Nie działa myszka pod systemem windows 7

**Posty:** 3 · przez **rafalp** 07 Gru 2013, 15:00

Witam, mam taki problem. Brat siedział na komputerze i instalował jakieś programy - po tym wszystkim myszka odmówiła posłuszeństwa i przestała działać. Nie działa również bootowanie z płyty Windows 7 ( płyta sprawna instalowałem wielokrotnie, napęd również sprawny = bootowanie przestawione na napęd ). Myszka nie jest uszkodzona ponieważ odpalając opcję naprawiania z plyty win7 reaguje normalnie - dopiero gdy załaduje się normalnie system Win 7 Ultimate 32-bit przestaje reagować. Załączam logi z OTL

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2013-12-07 13:49:21 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Rafal\Desktop Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,93 Gb Available Physical Memory | 46,36% Memory free 4,00 Gb Paging File | 2,69 Gb Available in Paging File | 67,28% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 117,19 Gb Total Space | 36,38 Gb Free Space | 31,04% Space Free | Partition Type: NTFS Drive D: | 117,19 Gb Total Space | 20,86 Gb Free Space | 17,80% Space Free | Partition Type: NTFS Drive E: | 117,19 Gb Total Space | 110,61 Gb Free Space | 94,38% Space Free | Partition Type: NTFS Drive F: | 114,19 Gb Total Space | 99,88 Gb Free Space | 87,47% Space Free | Partition Type: NTFS Drive H: | 3,41 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: RAFAL-KOMPUTER | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-1079858237-1872574704-3250432788-1001\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) http [open] -- Reg Error: Key error. https [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [ACDSee Pro 6.Manage] -- "E:\ACD Systems\ACDSee Pro\6.0\ACDSeeQVPro6.exe" "%1" (ACD Systems International Inc.) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [Digital Photo Professional] -- C:\Program Files\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [napiprojekt] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" () Directory [napiprojekt0] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" -pobierz_ang () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0652E555-5925-4980-B581-E18FDD4C22F0}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | "{29170A1B-A1F0-46AE-AC03-E9BAEBB71C96}" = lport=10243 | protocol=6 | dir=in | app=system | "{2F08904A-6178-4B62-9E17-EDDF20296C8D}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{3C4BDD64-8E57-45D3-A1CE-360B89571AB4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{4BBB28FC-18AD-43B8-AA98-C17FB327C088}" = rport=139 | protocol=6 | dir=out | app=system | "{4E669DC1-6F91-4894-A781-4B16CB33AF2E}" = lport=138 | protocol=17 | dir=in | app=system | "{55ADAB8A-973A-47A5-BD12-6BC98D3E5C6E}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{590777C3-B93D-45E8-BC39-1D7F6A4C0E62}" = rport=445 | protocol=6 | dir=out | app=system | "{783D4B8D-26C3-4E30-BFC3-8EA9258EF92B}" = lport=137 | protocol=17 | dir=in | app=system | "{7D156699-9AFE-41A2-9957-EFE8CF06C711}" = lport=2869 | protocol=6 | dir=in | app=system | "{8B8706F6-31EB-460E-BF86-F055ECB930D8}" = rport=10243 | protocol=6 | dir=out | app=system | "{9441721D-DF55-43BD-9EB2-A11E2F1B7DF9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{9BE5D241-5B82-4849-AE18-927A302CDF3A}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{A2FDE086-D6F8-4257-B5AB-F88652CD484F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{B77F1995-C3EF-4C7C-87D5-815BBC767CB7}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{B82B4D1F-18AD-411B-8FB4-C3D55AB02CA5}" = lport=445 | protocol=6 | dir=in | app=system | "{C98B5A4D-AA03-4938-B119-CEF30FC70C30}" = lport=139 | protocol=6 | dir=in | app=system | "{CB2F57D4-D0BE-4564-88EC-EBB80F4DEF42}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{CE648800-9128-4C7F-818F-18C908DBCFC5}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{D0A27B13-1DD5-4D76-8657-C68E710BFB13}" = rport=137 | protocol=17 | dir=out | app=system | "{D2CCD054-67D5-48F5-89EF-AAD2924782C4}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{F1A8BAC0-A0B4-4AA9-BDE7-9A9112319525}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{F5EA3135-D033-49E7-84CE-1DE1F3414E72}" = rport=138 | protocol=17 | dir=out | app=system | "{F73273B6-FFCD-4BA7-91C1-61149ED85727}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{FCC46DA3-59B7-47E1-9422-715AC3970234}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{03204C53-1636-457D-9A95-9454733E06A4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{074BBDD9-39C1-4A0B-A1D8-C6A3928E76B1}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | "{0878328B-479D-4E6D-8D00-892B8BE3AAEE}" = protocol=58 | dir=in | app=system | "{09017FF7-DBC7-4CD4-9C12-8F9B82DFB775}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | "{10014A0A-D6C4-4CEE-BD59-510D9839FA9D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{12A9945C-AC53-4A7A-BC3D-87439E3F391F}" = dir=out | name=core networking - system ip core | "{1692CDAE-57B0-44F1-8CF4-587D4B6A3613}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version7\teamviewer_service.exe | "{16AA23B6-4970-4071-B684-62A880F91242}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | "{28AED82F-0B2B-44AA-B648-36C3399CA02F}" = protocol=17 | dir=in | app=c:\program files\firefly studios2\stronghold crusader\stronghold_crusader_extreme.exe | "{2BEECE95-BE89-441B-9572-F148A1849440}" = protocol=6 | dir=in | app=c:\program files\maxthon3\bin\mxup.exe | "{2F4A96E4-0840-417D-9177-FFE9CA335BD9}" = dir=in | name=core networking - system ip core | "{318CA33D-53EF-4D51-BC35-D0ED961369A4}" = protocol=6 | dir=in | app=c:\program files\firefly studios2\stronghold crusader\stronghold_crusader_extreme.exe | "{3FDCA020-66BF-4BBC-A2DB-EBEB555FA4C2}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{4401882C-34C3-4B0A-9210-D8E204778C91}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{546C0FEA-FCA0-4FF7-ADCE-8DD715FC8E83}" = protocol=17 | dir=in | app=c:\program files\maxthon3\bin\maxthon.exe | "{592C7905-A7F5-423C-B721-7190C4D30A26}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version7\teamviewer.exe | "{5C43D03D-1847-4336-96F1-866FA6FC87D7}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{653960BF-8265-4CA7-A910-DE1CB984FFB4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{6B0224E0-5913-444B-A2AA-17229D7699DE}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{75D0E815-E507-41D9-A542-83C48FDDE522}" = dir=out | app=%programfiles%\adobe\adobe photoshop cc\photoshop.exe | "{75F78D68-E0B8-4E57-95DE-D078588917B0}" = protocol=6 | dir=in | app=c:\program files\firefly studios2\stronghold crusader\stronghold crusader.exe | "{791A7333-C5B8-4F7E-9CA9-4A9C858FDBAE}" = protocol=17 | dir=in | app=c:\program files\firefly studios2\stronghold crusader\stronghold crusader.exe | "{7C7AEFE2-7629-41E2-A125-0A3EEC599FCB}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{7F79B3B7-4BF5-4CFD-AC94-4CC35DD668CA}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | "{8B555FED-7843-4C2D-8291-A5997239DB9C}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | "{8EAD7AC2-0CA6-4119-B77F-47032E66F141}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{91440455-7F6B-452B-9BB4-07CF2E2DD495}" = protocol=6 | dir=out | app=system | "{97E7D679-8A98-4594-819C-E794C2E18790}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{983A73BB-AD15-4482-B1B3-CC46AC9C4AEB}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{9C8F38A0-D5BF-48B5-A4DC-63C71BBB97A6}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe | "{A3ECFF7A-1EFD-4994-B633-F1D2EBDF0D39}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{A64876DB-3123-443C-8221-CB5F3BE5ED87}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{AE5CE5D0-1825-4307-A142-877A9BA6BC10}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version7\teamviewer_service.exe | "{B0ED9389-E913-4730-8CC4-067CA172961A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{B1308EBF-8F61-43B8-8F0F-E44D48673304}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{B143ED7E-8A4D-4BA5-AC9C-E2E8A1B292AB}" = protocol=6 | dir=in | app=c:\program files\maxthon3\bin\maxthon.exe | "{B56EE165-5B48-465C-8175-46687C236981}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{BFE65998-B5DA-4563-B73F-7BD0A17AB7E8}" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "{C2B06B25-4767-41CB-B437-7BE92ED5D6C1}" = protocol=17 | dir=in | app=c:\program files\maxthon3\bin\mxup.exe | "{D5CCB85F-4854-4296-AD39-719A082BEBEC}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version7\teamviewer.exe | "{D610F796-232D-4622-BB04-EF62756C52E2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D851F4B3-3E45-48D9-803B-A3C952E3B8CE}" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "{E172A381-6A43-468E-8797-BD9A79D693F7}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | "{E4A1A7A3-77F3-415C-8D21-D9AECD960822}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{F5ADAA49-7A44-43A2-87C9-966A6EDCED17}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe | "TCP Query User{2229B5A6-61DB-4277-81F5-AEB7275A2DE7}C:\program files\wapster\wapster aqq\aqq.exe" = protocol=6 | dir=in | app=c:\program files\wapster\wapster aqq\aqq.exe | "UDP Query User{5FF80D4C-AB69-4B52-A453-E46F73360E40}C:\program files\wapster\wapster aqq\aqq.exe" = protocol=17 | dir=in | app=c:\program files\wapster\wapster aqq\aqq.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4 "{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4 "{0777E8B0-0BC4-4802-A6AA-0992716C78FD}" = Topaz Adjust 4 "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86 "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime "{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4 "{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F897E00-83A6-4133-54E1-58F8D35E61C2}" = AMD Catalyst Install Manager "{1FBAE18D-4DE4-47AA-83EC-D1B046F262DC}" = PDF Settings CC "{26050F54-3928-4D9C-849A-C48A9E831E6F}" = ChomikBox "{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 45 "{2CA0BED6-1CBA-4BDD-8608-BC9D639EA0F3}" = Twierdza Krzyżowiec Extreme "{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}" = Adobe Photoshop CC "{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player "{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4 "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{411F3ABA-2AB5-4799-AA19-6ADF0A8F7424}" = Adobe Setup "{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit "{441BCB52-5CBF-40DC-BE91-301ECF6701B1}" = EZ Mask "{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets "{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4 "{48D082B9-18F6-4426-AFAC-8B6A3E7021B1}" = Brother MFL-Pro Suite DCP-165C "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3 "{5C19E2DC-4CCF-3114-B40A-6E565987025F}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support "{627FA5D9-F02B-4290-8A6C-3E6C85D007C7}" = Gmail Notifier Pro "{671BFBC4-81B0-49B0-958F-765670D7E10A}" = Knoll Light Factory Photo 32 bit "{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4 "{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{70CB6C40-8DF1-11E1-BDCF-F04DA23A5C58}" = MSVCRT Redists "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7204BDEE-1A48-4D95-A964-44A9250B439E}" = Facebook Messenger 2.1.4814.0 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP "{80084D1D-EF5B-4A9F-B329-C6D4D8975859}" = EOSCount ActiveX control "{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4 "{8256F87F-8554-4457-8C3D-3F3324697D9F}" = Windows Live ID Sign-in Assistant "{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4 "{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Twierdza Krzyżowiec Extreme HD "{8F8E885E-6161-4F48-B5A0-041BF7E63F75}" = Light v3.5 for Adobe Photoshop "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86 "{94550F69-BEF6-4C77-B1D5-4EEDEF839C37}" = Windows Phone "{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4 "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9E82D1DB-3AFB-4D18-A221-081F1B4B4789}" = Topaz DeNoise 5 "{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AA82E5EF-70C2-41CB-8432-309078304CBB}" = Photo Common "{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4 "{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4 "{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6 "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module "{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter "{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6 "{C336AA55-BBA3-4908-886F-25CF6D302D13}" = Angry Birds Star Wars "{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4 "{C68EB8C6-FFCC-42A8-B509-18B331E220F7}" = EOSMSG "{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common "{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw "{D40B2C78-30CA-4A8F-A157-C86B491C73AF}" = ACDSee Pro 6 "{DEAD07C6-D070-43AB-A60D-D9ABE55E296D}_is1" = JPEGCrops 0.7.5 beta "{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4 "{EAE0D80B-8EC8-45C9-BD1E-5A8AC42F6686}" = Effects Suite 32-bit "{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4 "{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4 "{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All "{FE77909E-B782-4554-A92A-4D887CEF0ACC}_is1" = ALLMediaServer "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "AcMgrDDL" = DDL and DTS Connect License Activation "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe_3dcb365ab9e01871fb8c6f27b0ea079" = Adobe After Effects CS4 "ALchemy" = Creative ALchemy "ALLPlayer_is1" = ALLPlayer V5.X "AQQ" = WapSter AQQ "AudioCS" = Creative Audio Control Panel "BitComet" = BitComet 1.34 "CCleaner" = CCleaner "com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player "Console Launcher" = Creative Console Launcher "Creative AutoMode Switcher" = AutoMode Switcher "Creative MediaSource DVD-Audio Player" = Creative MediaSource DVD-Audio Player "Creative Sound Blaster Properties" = Creative Sound Blaster Properties "Creative Volume Panel" = Volume Panel "CSS FULL DZ [Oct 15 2007]" = CSS FULL DZ [Oct 15 2007] v18.1 "Desktop iCalendar Lite_is1" = Desktop iCalendar Lite "Digital Photo Professional" = Canon Utilities Digital Photo Professional 3.11 "Dolby Digital Live Pack" = Dolby Digital Live Pack "DTS Connect Pack" = DTS Connect Pack "ENTERPRISE" = Microsoft Office Enterprise 2007 "EOS Utility" = Canon Utilities EOS Utility "ESET Online Scanner" = ESET