Raw32.exe i spore porblemy z systemem

**Posty:** 1 · przez **lila661** 16 Gru 2009, 18:49

Witam. Otóż jakieś 5 miesięcy temu ściągnęłam sobie jakiegoś antywirusa. Jak dobrze pamiętam był to arcavira. Początkowo wydawało mi się, że sprawuje się nieźle, ale po jakimś miesiącu komputer zaczął mi niemiłosiernie zamulać. W procesach pokazywało, że to właśnie antywirus pochłania najwięcej procesora. Ale nawet przy jego wyłączeniu nie poprawiało się. W końcu zdecydowałam się odinstalować antywirusa. Jak postanowiłam tak zrobiłam, później zresetowałam komputer, odpalam menedżera zadań, a tam w procesach było jakieś 20, może 30 procesów dotyczących samego antywirusa (każdy zaczynał się od AV, AVtray.exe i inne tym podobne). Pościągałam multum programów do usuwania wirusów i skanowania systemu i niby po całej "akcji ratunkowej" się poprawiło, ale system nie działał tak sprawnie jak powinien dalej. Po jakimś czasie, wstaje rano, próbuje odpalić komputer - nie działa. Tzn. komputer się włączał, ale monitor nie odpowiadał, nie reagował. Próbowałam wpinać inna grafikę, czyścić cały komputer w środku, wszystkie kable od monitora powymieniałam na nowe. Dopiero chłopak wpadł na pomysł, żeby przepiąć tą kartę w inne PCI-E (czy jak to się tam piszę) i komputer zaczął chodzić. Co się jednak okazało, system nie wykrywał jakiegoś pliku, boot...coś tam coś tam i system się nie włączał. Przeinstalowaliśmy więc cały system. Wpisałam IP, bramkę i te inne sprawy, żeby mieć internet, a tutaj psikus - internetu nie ma. Zadzwoniłam do mojego operatora, żeby sprawdził czy miałam dobre DNSy i tak dalej okazało się, że tak. Przyjechał następnego dnia i okazało się, że moje karty sieciowe (bo mam dwie) mają całkiem inny adres mac niż był przypisany do jego komputera, czy coś takiego. A jak się dobrze orientuję adres mac jest przypisany do danego sprzętu i raczej nie może sam się zmienić. Koleś wszedł w konsolę i próbował wysyłać zapytanie do routera i innych urządzeń do których jest podłączona (są u mnie na strychu, jeżeli to ma jakieś znaczenie) i żadne nie odpowiadało, a internet się nagle cudownie włączył. Dzisiaj więc siedzę zadowolona na komputerze, korzystam z internetu, a tu nagle wyskoczył mi blue screen. Zrestartowałam komputer - zatrzymał się na botowaniu. Napisało mi coś, że nie może zbotować systemu z dysku i żebym go sprawdziła. Wściekłam się, za jakimś 5 resetem system mi się uruchomił. Od razu weszłam w procesu, znalazłam jakiś podejrzany plik raw32.exe, sprawdziłam w wyszukiwarce, niby jakiś keylogger. Zadzwoniłam do chłopaka, on wraz z kolegą stwierdził, że chyba mam jakiegoś naprawdę niezłego wirusa skoro robi co zechce z moim komputerem. Na chwilę obecną ani on, ani jego koledzy nie mogę mnie odwiedzić, ani pewnie w najbliższym czasie nie będą tego mogli zrobić z powodu studiów (bądź co bądź informatycznych) więc zwracam się z prośbą do was. Pewnie to będzie istotne, dlatego od razu zaznaczam, że mam WINDOWS 7 i wiele programów mi na nim nie działa, np. RSIT. Zrobiłam natomiast logi OTL'em.

