Strasznie wolno działajacy windows

**Posty:** 4 · przez **michxxx** 05 Lut 2010, 15:54

Witam,
To jest moj 1-szy post, szukałem odpowiedzi na podobny temat ale nie znalalzem rozwiazania, z gory przepraszam za powielanie tematu (jesli do tego doszlo...)
Mam nastepujacy problem:
1) Komputer strasznie dlugo sie wlacza - tj. od pojawienia sie tła puliptu do pełnej używalnosci
2) Bardzo długo włącza sie gg
3) Zniknela mi ikonka "system" w panelu sterowania (nie działał tez prawy przycisk myszki na "moj komuter") ale z tym porblem sobie poradzilem, kopiujac ten plik z internetu
4) Jak podłączam jakies urzadzenie na USB. to ikonka "bezpieczne usuwanie sprzetu" pojawia sie, jednak komputer nie reaguje jak klikam na nią
5) Korzystam z Firefox'a ale jak uruchomilem IE (aktualizowane do wersji 8.0) to zauwazylem tytul "Hacked by Godzilla"

Nie moge sobie z tymi problemami poradzic. Zaznczam ze zainstlowalem NODa ktory wykryl infekcje, ale komputer zamula tak jak zamula. Nawet dodatkowo zainstalowalem Nortona 360. Ale tez nic nie pomoglo. Porsze o pomoc!

Z gory dziekuje,
pozdrawiam
m

**Posty:** 18165 · przez **wojtas** 05 Lut 2010, 18:55

2 antywirusy nie mogą być w systemie

Proszę zastosować się do zasad wstawiania logów

**Posty:** 4 · przez **michxxx** 07 Lut 2010, 22:28

Witam, oto logi z mojego kompa. Problemy takie jakie podałem powyzej. Jedyna roznica na dzien dzisiejszy to to ze odinstalowalem Nortona, jednak nie usprawnilo to działanie kompa. Ktoś uprzejmy może zerknac i pomoc?

zasady-wstawiania-logow-vt93842.html

wg. zasad dajemy na początek loga z OTL a nie HijackThis

**Posty:** 2183 · przez **NieWiem** 08 Lut 2010, 08:46

No właśnie, to gdzie te logi? Bo ja nie widzę tutaj ani pół.

**Posty:** 4 · przez **michxxx** 08 Lut 2010, 18:18

Oto logi:

Kod: Zaznacz wszystko: OTL logfile created on: 2010-02-08 17:15:52 - Run 2 OTL by OldTimer - Version 3.1.28.0 Folder = C:\Documents and Settings\Michal\Pulpit Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 502,00 Mb Total Physical Memory | 138,00 Mb Available Physical Memory | 27,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 63,00% Paging File free Paging file location(s): C:\pagefile.sys 756 1512 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 26,27 Gb Total Space | 0,88 Gb Free Space | 3,35% Space Free | Partition Type: FAT32 Drive D: | 26,66 Gb Total Space | 1,50 Gb Free Space | 5,63% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ACER-5D79586868 Current User Name: Michal Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 1 Day Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-02-08 16:59:04 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Michal\Pulpit\OTL.exe PRC - [2009-11-16 09:04:30 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe PRC - [2009-11-16 09:03:32 | 002,054,360 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe PRC - [2008-11-15 05:53:14 | 006,447,744 | ---- | M] () -- D:\xampp\mysql\bin\mysqld.exe PRC - [2008-11-10 17:35:36 | 000,587,776 | ---- | M] (FileZilla Project) -- D:\xampp\FileZillaFTP\FileZillaServer.exe PRC - [2008-11-04 19:34:14 | 000,307,712 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2008-09-10 13:01:28 | 000,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe PRC - [2008-03-27 07:36:26 | 001,307,136 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe PRC - [2008-03-20 12:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe PRC - [2007-09-05 12:57:06 | 000,811,112 | ---- | M] (Sony Ericsson Mobile Communications AB) -- C:\WINDOWS\system32\semwltry.EXE PRC - [2007-09-05 12:56:20 | 000,065,536 | ---- | M] () -- C:\WINDOWS\system32\setrysvc.EXE PRC - [2007-06-13 15:23:50 | 001,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-01-13 09:47:04 | 000,163,840 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\hkcmd.exe PRC - [2007-01-13 09:47:04 | 000,131,072 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxtray.exe PRC - [2007-01-13 09:46:36 | 000,135,168 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxpers.exe PRC - [2005-10-14 12:51:46 | 028,768,528 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe PRC - [2005-07-25 13:36:40 | 000,032,768 | ---- | M] () -- C:\Program Files\Launch Manager\LaunchAp.exe PRC - [2005-07-25 13:34:28 | 000,081,920 | ---- | M] () -- C:\Program Files\Launch Manager\WButton.exe PRC - [2005-06-29 17:26:14 | 000,352,256 | ---- | M] (acer Inc.) -- C:\Program Files\acer\eRecovery\Monitor.exe PRC - [2005-06-06 19:08:58 | 001,273,344 | ---- | M] (OSA Technologies Inc.) -- C:\Acer\eManager\anbmServ.exe PRC - [2005-06-06 11:52:10 | 000,069,632 | ---- | M] (Wistron) -- C:\Program Files\Launch Manager\HotkeyApp.exe PRC - [2005-06-01 14:17:08 | 000,192,512 | ---- | M] (Acer Inc) -- C:\Acer\ePM\epm-dm.exe PRC - [2005-04-15 11:01:46 | 000,077,824 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2004-07-07 12:17:02 | 000,200,769 | ---- | M] (SIEMENS AG) -- C:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe PRC - [2002-08-30 15:02:48 | 000,094,208 | ---- | M] () -- C:\Program Files\Launch Manager\Powerkey.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-02-08 16:59:04 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Michal\Pulpit\OTL.exe MOD - [2009-07-12 01:12:06 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll MOD - [2006-12-21 14:30:44 | 000,102,400 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\ggwhook.dll MOD - [2006-12-01 22:56:00 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll MOD - [2006-10-27 00:48:42 | 002,210,608 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll MOD - [2006-10-27 00:48:34 | 000,955,680 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveUtil.dll MOD - [2006-10-27 00:48:02 | 000,222,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll MOD - [2006-10-27 00:47:40 | 000,022,808 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveNew.dll MOD - [2006-08-25 17:51:14 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll MOD - [2006-05-03 22:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll MOD - [2004-08-04 16:00:00 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\rsaenh.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- -- (VSS) SRV - File not found [On_Demand | Stopped] -- -- (UPS) Zasilacz awaryjny (UPS) SRV - File not found [On_Demand | Stopped] -- -- (SysmonLog) SRV - File not found [On_Demand | Stopped] -- -- (SwPrv) SRV - File not found [On_Demand | Stopped] -- -- (RSVP) SRV - File not found [On_Demand | Stopped] -- -- (RpcLocator) Lokalizator usługi zdalnego wywołania procedury (RPC) SRV - File not found [On_Demand | Stopped] -- -- (RDSessMgr) SRV - File not found [On_Demand | Stopped] -- -- (OpcEnum) SRV - File not found [Disabled | Stopped] -- -- (NetDDEdsdm) SRV - File not found [Disabled | Stopped] -- -- (NetDDE) SRV - File not found [On_Demand | Stopped] -- -- (MSDTC) SRV - File not found [On_Demand | Stopped] -- -- (mnmsrvc) SRV - File not found [On_Demand | Stopped] -- -- (dmadmin) SRV - File not found [On_Demand | Stopped] -- -- (COMSysApp) SRV - File not found [On_Demand | Stopped] -- -- (ClipSrv) SRV - File not found [On_Demand | Stopped] -- -- (CiSvc) SRV - [2009-11-18 17:53:52 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2009-11-16 09:12:54 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv) SRV - [2009-11-16 09:04:30 | 000,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn) SRV - [2009-05-26 21:48:36 | 000,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate1c9de3afa35b324) Usługa Google Update (gupdate1c9de3afa35b324) SRV - [2008-11-15 05:53:14 | 006,447,744 | ---- | M] () [Auto | Running] -- D:\xampp\mysql\bin\mysqld.exe -- (mysql) SRV - [2008-11-10 17:35:36 | 000,587,776 | ---- | M] (FileZilla Project) [Auto | Running] -- D:\xampp\FileZillaFTP\FileZillaServer.exe -- (FileZilla Server) SRV - [2008-09-10 13:01:28 | 000,611,664 | ---- | M] (Lavasoft) [Auto | Running] -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice) SRV - [2008-08-07 11:17:30 | 000,575,488 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2007-10-28 21:39:52 | 000,068,096 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service) SRV - [2007-09-05 12:56:20 | 000,065,536 | ---- | M] () [Auto | Running] -- C:\WINDOWS\System32\setrysvc.exe -- (setrysvc) SRV - [2006-10-27 00:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2006-10-26 19:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2006-10-26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2005-10-14 12:51:46 | 028,768,528 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe -- (MSSQL$SQLEXPRESS) SQL Server (SQLEXPRESS) SRV - [2005-10-14 12:51:12 | 000,239,320 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe -- (SQLBrowser) SRV - [2005-10-14 12:50:20 | 000,045,272 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe -- (MSSQLServerADHelper) SRV - [2005-10-14 03:53:50 | 000,087,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe -- (SQLWriter) SRV - [2005-06-06 19:08:58 | 001,273,344 | ---- | M] (OSA Technologies Inc.) [Auto | Running] -- C:\Acer\eManager\anbmServ.exe -- (anbmService) SRV - [2004-10-22 03:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004-07-07 12:17:02 | 000,200,769 | ---- | M] (SIEMENS AG) [Auto | Running] -- C:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe -- (s7oiehsx) SRV - [2002-06-18 14:04:54 | 000,503,808 | ---- | M] () [Auto | Stopped] -- C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe -- (matlabserver) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2010-01-31 20:18:50 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-01-08 08:13:12 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2009-12-18 15:02:26 | 000,135,048 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw) DRV - [2009-11-16 09:06:48 | 000,055,768 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi) DRV - [2009-11-16 09:03:36 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2009-11-16 08:56:12 | 000,116,520 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2009-01-21 15:25:06 | 000,017,801 | ---- | M] (Meetinghouse Data Communications) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\AegisP.sys -- (AegisP) AEGIS Protocol (IEEE 802.1x) DRV - [2008-11-20 21:19:06 | 000,043,872 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2008-09-20 00:41:50 | 000,037,560 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CamSuiteVAC.sys -- (CamSuiteVAC) DRV - [2007-11-13 11:25:56 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2007-10-29 16:25:46 | 000,458,112 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PAC7302.SYS -- (PAC7302) DRV - [2007-10-20 16:19:38 | 000,006,144 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NTIDrvr.sys -- (NTIDrvr) DRV - [2007-03-01 10:34:38 | 000,028,352 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2007-01-13 10:33:18 | 005,672,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm) DRV - [2006-09-24 14:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan) DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\system32\drivers\StarOpen.sys -- (StarOpen) DRV - [2005-04-19 10:40:52 | 002,317,504 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2005-04-07 18:08:46 | 000,078,208 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-shd.sys -- (EpmShd) DRV - [2005-03-04 16:37:26 | 000,008,704 | ---- | M] (Avocent/OSA Technologies Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osaio.sys -- (osaio) DRV - [2005-02-04 10:59:46 | 000,193,216 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2005-01-14 15:57:16 | 000,004,010 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osanbm.sys -- (osanbm) DRV - [2005-01-13 14:46:16 | 000,069,632 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\acer\eRecovery\int15.sys -- (int15.sys) DRV - [2005-01-10 07:10:00 | 000,090,168 | ---- | M] (SafeNet, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel) DRV - [2004-12-17 17:14:44 | 000,013,952 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\UBHelper.sys -- (UBHelper) DRV - [2004-12-02 16:36:08 | 000,070,912 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp) DRV - [2004-08-04 16:00:00 | 000,088,448 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx) DRV - [2004-08-04 16:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb) DRV - [2004-08-04 16:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx) DRV - [2004-08-04 16:00:00 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm) DRV - [2004-08-04 16:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2004-08-03 