Problem z wyłączeniem windowsa

**Posty:** 370 · przez **bracik1977** 18 Sty 2010, 23:09

Mam problem z wyłączeniem Windowsa. Gdy próbuję wyłączyć Windowsa klikam wyłącz i po zamykaniu aplikacji na nowo załącza się Windows.

**Posty:** 18165 · przez **wojtas** 19 Sty 2010, 18:04

Proszę zastosować się do zasad wstawiania logów i edytować swój post zgodnie z zasadami

**Posty:** 370 · przez **bracik1977** 20 Sty 2010, 12:46

Mam problem z wyłączeniem Windowsa. Gdy próbuję wyłączyć Windowsa klikam wyłącz i po zamykaniu aplikacji na nowo załącza się Windows.
A to jest logo z OTL

Kod: Zaznacz wszystko: OTL logfile created on: 2010-01-20 11:45:21 - Run 3 OTL by OldTimer - Version 3.1.25.2 Folder = C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1 023,00 Mb Total Physical Memory | 397,00 Mb Available Physical Memory | 39,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 76,00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 78,13 Gb Total Space | 16,57 Gb Free Space | 21,21% Space Free | Partition Type: NTFS Drive D: | 70,92 Gb Total Space | 5,50 Gb Free Space | 7,75% Space Free | Partition Type: NTFS Drive E: | 233,75 Gb Total Space | 201,59 Gb Free Space | 86,24% Space Free | Partition Type: NTFS F: Drive not present or media not loaded Drive G: | 1,37 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive H: | 338,16 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS I: Drive not present or media not loaded Computer Name: ANDRZEJ-8D202F6 Current User Name: Administrator Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-01-20 11:45:10 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie\OTL(2).exe PRC - [2010-01-16 20:40:15 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2010-01-16 20:40:14 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2010-01-10 18:00:55 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-12-28 10:24:40 | 02,940,664 | ---- | M] (www.BitComet.com) -- C:\Program Files\BitComet\BitComet.exe PRC - [2009-07-21 14:34:33 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2009-05-13 16:48:22 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2009-03-02 13:08:47 | 00,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2008-12-12 08:31:10 | 01,840,424 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe PRC - [2008-12-12 08:31:10 | 00,537,896 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe PRC - [2008-12-02 15:29:52 | 00,877,864 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe PRC - [2007-03-06 10:35:02 | 00,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe PRC - [2007-03-03 13:48:28 | 00,067,056 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe PRC - [2006-12-19 09:30:26 | 00,081,920 | ---- | M] (Prolific Technology Inc.) -- C:\WINDOWS\system32\IoctlSvc.exe PRC - [2006-10-27 00:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2006-10-11 12:45:12 | 00,075,304 | ---- | M] (ScanSoft, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe PRC - [2005-08-02 09:35:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe PRC - [2004-10-14 09:11:10 | 01,388,544 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe PRC - [2004-08-03 23:44:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2004-08-03 23:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2002-09-20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-01-20 11:45:10 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie\OTL(2).exe MOD - [2006-10-04 22:07:12 | 00,144,936 | ---- | M] (ScanSoft, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE4.0\OpHookSE4.dll MOD - [2004-08-03 23:42:34 | 01,050,624 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2010-01-16 20:40:14 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2009-07-21 14:34:33 | 00,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-05-13 16:48:22 | 00,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2008-12-12 08:31:10 | 00,537,896 | ---- | M] (Nero AG) [On_Demand | Running] -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe -- (NMIndexingService) SRV - [2008-12-02 15:29:52 | 00,877,864 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe -- (Nero BackItUp Scheduler 3) SRV - [2008-11-20 20:18:52 | 00,136,120 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc) SRV - [2007-03-06 10:35:02 | 00,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service) SRV - [2007-03-03 13:48:28 | 00,067,056 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) SRV - [2006-12-19 09:30:26 | 00,081,920 | ---- | M] (Prolific Technology Inc.) [Auto | Running] -- C:\WINDOWS\system32\IoctlSvc.exe -- (PLFlash DeviceIoControl Service) SRV - [2006-10-27 00:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2005-08-02 09:35:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc) SRV - [2002-09-20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default)) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-12-08 13:26:20 | 00,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009-05-11 10:12:24 | 00,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009-03-30 10:33:07 | 00,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2009-02-13 12:35:05 | 00,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008-11-20 20:19:06 | 00,043,872 