OTO ONE:

Kod: Zaznacz wszystko: TL logfile created on: 2009-12-16 17:11:03 - Run 1 OTL by OldTimer - Version 3.1.17.0 Folder = C:\Users\martinez\Downloads 64bit- Ultimate Edition (Version = 6.1.7100) - Type = NTWorkstation Internet Explorer (Version = 8.0.7100.0) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,32 Gb Available Physical Memory | 65,82% Memory free 4,00 Gb Paging File | 3,04 Gb Available in Paging File | 76,12% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 74,52 Gb Total Space | 54,74 Gb Free Space | 73,45% Space Free | Partition Type: NTFS Drive D: | 74,52 Gb Total Space | 69,54 Gb Free Space | 93,32% Space Free | Partition Type: NTFS Drive E: | 391,36 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MARTINEZ-PC Current User Name: martinez Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-12-16 17:10:42 | 00,538,112 | ---- | M] (OldTimer Tools) -- C:\Users\martinez\Downloads\OTL.exe PRC - [2009-12-15 18:02:24 | 00,321,320 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe PRC - [2009-12-15 17:58:31 | 01,217,808 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe PRC - [2009-06-03 09:17:52 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2009-05-28 10:23:12 | 10,486,376 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Nowe Gadu-Gadu\gg.exe PRC - [2009-05-28 09:33:44 | 00,077,824 | ---- | M] () -- C:\Program Files (x86)\Nowe Gadu-Gadu\spellchecker_gg.exe PRC - [2009-04-10 18:29:08 | 00,037,888 | ---- | M] () -- C:\Program Files (x86)\Winamp\winampa.exe PRC - [2005-10-31 10:51:52 | 00,057,344 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\SBAudigy\Surround Mixer\CTSysVol.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2009-12-16 17:10:42 | 00,538,112 | ---- | M] (OldTimer Tools) -- C:\Users\martinez\Downloads\OTL.exe MOD - [2009-04-22 06:00:58 | 01,679,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7100.0_none_d75e6751736615f2\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-04-22 06:41:48 | 00,228,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc) SRV:[b]64bit:[/b] - [2009-04-22 06:41:31 | 00,201,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc) SRV:[b]64bit:[/b] - [2009-04-22 06:41:29 | 00,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2009-04-22 06:41:29 | 00,164,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpo.dll -- (Power) SRV:[b]64bit:[/b] - [2009-04-22 06:41:26 | 00,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes) SRV:[b]64bit:[/b] - [2009-04-22 06:41:20 | 00,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify) SRV:[b]64bit:[/b] - [2009-04-22 06:41:01 | 00,029,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc) SRV:[b]64bit:[/b] - [2009-04-22 06:40:58 | 00,067,072 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper) SRV:[b]64bit:[/b] - [2009-04-22 06:40:56 | 00,187,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider) SRV:[b]64bit:[/b] - [2009-04-22 06:40:54 | 00,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc) SRV:[b]64bit:[/b] - [2009-04-22 06:40:54 | 00,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc) SRV:[b]64bit:[/b] - [2009-04-22 06:40:54 | 00,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg) SRV:[b]64bit:[/b] - [2009-04-22 06:40:52 | 01,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:[b]64bit:[/b] - [2009-04-22 06:40:14 | 01,011,200 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-04-22 06:40:08 | 00,235,520 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener) SRV:[b]64bit:[/b] - [2009-04-22 06:39:46 | 01,126,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FntCache.dll -- (FontCache) SRV:[b]64bit:[/b] - [2009-04-22 06:39:30 | 00,314,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp) SRV:[b]64bit:[/b] - [2009-04-22 06:39:29 | 00,291,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc) SRV:[b]64bit:[/b] - [2009-04-22 06:39:25 | 00,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2009-04-22 06:39:08 | 00,083,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bthserv.dll -- (bthserv) SRV:[b]64bit:[/b] - [2009-04-22 06:39:06 | 00,100,864 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC) SRV:[b]64bit:[/b] - [2009-04-22 06:39:03 | 00,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV) SRV:[b]64bit:[/b] - [2009-04-22 06:38:59 | 00,193,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2009-04-22 06:38:59 | 00,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc) SRV:[b]64bit:[/b] - [2009-04-22 06:38:44 | 