23:07:56 | 000,059,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2004-08-03 23:07:44 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp) DRV - [2004-08-03 23:07:44 | 000,041,088 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp) DRV - [2004-08-03 23:00:52 | 000,028,672 | ---- | M] (National Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nscirda.sys -- (NSCIRDA) DRV - [2004-07-19 13:10:00 | 000,004,096 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-psd.sys -- (EpmPsd) DRV - [2004-05-28 18:21:58 | 000,172,032 | ---- | M] (Siemens AG) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\SNTIE.SYS -- (SNTIE) SIMATIC Industrial Ethernet (ISO) DRV - [2003-12-03 11:03:48 | 000,125,440 | ---- | M] (SIEMENS AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\s7oppilx.sys -- (S7oppilx) DRV - [2003-12-03 11:03:38 | 000,492,599 | ---- | M] (SIEMENS AG) [Kernel | Auto | Running] -- C:\WINDOWS\System32\Drivers\S7otranx.sys -- (s7otranx) DRV - [2003-04-28 11:27:06 | 000,009,867 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\HOTKEY.sys -- (Hotkey) DRV - [2001-10-26 16:58:28 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde) DRV - [2001-08-17 22:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow) DRV - [2001-08-17 22:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3) DRV - [2001-08-17 22:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi) DRV - [2001-08-17 22:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx) DRV - [2001-08-17 22:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810) DRV - [2001-08-17 21:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra) DRV - [2001-08-17 21:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160) DRV - [2001-08-17 21:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080) DRV - [2001-08-17 21:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280) DRV - [2001-08-17 21:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k) DRV - [2001-08-17 21:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x) DRV - [2001-08-17 21:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc) DRV - [2001-08-17 21:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550) DRV - [2001-08-17 21:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde) DRV - [2000-12-19 18:29:52 | 000,002,343 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\Launch Manager\POWERKEY.SYS -- (POWERKEY) DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398" FF - prefs.js..browser.search.selectedEngine: "Wikipedia (pl)" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.0.2 FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1 FF - prefs.js..extensions.enabledItems: 6 FF - prefs.js..extensions.enabledItems: 2 FF - prefs.js..extensions.enabledItems: 48 FF - prefs.js..extensions.enabledItems: {6614d11d-d21d-b211-ae23-815234e1ebb5}:1.0.21 FF - prefs.js..extensions.enabledItems: {B9C8BE50-7105-4ec6-8FB4-4935C0671648}:0.5.991 FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.07073001 FF - prefs.js..extensions.enabledItems: {eaf8a4ef-d221-45ca-9deb-d0934b45fa34}:1.3.0.3 FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:3.5.1 FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2 FF - prefs.js..extensions.enabledItems: 4 FF - prefs.js..extensions.enabledItems: 5 FF - prefs.js..extensions.enabledItems: 1 FF - prefs.js..extensions.enabledItems: {c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.6 FF - prefs.js..network.proxy.http: "174.142.24.201" FF - prefs.js..network.proxy.http_port: 3128 FF - HKLM\software\mozilla\Mozilla Firefox 3.0.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2007-10-22 10:24:44 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2007-10-22 10:24:44 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010-02-01 11:22:32 | 000,000,000 | ---D | M] [2008-08-27 10:59:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Extensions [2007-10-22 10:24:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions [2009-11-05 19:54:40 | 000,000,000 | ---D | M] (Dr.Web anti-virus link checker) -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions\{6614d11d-d21d-b211-ae23-815234e1ebb5} [2009-11-05 19:54:42 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644} [2009-11-05 19:54:44 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions\{B9C8BE50-7105-4ec6-8FB4-4935C0671648} [2009-03-22 22:49:52 | 000,000,000 | ---D | M] (Web Developer) -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12} [2009-06-28 13:35:00 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009-11-08 17:07:46 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2009-07-18 23:32:52 | 000,000,000 | ---D | M] (OggX (powered by TIME S.A.)) -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions\{eaf8a4ef-d221-45ca-9deb-d0934b45fa34} [2009-11-25 21:06:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions\firefox@tvunetworks.com [2008-03-04 21:01:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\spopgkhf.default\extensions\moveplayer@movenetworks.com [2010-01-24 16:54:22 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2008-01-23 07:20:30 | 000,491,520 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll [2007-08-28 18:42:00 | 000,598,016 | ---- | M] (Ganymede Technologies) -- C:\Program Files\Mozilla Firefox\plugins\NPPOKER.dll [2009-01-28 20:46:54 | 000,307,200 | ---- | M] (ESKA) -- C:\Program Files\Mozilla