Menadżer zadań nie działa

**Posty:** 7 · przez **Thanos** 17 Lis 2009, 01:06

Menadżer zadań o pewnego czasu nie chce mi działać .
Szukam pomocy!
Poczytałem na forum to i owo i mam tego HiJackThis .I jestem na etapie wygenerowanego tekstu oto i on:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:49:31, on 2009-11-16 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AskBarDis\bar\bin\AskService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe D:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE C:\Program Files\Winamp\winamp.exe C:\Program Files\Opera\Opera.exe D:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\NetLimiter\NetLimiter.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.7.4.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {CAB01E82-0390-42AB-B5F4-D710E4FB83D7} - C:\WINDOWS\system32\wvUkjJdb.dll (file missing) O2 - BHO: (no name) - {F50B3F5E-856E-4757-9BB1-B35D46CA7719} - C:\WINDOWS\system32\efcDVonk.dll (file missing) O3 - Toolbar: ZoneAlarm Spy Blocker Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O4 - HKLM\..\Run: [Data File] vdehost.exe O4 - HKLM\..\Run: [msctrl.exe] C:\Program Files\Microsoft Security Adviser\msctrl.exe O4 - HKLM\..\Run: [msavsc.exe] C:\Program Files\Microsoft Security Adviser\msavsc.exe O4 - HKLM\..\Run: [msscan.exe] C:\Program Files\Microsoft Security Adviser\msscan.exe O4 - HKLM\..\Run: [msiemon.exe] C:\Program Files\Microsoft Security Adviser\msiemon.exe O4 - HKLM\..\Run: [msfw.exe] C:\Program Files\Microsoft Security Adviser\msfw.exe O4 - HKLM\..\Run: [14790004] C:\Documents and Settings\All Users\Dane aplikacji\14790004\14790004.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\RunServices: [Data File] vdehost.exe O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\" -lang 1033 O4 - HKCU\..\Run: [Monopod] C:\DOCUME~1\Bartek\USTAWI~1\Temp\b.exe O4 - HKCU\..\Run: [ColdWare] C:\WINDOWS\msa.exe O4 - HKCU\..\Run: [msctrl.exe] C:\Program Files\Microsoft Security Adviser\msctrl.exe O4 - HKCU\..\Run: [msavsc.exe] C:\Program Files\Microsoft Security Adviser\msavsc.exe O4 - HKCU\..\Run: [msscan.exe] C:\Program Files\Microsoft Security Adviser\msscan.exe O4 - HKCU\..\Run: [msiemon.exe] C:\Program Files\Microsoft Security Adviser\msiemon.exe O4 - HKCU\..\Run: [msfw.exe] C:\Program Files\Microsoft Security Adviser\msfw.exe O4 - HKCU\..\Run: [RGSC] E:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Logitech SetPoint.lnk = ? O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.7.4.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O20 - Winlogon Notify: efcDVonk - efcDVonk.dll (file missing) O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Loki Drivers Auto Removal (pr2agqwb) (pr2agqwb) - Cyanide - C:\WINDOWS\system32\pr2agqwb.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

Pomożecie

?

Co mam usunąć
POZDRO!

**Posty:** 2183 · przez **NieWiem** 17 Lis 2009, 08:36

Poczytałem na forum to i owo i mam tego HiJackThis

To coś słabo w takim razie czytałeś, bo HiJacka już nie używamy. Został oficjalnie uznany za martwy program.

Pobierz aplikację OTL i zapisz ją na pulpicie.
Kliknij dwukrotnie na ikonę, aby uruchomić program (użytkownicy systemów Vista oraz Se7en => prawoklik oraz wybrać opcję Uruchom jako Administrator).
Gdy pojawi sie okno, skonfiguruj go następująco:
- Zaznacz opcje LOP Check i Purity Check
- Zaznacz opcje Scan All Users.
- Upewnij się, że w okienku Extra Registry jest zaznaczone Use Safelist.
Upewnij się, że wszystkie pozostałe okna są zamknięte i pozwól mu pracować bez zakłóceń - nie stukaj w klawiaturę, nie ruszaj myszką.
Kliknij Run Scan i poczekaj cierpliwie aż program wykona swoje.
Kiedy skanowanie sie skończy, pojawią sie 2 okna notatnika, zatytułowane OTL.txt i Extras.txt. Będą one zapisane w tym samym miejscu, co aplikacja OTL.
Skopiuj (Edycja => Zaznacz wszystko, Edycja => Kopiuj) zawartość tych plików i wklej na http://www.wklej.org lub w poście w tagach [code].

**Posty:** 7 · przez **Thanos** 17 Lis 2009, 18:11

Oto drugi wydruk:

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2009-11-17 17:00:27 - Run 1 OTL by OldTimer - Version 3.1.6.0 Folder = C:\Documents and Settings\Bartek\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,23 Mb Total Physical Memory | 594,13 Mb Available Physical Memory | 58,06% Memory free 2,41 Gb Paging File | 2,06 Gb Available in Paging File | 85,66% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 2,67 Gb Free Space | 13,69% Space Free | Partition Type: NTFS Drive D: | 39,06 Gb Total Space | 4,59 Gb Free Space | 11,75% Space Free | Partition Type: NTFS Drive E: | 90,45 Gb Total Space | 5,77 Gb Free Space | 6,38% Space Free | Partition Type: NTFS Drive F: | 494,24 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: BART Current User Name: Bartek Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html [@ = Opera.HTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Opera\Opera.exe" (Opera Software) https [open] -- "C:\Program Files\Opera\Opera.exe" (Opera Software) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 1 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 "9636:TCP" = 9636:TCP:*:Enabled:BitComet 9636 TCP "9636:UDP" = 9636:UDP:*:Enabled:BitComet 9636 UDP "14137:TCP" = 14137:TCP:*:Enabled:BitComet 14137 TCP "14137:UDP" = 14137:UDP:*:Enabled:BitComet 14137 UDP [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.) "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.) "C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny -- File not found "C:\Program Files\eMule\eMule.exe" = C:\Program Files\eMule\eMule.exe:*:Enabled:eMule Plus -- File not found "C:\Program Files\Lphant\eLePhantClient.exe" = C:\Program Files\Lphant\eLePhantClient.exe:*:Enabled:Lphant -- File not found "C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client -- (http://www.BitComet.com) "D:\Program Files\Warcraft III\Warcraft III.exe" = D:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III -- (Blizzard Entertainment) "C:\Program Files\Opera\Opera.exe" = C:\Program Files\Opera\Opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software) "D:\Program Files\eMule\emule.exe" = D:\Program Files\eMule\emule.exe:*:Enabled:eMule -- (http://www.emule-project.net) "E:\Program Files\Red Faction\RedFaction.exe" = E:\Program Files\Red Faction\RedFaction.exe:*:Enabled:Red Faction Launcher -- File not found "E:\Program Files\Red Faction\rf.exe" = E:\Program Files\Red Faction\rf.exe:*:Enabled:Red Faction -- File not found "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "E:\Program Files\Unreal Tournament 3\Binaries\UT3.exe" = E:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:UT3 -- File not found "C:\Program Files\Konnekt\konnekt.exe" = C:\Program Files\Konnekt\konnekt.exe:*:Enabled:Konnekt - Core -- File not found "E:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" = E:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club -- (Take-Two Interactive Software, Inc.) "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.) "D:\Program Files\Diablo\diablo.exe" = D:\Program Files\Diablo\diablo.exe:*:Enabled:Diablo -- (Blizzard Entertainment) "C:\Documents and Settings\Bartek\Pulpit\utorrent.exe" = C:\Documents and Settings\Bartek\Pulpit\utorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.) "E:\Program Files\Cyanide\GameCenter\GameCenter.exe" = E:\Program Files\Cyanide\GameCenter\GameCenter.exe:*:Enabled:GameCenter -- (Cyanide) "E:\Program Files\Cyanide\Loki\Loki.exe" = E:\Program Files\Cyanide\Loki\Loki.exe:*:Enabled:Loki -- (Cyanide) "E:\Program Files\Cyanide\Loki\Autorun\AutoRun.exe" = E:\Program Files\Cyanide\Loki\Autorun\AutoRun.exe:*:Enabled:Loki - AutoRun -- (Cyanide) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club "{15095BF3-A3D7-4DDF-B193-3A496881E003}" = Microsoft .NET Framework 3.0 "{16913489-B5E3-403E-AFD3-2B19BBE464D4}" = Opera 9.24 "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{1AE41051-68F8-4420-8231-007A5672FD98}" = Black and White Creature CD "{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}" = Logitech SetPoint "{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1 "{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2 "{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{491DD792-AD81-429C-9EB4-86DD3D22E333}" = Windows Communication Foundation "{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}" = Microsoft Games for Windows - LIVE "{59359B3D-ABE7-46BF-AB55-43B67A64DC68}" = Nokia MTP driver "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}" = Windows Workflow Foundation "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}" = CDDRV_Installer "{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}" = QuickTime "{95FC26FB-19FD-4A96-BBB1-B1062E8648F5}" = AGEIA PhysX v7.11.13 "{A040AC77-C1AA-4CC9-8931-9F648AF178F6}" = VC 9.0 Runtime "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{AC76BA86-7AD7-1045-7B44-A70000000000}" = Adobe Reader 7.0 - Polish "{ADE91A13-434D-4229-00BC-182BAD607303}" = Need for Speed™ Most Wanted "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1 "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation "{BE4AA694-815A-4045-BD49-C94F2BED7458}" = WinFast Entertainment Center "{C89C8D86-4423-4A58-AA40-DD259ACE07C1}" = KhalSetup "{D4E5A687-797D-44B1-8F96-4FD7A24166A9}" = DEVIL MAY CRY 4 "{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic "{E51B4CD9-A0A6-4324-B26A-31B3F2DE26CE}" = Black and White "{FD052FB9-FE90-4438-B355-15EDC89D8FB1}" = Microsoft Games for Windows - LIVE Redistributable "6A1545AE87FC8D98ACA7539CE7AA69DF2A5C7E1C" = Pakiet sterowników systemu Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0) "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "ALLPlayer