Problem z wirusem win32/heur

[hubert87]

witam mam problem z wirusem win32/heur. chodzi o to że jakieś dwa dni temu antywir avg wynalazł u mnie to świństwo. czy to możliwe ze avg sobie z nim poradził BO POKAZUJE MI ŻE PLIKI ZAOSTAŁY WYLECZONE.mimo to mam problemy z kompem ponieważ albo nieuruchamiaja się jakieś aplikacje, albo komputer wyłącza się około 30 min. czy powodem tych kłopotów możew być ten wirus??

[Mikou@j]

Przeczytaj i zastosuj się obowiazkowe-zasady-wstawiania-logow-wazne-vt117887.html ( pokaż wymagane 3 logi)

[hubert87]

OTL logfile created on: 2010-03-31 19:08:49 - Run 1
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Documents and Settings\Daria\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 81,00% Memory free
5,00 Gb Paging File | 4,00 Gb Available in Paging File | 90,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 127,99 Gb Total Space | 110,63 Gb Free Space | 86,44% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 418,65 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive F: | 337,77 Gb Total Space | 330,11 Gb Free Space | 97,73% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SZCZEPAN-Z892IQ
Current User Name: Daria
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010-03-31 19:02:30 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Daria\Pulpit\OTL.exe
PRC - [2010-03-21 09:19:43 | 000,693,016 | ---- | M] (AVG Technologies CZ, s.r.o.) -- F:\programy\avgcsrvx.exe
PRC - [2010-03-21 09:19:43 | 000,595,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- F:\programy\avgnsx.exe
PRC - [2010-03-21 09:19:43 | 000,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- F:\programy\avgrsx.exe
PRC - [2010-03-21 09:19:42 | 002,000,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- F:\programy\avgtray.exe
PRC - [2010-03-21 09:19:42 | 001,370,488 | ---- | M] (AVG Technologies CZ, s.r.o.) -- F:\programy\avgfws8.exe
PRC - [2010-03-21 09:19:42 | 000,832,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- F:\programy\avgam.exe
PRC - [2010-03-21 09:19:42 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- F:\programy\avgwdsvc.exe
PRC - [2009-07-22 18:23:14 | 000,571,912 | R--- | M] (AVG) -- F:\programy\IdentityProtection\agent\Bin\AVGIDSWatcher.exe
PRC - [2009-07-22 18:23:12 | 001,600,008 | R--- | M] (AVG) -- F:\programy\IdentityProtection\agent\Bin\AVGIDSUI.exe
PRC - [2009-07-22 18:23:12 | 000,604,680 | R--- | M] (AVG) -- F:\programy\IdentityProtection\agent\Bin\AVGIDSMonitor.exe
PRC - [2009-07-22 18:23:10 | 005,641,736 | R--- | M] (AVG) -- F:\programy\IdentityProtection\agent\Bin\AVGIDSAgent.exe
PRC - [2009-04-22 19:37:23 | 000,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2009-03-31 10:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-11-26 14:54:12 | 001,554,728 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
PRC - [2007-09-04 19:25:44 | 000,131,072 | ---- | M] (NVIDIA) -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe


========== Modules (SafeList) ==========

MOD - [2010-03-31 19:02:30 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Daria\Pulpit\OTL.exe


========== Win32 Services (SafeList) ==========

SRV - [2010-03-21 09:19:42 | 001,370,488 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- F:\programy\avgfws8.exe -- (avgfws8)
SRV - [2010-03-21 09:19:42 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- F:\programy\avgwdsvc.exe -- (avg8wd)
SRV - [2009-07-22 18:23:14 | 000,571,912 | R--- | M] (AVG) [Auto | Running] -- F:\programy\IdentityProtection\agent\Bin\AVGIDSWatcher.exe -- (AVGIDSWatcher)
SRV - [2009-07-22 18:23:10 | 005,641,736 | R--- | M] (AVG) [Auto | Running] -- F:\programy\IdentityProtection\agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2009-03-31 10:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008-04-07 10:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2007-11-26 14:54:12 | 001,554,728 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv)
SRV - [2007-09-04 19:25:44 | 000,131,072 | ---- | M] (NVIDIA) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService)
SRV - [2005-11-14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)


