Ukryte foldery nie są wyświetlane

**Posty:** 293 · przez **krzysiekuser** 26 Wrz 2009, 10:40

Witam
Po włączeniu opcji folderów "Pokazuj ukryte pliki i foldery" > Zastosuj (po tym w folderze nie da się "zaznacz wszystko", ponieważ folder zawiera ukryte elementy), następnie wchodzę ponownie w te ustawienia i nadal jest zaznaczone "Nie pokazuj ukrytych plików i folderów".

Poniżej umieszczam LOG:

Kod: Zaznacz wszystko: OTL logfile created on: 2009-09-26 10:25:53 - Run 1 OTL by OldTimer - Version 3.0.14.0 Folder = C:\Documents and Settings\Romek\Moje dokumenty\Downloads Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 446,48 Mb Total Physical Memory | 100,37 Mb Available Physical Memory | 22,48% Memory free 1,03 Gb Paging File | 0,34 Gb Available in Paging File | 33,50% Paging File free Paging file location(s): C:\pagefile.sys 672 1344 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,63 Gb Total Space | 1,06 Gb Free Space | 7,23% Space Free | Partition Type: FAT32 Drive D: | 4,88 Gb Total Space | 1,64 Gb Free Space | 33,61% Space Free | Partition Type: NTFS Drive E: | 69,72 Gb Total Space | 0,46 Gb Free Space | 0,65% Space Free | Partition Type: NTFS Drive F: | 28,47 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ACER5000 Current User Name: Romek Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-08-17 17:58:56 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe PRC - [2009-08-17 18:07:18 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe PRC - [2008-04-14 18:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2005-02-23 18:13:10 | 00,077,824 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2004-10-07 19:50:52 | 00,088,363 | ---- | M] (Agere Systems) -- C:\WINDOWS\AGRSMMSG.exe PRC - [2005-03-04 13:13:04 | 00,032,768 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\keyhook.exe PRC - [2009-08-17 18:07:24 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe PRC - [2007-05-08 16:24:20 | 00,054,840 | ---- | M] (Hewlett-Packard) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe PRC - [2008-11-12 15:02:22 | 00,136,600 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2008-04-14 18:21:30 | 01,695,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2009-08-09 20:23:36 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Romek\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe PRC - [2005-01-04 16:52:52 | 00,331,776 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\sistray.exe PRC - [2006-02-19 04:21:22 | 00,288,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe PRC - [2006-02-19 05:24:52 | 00,239,320 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe PRC - [2004-08-16 15:17:20 | 01,287,168 | ---- | M] (OSA Technologies Inc.) -- C:\Acer\eManager\anbmServ.exe PRC - [2008-11-12 15:02:22 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2008-08-28 23:12:32 | 00,057,344 | ---- | M] (Apache Software Foundation) -- C:\Program Files\Program symulacyjny\apache-tomcat-5.5.27\bin\tomcat5.exe PRC - [2009-08-17 18:07:02 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe PRC - [2009-08-17 18:04:22 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe PRC - [2009-09-13 20:09:48 | 00,919,024 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Romek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe PRC - [2009-09-13 20:09:48 | 00,919,024 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Romek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe PRC - [2009-09-26 10:23:14 | 00,514,560 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Romek\Moje dokumenty\Downloads\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2004-08-16 15:17:20 | 01,287,168 | ---- | M] (OSA Technologies Inc.) -- C:\Acer\eManager\anbmServ.exe -- (anbmService [Auto | Running]) SRV - [2008-07-25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2009-08-17 17:58:56 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv [Auto | Running]) SRV - [2009-08-17 18:07:18 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus [Auto | Running]) SRV - [2009-08-17 18:07:02 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Running]) SRV - [2009-08-17 18:04:22 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Running]) SRV - [2008-07-25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped]) SRV - [2008-04-14 18:20:44 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2008-07-29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2008-11-12 15:02:22 