Nie można edytować rejestru przez regedit

**Posty:** 248 · przez **czupkolandja** 20 Cze 2010, 13:27

Witam
Mam taki problem... Gdy chce włączyć edycje rejestru to wyskakuje błąd "Edycja rejestru została wyłączona przez administratora sieci" <---WTF?! przecież jedynym administratorem kompa jestem ja. Tak samo stało sie z menedżerem zadań

**Posty:** 1916 · przez **lamar** 20 Cze 2010, 13:45

Daj loga z OTL
I co ten temat do jasnej ciasnej robi w programach !?

**Posty:** 248 · przez **czupkolandja** 20 Cze 2010, 14:05

Kod: Zaznacz wszystko: OTL logfile created on: 2010-06-20 13:56:11 - Run 2 OTL by OldTimer - Version 3.2.6.0 Folder = D:\ Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 84,00% Memory free 5,00 Gb Paging File | 5,00 Gb Available in Paging File | 93,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 38,85 Gb Free Space | 79,56% Space Free | Partition Type: NTFS Drive D: | 416,92 Gb Total Space | 358,39 Gb Free Space | 85,96% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded Drive G: | 3,72 Gb Total Space | 0,72 Gb Free Space | 19,36% Space Free | Partition Type: FAT32 H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: TRZUPEK-2EBB921 Current User Name: Wojtek Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-06-20 13:57:12 | 000,572,416 | ---- | M] (OldTimer Tools) -- D:\OTL.exe PRC - [2010-05-01 10:31:58 | 000,186,760 | ---- | M] () -- D:\Programy\ProShow\scsiaccess.exe PRC - [2009-10-05 19:05:12 | 002,158,592 | ---- | M] () -- C:\Program Files\Vtune\TBPANEL.exe PRC - [2009-08-04 18:29:54 | 000,219,360 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe PRC - [2009-08-04 18:29:52 | 000,424,144 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe PRC - [2009-03-02 15:06:16 | 000,068,136 | ---- | M] () -- C:\Program Files\Gigabyte\EasySaver\essvr.exe PRC - [2008-04-15 17:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-11-16 19:04:20 | 000,221,184 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe PRC - [2006-11-16 18:58:32 | 000,884,736 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe PRC - [2006-10-25 09:32:36 | 000,114,688 | RHS- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\EXPLORER.EXE PRC - [2006-01-19 09:22:20 | 000,049,152 | ---- | M] (Pinnacle Systems) -- D:\Programy\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe PRC - [2005-05-04 00:04:28 | 009,150,464 | ---- | M] (Microsoft Corporation) -- D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-06-20 13:57:12 | 000,572,416 | ---- | M] (OldTimer Tools) -- D:\OTL.exe MOD - [2008-04-15 17:00:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2010-05-01 10:31:58 | 000,186,760 | ---- | M] () [Auto | Running] -- D:\Programy\ProShow\scsiaccess.exe -- (ScsiAccess) SRV - [2009-08-04 18:29:54 | 000,219,360 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe -- (BCUService) SRV - [2009-03-02 15:06:16 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service) SRV - [2006-01-19 09:22:20 | 000,049,152 | ---- | M] (Pinnacle Systems) [Auto | Running] -- D:\Programy\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe -- (PinnacleSys.MediaServer) SRV - [2005-05-04 00:04:28 | 009,150,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe -- (MSSQL$PINNACLESYS) SRV - [2005-05-03 21:42:56 | 000,401,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE -- (SQLAgent$PINNACLESYS) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Running] -- -- (dac970nt) DRV - [2010-06-20 12:32:57 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2009-10-05 12:10:50 | 007,655,872 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2009-06-29 13:59:14 | 000,142,592 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2009-06-25 08:07:44 | 005,095,936 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2009-06-25 08:07:40 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt) DRV - [2009-06-25 08:07:40 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt) DRV - [2008-04-15 17:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2007-03-16 11:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (TBPanel) DRV - [2005-07-13 16:55:22 | 000,171,008 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\MarvinBus.sys -- (MarvinBus) DRV - [2005-02-23 18:40:26 | 000,011,264 | ---- | M] (VOB Computersysteme GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\asapiW2k.sys -- (ASAPIW2K) DRV - [2005-02-09 12:59:00 | 000,014,165 | ---- | M] (Pinnacle Systems GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Pclepci.sys -- (PCLEPCI) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2008-04-15 17:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O4 - HKLM..\Run: [BCU] C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.) O4 - HKLM..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe (Microsoft Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe File not found O4 - HKLM..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe () O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) O4 - HKCU..\Run: [cdoosoft] C:\DOCUME~1\Wojtek\USTAWI~1\Temp\herss.exe File not found O4 - HKCU..\Run: [EXPLORER.EXE] C:\WINDOWS\System32\EXPLORER.EXE (Microsoft Corporation) O4 - HKCU..