Niechciane stronki

[paleta]

Podczas pracy w przgladarce otwierają mi sie automatycznie jakies stronki:/ Czytalem troche o tym i zrobilem juz potrzebne testy tym programem....

Dodano Dzisiaj, 19:37:
http://www.wklej.org/id/246438/?zawin=1

http://www.wklej.org/id/246448/

Dodano Dzisiaj, 19:38:
CZekam na odpowiedz! Z góry dzieki!

[wojtas]

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
IE - HKU\S-1-5-21-1708537768-308236825-682003330-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.theprizeday.com/today.php
FF - prefs.js..browser.search.defaultenginename: "Winamp Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..extensions.enabledItems: {F2DDDB92-1605-4260-9B25-45A4DAE87B50}:1.0
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.11.2
FF - prefs.js..extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:4.1.0.1880
FF - prefs.js..extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.1.0.5240
FF - prefs.js..extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:4.1.0.1800
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampab&query="
FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.1.0.1880\FF [2009-12-08 16:47:11 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5240\FF [2009-12-08 16:47:24 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.1.0.1800\FF [2009-12-08 16:47:38 | 00,000,000 | ---D | M]
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5240\ACEIEAddOn.dll ()
O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\4.1.0.1800\CPAIEAddOn.dll ()
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1880\CMWIE.dll ()
O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1710\TCPIE.dll ()
O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.1.0.1880\WSO.dll ()
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-21-1708537768-308236825-682003330-500\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [C6501Sound] File not found
O4 - HKLM..\Run: [Internet Today Task] C:\Program Files\Internet Today\1.1.0.1230\InternetToday.exe ()

:Files
C:\RECYCLER
C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\bu9lpilh.default\searchplugins\winamp-search.xml
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Winamp Toolbar
C:\Program Files\Winamp Toolbar
C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Textual Content Provider
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer
C:\Program Files\QuestService
C:\Documents and Settings\All Users\Dane aplikacji\QuestService
C:\Program Files\Textual Content Provider
C:\Program Files\Content Management Wizard
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Internet Today
C:\Program Files\Internet Today
C:\Program Files\Customized Platform Advancer
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer
C:\Program Files\Automated Content Enhancer
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Web Search Operator
C:\Program Files\Web Search Operator
C:\Program Files\Gameztar Toolbar
C:\Documents and Settings\All Users\Dane aplikacji\{62BCF14B-CFA3-42F6-B4DB-345C3842B1B8}
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar

:Services
QuestService Service

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia komputera

[paleta]

czyli ten OTL.txt co mi wyskoczyl po restarcie wklejam do okna Custom Scans/Fixes? A raport z czyszczenia kompa gdzie znajde??? Sorry ze tak o wszystko pytam ale wole sie spytac niz cos zepsuc...

[wojtas]

raport powinien wyskoczyć automatycznie po wklejeniu tego skryptu co podałem... po resecie tworzysz sam nowego loga z OTL

[paleta]

a ten nowy log mam tutaj na forum pokazac czy co????

[wojtas]

tak. tak jak napisałem

[paleta]

Kod: Zaznacz wszystko

OTL logfile created on: 2010-01-18 22:02:46 - Run 3
OTL by OldTimer - Version 3.1.15.1     Folder = C:\Documents and Settings\Administrator\Pulpit\Potrzebne
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

