Proszę o sprawdzenie loga - stan po usuwaniu...

[chrisalis]

Proszę o sprawdzenie loga.
Usuwałem kilka rzeczy takich jak webhdll.dll, MYBAR.DLL, MYSRCHAS.DLL.
Oczywiście poczytałem przedtem ale czy wszystko zrobiłem OK i do końca...?
Z góry dziękuję.

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:07:25, on 2009-05-16
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
D:\Bezpieczeństwo\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\cFosSpeed\spd.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\WINDOWS\VM303_STI.EXE
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
D:\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\cFosSpeed\cFosSpeed.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\StatBar\StatBar.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Komunikatory\Tlen.pl\tlen.exe
C:\Program Files\Desktop Sidebar\dsidebar.exe
C:\WINDOWS\system32\HPZipm12.exe
D:\Komunikatory\Gadu-Gadu\gg.exe
D:\MICROS~1\rapimgr.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\The Bat!\thebat.exe
D:\Poczta\IncrediMail\bin\IMApp.exe
D:\Komunikatory\Gadu-Gadu\spellchecker_gg.exe
D:\top_netinfo\top_netinfo.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - (no file)
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - (no file)
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] D:\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [Onet.pl AutoUpdate] C:\Program Files\Common Files\Onet.pl\AutoUpdate.exe /tsr
O4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [StatBar] C:\Program Files\StatBar\StatBar.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "D:\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [IncrediMail] D:\Poczta\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Komunikator] D:\Komunikatory\Tlen.pl\tlen.exe
O4 - HKCU\..\Run: [SIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe"
O4 - HKCU\..\Run: [Nowe Gadu-Gadu] D:\Komunikatory\Gadu-Gadu\gg.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetupo.dll" "%SystemRoot%\System32\syssetup.dll" (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetupo.dll" "%SystemRoot%\System32\syssetup.dll" (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetupo.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetupo.dll" "%SystemRoot%\System32\syssetup.dll" (User 'Default user')
O4 - Startup: Skype.lnk = ?
O4 - Startup: The Bat!.lnk = C:\Program Files\The Bat!\thebat.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - D:\Poczta\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (Installer Class) - http://www.nanoscan.com/as/v1/cabs/ascinstie.cab
O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - http://www.nanoscan.com/cabs/nanoinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{539DE4A9-5556-470E-8128-CDD872FC1E1F}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{A96D3558-9B2C-4EB8-8DAD-F3ADB4979A28}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{C78B124F-7250-44DD-B702-34A204691BD1}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{CAD43B40-3327-4EBB-90F2-4D33270EB1EC}: NameServer = 89.108.195.20 89.108.195.21
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: 
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Bezpieczeństwo\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\cFosSpeed\spd.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\hpbpro.exe
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\hpboid.exe
O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing)
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
O23 - Service: CLCV0 (UTSCSI) - Unknown owner - C:\WINDOWS\system32\UTSCSI.EXE

--
End of file - 10555 bytes


[wojtas]

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z OTListIt2

[chrisalis]

co do np. wwdc
to używam go od dawna, jednakże ostatnio zauważyłem że pierwsza pozycja od góry kilkakrotnie mi zmieniła kolor na żółty... czym to moze być spowodowane, jakaś porada...?

nie wiem czy to ważne dla przebiegu sprawdzania ale jeszcze mała inormacja co do loga:
w trakcie działania SDFixa w trybie awaryjnym wyskoczył komunikat "zły format sterownika urządzenia wirtualnego..."
nie wiem o co tu chodzi i wybrałem "ignoruj", zresztą nic innego wybrać sie nie dało, no i jakoś poleciało dalej

log z SDFixa:

Kod: Zaznacz wszystko

[b]SDFix: Version 1.240 [/b]
Run by user on 2009-05-18 at 10:34

Microsoft Windows XP [Wersja 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]:

No Trojan Files Found






Removing Temp Files

[b]ADS Check [/b]:



