 RP251: 2009-05-13 20:14:33 - Removed Ad-Aware 2007 RP252: 2009-05-13 20:25:44 - Installed America's Army Deploy Client RP253: 2009-05-14 10:15:28 - Usunięto ESET NOD32 Antivirus RP254: 2009-05-14 10:37:59 - Installed AVG Free 8.5 RP255: 2009-05-15 08:21:22 - Avg8 Update ==== Installed Programs ====================== 2007 Microsoft Office Suite Service Pack 1 (SP1) Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742) Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 8 - Polish Adobe Reader 8.1.2 Security Update 1 (KB403742) Aktualizacja dla systemu Windows XP (KB942763) Aktualizacja dla systemu Windows XP (KB951072-v2) Aktualizacja dla systemu Windows XP (KB951978) Aktualizacja dla systemu Windows XP (KB955839) Aktualizacja dla systemu Windows XP (KB967715) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB952069) Aktualizacja zabezpieczeń dla systemu Windows XP (KB923561) Aktualizacja zabezpieczeń dla systemu Windows XP (KB923789) Aktualizacja zabezpieczeń dla systemu Windows XP (KB938464-v2) Aktualizacja zabezpieczeń dla systemu Windows XP (KB938464) Aktualizacja zabezpieczeń dla systemu Windows XP (KB946648) Aktualizacja zabezpieczeń dla systemu Windows XP (KB950759) Aktualizacja zabezpieczeń dla systemu Windows XP (KB950760) Aktualizacja zabezpieczeń dla systemu Windows XP (KB950762) Aktualizacja zabezpieczeń dla systemu Windows XP (KB950974) Aktualizacja zabezpieczeń dla systemu Windows XP (KB951066) Aktualizacja zabezpieczeń dla systemu Windows XP (KB951376-v2) Aktualizacja zabezpieczeń dla systemu Windows XP (KB951698) Aktualizacja zabezpieczeń dla systemu Windows XP (KB951748) Aktualizacja zabezpieczeń dla systemu Windows XP (KB952004) Aktualizacja zabezpieczeń dla systemu Windows XP (KB952954) Aktualizacja zabezpieczeń dla systemu Windows XP (KB953838) Aktualizacja zabezpieczeń dla systemu Windows XP (KB953839) Aktualizacja zabezpieczeń dla systemu Windows XP (KB954211) Aktualizacja zabezpieczeń dla systemu Windows XP (KB954459) Aktualizacja zabezpieczeń dla systemu Windows XP (KB954600) Aktualizacja zabezpieczeń dla systemu Windows XP (KB955069) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956390) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956391) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956572) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956802) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956803) Aktualizacja zabezpieczeń dla systemu Windows XP (KB956841) Aktualizacja zabezpieczeń dla systemu Windows XP (KB957095) Aktualizacja zabezpieczeń dla systemu Windows XP (KB957097) Aktualizacja zabezpieczeń dla systemu Windows XP (KB958215) Aktualizacja zabezpieczeń dla systemu Windows XP (KB958644) Aktualizacja zabezpieczeń dla systemu Windows XP (KB958687) Aktualizacja zabezpieczeń dla systemu Windows XP (KB958690) Aktualizacja zabezpieczeń dla systemu Windows XP (KB959426) Aktualizacja zabezpieczeń dla systemu Windows XP (KB960225) Aktualizacja zabezpieczeń dla systemu Windows XP (KB960714) Aktualizacja zabezpieczeń dla systemu Windows XP (KB960715) Aktualizacja zabezpieczeń dla systemu Windows XP (KB960803) Aktualizacja zabezpieczeń dla systemu Windows XP (KB961373) Aktualizacja zabezpieczeń dla systemu Windows XP (KB963027) Aktualizacja zabezpieczeń dla Windows XP (KB923689) Aktualizacja zabezpieczeń dla Windows XP (KB941569) ALLPlayer V3.X America's Army Deploy Client Archiwizator WinRAR AutoCAD 2007 - Polski Autodesk DWF Viewer AVG Free 8.5 AVS DVD Player version 2.4 BlueSoleil BMExtreme (remove only) DC++ 0.674 eMule Far Cry (Patch 1.4) foobar2000 v0.9.5.4 Football Manager 2009 Gadu-Gadu 7.7 High Definition Audio Driver Package - KB888111 ipla 1.0.1 IrfanView (remove only) Jagged Alliance 2 Java(TM) 6 Update 7 K-Lite Codec Pack 4.1.0 (Full) Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 Language Pack - PLK Microsoft .NET Framework 2.0 — pakiet języka polskiego Microsoft Office Access MUI (Polish) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (Polish) 2007 Microsoft Office Groove MUI (Polish) 2007 Microsoft Office InfoPath MUI (Polish) 2007 Microsoft Office OneNote MUI (Polish) 2007 Microsoft Office Outlook MUI (Polish) 2007 Microsoft Office PowerPoint MUI (Polish) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (German) 2007 Microsoft Office Proof (Polish) 2007 Microsoft Office Proofing (Polish) 2007 Microsoft Office Publisher MUI (Polish) 2007 Microsoft Office Shared MUI (Polish) 2007 Microsoft Office Word MUI (Polish) 2007 Microsoft Software Update for Web Folders (Polish) 12 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Mozilla Firefox (3.0.10) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) Nero 7 Essentials neroxml NVIDIA Drivers PDFCreator PDFCreator Toolbar PingPlotter Standard 3.30.0s Poprawka dla systemu Windows XP (KB952287) Poprawka Security Update dla produktu Microsoft .NET Framework 2.0 (KB928365) Pro Evolution Soccer 2009 Realtek High Definition Audio Driver SAGEM F@st 800-840 Settlers IV - Złota Edycja SopCast 3.0.3 The Sims 2 The Sims 2 Nocne życie The Sims 2 Rozrywka rodzinna - Akcesoria The Sims 2 Szyk i elegancja - Akcesoria The Sims 2 University The Sims 2 Własny biznes The Sims™ 2 Zwierzaki The Sims™ 2 Cztery pory roku The Sims™ 2 Impreza! Akcesoria The Sims™ 2 Moda z H&M® Akcesoria Tibia VDOTool 4.6 Ventrilo Client Watchtower Library 2008 - wydanie polskie WebFldrs XP Windows Media Format Runtime Windows Media Player Firefox Plugin Windows XP Service Pack 3 ==== End Of File ===========================

