Laptop długo się włącza, system i internet mulą

**Posty:** 84 · przez **łysy82** 11 Sty 2010, 22:09

Od niedawna laptop znów zaczął źle ze mną współpracować :lipa:

włącza się niemiłosiernie długo (mimo niezłych parametrów), system i internet chodzą bardzo wolno. Muli nawet przy zwykłych gierkach internetowych, co wcześniej mi się nie zdarzało.

Log z OTL:

Kod: Zaznacz wszystko: OTL logfile created on: 2010-01-11 21:08:08 - Run 2 OTL by OldTimer - Version 3.1.23.0 Folder = C:\Documents and Settings\Ja\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 90,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 2,17 Gb Free Space | 11,13% Space Free | Partition Type: NTFS Drive D: | 129,51 Gb Total Space | 6,20 Gb Free Space | 4,79% Space Free | Partition Type: NTFS E: Drive not present or media not loaded Drive F: | 2,13 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive G: | 647,83 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive H: | 566,67 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive I: | 2,32 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: JA Current User Name: Ja Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-01-11 20:59:58 | 00,543,744 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe PRC - [2010-01-07 00:22:22 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-05-21 10:34:07 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2009-05-21 10:34:05 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2008-10-28 08:32:46 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe PRC - [2008-05-17 13:36:34 | 01,503,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-02-26 04:00:02 | 00,520,192 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe PRC - [2007-01-16 13:42:20 | 00,950,272 | ---- | M] ( ) -- C:\Program Files\SAGEM WiFi manager\WLANUTL.EXE PRC - [2006-11-02 14:24:32 | 00,184,320 | ---- | M] (VoyagerSoft, LLC) -- C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe PRC - [2006-10-26 23:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2004-08-22 16:05:02 | 00,081,920 | ---- | M] (DAEMON'S HOME) -- C:\Program Files\D-Tools\daemon.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-01-11 20:59:58 | 00,543,744 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe MOD - [2006-05-03 22:53:54 | 00,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- -- (CiSvc) SRV - [2009-05-21 10:34:05 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2008-10-28 08:32:46 | 00,611,664 | ---- | M] (Lavasoft) [Auto | Running] -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice) SRV - [2008-02-26 04:00:02 | 00,520,192 | ---- | M] (ATI Technologies Inc.) [Auto | Running] -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller) SRV - [2006-11-02 14:24:32 | 00,184,320 | ---- | M] (VoyagerSoft, LLC) [Auto | Running] -- C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe -- (ScReadSpool) SRV - [2006-10-26 23:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2006-10-26 18:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2006-10-26 12:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-07-25 20:33:09 | 00,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2008-09-17 15:14:00 | 00,027,672 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Entech.sys -- (ENTECH) DRV - [2008-06-20 12:08:27 | 00,225,856 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6) DRV - [2008-04-30 21:12:46 | 00,055,424 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxDrv.sys -- (VBoxDrv) DRV - [2008-04-30 21:12:46 | 00,042,048 | ---- | M] (Sun Microsystems, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxUSBMon.sys -- (VBoxUSBMon) DRV - [2008-04-13 23:26:08 | 00,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx) DRV - [2008-04-13 23:15:14 | 00,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2008-04-13 21:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2008-04-13 21:06:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008-04-04 09:57:00 | 00,296,320 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp) DRV - [2008-02-26 06:51:43 | 02,863,616 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2007-12-18 11:18:10 | 00,732,160 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (HdAudAddService) DRV - [2007-11-02 23:12:32 | 00,041,456 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4C74-92FE-5B863F82066B}) DRV - [2007-05-02 11:11:18 | 00,109,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm) DRV - [2007-05-02 11:11:18 | 00,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl) DRV - [2007-05-02 11:11:16 | 00,083,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM) DRV - [2007-03-08 00:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2007-02-08 17:46:00 | 00,209,152 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8187B.sys -- (RTL8187B) DRV - [2007-01-16 13:52:20 | 00,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50) DRV - [2006-07-24 16:05:00 | 00,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\system32\drivers\StarOpen.sys -- (StarOpen) DRV - [2004-08-22 15:31:48 | 00,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt) DRV - [2004-08-22 15:31:10 | 00,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus) DRV - [2004-03-24 03:12:34 | 00,017,280 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\nsndis5.sys -- (NSNDIS5) DRV - [2001-08-23 13:00:00 | 00,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb) DRV - [2001-08-23 13:00:00 | 00,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx) DRV - [2001-08-23 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\S-1-5-20\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\S-1-5-21-796845957-57989841-1644491937-1002\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\S-1-5-21-796845957-57989841-1644491937-1002\S-1-5-21-796845957-57989841-1644491937-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.startup.homepage: "http://www.gazeta.pl" FF - prefs.js..extensions.enabledItems: fdm_ffext@freedownloadmanager.org:1.3.4 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-01-07 00:22:29 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-01-07 00:22:29 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2009-12-03 16:33:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Extensions [2010-01-11 18:52:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Firefox\Profiles\qrupuoqn.default\extensions [2010-01-11 18:52:16 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2007-02-12 20:30:16 | 00,164,352 | ---- | M] (Indiepath Ltd) -- C:\Program Files\Mozilla Firefox\plugins\npigl.dll [2009-12-02 09:23:35 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-12-02 09:23:35 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-12-02 09:23:35 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-12-02 09:23:35 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-12-02 09:23:35 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-12-02 09:23:35 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: (686 bytes) - C:\WINDOWS\system32\drivers\etc\HOSTS O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll () O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [DAEMON Tools-1033] C:\Program Files\D-Tools\daemon.exe (DAEMON'S HOME) O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKU\.DEFAULT..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (Alexander Avdonin) O4 - HKU\.DEFAULT..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com) O4 - HKU\S-1-5-18..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (Alexander Avdonin) O4 - HKU\S-1-5-18..\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (VisualTaskTips.com) O4 - HKU\S-1-5-21-796845957-57989841-1644491937-1002..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKU\S-1-5-21-796845957-57989841-1644491937-1002..\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe (Franmo Software) O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] File not found O4 - HKU\.DEFAULT..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.dll (Microsoft Corporation) O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] File not found O4 - HKU\S-1-5-18..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.dll (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = C:\Program Files\SAGEM WiFi manager\WLANUTL.EXE ( ) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0 O7 - HKU\S-1-5-21-796845957-57989841-1644491937-1002_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Pobierz plik wideo we Free Download Manager - C:\Program Files\Free Download Manager\dlfvideo.htm () O8 - Extra context menu item: Pobierz w Free Download Manager - C:\Program Files\Free Download Manager\dllink.htm () O8 - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - C:\Program Files\Free Download Manager\dlall.htm () O8 - Extra context menu item: Pobierz zaznaczone w Free Download Manager - C:\Program Files\Free Download Manager\dlselected.htm () O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation) O15 - HKU\.DEFAULT\..Trusted Domains: google.com ([mail] https in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKU\S-1-5-18\..Trusted Domains: google.com ([mail] https in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKU\S-1-5-20\..Trusted Domains: google.com ([mail] https in Trusted sites) O15 - HKU\S-1-5-20\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\..Trusted Domains: google.com ([mail] https in Trusted sites) O15 - HKU\S-1-5-21-796845957-57989841-1644491937-1002\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-10-13 10:14:07 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2008-10-13 19:44:59 | 00,136,448 | R--- | M] (Sports Interactive) - F:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2008-07-25 18:10:55 | 00,000,027 | R--- | M] () - F:\autorun.inf -- [ UDF ] O32 - AutoRun File - [2004-10-26 00:40:24 | 00,000,107 | R--- | M] () - G:\autorun.inf -- [ CDFS ] O32 - AutoRun File - [2001-01-10 15:48:42 | 00,172,032 | R--- | M] (Team17 Software Ltd) - H:\AUTORUN.EXE -- [ CDFS ] O32 - AutoRun File - [2000-11-09 18:05:38 | 00,000,051 | R--- | M] () - H:\AUTORUN.INF -- [ CDFS ] O32 - AutoRun File - [2009-07-30 09:30:42 | 00,000,154 | R--- | M] () - I:\autorun.cfg -- [ UDF ] O32 - AutoRun File - [2008-11-27 13:02:24 | 00,214,280 | R--- | M] (Sports Interactive) - I:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2006-09-11 14:26:42 | 00,000,027 | R--- | M] () - I:\autorun.inf -- [ UDF ] O33 - MountPoints2\{81bc14a0-3728-11de-aadf-0015af6e86c4}\Shell\AutoRun\command - "" = K:\f9o8o.exe -- File not found O33 - MountPoints2\{81bc14a0-3728-11de-aadf-0015af6e86c4}\Shell\open\Command - "" = K:\f9o8o.exe -- File not found O33 - MountPoints2\{82a49570-995f-11dd-a7d0-0015af6e86c4}\Shell\AutoRun\command - "" = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe -- File not found O33 - MountPoints2\{82a49570-995f-11dd-a7d0-0015af6e86c4}\Shell\open\command - "" = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe -- File not found O33 - MountPoints2\{82f325f6-06ff-11de-a9e4-0015af6e86c4}\Shell - "" = AutoRun O33 - MountPoints2\{82f325f6-06ff-11de-a9e4-0015af6e86c4}\Shell\AutoRun\command - "" = I:\autorun.exe -- [2008-11-27 13:02:24 | 00,214,280 | R--- | M] (Sports Interactive) O33 - MountPoints2\{8de9c602-fe27-11de-aef3-0015af6e86c4}\Shell\AutoRun\command - "" = 3exi.exe O33 - MountPoints2\{8de9c602-fe27-11de-aef3-0015af6e86c4}\Shell\open\Command - "" = 3exi.exe O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\AUToplaY\coMMAND - "" = ynbupy.pif O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\AutoRun\command - "" = ynbupy.pif O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\expLorE\ComMAnd - "" = ynbupy.pif O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\open\ComMand - "" = ynbupy.pif O33 - MountPoints2\{b21a1e6d-9a14-11dd-a7d4-0015af6e86c4}\Shell - "" = AutoRun O33 - MountPoints2\{b21a1e6d-9a14-11dd-a7d4-0015af6e86c4}\Shell\AutoRun\command - "" = F:\autorun.exe -- [2008-10-13 19:44:59 | 00,136,448 | R--- | M] (Sports Interactive) O33 - MountPoints2\{d3c456a0-990c-11dd-a7c7-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{d3c456a0-990c-11dd-a7c7-806d6172696f}\Shell\AutoRun\command - "" = G:\RunGame.exe -- [2004-10-26 00:40:24 | 00,192,512 | R--- | M] (Electronic Arts Inc.) O33 - MountPoints2\{d7a6dfee-b3e3-11dd-a84c-0015af6e86c4}\Shell - "" = AutoRun O33 - MountPoints2\{d7a6dfee-b3e3-11dd-a84c-0015af6e86c4}\Shell\AutoRun\command - "" = H:\AUTORUN.EXE -- [2001-01-10 15:48:42 | 00,172,032 | R--- | M] (Team17 Software Ltd) O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (OODBS) - File not found O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe () O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-01-11 20:59:52 | 00,543,744 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe [2010-01-11 17:14:36 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Ja\Recent [2010-01-05 20:01:31 | 00,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll [2010-01-05 20:01:31 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys [2010-01-05 20:01:31 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll [2009-12-24 21:19:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Hiro-Media [2009-12-24 21:19:53 | 00,000,000 | ---D | C] -- C:\Program Files\AC3Filter [2009-12-24 21:19:50 | 00,000,000 | ---D | C] -- C:\Program Files\Xvid [2009-12-24 21:19:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Hiro-Media [2008-11-14 20:41:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET [2008-10-13 11:59:20 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [2008-10-13 10:51:42 | 00,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys [2008-10-13 10:51:42 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys [2008-10-13 10:15:05 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2008-10-13 10:13:59 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2008-10-13 10:13:33 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-01-11 20:59:58 | 00,543,744 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe [2010-01-11 19:48:35 | 06,815,744 | -H-- | M] () -- C:\Documents and Settings\Ja\NTUSER.DAT [2010-01-11 18:41:37 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-01-11 18:41:31 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-01-11 17:14:41 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\Ja\ntuser.ini [2010-01-11 17:14:36 | 08,080,574 | -H-- | M] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-01-10 21:48:17 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-12-24 18:49:16 | 00,001,406 | ---- | M] () -- C:\Documents and Settings\Ja\OpenP2M.cfg [2009-12-17 20:54:28 | 00,001,602 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Mozilla Firefox.lnk [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2009-12-24 21:19:54 | 00,380,928 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.acm [2009-12-24 21:19:50 | 00,077,824 | ---- | C] () -- C:\WINDOWS\System32\xvid.ax [2009-09-17 09:24:03 | 00,000,167 | ---- | C] () -- C:\WINDOWS\ConverterCore.INI [2009-05-25 21:46:27 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2009-03-25 17:07:25 | 00,001,246 | ---- | C] () -- C:\WINDOWS\kaillera.ini [2009-03-24 14:29:30 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt [2009-03-24 14:19:01 | 00,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2008-11-29 12:09:13 | 00,003,584 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-11-21 16:54:30 | 00,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll [2008-11-15 10:40:13 | 00,000,238 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2008-11-02 09:59:24 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.INI [2008-10-14 19:53:26 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2008-10-13 20:56:06 | 00,000,027 | ---- | C] () -- C:\WINDOWS\SmAudio.INI [2008-10-13 10:30:57 | 00,055,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\VBoxDrv.sys [2008-10-13 10:30:22 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008-10-13 10:30:17 | 00,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-10-13 10:30:17 | 00,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008-10-13 10:30:14 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-10-13 10:30:14 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-10-13 10:08:44 | 00,000,058 | ---- | C] () -- C:\WINDOWS\System32\Notepad2.ini [2008-10-13 10:08:43 | 00,175,616 | ---- | C] () -- C:\WINDOWS\System32\mmm.dll [2008-10-13 10:08:42 | 00,001,630 | ---- | C] () -- C:\WINDOWS\System32\metapath.ini [2008-10-13 10:08:27 | 00,394,752 | ---- | C] () -- C:\WINDOWS\System32\cygwinb19.dll [2008-09-16 01:14:24 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-09-16 01:12:02 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest [2008-09-16 01:12:02 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest [2008-09-16 01:11:10 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll [2008-03-06 02:37:26 | 00,000,183 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2004-08-22 16:04:56 | 00,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll [color=#E56717]========== LOP Check ==========[/color] [2008-10-13 10:32:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\URSoft [2008-10-13 10:10:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\uTorrent [2008-10-13 10:11:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Xentient [2009-12-10 15:11:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper [2008-10-28 08:40:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2009-12-10 15:11:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Farm Frenzy [2009-11-26 17:56:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2009-12-24 21:19:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Hiro-Media [2009-12-13 11:02:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2009-06-15 22:42:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Karen's Power Tools [2008-10-20 12:54:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI [2009-06-06 15:05:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm [2009-09-17 09:14:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SolidDocuments [2009-03-04 11:09:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive [2009-03-04 11:34:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2008-10-13 10:32:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\URSoft [2008-10-13 10:10:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\uTorrent [2008-10-13 10:11:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\Xentient [2009-03-12 12:22:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\2K Sports [2009-01-12 22:18:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\AutoUpdate [2010-01-09 18:44:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\foobar2000 [2010-01-11 21:06:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Free Download Manager [2008-10-14 06:14:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Gadu-Gadu [2009-08-18 12:03:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\GetRightToGo [2010-01-10 14:30:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\ipla [2008-11-30 15:29:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Jasc [2009-01-10 17:24:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Leadertech [2009-01-12 22:18:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Listonosz [2009-01-19 11:52:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Mount&Blade [2009-05-30 08:28:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Mp3tag [2009-01-12 22:18:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Onet [2008-10-13 18:11:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Opera [2008-10-16 07:56:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Polcaster [2009-03-24 21:05:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Samsung [2009-11-24 14:31:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\SecondLife [2010-01-08 17:05:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\SolidDocuments [2009-12-25 14:43:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Sports Interactive [2009-12-06 12:45:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Thinstall [2008-10-13 10:32:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\URSoft [2010-01-10 14:30:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\uTorrent [2008-10-13 10:11:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Xentient [2008-10-13 10:22:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\SAPER1972\Dane aplikacji\Gadu-Gadu [2008-10-13 10:32:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\SAPER1972\Dane aplikacji\Tlen.pl [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 65 bytes -> C:\Documents and Settings\All Users\Pulpit:$ES_DESCRIPTOR_MVPUV1PKSVXJKX69UK1CWPP0DTVNYKM1UVXPJCEPP4DMJ3K1XYE7LRJEM53EPPJCFPLP45168LPSB5PL0EM6REGXHCTVVVVVVVVVVVVV @Alternate Data Stream - 65 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive:$ES_DESCRIPTOR_MVPUV1PKSVXJKX69UK1CWPP0DTVNYKM1UVXPJCEPP4DMJ3K1XYE7LRJEM53EPPJCFPLP45168LPSB5PL0EM6REGXHCTVVVVVVVVVVVVV @Alternate Data Stream - 150 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:B3D74A13 < End of report >