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2007-05-16 05:00:00 | 00,042,368 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SiSGbeXP.sys -- (SiSGbeXP) DRV - [2006-01-13 14:00:52 | 00,015,872 | ---- | M] (Flint Incorporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\vd_filedisk.sys -- (VD_FileDisk) DRV - [2005-09-23 23:18:32 | 00,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MarvinBus.sys -- (MarvinBus) DRV - [2005-08-02 09:35:00 | 03,198,560 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2005-03-28 09:19:38 | 00,220,992 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smwdm.sys -- (smwdm) DRV - [2005-03-04 12:53:00 | 00,127,872 | ---- | M] (Andrea Electronics Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aeaudio.sys -- (aeaudio) DRV - [2005-03-01 05:01:40 | 00,392,704 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (senfilt) DRV - [2004-09-14 05:55:44 | 00,088,960 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MidiSyn.sys -- (MidiSyn) DRV - [2004-08-23 13:20:06 | 00,158,720 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\a347bus.sys -- (a347bus) DRV - [2004-07-17 10:36:38 | 00,027,440 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2004-05-02 09:47:08 | 00,023,040 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GVCplDrv.sys -- (GVCplDrv) DRV - [2004-04-30 09:33:00 | 00,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\a347scsi.sys -- (a347scsi) DRV - [2001-08-17 22:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\S-1-5-21-1935655697-789336058-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/ IE - HKU\S-1-5-21-1935655697-789336058-725345543-500\S-1-5-21-1935655697-789336058-725345543-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "MyStart Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.17 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..keyword.URL: "http://mystart.incredimail.com/?loc=ff_address_bar_im2_test_v2&search=" FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-01-10 18:00:59 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-01-16 20:42:16 | 00,000,000 | ---D | M] [2009-11-27 18:15:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Extensions [2010-01-19 18:13:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\q0rfzml8.default\extensions [2010-01-10 20:23:57 | 00,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\q0rfzml8.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2009-11-28 10:31:48 | 00,002,149 | ---- | M] () -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\q0rfzml8.default\searchplugins\MyStart Search.xml [2010-01-19 18:13:02 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2009-11-03 02:54:10 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-11-03 02:54:10 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-11-03 02:54:10 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-11-03 02:54:10 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-11-03 02:54:10 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-11-03 02:54:10 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2001-10-26 16:45:16 | 00,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet) O2 - BHO: (EWPBrowseObject Class) - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll () O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [OpwareSE4] C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe (ScanSoft, Inc.) O4 - HKLM..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe (InterVideo Digital Technology Corporation) O4 - HKU\S-1-5-21-1935655697-789336058-725345543-500..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.) O4 - HKU\S-1-5-21-1935655697-789336058-725345543-500..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) O4 - HKU\S-1-5-21-1935655697-789336058-725345543-500..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1935655697-789336058-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Easy-WebPrint – Dodaj do listy drukowania - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Easy-WebPrint – Drukuj - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Easy-WebPrint – Drukuj z dużą szybkością - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Easy-WebPrint – Podgląd - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\winhyo32: DllName - winhyo32.dll - C:\WINDOWS\System32\winhyo32.dll () O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-11-27 15:42:45 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2006-03-31 04:00:00 | 00,000,068 | R--- | M] () - H:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{0c7f2b4f-db67-11de-ad1e-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{0c7f2b4f-db67-11de-ad1e-806d6172696f}\Shell\AutoRun\command - "" = E:\SETUP.EXE -- File not found O33 - MountPoints2\{ad1659b0-db85-11de-a0ff-001bb9b717e8}\Shell - "" = AutoRun O33 - MountPoints2\{ad1659b0-db85-11de-a0ff-001bb9b717e8}\Shell\AutoRun\command - "" = H:\tutoria\ShelExec.exe tutoria\index.htm -- File not found O33 - MountPoints2\{b193dc42-db69-11de-a0f9-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{b193dc42-db69-11de-a0f9-806d6172696f}\Shell\AutoRun\command - "" = F:\Msetup4.