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2008-07-29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2007-08-24 03:19:12 | 00,443,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped]) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2007-08-09 07:27:52 | 00,073,728 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe -- (Pml Driver HPZ12 [Auto | Stopped]) SRV - [2008-08-28 23:12:32 | 00,057,344 | ---- | M] (Apache Software Foundation) -- C:\Program Files\Program symulacyjny\apache-tomcat-5.5.27\bin\tomcat5.exe -- (SkandiaSym [Auto | Running]) SRV - [2006-12-01 11:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-08-17 18:03:22 | 00,026,944 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4 [System | Running]) DRV - [2004-10-07 19:51:08 | 01,270,540 | ---- | M] (Agere Systems) -- C:\WINDOWS\System32\DRIVERS\AGRSM.sys -- (AgereSoftModem [On_Demand | Running]) DRV - [2005-02-24 14:20:22 | 02,311,680 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running]) DRV - [2009-08-17 18:05:38 | 00,020,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\DRIVERS\aswFsBlk.sys -- (aswFsBlk [Auto | Running]) DRV - [2009-08-17 18:06:44 | 00,094,160 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2 [Auto | Running]) DRV - [2009-08-17 18:04:30 | 00,023,152 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr [On_Demand | Running]) DRV - [2009-08-17 18:05:52 | 00,114,768 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP [System | Running]) DRV - [2009-08-17 18:04:40 | 00,051,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi [System | Running]) DRV - [2004-12-21 10:32:12 | 00,369,024 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\DRIVERS\bcmwl5.sys -- (BCM43XX [On_Demand | Running]) DRV - [2004-12-08 14:10:00 | 00,016,896 | ---- | M] (Dritek System Inc.) -- C:\WINDOWS\System32\Drivers\DKbFltr.sys -- (DKbFltr [On_Demand | Running]) DRV - [2006-04-13 01:04:40 | 00,049,664 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZid412.sys -- (HPZid412 [On_Demand | Stopped]) DRV - [2006-04-13 01:04:40 | 00,016,496 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZipr12.sys -- (HPZipr12 [On_Demand | Stopped]) DRV - [2006-04-13 01:04:40 | 00,021,568 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZius12.sys -- (HPZius12 [On_Demand | Stopped]) DRV - [2005-01-13 14:46:16 | 00,069,632 | ---- | M] () -- C:\Program Files\Acer\eRecovery\int15.sys -- (int15.sys [Auto | Running]) DRV - [2008-09-29 19:06:48 | 00,006,144 | ---- | M] (NewTech Infosystems, Inc.) -- C:\WINDOWS\System32\DRIVERS\NTIDrvr.sys -- (NTIDrvr [On_Demand | Stopped]) DRV - [2003-12-05 18:46:36 | 00,010,368 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\System32\drivers\pfc.sys -- (pfc [On_Demand | Stopped]) DRV - [2004-08-04 20:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 00:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-04-13 17:39:16 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2005-03-02 00:09:02 | 00,240,640 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\DRIVERS\sisgrp.sys -- (SiS315 [On_Demand | Running]) DRV - [2003-07-18 09:58:20 | 00,036,992 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\DRIVERS\SISAGPX.sys -- (SISAGP [Boot | Running]) DRV - [2005-02-25 19:45:32 | 00,013,312 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\DRIVERS\srvkp.sys -- (SiSkp [System | Running]) DRV - [2004-11-05 01:43:58 | 00,032,768 | ---- | M] (SiS Corporation) -- C:\WINDOWS\System32\DRIVERS\sisnicxp.sys -- (SISNICXP [On_Demand | Running]) DRV - [2004-10-07 23:33:46 | 00,185,824 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\System32\DRIVERS\SynTP.sys -- (SynTP [On_Demand | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2728276811-3819141402-2127908473-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-2728276811-3819141402-2127908473-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-2728276811-3819141402-2127908473-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-2728276811-3819141402-2127908473-1005\S-1-5-21-2728276811-3819141402-2127908473-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2008-11-12 15:02:22 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-08-06 17:46:24 | 00,000,000 | ---D | M] O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O4 - HKLM..\Run: [AGRSMMSG] C:\WINDOWS\AGRSMMSG.exe (Agere Systems) O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation) O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe () O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe (Silicon Integrated Systems Corporation) O4 - HKLM..