Online Scanner v3 "EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50 "Exif-Viewer" = Exif-Viewer 2.50 "EZ Mask" = EZ Mask "foobar2000" = foobar2000 v1.1.15 "Foxit PDF Editor" = Foxit PDF Editor "Foxit Reader_is1" = Foxit Reader "Google Chrome" = Google Chrome "ImageBrowser EX" = Canon Utilities ImageBrowser EX "ImgBurn" = ImgBurn "InstallShield_{671BFBC4-81B0-49B0-958F-765670D7E10A}" = Knoll Light Factory Photo 32 bit "InstallShield_{EAE0D80B-8EC8-45C9-BD1E-5A8AC42F6686}" = Effects Suite 32-bit "jStrip_is1" = jStrip 3.3 "Light v3.5 for Adobe Photoshop" = Light v3.5 for Adobe Photoshop "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.75.0.1300 "Maxthon3" = Maxthon 3 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended "Mozilla Firefox 25.0.1 (x86 pl)" = Mozilla Firefox 25.0.1 (x86 pl) "NapiProjekt_is1" = NapiProjekt (2.0.0.2151) "Neat Image_is1" = Neat Image v6.0 Pro+ "Nero7Lite_is1" = Nero 7 Lite 7.11.10.0 "Opanda IExif_is1" = Opanda IExif 2.3 "Opera 12.02.1578" = Opera 12.02 "PhotoStitch" = Canon Utilities PhotoStitch "PhotoZoom Pro 5 5.0.2" = PhotoZoom Pro 5 5.0.2 "Picasa 3" = Picasa 3 "Picture Style Editor" = Canon Utilities Picture Style Editor "PowerISO" = PowerISO "set.a.light 3D STUDIO" = set.a.light 3D STUDIO "SFBM" = SoundFont Bank Manager "TeamViewer 7" = TeamViewer 7 "The KMPlayer" = The KMPlayer (remove only) "THX_Console_Unicode" = THX Setup Console "Topaz Clarity" = Topaz Clarity "Total Uninstall 5_is1" = Total Uninstall 5.9.3 "Total Uninstall 6_is1" = Total Uninstall 6.2.4 "Viveza 2" = Viveza 2 "Windows 7 - Codec Pack" = Windows 7 Codec Pack 4.0.6 "WinRAR archiver" = WinRAR 4.20 (32-bit) "Xilisoft Video Converter Ultimate" = Xilisoft Video Converter Ultimate 6 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1079858237-1872574704-3250432788-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Polska lokalizacja Lightroom 4" = Polska lokalizacja Lightroom 4 [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2013-12-06 06:22:31 | Computer Name = Rafal-Komputer | Source = Brother BrLog | ID = 1001 Description = WDLMW BrtWDLMW: [2013/12/06 11:22:31.110]: [00002836]: lperrcode->api = 1 , lperrcode->code = 2 Error - 2013-12-06 06:22:32 | Computer Name = Rafal-Komputer | Source = Brother BrLog | ID = 1001 Description = WDLMW BrtWDLMW: [2013/12/06 11:22:32.610]: [00002836]: lperrcode->api = 1 , lperrcode->code = 2 Error - 2013-12-06 06:22:34 | Computer Name = Rafal-Komputer | Source = Brother BrLog | ID = 1001 Description = WDLMW BrtWDLMW: [2013/12/06 11:22:34.110]: [00002836]: lperrcode->api = 1 , lperrcode->code = 2 Error - 2013-12-06 06:22:35 | Computer Name = Rafal-Komputer | Source = Brother BrLog | ID = 1001 Description = WDLMW BrtWDLMW: [2013/12/06 11:22:35.610]: [00002836]: lperrcode->api = 1 , lperrcode->code = 2 Error - 2013-12-06 06:37:41 | Computer Name = Rafal-Komputer | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: setup.exe_Sony PC Companion, wersja: 17.0.0.717, sygnatura czasowa: 0x4cab8cfa Nazwa modułu powodującego błąd: PimData.dll_unloaded, wersja: 0.0.0.0, sygnatura czasowa: 0x50b39478 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x73142140 Identyfikator procesu powodującego błąd: 0x770 Godzina uruchomienia aplikacji powodującej błąd: 0x01cef26f1c616337 Ścieżka aplikacji powodującej błąd: C:\Users\Rafal\AppData\Local\Temp\{795F735F-B709-4FE4-BBAC-55B2C982C7E5}\setup.exe Ścieżka modułu powodującego błąd: PimData.dll Identyfikator raportu: 6e9cf095-5e62-11e3-9709-001fd090e95e Error - 2013-12-06 09:47:51 | Computer Name = Rafal-Komputer | Source = SideBySide | ID = 16842815 Description = Nie można wygenerować kontekstu aktywacji dla "c:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Błąd w pliku manifestu lub w pliku zasad "c:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" w wierszu 3. Wartość "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" atrybutu "version" elementu "assemblyIdentity" jest nieprawidłowa. Error - 2013-12-06 09:47:53 | Computer Name = Rafal-Komputer | Source = SideBySide | ID = 16842815 Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\WapSter\wapster aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program files\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu "language" elementu "assemblyIdentity" jest nieprawidłowa. Error - 2013-12-06 09:49:01 | Computer Name = Rafal-Komputer | Source = SideBySide | ID = 16842815 Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\spybot - search & destroy\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program files\spybot - search & destroy\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu "language" elementu "assemblyIdentity" jest nieprawidłowa. Error - 2013-12-07 08:30:35 | Computer Name = Rafal-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 513 Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddWin32ServiceFiles: Unable to back up image of service Sony PC Companion since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. . Error - 2013-12-07 08:33:13 | Computer Name = Rafal-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 4107 Description = Nie można wyodrębnić listy głównej innych firm z pliku cab automatycznej aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>, wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. . [ OSession Events ] Error - 2013-04-13 14:39:26 | Computer Name = Rafal-Komputer | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1365 seconds with 540 seconds of active time. This session ended with a crash. [ System Events ] Error - 2013-07-06 10:10:02 | Computer Name = Rafal-Komputer | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 16:05:40 na ?2013-?07-?06 było nieoczekiwane. Error - 2013-07-06 10:10:02 | Computer Name = Rafal-Komputer | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi MBAMProtector z powodu następującego błędu: %%31 Error - 2013-07-06 10:10:08 | Computer Name = Rafal-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa MBAMService zależy od usługi MBAMProtector, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2013-07-06 18:06:03 | Computer Name = Rafal-Komputer | Source = volsnap | ID = 393252 Description = Error - 2013-07-07 00:51:51 | Computer Name = Rafal-Komputer | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi MBAMProtector z powodu następującego błędu: %%31 Error - 2013-07-07 00:51:56 | Computer Name = Rafal-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa MBAMService zależy od usługi MBAMProtector, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2013-07-07 03:39:37 | Computer Name = Rafal-Komputer | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 09:19:01 na ?2013-?07-?07 było nieoczekiwane. Error - 2013-07-07 03:39:37 | Computer Name = Rafal-Komputer | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi MBAMProtector z powodu następującego błędu: %%31 Error - 2013-07-07 03:39:44 | Computer Name = Rafal-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa MBAMService zależy od usługi MBAMProtector, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2013-07-07 10:02:09 | Computer Name = Rafal-Komputer | Source = volsnap | ID = 393252 Description = < End of report >

