Log po usunięciu gameztar toolbar

**Posty:** 3 · przez **anjas** 08 Gru 2009, 20:53

Witam, zainstalowałam przez przypadek Gameztar Toolbar. Wyskakują mi dodatkowe okna z grami w firefoxie, chociaż program odinstalowałam. Przeczytałam instrukcję postępowania w innym wątku, wklejam poniżej pliki OTL i EXTRAS i proszę o instrukcję co dalej:

http://www.wklej.org/id/229168/

http://www.wklej.org/id/229164/

dzięki

**Posty:** 18165 · przez **wojtas** 08 Gru 2009, 21:18

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - [2009-12-04 18:53:30 | 00,058,744 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice129.exe
PRC - [2009-12-04 18:53:30 | 00,058,744 | ---- | M] () -- C:\Program Files\QuestService\questservice.exe
MOD - [2009-12-04 18:53:28 | 00,598,016 | ---- | M] () -- C:\Program Files\QuestService\questservice.dll
IE - HKU\S-1-5-21-1202660629-746137067-1177238915-1004\..\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - Reg Error: Value error. File not found
FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.1.0.1880\FF [2009-12-08 17:47:40 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5240\FF [2009-12-08 17:47:54 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.1.0.1800\FF [2009-12-08 17:48:10 | 00,000,000 | ---D | M]
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5240\ACEIEAddOn.dll ()
O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\4.1.0.1800\CPAIEAddOn.dll ()
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1880\CMWIE.dll ()
O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1710\TCPIE.dll ()
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - Reg Error: Value error. File not found
O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.1.0.1880\WSO.dll ()
O3 - HKU\S-1-5-21-1202660629-746137067-1177238915-1004\..\Toolbar\WebBrowser: (no name) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - No CLSID value found.
O4 - HKU\S-1-5-21-1202660629-746137067-1177238915-1004..\Run: [Twoje TVN24] File not found

:Files
C:\Program Files\Mozilla Firefox\searchplugins\questservice129.xml
C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Textual Content Provider
C:\Program Files\QuestService
C:\Documents and Settings\All Users\Dane aplikacji\QuestService
C:\Program Files\Textual Content Provider
C:\Program Files\Content Management Wizard
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Internet Today
C:\Program Files\Internet Today
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer
C:\Program Files\Customized Platform Advancer
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer
C:\Program Files\Automated Content Enhancer
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Web Search Operator
C:\Program Files\Web Search Operator
C:\Documents and Settings\All Users\Dane aplikacji\~0
C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar

:Services
QuestService Service

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia kompa

**Posty:** 3 · przez **anjas** 08 Gru 2009, 21:41

dzięki za odpowiedź. tu są te pliki:

Kod: Zaznacz wszystko: OTL logfile created on: 2009-12-08 20:32:14 - Run 2 OTL by OldTimer - Version 3.1.11.9 Folder = C:\Documents and Settings\Admin\Moje dokumenty\instalki Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,99 Gb Total Physical Memory | 1,40 Gb Available Physical Memory | 70,47% Memory free 3,84 Gb Paging File | 3,43 Gb Available in Paging File | 89,25% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 20,00 Gb Total Space | 3,07 Gb Free Space | 15,33% Space Free | Partition Type: NTFS Drive D: | 212,88 Gb Total Space | 182,49 Gb Free Space | 85,72% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: LAPATOLGA Current User Name: Admin Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-12-08 19:11:49 | 00,536,576 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Moje dokumenty\instalki\OTL.exe PRC - [2009-09-10 17:27:15 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2008-07-01 09:02:28 | 00,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe PRC - [2008-07-01 09:01:04 | 01,447,168 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe PRC - [2008-06-12 02:38:00 | 00,034,672 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe PRC - [2008-06-02 10:17:20 | 00,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe PRC - [2008-06-02 10:04:10 | 01,024,000 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe PRC - [2008-06-02 09:05:20 | 00,009,216 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\agrsmsvc.exe PRC - [2008-06-02 09:03:14 | 16,859,648 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.exe PRC - [2008-06-02 08:57:48 | 00,252,440 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxsrvc.exe PRC - [2008-06-02 08:57:34 | 00,137,752 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxpers.exe PRC - [2008-06-02 08:57:28 | 00,162,328 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\hkcmd.exe PRC - [2008-04-15 13:00:00 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-03-04 12:12:04 | 00,360,448 | ---- | M] (TOSHIBA) -- C:\Program Files\TOSHIBA\TOSHIBA Applet\THotkey.exe PRC - [2007-04-10 08:45:20 | 00,035,840 | ---- | M] (TOSHIBA Corp.) -- C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe PRC - [2007-02-12 17:43:44 | 00,065,536 | ---- | M] (O2Micro International) -- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2009-12-08 19:11:49 | 00,536,576 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Moje dokumenty\instalki\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-11-06 09:20:16 | 00,051,168 | ---- | M] (NOS Microsystems Ltd.) -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R) SRV - [2009-04-13 20:50:55 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate1c9bc712a586132) Usługa Google Update (gupdate1c9bc712a586132) SRV - [2009-04-13 20:50:06 | 00,183,280 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc) SRV - [2008-07-01 09:08:00 | 00,019,200 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv) SRV - [2008-07-01 09:02:28 | 00,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn) SRV - [2008-06-02 10:17:20 | 00,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs) SRV - [2008-06-02 09:05:20 | 00,009,216 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\agrsmsvc.exe -- (AgereModemAudio) SRV - [2008-04-15 13:00:00 | 00,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\regedt32.exe -- (NOD32FiXTemDono) SRV - [2007-04-10 08:45:20 | 00,035,840 | ---- | M] (TOSHIBA Corp.) -- C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe -- (TAPPSRV) SRV - [2007-02-12 17:43:44 | 00,065,536 | ---- | M] (O2Micro International) -- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash) SRV - [2003-07-28 20:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2008-08-20 18:58:58 | 00,044,944 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2008-07-01 09:04:38 | 00,054,280 | ---- | M] (ESET) -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi) DRV - [2008-07-01 09:04:36 | 00,030,728 | ---- | M] (ESET) -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2008-07-01 09:04:34 | 00,071,688 | ---- | M] (ESET) -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw) DRV - [2008-07-01 08:57:14 | 00,053,256 | ---- | M] (ESET) -- C:\WINDOWS\system32\drivers\easdrv.sys -- (easdrv) DRV - [2008-07-01 08:56:22 | 00,039,944 | ---- | M] (ESET) -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2008-06-02 10:11:18 | 00,012,032 | ---- | M] (TOSHIBA Corporation.) -- C:\WINDOWS\system32\drivers\Netdevio.sys -- (Netdevio) DRV - [2008-06-02 10:04:08 | 00,220,032 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2008-06-02 09:08:08 | 00,288,000 | ---- | M] (Realtek Semiconductor Corporation ) -- C:\WINDOWS\system32\drivers\RTL8187B.sys -- (RTL8187B) DRV - [2008-06-02 09:05:20 | 01,161,888 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2008-06-02 09:03:36 | 00,105,856 | ---- | M] (Realtek Semiconductor Corporation ) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2008-06-02 09:03:18 | 04,725,760 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-06-02 08:57:58 | 05,761,760 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm) DRV - [2008-05-16 11:33:14 | 00,115,752 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) DRV - [2008-05-16 11:33:14 | 00,025,512 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) DRV - [2008-05-16 11:33:14 | 00,015,016 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 11:33:12 | 00,120,744 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 11:33:12 | 00,114,216 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) DRV - [2008-05-16 11:33:12 | 00,110,632 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 11:33:12 | 00,089,256 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM) DRV - [2008-04-15 13:00:00 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008-04-15 13:00:00 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2008-04-15 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2008-01-09 10:28:34 | 00,027,632 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri) DRV - [2007-04-04 08:56:48 | 00,005,888 | ---- | M] (TOSHIBA Corporation) -- C:\WINDOWS\system32\drivers\FwLnk.sys -- (FwLnk) DRV - [2007-03-21 22:02:04 | 00,037,376 | ---- | M] (REDC) -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2007-02-24 14:42:22 | 00,039,936 | ---- | M] (REDC) -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2007-01-23 16:40:20 | 00,042,496 | ---- | M] (REDC) -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2005-10-07 01:57:14 | 00,071,680 | ---- | M] (Aktiv Co.) -- C:\WINDOWS\system32\drivers\NVKEYNT.SYS -- (NVKEYNT) DRV - [2005-10-07 01:52:46 | 00,038,400 | ---- | M] (Aktiv Co.) -- C:\WINDOWS\system32\drivers\NVKEYUSB.SYS -- (NVKEYUSB) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Google" FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=971163" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.1 FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1 FF - prefs.js..extensions.enabledItems: 6 FF - prefs.js..extensions.enabledItems: 2 FF - prefs.js..extensions.enabledItems: 49 FF - prefs.js..extensions.enabledItems: {8061ddcf-3632-4287-8d8a-133e219ae838}:0.9.6 FF - prefs.js..extensions.enabledItems: {e3f6c2cc-d8db-498c-af6c-499fb211db97}:1.3.0.1 FF - prefs.js..extensions.enabledItems: {B922D405-6D13-4A2B-AE89-08A030DA4402}:1.1 FF - prefs.js..extensions.enabledItems: {F2DDDB92-1605-4260-9B25-45A4DAE87B50}:1.0 FF - prefs.js..extensions.enabledItems: search@searchsettings.com:1.2.1 FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971 FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=971163&p=" FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-09-28 18:59:40 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-11-29 04:39:28 | 00,000,000 | ---D | M] [2009-03-09 12:47:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Extensions [2009-12-08 20:31:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions [2009-03-09 12:53:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\{8061ddcf-3632-4287-8d8a-133e219ae838} [2009-08-14 10:32:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009-11-29 04:39:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2009-11-05 10:10:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97} [2009-11-05 10:10:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}-trash [2009-12-08 20:31:25 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2009-07-22 16:46:45 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{B922D405-6D13-4A2B-AE89-08A030DA4402} [2009-12-08 17:52:01 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{F2DDDB92-1605-4260-9B25-45A4DAE87B50} [2009-07-22 16:46:45 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com [2009-07-23 13:47:31 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2008-04-03 18:19:08 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2007-03-31 18:11:54 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2006-06-03 17:43:22 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2008-03-28 22:36:04 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2007-01-05 12:40:56 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: (302570 bytes) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 10430 more lines... O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\pdfforgeToolbarIE.dll (Spigot, Inc.) O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\pdfforgeToolbarIE.dll (Spigot, Inc.) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [CorelDRAW Graphics Suite 11b] D:\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe (Corel Corporation) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation) O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe (OLYMPUS IMAGING CORP.) O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation) O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Inc.) O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.) O4 - HKLM..\Run: [THotkey] C:\Program Files\TOSHIBA\TOSHIBA Applet\THotkey.exe (TOSHIBA) O4 - HKCU..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe (OLYMPUS IMAGING CORP.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Monitor.lnk = C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe (TOSHIBA CORPORATION) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O15 - HKLM\..Trusted Domains: 49 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKCU\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-03-06 15:30:40 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{74a50c72-5f11-11de-a954-0021636902cf}\Shell - "" = AutoRun O33 - MountPoints2\{74a50c72-5f11-11de-a954-0021636902cf}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-12-08 20:27:59 | 00,000,000 | ---D | C] -- C:\_OTL [2009-12-08 20:00:10 | 00,000,000 | ---D | C] -- C:\Rbackup [2009-12-08 18:56:05 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Admin\Recent [2009-12-08 18:51:07 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner [2009-12-07 05:14:54 | 00,000,000 | ---D | C] -- C:\Program Files\ZET 9 [2009-12-01 13:15:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\McAfee [2009-11-29 04:40:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan [2009-11-29 04:39:27 | 00,000,000 | ---D | C] -- C:\Program Files\NOS [2009-11-29 04:39:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\NOS [2009-11-23 16:22:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Moje dokumenty\poprawki [2009-11-20 14:57:57 | 00,000,000 | --SD | C] -- C:\Documents and Settings\Admin\Moje dokumenty\Moje źródła danych [2009-11-18 14:13:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Moje dokumenty\harmonogramy [2009-11-17 16:21:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Moje dokumenty\umowy [2009-11-15 09:20:50 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2009-03-06 16:37:45 | 00,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\DLLVGA.