**Posty:** 18165 · przez **wojtas** 15 Maj 2009, 18:37

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z OTListIt2

**Posty:** 7 · przez **Tarzanisko** 15 Maj 2009, 19:50

Report.txt

Kod: Zaznacz wszystko: [b]SDFix: Version 1.240 [/b] Run by T@rz@N on 2009-05-15 at 19:36 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-15 19:47:50 Windows 5.1.2600 Dodatek Service Pack 3 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:2df9c43f "s2"=dword:110480d0 "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:3c,8d,76,f7,0d,16,f9,f7,61,08,83,c9,e3,b9,2f,20,0f,ca,8e,41,e1,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,4b,0c,dc,7d,a1,b1,29,76,8f,cb,89,9e,8d,68,cd,4f,5d,.. "khjeh"=hex:9d,34,9a,84,29,45,1f,dc,f4,df,4e,2c,f4,58,2d,94,93,e8,af,eb,99,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:00,0a,47,8b,72,55,ee,d5,9f,a2,d4,f1,2b,60,95,9f,b8,e0,4f,fb,19,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:5a,af,e4,28,9f,8e,ee,48,86,60,d0,a7,1e,21,0a,70,93,a3,76,70,9a,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42] "khjeh"=hex:30,82,89,12,b1,7f,a0,c6,58,e2,84,c6,15,db,ba,35,ae,32,6b,e7,de,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43] "khjeh"=hex:30,82,89,12,b1,7f,a0,c6,58,e2,84,c6,15,db,ba,35,ae,32,6b,e7,de,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:ce,ce,2b,3e,dd,c3,6c,10,27,a3,ed,ef,2e,6f,a0,77,65,1a,db,c2,87,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,4b,0c,dc,7d,a1,b1,29,76,8f,cb,89,9e,8d,68,cd,4f,5d,.. "khjeh"=hex:9d,34,9a,84,29,45,1f,dc,f4,df,4e,2c,f4,58,2d,94,93,e8,af,eb,99,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:d3,c3,e9,8c,19,b4,6f,ff,e9,bf,8f,eb,d4,2a,5a,e4,ed,9c,d5,5f,3c,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:ec,58,55,3c,a5,5d,97,e4,89,5a,04,d7,e4,c5,5a,83,8b,a4,05,01,ac,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42] "khjeh"=hex:30,82,89,12,b1,7f,a0,c6,58,e2,84,c6,15,db,ba,35,ae,32,6b,e7,de,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43] "khjeh"=hex:30,82,89,12,b1,7f,a0,c6,58,e2,84,c6,15,db,ba,35,ae,32,6b,e7,de,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:3c,8d,76,f7,0d,16,f9,f7,61,08,83,c9,e3,b9,2f,20,0f,ca,8e,41,e1,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,4b,0c,dc,7d,a1,b1,29,76,8f,cb,89,9e,8d,68,cd,4f,5d,.. "khjeh"=hex:9d,34,9a,84,29,45,1f,dc,f4,df,4e,2c,f4,58,2d,94,93,e8,af,eb,99,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:00,0a,47,8b,72,55,ee,d5,9f,a2,d4,f1,2b,60,95,9f,b8,e0,4f,fb,19,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:5a,af,e4,28,9f,8e,ee,48,86,60,d0,a7,1e,21,0a,70,93,a3,76,70,9a,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42] "khjeh"=hex:30,82,89,12,b1,7f,a0,c6,58,e2,84,c6,15,db,ba,35,ae,32,6b,e7,de,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43] "khjeh"=hex:30,82,89,12,b1,7f,a0,c6,58,e2,84,c6,15,db,ba,35,ae,32,6b,e7,de,.. scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove" "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote" "C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:Enabled:BlueSoleil" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox" "C:\\Program Files\\Gadu-Gadu\\gg.exe"="C:\\Program Files\\Gadu-Gadu\\gg.exe:*:Enabled:Gadu-Gadu - program g˘wny" "C:\\Program Files\\DC++\\DCPlusPlus.exe"="C:\\Program Files\\DC++\\DCPlusPlus.exe:*:Enabled:DC++" "C:\\Program Files\\Ventrilo\\Ventrilo.exe"="C:\\Program Files\\Ventrilo\\Ventrilo.exe:*:Enabled:Ventrilo.exe" "C:\\Program Files\\SopCast\\SopCast.exe"="C:\\Program Files\\SopCast\\SopCast.exe:*:Enabled:SopCast Main Application" "C:\\Program Files\\SopCast\\adv\\SopAdver.exe"="C:\\Program Files\\SopCast\\adv\\SopAdver.exe:*:Enabled:SopCast Adver" "C:\\Program Files\\America's Army Deploy Client\\AADeployClient.exe"="C:\\Program Files\\America's Army Deploy Client\\AADeployClient.exe:*:Enabled:AADeployClient" "C:\\Program Files\\AVG\\AVG8\\avgupd.exe"="C:\\Program Files\\AVG\\AVG8\\avgupd.exe:*:Enabled:avgupd.exe" "C:\\Program Files\\AVG\\AVG8\\avgnsx.exe"="C:\\Program Files\\AVG\\AVG8\\avgnsx.exe:*:Enabled:avgnsx.exe" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [b]Remaining Files [/b]: [b]Files with Hidden Attributes [/b]: Wed 13 May 2009 44 ...H. --- "C:\Program Files\6b5e7881.tmp" Tue 15 Nov 2005 78,104 ..SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\Setup.exe" Tue 15 Nov 2005 12,912 A.SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\_Setupx.dll" [b]Finished![/b]