01,503,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine) SRV:[b]64bit:[/b] - [2009-04-22 06:38:24 | 03,524,608 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc) SRV:[b]64bit:[/b] - [2009-04-22 06:38:06 | 00,689,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FXSSVC.exe -- (Fax) SRV - [2009-12-15 18:02:24 | 00,321,320 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2009-04-22 08:16:44 | 00,000,000 | ---D | M] [On_Demand | Stopped] -- C:\Windows\Vss -- (VSS) SRV - [2009-04-22 08:16:43 | 00,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC) SRV - [2009-04-22 06:21:43 | 00,164,864 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider) SRV - [2009-04-22 06:20:14 | 00,252,928 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp) SRV - [2009-04-22 01:32:06 | 00,061,056 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds) SRV - [2009-04-04 21:04:26 | 00,090,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2009-04-22 06:53:06 | 00,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-04-22 06:53:04 | 00,105,040 | ---- | M] (AMD) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-04-22 06:52:53 | 00,028,752 | ---- | M] (AMD) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-04-22 06:48:23 | 00,153,168 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg) DRV:[b]64bit:[/b] - [2009-04-22 06:48:16 | 00,077,904 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-04-22 06:48:15 | 00,065,616 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-04-22 06:48:14 | 00,054,352 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fsdepends.sys -- (FsDepends) DRV:[b]64bit:[/b] - [2009-04-22 06:48:11 | 00,050,256 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pcw.sys -- (pcw) DRV:[b]64bit:[/b] - [2009-04-22 06:48:04 | 00,014,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy) DRV:[b]64bit:[/b] - [2009-04-22 06:45:33 | 00,228,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp) DRV:[b]64bit:[/b] - [2009-04-22 06:45:27 | 00,214,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost) DRV:[b]64bit:[/b] - [2009-04-22 06:45:27 | 00,203,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2009-04-22 06:45:25 | 00,047,168 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2009-04-22 06:45:20 | 00,036,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2009-04-22 06:45:20 | 00,024,640 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-04-22 06:45:20 | 00,022,080 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wimmount.sys -- (WIMMount) DRV:[b]64bit:[/b] - [2009-04-22 06:45:19 | 00,036,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vdrvroot.sys -- (vdrvroot) DRV:[b]64bit:[/b] - [2009-04-22 06:45:10 | 00,458,936 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cng.sys -- (CNG) DRV:[b]64bit:[/b] - [2009-04-22 06:44:54 | 00,222,936 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol) DRV:[b]64bit:[/b] - [2009-04-22 05:26:27 | 00,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpbus.sys -- (rdpbus) DRV:[b]64bit:[/b] - [2009-04-22 05:25:20 | 00,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\RDPREFMP.sys -- (RDPREFMP) DRV:[b]64bit:[/b] - [2009-04-22 05:19:00 | 00,060,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agilevpn.sys -- (RasAgileVpn) WAN Miniport (IKEv2) DRV:[b]64bit:[/b] - [2009-04-22 05:18:10 | 00,012,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\wfplwf.sys -- (WfpLwf) DRV:[b]64bit:[/b] - [2009-04-22 05:16:55 | 00,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndiscap.sys -- (NdisCap) DRV:[b]64bit:[/b] - [2009-04-22 05:15:56 | 00,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vwifibus.sys -- (vwifibus) DRV:[b]64bit:[/b] - [2009-04-22 05:15:43 | 00,227,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci) DRV:[b]64bit:[/b] - [2009-04-22 05:15:28 | 00,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\umpass.sys -- (UmPass) DRV:[b]64bit:[/b] - [2009-04-22 05:15:18 | 00,109,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM) DRV:[b]64bit:[/b] - [2009-04-22 05:15:05 | 00,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidkmdf.sys -- (mshidkmdf) DRV:[b]64bit:[/b] - [2009-04-22 05:14:25 | 00,112,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf) DRV:[b]64bit:[/b] - [2009-04-22 05:10:55 | 00,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MTConfig.sys -- (MTConfig) DRV:[b]64bit:[/b] - [2009-04-22 05:09:18 | 00,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus) DRV:[b]64bit:[/b] - [2009-04-22 05:08:57 | 