                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-18 10:42:28
Windows 5.1.2600 Dodatek Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf40]
"khjeh"=hex:20,02,00,00,b5,35,31,d9,7d,a0,5c,23,0d,d3,27,30,68,89,db,94,63,..
"hj34z0"=hex:ec,84,c9,56,b2,8f,31,44,28,d5,cc,e0,f1,89,94,10,87,0e,96,7d,40,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf41]
"khjeh"=hex:20,02,00,00,b5,35,31,d9,3c,bf,11,05,0d,d3,27,30,5b,89,db,94,62,..
"hj34z0"=hex:df,84,c9,56,b2,8f,31,44,28,d5,cc,e0,f1,89,94,10,87,0e,96,7d,3a,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf42]
"khjeh"=hex:20,02,00,00,08,11,6e,3c,06,69,9b,ba,31,e6,c7,21,00,1a,19,61,a3,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf43]
"khjeh"=hex:20,02,00,00,63,1f,6e,3c,47,8c,14,54,ee,6f,73,3b,f9,c0,0f,68,a8,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\Komunikatory\\AQQ\\AQQ.exe"="D:\\Komunikatory\\AQQ\\AQQ.exe:*:Enabled:P2P AQQ"
"D:\\Komunikatory\\Skype\\Skype.exe"="D:\\Komunikatory\\Skype\\Skype.exe:*:Enabled:Skype"
"D:\\Poczta\\IncrediMail\\bin\\IncrediMail_Install.exe"="D:\\Poczta\\IncrediMail\\bin\\IncrediMail_Install.exe:*:Enabled:IncrediMail Installer"
"C:\\Documents and Settings\\user\\Ustawienia lokalne\\Temp\\ImInstaller\\IncrediMail\\IncrediMail_Install.exe"="C:\\Documents and Settings\\user\\Ustawienia lokalne\\Temp\\ImInstaller\\IncrediMail\\IncrediMail_Install.exe:*:Enabled:IncrediMail Installer"
"D:\\Poczta\\IncrediMail\\bin\\IncMail.exe"="D:\\Poczta\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"D:\\Poczta\\IncrediMail\\bin\\IMApp.exe"="D:\\Poczta\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"D:\\Poczta\\IncrediMail\\bin\\ImpCnt.exe"="D:\\Poczta\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"C:\\Program Files\\FlashGet\\FlashGet.exe"="C:\\Program Files\\FlashGet\\FlashGet.exe:*:Enabled:Flashget"
"D:\\Komunikatory\\Tlen.pl\\tlen.exe"="D:\\Komunikatory\\Tlen.pl\\tlen.exe:*:Enabled:Komunikator Tlen.pl"
"C:\\Program Files\\Azureus\\Azureus.exe"="C:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus"
"D:\\Komunikatory\\Gadu-Gadu\\gg.exe"="D:\\Komunikatory\\Gadu-Gadu\\gg.exe:*:Enabled:Gadu-Gadu - program gˆ˘wny"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\\Microsoft ActiveSync\\rapimgr.exe"="D:\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"D:\\Microsoft ActiveSync\\wcescomm.exe"="D:\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"D:\\Microsoft ActiveSync\\WCESMgr.exe"="D:\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\\Documents and Settings\\user\\Pulpit\\My Mobile\\MyMobiler\\MyMobiler.exe"="C:\\Documents and Settings\\user\\Pulpit\\My Mobile\\MyMobiler\\MyMobiler.exe:*:Enabled:My Mobile - My Mobiler"
"E:\\Instalki i inne\\PODSTAWA\\Programy P2P\\uTorrent\\utorrent.exe"="E:\\Instalki i inne\\PODSTAWA\\Programy P2P\\uTorrent\\utorrent.exe:*:Enabled:uTorrent"
"C:\\Program Files\\Magentic\\bin\\MgImp.exe"="C:\\Program Files\\Magentic\\bin\\MgImp.exe:*:Enabled:Magentic"
"C:\\Program Files\\Magentic\\bin\\Magentic.exe"="C:\\Program Files\\Magentic\\bin\\Magentic.exe:*:Enabled:Magentic"
"C:\\Program Files\\Magentic\\bin\\MgApp.exe"="C:\\Program Files\\Magentic\\bin\\MgApp.exe:*:Enabled:Magentic"
"E:\\GRY\\TINcan-Race\\Game\\TINCan_Race.exe"="E:\\GRY\\TINcan-Race\\Game\\TINCan_Race.exe:*:Enabled:TINCan_RaceI?"
"C:\\Documents and Settings\\user\\Ustawienia lokalne\\Temp\\ImInstaller\\FreeEcardMovies_Installer.exe"="C:\\Documents and Settings\\user\\Ustawienia lokalne\\Temp\\ImInstaller\\FreeEcardMovies_Installer.exe:*:Enabled:IncrediMail Installer"
"E:\\Metin2_PL\\metin2.bin"="E:\\Metin2_PL\\metin2.bin:*:Enabled:metin2"
"D:\\utorrent 1.8.2.exe"="D:\\utorrent 1.8.2.exe:*:Enabled:uTorrent"
"D:\\utorrent.exe"="D:\\utorrent.exe:*:Enabled:uTorrent"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\\Microsoft ActiveSync\\rapimgr.exe"="D:\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"D:\\Microsoft ActiveSync\\wcescomm.exe"="D:\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"D:\\Microsoft ActiveSync\\WCESMgr.exe"="D:\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

[b]Remaining Files [/b]:



[b]Files with Hidden Attributes [/b]:

Mon 14 Apr 2008     1,695,232 ..SH. --- "C:\Program Files\Messenger\msmsgs.exe"
Wed 22 Oct 2008       949,072 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\advcheck.dll"
Mon 15 Sep 2008     1,562,960 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
Mon 26 Jan 2009     1,740,632 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 26 Jan 2009     5,365,592 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 26 Jan 2009     2,144,088 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Wed 22 Oct 2008       962,896 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\Tools.dll"

[b]Finished![/b]



log z OTListIt2:

Kod: Zaznacz wszystko

OTListIt logfile created on: 2009-05-18 11:21:23 - Run 2
OTListIt2 by OldTimer - Version 2.0.15.8     Folder = D:\skróty na pulpit\Security  Cleaner Optimize\skanowanie_wirusy_rootkity\virusy ostatnie
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

511,48 Mb Total Physical Memory | 126,04 Mb Available Physical Memory | 24,64% Memory free
1,22 Gb Paging File | 0,60 Gb Available in Paging File | 49,66% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,93 Gb Total Space | 8,17 Gb Free Space | 41,00% Space Free | Partition Type: NTFS
Drive D: | 45,93 Gb Total Space | 0,51 Gb Free Space | 1,10% Space Free | Partition Type: NTFS
Drive E: | 45,92 Gb Total Space | 0,33 Gb Free Space | 0,71% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 660,36 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive I: | 641,90 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive J: | 524,42 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive Q: | 232,88 Gb Total Space | 0,50 Gb Free Space | 0,22% Space Free | Partition Type: NTFS

Computer Name: HOME1234
Current User Name: user
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Standard
File Age = 1 Day
Company Name Whitelist: On

[color=orange]========== Processes (SafeList) ==========[/color]