\Run: [TBPanel] C:\Program Files\Vtune\TBPanel.exe () O4 - HKCU..\Run: [wsctf.exe] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\System32\EXPLORER.EXE (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (EXPLORER.EXE) - C:\WINDOWS\System32\EXPLORER.EXE (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Wojtek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Wojtek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-06-19 12:28:05 | 000,000,085 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-11-19 16:27:45 | 000,000,055 | RHS- | M] () - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2009-11-19 16:27:45 | 000,000,055 | RHS- | M] () - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-06-20 13:55:56 | 000,000,165 | RHS- | M] () - G:\AutoRun.inf -- [ FAT32 ] O33 - MountPoints2\{28d569e8-2e09-11df-802b-6cf049473c2b}\Shell\AutOplAy\coMmanD - "" = G:\ -- File not found O33 - MountPoints2\{28d569e8-2e09-11df-802b-6cf049473c2b}\Shell\AutoRun\command - "" = G:\hurojf.cmd -- [2010-06-20 13:52:16 | 000,172,543 | RHS- | M] (Microsoft Corporation) O33 - MountPoints2\{28d569e8-2e09-11df-802b-6cf049473c2b}\Shell\ExPLore\CoMMand - "" = G:\hurojf.cmd -- [2010-06-20 13:52:16 | 000,172,543 | RHS- | M] (Microsoft Corporation) O33 - MountPoints2\{28d569e8-2e09-11df-802b-6cf049473c2b}\Shell\OPeN\COmMand - "" = G:\hurojf.cmd -- [2010-06-20 13:52:16 | 000,172,543 | RHS- | M] (Microsoft Corporation) O33 - MountPoints2\{3a5785d4-311d-11df-8036-6cf049473c2b}\Shell\AutoRun\command - "" = I:\srgo.exe -- File not found O33 - MountPoints2\{3a5785d4-311d-11df-8036-6cf049473c2b}\Shell\open\Command - "" = I:\srgo.exe -- File not found O33 - MountPoints2\{3a5785d6-311d-11df-8036-6cf049473c2b}\Shell\AutoRun\command - "" = F:\srgo.exe -- File not found O33 - MountPoints2\{3a5785d6-311d-11df-8036-6cf049473c2b}\Shell\open\Command - "" = F:\srgo.exe -- File not found O33 - MountPoints2\{4f8793d6-78a6-11df-80ec-6cf049473c2b}\Shell\AutoRun\command - "" = srgo.exe O33 - MountPoints2\{4f8793d6-78a6-11df-80ec-6cf049473c2b}\Shell\open\Command - "" = srgo.exe O33 - MountPoints2\{55f62e14-2e07-11df-805d-806d6172696f}\Shell\AutoRun\command - "" = srgo.exe O33 - MountPoints2\{55f62e14-2e07-11df-805d-806d6172696f}\Shell\open\Command - "" = srgo.exe O33 - MountPoints2\{55f62e15-2e07-11df-805d-806d6172696f}\Shell\AutoRun\command - "" = srgo.exe O33 - MountPoints2\{55f62e15-2e07-11df-805d-806d6172696f}\Shell\open\Command - "" = srgo.exe O33 - MountPoints2\{6ad5a536-310e-11df-8035-6cf049473c2b}\Shell\AutoRun\command - "" = F:\srgo.exe -- File not found O33 - MountPoints2\{6ad5a536-310e-11df-8035-6cf049473c2b}\Shell\open\Command - "" = F:\srgo.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-06-20 13:56:00 | 000,572,416 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Wojtek\Pulpit\OTL.exe [2010-06-19 12:55:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojtek\Moje dokumenty\Pinnacle Studio [2010-06-19 12:38:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojtek\Moje dokumenty\InstantCDDVD [2010-06-19 12:34:40 | 002,653,888 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LTRDG13n.OCX [2010-06-19 12:34:40 | 000,534,192 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LTRVW13N.OCX [2010-06-19 12:34:40 | 000,466,624 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LTRPR13n.DLL [2010-06-19 12:34:40 | 000,401,408 | ---- | C] (Pegasus Imaging Corporation) -- C:\WINDOWS\System32\pvmjpg30.dll [2010-06-19 12:34:38 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4r.dll [2010-06-19 12:34:38 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4a.dll [2010-06-19 12:34:37 | 000,185,856 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfpng13s.dll [2010-06-19 12:34:37 | 000,079,360 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfeps13s.dll [2010-06-19 12:34:37 | 000,074,752 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfgif13s.dll [2010-06-19 12:34:23 | 000,233,472 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\DiskIO.dll [2010-06-19 12:34:23 | 000,184,320 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\RALMain.dll [2010-06-19 12:34:23 | 000,126,976 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\AVIPrAx.dll [2010-06-19 12:34:23 | 000,073,728 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\MMAviAx.dll [2010-06-19 12:34:23 | 000,032,768 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\MLPagAx.dll [2010-06-19 12:34:18 | 002,079,232 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LTCLR13s.dll [2010-06-19 12:34:18 | 001,693,696 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LTCLR13n.dll [2010-06-19 12:34:18 | 001,013,248 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\Ltwvc13n.dll [2010-06-19 12:34:18 | 000,930,992 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\Ltr13n.dll [2010-06-19 12:34:18 | 000,884,736 | ---- | C] (Fellowes, Inc.) -- C:\WINDOWS\System32\LMUIRes.dll [2010-06-19 12:34:18 | 000,453,120 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\ltkrn13n.dll [2010-06-19 12:34:18 | 000,409,600 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LFCMP13s.DLL [2010-06-19 12:34:18 | 000,306,352 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\Ltrio13n.dll [2010-06-19 12:34:18 | 000,283,648 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LFJ2K13s.dll [2010-06-19 12:34:18 | 000,278,016 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LFJ2K13n.dll [2010-06-19 12:34:18 | 000,167,936 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lftif13s.dll [2010-06-19 12:34:18 | 000,153,088 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\ltfil13n.DLL [2010-06-19 12:34:18 | 000,143,360 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lftif13n.dll [2010-06-19 12:34:18 | 000,116,224 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lffax13s.dll [2010-06-19 12:34:18 | 000,110,080 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfpsd13s.dll [2010-06-19 12:34:18 | 000,105,984 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfpct13s.dll [2010-06-19 12:34:18 | 000,080,896 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfwmf13s.dll [2010-06-19 12:34:18 | 000,076,800 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\Lfwmf13n.dll [2010-06-19 12:34:18 | 000,073,728 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lffax13n.dll [2010-06-19 12:34:18 | 000,065,536 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfpcx13s.dll [2010-06-19 12:34:18 | 000,065,536 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\Lfpct13n.dll [2010-06-19 12:34:18 | 000,064,512 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lftga13s.dll [2010-06-19 12:34:18 | 000,059,904 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfpcd13s.dll [2010-06-19 12:34:18 | 000,024,576 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lftga13n.dll [2010-06-19 12:34:18 | 000,012,288 | ---- | C] (Fellowes, Inc.) -- C:\WINDOWS\System32\LMLRes.dll [2010-06-19 12:34:17 | 000,393,216 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LFCMP13n.DLL [2010-06-19 12:34:17 | 000,070,144 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfbmp13s.dll [2010-06-19 12:34:17 | 000,030,208 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfbmp13n.dll [2010-06-19 12:32:55 | 000,033,340 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbmsqlgc.dll [2010-06-19 12:32:55 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbmsgnet.dll [2010-06-19 12:32:54 | 000,306,688 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUninst.exe [2010-06-19 12:32:45 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server [2010-06-19 12:32:32 | 000,765,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp71d.dll [2010-06-19 12:32:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cache [2010-06-19 12:32:31 | 000,544,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr71d.dll [2010-06-19 12:28:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\SmartSound Software Inc [2010-06-19 12:28:21 | 000,000,000 | ---D | C] -- C:\Program Files\SmartSound Software [2010-06-19 12:28:05 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atl71.dll [2010-06-19 12:28:05 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ATL70.DLL [2010-06-19 12:27:59 | 000,171,008 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\drivers\MarvinBus.sys [2010-06-19 12:27:55 | 000,041,219 | ---- | C] (Pinnacle Systems) -- C:\WINDOWS\RSETPATH.exe [2010-06-19 12:27:27 | 001,047,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71u.DLL [2010-06-19 12:27:27 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVCP70.DLL [2010-06-19 12:27:27 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVCR70.DLL [2010-06-19 12:27:27 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVCI70.DLL [2010-06-19 12:27:26 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71.DLL [2010-06-19 12:27:26 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC70.DLL [2010-06-19 12:27:26 | 000,964,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC70U.DLL [2010-06-19 12:27:26 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71DEU.DLL [2010-06-19 12:27:26 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71ITA.DLL [2010-06-19 12:27:26 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71FRA.DLL [2010-06-19 12:27:26 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71ESP.DLL [2010-06-19 12:27:26 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71ENU.DLL [2010-06-19 12:27:26 | 000,049,152 | ---- | C] (Pinnacle Systems) -- C:\WINDOWS\System32\PCLEGetGuid.dll [2010-06-19 12:27:26 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71KOR.DLL [2010-06-19 12:27:26 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71JPN.DLL [2010-06-19 12:27:26 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71CHT.DLL [2010-06-19 12:27:26 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71CHS.DLL [2010-06-19 12:26:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle Studio [2010-06-19 12:26:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle [2010-06-19 12:25:59 | 000,014,165 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\drivers\Pclepci.sys [2010-06-14 17:53:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages [2010-06-14 17:53:02 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax [2010-06-14 17:53:02 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax [2010-06-14 17:53:02 