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-12-08 20:31:34 | 07,602,176 | -H-- | M] () -- C:\Documents and Settings\Admin\NTUSER.DAT [2009-12-08 20:30:00 | 00,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2009-12-08 20:29:42 | 00,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2009-12-08 20:29:29 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-12-08 20:29:27 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-12-08 20:28:37 | 00,000,292 | -HS- | M] () -- C:\Documents and Settings\Admin\ntuser.ini [2009-12-08 17:46:26 | 00,000,696 | ---- | M] () -- C:\WINDOWS\win.ini [2009-12-08 02:05:05 | 00,000,012 | ---- | M] () -- C:\Documents and Settings\Admin\intlname.ols [2009-12-08 00:13:25 | 00,030,556 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\ist2_944711-letter.jpg [2009-12-08 00:12:23 | 00,032,915 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\ist2_4631055-love-for-the-holidays.jpg [2009-12-07 19:57:25 | 11,738,624 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Warsztaty Pro Astro.ppt [2009-12-07 12:08:47 | 00,037,509 | ---- | M] () -- C:\WINDOWS\FontData.fdb [2009-12-07 05:15:05 | 00,001,485 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\ZET 9.lnk [2009-12-07 03:44:02 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-12-06 03:09:38 | 00,015,969 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\ist1_9228111-bead-jewelry-making-as-a-hobby.jpg [2009-11-30 19:45:02 | 00,049,664 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Pytania z medycyny szkolnej I, III moduł.doc [2009-11-30 19:41:16 | 01,350,656 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Materiały dla pielęgniarek medycynyc szkolnej - moduł I i III 2009.doc [2009-11-28 20:22:30 | 00,010,752 | ---- | M] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-11-28 12:43:09 | 00,074,240 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\podsumowanie astro.xls [2009-11-27 16:01:18 | 01,367,316 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\DSL-2640B_man_revB_4-00_eu_pl_20080804.pdf.zip [2009-11-27 15:58:10 | 01,582,109 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\DSL-2640B_man_revB_4-00_eu_pl_20080804.pdf [2009-11-27 13:59:02 | 00,041,984 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\INFORMAcje o kursach.xls [2009-11-23 11:19:25 | 00,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-11-19 14:46:00 | 02,592,307 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\fwpolisanaerudio.zip [2009-11-19 05:45:42 | 01,089,757 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\Scan10360.jpg [2009-11-19 05:45:38 | 01,062,961 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\Scan10362.jpg [2009-11-19 05:45:38 | 01,005,535 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\Scan10361.jpg [2009-11-11 15:22:32 | 00,282,616 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [color=#E56717]========== Files Created - No Company Name ==========[/color] [2009-12-08 00:13:25 | 00,030,556 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\ist2_944711-letter.jpg [2009-12-08 00:12:23 | 00,032,915 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\ist2_4631055-love-for-the-holidays.jpg [2009-12-07 05:15:05 | 00,001,485 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\ZET 9.lnk [2009-12-06 03:09:36 | 00,015,969 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\ist1_9228111-bead-jewelry-making-as-a-hobby.jpg [2009-12-01 18:03:37 | 00,049,664 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Pytania z medycyny szkolnej I, III moduł.doc [2009-12-01 18:03:12 | 01,350,656 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Materiały dla pielęgniarek medycynyc szkolnej - moduł I i III 2009.doc [2009-11-28 12:43:09 | 00,074,240 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\podsumowanie astro.xls [2009-11-27 16:01:29 | 01,582,109 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\DSL-2640B_man_revB_4-00_eu_pl_20080804.pdf [2009-11-27 16:01:15 | 01,367,316 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\DSL-2640B_man_revB_4-00_eu_pl_20080804.pdf.zip [2009-11-19 14:46:35 | 01,089,757 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\Scan10360.jpg [2009-11-19 14:46:35 | 01,062,961 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\Scan10362.jpg [2009-11-19 14:46:35 | 01,005,535 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\Scan10361.jpg [2009-11-19 14:45:51 | 02,592,307 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\fwpolisanaerudio.zip [2009-08-23 16:40:23 | 00,008,704 | ---- | C] () -- C:\WINDOWS\System32\NVKEYVDD.DLL [2009-08-23 16:40:23 | 00,000,626 | ---- | C] () -- C:\WINDOWS\System32\NVKEY4NT.SYS [2009-08-17 22:39:19 | 00,006,688 | ---- | C] () -- C:\WINDOWS\System32\Digita.sys [2009-08-17 22:39:17 | 00,335,872 | ---- | C] () -- C:\WINDOWS\System32\ldf252.dll [2009-07-22 16:45:59 | 00,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2009-04-14 18:01:00 | 00,010,752 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-03-25 16:01:10 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-03-09 13:15:04 | 00,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-03-06 16:37:45 | 00,118,784 | ---- | C] () -- C:\WINDOWS\System32\TCtrlIO.dll [2009-03-06 15:57:47 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-03-06 15:57:47 | 00,856,064 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-03-06 15:57:47 | 00,593,938 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll [2009-03-06 15:57:47 | 00,217,088 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-03-06 15:57:46 | 00,005,120 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-03-06 15:57:46 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-03-06 15:45:43 | 00,000,000 | ---- | C] () -- C:\WINDOWS\NDSTray.INI [2009-03-06 15:42:11 | 00,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll [2009-03-06 15:40:01 | 00,128,113 | ---- | C] () -- C:\WINDOWS\System32\csellang.ini [2009-03-06 15:40:01 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\csellang.dll [2009-03-06 15:40:01 | 00,009,471 | ---- | C] () -- C:\WINDOWS\System32\tosmreg.ini [2009-03-06 15:40:01 | 00,007,671 | ---- | C] () -- C:\WINDOWS\System32\cseltbl.ini [2009-03-06 15:38:29 | 00,910,464 | ---- | C] () -- C:\WINDOWS\System32\igmedkrn.dll [2009-03-06 15:38:29 | 00,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4833.dll [2003-04-08 11:40:22 | 00,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [2002-03-21 14:39:02 | 00,073,728 | ---- | C] () -- C:\WINDOWS\System32\UNACEV2.DLL < End of report >