**Posty:** 18165 · przez **wojtas** 11 Sty 2010, 23:01

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] File not found
O32 - AutoRun File - [2008-10-13 19:44:59 | 00,136,448 | R--- | M] (Sports Interactive) - F:\autorun.exe -- [ UDF ]
O32 - AutoRun File - [2008-07-25 18:10:55 | 00,000,027 | R--- | M] () - F:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2004-10-26 00:40:24 | 00,000,107 | R--- | M] () - G:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2001-01-10 15:48:42 | 00,172,032 | R--- | M] (Team17 Software Ltd) - H:\AUTORUN.EXE -- [ CDFS ]
O32 - AutoRun File - [2000-11-09 18:05:38 | 00,000,051 | R--- | M] () - H:\AUTORUN.INF -- [ CDFS ]
O32 - AutoRun File - [2009-07-30 09:30:42 | 00,000,154 | R--- | M] () - I:\autorun.cfg -- [ UDF ]
O32 - AutoRun File - [2008-11-27 13:02:24 | 00,214,280 | R--- | M] (Sports Interactive) - I:\autorun.exe -- [ UDF ]
O32 - AutoRun File - [2006-09-11 14:26:42 | 00,000,027 | R--- | M] () - I:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{81bc14a0-3728-11de-aadf-0015af6e86c4}\Shell\AutoRun\command - "" = K:\f9o8o.exe -- File not found
O33 - MountPoints2\{81bc14a0-3728-11de-aadf-0015af6e86c4}\Shell\open\Command - "" = K:\f9o8o.exe -- File not found
O33 - MountPoints2\{82a49570-995f-11dd-a7d0-0015af6e86c4}\Shell\AutoRun\command - "" = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe -- File not found
O33 - MountPoints2\{82a49570-995f-11dd-a7d0-0015af6e86c4}\Shell\open\command - "" = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe -- File not found
O33 - MountPoints2\{82f325f6-06ff-11de-a9e4-0015af6e86c4}\Shell - "" = AutoRun
O33 - MountPoints2\{82f325f6-06ff-11de-a9e4-0015af6e86c4}\Shell\AutoRun\command - "" = I:\autorun.exe -- [2008-11-27 13:02:24 | 00,214,280 | R--- | M] (Sports Interactive)
O33 - MountPoints2\{8de9c602-fe27-11de-aef3-0015af6e86c4}\Shell\AutoRun\command - "" = 3exi.exe
O33 - MountPoints2\{8de9c602-fe27-11de-aef3-0015af6e86c4}\Shell\open\Command - "" = 3exi.exe
O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\AUToplaY\coMMAND - "" = ynbupy.pif
O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\AutoRun\command - "" = ynbupy.pif
O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\expLorE\ComMAnd - "" = ynbupy.pif
O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\open\ComMand - "" = ynbupy.pif
O33 - MountPoints2\{b21a1e6d-9a14-11dd-a7d4-0015af6e86c4}\Shell - "" = AutoRun
O33 - MountPoints2\{b21a1e6d-9a14-11dd-a7d4-0015af6e86c4}\Shell\AutoRun\command - "" = F:\autorun.exe -- [2008-10-13 19:44:59 | 00,136,448 | R--- | M] (Sports Interactive)
O33 - MountPoints2\{d3c456a0-990c-11dd-a7c7-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{d3c456a0-990c-11dd-a7c7-806d6172696f}\Shell\AutoRun\command - "" = G:\RunGame.exe -- [2004-10-26 00:40:24 | 00,192,512 | R--- | M] (Electronic Arts Inc.)
O33 - MountPoints2\{d7a6dfee-b3e3-11dd-a84c-0015af6e86c4}\Shell - "" = AutoRun
O33 - MountPoints2\{d7a6dfee-b3e3-11dd-a84c-0015af6e86c4}\Shell\AutoRun\command - "" = H:\AUTORUN.EXE -- [2001-01-10 15:48:42 | 00,172,032 | R--- | M] (Team17 Software Ltd)