Kod: Zaznacz wszystko: OTL logfile created on: 2013-12-07 13:49:21 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Rafal\Desktop Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,93 Gb Available Physical Memory | 46,36% Memory free 4,00 Gb Paging File | 2,69 Gb Available in Paging File | 67,28% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 117,19 Gb Total Space | 36,38 Gb Free Space | 31,04% Space Free | Partition Type: NTFS Drive D: | 117,19 Gb Total Space | 20,86 Gb Free Space | 17,80% Space Free | Partition Type: NTFS Drive E: | 117,19 Gb Total Space | 110,61 Gb Free Space | 94,38% Space Free | Partition Type: NTFS Drive F: | 114,19 Gb Total Space | 99,88 Gb Free Space | 87,47% Space Free | Partition Type: NTFS Drive H: | 3,41 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: RAFAL-KOMPUTER | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-12-07 13:47:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Rafal\Desktop\OTL.exe PRC - [2013-11-18 10:17:40 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2013-08-03 12:44:43 | 002,801,472 | ---- | M] (IntelliBreeze Software) -- C:\Program Files\Gmail Notifier Pro\GmailNotifierPro.exe PRC - [2013-04-28 15:21:52 | 001,082,368 | ---- | M] (Desksware) -- C:\Program Files\desksware\Desktop iCalendar Lite\Desktop iCalendar Lite.exe PRC - [2013-04-04 14:50:32 | 000,887,432 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe PRC - [2013-04-04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe PRC - [2013-02-25 15:50:10 | 000,704,520 | ---- | M] () -- C:\Windows\System32\C2MP\TrayMenu.exe PRC - [2012-09-18 08:14:26 | 012,802,864 | ---- | M] (www.BitComet.com) -- C:\Program Files\BitComet\BitComet.exe PRC - [2012-08-31 15:02:03 | 002,754,984 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe PRC - [2011-08-22 16:57:30 | 000,025,600 | ---- | M] (Creative Technology Ltd) -- C:\Windows\System32\Ctxfihlp.exe PRC - [2011-08-22 16:52:46 | 001,212,928 | ---- | M] (Creative Technology Ltd) -- C:\Windows\System32\CTxfispi.exe PRC - [2011-02-15 11:11:46 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\System32\nlssrv32.exe PRC - [2010-12-28 18:44:54 | 000,294,912 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe PRC - [2009-07-14 02:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009-07-14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-07-07 12:13:38 | 000,241,789 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Volume Panel\VolPanlu.exe PRC - [2009-03-30 14:00:54 | 000,221,184 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-11-18 10:17:40 | 003,363,952 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2013-02-25 15:50:10 | 000,704,520 | ---- | M] () -- C:\Windows\System32\C2MP\TrayMenu.exe MOD - [2012-10-21 21:59:04 | 001,128,448 | ---- | M] () -- C:\Program Files\Gmail Notifier Pro\DotNetOpenAuth.dll MOD - [2011-08-22 16:57:32 | 000,002,560 | ---- | M] () -- C:\Windows\CTXFIRES.DLL MOD - [2011-07-21 19:04:22 | 000,074,240 | ---- | M] () -- C:\Windows\System32\CmdRtr.DLL MOD - [2011-07-21 19:02:30 | 000,207,872 | ---- | M] () -- C:\Windows\System32\APOMngr.DLL MOD - [2009-07-14 09:07:21 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_pl_b77a5c561934e089\System.Windows.Forms.resources.dll MOD - [2009-07-14 09:07:18 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2009-07-14 05:46:13 | 001,670,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\965b1fa2decab0efc0c837ab7252bba1\Microsoft.VisualBasic.ni.dll MOD - [2009-07-14 05:45:49 | 000,997,888 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6e033d390dc7e9567b6960b0f530cf30\System.Management.ni.dll MOD - [2009-07-14 05:43:48 | 002,295,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\1762137638019a091020b3baf52f6de3\System.Core.ni.dll MOD - [2009-07-14 05:43:36 | 011,804,160 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\3871fc2b96345aa6f3be81d9e3c97160\System.Web.ni.dll MOD - [2009-07-14 05:43:30 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\4bdeb88758dccd625f4703ed77aaf348\System.Runtime.Remoting.ni.dll MOD - [2009-07-14 05:43:29 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c299b012a3fe92ae56d60fe415f63fff\System.EnterpriseServices.ni.dll MOD - [2009-07-14 05:43:29 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\97adf9fccd70327b839a92c3d038b101\System.Transactions.ni.dll MOD - [2009-07-14 05:43:28 | 006,618,624 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\7f457271e765b5d72f081942b829469c\System.Data.ni.dll MOD - [2009-07-14 05:43:04 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\fedf1ba58dced4f0b3f8c457648ceed9\System.Windows.Forms.ni.dll MOD - [2009-07-14 05:42:57 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ead6be8b410d56b5576b10e56af2c180\System.Drawing.ni.dll MOD - [2009-07-14 05:42:55 | 000,025,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\003d2d74243cab7e412d36416bbf0a3d\Accessibility.ni.dll MOD - [2009-07-14 05:42:40 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5dd9f783008543df3e642ff1e99de4e8\System.Xml.ni.dll MOD - [2009-07-14 05:42:37 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\4b1350e31ff09cc583b34854816d8036\System.Configuration.ni.dll MOD - [2009-07-14 05:42:36 | 007,949,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5ba3bf5367fc012300c6566f20cb7f54\System.ni.dll MOD - [2009-07-14 05:42:30 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8c1770d45c63cf5c462eeb945ef9aa5d\mscorlib.ni.dll MOD - [2009-06-10 22:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll MOD - [2009-06-10 22:23:17 | 002,933,248 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll MOD - [2009-02-27 15:38:20 | 000,139,264 | R--- | M] () -- C:\Program Files\Brother\BrUtilities\BrLogAPI.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2013-11-18 18:10:18 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-07-30 14:21:20 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2013-04-04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2013-02-28 17:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-12-25 21:27:06 | 000,063,232 | ---- | M] () [Unknown (-1) | Unknown] -- C:\Windows\System32\drivers\fcadd1a7570ea849.sys -- (fcadd1a7570ea849) SRV - [2012-10-02 19:31:42 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\DDLLicensing.exe -- (Creative Dolby Digital Live Pack Licensing Service) SRV - [2012-10-02 19:28:17 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2012-08-31 15:02:03 | 002,754,984 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7) SRV - [2011-02-15 11:11:46 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\System32\nlssrv32.exe -- (nlsX86cc) SRV - [2010-12-28 18:44:54 | 000,294,912 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2010-12-28 09:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE) SRV - [2010-02-19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-07-14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Rafal\AppData\Local\Temp\atidcmxx.sys -- (AtiDCM) DRV - [File Corrupted - Detail Data unreadable] [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wanarp.sys -- (WANARP) DRV - [2013-12-07 13:37:57 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy) DRV - [2013-12-06 11:21:15 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\seehcri.sys -- (seehcri) DRV - [2013-12-05 19:57:00 | 000,025,200 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggsemc.sys -- (ggsemc) DRV - [2013-12-05 19:57:00 | 000,012,400 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggflt.sys -- (ggflt) DRV - [2012-12-25 21:27:06 | 000,063,232 | ---- | M] () [Unknown (-1) | Unknown (-1) | Unknown] -- C:\Windows\System32\drivers\fcadd1a7570ea849.sys -- (fcadd1a7570ea849) DRV - [2012-09-21 20:09:06 | 004,261,224 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC) DRV - [2012-09-21 20:09:00 | 000,310,504 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS) DRV - [2012-02-23 13:31:58 | 000,086,544 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService) DRV - [2011-08-22 18:24:44 | 001,178,200 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ha20x2k.sys -- (ha20x2k) DRV - [2011-08-22 18:24:34 | 000,095,832 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emupia2k.sys -- (emupia) DRV - [2011-08-22 18:24:22 | 000,158,808 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2011-08-22 18:24:12 | 000,014,424 