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax [2010-06-14 17:53:02 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax [2010-06-14 17:53:02 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys [2010-06-14 17:53:02 | 000,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msdv.sys [2010-06-14 17:53:02 | 000,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdv.sys [2010-06-14 17:53:02 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax [2010-06-14 17:53:02 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax [2010-06-14 17:53:02 | 000,018,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys [2010-06-14 17:53:02 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdaplgin.ax [2010-06-14 17:53:02 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdaplgin.ax [2010-06-14 17:53:02 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys [2010-06-14 17:53:02 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mpe.sys [2010-06-14 17:53:02 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys [2010-06-14 17:53:02 | 000,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys [2010-06-14 17:53:02 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax [2010-06-14 17:53:02 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax [2010-06-14 17:53:02 | 000,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bdasup.sys [2010-06-14 17:53:02 | 000,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdasup.sys [2010-06-14 17:53:02 | 000,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys [2010-06-14 17:53:02 | 000,010,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys [2010-06-14 17:53:02 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys [2010-06-14 17:53:01 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksolay.ax [2010-06-14 17:52:59 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdllreg.exe [2010-06-14 17:52:58 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pid.dll [2010-06-12 15:39:34 | 000,000,000 | -H-D | C] -- C:\VritualRoot [2010-06-05 20:09:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wojtek\Moje dokumenty\NeroVision [2010-05-24 16:19:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DirectX [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-06-20 13:57:12 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Wojtek\Pulpit\OTL.exe [2010-06-20 12:46:32 | 000,254,414 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2010-06-20 12:37:19 | 001,153,870 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-06-20 12:37:19 | 000,512,034 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2010-06-20 12:37:19 | 000,453,886 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010-06-20 12:37:19 | 000,095,002 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2010-06-20 12:37:19 | 000,077,818 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010-06-20 12:33:43 | 000,000,477 | ---- | M] () -- C:\WINDOWS\win.ini [2010-06-20 12:33:43 | 000,000,264 | ---- | M] () -- C:\WINDOWS\system.ini [2010-06-20 12:33:43 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2010-06-20 12:32:57 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys [2010-06-20 12:32:56 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-06-20 12:32:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-06-20 12:31:08 | 002,883,584 | -H-- | M] () -- C:\Documents and Settings\Wojtek\NTUSER.DAT [2010-06-20 12:30:41 | 004,802,588 | -H-- | M] () -- C:\Documents and Settings\Wojtek\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-06-20 11:14:11 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-06-19 13:32:45 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn [2010-06-19 13:32:45 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for [2010-06-19 13:19:22 | 000,000,359 | ---- | M] () -- C:\WINDOWS\VFO.INI [2010-06-19 12:55:32 | 000,000,455 | ---- | M] () -- C:\WINDOWS\VFO.VST [2010-06-19 12:40:22 | 000,000,349 | ---- | M] () -- C:\Documents and Settings\All Users\Dokumenty\PCLECHAL.INI [2010-06-19 12:37:26 | 000,116,560 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-06-19 12:36:12 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Wojtek\ntuser.ini [2010-06-19 12:35:14 | 000,000,757 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Studio Launcher.lnk [2010-06-19 12:35:00 | 000,000,051 | ---- | M] () -- C:\WINDOWS\System32\blue.SITENAME [2010-06-19 12:32:25 | 000,000,131 | ---- | M] () -- C:\Documents and Settings\Wojtek\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2010-06-19 12:28:05 | 000,000,085 | ---- | M] () -- C:\AUTOEXEC.BAT [2010-06-15 21:13:45 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-06-13 15:04:04 | 000,106,208 | ---- | M] () -- C:\WINDOWS\System32\drivers\sfi.dat [2010-06-09 13:54:31 | 000,000,130 | ---- | M] () -- C:\Documents and Settings\Wojtek\default.pls [2010-05-24 16:16:48 | 000,000,429 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Richard Burns Rally.lnk [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-06-19 13:32:45 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn [2010-06-19 13:32:45 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for [2010-06-19 12:35:14 | 000,000,757 