Firefox\plugins\npOggX.dll [2009-08-21 04:00:04 | 000,061,440 | ---- | M] (Element K Corporation) -- C:\Program Files\Mozilla Firefox\plugins\NPOlp32.dll [2008-11-04 19:34:20 | 000,000,896 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2008-11-04 19:34:20 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2008-11-04 19:34:20 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2008-11-04 19:34:20 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2008-11-04 19:34:20 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2008-11-04 19:34:20 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-02-01 11:17:06 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\HOSTS O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (DIALux 3.1 ULDBrowserHelper Class) - {69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2} - C:\Program Files\DIALux\DLXShellExtension.dll (DIAL GmbH, Germany) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No CLSID value found. O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [EPM-DM] c:\Acer\ePM\epm-dm.exe (Acer Inc) O4 - HKLM..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe (Acer Value Labs, Taiwan) O4 - HKLM..\Run: [eRecoveryService] C:\Program Files\Acer\eRecovery\Monitor.exe (acer Inc.) O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe (Intel Corporation) O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe (Intel Corporation) O4 - HKLM..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe () O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe (Wistron) O4 - HKLM..\Run: [Persistence] C:\WINDOWS\System32\igfxpers.exe (Intel Corporation) O4 - HKLM..\Run: [PowerKey] C:\Program Files\Launch Manager\PowerKey.exe () O4 - HKLM..\Run: [preload] C:\Windows\RUNXMLPL.exe (Wistron) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Wbutton] C:\Program Files\Launch Manager\Wbutton.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O8 - Extra context menu item: &NeoTrace It! - C:\Program Files\NeoTracePro\NTXcontext.htm () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Szybkie dostosowywanie programu Outpost Firewall Pro - {44627E97-789B-40d4-B5C2-58BD171129A1} - Reg Error: Key error. File not found O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {1E53EA77-34F2-474E-9046-B2B0C86F1821} http://www.eska.pl/streamplayers/OggX.ocx (OggX Control) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://active.macromedia.com/flash2/cabs/swflash.cab (Shockwave Flash Object) O16 - DPF: Microsoft XML Parser for Java file:///C:/WINDOWS/Java/classes/xmldso.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.21.99.95 O18 - Protocol\Handler\dialux {8352FA4C-39C6-11D3-ADBA-00A0244FB1A2} - C:\Program Files\DIALux\DLXToolBox.dll (DIAL GmbH, Germany) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - Reg Error: Key error. File not found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - Reg Error: Key error. File not found O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - Reg Error: Key error. File not found O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{3452ee92-e129-11dc-a700-0014a450eebb}\Shell\AutoRun\command - "" = RECYCLER\autorun.exe O33 - MountPoints2\{3452ee92-e129-11dc-a700-0014a450eebb}\Shell\open\command - "" = RECYCLER\autorun.exe O33 - MountPoints2\{4671f705-6e3f-11de-aa73-0014a450eebb}\Shell\AutoRun\command - "" = xsia.bat O33 - MountPoints2\{4671f705-6e3f-11de-aa73-0014a450eebb}\Shell\open\Command - "" = xsia.bat O33 - MountPoints2\{86de7f42-7ff3-11dc-adf2-0014a450eebb}\Shell - "" = AutoRun O33 - MountPoints2\{86de7f42-7ff3-11dc-adf2-0014a450eebb}\Shell\AutoRun\command - "" = F:\autorun.EXE -- File not found O33 - MountPoints2\{891fa6ec-49fa-11dd-a80d-0014a450eebb}\Shell - "" = AutoRun O33 - MountPoints2\{f80db798-1a46-11de-a9bf-0014a450eebb}\Shell\AutoRun\command - "" = RECYCLER\autorun.exe O33 - MountPoints2\{f80db798-1a46-11de-a9bf-0014a450eebb}\Shell\open\command - "" = RECYCLER\autorun.exe O33 - MountPoints2\{fb068fc4-d352-11dc-aeea-0014a450eebb}\Shell\AutoRun\command - "" = G:\h.cmd -- File not found O33 - MountPoints2\{fb068fc4-d352-11dc-aeea-0014a450eebb}\Shell\explore\Command - "" = G:\h.cmd -- File not found O33 - MountPoints2\{fb068fc4-d352-11dc-aeea-0014a450eebb}\Shell\open\Command - "" = G:\h.cmd -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe () O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 1 Day ==========[/color] [2010-02-08 17:15:27 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hhctrlui.dll [2010-02-08 17:15:27 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\startoc.dll [2010-02-08 17:15:26 | 000,017,408 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\System32\dllcache\ocmsn.dll [2010-02-08 16:58:45 | 000,549,376 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Michal\Pulpit\OTL.exe [2010-02-04 16:21:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET [2009-05-26 23:03:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google [2009-05-26 21:48:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google [2009-01-17 12:08:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Bytemobile [2004-10-04 18:34:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2004-10-04 18:34:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2004-10-04 18:21:48 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2004-10-04 18:21:48 