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctprxy2k.sys -- (ctprxy2k) DRV - [2011-08-22 18:24:00 | 000,130,136 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctoss2k.sys -- (ossrv) DRV - [2011-08-22 18:23:50 | 000,347,144 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctdvda2k.sys -- (ctdvda2k) DRV - [2011-08-22 18:23:36 | 000,528,344 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctaud2k.sys -- (ctaud2k) DRV - [2011-08-22 18:23:24 | 000,511,064 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctac32k.sys -- (ctac32k) DRV - [2011-08-22 18:23:14 | 001,324,120 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTEXFIFX.sys -- (CTEXFIFX.SYS) DRV - [2011-08-22 18:23:14 | 001,324,120 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTEXFIFX.sys -- (CTEXFIFX) DRV - [2011-08-22 18:23:02 | 000,072,792 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTHWIUT.sys -- (CTHWIUT.SYS) DRV - [2011-08-22 18:23:02 | 000,072,792 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTHWIUT.sys -- (CTHWIUT) DRV - [2011-08-22 18:22:50 | 000,171,096 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CT20XUT.sys -- (CT20XUT.SYS) DRV - [2011-08-22 18:22:50 | 000,171,096 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CT20XUT.sys -- (CT20XUT) DRV - [2010-04-12 09:44:34 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu) DRV - [2009-07-14 02:19:11 | 000,019,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\wd.sys -- (Wd) DRV - [2009-07-14 02:19:10 | 000,445,008 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\Wdf01000.sys -- (Wdf01000) DRV - [2009-07-14 02:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2009-07-14 02:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2009-07-14 02:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\wimmount.sys -- (WIMMount) DRV - [2009-07-14 00:55:02 | 000,063,488 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\DRIVERS\wanarp.sys -- (Wanarpv6) DRV - [2009-07-14 00:55:02 | 000,016,384 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ws2ifsl.sys -- (ws2ifsl) DRV - [2009-07-14 00:53:51 | 000,009,728 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\DRIVERS\wfplwf.sys -- (WfpLwf) DRV - [2009-07-14 00:51:11 | 000,034,944 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\WinUsb.sys -- (WinUsb) DRV - [2009-07-14 00:50:45 | 000,132,224 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\WUDFRd.sys -- (WUDFRd) DRV - [2009-07-14 00:50:17 | 000,092,672 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WudfPf.sys -- (WudfPf) DRV - [2009-07-14 00:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2009-07-14 00:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2009-07-14 00:19:17 | 000,011,264 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\wmiacpi.sys -- (WmiAcpi) DRV - [2009-07-13 23:09:17 | 004,194,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "chrome://fvd.speeddial/content/fvd_about_blank.html" FF - prefs.js..extensions.enabledAddons: %7B394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B%7D:3.1.0 FF - prefs.js..extensions.enabledAddons: %7B37E4D8EA-8BDA-4831-8EA1-89053939A250%7D:3.0.0.2 FF - prefs.js..extensions.enabledAddons: %7B1BC9BA34-1EED-42ca-A505-6D2F1A935BBB%7D:4.12.22.2 FF - prefs.js..extensions.enabledAddons: %7Bd4e0dc9c-c356-438e-afbe-dca439f4399d%7D:1.9 FF - prefs.js..extensions.enabledAddons: SocialMediaShares%40gefruckelt.de:1.0 FF - prefs.js..extensions.enabledAddons: youtubemp3conv%40gmail.com:1.1.0 FF - prefs.js..extensions.enabledAddons: %7B66E978CD-981F-47DF-AC42-E3CF417C1467%7D:0.4.3 FF - prefs.js..extensions.enabledAddons: %7Ba6ca9b3b-5e52-4f47-85d8-cca35bb57596%7D:1.5.2 FF - prefs.js..extensions.enabledAddons: thumbnailZoom%40dadler.github.com:2.6 FF - prefs.js..extensions.enabledAddons: %7Be1aaa9f8-4500-47f1-9a0a-b02bd60e4076%7D:3.9 FF - prefs.js..extensions.enabledAddons: translator%40zoli.bod:2.1.0.3 FF - prefs.js..extensions.enabledAddons: unitedronaldo%40yahoo.com:0.9.7 FF - prefs.js..extensions.enabledAddons: pavel.sherbakov%40gmail.com:4.5.0 FF - prefs.js..extensions.enabledAddons: savesession%40noasobi.net:1.3.1.6 FF - prefs.js..extensions.enabledAddons: netvideohunter%40netvideohunter.com:1.15 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0.1 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\Rafal\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-05-24 18:38:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-12-10 14:49:50 | 000,000,000 | ---D | M] [2012-10-02 15:49:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\Extensions [2013-12-02 08:25:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions [2013-06-17 14:33:13 | 000,000,000 | ---D | M] (IE Tab 2 (FF 3.6+)) -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2013-04-26 18:15:43 | 000,000,000 | ---D | M] (Lightshot (screenshot tool)) -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} [2012-10-11 16:39:54 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2013-07-21 21:04:23 | 000,000,000 | ---D | M] (Facebook Share Button) -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions\{d4e0dc9c-c356-438e-afbe-dca439f4399d} [2013-10-19 18:58:02 | 000,000,000 | ---D | M] (Youtube Video Replay) -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions\{e1aaa9f8-4500-47f1-9a0a-b02bd60e4076} [2013-12-02 08:25:01 | 000,000,000 | ---D | M] ("NetVideoHunter") -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions\netvideohunter@netvideohunter.com [2013-11-14 13:01:39 | 000,000,000 | ---D | M] ("FVD Speed Dial - New Tab Page") -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions\pavel.sherbakov@gmail.com [2013-09-06 16:06:43 | 000,000,000 | ---D | M] (From Youtube To MP3) -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions\youtubemp3conv@gmail.com [2013-08-17 18:02:14 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\IplextoALL@ALLPlayer.org.xpi [2013-10-21 17:30:08 | 000,177,713 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\jid0-VuYraOOT2NM2AcnQwG4APKol3Vs@jetpack.xpi [2013-11-28 16:38:47 | 000,015,653 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\p24ext@przelewy24.pl.xpi [2013-11-18 11:12:34 | 000,013,039 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\savesession@noasobi.net.xpi [2013-07-22 09:18:10 | 000,009,110 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\SocialMediaShares@gefruckelt.de.xpi [2013-10-01 17:38:04 | 000,167,212 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\thumbnailZoom@dadler.github.com.xpi [2013-10-19 21:06:15 | 000,060,290 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\translator@zoli.bod.xpi [2013-10-22 18:40:29 | 000,041,447 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\unitedronaldo@yahoo.com.xpi [2013-11-18 11:17:38 | 000,534,563 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2013-06-13 14:56:44 | 000,164,858 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250}.xpi [2013-09-08 16:16:56 | 000,003,793 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\{66E978CD-981F-47DF-AC42-E3CF417C1467}.xpi [2013-09-12 13:45:55 | 000,188,418 | ---- | M] () (No name found) -- C:\Users\Rafal\AppData\Roaming\mozilla\firefox\profiles\mvi0vo8y.default\extensions\{a6ca9b3b-5e52-4f47-85d8-cca35bb57596}.xpi [2013-05-24 18:38:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions [2013-11-18 10:17:40 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2012-01-12 09:58:30 | 000,917,816 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll [2011-10-27 14:45:50 | 000,083,456 | ---- | M] (LiveVDO ) -- C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - plugin: QuickTime Player (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - Extension: Dokumenty Google = C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Dysk Google = C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Szukaj w Google = C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Facebook Friend Inviter = C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\fojfflomljfbdfdcfmiihnijjfnnakdn\2.0_0\ CHR - Extension: Google Wallet = C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\ CHR - Extension: Gmail = C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2009-06-10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCEPServiceManager] C:\Program Files\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\System32\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\Volume Panel\VolPanlu.exe (Creative Technology Ltd) O4 - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001..