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== No active process named explorer.exe was found! No active process named questservice129.exe was found! No active process named questservice.exe was found! Registry value HKEY_USERS\S-1-5-21-1202660629-746137067-1177238915-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E63605FC-D583-4C81-867F-9457BDB3EA1B}\ not found. C:\Program Files\Web Search Operator\4.1.0.1880\FF\components folder moved successfully. C:\Program Files\Web Search Operator\4.1.0.1880\FF\chrome\content folder moved successfully. C:\Program Files\Web Search Operator\4.1.0.1880\FF\chrome folder moved successfully. C:\Program Files\Web Search Operator\4.1.0.1880\FF folder moved successfully. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8141440E-08F0-4339-9959-5C31C6A69F23}\ not found. C:\Program Files\Automated Content Enhancer\4.1.0.5240\FF\components folder moved successfully. C:\Program Files\Automated Content Enhancer\4.1.0.5240\FF\chrome\content folder moved successfully. C:\Program Files\Automated Content Enhancer\4.1.0.5240\FF\chrome folder moved successfully. C:\Program Files\Automated Content Enhancer\4.1.0.5240\FF folder moved successfully. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E889F097-B0BE-471B-89AD-B86B6F04B506}\ not found. C:\Program Files\Customized Platform Advancer\4.1.0.1800\FF\components folder moved successfully. C:\Program Files\Customized Platform Advancer\4.1.0.1800\FF\chrome\content folder moved successfully. C:\Program Files\Customized Platform Advancer\4.1.0.1800\FF\chrome folder moved successfully. C:\Program Files\Customized Platform Advancer\4.1.0.1800\FF folder moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D74E9DD-8987-448b-B2CB-67FFF2B8A932}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1D74E9DD-8987-448b-B2CB-67FFF2B8A932}\ deleted successfully. C:\Program Files\Automated Content Enhancer\4.1.0.5240\ACEIEAddOn.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42C7C39F-3128-4a17-BDB7-91C46032B5B9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42C7C39F-3128-4a17-BDB7-91C46032B5B9}\ deleted successfully. C:\Program Files\Customized Platform Advancer\4.1.0.1800\CPAIEAddOn.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B72681C0-A222-4b21-A0E2-53A5A5CA3D41}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B72681C0-A222-4b21-A0E2-53A5A5CA3D41}\ deleted successfully. C:\Program Files\Content Management Wizard\1.1.0.1880\CMWIE.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CAC89FF9-34A9-4431-8CFE-292A47F843BC}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAC89FF9-34A9-4431-8CFE-292A47F843BC}\ deleted successfully. C:\Program Files\Textual Content Provider\1.1.0.1710\TCPIE.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431}\ deleted successfully. C:\Program Files\Web Search Operator\4.1.0.1880\WSO.dll moved successfully. Registry value HKEY_USERS\S-1-5-21-1202660629-746137067-1177238915-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2}\ not found. Registry value HKEY_USERS\S-1-5-21-1202660629-746137067-1177238915-1004\Software\Microsoft\Windows\CurrentVersion\Run\\Twoje TVN24 deleted successfully. ========== FILES ========== C:\Program Files\Mozilla Firefox\searchplugins\questservice129.xml moved successfully. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin\classic\win scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin\classic\trace scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin\classic\mac scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin\classic scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\platform\Darwin scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\platform scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\zh-TW scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\zh-CN scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\uk-UA scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\tr-TR scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\sv-SE scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\sk-SK scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ru-RU scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ro-RO scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\pt-BR scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\pl-PL scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\nl-NL scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ko-KR scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ja-JP scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\it-IT scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\hu-HU scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\fr-FR scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\es-ES scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\es-AR scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\en-US scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\de-DE scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\da-DK scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\cs-CZ scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ca-AD scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\bg-BG scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\lite scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\icons\default scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\docs scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\defaults\preferences scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\defaults scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\content\firebug\tests scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\content\firebug scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\content scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\components scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com scheduled to be moved on reboot. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Textual Content Provider\1.1.0.1710\Data folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Textual Content Provider\1.1.0.1710 folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Textual Content Provider folder moved successfully. C:\Program Files\QuestService\QuestService_deleted_ folder moved successfully. C:\Program Files\QuestService folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\QuestService folder moved successfully. C:\Program Files\Textual Content Provider\1.1.0.1710\data folder moved successfully. C:\Program Files\Textual Content Provider\1.1.0.1710 folder moved successfully. C:\Program Files\Textual Content Provider folder moved successfully. C:\Program Files\Content Management Wizard\1.1.0.1880 folder moved successfully. C:\Program Files\Content Management Wizard folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Internet Today folder moved successfully. C:\Program Files\Internet Today\1.1.0.1230 folder moved successfully. C:\Program Files\Internet Today folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer\4.1.0.1800 folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer folder moved successfully. C:\Program Files\Customized Platform Advancer\4.1.0.1800\Data folder moved successfully. C:\Program Files\Customized Platform Advancer\4.1.0.1800 folder moved successfully. C:\Program Files\Customized Platform Advancer folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer\4.1.0.5240 folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer folder moved successfully. C:\Program Files\Automated Content Enhancer\4.1.0.5240\Data folder moved successfully. C:\Program Files\Automated Content Enhancer\4.1.0.5240 folder moved successfully. C:\Program Files\Automated Content Enhancer folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Web Search Operator\4.1.0.1880 folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Web Search Operator folder moved successfully. C:\Program Files\Web Search Operator\4.1.0.1880\Data folder moved successfully. C:\Program Files\Web Search Operator\4.1.0.1880 folder moved successfully. C:\Program Files\Web Search Operator folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\~0 folder moved successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar folder moved successfully. ========== SERVICES/DRIVERS ========== Service QuestService Service stopped successfully! Service QuestService Service deleted successfully! ========== COMMANDS ========== [EMPTYTEMP] User: Admin ->Temp folder emptied: 226913800 bytes ->Temporary Internet Files folder emptied: 7749766 bytes ->FireFox cache emptied: 85757403 bytes User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Gość ->Temp folder emptied: 6894044 bytes ->Temporary Internet Files folder emptied: 1392629 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 698765 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2352022 bytes %systemroot%\System32 .tmp files removed: 2596 bytes Windows Temp folder emptied: 155321409 bytes RecycleBin emptied: 738090 bytes Total Files Cleaned = 465,32 mb OTL by OldTimer - Version 3.1.11.9 log created on 12082009_202759 Files\Folders moved on Reboot... C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin\classic\win folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin\classic\trace folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin\classic\mac folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin\classic folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\skin folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\platform\Darwin folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\platform folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\zh-TW folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\zh-CN folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\uk-UA folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\tr-TR folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\sv-SE folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\sk-SK folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ru-RU folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ro-RO folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\pt-BR folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\pl-PL folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\nl-NL folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ko-KR folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ja-JP folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\it-IT folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\hu-HU folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\fr-FR folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\es-ES folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\es-AR folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\en-US folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\de-DE folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\da-DK folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\cs-CZ folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\ca-AD folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale\bg-BG folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\locale folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\lite folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\icons\default folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\icons folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\docs folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\defaults\preferences folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\defaults folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\content\firebug\tests folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\content\firebug folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\content folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com\components folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\oz1dkit6.default\extensions\firebug@software.joehewitt.com folder moved successfully. Registry entries deleted on Reboot...