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [color=#E56717]========== Files - Modified Within 1 Day ==========[/color] [2010-02-08 16:59:04 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Michal\Pulpit\OTL.exe [2010-02-08 16:54:04 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010-02-08 16:54:04 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010-02-08 16:40:06 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\eRLog.ini [2010-02-08 16:39:18 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-02-08 16:39:06 | 000,000,097 | ---- | M] () -- C:\WINDOWS\ComponentList.xml [2010-02-08 16:38:58 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-02-08 16:38:52 | 526,897,152 | -HS- | M] () -- C:\hiberfil.sys [2010-02-08 07:31:18 | 011,796,480 | -H-- | M] () -- C:\Documents and Settings\Michal\NTUSER.DAT [2010-02-08 07:31:18 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Michal\ntuser.ini [2010-02-07 20:49:38 | 000,001,230 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-02-01 08:03:45 | 000,241,536 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat~ [2010-01-31 17:49:50 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2010-01-25 23:35:40 | 000,000,705 | ---- | C] () -- C:\Documents and Settings\Michal\Dane aplikacji\Launch Internet Explorer Browser.lnk [2010-01-24 17:53:24 | 000,000,096 | ---- | C] () -- C:\WINDOWS\Dialux.ini [2010-01-24 16:53:56 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2009-12-21 18:22:58 | 000,000,904 | ---- | C] () -- C:\WINDOWS\d.ini [2009-10-06 15:53:44 | 000,000,291 | ---- | C] () -- C:\WINDOWS\Microwin.ini [2009-09-10 19:10:40 | 000,037,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\CamSuiteVAC.sys [2009-09-10 19:01:46 | 000,000,883 | ---- | C] () -- C:\WINDOWS\System32\SP7302.ini [2009-06-21 17:59:53 | 000,000,035 | ---- | C] () -- C:\WINDOWS\A5W.INI [2009-05-16 21:36:30 | 000,000,237 | ---- | C] () -- C:\WINDOWS\FTRUN32.INI [2009-03-06 22:20:10 | 000,005,320 | ---- | C] () -- C:\WINDOWS\citect.ini [2009-02-14 21:37:25 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-02-14 21:37:24 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008-09-29 22:45:48 | 000,000,157 | ---- | C] () -- C:\WINDOWS\matlab.ini [2008-09-29 22:07:36 | 000,000,019 | ---- | C] () -- C:\WINDOWS\exlink.ini [2008-07-18 21:23:00 | 000,000,394 | ---- | C] () -- C:\WINDOWS\capture.ini [2008-05-16 19:43:14 | 000,000,092 | ---- | C] () -- C:\WINDOWS\mp3wavcon.ini [2008-04-27 21:34:21 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat [2008-03-27 21:39:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt [2008-03-27 21:36:34 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2008-03-04 20:49:27 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2008-03-02 21:50:37 | 000,000,027 | ---- | C] () -- C:\WINDOWS\lmgrd.ini [2008-01-29 23:25:46 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2008-01-25 22:54:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini [2008-01-10 17:54:44 | 000,000,305 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\addr_file.html [2007-10-31 13:43:58 | 000,141,312 | ---- | C] () -- C:\Documents and Settings\Michal\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007-10-30 16:28:30 | 000,000,187 | ---- | C] () -- C:\WINDOWS\YdpDict.ini [2007-10-22 22:23:47 | 000,001,183 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini [2007-10-22 22:11:43 | 000,002,707 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2007-10-20 20:43:22 | 000,000,782 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2005-07-13 16:18:03 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2005-07-13 15:57:08 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll [2005-07-13 15:56:19 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll [2005-07-13 15:56:19 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMP3.dll [2005-07-13 15:56:19 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll [2005-07-13 15:56:19 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll [2005-07-13 15:55:00 | 000,009,867 | ---- | C] () -- C:\WINDOWS\System32\drivers\HOTKEY.sys [2005-07-13 15:41:21 | 000,872,448 | ---- | C] () -- C:\WINDOWS\iconv.dll [2005-07-13 15:41:21 | 000,743,424 | ---- | C] () -- C:\WINDOWS\libxml2.dll [2005-07-13 15:41:21 | 000,225,280 | ---- | C] () -- C:\WINDOWS\Capsule.dll [2005-07-13 15:41:21 | 000,001,150 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2004-12-17 17:14:44 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\UBHelper.sys [2001-12-26 16:12:30 | 000,065,536 | R--- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll [2001-09-03 23:46:38 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Hmpg12.dll [2001-07-30 16:33:56 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll [2001-07-23 22:04:36 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll [1996-04-03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys [color=#E56717]========== Files - Unicode (All) ==========[/color] [2008-10-02 12:23:28 | 000,033,191 | ---- | M] ()(C:\Documents and Settings\Michal\Moje dokumenty\Cutoff frequency ?p.docx) -- C:\Documents and Settings\Michal\Moje dokumenty\Cutoff frequency Ώp.docx [2008-10-02 01:50:12 | 000,033,191 | ---- | C] ()(C:\Documents and Settings\Michal\Moje dokumenty\Cutoff frequency ?p.docx) -- C:\Documents and Settings\Michal\Moje dokumenty\Cutoff frequency Ώp.docx < End of report >