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdz reset kompa .

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) i daj raport ze skanu

**Posty:** 84 · przez **łysy82** 12 Sty 2010, 10:53

Niestety przy próbie optymalizacji Windowsa, a dokładnie po wpisaniu "msconfig" w uruchom wyskakuje mi błąd o tym, że Windows nie może odnaleźć pliku o nazwie "msconfig"... a chyba bez tego system dalej będzie się włączał bardzo wolno ?

**Posty:** 4459 · przez **jarski185** 12 Sty 2010, 12:09

http://www.searchengines.pl/index.php?showtopic=13977

**Posty:** 84 · przez **łysy82** 12 Sty 2010, 12:36

jarski185 napisał(a):http://www.searchengines.pl/index.php?showtopic=13977

Dzięki, spróbuję tego rozwiązania.

No i spróbowałem. Wprawdzie z polecenia mi się nie otwiera, ale otworzyłem z tegoż pliku w systemie i odznaczyłem parę rzeczy (dużo tego nie ma). Niestety system włącza się tak samo wolno jak wcześniej. Macie jakieś inne pomysły ?

Oto log z Malwarebytes:

Kod: Zaznacz wszystko: Malwarebytes' Anti-Malware 1.44 Wersja bazy definicji: 3510 Windows 5.1.2600 Dodatek Service Pack 3 Internet Explorer 7.0.5730.13 2010-01-12 11:34:35 mbam-log-2010-01-12 (11-34-35).txt Typ skanowania: Szybkie skanowanie Przeskanowane obiekty: 93175 Upłynęło: 33 minute(s), 35 second(s) Zainfekowane procesy w pamięci: 0 Zainfekowane moduły pamięci: 0 Zainfekowane klucze rejestru: 0 Zainfekowane wartości rejestru: 0 Zainfekowane pliki rejestru: 0 Zainfekowane foldery: 0 Zainfekowane pliki: 2 Zainfekowane procesy w pamięci: (Nie wykryto groźnych plików) Zainfekowane moduły pamięci: (Nie wykryto groźnych plików) Zainfekowane klucze rejestru: (Nie wykryto groźnych plików) Zainfekowane wartości rejestru: (Nie wykryto groźnych plików) Zainfekowane pliki rejestru: (Nie wykryto groźnych plików) Zainfekowane foldery: (Nie wykryto groźnych plików) Zainfekowane pliki: c:\Documents and Settings\Ja\Pulpit\rozne\Solid Converter PDF Pro 3.1\Solid Converter PDF Pro 3.1\Crack\Crack.exe (Trojan.Downloader) -> Quarantined and deleted successfully. c:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\Crack.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

**Posty:** 18165 · przez **wojtas** 13 Sty 2010, 16:05

system masz czysty.