========== Driver Services (SafeList) ==========

DRV - [2010-03-21 09:19:47 | 000,335,240 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010-03-21 09:19:47 | 000,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010-03-21 09:19:47 | 000,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2010-03-21 09:19:47 | 000,012,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\System32\Drivers\avgrkx86.sys -- (AvgRkx86)
DRV - [2010-03-21 09:19:34 | 000,029,208 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avgfwdx.sys -- (Avgfwfd)
DRV - [2010-03-21 09:19:34 | 000,029,208 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\avgfwdx.sys -- (Avgfwdx)
DRV - [2009-07-22 18:23:40 | 000,121,352 | R--- | M] (AVG Technologies ) [Kernel | On_Demand | Running] -- F:\programy\IdentityProtection\agent\driver\platform_XP\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2009-07-22 18:23:40 | 000,030,216 | ---- | M] (AVG Technologies ) [Kernel | On_Demand | Running] -- F:\programy\IdentityProtection\agent\driver\platform_XP\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2009-07-22 18:23:40 | 000,027,232 | ---- | M] (AVG Technologies ) [Kernel | On_Demand | Running] -- F:\programy\IdentityProtection\agent\driver\platform_XP\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2009-07-22 18:23:40 | 000,025,608 | ---- | M] (AVG Technologies ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\AVGIDSErHr.sys -- (AVGIDSErHr)
DRV - [2009-07-17 22:03:59 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-03-31 10:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009-03-20 11:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009-03-20 11:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009-03-20 11:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2009-03-16 23:33:02 | 003,597,312 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008-05-15 09:55:22 | 000,056,320 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\MSI\DualCoreCenter\RushTop.sys -- (RushTopDevice2)
DRV - [2008-04-17 16:33:26 | 004,707,328 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008-04-13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-02-27 08:08:04 | 000,028,160 | ---- | M] (MICRO-STAR INT'L CO., LTD.) [Kernel | On_Demand | Stopped] -- C:\Program Files\MSI\DualCoreCenter\NTGLM7X.sys -- (DualCoreCenter)
DRV - [2008-02-15 15:15:00 | 000,014,336 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2008-01-25 20:01:00 | 000,132,096 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nvgts.sys -- (nvgts)
DRV - [2007-11-26 14:54:12 | 000,038,440 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm)
DRV - [2007-11-26 14:54:12 | 000,036,776 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDPass.sys -- (InCDPass)
DRV - [2007-11-26 14:54:02 | 000,118,952 | ---- | M] (Nero AG) [File_System | Disabled | Running] -- C:\WINDOWS\system32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2007-09-17 16:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007-09-04 19:26:32 | 000,029,696 | ---- | M] (NVidia Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\nvoclock.sys -- (NVR0Dev)
DRV - [2006-08-14 14:51:28 | 000,105,344 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata)
DRV - [2006-07-11 21:38:30 | 000,020,480 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006-07-11 21:38:28 | 000,057,856 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
IE - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - F:\programy\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========



[2010-02-03 22:24:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daria\Dane aplikacji\Mozilla\Extensions
[2010-02-03 22:24:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daria\Dane aplikacji\Mozilla\Firefox\Profiles\avsbbtok.default\extensions