A w ogole jak róznia jest z zrzucaniem logow. czy to w HiJacku czy w OTL ?

**Posty:** 18165 · przez **wojtas** 08 Lut 2010, 21:34

Daj loga z combofixa ale zainstaluj wraz z nim konsolę odzyskiwania ( instrukcja programu ) oraz z DDS

**Posty:** 4 · przez **michxxx** 12 Lut 2010, 17:37

Mam problem z zainstalowaniem ComboFixa z konsola odzyskiwania. Czy te logi ktore zamiescilem nie sa wystarczajace? Komputer nadal b.wolno dziala

**Posty:** 18165 · przez **wojtas** 12 Lut 2010, 18:13

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.0.2
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 48
FF - prefs.js..extensions.enabledItems: {6614d11d-d21d-b211-ae23-815234e1ebb5}:1.0.21
FF - prefs.js..extensions.enabledItems: {B9C8BE50-7105-4ec6-8FB4-4935C0671648}:0.5.991
FF - prefs.js..extensions.enabledItems: {eaf8a4ef-d221-45ca-9deb-d0934b45fa34}:1.3.0.3
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:3.5.1
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.6
FF - prefs.js..network.proxy.http: "174.142.24.201"
FF - prefs.js..network.proxy.http_port: 3128
O3 - HKLM\..\Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No CLSID value found.
O33 - MountPoints2\{3452ee92-e129-11dc-a700-0014a450eebb}\Shell\AutoRun\command - "" = RECYCLER\autorun.exe
O33 - MountPoints2\{3452ee92-e129-11dc-a700-0014a450eebb}\Shell\open\command - "" = RECYCLER\autorun.exe
O33 - MountPoints2\{4671f705-6e3f-11de-aa73-0014a450eebb}\Shell\AutoRun\command - "" = xsia.bat
O33 - MountPoints2\{4671f705-6e3f-11de-aa73-0014a450eebb}\Shell\open\Command - "" = xsia.bat
O33 - MountPoints2\{86de7f42-7ff3-11dc-adf2-0014a450eebb}\Shell - "" = AutoRun
O33 - MountPoints2\{86de7f42-7ff3-11dc-adf2-0014a450eebb}\Shell\AutoRun\command - "" = F:\autorun.EXE -- File not found
O33 - MountPoints2\{891fa6ec-49fa-11dd-a80d-0014a450eebb}\Shell - "" = AutoRun
O33 - MountPoints2\{f80db798-1a46-11de-a9bf-0014a450eebb}\Shell\AutoRun\command - "" = RECYCLER\autorun.exe
O33 - MountPoints2\{f80db798-1a46-11de-a9bf-0014a450eebb}\Shell\open\command - "" = RECYCLER\autorun.exe
O33 - MountPoints2\{fb068fc4-d352-11dc-aeea-0014a450eebb}\Shell\AutoRun\command - "" = G:\h.cmd -- File not found
O33 - MountPoints2\{fb068fc4-d352-11dc-aeea-0014a450eebb}\Shell\explore\Command - "" = G:\h.cmd -- File not found
O33 - MountPoints2\{fb068fc4-d352-11dc-aeea-0014a450eebb}\Shell\open\Command - "" = G:\h.cmd -- File not found

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdz reset kompa .

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) i daj raport ze skanu

Kto jest na forum