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-01-18 21:54:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\WinAVI [2010-01-18 21:54:29 | 00,000,000 | ---D | C] -- C:\Program Files\WinAVI Video Converter [2010-01-18 21:50:53 | 00,303,104 | ---- | C] (Gabest) -- C:\WINDOWS\System32\rmparser.dll [2010-01-18 21:50:53 | 00,000,000 | ---D | C] -- C:\AVOneExport [2010-01-18 21:50:29 | 00,000,000 | ---D | C] -- C:\Program Files\Mpgdvd [2010-01-18 14:37:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Originals [2010-01-18 11:17:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Nowy folder (2) [2010-01-18 10:37:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\NeroDigital™ [2010-01-18 09:04:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVS4YOU [2010-01-18 09:04:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\AVS4YOU [2010-01-18 09:03:23 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\AVSMedia [2010-01-18 09:02:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\umdf [2010-01-18 09:02:02 | 00,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll [2010-01-18 09:02:02 | 00,000,000 | ---D | C] -- C:\Program Files\AVS4YOU [2010-01-17 19:54:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Nowy folder [2010-01-17 12:53:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Azureus [2010-01-17 12:53:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Azureus [2010-01-17 10:46:38 | 00,000,000 | ---D | C] -- C:\output [2010-01-16 20:42:16 | 00,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deploytk.dll [2010-01-16 20:42:16 | 00,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010-01-16 20:42:16 | 00,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2010-01-16 20:42:15 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010-01-16 20:42:15 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010-01-16 20:37:51 | 00,000,000 | ---D | C] -- C:\Program Files\Java [2010-01-16 20:31:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Sun [2010-01-15 20:19:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Photo Frame Studio [2010-01-15 20:19:09 | 00,000,000 | ---D | C] -- C:\Program Files\MOJOSOFT [2010-01-15 20:19:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\mojosoft [2010-01-15 16:40:06 | 00,000,000 | ---D | C] -- C:\Program Files\PhotoScape [2010-01-15 16:23:56 | 00,000,000 | ---D | C] -- C:\Program Files\Digital Photo Software [2010-01-15 16:23:24 | 00,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations [2010-01-15 15:30:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Photo-Bonny2 [2010-01-15 15:25:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Photo-Bon3Free [2010-01-15 14:33:24 | 00,393,216 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LFCMP13n.DLL [2010-01-15 14:33:24 | 00,279,552 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LFJ2K13n.dll [2010-01-15 14:33:24 | 00,265,728 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\LTDIS13n.dll [2010-01-15 14:33:24 | 00,181,248 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\Lfpng13n.dll [2010-01-15 14:33:24 | 00,126,464 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lftif13n.dll [2010-01-15 14:33:24 | 00,073,216 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lffax13n.dll [2010-01-15 14:33:24 | 00,030,208 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfbmp13n.dll [2010-01-15 14:33:24 | 00,026,112 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfpcx13n.dll [2010-01-15 14:33:24 | 00,024,576 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lftga13n.dll [2010-01-15 14:33:24 | 00,018,944 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfmsp13n.dll [2010-01-15 14:33:24 | 00,017,920 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\lfRaw13n.dll [2010-01-15 14:33:23 | 01,013,760 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\Ltwvc13n.dll [2010-01-15 14:33:23 | 00,446,464 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\ltimg13n.dll [2010-01-15 14:33:23 | 00,443,392 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\ltkrn13n.dll [2010-01-15 14:33:23 | 00,205,824 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\ltefx13n.dll [2010-01-15 14:33:23 | 00,139,776 | ---- | C] (LEAD Technologies, Inc.) -- C:\WINDOWS\System32\ltfil13n.DLL [2010-01-15 13:55:20 | 00,000,000 | ---D | C] -- C:\Program Files\IrfanView [2010-01-14 11:20:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Euro Truck Simulator [2010-01-12 19:08:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Any Video Converter [2010-01-12 19:07:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\AnvSoft [2010-01-12 16:48:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\German Truck Simulator [2010-01-12 14:43:35 | 00,000,000 | ---D | C] -- C:\Program Files\Total Video Converter [2010-01-10 20:24:21 | 00,000,000 | ---D | C] -- C:\Downloads [2010-01-10 20:23:51 | 00,000,000 | ---D | C] -- C:\Program Files\BitComet [2010-01-10 11:11:44 | 00,000,000 | ---D | C] -- C:\Program Files\Deutsch Translator 2 [2009-12-14 09:19:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2009-11-27 19:48:16 | 00,158,720 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347bus.sys [2009-11-27 19:48:16 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347scsi.sys [2009-11-27 15:45:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2009-11-27 