00,006,656 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\beep.sys -- (Beep) DRV:[b]64bit:[/b] - [2009-04-22 04:59:57 | 00,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appid.sys -- (AppID) DRV:[b]64bit:[/b] - [2009-04-22 04:57:24 | 00,029,696 | ---- | M] (Microsoft Corporation) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter) DRV:[b]64bit:[/b] - [2009-04-22 04:49:33 | 00,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2009-04-22 04:49:14 | 00,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2009-04-22 04:43:33 | 00,040,448 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\discache.sys -- (discache) DRV:[b]64bit:[/b] - [2009-04-22 04:34:55 | 00,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidbatt.sys -- (HidBatt) DRV:[b]64bit:[/b] - [2009-04-22 04:34:53 | 00,017,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CmBatt.sys -- (CmBatt) DRV:[b]64bit:[/b] - [2009-04-22 04:29:34 | 00,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi) DRV:[b]64bit:[/b] - [2009-04-22 04:27:28 | 00,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2009-04-22 04:23:12 | 00,060,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdppm.sys -- (AmdPPM) DRV:[b]64bit:[/b] - [2009-03-17 05:35:14 | 00,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-03-06 08:43:48 | 00,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-02-06 04:41:49 | 03,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-01-24 05:08:24 | 00,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-01-08 18:26:00 | 00,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD) DRV:[b]64bit:[/b] - [2005-07-07 09:19:08 | 01,579,008 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\P1764.SYS -- (P1764) DRV:[b]64bit:[/b] - [2005-02-28 04:12:50 | 00,205,824 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTOSS2K.SYS -- (ossrv) DRV:[b]64bit:[/b] - [2005-02-28 04:12:46 | 00,284,160 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTSFM2K.SYS -- (ctsfm2k) DRV - [2009-12-16 06:10:12 | 00,077,004 | ---- | M] (Oak Technology Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\AFS.SYS -- (AFS) DRV - [2009-12-13 11:41:20 | 00,000,000 | ---D | M] [Kernel | System | Running] -- C:\Windows\CSC -- (CSC) DRV - [2009-04-22 06:23:43 | 00,019,024 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2009-04-22 06:21:17 | 00,014,336 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysWOW64\netbios.dll -- (NetBIOS) DRV - [2009-03-20 16:27:01 | 00,001,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv) DRV - [2009-03-20 16:21:33 | 00,003,066 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://onet.pl" FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2009-12-15 17:59:08 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2009-12-16 05:57:23 | 00,000,000 | ---D | M] [2009-12-15 17:59:10 | 00,000,000 | ---D | M] -- C:\Users\martinez\AppData\Roaming\Mozilla\Extensions [2009-12-15 18:29:28 | 00,000,000 | ---D | M] -- C:\Users\martinez\AppData\Roaming\Mozilla\Firefox\Profiles\s68a1hcf.default\extensions [2009-12-15 17:59:07 | 00,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions [2006-06-03 17:43:22 | 00,000,896 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\allegro-pl.xml [2008-04-03 18:19:08 | 00,001,406 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\fbc-pl.xml [2007-03-31 18:11:54 | 00,000,917 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\merlin-pl.xml [2006-06-03 17:43:22 | 00,000,858 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\pwn-pl.xml [2008-03-28 22:36:04 | 00,001,183 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2007-01-05 12:40:56 | 00,001,683 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: (824 bytes) - C:\Windows\SysNative\drivers\etc\hosts O4 - HKLM..\Run: [CTSysVol] C:\Program Files (x86)\Creative\SBAudigy\Surround Mixer\CTSysVol.exe (Creative Technology Ltd) O4 - HKLM..\Run: [P17Helper] C:\Windows\SysWow64\P17.DLL () O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.) O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe () O4 - HKCU..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [CTRegRun] C:\Windows\Ctregrun.exe (Creative Technology Ltd ) O4 - HKCU..\Run: [Hattric] C:\Windows\SysWow64\hattric\smss.exe File not found O4 - HKCU..\Run: [Nowe Gadu-Gadu] C:\Program Files (x86)\Nowe Gadu-Gadu\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [Steam] c:\program files (x86)\steam\steam.exe (Valve Corporation) O4 - Startup: C:\Users\martinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\raw32.dll () O4 - Startup: C:\Users\martinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\raw32.