\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe (ALLPlayer Group Ltd.) O4 - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001..\Run: [Desktop iCalendar Lite.exe] C:\Program Files\desksware\Desktop iCalendar Lite\Desktop iCalendar Lite.exe (Desksware) O4 - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001..\Run: [Facebook Update] C:\Users\Rafal\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) O4 - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001..\Run: [GmailNotifierPro] C:\Program Files\Gmail Notifier Pro\GmailNotifierPro.exe (IntelliBreeze Software) O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Locate Spot on Map by GPS - C:\Program Files\Opanda\IExif 2.3\IExifMap.htm () O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: View Exif/GPS/IPTC with IExif - C:\Program Files\Opanda\IExif 2.3\IExifCom.htm () O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet) O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 213.241.79.38 192.168.1.252 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D8DCC031-33C9-4C31-93EB-04FB5C7E555C}: DhcpNameServer = 8.8.8.8 213.241.79.38 192.168.1.252 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2009-08-26 09:00:00 | 000,000,043 | R--- | M] () - H:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{3c3e1642-5c9f-11e3-b9e2-001fd090e95e}\Shell - "" = AutoRun O33 - MountPoints2\{3c3e1642-5c9f-11e3-b9e2-001fd090e95e}\Shell\AutoRun\command - "" = M:\Startme.exe O33 - MountPoints2\M\Shell - "" = AutoRun O33 - MountPoints2\M\Shell\AutoRun\command - "" = M:\Autorun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O35 - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-12-07 13:47:00 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Rafal\Desktop\OTL.exe [2013-12-07 13:36:58 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2013-12-07 13:32:18 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET [2013-12-06 13:38:25 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2013-12-06 13:37:44 | 002,347,384 | ---- | C] (ESET) -- C:\Users\Rafal\Desktop\esetsmartinstaller_plk.exe [2013-12-06 11:22:18 | 000,000,000 | ---D | C] -- C:\Users\Rafal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Ericsson [2013-12-06 11:21:15 | 000,027,632 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\seehcri.sys [2013-12-06 11:21:14 | 000,000,000 | ---D | C] -- C:\Users\Rafal\.android [2013-12-06 11:20:28 | 000,000,000 | ---D | C] -- C:\Users\Rafal\AppData\Local\cache [2013-12-06 11:20:26 | 000,000,000 | ---D | C] -- C:\Users\Rafal\Documents\Mobogenie [2013-12-06 11:20:26 | 000,000,000 | ---D | C] -- C:\Users\Rafal\AppData\Local\Mobogenie [2013-12-06 11:20:14 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson [2013-12-06 11:19:52 | 000,000,000 | ---D | C] -- C:\Program Files\Mobogenie [2013-12-05 19:57:00 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01009.dll [2013-12-05 19:57:00 | 000,025,200 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\ggsemc.sys [2013-12-05 19:57:00 | 000,012,400 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\ggflt.sys [2013-12-05 19:56:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Mobile [2013-12-05 19:56:38 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Mobile [2013-11-18 18:10:21 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee [2013-11-18 17:25:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys [2013-11-18 17:25:30 | 000,000,000 | ---D | C] -- C:\Program Files\Lavalys [2013-11-18 11:46:01 | 000,000,000 | ---D | C] -- C:\Users\Rafal\AppData\Roaming\Cool Record Edit Pro [2013-11-18 11:45:01 | 000,000,000 | ---D | C] -- C:\Users\Rafal\Documents\Free Sound Recorder [2013-11-18 11:45:01 | 000,000,000 | ---D | C] -- C:\Users\Rafal\AppData\Roaming\Free Sound Recorder [2013-11-09 09:49:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle [2013-11-09 09:48:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2013-11-09 09:48:54 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe [2013-11-09 09:48:50 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2013-11-09 09:48:50 | 000,174,504 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe [2013-11-09 09:48:50 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll [2013-11-09 09:48:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-12-07 13:51:16 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-12-07 13:47:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Rafal\Desktop\OTL.exe [2013-12-07 13:37:57 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2013-12-07 13:36:54 | 000,001,080 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2013-12-07 13:18:08 | 000,000,978 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2013-12-07 12:59:09 | 000,010,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-12-07 12:59:08 | 000,010,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-12-07 12:56:10 | 000,737,242 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2013-12-07 12:56:10 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013-12-07 12:56:10 | 000,153,930 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2013-12-07 12:56:10 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013-12-07 12:56:00 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013-12-07 12:52:07 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013-12-07 12:51:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013-12-07 12:51:47 | 1609,424,896 | -HS- | M] () -- C:\hiberfil.sys [2013-12-07 12:33:25 | 000,054,928 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000005-00000000-00000000-00001102-00000005-00211102}.rfx [2013-12-07 12:33:25 | 000,054,928 | ---- | M] () -- C:\Windows\System32\BMXState-{00000005-00000000-00000000-00001102-00000005-00211102}.rfx [2013-12-07 12:33:25 | 000,000,788 | ---- | M] () -- C:\Windows\System32\DVCState-{00000005-00000000-00000000-00001102-00000005-00211102}.rfx [2013-12-07 12:25:27 | 000,002,544 | ---- | M] () -- C:\Windows\diagwrn.xml [2013-12-07 12:25:13 | 000,001,890 | ---- | M] () -- C:\Windows\diagerr.xml [2013-12-07 12:11:12 | 000,000,928 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1079858237-1872574704-3250432788-1001UA.job [2013-12-07 12:11:00 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1079858237-1872574704-3250432788-1001Core.job [2013-12-06 13:37:44 | 002,347,384 | ---- | M] (ESET) -- C:\Users\Rafal\Desktop\esetsmartinstaller_plk.exe [2013-12-06 11:21:15 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\seehcri.sys [2013-12-05 20:50:28 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_WinUsb_01009.Wdf [2013-12-05 20:05:24 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ggsemc_01009.Wdf [2013-12-05 20:05:24 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ggflt_01009.Wdf [2013-12-05 19:57:00 | 001,461,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01009.dll [2013-12-05 19:57:00 | 000,025,200 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\ggsemc.sys [2013-12-05 19:57:00 | 000,012,400 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\ggflt.sys [2013-12-05 19:53:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_wpdcomp_01_09_00.Wdf [2013-11-18 18:10:18 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2013-11-18 18:10:18 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-12-07 13:35:38 | 000,001,080 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2013-12-07 13:18:08 | 000,000,978 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2013-12-05 20:50:28 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_WinUsb_01009.Wdf [2013-12-05 20:05:24 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ggsemc_01009.Wdf [2013-12-05 20:05:24 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ggflt_01009.Wdf [2013-12-05 19:53:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_wpdcomp_01_09_00.Wdf [2013-08-16 19:19:34 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll [2013-05-11 17:05:22 | 000,178,688 | ---- | C] () -- C:\Windows\System32\unrar.dll [2013-03-16 04:49:24 | 000,038,736 | ---- | C] () -- C:\Windows\System32\dischandler.exe [2013-03-13 20:39:34 | 003,915,776 | ---- | C] () -- C:\Windows\System32\ffmpeg.dll [2013-03-13 20:38:34 | 000,112,640 