15:42:38 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2009-11-27 15:42:38 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-01-20 11:43:56 | 05,505,024 | -H-- | M] () -- C:\Documents and Settings\Administrator\NTUSER.DAT [2010-01-20 11:21:18 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-01-20 11:19:59 | 00,029,184 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-01-20 06:55:23 | 00,000,558 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Any Video Converter.lnk [2010-01-20 06:40:51 | 00,029,204 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2010-01-20 06:40:38 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-01-20 06:40:36 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-01-20 06:40:33 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-01-19 22:21:51 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\Administrator\ntuser.ini [2010-01-19 19:05:31 | 00,000,148 | ---- | M] () -- C:\Documents and Settings\Administrator\Dane aplikacji\default.pls [2010-01-18 21:54:38 | 00,000,184 | ---- | M] () -- C:\WINDOWS\System32\buyurl_rm.dat [2010-01-18 21:54:30 | 00,000,688 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\WinAVI Video Converter .lnk [2010-01-18 21:52:46 | 00,000,158 | ---- | M] () -- C:\avone.ini [2010-01-18 21:50:29 | 00,000,709 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVOne - RM to Video Converter.lnk [2010-01-18 19:29:49 | 03,518,398 | R--- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Ramka zimowa 161.png [2010-01-18 19:26:26 | 03,105,806 | R--- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Ramka świąteczna 444.png [2010-01-18 15:22:37 | 00,010,351 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Kochany Dziadku w dniu twojego święta.docx [2010-01-18 14:39:26 | 01,817,613 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0035_B.jpg [2010-01-18 14:38:47 | 01,839,773 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0035_D.jpg [2010-01-18 14:37:03 | 01,911,905 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0035_BID.jpg [2010-01-18 11:14:25 | 10,485,7600 | R--- | M] () -- C:\Documents and Settings\Administrator\Pulpit\RAMKI_MORSKIE.part1.rar [2010-01-18 09:03:51 | 00,000,946 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\AVS4YOU Software Navigator.lnk [2010-01-18 09:03:35 | 00,000,897 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\AVS Video Converter 6.lnk [2010-01-18 08:57:09 | 00,000,986 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk [2010-01-18 08:57:07 | 00,000,837 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Adobe Photoshop 7.0 CE.lnk [2010-01-17 22:35:29 | 00,167,607 | -H-- | M] () -- C:\treeinfo.wc [2010-01-17 12:11:23 | 01,901,731 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0035_PBYbid.jpg [2010-01-17 12:08:36 | 01,808,041 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0035_PBYb.jpg [2010-01-17 12:03:02 | 01,830,127 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0035_PBY.jpg [2010-01-17 11:15:23 | 01,431,807 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia Kopia CIMG0035_PBY.jpg [2010-01-17 11:15:23 | 01,431,807 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0035_PBY.jpg [2010-01-17 11:10:18 | 01,100,912 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0035.JPG [2010-01-17 11:10:04 | 01,388,803 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0034.JPG [2010-01-17 11:09:56 | 01,361,264 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0033.JPG [2010-01-17 11:09:06 | 00,971,544 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0029.JPG [2010-01-17 11:09:02 | 01,209,220 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0028.JPG [2010-01-17 11:01:48 | 01,297,512 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0022.JPG [2010-01-17 10:59:38 | 01,108,642 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0021.JPG [2010-01-17 10:59:30 | 01,002,614 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0020.JPG [2010-01-17 10:47:19 | 02,357,686 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0016.JPG [2010-01-17 10:35:20 | 01,096,646 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0017.JPG [2010-01-17 10:35:02 | 01,211,747 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0016.JPG [2010-01-17 10:34:48 | 01,147,662 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0015.JPG [2010-01-17 10:34:36 | 01,250,011 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0014.JPG [2010-01-17 10:34:22 | 01,132,133 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0013.JPG [2010-01-17 10:34:16 | 01,193,724 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0012.JPG [2010-01-16 20:40:11 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010-01-16 20:40:11 | 00,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010-01-16 20:40:11 | 00,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010-01-16 20:40:11 | 00,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2010-01-16 20:40:08 | 00,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deploytk.dll [2010-01-15 16:40:23 | 00,000,706 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\PhotoScape.lnk [2010-01-15 15:40:15 | 02,934,948 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\P1160812_PBY.jpg [2010-01-15 14:33:48 | 02,949,174 | ---- | M] () -- C:\WINDOWS\FrameShow Wallpaper.BMP [2010-01-15 13:30:15 | 00,117,740 | R--- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia DLA BABCI I DZIADKA.JPG [2010-01-15 13:30:15 | 00,117,740 | R--- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia (2) DLA BABCI I DZIADKA.JPG [2010-01-15 13:30:15 | 00,117,740 | R--- | M] () -- C:\Documents and Settings\Administrator\Pulpit\DLA BABCI I DZIADKA.JPG [2010-01-12 22:52:49 | 00,370,488 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-01-12 15:52:24 | 00,111,968 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-01-10 20:23:56 | 00,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\BitComet.lnk [2010-01-10 11:12:00 | 00,001,668 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Deutsch Translator 2.lnk [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-01-18 21:54:30 | 00,000,688 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\WinAVI Video Converter .lnk [2010-01-18 21:51:19 | 00,000,158 | ---- | C] () -- C:\avone.ini [2010-01-18 21:50:51 | 01,003,520 | ---- | C] () -- C:\WINDOWS\System32\ltmm_n.dll [2010-01-18 21:50:29 | 00,000,709 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AVOne - RM to Video Converter.lnk [2010-01-18 21:50:21 | 00,000,184 | ---- | C] () -- C:\WINDOWS\System32\buyurl_rm.dat [2010-01-18 19:29:49 | 03,518,398 | R--- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Ramka zimowa 161.png [2010-01-18 19:26:26 | 03,105,806 | R--- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Ramka świąteczna 444.png [2010-01-18 14:39:25 | 01,817,613 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0035_B.jpg [2010-01-18 14:38:47 | 01,839,773 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0035_D.jpg [2010-01-18 14:36:29 | 01,911,905 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0035_BID.jpg [2010-01-18 14:36:00 | 01,431,807 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia Kopia CIMG0035_PBY.jpg [2010-01-18 11:52:04 | 10,485,7600 | R--- | C] () -- C:\Documents and Settings\Administrator\Pulpit\RAMKI_MORSKIE.part1.rar [2010-01-18 09:03:51 | 00,000,946 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\AVS4YOU Software Navigator.lnk [2010-01-18 09:03:35 | 00,000,897 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\AVS Video Converter 6.lnk [2010-01-18 09:02:34 | 00,000,837 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Adobe Photoshop 7.0 CE.lnk [2010-01-18 08:57:08 | 00,000,986 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk [2010-01-17 19:49:18 | 02,949,174 | ---- | C] () -- C:\WINDOWS\FrameShow Wallpaper.BMP [2010-01-17 12:31:23 | 00,010,351 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Kochany Dziadku w dniu twojego święta.docx [2010-01-17 12:09:43 | 01,901,731 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0035_PBYbid.jpg [2010-01-17 12:07:55 | 01,808,041 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0035_PBYb.jpg [2010-01-17 11:46:39 | 01,431,807 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0035_PBY.jpg [2010-01-17 11:15:22 | 01,830,127 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0035_PBY.jpg [2010-01-17 11:12:30 | 01,388,803 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0034.JPG [2010-01-17 11:12:30 | 01,361,264 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0033.JPG [2010-01-17 11:12:29 | 01,297,512 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0022.JPG [2010-01-17 11:12:29 | 01,209,220 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0028.JPG [2010-01-17 11:12:29 | 01,108,642 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0021.JPG [2010-01-17 11:12:29 | 01,100,912 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0035.JPG [2010-01-17 11:12:29 | 01,002,614 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0020.JPG [2010-01-17 11:12:29 | 00,971,544 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0029.JPG [2010-01-17 10:45:54 | 02,357,686 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia CIMG0016.JPG [2010-01-17 10:39:26 | 01,211,747 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0016.JPG [2010-01-17 10:39:26 | 01,147,662 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0015.JPG [2010-01-17 10:39:26 | 01,096,646 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0017.JPG [2010-01-17 10:39:25 | 01,250,011 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0014.JPG [2010-01-17 10:39:25 | 01,193,724 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0012.JPG [2010-01-17 10:39:25 | 01,132,133 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CIMG0013.JPG [2010-01-15 17:24:46 | 00,117,740 | R--- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia (2) DLA BABCI I DZIADKA.JPG [2010-01-15 16:40:23 | 00,000,706 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\PhotoScape.lnk [2010-01-15 15:40:13 | 02,934,948 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\P1160812_PBY.jpg [2010-01-15 15:33:43 | 02,234,732 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\P1160812.JPG [2010-01-15 14:09:46 | 00,117,740 | R--- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Kopia DLA BABCI I DZIADKA.JPG [2010-01-15 13:30:17 | 00,117,740 | R--- | C] () -- C:\Documents and Settings\Administrator\Pulpit\DLA BABCI I DZIADKA.JPG [2010-01-12 19:08:01 | 00,000,558 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Any Video Converter.lnk [2010-01-10 20:23:56 | 00,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\BitComet.lnk [2010-01-10 11:12:22 | 00,001,668 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Deutsch Translator 2.lnk [2009-12-17 15:46:55 | 00,210,456 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll [2009-12-17 15:46:55 | 00,206,360 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll [2009-12-17 15:46:55 | 00,198,168 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll [2009-12-17 15:46:55 | 00,198,168 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll [2009-12-17 15:46:55 | 00,194,072 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll [2009-12-17 15:46:55 | 00,026,136 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll [2009-12-15 21:45:06 | 00,037,888 | ---- | C] () -- C:\WINDOWS\System32\winhyo32.dll [2009-12-15 21:44:25 | 00,037,888 | ---- | C] () -- C:\WINDOWS\System32\winypt32.dll [2009-12-15 21:43:45 | 00,037,888 | ---- | C] () -- C:\WINDOWS\System32\winjqa32.dll [2009-12-10 06:54:18 | 00,000,148 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\default.pls [2009-12-09 21:25:26 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Irremote.ini [2009-12-09 18:39:10 | 00,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-12-08 22:21:45 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-12-08 22:21:44 | 00,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-12-08 22:21:44 | 00,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-12-08 22:21:43 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-12-08 22:21:41 | 00,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-12-08 22:21:41 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-12-05 21:36:31 | 00,000,138 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\default.rss [2009-12-05 21:35:29 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-12-05 20:14:57 | 00,064,200 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2009-12-03 17:09:31 | 00,001,502 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\__wdump.txt [2009-12-01 16:23:27 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2009-11-28 14:53:13 | 00,000,416 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI [2009-11-27 19:12:09 | 00,029,184 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-11-27 18:58:45 | 00,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-11-27 18:08:38 | 00,023,040 | ---- | C] () -- C:\WINDOWS\System32\drivers\GVCplDrv.sys [2005-08-02 09:35:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2005-08-02 09:35:00 | 01,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2005-08-02 09:35:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2005-08-02 09:35:00 | 00,540,672 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2005-08-02 09:35:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2005-08-02 09:35:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2004-08-03 23:44:00 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2004-07-17 10:36:38 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [2003-08-09 13:38:26 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL [2002-03-17 01:00:00 | 00,007,420 | ---- | C] () -- C:\WINDOWS\UA000088.DLL [color=#E56717]========== LOP Check ==========[/color] [2010-01-12 19:07:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\AnvSoft [2009-12-11 07:17:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Ashampoo [2010-01-17 15:38:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Azureus [2009-12-11 19:33:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Canneverbe_Limited [2009-12-18 07:41:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Canon [2009-11-28 14:35:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\HEXelon [2010-01-15 20:19:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\mojosoft [2009-11-28 14:53:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\ScanSoft [2009-12-07 22:25:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Ulead Systems [2009-12-11 07:16:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo [2010-01-17 12:53:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Azureus [2009-12-11 19:33:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2009-11-28 14:45:48 | 00,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ [2009-11-28 10:33:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IM [2009-11-28 10:32:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IncrediMail [2009-12-17 15:46:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InterVideo [2010-01-15 20:57:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Photo-Bon3Free [2010-01-15 15:40:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Photo-Bonny2 [2009-12-09 17:48:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle [2009-11-28 14:53:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft [2009-11-28 21:49:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl [2009-12-17 15:45:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 2183 · przez **NieWiem** 20 Sty 2010, 12:55