O1 HOSTS File: ([2009-05-24 09:58:10 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - F:\programy\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - F:\programy\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - F:\programy\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - F:\programy\Toolbar\IEToolbar.dll ()
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKLM..\Run: [AVG8_TRAY] F:\programy\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [AVGIDS] F:\programy\IdentityProtection\agent\bin\AVGIDSUI.exe (AVG)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003..\Run: [ares] F:\programy\Ares\Ares.exe (Ares Development Group)
O4 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003..\Run: [cbvcs] C:\WINDOWS\System32\urretnd.exe File not found
O4 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Funkcja Google Sidewiki - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll (Google Inc.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1263679213468 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1263679347500 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - F:\programy\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Daria\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Daria\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-04-15 21:03:29 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-03-16 17:42:52 | 000,000,047 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{505513b6-be6f-11de-b817-00218518c5a2}\Shell - "" = AutoRun
O33 - MountPoints2\{505513b6-be6f-11de-b817-00218518c5a2}\Shell\AutoRun\command - "" = H:\setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010-03-31 19:01:24 | 000,555,520 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Daria\Pulpit\OTL.exe
[2010-03-23 22:16:04 | 000,268,048 | ---- | C] (MetaCreations Corporation) -- C:\WINDOWS\System32\dxtmeta2.dll
[2010-03-21 09:19:47 | 000,335,240 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010-03-21 09:19:47 | 000,108,552 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010-03-21 09:19:47 | 000,027,784 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010-03-21 09:19:47 | 000,012,552 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010-03-21 09:19:47 | 000,011,952 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010-03-21 09:19:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg
[2010-03-21 09:19:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar
[2010-03-21 09:19:34 | 000,050,968 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgfwdx.dll
[2010-03-21 09:19:34 | 000,029,208 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgfwdx.sys
[2010-03-21 09:19:34 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2010-03-21 09:17:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-03-21 09:09:04 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2010-03-21 09:09:04 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2010-03-21 09:09:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-03-18 14:31:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google
[2010-03-18 13:18:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Daria\Pulpit\owe
[2010-03-18 13:16:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010-02-13 12:46:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google
[2009-04-16 07:53:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\NVIDIA Corporation
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010-03-31 19:02:30 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Daria\Pulpit\OTL.exe
[2010-03-31 18:53:06 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010-03-31 18:53:05 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-03-31 18:53:04 | 000,173,776 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap
[2010-03-31 18:53:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-03-31 16:41:51 | 003,346,432 | ---- | M] () -- C:\Documents and Settings\Daria\ntuser.dat
[2010-03-31 16:41:51 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Daria\ntuser.ini
[2010-03-31 16:31:00 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1979792683-839522115-1003UA.job
[2010-03-31 14:31:00 | 000,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1979792683-839522115-1003Core.job
[2010-03-31 14:13:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010-03-31 13:50:56 | 000,002,262 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-03-30 14:18:09 | 005,323,352 | -H-- | M] () -- C:\Documents and Settings\Daria\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-03-28 21:37:45 | 000,284,915 | ---- | M] () -- C:\Documents and Settings\Daria\Pulpit\gmer.zip
[2010-03-28 10:42:47 | 000,984,842 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-03-28 10:42:47 | 000,448,004 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-03-28 10:42:47 | 000,392,296 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-03-28 10:42:47 | 000,074,230 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-03-28 10:42:47 | 000,058,596 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-03-23 21:21:13 | 000,000,670 | ---- | M] () -- C:\Documents and Settings\Daria\Pulpit\Skrót do FarmingSimulator2009.lnk
[2010-03-21 11:39:11 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010-03-21 09:19:49 | 039,212,704 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010-03-21 09:19:47 | 006,061,540 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2010-03-21 09:19:47 | 000,463,779 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2010-03-21 09:19:47 | 000,335,240 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010-03-21 09:19:47 | 000,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010-03-21 09:19:47 | 000,041,076 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010-03-21 09:19:47 | 000,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010-03-21 09:19:47 | 000,012,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010-03-21 09:19:47 | 000,011,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010-03-21 09:19:47 | 000,000,471 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG 8.5.lnk
[2010-03-21 09:19:34 | 000,050,968 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgfwdx.dll
[2010-03-21 09:19:34 | 000,029,208 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgfwdx.sys
[2010-03-20 20:49:23 | 000,000,320 | ---- | M] () -- C:\Documents and Settings\Daria\Moje dokumenty\spider.sav
[2010-03-02 23:34:42 | 000,000,716 | ---- | M] () -- C:\WINDOWS\win.ini
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010-03-28 21:38:05 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\Daria\Pulpit\gmer.exe
[2010-03-28 21:37:44 | 000,284,915 | ---- | C] () -- C:\Documents and Settings\Daria\Pulpit\gmer.zip
[2010-03-23 21:21:13 | 000,000,670 | ---- | C] () -- C:\Documents and Settings\Daria\Pulpit\Skrót do FarmingSimulator2009.lnk
[2010-03-21 09:19:47 | 039,212,704 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010-03-21 09:19:47 | 006,061,540 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2010-03-21 09:19:47 | 000,463,779 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2010-03-21 09:19:47 | 000,041,076 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010-03-21 09:19:47 | 000,000,471 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AVG 8.5.lnk
[2010-03-20 20:49:23 | 000,000,320 | ---- | C] () -- C:\Documents and Settings\Daria\Moje dokumenty\spider.sav
[2009-10-26 20:50:50 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2009-10-26 20:50:50 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2009-10-26 20:50:43 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Daria\Dane aplikacji\$_hpcst$.hpc
[2009-07-27 18:42:39 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009-07-22 17:17:19 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-07-17 22:03:59 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-04-26 12:13:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\D3DCompiler_36.dll
[2009-04-20 22:47:25 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\Daria\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-04-16 07:59:27 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009-04-16 07:52:39 | 000,217,088 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll
[2007-10-25 18:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys

========== LOP Check ==========

[2010-03-21 09:59:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar
[2009-07-17 22:06:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010-02-05 15:51:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations
[2010-02-04 17:55:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-10-26 20:54:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2009-07-17 22:08:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daria\Dane aplikacji\DAEMON Tools Lite
[2009-10-08 21:46:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daria\Dane aplikacji\Nowe Gadu-Gadu
[2009-05-03 22:28:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daria\Dane aplikacji\OpenFM
[2009-05-05 22:07:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daria\Dane aplikacji\OpenOffice.org
[2009-10-26 20:54:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daria\Dane aplikacji\PC Suite
[2009-10-26 20:50:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daria\Dane aplikacji\Samsung
[2009-04-26 12:41:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daria\Dane aplikacji\Summer Athletics 2008

========== Purity Check ==========


< End of report >

Dodano Dzisiaj, 18:12:
OTL Extras logfile created on: 2010-03-31 19:08:49 - Run 1
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Documents and Settings\Daria\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 81,00% Memory free
5,00 Gb Paging File | 4,00 Gb Available in Paging File | 90,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 127,99 Gb Total Space | 110,63 Gb Free Space | 86,44% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 418,65 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive F: | 337,77 Gb Total Space | 330,11 Gb Free Space | 97,73% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SZCZEPAN-Z892IQ
Current User Name: Daria
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Nowe Gadu-Gadu\gg.exe" = C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu beta -- (GG Network S.A.)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Disabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server -- (PeeringPortal)
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server -- (PeeringPortal)
"F:\programy\Ares\Ares.exe" = F:\programy\Ares\Ares.exe:*:Enabled:Ares p2p for windows -- (Ares Development Group)
"F:\programy\avgam.exe" = F:\programy\avgam.exe:*:Enabled:avgam.exe -- (AVG Technologies CZ, s.r.o.)
"F:\programy\avgdiag.exe" = F:\programy\avgdiag.exe:*:Enabled:avgdiag.exe -- (AVG Technologies CZ, s.r.o.)
"F:\programy\avgdiagex.exe" = F:\programy\avgdiagex.exe:*:Enabled:avgdiagex.exe -- (AVG Technologies CZ, s.r.o.)
"F:\programy\avgnsx.exe" = F:\programy\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.)
"F:\programy\avgupd.exe" = F:\programy\avgupd.exe:*:Enabled:avgupd.exe -- File not found