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2013-03-13 20:35:56 | 000,271,360 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll [2013-03-13 20:35:38 | 000,157,184 | ---- | C] () -- C:\Windows\System32\ff_unrar.dll [2013-03-13 20:35:36 | 000,147,456 | ---- | C] () -- C:\Windows\System32\ff_libmad.dll [2013-03-13 20:35:36 | 000,099,840 | ---- | C] () -- C:\Windows\System32\ff_wmv9.dll [2013-03-13 20:35:34 | 001,525,760 | ---- | C] () -- C:\Windows\System32\ff_samplerate.dll [2013-03-13 20:35:34 | 000,211,968 | ---- | C] () -- C:\Windows\System32\ff_libdts.dll [2013-03-13 20:35:34 | 000,114,688 | ---- | C] () -- C:\Windows\System32\ff_liba52.dll [2013-02-10 15:15:04 | 000,384,472 | ---- | C] () -- C:\Windows\System32\swscale-lav-2.dll [2013-02-10 15:15:04 | 000,188,072 | ---- | C] () -- C:\Windows\System32\libbluray.dll [2013-02-10 15:15:02 | 007,833,552 | ---- | C] () -- C:\Windows\System32\avcodec-lav-54.dll [2013-02-10 15:15:02 | 001,256,952 | ---- | C] () -- C:\Windows\System32\avformat-lav-54.dll [2013-02-10 15:15:02 | 000,247,920 | ---- | C] () -- C:\Windows\System32\avutil-lav-52.dll [2013-02-10 15:15:02 | 000,169,888 | ---- | C] () -- C:\Windows\System32\avfilter-lav-3.dll [2013-02-10 15:15:02 | 000,165,160 | ---- | C] () -- C:\Windows\System32\avresample-lav-1.dll [2012-12-25 21:27:06 | 000,063,232 | ---- | C] () -- C:\Windows\System32\drivers\fcadd1a7570ea849.sys [2012-12-25 21:21:49 | 000,010,196 | -HS- | C] () -- C:\Users\Rafal\AppData\Local\1pb78m8n6he1l1565b3k36w7o7of8ksb88y53s63tpqg0vl [2012-12-25 21:21:49 | 000,010,196 | -HS- | C] () -- C:\ProgramData\1pb78m8n6he1l1565b3k36w7o7of8ksb88y53s63tpqg0vl [2012-11-05 15:53:08 | 000,139,424 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2012-11-05 15:52:58 | 000,138,056 | ---- | C] () -- C:\Users\Rafal\AppData\Roaming\PnkBstrK.sys [2012-10-23 16:26:48 | 000,013,312 | ---- | C] () -- C:\Users\Rafal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-10-22 15:28:18 | 000,001,496 | ---- | C] () -- C:\Users\Rafal\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs [2012-10-03 12:02:09 | 000,000,404 | ---- | C] () -- C:\Windows\BRWMARK.INI [2012-10-03 12:02:09 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI [2012-10-03 11:57:51 | 000,000,050 | ---- | C] () -- C:\Windows\System32\bridf08b.dat [2012-10-02 19:35:09 | 000,207,872 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL [2012-10-02 19:35:09 | 000,074,240 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL [2012-10-02 19:31:57 | 001,746,360 | ---- | C] () -- C:\Windows\System32\CTAA1.DAT [2012-10-02 19:27:35 | 001,324,120 | ---- | C] () -- C:\Windows\System32\drivers\CTEXFIFX.sys [2012-10-02 19:27:35 | 001,178,200 | ---- | C] () -- C:\Windows\System32\drivers\ha20x2k.sys [2012-10-02 19:27:35 | 000,158,808 | ---- | C] () -- C:\Windows\System32\drivers\ctsfm2k.sys [2012-10-02 19:27:35 | 000,130,136 | ---- | C] () -- C:\Windows\System32\drivers\ctoss2k.sys [2012-10-02 19:27:35 | 000,095,832 | ---- | C] () -- C:\Windows\System32\drivers\emupia2k.sys [2012-10-02 19:27:35 | 000,072,792 | ---- | C] () -- C:\Windows\System32\drivers\CTHWIUT.sys [2012-10-02 19:27:35 | 000,015,448 | ---- | C] () -- C:\Windows\System32\drivers\pfmodnt.sys [2012-10-02 19:27:35 | 000,014,424 | ---- | C] () -- C:\Windows\System32\drivers\ctprxy2k.sys [2012-10-02 19:27:34 | 000,528,344 | ---- | C] () -- C:\Windows\System32\drivers\ctaud2k.sys [2012-10-02 19:27:34 | 000,511,064 | ---- | C] () -- C:\Windows\System32\drivers\ctac32k.sys [2012-10-02 19:27:34 | 000,347,144 | ---- | C] () -- C:\Windows\System32\drivers\ctdvda2k.sys [2012-10-02 19:27:34 | 000,171,096 | ---- | C] () -- C:\Windows\System32\drivers\CT20XUT.sys [2012-10-02 19:27:31 | 000,002,560 | ---- | C] () -- C:\Windows\System32\CtxfiRes.dll [2012-10-02 19:27:31 | 000,002,560 | ---- | C] () -- C:\Windows\CTXFIRES.DLL [2012-10-02 19:27:28 | 000,060,928 | ---- | C] ( ) -- C:\Windows\System32\a3d.dll [2012-10-02 19:27:28 | 000,016,384 | ---- | C] () -- C:\Windows\System32\regplib.exe [2012-10-02 19:27:28 | 000,012,800 | ---- | C] ( ) -- C:\Windows\System32\killapps.exe [2012-10-02 19:27:28 | 000,007,680 | ---- | C] () -- C:\Windows\System32\enlocstr.exe [2012-10-02 19:27:23 | 000,321,512 | ---- | C] () -- C:\Windows\System32\ctdlang.dat [2012-10-02 19:27:23 | 000,056,509 | ---- | C] () -- C:\Windows\System32\ctdnlstr.dat [2012-10-02 19:27:23 | 000,021,266 | ---- | C] () -- C:\Windows\System32\instwdm.ini [2012-10-02 19:27:23 | 000,000,285 | ---- | C] () -- C:\Windows\System32\kill.ini [2012-10-02 19:27:23 | 000,000,054 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini [2012-10-02 14:55:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2012-10-02 14:55:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2012-09-29 23:47:28 | 000,000,178 | ---- | C] () -- C:\Windows\System32\Formats.ini [2012-09-21 20:08:36 | 010,919,784 | ---- | C] () -- C:\Windows\System32\LogiDPP.dll [2012-09-21 20:08:36 | 000,338,136 | ---- | C] () -- C:\Windows\System32\DevManagerCore.dll [2012-09-21 20:08:36 | 000,103,272 | ---- | C] () -- C:\Windows\System32\LogiDPPApp.exe [2012-09-21 19:48:30 | 000,028,418 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini [2012-06-11 12:50:42 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe [2012-02-23 13:31:58 | 000,086,544 | ---- | C] () -- C:\Windows\System32\drivers\AtihdW73.sys [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2009-07-14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-07-14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012-11-18 18:18:57 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\ACD Systems [2013-12-07 13:50:08 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\BitComet [2012-10-31 13:06:15 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Canneverbe Limited [2012-11-19 14:19:13 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Canon [2012-10-21 16:31:16 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Canon_Inc_IC [2013-11-18 11:46:02 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Cool Record Edit Pro [2013-04-29 10:18:08 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\desksware [2013-04-30 13:09:31 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Digital Film Tools [2013-08-26 14:51:59 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\EurekaLog [2013-06-17 21:58:25 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Exif Viewer [2013-12-06 09:59:02 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\foobar2000 [2012-10-13 09:53:01 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Foxit Software [2013-11-18 11:45:25 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Free Sound Recorder [2013-09-03 11:12:01 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\GmailNotifierPro [2013-07-13 19:12:47 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Imagination Technologies [2013-09-11 11:01:32 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\ImgBurn [2013-08-17 14:48:14 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\jStrip [2012-11-10 17:36:53 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Leadertech [2013-08-17 06:29:25 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Maxthon3 [2012-10-02 16:05:27 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\NapiProjekt [2012-11-29 22:43:30 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\NeatImage PS [2012-11-29 22:34:33 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\NeatImage SL [2012-10-23 14:31:57 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\ObviousIdea [2012-10-02 16:09:59 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Opera [2013-07-13 19:12:47 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Rovio [2013-07-13 19:11:44 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Rovio Entertainment Ltd [2013-07-13 19:24:05 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Samsung [2012-10-23 14:28:43 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Sony [2013-07-22 09:13:41 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2012-12-28 16:16:17 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\TestApp [2012-10-14 17:47:50 | 000,000,000 | ---D | M] -- C:\Users\Rafal\AppData\Roaming\Xilisoft [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:430C6D84 @Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:DFC5A2B2 < End of report >