PRC - [2008-10-31 11:12:25 | 00,068,865 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
PRC - [2008-02-27 11:24:48 | 00,427,288 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
PRC - [2008-10-31 11:12:09 | 00,151,297 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
PRC - [2007-08-06 07:39:43 | 00,312,880 | ---- | M] (GRISOFT s.r.o.) -- D:\Bezpieczeństwo\AVG Anti-Spyware 7.5\guard.exe
PRC - [2008-04-14 19:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2009-02-10 13:02:28 | 00,385,240 | R--- | M] (cFos Software GmbH) -- C:\Program Files\cFosSpeed\spd.exe
PRC - [2009-01-23 11:46:14 | 00,203,280 | ---- | M] () -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
PRC - [2003-06-20 00:25:00 | 00,322,120 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
PRC - [2006-06-01 18:22:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2008-02-27 12:22:58 | 00,494,088 | ---- | M] () -- C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
PRC - [2008-11-24 14:33:10 | 00,045,056 | ---- | M] () -- C:\WINDOWS\system32\UTSCSI.EXE
PRC - [2005-10-25 13:56:00 | 00,061,440 | ---- | M] (Vimicro) -- C:\WINDOWS\VM303_STI.EXE
PRC - [2004-08-22 18:05:02 | 00,081,920 | ---- | M] (DAEMON'S HOME) -- C:\Program Files\D-Tools\daemon.exe
PRC - [2008-05-02 06:15:46 | 00,015,872 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe
PRC - [2008-02-27 11:24:52 | 00,140,568 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
PRC - [2007-02-25 01:58:13 | 00,098,304 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\QuickTime\qttask.exe
PRC - [2008-02-27 11:22:46 | 02,611,368 | ---- | M] (Acronis) -- C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
PRC - [2008-02-27 11:29:50 | 00,910,088 | ---- | M] (Acronis) -- C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
PRC - [2008-06-12 15:28:45 | 00,266,497 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
PRC - [2004-04-06 12:28:46 | 00,172,032 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
PRC - [2004-02-12 14:38:56 | 00,049,152 | ---- | M] (Hewlett-Packard Company) -- D:\HP\HP Software Update\HPWuSchd2.exe
PRC - [2004-05-12 16:18:56 | 00,241,664 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
PRC - [2004-06-07 07:28:04 | 00,659,456 | ---- | M] (Hewlett-Packard) -- C:\WINDOWS\system32\hphmon06.exe
PRC - [2009-02-10 13:02:24 | 00,876,760 | R--- | M] (cFos Software GmbH) -- C:\Program Files\cFosSpeed\cFosSpeed.exe
PRC - [2003-07-25 03:40:06 | 00,335,872 | ---- | M] (Globe Software) -- C:\Program Files\StatBar\StatBar.exe
PRC - [2006-11-13 15:57:16 | 01,289,000 | ---- | M] (Microsoft Corporation) -- D:\Microsoft ActiveSync\wcescomm.exe
PRC - [2004-03-18 17:55:48 | 00,065,536 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
PRC - [2009-01-26 16:31:16 | 02,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009-01-17 16:48:08 | 05,853,672 | ---- | M] (o2.pl Sp. z o.o.) -- D:\Komunikatory\Tlen.pl\tlen.exe
PRC - [2006-07-09 21:58:00 | 01,777,664 | ---- | M] (Idea2) -- C:\Program Files\Desktop Sidebar\dsidebar.exe
PRC - [2009-04-20 16:56:20 | 09,818,728 | ---- | M] (GG Network S.A.) -- D:\Komunikatory\Gadu-Gadu\gg.exe
PRC - [2006-11-13 15:57:06 | 00,199,464 | ---- | M] (Microsoft Corporation) -- D:\Microsoft ActiveSync\rapimgr.exe
PRC - [2006-06-09 11:24:06 | 00,618,496 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files\RALINK\Common\RaUI.exe
PRC - [2009-01-29 15:11:26 | 24,096,040 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2005-03-10 13:04:02 | 08,981,576 | ---- | M] (Ritlabs S.R.L.) -- C:\Program Files\The Bat!\thebat.exe
PRC - [2009-02-06 12:10:02 | 00,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiprvse.exe
PRC - [2009-02-02 13:45:56 | 00,189,824 | ---- | M] (IncrediMail, Ltd.) -- D:\Poczta\IncrediMail\bin\IMApp.exe
PRC - [2009-04-20 16:08:38 | 00,077,824 | ---- | M] () -- D:\Komunikatory\Gadu-Gadu\spellchecker_gg.exe
PRC - [2009-05-06 12:43:14 | 04,862,464 | ---- | M] () -- D:\top_netinfo\top_netinfo.exe
PRC - [2009-02-26 10:49:18 | 00,099,328 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2009-05-18 10:20:45 | 00,501,248 | ---- | M] (OldTimer Tools) -- D:\skróty na pulpit\Security  Cleaner Optimize\skanowanie_wirusy_rootkity\virusy ostatnie\OTListIt2.exe

[color=orange]========== Win32 Services (SafeList) ==========[/color]

SRV - [2008-02-27 11:24:48 | 00,427,288 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc [Auto | Running])
SRV - [2008-10-31 11:12:25 | 00,068,865 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe -- (AntiVirScheduler [Auto | Running])
SRV - [2008-10-31 11:12:09 | 00,151,297 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe -- (AntiVirService [Auto | Running])
SRV - [2007-04-13 03:20:52 | 00,033,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - File not found --  -- (Automatic LiveUpdate Scheduler [Auto | Stopped])
SRV - [2007-08-06 07:39:43 | 00,312,880 | ---- | M] (GRISOFT s.r.o.) -- D:\Bezpieczeństwo\AVG Anti-Spyware 7.5\guard.exe -- (AVG Anti-Spyware Guard [Auto | Running])
SRV - [2009-02-10 13:02:28 | 00,385,240 | R--- | M] (cFos Software GmbH) -- C:\Program Files\cFosSpeed\spd.exe -- (cFosSpeedS [Auto | Running])
SRV - [2007-04-13 03:21:18 | 00,068,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2008-04-14 19:20:44 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2004-03-01 09:40:52 | 00,077,824 | R--- | M] (Hewlett-Packard Company) -- C:\WINDOWS\system32\hpbpro.exe -- (HP Port Resolver [On_Demand | Stopped])
SRV - [2004-03-01 09:40:52 | 00,073,728 | R--- | M] (Hewlett-Packard Company) -- C:\WINDOWS\system32\hpboid.exe -- (HP Status Server [On_Demand | Stopped])
SRV - File not found --  -- (LiveUpdate [On_Demand | Stopped])
SRV - [2009-01-23 11:46:14 | 00,203,280 | ---- | M] () -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service [Auto | Running])
SRV - [2003-06-20 00:25:00 | 00,322,120 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE -- (MDM [Auto | Running])
SRV - [2006-06-01 18:22:00 | 00,155,715 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc [Auto | Running])
SRV - [2003-07-28 21:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2004-03-18 17:55:48 | 00,065,536 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12 [On_Demand | Running])
SRV - [2007-02-07 13:39:36 | 00,206,544 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe -- (SNDSrvc [On_Demand | Stopped])
SRV - [2008-02-27 12:22:58 | 00,494,088 | ---- | M] () -- C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe -- (TryAndDecideService [Auto | Running])
SRV - [2008-11-24 14:33:10 | 00,045,056 | ---- | M] () -- C:\WINDOWS\system32\UTSCSI.EXE -- (UTSCSI [Auto | Running])
SRV - [2006-12-01 12:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

[color=orange]========== Driver Services (SafeList) ==========[/color]