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - C:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: E&ksport do programu Microsoft Excel - C:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15110/CTPID.cab (Creative Software AutoUpdate Support Package) O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files (x86)\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - Reg Error: Key error. File not found O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-12-13 11:12:33 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2003-04-07 07:31:34 | 00,020,369 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{ecd21446-e7d3-11de-8724-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{ecd21446-e7d3-11de-8724-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Setup.exe -- [2003-04-07 07:31:56 | 00,602,112 | R--- | M] (Hewlett-Packard) O34 - HKLM BootExecute: (autocheck autochk *) - File not found [b]64bit:[/b] O35 - comfile [open] -- "%1" %* File not found [b]64bit:[/b] O35 - exefile [open] -- "%1" %* File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-12-16 06:10:12 | 00,077,004 | ---- | C] (Oak Technology Inc.) -- C:\Windows\SysWow64\drivers\AFS.SYS [2009-12-16 06:07:41 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Hewlett-Packard [2009-12-16 06:07:01 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\MSSoap [2009-12-16 06:06:53 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Hewlett-Packard [2009-12-16 05:55:47 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2009-12-16 05:54:34 | 00,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2009-12-16 05:54:34 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2009-12-16 05:54:34 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2009-12-16 00:23:10 | 00,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll [2009-12-16 00:23:10 | 00,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpdxm.dll [2009-12-15 21:40:51 | 00,855,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2009-12-15 21:40:51 | 00,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2009-12-15 19:47:57 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\Ventrilo [2009-12-15 19:47:38 | 00,000,000 | ---D | C] -- C:\Program Files\VentriloMIX [2009-12-15 19:00:38 | 00,000,000 | ---D | C] -- C:\Windows\SysNative\hattric [2009-12-15 19:00:37 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\hattric [2009-12-15 18:52:52 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\WinRAR [2009-12-15 18:52:23 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2009-12-15 18:51:34 | 00,000,000 | ---D | C] -- C:\Users\martinez\Desktop\PROGRAMY [2009-12-15 18:51:08 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR [2009-12-15 18:50:09 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\Winamp [2009-12-15 18:50:09 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Winamp [2009-12-15 18:49:47 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\mIRC [2009-12-15 18:49:47 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\mIRC [2009-12-15 18:48:49 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine [2009-12-15 18:48:39 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DivX Shared [2009-12-15 18:48:39 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\DivX [2009-12-15 18:47:26 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\DirectX [2009-12-15 18:46:51 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\NAPI-PROJEKT [2009-12-15 18:46:50 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\ALLPlayer [2009-12-15 18:25:49 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\Creative [2009-12-15 18:25:45 | 00,000,000 | ---D | C] -- C:\ProgramData\Creative [2009-12-15 18:22:23 | 00,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomct2.ocx [2009-12-15 18:22:23 | 00,053,248 | ---- | C] (Creative Technology Ltd ) -- C:\Windows\Ctregrun.exe [2009-12-15 18:20:52 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative [2009-12-15 18:20:51 | 00,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information [2009-12-15 18:20:19 | 00,090,112 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\Updreg.EXE [2009-12-15 18:20:00 | 00,157,184 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\CtDvInst.dll [2009-12-15 18:20:00 | 00,137,728 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\P17res.dll [2009-12-15 18:19:51 | 00,011,264 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysWow64\INRES.DLL [2009-12-15 18:19:51 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\Data [2009-12-15 18:19:51 | 00,000,000 | ---D | C] -- C:\Windows\SysNative\Data [2009-12-15 18:18:12 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Creative [2009-12-15 18:17:25 | 00,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2009-12-15 18:17:23 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2009-12-15 18:01:52 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Local\ElevatedDiagnostics [2009-12-15 17:59:10 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\Mozilla [2009-12-15 17:59:10 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Local\Mozilla [2009-12-15 17:59:06 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2009-12-15 17:58:07 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Steam [2009-12-15 17:58:07 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam [2009-12-15 17:56:28 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\Macromedia [2009-12-15 17:56:28 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\Adobe [2009-12-15 17:56:27 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2009-12-15 17:53:46 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\Nowe Gadu-Gadu [2009-12-15 17:53:42 | 00,000,000 | -HSD | C] -- C:\Windows\Installer [2009-12-15 17:53:41 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Nowe Gadu-Gadu [2009-12-13 20:39:23 | 00,000,000 | ---D | C] -- C:\Windows\Panther [2009-12-13 20:39:09 | 00,000,000 | -HSD | C] -- C:\Boot [2009-12-13 20:27:51 | 00,000,000 | ---D | C] -- C:\Windows.old [2009-12-13 12:01:06 | 00,000,000 | -HSD | C] -- C:\System Volume Information [2009-12-13 11:48:42 | 00,000,000 | R--D | C] -- C:\Users\martinez\Searches [2009-12-13 11:48:33 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\Identities [2009-12-13 11:48:31 | 00,000,000 | R--D | C] -- C:\Users\martinez\Contacts [2009-12-13 11:48:29 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Local\VirtualStore [2009-12-13 11:48:18 | 00,000,000 | --SD | C] -- C:\Users\martinez\AppData\Roaming\Microsoft [2009-12-13 11:48:18 | 00,000,000 | R--D | C] -- C:\Users\martinez\Videos [2009-12-13 11:48:18 | 00,000,000 | R--D | C] -- C:\Users\martinez\Saved Games [2009-12-13 11:48:18 | 00,000,000 | R--D | C] -- C:\Users\martinez\Pictures [2009-12-13 11:48:18 | 00,000,000 | R--D | C] -- C:\Users\martinez\Music [2009-12-13 11:48:18 | 00,000,000 | R--D | C] -- C:\Users\martinez\Links [2009-12-13 11:48:18 | 00,000,000 | R--D | C] -- C:\Users\martinez\Favorites [2009-12-13 11:48:18 | 00,000,000 | R--D | C] -- C:\Users\martinez\Downloads [2009-12-13 11:48:18 | 00,000,000 | R--D | C] -- C:\Users\martinez\Documents [2009-12-13 11:48:18 | 00,000,000 | R--D | C] -- C:\Users\martinez\Desktop [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\AppData\Local\Temporary Internet Files [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\Templates [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\Start Menu [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\SendTo [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\Recent [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\PrintHood [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\NetHood [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\Documents\My Videos [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\Documents\My Pictures [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\Documents\My Music [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\My Documents [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\Local Settings [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\AppData\Local\History [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\Cookies [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\Application Data [2009-12-13 11:48:18 | 00,000,000 | -HSD | C] -- C:\Users\martinez\AppData\Local\Application Data [2009-12-13 11:48:18 | 00,000,000 | -H-D | C] -- C:\Users\martinez\AppData [2009-12-13 11:48:18 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Local\Temp [2009-12-13 11:48:18 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Local\Microsoft [2009-12-13 11:48:18 | 00,000,000 | ---D | C] -- C:\Users\martinez\AppData\Roaming\Media Center Programs [2009-12-13 11:48:07 | 00,000,000 | -HSD | C] -- C:\Recovery [2009-12-13 11:47:32 | 00,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2009-12-13 