A tu log z OTL'a:

Kod: Zaznacz wszystko: OTListIt logfile created on: 2009-05-15 19:51:20 - Run 2 OTListIt2 by OldTimer - Version 2.0.15.8 Folder = C:\Documents and Settings\T@rz@N\Pulpit\Programs Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,36 Mb Total Physical Memory | 527,05 Mb Available Physical Memory | 51,50% Memory free 2,40 Gb Paging File | 2,08 Gb Available in Paging File | 86,37% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 5,95 Gb Free Space | 12,18% Space Free | Partition Type: NTFS Drive D: | 48,83 Gb Total Space | 20,87 Gb Free Space | 42,75% Space Free | Partition Type: NTFS Drive E: | 51,39 Gb Total Space | 2,59 Gb Free Space | 5,03% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: TARZAN Current User Name: T@rz@N Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Output = Standard File Age = 30 Days Company Name Whitelist: On [color=orange]========== Processes (SafeList) ==========[/color] PRC - [2009-05-15 16:06:55 | 00,953,168 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe PRC - [2008-04-14 19:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2009-05-14 10:38:00 | 00,298,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe PRC - [2006-08-11 15:42:50 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe PRC - [2004-08-11 01:45:04 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe PRC - [2008-04-14 19:21:50 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2009-05-14 10:38:04 | 00,486,168 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe PRC - [2009-05-14 10:38:04 | 00,594,712 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe PRC - [2006-03-02 14:00:00 | 00,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\unsecapp.exe PRC - [2009-02-06 12:10:02 | 00,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiprvse.exe PRC - [2009-05-15 16:06:56 | 00,516,440 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe PRC - [2006-09-13 09:58:44 | 02,154,496 | ---- | M] (Palit Microsystems, Inc.) -- C:\Program Files\VDOTool\TBPanel.exe PRC - [2006-05-18 08:27:06 | 16,207,872 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE PRC - [2009-05-14 10:38:02 | 01,947,928 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe PRC - [2009-04-29 14:02:53 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-05-15 19:28:00 | 00,501,248 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\T@rz@N\Pulpit\Programs\OTListIt2.exe [color=orange]========== Win32 Services (SafeList) ==========[/color] SRV - [2007-04-13 03:20:52 | 00,033,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2009-01-23 09:51:16 | 00,077,944 | ---- | M] (Autodesk) -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service [Disabled | Stopped]) SRV - [2009-05-14 10:38:00 | 00,298,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd [Auto | Running]) SRV - [2005-04-06 16:03:28 | 00,110,592 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe -- (BlueSoleil Hid Service [Disabled | Stopped]) SRV - [2007-04-13 03:21:18 | 00,068,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-04-14 19:20:44 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2007-11-26 14:54:12 | 01,554,728 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv [Disabled | Stopped]) SRV - [2008-04-14 19:20:33 | 00,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\irmon.dll -- (Irmon [Auto | Running]) SRV - [2009-05-15 16:06:55 | 00,953,168 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service [Auto | Running]) SRV - [2007-08-24 06:59:20 | 00,068,464 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [Disabled | Stopped]) SRV - [2007-09-17 09:36:18 | 00,800,040 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService [Disabled | Stopped]) SRV - [2007-06-27 18:04:00 | 00,279,848 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService [Disabled | Stopped]) SRV - [2006-08-11 15:42:50 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc [Auto | Running]) SRV - [2007-08-24 03:19:12 | 00,443,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [Disabled | Stopped]) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [Disabled | Stopped]) SRV - [2004-08-11 01:45:04 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe -- (UMWdf [Auto | Running]) [color=orange]========== Driver Services (SafeList) ==========[/color] DRV - [2009-05-14 10:38:15 | 00,325,896 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86 [System | Running]) DRV - [2009-05-14 10:38:14 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86 [System | Running]) DRV - [2009-05-14 10:38:20 | 00,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX [System | Running]) DRV - [2005-05-31 15:40:20 | 00,020,480 | ---- | M] (IVT Corporation) -- C:\WINDOWS\system32\DRIVERS\blueletaudio.sys -- (BlueletAudio [On_Demand | Running]) DRV - [2005-04-30 14:48:58 | 00,010,804 | ---- | M] (IVT Corporation) -- C:\WINDOWS\system32\DRIVERS\btnetdrv.sys -- (BT [On_Demand | Stopped]) DRV - [2005-05-31 09:42:28 | 00,023,000 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\Drivers\btcusb.sys -- (Btcsrusb [On_Demand | Stopped]) DRV - [2005-04-30 14:50:20 | 00,011,860 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\vbtenum.sys -- (BTHidEnum [On_Demand | Running]) DRV - [2005-04-30 14:50:10 | 00,028,271 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys -- (BTHidMgr [Boot | Running]) DRV - [2004-12-16 16:32:54 | 00,013,304 | ---- | M] () -- C:\WINDOWS\system32\drivers\BTNetFilter.sys -- (BTNetFilter [On_Demand | Stopped]) DRV - [2002-07-27 18:01:06 | 00,005,306 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\system32\drivers\TBPANEL.SYS -- (Cardex [On_Demand | Stopped]) DRV - File not found -- -- (catchme [On_Demand | Running]) DRV - [2008-04-13 18:36:05 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running]) DRV - [2007-11-26 14:54:02 | 00,118,952 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDFs.sys -- (InCDfs [Disabled | Running]) DRV - [2007-11-26 14:54:12 | 00,036,776 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDPass.sys -- (InCDPass [System | Running]) DRV - [2007-11-26 14:54:12 | 00,038,440 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm [System | Running]) DRV - [2006-05-16 11:32:58 | 04,275,712 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running]) DRV - [2001-08-17 23:51:32 | 00,018,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\irsir.sys -- (irsir [On_Demand | Running]) DRV - [2009-05-15 16:07:32 | 00,064,160 | ---- | M] (Lavasoft AB) -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd [Boot | Running]) DRV - [2008-04-13 20:53:09 | 00,040,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\NMnt.sys -- (nm [On_Demand | Stopped]) DRV - [2006-08-11 15:42:42 | 03,958,496 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running]) DRV - [2006-03-22 08:24:00 | 00,052,736 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\NVENETFD.sys -- (NVENETFD [On_Demand | Running]) DRV - [2006-03-22 08:24:02 | 00,018,944 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\nvnetbus.sys -- (nvnetbus [On_Demand | Running]) DRV - [2003-08-04 13:22:44 | 00,016,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5 [On_Demand | Stopped]) DRV - [2006-03-02 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2006-03-02 14:00:00 | 00,005,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\Drivers\RootMdm.sys -- (ROOTMODEM [On_Demand | Running]) DRV - [2008-04-13 18:39:16 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2008-08-28 15:02:23 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2002-07-27 18:01:06 | 00,005,306 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel [Auto | Running]) DRV - [2004-10-19 13:37:38 | 00,061,312 | ---- | M] (IVT Corporation) -- C:\WINDOWS\system32\DRIVERS\VComm.sys -- (VComm [On_Demand | Running]) DRV - [2005-03-25 17:18:48 | 00,082,148 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\Drivers\VcommMgr.sys -- (VcommMgr [On_Demand | Running]) [color=orange]========== Standard Registry (SafeList) ==========[/color] [color=orange]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=orange]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 FF - prefs.js..extensions.enabledItems: support@pdfcreator-toolbar.org:1.0 FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5 FF - prefs.js..extensions.enabledItems: {1d5287d1-8a92-0001-1f31-1cec198018d8}:2.1.0.7 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.10 FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\PROGRAM FILES\AVG\AVG8\FIREFOX [2009-05-14 10:38:00 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{1d5287d1-8a92-0001-1f31-1cec198018d8}: C:\PROGRAM FILES\AVG\AVG8\TOOLBARFF [2009-05-14 10:38:00 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009-04-29 14:02:57 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009-04-29 14:02:57 | 00,000,000 | ---D | M] [2008-07-28 23:38:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\T@rz@N\Dane aplikacji\mozilla\Extensions [2008-07-28 23:38:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\T@rz@N\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2008-07-28 23:38:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\T@rz@N\Dane aplikacji\mozilla\Firefox\Profiles\22j4wksj.default\extensions [2009-05-14 20:40:17 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-04-29 14:02:52 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2008-08-26 22:18:40 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [2009-04-29 14:02:52 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-04-29 14:02:52 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-03-08 