DRV - [2004-12-16 18:55:06 | 00,029,440 | ---- | M] (Siemens AG) -- C:\WINDOWS\system32\drivers\actser.sys -- (actser [On_Demand | Running])
DRV - [2009-01-15 19:27:44 | 00,021,275 | ---- | M] (Meetinghouse Data Communications) -- C:\WINDOWS\system32\DRIVERS\AegisP.sys -- (AegisP [Auto | Running])
DRV - [2006-11-10 16:05:00 | 00,018,688 | ---- | M] (Arcsoft, Inc.) -- C:\WINDOWS\system32\drivers\Afc.sys -- (Afc [On_Demand | Running])
DRV - [2003-12-08 12:53:48 | 00,053,600 | ---- | M] (THOMSON) -- C:\WINDOWS\system32\DRIVERS\alcan5wn.sys -- (alcan5wn [On_Demand | Stopped])
DRV - [2003-12-08 12:53:46 | 00,070,688 | ---- | M] (THOMSON) -- C:\WINDOWS\system32\DRIVERS\alcaudsl.sys -- (alcaudsl [On_Demand | Stopped])
DRV - [2003-04-01 11:51:30 | 00,719,052 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running])
DRV - [2002-05-06 12:01:08 | 00,017,005 | ---- | M] (Adaptec) -- C:\WINDOWS\System32\drivers\ASPI32.SYS -- (ASPI32 [Auto | Running])
DRV - [2007-08-06 07:39:31 | 00,011,000 | ---- | M] () -- D:\Bezpieczeństwo\AVG Anti-Spyware 7.5\guard.sys -- (AVG Anti-Spyware Driver [System | Running])
DRV - [2006-09-05 18:03:16 | 00,003,968 | ---- | M] (GRISOFT, s.r.o.) -- C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys -- (AvgAsCln [System | Running])
DRV - [2007-02-27 16:25:01 | 00,011,840 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys -- (avgio [System | Running])
DRV - [2008-05-20 17:29:41 | 00,052,032 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys -- (avgntflt [On_Demand | Running])
DRV - [2008-11-26 11:23:00 | 00,075,072 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\avipbb.sys -- (avipbb [System | Running])
DRV - [2005-11-22 09:28:14 | 00,215,552 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\system32\DRIVERS\avwebcam.sys -- (AVWEBCAM [Auto | Running])
DRV - [2009-02-10 13:02:34 | 00,787,672 | ---- | M] (cFos Software GmbH) -- C:\WINDOWS\system32\DRIVERS\cfosspeed.sys -- (cFosSpeed [On_Demand | Running])
DRV - [2004-08-22 17:31:10 | 00,155,136 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus [Boot | Running])
DRV - [2004-08-22 17:31:48 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt [Boot | Running])
DRV - [2008-04-13 20:45:29 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running])
DRV - [2006-11-23 15:18:08 | 00,030,820 | ---- | M] (Paragon Software Group) -- C:\WINDOWS\system32\drivers\hotcore.sys -- (hotcore [Boot | Running])
DRV - [2004-03-18 11:52:00 | 00,051,088 | R--- | M] (HP) -- C:\WINDOWS\system32\DRIVERS\HPZid412.sys -- (HPZid412 [On_Demand | Stopped])
DRV - [2004-03-18 11:52:00 | 00,016,496 | R--- | M] (HP) -- C:\WINDOWS\system32\DRIVERS\HPZipr12.sys -- (HPZipr12 [On_Demand | Stopped])
DRV - [2004-03-18 11:51:00 | 00,021,744 | ---- | M] (HP) -- C:\WINDOWS\system32\DRIVERS\HPZius12.sys -- (HPZius12 [On_Demand | Stopped])
DRV - [2004-08-04 00:41:48 | 00,220,032 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys -- (HSFHWBS2 [On_Demand | Running])
DRV - [2004-08-04 00:41:56 | 01,041,536 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys -- (HSF_DP [On_Demand | Running])
DRV - [2008-03-17 11:03:46 | 00,101,376 | R--- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys -- (hwdatacard [On_Demand | Running])
DRV - [2008-02-26 14:07:54 | 00,073,728 | ---- | M] (EZB Systems, Inc.) -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive [System | Running])
DRV - [2004-08-04 00:41:56 | 00,011,868 | ---- | M] (Conexant) -- C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys -- (mdmxsdk [Auto | Running])
DRV - [2006-06-01 18:22:00 | 03,925,920 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running])
DRV - [2004-08-09 13:29:28 | 00,053,920 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06 [System | Running])
DRV - [2004-08-09 13:33:26 | 00,114,016 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02 [Boot | Running])
DRV - [2004-07-19 16:49:54 | 00,007,040 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1 [Boot | Running])
DRV - [2001-08-17 23:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2006-06-08 11:49:50 | 00,344,064 | ---- | M] (Ralink Technology, Corp.) -- C:\WINDOWS\system32\DRIVERS\rt73.sys -- (RT73 [On_Demand | Running])
DRV - [2004-08-04 00:31:34 | 00,020,992 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\system32\DRIVERS\RTL8139.SYS -- (rtl8139 [On_Demand | Running])
DRV - [2007-11-13 12:25:55 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [Auto | Running])
DRV - [2003-12-01 17:20:52 | 00,004,832 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01 [Boot | Running])
DRV - [2008-10-29 17:01:20 | 00,129,248 | ---- | M] (Acronis) -- C:\WINDOWS\system32\DRIVERS\snapman.sys -- (snapman [Boot | Running])
DRV - [2007-03-01 11:34:22 | 00,028,352 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\ssmdrv.sys -- (ssmdrv [System | Running])
DRV - [2007-02-07 13:38:42 | 00,011,536 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMDNS.SYS -- (SYMDNS [On_Demand | Stopped])
DRV - [2006-09-15 23:52:12 | 00,124,016 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS -- (SymEvent [On_Demand | Stopped])
DRV - [2007-02-07 13:38:46 | 00,173,392 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMFW.SYS -- (SYMFW [On_Demand | Stopped])
DRV - [2007-02-07 13:38:56 | 00,036,976 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMIDS.SYS -- (SYMIDS [On_Demand | Stopped])
DRV - [2007-02-07 13:38:52 | 00,047,184 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMNDIS.SYS -- (SYMNDIS [On_Demand | Stopped])
DRV - [2007-02-07 13:38:58 | 00,017,968 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV [On_Demand | Stopped])
DRV - [2007-02-07 13:39:02 | 00,269,616 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI [System | Running])
DRV - [2008-10-29 17:01:01 | 00,368,480 | ---- | M] (Acronis) -- C:\WINDOWS\system32\DRIVERS\tdrpman.sys -- (tdrpman [Boot | Running])
DRV - [2008-10-29 17:01:28 | 00,044,384 | ---- | M] (Acronis) -- C:\WINDOWS\system32\DRIVERS\tifsfilt.sys -- (tifsfilter [Auto | Running])
DRV - [2008-10-29 17:01:28 | 00,441,760 | ---- | M] (Acronis) -- C:\WINDOWS\system32\DRIVERS\timntr.sys -- (timounter [Boot | Running])
DRV - [2008-04-13 21:45:12 | 00,060,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio [On_Demand | Stopped])
DRV - [2002-12-26 22:41:00 | 00,026,880 | R--- | M] (VIA Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1 [Boot | Running])
DRV - [2005-07-18 15:34:20 | 00,015,264 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\vsb.sys -- (vsbus [On_Demand | Stopped])
DRV - [2005-07-18 15:34:22 | 00,047,744 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\vserial.sys -- (vserial [On_Demand | Stopped])
DRV - [2006-11-06 18:04:56 | 00,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\wceusbsh.sys -- (wceusbsh [On_Demand | Stopped])
DRV - [2003-09-17 05:00:58 | 00,197,908 | R--- | M] (Copyright @2000-2006 Leadtek Research Inc.) -- C:\WINDOWS\system32\drivers\wf88vcap.sys -- (WF23880 [Auto | Running])
DRV - [2003-09-17 05:01:00 | 00,010,405 | R--- | M] (Copyright @2000-2006 Leadtek Research Inc.) -- C:\WINDOWS\system32\drivers\WF88XBAR.sys -- (WF88XBAR [Auto | Running])
DRV - [2003-09-17 05:00:54 | 00,034,422 | R--- | M] (Copyright @2000-2006 Leadtek Research Inc.) -- C:\WINDOWS\system32\drivers\WF88TUNE.sys -- (WFTUNE [Auto | Running])
DRV - [2004-08-04 00:41:50 | 00,685,056 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\system32\DRIVERS\HSFCXTS2.sys -- (winachsf [On_Demand | Running])
DRV - [2005-10-27 15:34:06 | 00,390,849 | ---- | M] (Vimicro Corporation) -- C:\WINDOWS\System32\Drivers\usbVM303.sys -- (ZSMC303 [On_Demand | Running])