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02EBDBB9-4600-41D3-B566-40CB861511D2}" = World of Warcraft FREE Trial
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{17D60B8C-927A-06CE-9AC5-B1949964EF15}" = Catalyst Control Center Core Implementation
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 13
"{31BFEC6C-1F27-45B5-839C-BCBAE327993A}" = OpenOffice.org 3.0
"{350C97C2-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{45B3A3BD-F90D-48FE-A147-D74878A51045}" = Nero 7 Essentials
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{674FD2DC-B87D-D5B4-AF07-73AE91974301}" = Catalyst Control Center HydraVision Full
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7ADFF9AF-B9D8-FC53-0377-AFDDCBE8929E}" = Catalyst Control Center Graphics Full New
"{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA nTune
"{7D979C05-1742-1AE1-E61A-25A33449AF44}" = Catalyst Control Center Graphics Previews Common
"{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver
"{8396DF41-E71D-7170-A03A-A0A2D8633B57}" = Catalyst Control Center Graphics Full Existing
"{9C6F9C01-FE98-90B4-36BD-5CCC4A8A1AA8}" = ccc-core-preinstall
"{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC599724-5755-48C1-ABE7-ABB857652930}" = PC Connectivity Solution
"{BF605A48-663D-AA9A-F128-95ED7F2C6413}" = Skins
"{C28FC5E5-86EE-B4B5-044A-E484E78F9C7B}" = CCC Help English
"{C6752201-DC16-C30F-478C-36EC595BEFDB}" = ccc-core-static
"{CC7F0FAA-9768-4CE2-B133-72C66492EC06}" = LS-USBMX1/2/3 Steering...
"{D0A85D80-425F-CBB2-B35A-69EFD283DF39}" = ccc-utility
"{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding
"{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{F314EA69-9590-4876-8E2B-44CBEE7FFAA1}" = AVG Identity Protection
"{FE6FD041-F8D2-1323-178C-7C71C1980C51}" = Catalyst Control Center Graphics Light
"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)
"6194C28A8F62DD817EA1B918E6E46E806A21B452" = Pakiet sterowników systemu Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)
"65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Pakiet sterowników systemu Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"All ATI Software" = ATI - Software Uninstall Utility
"ALLPlayer_is1" = ALLPlayer V3.X
"Ares" = Ares 2.1.3
"ATI Display Driver" = ATI Display Driver
"AVG8Uninstall" = AVG 8.5
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DualCoreCenter_is1" = DualCoreCenter
"eMusic Promotion" = 50 FREE MP3s +1 Free Audiobook!
"FarmingSimulator2009DE_is1" = Landwirtschafts-Simulator 2009
"Hard Truck 18 Wheels of Steel" = Hard Truck 18 Wheels of Steel
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA nTune
"InstallShield_{EBB794ED-D282-4334-92FB-254481EFF514}" = Pro Evolution Soccer 6
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Monster Jam_is1" = Monster Jam
"MSI Live Update 3" = MSI Live Update 3
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nowe Gadu-Gadu" = Nowe Gadu-Gadu
"NVIDIA Drivers" = NVIDIA Drivers
"PhotoScape" = PhotoScape
"Picasa 3" = Picasa 3
"SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile Modem Device" = Samsung Mobile Modem Device Software
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SAMSUNG USB Mobile Device" = SAMSUNG USB Mobile Device Software
"Winamp" = Winamp
"Winamp Toolbar" = Winamp Toolbar
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = Archiwizator WinRAR

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2010-03-26 05:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

Error - 2010-03-26 06:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

Error - 2010-03-26 08:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

Error - 2010-03-27 04:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

Error - 2010-03-27 11:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

Error - 2010-03-27 12:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

Error - 2010-03-27 14:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

Error - 2010-03-27 15:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

Error - 2010-03-27 16:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

Error - 2010-03-28 05:13:14 | Computer Name = SZCZEPAN-Z892IQ | Source = Google Update | ID = 20
Description =