09:05:56 | 00,000,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-03-08 09:05:56 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2009-03-08 09:05:56 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2009-03-08 09:05:56 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2009-03-08 09:05:56 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2009-03-08 09:05:56 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-03-08 09:05:56 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (686 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll () O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll () O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll (AVG Technologies CZ, s.r.o.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll () O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft) O4 - HKLM..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe /A (Palit Microsystems, Inc.) O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation) O4 - HKLM..\Run: [RTHDCPL] RTHDCPL.EXE (Realtek Semiconductor Corp.) O4 - HKCU..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray (Gadu-Gadu S.A.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-07-28 23:11:56 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - * [2009-05-15 19:28:43 | 00,000,000 | ---D | M] O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe () [color=orange]========== Files/Folders - Created Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [6 C:\WINDOWS\*.tmp files] [1 C:\Program Files\*.tmp files] [2009-05-15 19:36:26 | 00,580,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\user32.dll [2009-05-15 19:35:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2009-05-15 19:27:31 | 00,000,000 | ---D | C] -- C:\SDFix [2009-05-15 19:21:52 | 00,015,688 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe [2009-05-15 16:08:02 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2009-05-15 16:08:01 | 00,064,160 | ---- | C] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys [2009-05-15 16:08:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE [2009-05-15 16:04:50 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{83C91755-2546-441D-AC40-9A6B4B860800} [2009-05-15 16:04:46 | 00,000,000 | ---D | C] -- C:\Program Files\Lavasoft [2009-05-15 15:48:57 | 00,000,000 | -H-D | C] -- C:\WINDOWS\PIF [2009-05-15 15:36:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\T@rz@N\Pulpit\Programs [2009-05-15 15:36:33 | 00,000,000 | -HSD | C] -- C:\RECYCLER [2009-05-15 15:33:31 | 00,000,000 | ---D | C] -- C:\WINDOWS\temp [2009-05-15 15:33:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\T@rz@N\Ustawienia lokalne\temp [2009-05-15 15:29:14 | 00,000,211 | ---- | C] () -- C:\Boot.bak [2009-05-15 15:29:11 | 00,262,400 | ---- | C] () -- C:\cmldr [2009-05-15 15:29:10 | 00,000,000 | RHSD | C] -- C:\cmdcons [2009-05-15 15:25:53 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2009-05-15 15:25:53 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2009-05-15 15:25:53 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2009-05-15 15:25:53 | 00,117,248 | ---- | C] () -- C:\WINDOWS\vFind.exe [2009-05-15 15:25:53 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2009-05-15 15:25:53 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2009-05-15 15:25:53 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2009-05-15 15:25:53 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2009-05-15 15:21:11 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2009-05-15 15:19:45 | 00,000,000 | ---D | C] -- C:\Qoobox [2009-05-15 13:18:42 | 03,932,214 | ---- | C] () -- C:\Documents and Settings\T@rz@N\Pulpit\kick 15-05-2009 brak polaczenia staty.bmp [2009-05-15 01:10:00 | 00,003,521 | ---- | C] () -- C:\Documents and Settings\T@rz@N\Pulpit\83.1.179.129kkk.pp2 [2009-05-14 22:25:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\T@rz@N\Pulpit\Statystyki łącza [2009-05-14 21:09:01 | 00,000,000 | ---D | C] -- C:\Program Files\PingPlotter Standard [2009-05-14 14:15:24 | 00,010,322 | ---- | C] () -- D:\Moje dokumenty\14.05.2009.csv [2009-05-14 13:05:51 | 00,000,000 | -H-D | C] -- C:\$AVG8.VAULT$ [2009-05-14 10:38:20 | 00,108,552 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys [2009-05-14 10:38:20 | 00,011,952 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll [2009-05-14 10:38:15 | 00,325,896 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2009-05-14 10:38:14 | 00,027,784 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys [2009-05-14 10:38:11 | 36,106,834 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2009-05-14 10:38:11 | 06,061,540 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg [2009-05-14 10:38:11 | 00,434,673 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg [2009-05-14 10:38:11 | 00,056,490 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg [2009-05-14 10:38:11 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg [2009-05-14 10:38:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\T@rz@N\Dane aplikacji\AVGTOOLBAR [2009-05-14 10:38:00 | 00,000,000 | ---D | C] -- C:\Program Files\AVG [2009-05-14 10:37:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\avg8 [2009-05-13 20:25:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\America's Army Deploy Client [2009-05-13 20:25:46 | 00,002,383 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\America's Army Deploy Client™.lnk [2009-05-13 20:25:44 | 00,000,000 | ---D | C] -- C:\Program Files\America's Army Deploy Client [2009-05-13 19:52:31 | 00,917,504 | ---- | C] () -- C:\WINDOWS\Dream_Aquarium.scr [2009-05-13 10:44:27 | 00,000,000 | ---D | C] -- C:\Program Files\BMExtreme [2009-05-13 10:33:58 | 00,013,108 | ---- | C] () -- D:\Moje dokumenty\netmonlog.mdm [2009-05-13 07:46:07 | 00,026,684 | ---- | C] () -- C:\Documents and Settings\T@rz@N\Pulpit\Zaliczenia i egzamin zerowy AM2 2009.pdf [2009-05-12 16:50:33 | 00,000,206 | ---- | C] () -- D:\Moje dokumenty\DVD-RW.lnk [2009-05-09 08:48:34 | 00,044,032 | ---- | C] () -- C:\Documents and Settings\T@rz@N\Pulpit\OiC_lab_uzup.doc [2009-05-08 18:36:14 | 00,053,664 | ---- | C] () -- C:\Documents and Settings\T@rz@N\Pulpit\Agnieszka Szulc - CV.pdf [2009-05-08 07:43:21 | 00,013,972 | ---- | C] () -- C:\Documents and Settings\T@rz@N\Pulpit\Jak diagnozować dysleksję rozwojową.docx [2009-05-05 18:56:56 | 00,057,856 | ---- | C] () -- C:\Documents and Settings\T@rz@N\Pulpit\Agnieszka Szulc - CV.doc [2009-04-28 21:35:17 | 00,000,000 | ---D | C] -- C:\Program Files\SopCast [2009-04-26 12:28:27 | 00,160,768 | ---- | C] () -- D:\Moje dokumenty\INFORMACJE TECHNICZNE DOBRA FIRMA.doc [2009-04-19 18:10:07 | 00,012,752 | ---- | C] () -- C:\Documents and Settings\T@rz@N\Pulpit\LOL WTC.jpg [2009-04-18 11:28:50 | 00,411,779 | ---- | C] () -- D:\Moje dokumenty\POI.cam [2009-04-17 22:20:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\T@rz@N\Dane aplikacji\Ventrilo [2009-04-17 22:20:03 | 00,000,000 | ---D | C] -- C:\Program Files\Ventrilo [2009-04-17 22:19:58 | 00,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2009-04-17 06:59:23 | 00,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiprvse.exe [2009-04-17 06:59:22 | 00,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pdh.dll [2009-04-17 06:59:22 | 00,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\services.exe [2009-04-17 06:59:21 | 00,686,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\advapi32.dll [2009-04-17 06:59:21 | 00,473,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fastprox.dll [2009-04-17 06:59:21 | 00,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcss.dll [2009-04-17 06:59:20 | 00,731,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll [2009-04-17 06:59:20 | 00,722,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntdll.dll [2009-04-17 06:59:20 | 00,453,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiprvsd.dll [2009-04-17 06:58:30 | 01,203,922 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sysmain.sdb [2009-04-17 06:58:30 | 00,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wordpad.exe [2009-03-07 17:27:12 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.INI [2009-01-23 16:41:50 | 00,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2009-01-06 03:57:47 | 00,000,225 | ---- | C] () -- C:\WINDOWS\AWS.ini [2008-11-21 20:28:57 | 00,000,260 | ---- | C] () -- C:\WINDOWS\AUDOZ3_0.INI [2008-09-08 22:21:21 | 00,013,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\BTNetFilter.sys [2008-09-08 22:21:20 | 00,011,860 | ---- | C] () -- C:\WINDOWS\System32\drivers\vbtenum.sys [2008-08-28 15:02:22 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2008-08-24 13:30:17 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2008-08-21 18:34:43 | 00,000,046 | ---- | C] () -- C:\WINDOWS\adiras.ini [2008-07-29 23:36:25 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008-07-29 23:36:16 | 00,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-07-29 23:36:16 | 00,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008-07-29 23:36:15 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-07-29 23:36:08 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-07-29 23:36:08 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-07-29 15:40:07 | 00,000,558 | ---- | C] () -- C:\WINDOWS\DFC.INI [2006-08-11 15:45:20 | 00,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2006-08-11 15:43:10 | 00,196,608 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2006-08-11 15:43:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2006-08-11 15:43:00 | 01,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2006-08-11 