**Posty:** 4765 · przez **ordynat** 07 Gru 2013, 16:20

1) Zrób log z TDSSKiller http://www.fixitpc.pl/topic/8-dezynfekcja-zbi%C3%B3r-narz%C4%99dzi-usuwaj%C4%85cych/#entry33542
Jeśli wykryje Rootkita NECURS, to daj go na Delete.
Inne wykrycia: na SKIP.

2) Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
[2012-12-25 21:21:49 | 000,010,196 | -HS- | C] () -- C:\Users\Rafal\AppData\Local\1pb78m8n6he1l1565b3k36w7o7of8ksb88y53s63tpqg0vl
[2012-12-25 21:21:49 | 000,010,196 | -HS- | C] () -- C:\ProgramData\1pb78m8n6he1l1565b3k36w7o7of8ksb88y53s63tpqg0vl
[2013-12-06 11:20:28 | 000,000,000 | ---D | C] -- C:\Users\Rafal\AppData\Local\cache
[2013-12-06 11:20:26 | 000,000,000 | ---D | C] -- C:\Users\Rafal\Documents\Mobogenie
[2013-12-06 11:20:26 | 000,000,000 | ---D | C] -- C:\Users\Rafal\AppData\Local\Mobogenie
[2013-12-06 11:19:52 | 000,000,000 | ---D | C] -- C:\Program Files\Mobogenie
O4 - HKU\S-1-5-21-1079858237-1872574704-3250432788-1001..\Run: [AdobeBridge] File not found
[2013-11-14 13:01:39 | 000,000,000 | ---D | M] ("FVD Speed Dial - New Tab Page") -- C:\Users\Rafal\AppData\Roaming\mozilla\Firefox\Profiles\mvi0vo8y.default\extensions\pavel.sherbakov@gmail.com
FF - prefs.js..browser.startup.homepage: "chrome://fvd.speeddial/content/fvd_about_blank.html"
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Rafal\AppData\Local\Temp\atidcmxx.sys -- (AtiDCM)
DRV - [File Corrupted - Detail Data unreadable] [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wanarp.sys -- (WANARP)
SRV - [2012-12-25 21:27:06 | 000,063,232 | ---- | M] () [Unknown (-1) | Unknown] -- C:\Windows\System32\drivers\fcadd1a7570ea849.sys -- (fcadd1a7570ea849)

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom OTL ponownie, tym razem kliknij Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.

Zaznaczam, że te usuwania raczej nie mają nic wspólnego z myszką (choć NECURS potrafi zablokować różne strowniki, w tym także sterownik myszki).
.

Autor postu otrzymał pochwałę

**Posty:** 3 · przez **rafalp** 07 Gru 2013, 17:20

Dziękuję, po usunięciu NECURS myszka działa. Jeszcze raz wielkie dzięki

**Posty:** 4765 · przez **ordynat** 07 Gru 2013, 17:43

Usuwanie Skryptem OTL wykonaj, niezależnie od tego, co usuwał TDSSKiller.

Ale nie dawaj już z tego ani raportu, ani nowego logu OTL.

Potem kończymy:
W OTL kliknij na przycisk Sprzątanie - to go usunie razem z jego Kwarantanną.
Jednocześnie powinien zniknąć TDSSKiller.