[ System Events ]
Error - 2010-03-29 04:48:59 | Computer Name = SZCZEPAN-Z892IQ | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Sterownik portu równoległego z powodu następującego
błędu: %%1058

Error - 2010-03-29 17:00:12 | Computer Name = SZCZEPAN-Z892IQ | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Sterownik portu równoległego z powodu następującego
błędu: %%1058

Error - 2010-03-30 06:01:27 | Computer Name = SZCZEPAN-Z892IQ | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Sterownik portu równoległego z powodu następującego
błędu: %%1058

Error - 2010-03-30 07:24:08 | Computer Name = SZCZEPAN-Z892IQ | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Sterownik portu równoległego z powodu następującego
błędu: %%1058

Error - 2010-03-30 07:29:45 | Computer Name = SZCZEPAN-Z892IQ | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Sterownik portu równoległego z powodu następującego
błędu: %%1058

Error - 2010-03-30 07:34:23 | Computer Name = SZCZEPAN-Z892IQ | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 10.0.8.22 na karcie
sieciowej
o adresie sieciowym 00218518C5A2.

Error - 2010-03-31 07:51:23 | Computer Name = SZCZEPAN-Z892IQ | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Sterownik portu równoległego z powodu następującego
błędu: %%1058

Error - 2010-03-31 10:28:36 | Computer Name = SZCZEPAN-Z892IQ | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Sterownik portu równoległego z powodu następującego
błędu: %%1058

Error - 2010-03-31 12:51:37 | Computer Name = SZCZEPAN-Z892IQ | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Sterownik portu równoległego z powodu następującego
błędu: %%1058

Error - 2010-03-31 12:53:30 | Computer Name = SZCZEPAN-Z892IQ | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Sterownik portu równoległego z powodu następującego
błędu: %%1058


< End of report >

Dodano Dzisiaj, 18:13:
niewrzuciłem logów z gmera bo przy uruchamainiu tego programu wyłączał mi się komputer

[lamar]

Wstaw logi w tagi [code] albo wrzuć na http://wklej.org/.Gmer wyłaczał ci kompa, bo wasz aktywny plik sptd.sys

DRV - [2009-07-17 22:03:59 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)

programy-emulujace-napedy-wazne-vt117886.html

[hubert87]

http://wklej.org/id/309939/

Dodano Dzisiaj, 09:08:
http://wklej.org/id/309940/

[wojtas]

a gdzie log z Gmera ?? on jest obowiązkowy

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
IE - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - F:\programy\Toolbar\IEToolbar.dll ()
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - F:\programy\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - F:\programy\Toolbar\IEToolbar.dll ()
O3 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKU\S-1-5-21-1275210071-1979792683-839522115-1003..\Run: [cbvcs] C:\WINDOWS\System32\urretnd.exe File not found
O4 - HKLM..\Run: [KernelFaultCheck] File not found

:Files
C:\Program Files\Winamp Toolbar
C:\Program Files\Google\Google Toolbar
F:\programy\Toolbar
C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1979792683-839522115-1003UA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1979792683-839522115-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdź reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia komputera + log z Gmera

[hubert87]

usunąłem programy emulujące i plik sptd.sys i nadal kompyter się wyłącza i pojawia się na niebieskim tle komunikat o błedach.

[wojtas]

ok.. to wykonaj co kazałem i daj logi po usuwaniu

[hubert87]

http://wklej.org/id/315612/

Dodano Dzisiaj, 07:07:
http://wklej.org/id/315613/

[wojtas]

Czynności końcowe :

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )


Zaktualizuj zabezpieczenia:
>>> Java™ 6 Update 19

[hubert87]

dzięki mam nadzieje ze z kompem wszystko będzie ok.