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Studio Launcher.lnk [2010-06-19 12:35:00 | 000,000,051 | ---- | C] () -- C:\WINDOWS\System32\blue.SITENAME [2010-06-19 12:34:45 | 000,000,455 | ---- | C] () -- C:\WINDOWS\VFO.VST [2010-06-19 12:34:40 | 000,194,248 | ---- | C] () -- C:\WINDOWS\System32\LTRFD13n.DLL [2010-06-19 12:33:48 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\PSDrvCheck.JP [2010-06-19 12:33:48 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\PSDrvCheck.NL [2010-06-19 12:33:48 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\PSDrvCheck.KO [2010-06-19 12:33:47 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\PSDrvCheck.IT [2010-06-19 12:33:47 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\PSDrvCheck.FR [2010-06-19 12:33:47 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\PSDrvCheck.ES [2010-06-19 12:33:47 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\PSDrvCheck.DE [2010-06-19 12:32:25 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\Wojtek\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2010-06-19 12:28:05 | 000,000,359 | ---- | C] () -- C:\WINDOWS\VFO.INI [2010-06-19 12:28:03 | 000,196,096 | ---- | C] () -- C:\WINDOWS\System32\macd32.dll [2010-06-19 12:28:03 | 000,138,752 | ---- | C] () -- C:\WINDOWS\System32\mase32.dll [2010-06-19 12:28:03 | 000,136,192 | ---- | C] () -- C:\WINDOWS\System32\mamc32.dll [2010-06-19 12:28:03 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\masd32.dll [2010-06-19 12:28:03 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\ma32.dll [2010-06-19 12:27:46 | 000,027,807 | ---- | C] () -- C:\WINDOWS\wmprfell.prx [2010-06-19 12:27:46 | 000,025,269 | ---- | C] () -- C:\WINDOWS\WMPrfAra.prx [2010-06-19 12:27:46 | 000,020,704 | ---- | C] () -- C:\WINDOWS\WMPrfJpn.prx [2010-06-19 12:27:46 | 000,020,481 | ---- | C] () -- C:\WINDOWS\wmprfheb.prx [2010-06-19 12:27:46 | 000,020,055 | ---- | C] () -- C:\WINDOWS\wmprfsky.prx [2010-06-19 12:27:46 | 000,019,751 | ---- | C] () -- C:\WINDOWS\wmprfhun.prx [2010-06-19 12:27:46 | 000,019,437 | ---- | C] () -- C:\WINDOWS\wmprffra.prx [2010-06-19 12:27:46 | 000,018,878 | ---- | C] () -- C:\WINDOWS\wmprfcsy.prx [2010-06-19 12:27:46 | 000,018,422 | ---- | C] () -- C:\WINDOWS\wmprfptg.prx [2010-06-19 12:27:46 | 000,017,953 | ---- | C] () -- C:\WINDOWS\wmprfesp.prx [2010-06-19 12:27:46 | 000,017,903 | ---- | C] () -- C:\WINDOWS\WMPrfKor.prx [2010-06-19 12:27:46 | 000,017,830 | ---- | C] () -- C:\WINDOWS\wmprfita.prx [2010-06-19 12:27:46 | 000,017,199 | ---- | C] () -- C:\WINDOWS\wmprfptb.prx [2010-06-19 12:27:46 | 000,017,025 | ---- | C] () -- C:\WINDOWS\WMPrfDeu.prx [2010-06-19 12:27:46 | 000,017,019 | ---- | C] () -- C:\WINDOWS\wmprfsve.prx [2010-06-19 12:27:46 | 000,016,822 | ---- | C] () -- C:\WINDOWS\wmprftrk.prx [2010-06-19 12:27:46 | 000,016,814 | ---- | C] () -- C:\WINDOWS\wmprfslv.prx [2010-06-19 12:27:46 | 000,016,446 | ---- | C] () -- C:\WINDOWS\wmprfnor.prx [2010-06-19 12:27:46 | 000,016,398 | ---- | C] () -- C:\WINDOWS\wmprfnld.prx [2010-06-19 12:27:46 | 000,016,265 | ---- | C] () -- C:\WINDOWS\wmprffin.prx [2010-06-19 12:27:46 | 000,015,903 | ---- | C] () -- C:\WINDOWS\wmprfdan.prx [2010-06-19 12:27:46 | 000,000,635 | ---- | C] () -- C:\WINDOWS\wmprfrus.prx [2010-06-19 12:27:46 | 000,000,083 | ---- | C] () -- C:\WINDOWS\WMPrfCHS.prx [2010-06-19 12:27:46 | 000,000,077 | ---- | C] () -- C:\WINDOWS\WMPrfCHT.prx [2010-06-19 12:26:25 | 000,000,349 | ---- | C] () -- C:\Documents and Settings\All Users\Dokumenty\PCLECHAL.INI [2010-06-12 13:55:05 | 000,106,208 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat [2010-05-24 16:14:32 | 000,000,429 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Richard Burns Rally.lnk [2010-05-22 17:46:05 | 003,894,170 | ---- | C] () -- C:\Documents and Settings\Wojtek\Moje dokumenty\the game feat 50cent - how we do.mp3 [2010-05-03 14:11:01 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-03-19 17:21:23 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\AlfaBIG32.dll [2010-03-12 21:41:22 | 000,000,014 | ---- | C] () -- C:\WINDOWS\System32\systeminfo.dll [2010-03-12 21:37:26 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2010-03-12 21:01:04 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2010-03-12 20:25:01 | 000,073,728 | R--- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll [2010-03-12 20:16:19 | 000,000,010 | ---- | C] () -- C:\WINDOWS\GSetup.ini [2009-08-03 01:21:54 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll [2009-08-03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2009-08-03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2009-08-03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2009-08-03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2009-08-03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2009-08-03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2009-08-03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2009-08-03 01:21:52 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2009-08-03 01:21:52 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2008-10-22 06:29:06 | 000,173,550 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat < End of report >