15:43:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2006-08-11 15:43:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2006-08-11 15:43:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2006-03-02 14:00:00 | 00,000,552 | ---- | C] () -- C:\WINDOWS\win.ini [2006-03-02 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [color=orange]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [6 C:\WINDOWS\*.tmp files] [2009-05-15 19:49:10 | 00,000,558 | ---- | M] () -- C:\WINDOWS\DFC.INI [2009-05-15 19:49:06 | 00,081,191 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2009-05-15 19:39:37 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-05-15 19:39:35 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\T@rz@N\Ustawienia lokalne\desktop.ini [2009-05-15 19:39:34 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-05-15 19:36:59 | 00,000,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS [2009-05-15 19:36:26 | 00,580,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\user32.dll [2009-05-15 16:08:02 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2009-05-15 16:07:53 | 00,015,688 | ---- | M] () -- C:\WINDOWS\System32\lsdelete.exe [2009-05-15 16:07:32 | 00,064,160 | ---- | M] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys [2009-05-15 15:32:07 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2009-05-15 15:29:14 | 00,000,281 | RHS- | M] () -- C:\boot.ini [2009-05-15 15:23:33 | 36,106,834 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2009-05-15 15:23:19 | 00,056,490 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg [2009-05-15 13:18:43 | 03,932,214 | ---- | M] () -- C:\Documents and Settings\T@rz@N\Pulpit\kick 15-05-2009 brak polaczenia staty.bmp [2009-05-15 01:10:01 | 00,003,521 | ---- | M] () -- C:\Documents and Settings\T@rz@N\Pulpit\83.1.179.129kkk.pp2 [2009-05-14 22:26:12 | 00,002,383 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\America's Army Deploy Client™.lnk [2009-05-14 17:50:08 | 00,117,248 | ---- | M] () -- C:\WINDOWS\vFind.exe [2009-05-14 14:15:25 | 00,010,322 | ---- | M] () -- D:\Moje dokumenty\14.05.2009.csv [2009-05-14 10:38:20 | 00,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys [2009-05-14 10:38:20 | 00,011,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll [2009-05-14 10:38:15 | 00,325,896 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2009-05-14 10:38:14 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys [2009-05-14 10:38:11 | 06,061,540 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg [2009-05-14 10:38:11 | 00,434,673 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg [2009-05-14 09:18:24 | 00,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-05-13 19:39:15 | 00,000,076 | ---- | M] () -- C:\Documents and Settings\T@rz@N\Dane aplikacji\AVSDVDPlayer.m3u [2009-05-13 13:55:51 | 00,013,108 | ---- | M] () -- D:\Moje dokumenty\netmonlog.mdm [2009-05-13 07:46:08 | 00,026,684 | ---- | M] () -- C:\Documents and Settings\T@rz@N\Pulpit\Zaliczenia i egzamin zerowy AM2 2009.pdf [2009-05-09 08:48:34 | 00,044,032 | ---- | M] () -- C:\Documents and Settings\T@rz@N\Pulpit\OiC_lab_uzup.doc [2009-05-08 18:36:57 | 00,053,664 | ---- | M] () -- C:\Documents and Settings\T@rz@N\Pulpit\Agnieszka Szulc - CV.pdf [2009-05-08 18:36:46 | 00,057,856 | ---- | M] () -- C:\Documents and Settings\T@rz@N\Pulpit\Agnieszka Szulc - CV.doc [2009-05-08 07:59:12 | 00,013,972 | ---- | M] () -- C:\Documents and Settings\T@rz@N\Pulpit\Jak diagnozować dysleksję rozwojową.docx [2009-05-07 09:16:29 | 24,699,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe [2009-05-02 14:08:36 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-04-29 16:46:46 | 00,011,409 | ---- | M] () -- C:\Documents and Settings\T@rz@N\Pulpit\Woda.xlsx [2009-04-26 12:28:28 | 00,160,768 | ---- | M] () -- D:\Moje dokumenty\INFORMACJE TECHNICZNE DOBRA FIRMA.doc [2009-04-20 12:56:28 | 00,031,232 | ---- | M] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2009-04-18 11:28:58 | 00,411,779 | ---- | M] () -- D:\Moje dokumenty\POI.cam [2009-04-17 22:20:08 | 00,000,262 | ---- | M] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2009-04-17 16:22:58 | 00,993,462 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-04-17 16:22:58 | 00,451,352 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2009-04-17 16:22:58 | 00,395,200 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009-04-17 16:22:58 | 00,075,486 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2009-04-17 16:22:58 | 00,059,440 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009-04-17 07:17:59 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009-04-16 20:26:23 | 00,000,552 | ---- | M] () -- C:\WINDOWS\win.ini [2009-04-16 20:26:23 | 00,000,211 | ---- | M] () -- C:\Boot.bak < End of report >