1022,42 Mb Total Physical Memory | 609,71 Mb Available Physical Memory | 59,63% Memory free
2,40 Gb Paging File | 2,06 Gb Available in Paging File | 85,86% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 51,39 Gb Total Space | 45,17 Gb Free Space | 87,89% Space Free | Partition Type: NTFS
Drive D: | 97,65 Gb Total Space | 58,47 Gb Free Space | 59,88% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: KOMP
Current User Name: Administrator
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2009-12-31 17:06:06 | 02,033,432 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programy\AVG\AVG9\avgtray.exe
PRC - [2009-12-19 21:50:54 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009-12-19 21:50:54 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009-12-11 19:35:29 | 00,537,600 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\Potrzebne\OTL.exe
PRC - [2009-12-11 18:14:46 | 00,600,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programy\AVG\AVG9\avgnsx.exe
PRC - [2009-12-11 18:14:46 | 00,503,576 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programy\AVG\AVG9\avgrsx.exe
PRC - [2009-11-29 13:38:28 | 01,055,000 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programy\AVG\AVG9\avgchsvx.exe
PRC - [2009-11-29 13:38:28 | 00,702,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programy\AVG\AVG9\avgcsrvx.exe
PRC - [2009-11-29 13:38:27 | 00,906,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programy\AVG\AVG9\avgemc.exe
PRC - [2009-11-29 13:38:27 | 00,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programy\AVG\AVG9\avgwdsvc.exe
PRC - [2009-09-27 18:19:46 | 00,172,100 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2008-12-08 15:50:04 | 00,054,576 | ---- | M] (Hewlett-Packard) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe
PRC - [2008-04-14 21:51:18 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-10-23 14:19:06 | 01,410,344 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
PRC - [2007-10-23 14:19:06 | 00,382,248 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
PRC - [2007-10-23 14:18:46 | 00,202,024 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
PRC - [2006-02-19 05:24:52 | 00,239,320 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
PRC - [2006-02-19 04:21:22 | 00,288,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
PRC - [2004-07-28 16:39:28 | 00,962,661 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
PRC - [2003-10-16 18:07:12 | 00,626,688 | ---- | M] (France Télécom R&D) -- C:\Program Files\Neostrada TP\NeostradaTP.exe
PRC - [2003-10-16 18:07:12 | 00,053,248 | ---- | M] (France Télécom R&D) -- C:\Program Files\Neostrada TP\TaskBarIcon.exe
PRC - [2003-10-16 18:07:12 | 00,020,480 | ---- | M] (France Télécom R&D) -- C:\Program Files\Neostrada TP\Watch.exe
PRC - [2003-10-16 18:07:10 | 00,200,704 | ---- | M] (France Télécom R&D) -- C:\Program Files\Neostrada TP\ComComp.exe
PRC - [2003-10-16 18:07:10 | 00,024,576 | ---- | M] () -- C:\Program Files\Neostrada TP\CnxMon.exe


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2009-12-11 19:35:29 | 00,537,600 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\Potrzebne\OTL.exe


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2009-12-19 21:50:54 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009-11-29 13:38:27 | 00,906,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Programy\AVG\AVG9\avgemc.exe -- (avg9emc)
SRV - [2009-11-29 13:38:27 | 00,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Programy\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009-09-27 18:19:46 | 00,172,100 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (nvsvc)
SRV - [2007-10-23 14:19:06 | 00,382,248 | ---- | M] (Nero AG) [On_Demand | Running] -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe -- (NMIndexingService)
SRV - [2007-08-09 08:27:52 | 00,073,728 | ---- | M] (HP) [Auto | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2003-07-28 20:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2009-11-29 14:22:01 | 00,360,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2009-11-29 13:38:32 | 00,333,192 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2009-11-29 13:38:32 | 00,028,424 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2009-09-27 16:12:22 | 07,655,872 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2008-05-21 15:02:44 | 00,209,200 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Stopped] -- C:\WINDOWS\system32\drivers\Si3114r5.sys -- (Si3114r5)
DRV - [2008-05-21 15:02:36 | 00,105,344 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvatabus.sys -- (nvatabus)
DRV - [2008-04-14 01:15:14 | 00,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM)
DRV - [2008-04-13 21:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2007-07-10 02:42:32 | 01,310,720 | R--- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\c6501.sys -- (c65013264)
DRV - [2007-03-08 00:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2006-07-01 23:32:26 | 00,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006-04-25 01:52:28 | 00,100,736 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata)
DRV - [2006-04-15 04:09:06 | 00,013,056 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006-04-15 04:09:04 | 00,034,176 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006-04-13 01:04:39 | 00,049,664 | R--- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HPZid412.sys -- (HPZid412)
DRV - [2006-04-13 01:04:39 | 00,021,568 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HPZius12.sys -- (HPZius12)
DRV - [2006-04-13 01:04:39 | 00,016,496 | R--- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HPZipr12.sys -- (HPZipr12)
DRV - [2004-08-13 03:56:20 | 00,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2004-03-02 09:26:58 | 00,050,007 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys)
DRV - [2004-03-02 09:24:16 | 00,127,065 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw)
DRV - [2001-08-18 00:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll File not found


IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1708537768-308236825-682003330-500\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKU\S-1-5-21-1708537768-308236825-682003330-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl
IE - HKU\S-1-5-21-1708537768-308236825-682003330-500\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Neostrada TP\SearchPageURL.dll ()
IE - HKU\S-1-5-21-1708537768-308236825-682003330-500\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll File not found
IE - HKU\S-1-5-21-1708537768-308236825-682003330-500\..\URLSearchHook: {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1708537768-308236825-682003330-500\S-1-5-21-1708537768-308236825-682003330-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultenginename: "Winamp Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..browser.search.selectedEngine: "Allegro"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {F2DDDB92-1605-4260-9B25-45A4DAE87B50}:1.0
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.11.2
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampab&query="

FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Components: C:\Programy\Mozilla Firefox\components [2010-01-11 17:24:56 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Plugins: C:\Programy\Mozilla Firefox\plugins [2010-01-07 17:38:45 | 00,000,000 | ---D | M]

[2009-11-30 16:42:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Extensions
[2010-01-18 12:49:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\bu9lpilh.default\extensions
[2009-12-08 17:05:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\bu9lpilh.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010-01-18 20:10:49 | 00,000,358 | ---- | M] () -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\bu9lpilh.default\searchplugins\winamp-search.xml

O1 HOSTS File: (742 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll File not found
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programy\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1708537768-308236825-682003330-500\..\Toolbar\WebBrowser: (gry Toolbar) - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Programy\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Programy\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe File not found
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [WooCnxMon] C:\Program Files\Neostrada TP\CnxMon.exe ()
O4 - HKLM..\Run: [WOOTASKBARICON] C:\Program Files\Neostrada TP\TaskBarIcon.exe (France Télécom R&D)
O4 - HKLM..\Run: [WOOWATCH] C:\Program Files\Neostrada TP\Watch.exe (France Télécom R&D)
O4 - HKU\S-1-5-21-1708537768-308236825-682003330-500..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\.DEFAULT..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.dll (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.dll (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.dll (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Development Company, L.P.)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1708537768-308236825-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00  [binary data]
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - C:\Programy\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab (Java Plug-in 1.4.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programy\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-11-29 12:51:18 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{dd00fd2a-dcdd-11de-9529-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{dd00fd2a-dcdd-11de-9529-806d6172696f}\Shell\AutoRun\command - "" = E:\Bin\Assetup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010-01-18 20:37:54 | 93,234,472 | ---- | C] (Apple Inc.) -- C:\Documents and Settings\Administrator\Pulpit\iTunesSetup(2).exe
[2010-01-18 20:17:35 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Pulpit\Potrzebne
[2010-01-18 20:08:38 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2010-01-14 17:22:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2010-01-10 15:11:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\EnchantedCavern
[2010-01-10 15:10:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\AlawarWrapper
[2010-01-10 15:10:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper
[2010-01-10 15:10:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\gry
[2010-01-10 15:10:23 | 00,000,000 | ---D | C] -- C:\Program Files\Conduit
[2010-01-10 15:10:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Conduit
[2010-01-10 15:10:22 | 00,000,000 | ---D | C] -- C:\Program Files\gry
[2010-01-10 15:10:11 | 00,000,000 | ---D | C] -- C:\Program Files\Gry.Pl
[2009-11-29 13:37:52 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2009-11-29 13:37:52 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2009-11-29 13:37:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-11-29 13:37:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010-01-18 22:01:08 | 93,234,472 | ---- | M] (Apple Inc.) -- C:\Documents and Settings\Administrator\Pulpit\iTunesSetup(2).exe
[2010-01-18 20:10:18 | 00,253,748 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010-01-18 20:09:42 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-01-18 20:09:41 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-01-18 20:08:52 | 03,145,728 | -H-- | M] () -- C:\Documents and Settings\Administrator\NTUSER.DAT