[color=orange]========== Standard Registry (SafeList) ==========[/color]


[color=orange]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\PROGRAM FILES\MCAFEE\SITEADVISOR [2009-05-01 09:44:18 | 00,000,000 | ---D | M]


O1 HOSTS File: (686 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (MyWay Search Assistant BHO) - {04079851-5845-4dea-848C-3ECD647AA554} - C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL (My Way)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - Reg Error: Key error. File not found
O2 - BHO: (Idea2 SidebarBrowserMonitor Class) - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll (Idea2)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - Reg Error: Key error. File not found
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll ()
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - Reg Error: Key error. File not found
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll ()
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe" (Acronis)
O4 - HKLM..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe (Acronis)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min (Avira GmbH)
O4 - HKLM..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) (Vimicro)
O4 - HKLM..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe (cFos Software GmbH)
O4 - HKLM..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 (DAEMON'S HOME)
O4 - HKLM..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" (Hewlett-Packard Company)
O4 - HKLM..\Run: [HP Software Update] "D:\HP\HP Software Update\HPWuSchd2.exe" (Hewlett-Packard Company)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe (HP)
O4 - HKLM..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HPHUPD06] D:\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe (Hewlett-Packard)
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found
O4 - HKLM..\Run: [Onet.pl AutoUpdate] C:\Program Files\Common Files\Onet.pl\AutoUpdate.exe /tsr File not found
O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime (Apple Computer, Inc.)
O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
O4 - HKLM..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" ()
O4 - HKCU..\Run: [fsm]  File not found
O4 - HKCU..\Run: [H/PC Connection Agent] "D:\Microsoft ActiveSync\wcescomm.exe" (Microsoft Corporation)
O4 - HKCU..\Run: [IncrediMail] D:\Poczta\IncrediMail\bin\IncMail.exe /c (IncrediMail, Ltd.)
O4 - HKCU..\Run: [Komunikator] D:\Komunikatory\Tlen.pl\tlen.exe (o2.pl Sp. z o.o.)
O4 - HKCU..\Run: [Nowe Gadu-Gadu] D:\Komunikatory\Gadu-Gadu\gg.exe (GG Network S.A.)
O4 - HKCU..\Run: [SIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe" (Idea2)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKCU..\Run: [StatBar] C:\Program Files\StatBar\StatBar.exe (Globe Software)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)
O4 - Startup: C:\Documents and Settings\user\Menu Start\Programy\Autostart\Skype.lnk = C:\WINDOWS\Installer\{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}\SkypeIcon.exe ()
O4 - Startup: C:\Documents and Settings\user\Menu Start\Programy\Autostart\The Bat!.lnk = C:\Program Files\The Bat!\thebat.exe (Ritlabs S.R.L.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 181
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - D:\Poczta\INCRED~1\bin\resources\WebMenuImg.htm ()
O8 - Extra context menu item: Download all links using BitComet - Reg Error: Value error. File not found
O8 - Extra context menu item: Download all videos using BitComet - Reg Error: Value error. File not found
O8 - Extra context menu item: Download link using &BitComet - Reg Error: Value error. File not found
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\WINDOWS\webhdll.dll (webHancer Corporation)
O15 - HKLM\..Trusted Domains: 49 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 55 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} http://www.nanoscan.com/as/v1/cabs/ascinstie.cab (Installer Class)
O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} http://www.nanoscan.com/cabs/nanoinst.cab (NanoInstaller Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab (Java Plug-in 1.5.0_07)
O16 - DPF: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab (Java Plug-in 1.5.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab (Java Plug-in 1.5.0_07)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Interfaces\{539DE4A9-5556-470E-8128-CDD872FC1E1F}\\NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Interfaces\{A96D3558-9B2C-4EB8-8DAD-F3ADB4979A28}\\NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Interfaces\{C78B124F-7250-44DD-B702-34A204691BD1}\\NameServer = 192.168.1.1
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll ()
O18 - Protocol\Filter:  - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O28 - HKLM ShellExecuteHooks: {57B86673-276A-48B2-BAE7-C6DBB3020EB8} - D:\Bezpieczeństwo\AVG Anti-Spyware 7.5\shellexecutehook.dll (GRISOFT s.r.o.)
O30 - LSA: Authentication Packages - (relog_ap) - C:\WINDOWS\System32\relog_ap.dll (Acronis)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004-01-01 01:04:49 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008-11-02 18:39:57 | 00,034,021 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
O32 - AutoRun File - [2002-07-12 05:32:54 | 00,000,045 | R--- | M] () - I:\AUTORUN.INF -- [ CDFS ]
O32 - AutoRun File - [2009-03-21 21:32:30 | 00,000,000 | ---D | M] - Q:\AutoMapa EU -- [ NTFS ]
O33 - MountPoints2\{88670aa2-fd0a-11dd-8a10-000e2e486e45}\Shell - "" = AutoRun
O33 - MountPoints2\{88670aa2-fd0a-11dd-8a10-000e2e486e45}\Shell\AutoRun\command - "" = O:\AutoRun.exe -- File not found
O33 - MountPoints2\{88670aa3-fd0a-11dd-8a10-000e2e486e45}\Shell - "" = AutoRun
O33 - MountPoints2\{88670aa3-fd0a-11dd-8a10-000e2e486e45}\Shell\AutoRun\command - "" = O:\AutoRun.exe -- File not found
O33 - MountPoints2\{99d4f730-3653-11de-8a1a-000e2e486e45}\Shell - "" = AutoRun
O33 - MountPoints2\{99d4f730-3653-11de-8a1a-000e2e486e45}\Shell\AutoRun\command - "" = O:\AutoRun.exe -- File not found
O33 - MountPoints2\{99d4f733-3653-11de-8a1a-000e2e486e45}\Shell - "" = AutoRun
O33 - MountPoints2\{99d4f733-3653-11de-8a1a-000e2e486e45}\Shell\AutoRun\command - "" = O:\AutoRun.exe -- File not found
O33 - MountPoints2\{a6ba7eee-cda9-11db-9d84-000e50f65206}\Shell - "" = AutoRun
O33 - MountPoints2\{a6ba7eee-cda9-11db-9d84-000e50f65206}\Shell\AutoRun\command - "" = I:\MafiaLauncher.EXE -- [2002-08-02 23:00:06 | 00,745,472 | R--- | M] ()
O33 - MountPoints2\{c4485c95-364a-11de-8a19-000e2e486e45}\Shell - "" = AutoRun
O33 - MountPoints2\{c4485c99-364a-11de-8a19-000e2e486e45}\Shell - "" = AutoRun
O33 - MountPoints2\{c4485c99-364a-11de-8a19-000e2e486e45}\Shell\AutoRun\command - "" = O:\AutoRun.exe -- File not found
O33 - MountPoints2\{c4485c9b-364a-11de-8a19-000e2e486e45}\Shell - "" = AutoRun
O33 - MountPoints2\{c4485c9b-364a-11de-8a19-000e2e486e45}\Shell\AutoRun\command - "" = O:\AutoRun.exe -- File not found
O33 - MountPoints2\{c4485c9e-364a-11de-8a19-000e2e486e45}\Shell - "" = AutoRun
O33 - MountPoints2\{c4485c9e-364a-11de-8a19-000e2e486e45}\Shell\AutoRun\command - "" = O:\AutoRun.exe -- File not found
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - * [2009-05-18 11:12:43 | 00,000,000 | ---D | M]

[color=orange]========== Files/Folders - Created Within 1 Day ==========[/color]