V2.4_is1" = ALLPlayer V2.4 "AP Guitar Tuner 1.02" = AP Guitar Tuner 1.02 "Ask Toolbar_is1" = ZoneAlarm Spy Blocker Toolbar "ATI Display Driver" = ATI Display Driver "avast!" = avast! Antivirus "Battle.net" = Battle.net "BitComet" = BitComet 0.91 "C-Media Audio" = C-Media 3D Audio "Diablo" = Diablo "Diablo II" = Diablo II "eMule" = eMule "ffdshow" = ffdshow "Gadu-Gadu" = Gadu-Gadu 7.7 "GameCenter" = GameCenter "Hellfire" = Hellfire "HijackThis" = HijackThis 2.0.2 "Liceum klasa 2 - Chemia - podstawowa" = Liceum klasa 2 - Chemia - podstawowa "Loki" = Loki "Loki_is1" = Loki "Microsoft .NET Framework 3.0" = Microsoft .NET Framework 3.0 "Mozilla Firefox (2.0.0.8)" = Mozilla Firefox (2.0.0.8) "Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition "NetLimiter" = NetLimiter 1.30 (remove only) "Painkiller Overdose_is1" = Painkiller Overdose "ShockwaveFlash" = Adobe Flash Player 9 ActiveX "Sierra Utilities" = Sierra Utilities "The House Of The Dead" = The House Of The Dead "UnrealTournament" = Unreal Tournament G.O.T.Y. Edition "Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = Archiwizator WinRAR "WMFDist11" = Windows Media Format 11 runtime "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1060284298-1425521274-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "uTorrent" = µTorrent "Warcraft III" = Warcraft III: wszystkie elementy [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Antivirus Events ] Error - 2008-01-19 11:02:16 | Computer Name = BART | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of K:\DCIM\100CANON\IMG_2134.JPG failed, 00000015. Error - 2009-11-06 16:19:41 | Computer Name = BART | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of http://suggestqueries.google.com/complete/search?hl=pl&client=youtube&hjson=t&ds=yt&jsonp=window.yt.www.suggest.handleResponse&q=dbz%20parody%20gohan%20vs%20cellgoh&cp=27 failed, 0000A413. Error - 2009-11-07 18:48:28 | Computer Name = BART | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Documents and Settings\Bartek\Dane aplikacji\Opera\Opera\profile\cache4\opr16S0E.js failed, 0000A413. [ Application Events ] Error - 2009-10-04 11:17:33 | Computer Name = BART | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd opera.exe, wersja 9.24.8816.0, moduł powodujący błąd opera.dll, wersja 9.24.8816.0, adres błędu 0x002a98d7. Error - 2009-10-05 18:09:00 | Computer Name = BART | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd winmugen_debug.exe, wersja 0.0.0.0, moduł powodujący błąd alleg40.dll, wersja 4.0.0.0, adres błędu 0x00061bea. Error - 2009-10-11 11:23:08 | Computer Name = BART | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd war3.exe, wersja 1.24.1.6374, moduł powodujący błąd , wersja 0.0.0.0, adres błędu 0x00000000. Error - 2009-10-20 12:19:40 | Computer Name = BART | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca Opera.exe, wersja 9.24.8816.0, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2009-11-24 17:08:01 | Computer Name = BART | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca Opera.exe, wersja 9.24.8816.0, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2009-11-03 14:04:05 | Computer Name = BART | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd _ins5576._mp, wersja 5.53.168.0, moduł powodujący błąd getinfo.dll, wersja 0.0.0.0, adres błędu 0x00004343. Error - 2009-11-03 14:04:29 | Computer Name = BART | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd _ins5576._mp, wersja 5.53.168.0, moduł powodujący błąd getinfo.dll, wersja 0.0.0.0, adres błędu 0x00004343. Error - 2009-11-09 19:39:59 | Computer Name = BART | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca WinRAR.exe, wersja 3.61.0.0, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2009-11-14 10:11:44 | Computer Name = BART | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd war3.exe, wersja 1.24.1.6374, moduł powodujący błąd , wersja 0.0.0.0, adres błędu 0x00000000. Error - 2009-11-16 18:25:35 | Computer Name = BART | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gg.exe, wersja 7.7.0.3746, moduł powodujący błąd gg.exe, wersja 7.7.0.3746, adres błędu 0x00133a47. [ System Events ] Error - 2009-11-16 11:08:41 | Computer Name = BART | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: kl1 Error - 2009-11-16 17:52:48 | Computer Name = BART | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi WinFast CX2388x WDM Video Capture. z powodu następującego błędu: %%1058 Error - 2009-11-16 17:52:48 | Computer Name = BART | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi WinFast CX2388x WDM TVTuner. z powodu następującego błędu: %%1058 Error - 2009-11-16 17:52:48 | Computer Name = BART | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: kl1 Error - 2009-11-17 04:22:12 | Computer Name = BART | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi WinFast CX2388x WDM Video Capture. z powodu następującego błędu: %%1058 Error - 2009-11-17 04:22:12 | Computer Name = BART | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi WinFast CX2388x WDM TVTuner. z powodu następującego błędu: %%1058 Error - 2009-11-17 04:22:15 | Computer Name = BART | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: kl1 Error - 2009-11-17 11:19:44 | Computer Name = BART | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi WinFast CX2388x WDM Video Capture. z powodu następującego błędu: %%1058 Error - 2009-11-17 11:19:44 | Computer Name = BART | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi WinFast CX2388x WDM TVTuner. z powodu następującego błędu: %%1058 Error - 2009-11-17 11:19:52 | Computer Name = BART | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: kl1 < End of report >