[2010-01-18 11:45:03 | 47,997,615 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010-01-18 11:44:44 | 00,142,275 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010-01-17 12:32:56 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-01-10 20:00:42 | 00,074,240 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Informacje do zadań 1.doc
[2010-01-09 22:32:00 | 00,078,848 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Marek Winicjusz to żołnierz i bogaty patrycjusz.doc
[2010-01-03 13:05:00 | 00,049,664 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Sztuka starożytnej Grecji powstała i rozwijała się po upadku kultury mykeńskiej spowodowanym w głównym stopniu najazdem Dorów.doc
[2010-01-02 15:17:03 | 00,001,101 | ---- | M] () -- C:\WINDOWS\bestplayer.ini
[2010-01-02 15:17:03 | 00,000,000 | ---- | M] () -- C:\WINDOWS\bestplayer.bbt
[2010-01-02 15:17:02 | 00,000,000 | ---- | M] () -- C:\WINDOWS\bestplayer.bpp
[2010-01-02 13:24:55 | 00,033,280 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Sztuka starożytnej Mezopotamii.doc
[2010-01-02 13:00:42 | 00,032,256 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Sztuka starożytnego Egiptu była całkowicie podporządkowana religii.doc
[2009-12-29 21:55:44 | 00,117,640 | ---- | M] () -- C:\test.htm
[2009-12-26 18:45:19 | 00,003,584 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-12-26 18:41:54 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-01-10 20:00:41 | 00,074,240 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Informacje do zadań 1.doc
[2010-01-09 22:32:00 | 00,078,848 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Marek Winicjusz to żołnierz i bogaty patrycjusz.doc
[2010-01-02 13:24:55 | 00,033,280 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Sztuka starożytnej Mezopotamii.doc
[2010-01-02 13:00:41 | 00,032,256 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Sztuka starożytnego Egiptu była całkowicie podporządkowana religii.doc
[2010-01-02 12:10:41 | 00,049,664 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Sztuka starożytnej Grecji powstała i rozwijała się po upadku kultury mykeńskiej spowodowanym w głównym stopniu najazdem Dorów.doc
[2009-12-25 20:06:07 | 00,003,584 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-12-08 16:54:42 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-12-05 17:14:15 | 00,001,101 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2009-11-30 16:11:35 | 00,000,154 | ---- | C] () -- C:\WINDOWS\adidsl.ini
[2009-11-30 16:11:35 | 00,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini
[2009-11-30 16:11:32 | 00,000,342 | ---- | C] () -- C:\WINDOWS\adiras.ini
[2009-11-30 16:11:31 | 00,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll
[2009-11-30 16:11:31 | 00,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll
[2009-11-30 16:11:13 | 00,041,068 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll
[2009-11-30 16:01:27 | 00,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2009-11-30 15:56:47 | 00,000,749 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
[2009-11-29 14:18:20 | 00,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-11-29 13:45:31 | 00,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-11-29 13:17:03 | 00,053,248 | R--- | C] () -- C:\WINDOWS\System32\C6501rm.dll
[2009-11-29 13:17:03 | 00,000,162 | ---- | C] () -- C:\WINDOWS\C6501.ini.cfl
[2009-11-29 13:16:41 | 00,004,571 | R--- | C] () -- C:\WINDOWS\C6501.ini.cfg
[2009-11-29 13:16:34 | 00,000,326 | R--- | C] () -- C:\WINDOWS\c6501.ini
[2009-11-29 13:15:31 | 00,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2009-11-29 13:15:30 | 00,012,377 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009-11-29 13:15:14 | 00,012,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2001-07-07 03:00:02 | 00,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

[color=#E56717]========== LOP Check ==========[/color]

[2010-01-10 15:12:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\EnchantedCavern
[2009-11-29 13:58:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Nowe Gadu-Gadu
[2009-12-19 21:51:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\VitySoft
[2010-01-10 15:10:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper
[2009-11-29 13:38:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\avg9
[2009-12-01 19:53:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Zylom

[color=#E56717]========== Purity Check ==========[/color]


< End of report >


Dodano Dzisiaj, 22:26:
to jest ten nowo stworzony log a tego raportu nietety juz nie mam bo nie zapisalem tego pliku;/ Byl bardzo potrzebny???

[wojtas]

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampab&query="
O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1708537768-308236825-682003330-500\..\Toolbar\WebBrowser: (gry Toolbar) - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)

:Files
C:\Program Files\Conduit
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Conduit
C:\Program Files\gry
C:\Program Files\Gry.Pl
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\gry

Kliknij w Run Fix. I potwierdz reset kompa .

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) i daj raport ze skanu

[paleta]

jesli sie juz nei pojawiaja to musze to wszystko zrobic????

[wojtas]

tak wykonaj