[2009-05-18 10:33:20 | 00,580,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\user32.dll
[2009-05-18 10:30:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT
[2009-05-18 10:25:18 | 00,000,000 | ---D | C] -- C:\SDFix
[2009-05-18 10:14:40 | 00,000,696 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\SpywareBlaster.lnk
[2009-05-17 14:38:39 | 00,000,492 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\zawirusowanie - strony forum.lnk
[2009-05-17 14:34:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\user\Dane aplikacji\The Bat!
[2009-05-17 14:29:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\user\Dane aplikacji\Opera
[2009-05-17 14:16:28 | 00,000,462 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Komunikatory.lnk
[2009-05-17 14:16:25 | 00,000,429 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\P2P.lnk
[2009-05-17 14:16:22 | 00,000,434 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\NERO.lnk
[2009-05-17 14:16:18 | 00,000,434 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Film.lnk
[2009-05-17 14:16:12 | 00,000,504 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Security  Cleaner Optimize.lnk
[2009-05-17 14:14:24 | 00,000,459 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\scrensavers.lnk
[2009-05-17 14:14:05 | 00,000,437 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Wrrum.lnk
[2009-05-17 13:50:50 | 00,001,311 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Skrót do pliki txt - RÓŻNE.lnk
[2009-05-17 13:47:05 | 00,000,506 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Pisz Szybciej.lnk
[2009-05-17 13:46:27 | 00,000,522 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\b-ki.lnk
[2009-05-17 13:44:38 | 00,000,535 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Gry-inne.lnk
[2009-02-08 10:47:54 | 00,044,544 | ---- | C] () -- C:\WINDOWS\System32\Gif89.dll
[2009-02-04 14:56:41 | 00,000,357 | ---- | C] () -- C:\WINDOWS\whInstaller.ini
[2009-02-01 21:37:23 | 00,000,214 | ---- | C] () -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2009-01-15 19:26:59 | 00,295,018 | ---- | C] () -- C:\WINDOWS\System32\Install7x.dll
[2008-12-09 12:20:36 | 00,000,051 | ---- | C] () -- C:\WINDOWS\pccuo.ini
[2008-12-09 12:07:07 | 00,000,250 | ---- | C] () -- C:\WINDOWS\SCNDRVU.INI
[2008-12-09 12:04:40 | 00,028,672 | ---- | C] () -- C:\WINDOWS\pccuo.dll
[2008-10-30 18:15:57 | 00,000,120 | ---- | C] () -- C:\WINDOWS\CIS_Setup_3.5.54375.427_XP_Vista_x32.INI
[2008-10-26 21:27:50 | 00,000,000 | ---- | C] () -- C:\WINDOWS\windowfx3.ini
[2008-10-26 21:26:32 | 00,000,000 | ---- | C] () -- C:\WINDOWS\windowfx2.ini
[2008-10-24 17:13:28 | 00,001,221 | ---- | C] () -- C:\WINDOWS\UAMedytor.ini
[2008-10-17 13:13:18 | 00,000,042 | ---- | C] () -- C:\WINDOWS\fiscprn.ini
[2008-10-17 13:09:17 | 00,000,066 | ---- | C] () -- C:\WINDOWS\mxreader.INI
[2008-10-17 13:05:20 | 00,101,888 | ---- | C] () -- C:\WINDOWS\System32\BUTIL.DLL
[2008-10-17 13:05:20 | 00,002,055 | R--- | C] () -- C:\WINDOWS\BTI.INI
[2008-07-09 13:08:19 | 00,001,054 | ---- | C] () -- C:\WINDOWS\disney.ini
[2008-07-09 13:08:14 | 00,000,182 | ---- | C] () -- C:\WINDOWS\disneysy.ini
[2008-07-07 19:05:15 | 00,000,008 | ---- | C] () -- C:\WINDOWS\XCreatorSave.ini
[2008-06-28 18:37:01 | 00,002,229 | ---- | C] () -- C:\WINDOWS\Palm OS Emulator.ini
[2008-06-16 12:58:08 | 00,000,059 | ---- | C] () -- C:\WINDOWS\DeskToppers.ini
[2007-07-23 10:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007-07-23 10:03:32 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2007-07-23 10:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007-07-23 10:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007-07-23 10:03:30 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007-03-21 16:52:32 | 00,000,220 | ---- | C] () -- C:\WINDOWS\screensaverusersettingUNTITL~1.ini
[2007-03-20 23:31:12 | 00,000,086 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2007-03-14 19:55:12 | 00,000,020 | ---- | C] () -- C:\WINDOWS\naglos.INI
[2007-03-07 10:17:15 | 00,037,888 | ---- | C] () -- C:\WINDOWS\System32\setupnt.dll
[2007-03-06 18:58:31 | 00,000,035 | ---- | C] () -- C:\WINDOWS\C_it.ini
[2007-03-06 18:45:47 | 00,000,056 | ---- | C] () -- C:\WINDOWS\Ź—_‚ł‚Ü.INI
[2007-03-04 01:45:04 | 04,239,360 | ---- | C] () -- C:\WINDOWS\System32\qtp-mt334.dll
[2007-03-04 01:45:04 | 00,242,176 | ---- | C] () -- C:\WINDOWS\System32\prgiso.dll
[2007-02-27 11:35:27 | 00,000,059 | ---- | C] () -- C:\WINDOWS\System32\everest_cpl.ini
[2007-02-26 00:51:49 | 00,000,000 | ---- | C] () -- C:\WINDOWS\PROTOCOL.INI
[2007-02-26 00:51:31 | 00,000,235 | ---- | C] () -- C:\WINDOWS\WSMatem.INI