**Posty:** 2183 · przez **NieWiem** 17 Lis 2009, 19:49

Thanos napisał(a):Jakieś sugestie??

Tak, popraw loga w tagi [code] i daj mi tego drugiego, bo to jest extras, a ja potrzebuję OTL.txt

**Posty:** 7 · przez **Thanos** 17 Lis 2009, 20:53

Kod: Zaznacz wszystko: OTL logfile created on: 2009-11-17 17:00:27 - Run 1 OTL by OldTimer - Version 3.1.6.0 Folder = C:\Documents and Settings\Bartek\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,23 Mb Total Physical Memory | 594,13 Mb Available Physical Memory | 58,06% Memory free 2,41 Gb Paging File | 2,06 Gb Available in Paging File | 85,66% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 2,67 Gb Free Space | 13,69% Space Free | Partition Type: NTFS Drive D: | 39,06 Gb Total Space | 4,59 Gb Free Space | 11,75% Space Free | Partition Type: NTFS Drive E: | 90,45 Gb Total Space | 5,77 Gb Free Space | 6,38% Space Free | Partition Type: NTFS Drive F: | 494,24 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: BART Current User Name: Bartek Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-11-17 16:57:02 | 00,529,408 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bartek\Pulpit\OTL.exe PRC - [2009-03-10 21:18:20 | 00,970,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WgaTray.exe PRC - [2009-02-05 21:08:45 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe PRC - [2009-02-05 21:08:40 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe PRC - [2009-02-05 21:08:26 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe PRC - [2009-02-05 21:06:04 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe PRC - [2009-02-05 21:01:25 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe PRC - [2008-10-16 18:22:20 | 00,464,264 | ---- | M] () -- C:\Program Files\AskBarDis\bar\bin\AskService.exe PRC - [2008-04-14 18:21:50 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2008-04-14 18:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-03-20 11:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- D:\Program Files\Gadu-Gadu\gg.exe PRC - [2008-03-20 11:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- D:\Program Files\Gadu-Gadu\gg.exe PRC - [2007-10-10 06:29:14 | 01,250,816 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe PRC - [2007-05-18 02:49:14 | 00,479,232 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe PRC - [2007-05-18 02:49:14 | 00,479,232 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe PRC - [2007-01-30 00:52:06 | 00,688,128 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe PRC - [2007-01-23 14:44:00 | 00,101,136 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.exe PRC - [2006-10-20 21:21:24 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe PRC - [2004-12-13 03:34:32 | 00,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2009-11-17 16:57:02 | 00,529,408 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bartek\Pulpit\OTL.exe MOD - [2008-04-14 21:29:10 | 01,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll MOD - [2008-04-14 18:20:31 | 00,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\framedyn.dll MOD - [2007-10-24 01:47:56 | 00,635,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll MOD - [2007-10-24 01:47:56 | 00,558,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll MOD - [2007-01-30 00:47:46 | 00,044,544 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\lgscroll.dll MOD - [2007-01-30 00:46:56 | 00,057,344 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\gamehook.dll MOD - [2006-12-21 13:30:44 | 00,102,400 | ---- | M] (Gadu-Gadu S.A.) -- D:\Program Files\Gadu-Gadu\ggwhook.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-02-05 21:08:40 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus) SRV - [2009-02-05 21:08:26 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner) SRV - [2009-02-05 21:06:04 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner) SRV - [2009-02-05 21:01:25 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv) SRV - [2008-10-16 18:22:20 | 00,464,264 | ---- | M] () -- C:\Program Files\AskBarDis\bar\bin\AskService.exe -- (ASKService) SRV - [2008-04-14 18:20:44 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll -- (helpsvc) SRV - [2008-02-25 18:55:24 | 00,410,984 | ---- | M] (Cyanide) -- C:\WINDOWS\System32\pr2agqwb.exe -- (pr2agqwb) SRV - [2007-10-24 01:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007-10-24 01:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state) SRV - [2007-05-18 02:49:14 | 00,479,232 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller) SRV - [2007-05-17 20:05:00 | 00,520,192 | ---- | M] () -- C:\WINDOWS\system32\ati2sgag.exe -- (ATI Smart) SRV - [2006-10-30 03:34:02 | 00,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing) SRV - [2006-10-30 03:33:58 | 00,741,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc) SRV - [2006-10-20 21:21:24 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0) SRV - [2005-04-03 23:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004-12-13 03:34:32 | 00,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) SRV - [2003-07-28 19:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-02-05 21:08:10 | 00,094,032 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2) DRV - [2009-02-05 21:07:23 | 00,114,768 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP) DRV - [2009-02-05 21:07:12 | 00,020,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2009-02-05 21:06:20 | 00,051,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi) DRV - [2009-02-05 21:06:10 | 00,023,152 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr) DRV - [2009-02-05 21:05:11 | 00,026,944 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2008-04-16 16:53:49 | 00,025,280 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2008-04-13 19:45:29 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-02-25 18:55:00 | 00,064,616 | ---- | M] (Cyanide) -- C:\WINDOWS\system32\drivers\pe3agqwb.sys -- (pe3agqwb) DRV - [2008-02-25 18:54:25 | 00,068,208 | ---- | M] (Cyanide) -- C:\WINDOWS\system32\drivers\ps7agqwb.sys -- (ps7agqwb) DRV - [2007-11-13 11:25:55 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2007-10-29 18:55:35 | 00,042,512 | ---- | M] (CACE Technologies) -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF) DRV - [2007-10-29 17:53:57 | 00,685,816 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2007-10-29 17:30:39 | 00,278,984 | ---- | M] () -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2007-10-29 17:30:39 | 00,025,416 | ---- | M] () -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2007-05-18 02:57:34 | 02,164,736 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2007-03-08 00:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2007-01-23 14:45:00 | 00,034,576 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2007-01-23 14:45:00 | 00,033,296 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2007-01-23 14:44:00 | 00,020,496 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd) DRV - [2005-06-28 08:24:00 | 00,163,584 | ---- | M] (Leadtek Research Inc.) -- C:\WINDOWS\system32\drivers\cx88vid.sys -- (CX23880) DRV - [2005-06-28 08:22:00 | 00,030,976 | ---- | M] (Leadtek Research Inc.) -- C:\WINDOWS\system32\drivers\cx88tune.sys -- (CXTUNE) DRV - [2005-06-28 08:21:00 | 00,009,728 | ---- | M] (Leadtek Research Inc.) -- C:\WINDOWS\system32\drivers\cxavxbar.sys -- (CXAVXBAR) DRV - [2004-08-23 09:21:12 | 00,821,760 | R--- | M] (C-Media Inc) -- C:\WINDOWS\system32\drivers\cmuda.sys -- (cmuda) DRV - [2004-03-29 14:45:36 | 00,073,600 | ---- | M] (VIA Technologies inc,.ltd) -- C:\WINDOWS\system32\drivers\viamraid.sys -- (viamraid) DRV - [2003-07-02 03:42:00 | 00,027,904 | ---- | M] (VIA Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1) DRV - [2001-08-18 00:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2001-08-17 21:13:08 | 00,027,165 | ---- | M] (VIA Technologies, Inc. ) -- C:\WINDOWS\system32\drivers\fetnd5.sys -- (FETNDIS) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1060284298-1425521274-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-1060284298-1425521274-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-1060284298-1425521274-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKU\S-1-5-21-1060284298-1425521274-725345543-1003\S-1-5-21-1060284298-1425521274-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2007-11-20 18:53:05 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2008-10-01 15:55:58 | 00,000,000 | ---D | M] [2009-03-24 17:09:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\mlxcy3gq.default\extensions [2007-08-03 20:11:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\mlxcy3gq.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2009-03-24 17:09:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\mlxcy3gq.