dziękuję za pomoc, wszystko jest już OK

**Posty:** 18165 · przez **wojtas** 09 Gru 2009, 00:12

skasuj pogrubione:

C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\_OTL

wejdź na dysk na którym masz windows zainstalowany, tam w katalog WINDOWS -> system 32 -> drivers -> etc
i tam za pomocą notatnika otwórz plik hosts

Jeśli są jakieś wpisy pod

# 102.54.94.97 rhino.acme.com # serwer źródłowy
# 38.25.63.10 x.acme.com # komputer kliencki x
127.0.0.1 localhost

to usun tylko zostaw te pokazane przeze mnie wyzej zapisz edytowany plik

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (usuń co znajdzie ) i daj raport ze skanu

Autor postu otrzymał pochwałę

**Posty:** 3 · przez **anjas** 09 Gru 2009, 03:26

Ależ mnie przegoniłeś po moim kompie... w niektóre miejsca nigdy nie zaglądałam :wink:

Muszę to samo zrobić na kompach w pracy..
Oto raport:

Kod: Zaznacz wszystko: Malwarebytes' Anti-Malware 1.42 Wersja bazy definicji: 3325 Windows 5.1.2600 Dodatek Service Pack 3 Internet Explorer 6.0.2900.5512 2009-12-09 02:19:26 mbam-log-2009-12-09 (02-19-26).txt Typ skanowania: Pełne skanowanie (C:\|D:\|) Przeskanowane obiekty: 157297 Upłynęło: 17 minute(s), 33 second(s) Zainfekowane procesy w pamięci: 0 Zainfekowane moduły pamięci: 0 Zainfekowane klucze rejestru: 34 Zainfekowane wartości rejestru: 0 Zainfekowane pliki rejestru: 0 Zainfekowane foldery: 0 Zainfekowane pliki: 0 Zainfekowane procesy w pamięci: (Nie wykryto groźnych plików) Zainfekowane moduły pamięci: (Nie wykryto groźnych plików) Zainfekowane klucze rejestru: HKEY_CLASSES_ROOT\explorerbar.cmw (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\explorerbar.cmw.1 (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\explorerbar.funexplorer (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\explorerbar.funexplorer.1 (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\explorerbar.funredirector (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\explorerbar.funredirector.1 (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\explorerbar.tcp (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\explorerbar.tcp.1 (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{480098c6-f6ad-4c61-9b5c-2bae228a34d1} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{6160f76a-1992-4b17-a32d-0c706d159105} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{3de88beb-f271-484a-ba71-01d30f439f0c} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{50ad41d2-b1f0-47cc-9ea7-395355eaeebd} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{8ceb185e-81a5-46d3-bc20-c555d605afbd} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{a72522ba-9ff3-4c83-abc6-9b476728a396} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{c5762628-ae15-4ca6-96c4-b00dd17f3419} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{883dfc00-8a21-411d-956c-73a4e4b7d16f} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{ac5ab953-ed25-4f9c-87f0-b086b0178ffa} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Explorer\Bars\{cac89ff9-34a9-4431-8cfe-292a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Explorer\Bars\{b72681c0-a222-4b21-a0e2-53a5a5ca3d411} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{42c7c39f-3128-4a17-bdb7-91c46032b5b9} (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d74e9dd-8987-448b-b2cb-67fff2b8a932} (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b72681c0-a222-4b21-a0e2-53a5a5ca3d41} (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{cac89ff9-34a9-4431-8cfe-292a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{eb4a577d-bcad-4b1c-8af2-9a74b8dd3431} (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d45817b8-3ead-4d1d-8fca-ec63a8e35de2} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\SOFTWARE\Internet Today (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Automated Content Enhancer (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Customized Platform Advancer (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuestService (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\QuestService (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Web Search Operator (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Automated Content Enhancer (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Customized Platform Advancer (Adware.DoubleD) -> Quarantined and deleted successfully. Zainfekowane wartości rejestru: (Nie wykryto groźnych plików) Zainfekowane pliki rejestru: (Nie wykryto groźnych plików) Zainfekowane foldery: (Nie wykryto groźnych plików) Zainfekowane pliki: (Nie wykryto groźnych plików)

I jak?

**Posty:** 2183 · przez **NieWiem** 09 Gru 2009, 10:30

Wszystko Adware, usunięte i już

Jest OK