11:41:24 | 00,000,000 | ---D | C] -- C:\Windows\Prefetch [2002-04-11 02:41:06 | 00,065,536 | ---- | C] ( ) -- C:\Windows\SysWow64\A3D.DLL [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-12-16 17:10:04 | 00,713,888 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2009-12-16 17:10:04 | 00,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2009-12-16 17:10:04 | 00,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2009-12-16 17:05:48 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2009-12-16 17:05:40 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2009-12-16 17:05:30 | 16,094,74048 | -HS- | M] () -- C:\hiberfil.sys [2009-12-16 16:38:22 | 00,363,008 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2009-12-16 06:14:37 | 00,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2009-12-16 06:14:37 | 00,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2009-12-16 06:14:25 | 01,572,864 | -HS- | M] () -- C:\Users\martinez\NTUSER.DAT [2009-12-16 06:14:23 | 06,291,456 | -H-- | M] () -- C:\Users\martinez\AppData\Local\IconCache.db [2009-12-16 06:10:21 | 00,020,464 | ---- | M] () -- C:\Windows\hpoins01.dat [2009-12-16 06:10:14 | 00,000,904 | ---- | M] () -- C:\Users\Public\Desktop\Dysk wspomnieniowy HP.lnk [2009-12-16 06:10:12 | 00,077,004 | ---- | M] (Oak Technology Inc.) -- C:\Windows\SysWow64\drivers\AFS.SYS [2009-12-16 06:07:28 | 00,000,519 | ---- | M] () -- C:\Windows\win.ini [2009-12-16 06:07:27 | 00,001,136 | ---- | M] () -- C:\Users\Public\Desktop\HP Photo & Imaging.lnk [2009-12-16 06:07:27 | 00,001,042 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\hpoddt01.exe.lnk [2009-12-16 06:07:26 | 00,001,136 | ---- | M] () -- C:\Users\Public\Desktop\HP Director.lnk [2009-12-16 05:57:59 | 00,000,412 | ---- | M] () -- C:\Windows\ODBC.INI [2009-12-15 19:47:40 | 00,000,848 | ---- | M] () -- C:\Users\martinez\Desktop\VentriloMIX.lnk [2009-12-15 19:47:36 | 00,020,992 | ---- | M] () -- C:\Users\martinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\raw32.exe [2009-12-15 19:24:50 | 00,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2009-12-15 18:55:45 | 00,000,902 | ---- | M] () -- C:\Users\martinez\Desktop\DOWNLOADS.lnk [2009-12-15 18:50:21 | 00,000,993 | ---- | M] () -- C:\Users\Public\Desktop\Winamp.lnk [2009-12-15 18:26:08 | 00,000,584 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm [2009-12-15 18:26:08 | 00,000,584 | ---- | M] () -- C:\Windows\SysNative\settings.sfm [2009-12-15 17:59:08 | 00,001,943 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2009-12-15 17:58:07 | 00,002,525 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk [2009-12-15 17:54:18 | 00,001,017 | ---- | M] () -- C:\Users\Public\Desktop\Nowe Gadu-Gadu.lnk [2009-12-13 20:39:11 | 00,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2009-12-13 20:39:10 | 00,000,355 | RHS- | M] () -- C:\Boot.ini.saved [2009-12-13 13:30:46 | 00,524,288 | -HS- | M] () -- C:\Users\martinez\NTUSER.DAT{87b498e0-2d68-11de-80f1-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2009-12-13 13:30:46 | 00,524,288 | -HS- | M] () -- C:\Users\martinez\NTUSER.DAT{87b498e0-2d68-11de-80f1-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2009-12-13 13:30:46 | 00,065,536 | -HS- | M] () -- C:\Users\martinez\NTUSER.DAT{87b498e0-2d68-11de-80f1-001e0bcde3ec}.TM.blf [2009-12-13 11:48:18 | 00,000,020 | -HS- | M] () -- C:\Users\martinez\ntuser.ini [2009-12-13 11:43:38 | 00,028,965 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2009-12-13 11:43:38 | 00,028,965 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2009-12-13 11:12:33 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2009-12-13 11:12:33 | 00,000,000 | RHS- | M] () -- C:\IO.SYS [2009-12-13 11:12:33 | 00,000,000 | ---- | M] () -- C:\CONFIG.SYS [2009-12-13 11:12:33 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2009-12-13 11:05:49 | 00,000,211 | -H-- | M] () -- C:\Boot.BAK [2009-12-12 16:21:31 | 00,037,888 | -HS- | M] () -- C:\Users\martinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\raw32.