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2008-07-10 20:48:29 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2007-10-27 10:41:52 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2007-06-07 12:50:35 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} [2007-08-05 15:26:49 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} [2007-10-05 17:11:19 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} [2007-10-27 10:41:52 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\inspector@mozilla.org [2007-10-27 10:41:52 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org [2007-10-27 10:41:46 | 00,066,408 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\jar50.dll [2007-10-27 10:41:46 | 00,054,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\jsd3250.dll [2007-10-27 10:41:46 | 00,034,688 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\myspell.dll [2007-10-27 10:41:46 | 00,046,456 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\spellchk.dll [2007-10-27 10:41:46 | 00,171,880 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\xpinstal.dll [2008-09-16 01:11:52 | 01,335,600 | ---- | M] (DivX,Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll [2008-09-16 01:12:12 | 00,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll [2007-10-27 10:41:50 | 00,022,400 | ---- | M] (mozilla.org) -- C:\Program Files\Mozilla Firefox\plugins\npnul32.dll [2003-07-15 05:56:52 | 00,013,888 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL [2004-12-14 11:19:18 | 00,057,344 | R--- | M] (Adobe Systems Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll [2007-07-31 17:50:41 | 00,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll [2007-07-31 17:50:41 | 00,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll [2007-07-31 17:50:41 | 00,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll [2007-07-31 17:50:41 | 00,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll [2007-07-31 17:50:41 | 00,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll [2007-07-31 17:50:41 | 00,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll [2007-07-31 17:50:41 | 00,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll [2007-08-19 19:30:56 | 00,000,904 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2007-08-19 19:30:56 | 00,002,368 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google.xml [2007-08-19 19:30:56 | 00,000,926 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2007-08-19 19:30:56 | 00,001,300 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pbi-pl.xml [2007-08-19 19:30:56 | 00,000,866 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2007-08-19 19:30:56 | 00,000,942 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2007-08-19 19:30:56 | 00,001,693 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.7.4.dll (BitComet) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (no name) - {CAB01E82-0390-42AB-B5F4-D710E4FB83D7} - C:\WINDOWS\System32\wvUkjJdb.dll File not found O2 - BHO: (no name) - {F50B3F5E-856E-4757-9BB1-B35D46CA7719} - C:\WINDOWS\System32\efcDVonk.dll File not found O3 - HKLM\..\Toolbar: (ZoneAlarm Spy Blocker Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003\..\Toolbar\WebBrowser: (ZoneAlarm Spy Blocker Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O4 - HKLM..\Run: [14790004] C:\Documents and Settings\All Users\Dane aplikacji\14790004\14790004.exe File not found O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [Data File] File not found O4 - HKLM..\Run: [msavsc.exe] C:\Program Files\Microsoft Security Adviser\msavsc.exe File not found O4 - HKLM..\Run: [msctrl.exe] C:\Program Files\Microsoft Security Adviser\msctrl.exe File not found O4 - HKLM..\Run: [msfw.exe] C:\Program Files\Microsoft Security Adviser\msfw.exe File not found O4 - HKLM..\Run: [msiemon.exe] C:\Program Files\Microsoft Security Adviser\msiemon.exe File not found O4 - HKLM..\Run: [mssadv.exe] File not found O4 - HKLM..\Run: [msscan.exe] C:\Program Files\Microsoft Security Adviser\msscan.exe File not found O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [ColdWare] C:\WINDOWS\msa.exe File not found O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [DAEMON Tools] C:\Program Files\DAEMON Tools [2007-10-29 21:39:32 | 00,000,000 | ---D | M] O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [Gadu-Gadu] D:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [Monopod] C:\DOCUME~1\Bartek\USTAWI~1\Temp\b.exe File not found O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [msavsc.exe] C:\Program Files\Microsoft Security Adviser\msavsc.exe File not found O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [msctrl.exe] C:\Program Files\Microsoft Security Adviser\msctrl.exe File not found O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [msfw.exe] C:\Program Files\Microsoft Security Adviser\msfw.exe File not found O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [msiemon.exe] C:\Program Files\Microsoft Security Adviser\msiemon.exe File not found O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [mssadv.exe] File not found O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [msscan.exe] C:\Program Files\Microsoft Security Adviser\msscan.exe File not found O4 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003..\Run: [RGSC] E:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (Take-Two Interactive Software, Inc.) O4 - HKLM..\RunServices: [Data File] File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177 O7 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 1 O7 - HKU\S-1-5-21-1060284298-1425521274-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1 O8 - Extra context menu item: &D&ownload &with BitComet - C:\Program Files\BitComet\BitComet.exe (http://www.BitComet.com) O8 - Extra context menu item: &D&ownload all video with BitComet - C:\Program Files\BitComet\BitComet.exe (http://www.BitComet.com) O8 - Extra context menu item: &D&ownload all with BitComet - C:\Program Files\BitComet\BitComet.exe (http://www.BitComet.com) O8 - Extra context menu item: E&ksport do programu Microsoft Excel - C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll (Sun Microsystems, Inc.) O9 - Extra Button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.7.4.dll (BitComet) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\NetLimiter\nl_lsp.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\NetLimiter\nl_lsp.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\NetLimiter\nl_lsp.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\NetLimiter\nl_lsp.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\NetLimiter\nl_lsp.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\NetLimiter\nl_lsp.dll () O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://go.divx.com/plugin/DivXBrowserPlugin.cab (DivXBrowserPlugin Object) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.233.128.18 192.168.0.1 O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O20 - Winlogon\Notify\efcDVonk: DllName - efcDVonk.dll - File not found O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {F50B3F5E-856E-4757-9BB1-B35D46CA7719} - C:\WINDOWS\System32\efcDVonk.dll File not found O30 - LSA: Authentication Packages - (C:\WINDOWS\system32\wvUkjJdb) - File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-06-03 17:04:20 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2001-04-18 16:23:00 | 00,000,041 | R--- | M] () - F:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{22f72482-b8f6-11de-b32f-000b6a9a135e}\Shell - "" = AutoRun O33 - MountPoints2\{22f72482-b8f6-11de-b32f-000b6a9a135e}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -- File not found O33 - MountPoints2\K\Shell - "" = AutoRun O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\LaunchU3.exe -- File not found O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found O35 - comfile [open] -- "%1" %* File not found O35 - exefile [open] -- "%1" %* File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-11-17 16:57:02 | 00,529,408 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Bartek\Pulpit\OTL.exe [2009-11-16 23:48:31 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2009-11-16 23:47:49 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Bartek\Pulpit\HJTInstall.exe [10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-11-24 22:19:44 | 00,019,390 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\armin-van-buuren-imagine.jpg [2009-11-21 15:18:09 | 01,089,268 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-11-21 15:18:09 | 00,490,808 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2009-11-21 15:18:09 | 00,432,856 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009-11-21 15:18:09 | 00,083,988 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2009-11-21 15:18:09 | 00,067,560 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009-11-17 17:00:00 | 00,000,282 | -H-- | M] () -- C:\WINDOWS\tasks\{BB65B0FB-5712-401b-B616-E69AC55E2757}.job [2009-11-17 17:00:00 | 00,000,242 | -H-- | M] () -- C:\WINDOWS\tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job [2009-11-17 16:57:02 | 00,529,408 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bartek\Pulpit\OTL.exe [2009-11-17 16:19:46 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-11-17 16:19:32 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-11-17 16:19:19 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-11-17 09:31:10 | 05,767,168 | -H-- | M] () -- C:\Documents