**Posty:** 1916 · przez **lamar** 20 Cze 2010, 14:28

To Sality... Bardzo ciężki orzech do zgryzienia. Możesz z nim walczyć, lub od razu puścić formata. Jeśli decydujesz się na to drugie to musisz sformatować wszystkie partycje, pendrive itp... Możesz zgrać na czysty, niezainfekowany dysk tylko zdjęcia, dokumenty, filmy, muzykę. Nie możesz zostawiać żadnych plików *exe, *rar itp bo infekcja może się odrodzić. Jeśli zdecydujesz się na walkę, która wcale nie musi być skuteczna wypal sobie płytkę bootowalną ze skanerem Dr Web Cure It, bo też będziemy jej potrzebować:
http://www.fixitpc.pl/index.php?/topic/102-plyty-startowe-ze-skanerami/
Zbootuj komputer z Dr Weba, uruchom skanowanie i przeskanuj cały system tyle razy, aż nie będzie nic wykrywał

Jeśli nie masz na kompie nic ważnego to lepiej zrobić formata, bo zajmie to dużo mniej czasu niż walka z Sality

**Posty:** 248 · przez **czupkolandja** 20 Cze 2010, 14:58

Ok zrobie tak... Na razie z komputerem nic sie nie dzieje oprucz tego że nie można uruchomić rejestru i menedżera zadań. Do puki nic sie nie dzieje to nie będe działał