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2009-12-16 06:10:14 | 00,000,904 | ---- | C] () -- C:\Users\Public\Desktop\Dysk wspomnieniowy HP.lnk [2009-12-16 06:07:27 | 00,001,136 | ---- | C] () -- C:\Users\Public\Desktop\HP Photo & Imaging.lnk [2009-12-16 06:07:27 | 00,001,042 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\hpoddt01.exe.lnk [2009-12-16 06:07:26 | 00,001,136 | ---- | C] () -- C:\Users\Public\Desktop\HP Director.lnk [2009-12-16 06:05:10 | 00,016,622 | ---- | C] () -- C:\Windows\hpomdl01.dat [2009-12-16 06:05:10 | 00,000,191 | ---- | C] () -- C:\ProgramData\hpzinstall.log [2009-12-16 05:57:59 | 00,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2009-12-15 19:47:40 | 00,000,848 | ---- | C] () -- C:\Users\martinez\Desktop\VentriloMIX.lnk [2009-12-15 19:47:36 | 00,037,888 | -HS- | C] () -- C:\Users\martinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\raw32.dll [2009-12-15 19:47:36 | 00,020,992 | ---- | C] () -- C:\Users\martinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\raw32.exe [2009-12-15 19:24:50 | 00,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2009-12-15 18:55:45 | 00,000,902 | ---- | C] () -- C:\Users\martinez\Desktop\DOWNLOADS.lnk [2009-12-15 18:50:21 | 00,000,993 | ---- | C] () -- C:\Users\Public\Desktop\Winamp.lnk [2009-12-15 18:26:00 | 00,000,584 | ---- | C] () -- C:\Windows\SysNative\settingsbkup.sfm [2009-12-15 18:26:00 | 00,000,584 | ---- | C] () -- C:\Windows\SysNative\settings.sfm [2009-12-15 18:22:48 | 00,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd [2009-12-15 18:19:51 | 00,005,627 | R--- | C] () -- C:\Windows\SysWow64\Ludap17.ini [2009-12-15 18:19:51 | 00,005,627 | R--- | C] () -- C:\Windows\SysNative\Ludap17.ini [2009-12-15 18:19:51 | 00,000,039 | R--- | C] () -- C:\Windows\SysWow64\ctzapxx.ini [2009-12-15 18:19:51 | 00,000,039 | R--- | C] () -- C:\Windows\SysNative\ctzapxx.ini [2009-12-15 18:19:45 | 07,572,224 | ---- | C] () -- C:\Windows\SysNative\CT8MGM.SF2 [2009-12-15 18:19:45 | 04,174,814 | ---- | C] () -- C:\Windows\SysNative\CT4MGM.SF2 [2009-12-15 18:19:45 | 02,167,684 | ---- | C] () -- C:\Windows\SysNative\CT2MGM.SF2 [2009-12-15 18:19:43 | 07,572,224 | ---- | C] () -- C:\Windows\SysWow64\CT8MGM.SF2 [2009-12-15 18:19:41 | 04,174,814 | ---- | C] () -- C:\Windows\SysWow64\CT4MGM.SF2 [2009-12-15 18:19:41 | 02,167,684 | ---- | C] () -- C:\Windows\SysWow64\CT2MGM.SF2 [2009-12-15 17:59:08 | 00,001,943 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2009-12-15 17:58:07 | 00,002,525 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk [2009-12-15 17:54:18 | 00,001,017 | ---- | C] () -- C:\Users\Public\Desktop\Nowe Gadu-Gadu.lnk [2009-12-13 20:39:11 | 00,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK [2009-12-13 20:39:10 | 00,000,211 | -H-- | C] () -- C:\Boot.BAK [2009-12-13 20:39:09 | 00,383,200 | RHS- | C] () -- C:\bootmgr [2009-12-13 11:59:42 | 00,000,355 | RHS- | C] () -- C:\Boot.ini.saved [2009-12-13 11:48:18 | 01,572,864 | -HS- | C] () -- C:\Users\martinez\NTUSER.DAT [2009-12-13 11:48:18 | 00,524,288 | -HS- | C] () -- C:\Users\martinez\NTUSER.DAT{87b498e0-2d68-11de-80f1-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2009-12-13 11:48:18 | 00,524,288 | -HS- | C] () -- C:\Users\martinez\NTUSER.DAT{87b498e0-2d68-11de-80f1-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2009-12-13 11:48:18 | 00,065,536 | -HS- | C] () -- C:\Users\martinez\NTUSER.DAT{87b498e0-2d68-11de-80f1-001e0bcde3ec}.TM.blf [2009-12-13 11:48:18 | 00,000,020 | -HS- | C] () -- C:\Users\martinez\ntuser.ini [2009-12-13 11:40:32 | 16,094,74048 | -HS- | C] () -- C:\hiberfil.sys [2009-12-13 11:12:33 | 00,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2009-12-13 11:12:33 | 00,000,000 | RHS- | C] () -- C:\IO.SYS [2009-12-13 11:12:33 | 00,000,000 | ---- | C] () -- C:\CONFIG.SYS [2009-12-13 11:12:33 | 00,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT [2009-04-22 04:40:32 | 00,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-04-22 02:04:20 | 00,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2005-05-03 12:38:42 | 00,064,512 | ---- | C] () -- C:\Windows\SysWow64\P17.DLL [2003-10-02 11:48:18 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\P17CPI.DLL [2003-04-08 10:40:22 | 00,005,679 | ---- | C] () -- C:\Windows\SysWow64\OUTLPERF.INI < End of report >

Co mam jeszcze zrobić? Błagam, pomóżcie.
Lila.

**Posty:** 18165 · przez **wojtas** 16 Gru 2009, 20:39

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Hattric] C:\Windows\SysWow64\hattric\smss.exe File not found
O4 - Startup: C:\Users\martinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\raw32.dll ()
O4 - Startup: C:\Users\martinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\raw32.exe ()
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O32 - AutoRun File - [2003-04-07 07:31:34 | 00,020,369 | R--- | M] () - E:\autorun.inf -- [ CDFS ]

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia kompa