and Settings\Bartek\NTUSER.DAT [2009-11-17 09:31:10 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\Bartek\ntuser.ini [2009-11-16 23:48:32 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\HijackThis.lnk [2009-11-16 23:47:49 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Bartek\Pulpit\HJTInstall.exe [2009-11-16 18:57:28 | 02,109,074 | -H-- | M] () -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-11-14 15:14:07 | 00,000,557 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\Gadu-Gadu.lnk [2009-11-10 21:56:19 | 00,000,715 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\Loki.lnk [2009-11-07 20:12:54 | 00,000,641 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\The House Of The Dead.lnk [2009-11-07 20:12:14 | 18,155,262 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\The House Of The Dead_[MoiDisk.ru].exe [2009-11-07 19:49:49 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-11-03 19:16:19 | 00,000,844 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Vampire The Masquerade - Redemption (CD 2 required).lnk [2009-11-03 19:16:10 | 00,000,938 | ---- | M] () -- C:\WINDOWS\vampire.ini [2009-10-29 23:41:25 | 00,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn [2009-10-19 16:01:26 | 00,041,109 | ---- | M] () -- C:\Documents and Settings\Bartek\Pulpit\93e3d42599.jpeg [10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2009-11-24 22:19:44 | 00,019,390 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\armin-van-buuren-imagine.jpg [2009-11-16 23:48:32 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\HijackThis.lnk [2009-11-14 15:14:07 | 00,000,557 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\Gadu-Gadu.lnk [2009-11-10 21:56:18 | 00,000,715 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\Loki.lnk [2009-11-07 20:12:54 | 00,000,641 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\The House Of The Dead.lnk [2009-11-07 20:11:28 | 18,155,262 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\The House Of The Dead_[MoiDisk.ru].exe [2009-11-03 19:16:19 | 00,000,844 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Vampire The Masquerade - Redemption (CD 2 required).lnk [2009-11-03 19:05:00 | 00,000,938 | ---- | C] () -- C:\WINDOWS\vampire.ini [2009-10-19 16:01:22 | 00,041,109 | ---- | C] () -- C:\Documents and Settings\Bartek\Pulpit\93e3d42599.jpeg [2009-04-17 20:06:17 | 00,066,936 | -HS- | C] () -- C:\WINDOWS\dlinfo_1.drv [2009-04-13 20:52:15 | 00,066,936 | -HS- | C] () -- C:\WINDOWS\dlinfo_0.drv [2009-04-13 20:01:18 | 00,000,398 | ---- | C] () -- C:\WINDOWS\SIERRA.INI [2008-10-28 17:40:48 | 00,173,552 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat [2008-09-16 01:14:24 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-09-16 01:12:02 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest [2008-09-16 01:12:02 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest [2008-09-16 01:11:10 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll [2008-09-05 18:24:15 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2008-08-30 13:57:06 | 00,001,755 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\QTSBandwidthCache [2008-05-17 23:36:14 | 00,847,360 | ---- | C] () -- C:\WINDOWS\System32\js32.dll [2008-04-29 11:54:36 | 01,483,179 | -HS- | C] () -- C:\WINDOWS\System32\fkxpgcpd.ini [2008-04-28 10:12:06 | 01,483,119 | -HS- | C] () -- C:\WINDOWS\System32\fnprruvu.ini [2008-04-27 10:11:08 | 01,484,168 | -HS- | C] () -- C:\WINDOWS\System32\hxugokie.ini [2008-04-27 10:09:11 | 00,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2008-04-27 10:08:53 | 00,000,022 | ---- | C] () -- C:\WINDOWS\pskt.ini [2008-04-26 20:19:56 | 00,176,867 | -HS- | C] () -- C:\WINDOWS\System32\bdJjkUvw.ini2 [2008-04-26 20:19:55 | 00,176,867 | -HS- | C] () -- C:\WINDOWS\System32\bdJjkUvw.ini [2007-12-12 15:17:58 | 00,000,598 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2007-10-29 18:40:15 | 00,009,728 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2007-10-29 17:30:39 | 00,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2007-10-29 17:30:39 | 00,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2007-08-04 22:52:01 | 00,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll [2007-08-04 22:52:01 | 00,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll [2007-08-04 22:52:01 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll [2007-07-26 20:37:58 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2007-07-23 09:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2007-07-23 09:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2007-07-23 09:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2007-07-23 09:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2007-06-13 10:55:44 | 00,000,091 | ---- | C] () -- C:\WINDOWS\CIV.INI [2007-06-03 19:46:14 | 00,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-06-03 19:30:42 | 00,107,520 | ---- | C] () -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007-06-03 18:55:21 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini [2007-06-03 17:48:00 | 00,028,672 | R--- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll [2007-06-03 17:47:53 | 00,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI [2007-06-03 17:47:52 | 00,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI [2007-06-03 17:47:44 | 00,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll [2007-06-03 17:47:13 | 00,003,014 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2007-06-03 17:47:12 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2007-06-03 17:32:40 | 00,685,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2007-06-03 17:19:44 | 02,109,074 | -H-- | C] () -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\IconCache.db [2007-06-03 17:09:57 | 00,044,576 | ---- | C] () -- C:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2007-06-03 17:08:45 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\Bartek\Dane aplikacji\desktop.ini [2006-07-02 22:37:12 | 00,030,808 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont [2006-07-02 22:37:10 | 00,026,489 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont [2006-04-19 20:21:28 | 00,029,779 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont [2006-04-19 20:21:28 | 00,026,040 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont [2005-12-01 17:02:18 | 00,009,728 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2005-11-05 17:46:26 | 00,000,537 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2004-03-30 21:47:44 | 00,049,152 | ---- | C] () -- C:\WINDOWS\System32\nl_msgs.dll [2004-03-30 21:47:41 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\nl_msgc.dll [2001-07-22 01:16:20 | 00,000,477 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-22 01:15:52 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [color=#E56717]========== LOP Check ==========[/color] [2009-08-03 22:48:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\14790004 [2007-10-29 21:22:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations [2009-03-28 10:18:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MailFrontier [2007-09-04 19:54:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2009-11-14 15:13:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\stamina [2009-07-27 21:59:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2007-07-07 21:21:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems [2009-03-06 19:53:49 | 00,000,000 | -HSD | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\.# [2007-12-21 14:51:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\COWON [2007-10-29 18:31:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\DAEMON Tools Pro [2007-09-04 20:01:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Datalayer [2007-11-10 18:09:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Gadu-Gadu [2007-06-12 14:28:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\LockTime [2007-12-20 23:02:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\My Games [2007-09-04 19:59:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Nokia [2007-09-08 17:23:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Nokia Multimedia Player [2007-11-10 18:08:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Opera [2007-09-04 19:54:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\PC Suite [2008-12-24 21:03:56 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\SecuROM [2008-08-15 21:12:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\Sudeki [2009-10-09 22:16:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Bartek\Dane aplikacji\uTorrent [2001-07-22 01:17:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-11-17 16:19:32 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [2009-11-17 17:00:00 | 00,000,242 | -H-- | M] () -- C:\WINDOWS\Tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job [2009-11-17 17:00:00 | 00,000,282 | -H-- | M] () -- C:\WINDOWS\Tasks\{BB65B0FB-5712-401b-B616-E69AC55E2757}.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:466F9D5D @Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:6B364EF3 < End of report >