O20 - Winlogon\Notify\winhyo32: DllName - winhyo32.dll - C:\WINDOWS\System32\winhyo32.dll ()

To chyba to będzie problemem...

Wklej do okienka OTL taki skrypt:

:OTL
IE - HKU\S-1-5-21-1935655697-789336058-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/
FF - prefs.js..keyword.URL: "http://mystart.incredimail.com/?loc=ff_address_bar_im2_test_v2&search="
FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
O20 - Winlogon\Notify\winhyo32: DllName - winhyo32.dll - C:\WINDOWS\System32\winhyo32.dll ()
:Files
C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\q0rfzml8.default\searchplugins\MyStart Search.xml
:Commands
[purity]
[emptytemp]

I kliknij w Run Fix. Wracasz z logiem z czyszczenia i nowym z OTL z opcji Run Scan.

**Posty:** 4459 · przez **jarski185** 20 Sty 2010, 12:57

bracik1977 napisał(a):po zamykaniu aplikacji na nowo załącza się Windows.

czyli zamiast wylaczenia jest restart? jesli bedzie czysto i problem nie zniknie zerknij na to http://www.searchengines.pl/Restart-zamiast-wylaczenia-komputera-SearchEnginespl-t103455.html

**Posty:** 370 · przez **bracik1977** 21 Sty 2010, 13:54

Zrobiłem jak podałeś wkleiłem do okienka OTL ten skrypt. Pomogło. DZIĘKI.