[2007-02-26 00:07:19 | 00,000,210 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2007-02-22 13:37:43 | 00,000,394 | ---- | C] () -- C:\WINDOWS\ULead32.ini
[2007-02-22 12:34:08 | 00,034,816 | ---- | C] () -- C:\WINDOWS\System32\SDDPProxy.dll
[2007-02-22 12:34:08 | 00,001,015 | ---- | C] () -- C:\WINDOWS\System32\Sddp.ini
[2007-02-22 01:37:41 | 00,024,576 | ---- | C] () -- C:\WINDOWS\VMPipe.dll
[2007-02-22 01:14:44 | 00,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll
[2007-02-20 15:39:26 | 00,001,810 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2007-02-20 15:39:23 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007-02-20 15:30:35 | 00,000,641 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006-06-01 18:22:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006-06-01 18:22:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006-06-01 18:22:00 | 00,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006-06-01 18:22:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-06-01 18:22:00 | 00,196,608 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2006-04-23 22:38:23 | 00,000,169 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2005-07-18 15:34:22 | 00,047,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\vserial.sys
[2005-07-18 15:34:20 | 00,015,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\vsb.sys
[2005-01-12 05:08:50 | 00,032,768 | ---- | C] () -- C:\WINDOWS\System32\SafeIE.dll
[2004-08-22 18:04:56 | 00,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll
[2004-01-01 20:53:54 | 00,001,254 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2004-01-01 20:36:06 | 00,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys
[2004-01-01 20:36:06 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys
[2004-01-01 18:56:31 | 00,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2004-01-01 18:56:30 | 00,152,064 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2004-01-01 18:56:29 | 00,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2004-01-01 16:59:54 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2004-01-01 01:07:25 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2004-01-01 01:07:09 | 01,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2003-04-08 12:40:22 | 00,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001-07-22 00:16:20 | 00,001,052 | ---- | C] () -- C:\WINDOWS\win.ini
[2001-07-22 00:15:52 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[1996-04-03 21:33:26 | 00,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys

[color=orange]========== Files - Modified Within 1 Day ==========[/color]

[2009-05-18 11:03:26 | 00,002,279 | ---- | M] () -- C:\Documents and Settings\user\Menu Start\Programy\Autostart\Skype.lnk
[2009-05-18 11:02:52 | 00,063,804 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2009-05-18 11:01:46 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\user\Ustawienia lokalne\desktop.ini
[2009-05-18 11:01:40 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-05-18 10:34:24 | 00,000,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS
[2009-05-18 10:33:20 | 00,580,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\user32.dll
[2009-05-18 10:14:40 | 00,000,696 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\SpywareBlaster.lnk
[2009-05-17 20:09:21 | 00,000,000 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2009-05-17 14:38:39 | 00,000,492 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\zawirusowanie - strony forum.lnk
[2009-05-17 14:17:16 | 00,002,299 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Desktop Sidebar.lnk
[2009-05-17 14:16:28 | 00,000,462 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Komunikatory.lnk
[2009-05-17 14:16:25 | 00,000,429 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\P2P.lnk
[2009-05-17 14:16:22 | 00,000,434 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\NERO.lnk
[2009-05-17 14:16:18 | 00,000,434 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Film.lnk
[2009-05-17 14:16:12 | 00,000,504 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Security  Cleaner Optimize.lnk
[2009-05-17 14:14:24 | 00,000,459 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\scrensavers.lnk
[2009-05-17 14:14:05 | 00,000,437 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Wrrum.lnk
[2009-05-17 13:10:25 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[color=orange]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:5C321E34
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:6724CB45
< End of report >


[wojtas]

wwdc zostaw tak jak jest

Włącz LSP Fix zaznacz "I know what I'm doing" następnie w okienku Keep zaznacz tylko webhdll.dll i z pomocą strzałki >> .Przenies go do okienka Remove i kliknij Finish. Restartujemy system.