**Posty:** 18165 · przez **wojtas** 16 Maj 2009, 19:18

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Wykonaj skan Dr. Web CureIt
6. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.

Jeśli masz Adobe Reader to zaaktualizuj go do najnowszej wersji

**Posty:** 7 · przez **Tarzanisko** 16 Maj 2009, 23:08

Kod: Zaznacz wszystko: ******************************************************************************** * * * FixIEDef Log * * Version 1.7.22.7514 * * * ******************************************************************************** Created at 23:06:58 on Saturday, May 16, 2009 Time Zone : Logged On User : T@rz@N Operating System : Microsoft Windows XP Home Edition Dodatek Service Pack 3 OS Architecture : X86 System Langauge : Polish Keyboard Layout : Polish Processor : X64 AMD Athlon(tm) 64 Processor 3800+ System Drive : C:\ Windows Directory : C:\WINDOWS System Directory : C:\WINDOWS\system32 System Drive Type : Fixed System Drive Status : READY System Drive Label : System Drive Size : 50 GB System Drive Free : 8.31 GB Total Physical Memory: 1023 MB Free Physical Memory : 460 MB Total Page File : 1023 MB Free Page File : 2131 MB Total Virtual Memory : 2048 MB Free Virtual Memory : 1969 MB Boot State : Normal boot -------------------------------------------------------------------------------- !!! userinit.exe is Clean !!! -------------------------------------------------------------------------------- !!! Files that have been deleted !!! C:\WINDOWS\system32\actskn45.ocx -------------------------------------------------------------------------------- !!! Directories that have been removed !!! No malicious directories to be removed -------------------------------------------------------------------------------- !!! Registry entries that have been removed !!! No malicious Registry entries found ================================================================================ All Done :) ShadowPuterDude Safe Surfing!!!

**Posty:** 18165 · przez **wojtas** 17 Maj 2009, 14:22

a raport z kaspra??

**Posty:** 7 · przez **Tarzanisko** 18 Maj 2009, 17:46

Kod: Zaznacz wszystko: -------------------------------------------------------------------------------- RAPORT KASPERSKY ONLINE SCANNER 7.0 poniedziałek, 18 maj 2009 System operacyjny: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (build 2600) Wersja Kaspersky Online Scanner: 7.0.26.12 Data ostatniej aktualizacji bazy danych: Monday, May 18, 2009 13:28:33 Liczba wpisów: 2190962 -------------------------------------------------------------------------------- Ustawienia skanowania: Typ bazy danych użytej do skanowania: rozszerzona Skanuj archiwa: tak Skanuj pocztowe bazy danych: tak Obszar skanowania - Mój komputer: C:\ D:\ E:\ F:\ G:\ H:\ I:\ J:\ Statystyki skanowania: Przeskanowanych plików: 90976 Nazwa zagrożenia: 1 Zainfekowanych obiektów: 1 Podejrzanych obiektów: 0 Czas skanowania: 01:34:11 Nazwa pliku / Nazwa zagrożenia / Liczba zagrożeń D:\Programy\Archicad 10\Crack\Archicad 10_Crk.exe Zainfekowany: Trojan-Dropper.Win32.Agent.soc 1 Wybrany obszar został przeskanowany.

**Posty:** 18165 · przez **wojtas** 18 Maj 2009, 20:21

system czysty

Autor postu otrzymał pochwałę

**Posty:** 7 · przez **Tarzanisko** 19 Maj 2009, 07:55

Dzięki za poświęcony czas...
Pozdrawiam