**Posty:** 2183 · przez **NieWiem** 17 Lis 2009, 22:17

W logu wyraźne ślady od Vundo.

Przeczytaj uważnie instrukcję programu ComboFix, po czym wyłącz swój program antywirusowy, firewall i inne programy, które mogą zakłócać nawet pobieranie ComboFixa twierdząc, że jest wirusem. Nie jest! Spokojnie go ściągnij i zapisz na pulpicie.
Pobierz:
- LINK #1
- LINK #2
Pozamykaj wszystkie otwarte okna, komunikatory, programy. ComboFixowi nie powinno sie przeszkadzać.
Uruchom program z dwukliku (VISTA: prawoklik i 'uruchom jako administrator').
Pozwól mu spokojnie działać, nie klikaj ani nie stukaj w klawiaturę - to może spwodować zawieszenie się komputera.
Zalecane jest też instalowanie konsoli odzyskiwania, jeśli ComboFix o nią poprosi. Dzięki niej można odrolować zmiany w przypadku pomyłki narzędzia.
Jeśli będzie potrzeba - zgódź się na restart.
Kiedy program skończy, wytworzy loga (będzie on także w pliku C:\ComboFix.txt), którego wklej w odpowiedzi, pamiętając o tagach [code] lub na http://www.wklej.org.

**Posty:** 7 · przez **Thanos** 18 Lis 2009, 12:51

ejj... to ja znowu musze jakiś program sciągać i jak hijacka i tego co mi wcześniej podałeś właczyć...ehh ja chcialem raz dwa się z wirami uporać i przy okazji obszar powiadomień odzyskać bo ciagle jest na bialy polu na którym nic nie można wcisnać