Uruchom OTListIt2 i w oknie Custom Scans/Fixes wklej :

:OTLI
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O2 - BHO: (MyWay Search Assistant BHO) - {04079851-5845-4dea-848C-3ECD647AA554} - C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL (My Way)
O2 - BHO: (no name) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - Reg Error: Key error. File not found
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - Reg Error: Key error. File not found
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - Reg Error: Key error. File not found
O4 - HKCU..\Run: [fsm] File not found
O32 - AutoRun File - [2002-07-12 05:32:54 | 00,000,045 | R--- | M] () - I:\AUTORUN.INF -- [ CDFS ]

:Files
C:\Program Files\MyWay

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .



1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Wykonaj skan Dr. Web CureIt
6. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.

Jeśli masz Adobe Reader to zaaktualizuj go do najnowszej wersji

Autor postu otrzymał pochwałę

[chrisalis]

Włączyłem LSP Fix, zaznaczyłem "I know what I'm doing" i webhdll.dll przeniosłem do okienka Remove i Finish.
Jednak okazało się że po restarcie i
wykonaniu wszystkich pozostałych zalecanych punktów
ten pliczek w folderze windows nadal siedzi, co widać niestety poniżej

Powtórzyć jakieś czynności, czy w jakiś inny sposób zadziałać, a może poprostu ten plik z widdowsa ręcznie wykasować...wystarczy ?


raport z Kasperskyego:

Kod: Zaznacz wszystko

--------------------------------------------------------------------------------
RAPORT KASPERSKY ONLINE SCANNER 7.0
wtorek, 19 maj 2009
System operacyjny: Microsoft Windows XP Professional Dodatek Service Pack 3 (build 2600)
Wersja Kaspersky Online Scanner: 7.0.26.12
Data ostatniej aktualizacji bazy danych: Tuesday, May 19, 2009 12:27:45
Liczba wpisów: 2196013
--------------------------------------------------------------------------------

Ustawienia skanowania:
   Typ bazy danych użytej do skanowania: rozszerzona
   Skanuj archiwa: tak
   Skanuj pocztowe bazy danych: tak


Obszar skanowania - Mój komputer:

Statystyki skanowania:
   Przeskanowanych plików: 67902
   Nazwa zagrożenia: 1
   Zainfekowanych obiektów: 1
   Podejrzanych obiektów: 0
   Czas skanowania: 01:43:21


Nazwa pliku / Nazwa zagrożenia / Liczba zagrożeń
C:\WINDOWS\webhdll.dll   Zainfekowany: not-a-virus:AdWare.Win32.WebHancer.320   1

Wybrany obszar został przeskanowany.

log z FixIEDef:

Kod: Zaznacz wszystko

********************************************************************************
*                                                                              *
*                                 FixIEDef Log                                 *
*                              Version 1.7.22.7514                             *
*                                                                              *
********************************************************************************

Created at 17:19:18 on Tuesday, May 19, 2009

Time Zone            :

Logged On User       : user

Operating System     : Microsoft Windows XP Professional Dodatek Service Pack 3
OS Architecture      : X86
System Langauge      : Polish
Keyboard Layout      : Polish
Processor            : X86 AMD Athlon(tm) XP 2800+

System Drive         : C:\
Windows Directory    : C:\WINDOWS
System Directory     : C:\WINDOWS\system32

System Drive Type    : Fixed
System Drive Status  : READY
System Drive Label   : SYSTEM
System Drive Size    : 20.41 GB
System Drive Free    : 8.11 GB

Total Physical Memory: 511 MB
Free Physical Memory : 216 MB
Total Page File      : 511 MB
Free Page File       : 784 MB
Total Virtual Memory : 2048 MB
Free Virtual Memory  : 1960 MB

Boot State           : Normal boot

--------------------------------------------------------------------------------

!!! userinit.exe is Clean !!!

--------------------------------------------------------------------------------

!!! Files that have been deleted !!!

No malicious files found

--------------------------------------------------------------------------------

!!! Directories that have been removed !!!

No malicious directories to be removed

--------------------------------------------------------------------------------

!!! Registry entries that have been removed !!!

No malicious Registry entries found

================================================================================

All Done :)

ShadowPuterDude

Safe Surfing!!!

[wojtas]

zrob tak jeszcze raz.. potem usun ten plik i wroc z nowymi logami

[chrisalis]

wielkie podziękowania, jest w porządku

jedynie jedno pytanie w związku z wykonaną optymalizacją systemu:
w trakcie tych porządków zaleciłem systemowi sprawdzenie dysku przy restarcie, powinien raz sprawdzić i nie ponawiać (bo i tak w końcowym infie chkdsk było wszystko w porządku)

jednak teraz za każdym razem przy uruchomieniu mam "Zaplanowano sprawdzanie systemu plików na D:....."
i jak nie wcisnę czegoś w krótkim czasie to makabra i oczekiwanie na zbawienie

jak można z systemu wywalić na piechotę to polecenie sprawdzania dysku pry startowaniu?
mam XP więc
może start > uruchom i > jakaś komenda...?

jeszcze raz dzięki i b.proszę o tą ostatnią radę bo juz z tym sprawdzaniem po raz 10-ty bólu głowy dostaję

[wojtas]

nie wiem sprobuj:

start? uruchom >cmd wpisz:

chkdsk d: /f

[chrisalis]

to nie to niestety

może coś w rejestrze zmienić...?

mam ochronę systemu Spybota więc może w nim coś można zrobić...

no poszukam, dzięki za dotychczasową pomoc