Dodano Dzisiaj, 12:23:
Dzięki wielkie

działa już

Kod: Zaznacz wszystko: [code][quote]ComboFix 09-11-18.06 - Bartek 2009-11-18 12:07.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.1023.690 [GMT 1:00] Uruchomiony z: c:\documents and settings\Bartek\Pulpit\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\Bartek\Dane aplikacji\.# c:\program files\Microsoft Security Adviser c:\program files\Microsoft Security Adviser\msctrl.log c:\program files\Microsoft Security Adviser\mssadv.log c:\program files\RichVideoCodec c:\program files\Web Technologies c:\recycler\S-1-5-21-606747145-838170752-839522115-1003 c:\windows\BMe79fdb0f.txt c:\windows\BMe79fdb0f.xml c:\windows\pskt.ini c:\windows\system32\bdJjkUvw.ini c:\windows\system32\bdJjkUvw.ini2 c:\windows\system32\drivers\npf.sys c:\windows\system32\fkxpgcpd.ini c:\windows\system32\fnprruvu.ini c:\windows\system32\hxugokie.ini c:\windows\system32\ieuinit.inf c:\windows\system32\Packet.dll c:\windows\system32\wpcap.dll c:\windows\Tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job . ((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_NPF -------\Service_NPF ((((((((((((((((((((((((( Pliki utworzone od 2009-10-18 do 2009-11-18 ))))))))))))))))))))))))))))))) . 2009-11-18 11:07 . 2004-03-29 13:45 73600 ----a-w- c:\windows\system32\drivers\viamraid.sys 2009-11-18 11:07 . 2008-04-13 18:40 96512 -c--a-w- c:\windows\system32\dllcache\atapi.sys 2009-11-18 11:07 . 2008-04-13 18:40 96512 ----a-w- c:\windows\system32\drivers\atapi.sys 2009-11-16 22:48 . 2009-11-16 22:48 -------- d-----w- c:\program files\Trend Micro . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-11-21 14:18 . 2001-10-26 18:15 83988 ----a-w- c:\windows\system32\perfc015.dat 2009-11-21 14:18 . 2001-10-26 18:15 490808 ----a-w- c:\windows\system32\perfh015.dat 2009-11-18 11:13 . 2008-11-01 14:13 345272 ----a-w- c:\documents and settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat 2009-11-14 14:13 . 2008-10-21 19:07 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\stamina 2009-10-09 21:16 . 2009-04-13 17:40 -------- d-----w- c:\documents and settings\Bartek\Dane aplikacji\uTorrent 2009-08-27 16:16 . 2007-11-25 17:25 207505 -c--a-w- c:\windows\War3Unin.dat 2007-10-27 09:41 . 2007-06-03 17:48 66408 ----a-w- c:\program files\mozilla firefox\components\jar50.dll 2007-10-27 09:41 . 2007-06-03 17:48 54112 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll 2007-10-27 09:41 . 2007-06-03 17:48 34688 ----a-w- c:\program files\mozilla firefox\components\myspell.dll 2007-10-27 09:41 . 2007-06-03 17:48 46456 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll 2007-10-27 09:41 . 2007-06-03 17:48 171880 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll 2009-04-13 19:52 . 2009-04-13 19:52 66936 --sha-w- c:\windows\dlinfo_0.drv 2009-04-17 19:06 . 2009-04-17 19:06 66936 --sha-w- c:\windows\dlinfo_1.drv . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}] 2008-10-16 17:22 333192 ----a-w- c:\program files\AskBarDis\bar\bin\askBar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-10-16 333192] [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}] [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-10-16 333192] [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}] [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools"="c:\program files\DAEMON Tools -lang 1033" [X] "RGSC"="e:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" [2008-12-25 306088] "Gadu-Gadu"="d:\program files\Gadu-Gadu\gg.exe" [2008-03-20 2127296] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu Start\Programy\Autostart\ Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2007-6-3 688128] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "ose"=3 (0x3) "idsvc"=3 (0x3) "IDriverT"=3 (0x3) [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "d:\\Program Files\\Warcraft III\\Warcraft III.exe"= "c:\\Program Files\\Opera\\Opera.exe"= "d:\\Program Files\\eMule\\emule.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "e:\\Program Files\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "d:\\Program Files\\Diablo\\diablo.exe"= "c:\\Documents and Settings\\Bartek\\Pulpit\\utorrent.exe"= "e:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe"= "e:\\Program Files\\Cyanide\\Loki\\Loki.exe"= "e:\\Program Files\\Cyanide\\Loki\\Autorun\\AutoRun.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "9636:TCP"= 9636:TCP:BitComet 9636 TCP "9636:UDP"= 9636:UDP:BitComet 9636 UDP "14137:TCP"= 14137:TCP:BitComet 14137 TCP "14137:UDP"= 14137:UDP:BitComet 14137 UDP R0 pe3agqwb;Loki Environment Driver (pe3agqwb);c:\windows\system32\drivers\pe3agqwb.sys [2008-02-25 64616] R0 ps7agqwb;Loki Synchronization Driver (ps7agqwb);c:\windows\system32\drivers\ps7agqwb.sys [2008-02-25 68208] R2 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe [2009-03-24 464264] S2 pr2agqwb;Loki Drivers Auto Removal (pr2agqwb);c:\windows\system32\pr2agqwb.exe svc --> c:\windows\system32\pr2agqwb.exe svc [?] S3 WFIOCTL;WFIOCTL;\??\c:\program files\WinFast\WFTVFM\WFIOCTL.SYS --> c:\program files\WinFast\WFTVFM\WFIOCTL.SYS [?] --- Inne Usługi/Sterowniki w Pamięci --- *NewlyCreated* - CLASSPNP_2 *Deregistered* - CLASSPNP_2 *Deregistered* - mbr . Zawartość folderu 'Zaplanowane zadania' . . ------- Skan uzupełniający ------- . IE: &D&ownload &with BitComet - c:\program files\BitComet\BitComet.exe/AddLink.htm IE: &D&ownload all video with BitComet - c:\program files\BitComet\BitComet.exe/AddVideo.htm IE: &D&ownload all with BitComet - c:\program files\BitComet\BitComet.exe/AddAllLink.htm IE: E&ksport do programu Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 LSP: c:\program files\NetLimiter\nl_lsp.dll Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll FF - ProfilePath - c:\documents and settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\mlxcy3gq.default\ FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll . - - - - USUNIĘTO PUSTE WPISY - - - - BHO-{CAB01E82-0390-42AB-B5F4-D710E4FB83D7} - c:\windows\system32\wvUkjJdb.dll HKCU-Run-ColdWare - c:\windows\msa.exe HKLM-Run-14790004 - c:\documents and settings\All Users\Dane aplikacji\14790004\14790004.exe HKLM-Run-Data File - vdehost.exe Notify-efcDVonk - efcDVonk.dll AddRemove-AP Guitar Tuner 1.02 - c:\program files\Audio Phonics ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-11-18 12:15 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0[/quote][/code]

Dodano Dzisiaj, 12:40:
Czy coś jeszcze mi pozostało?

**Posty:** 2183 · przez **NieWiem** 18 Lis 2009, 17:43

Log jest ucięty. Jeśli się nie mieści, proszę wkleić go na www.wklej.org, a w poście dać tylko linka.

Kto jest na forum