\Run: [SiSPower] C:\WINDOWS\System32\SiSPower.DLL (Silicon Integrated Systems Corporation) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKU\S-1-5-21-2728276811-3819141402-2127908473-1005..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Utility Tray.lnk = C:\WINDOWS\System32\sistray.exe (Silicon Integrated Systems Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2728276811-3819141402-2127908473-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2728276811-3819141402-2127908473-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://dl8-cdn-03.sun.com/s/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab?e=1226498468943&h=eaaa5349a354494841f6dd612e582168/&filename=jinstall-6u10-windows-i586-jc.cab (Java Plug-in 1.6.0_10) O16 - DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2005-03-09 14:42:46 | 00,000,100 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ] O32 - AutoRun File - [2009-05-16 08:53:12 | 00,000,049 | RHS- | M] () - C:\autorun.inf -- [ FAT32 ] O32 - AutoRun File - [2009-05-16 08:54:08 | 00,000,049 | RHS- | M] () - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2009-05-16 08:54:16 | 00,000,049 | RHS- | M] () - E:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{318b82de-16f5-11de-bd33-001636029767}\Shell\Auto\command - "" = G:\tel.xls.exe -- File not found O33 - MountPoints2\{9b53d6e8-2399-11de-bd65-001636029767}\Shell - "" = AutoRun O33 - MountPoints2\{9b53d6e8-2399-11de-bd65-001636029767}\Shell\Auto\command - "" = Long.exe O33 - MountPoints2\{aa11e584-99cf-11dd-bb6e-001636029767}\Shell - "" = AutoRun O33 - MountPoints2\{ba879dfc-8e60-11dd-bb35-806d6172696f}\Shell\AutoRun\command - "" = j.cmd O33 - MountPoints2\{ba879dfc-8e60-11dd-bb35-806d6172696f}\Shell\open\Command - "" = j.cmd O33 - MountPoints2\{ba879dfd-8e60-11dd-bb35-806d6172696f}\Shell\AutoRun\command - "" = j.cmd O33 - MountPoints2\{ba879dfd-8e60-11dd-bb35-806d6172696f}\Shell\open\Command - "" = j.cmd O33 - MountPoints2\{ba879dfe-8e60-11dd-bb35-806d6172696f}\Shell\AutoRun\command - "" = j.cmd O33 - MountPoints2\{ba879dfe-8e60-11dd-bb35-806d6172696f}\Shell\open\Command - "" = j.cmd O33 - MountPoints2\{cfc6bf1a-4182-11de-bdd7-001636029767}\Shell\AutoRun\command - "" = G:\j.cmd -- File not found O33 - MountPoints2\{cfc6bf1a-4182-11de-bdd7-001636029767}\Shell\open\Command - "" = G:\j.cmd -- File not found O33 - MountPoints2\{dda2d7fe-029e-11de-bce7-001636029767}\Shell - "" = AutoRun O33 - MountPoints2\{dda2d7fe-029e-11de-bce7-001636029767}\Shell\Auto\command - "" = G:\qq.exe -- File not found O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-09-16 22:21:52 | 00,000,000 | -HSD | C] -- C:\FOUND.026 [2009-09-10 16:53:35 | 00,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2009-09-10 16:53:35 | 00,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2009-09-03 07:42:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Romek\Dane aplikacji\HpUpdate [2009-09-03 07:42:41 | 00,000,000 | ---D | C] -- C:\WINDOWS\Hewlett-Packard [2009-09-01 22:46:18 | 00,000,000 | -HSD | C] -- C:\FOUND.025 [2009-03-06 11:58:20 | 00,210,032 | ---- | C] () -- C:\WINDOWS\System32\DBCLIENT.DLL [2008-09-29 22:38:23 | 00,077,824 | ---- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll [2008-09-29 20:04:32 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008-09-29 20:04:31 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2008-09-29 20:04:29 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-09-29 20:04:29 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008-09-29 20:04:28 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-09-29 20:04:27 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-09-29 20:04:27 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-09-29 19:18:32 | 00,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2008-09-29 19:11:34 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini [2005-03-09 14:42:20 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTIMP3.dll [2005-03-08 10:48:18 | 00,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2005-03-08 10:44:12 | 00,000,317 | ---- | C] () -- C:\WINDOWS\uninstall.ini [2005-03-08 10:44:12 | 00,000,033 | ---- | C] () -- C:\WINDOWS\Acer.ini [2005-03-07 21:05:23 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll [2005-03-07 21:04:37 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll [2005-03-07 21:04:37 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll [2005-03-07 21:04:37 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll [2005-03-07 20:56:10 | 00,083,997 | ---- | C] () -- C:\WINDOWS\VGAsetup.ini [2005-03-07 20:55:57 | 00,201,667 | ---- | C] () -- C:\WINDOWS\System32\VGAunistlog.ini [2005-03-07 20:50:56 | 00,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2005-03-07 20:50:54 | 00,156,672 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2005-03-07 20:43:53 | 00,037,776 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2005-03-07 20:36:52 | 00,003,619 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2001-12-26 16:12:30 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll [2001-09-03 23:46:38 | 00,110,592 | ---- | C] () -- C:\WINDOWS\System32\Hmpg12.dll [2001-07-30 16:33:56 | 00,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll [2001-07-23 22:04:36 | 00,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll [2001-07-07 03:00:02 | 00,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI [1980-01-01 00:00:00 | 00,002,790 | ---- | C] () -- C:\WINDOWS\ANTIV.INI [1980-01-01 00:00:00 | 00,000,637 | ---- | C] () -- C:\WINDOWS\win.ini [1980-01-01 00:00:00 | 00,000,303 | ---- | C] () -- C:\WINDOWS\system.ini [1980-01-01 00:00:00 | 00,000,091 | ---- | C] () -- C:\WINDOWS\ALaunch.ini [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-09-26 09:54:02 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-09-26 09:53:26 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-09-26 09:53:20 | 46,824,2432 | -HS- | M] () -- C:\hiberfil.sys [2009-09-24 13:12:46 | 00,000,404 | ---- | M] () -- C:\WINDOWS\BRWMARK.INI [2009-09-24 13:12:46 | 00,000,027 | ---- | M] () -- C:\WINDOWS\BRPP2KA.INI [2009-09-23 20:28:02 | 00,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2728276811-3819141402-2127908473-1005Core.job [2009-09-23 20:16:38 | 00,002,210 | ---- | M] () -- C:\Documents and Settings\Romek\Pulpit\Google Chrome.lnk [2009-09-19 23:30:42 | 00,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-09-16 08:42:02 | 00,000,303 | ---- | M] () -- C:\WINDOWS\system.ini [2009-08-28 23:38:20 | 24,689,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe [color=#E56717]========== LOP Check ==========[/color] [2005-03-07 20:32:24 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji [2005-03-07 20:32:24 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji [2009-08-20 13:51:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AsystentAgenta [2005-03-07 20:43:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji [2005-03-07 20:43:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji [2005-03-07 20:32:24 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Romek\Dane aplikacji [2008-09-29 19:16:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\CyberLink [2008-09-29 19:49:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\Gadu-Gadu [2009-04-12 20:40:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\IEPro [2009-01-11 21:27:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\Image Zone Express [2009-04-12 20:41:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\MiniDm [2005-03-07 20:32:24 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Gość\Dane aplikacji [2004-08-04 20:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-09-26 09:54:02 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [2009-09-23 20:28:02 | 00,001,080 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2728276811-3819141402-2127908473-1005Core.job [color=#E56717]========== Purity Check ==========[/color] < End of report >

Dodatkowo widzę (w Mój Komputer), że pliki na dysku C zajmują prawie 15 GB, a jak zaznaczam ręcznie wszystkie foldery na tym dysku to wyświetla tylko niecałe 10 GB. Czy problem może być tylko w tych ukrytych plikach/folderach?

Jest jeszcze jeden problem, do którego może przydać się analiza LOGa, napisałem o nim w poniższym poscie:

http://forum.programosy.pl/problem-przy-otwieraniu-folderow-dyskow-vt113406.html

**Posty:** 9184 · przez **MUTOPOMPKA** 26 Wrz 2009, 11:33

krzysiekuser napisał(a):Po włączeniu opcji folderów "Pokazuj ukryte pliki i foldery" > Zastosuj (po tym w folderze nie da się "zaznacz wszystko", ponieważ folder zawiera ukryte elementy), następnie wchodzę ponownie w te ustawienia i nadal jest zaznaczone "Nie pokazuj ukrytych plików i folderów".

Witam. A odznaczyłeś opcję: Ukryj chronione pliki systemu operacyjnego? Gdyż także wśród nich sa pliki i katalogi ukryte.

krzysiekuser napisał(a):pliki na dysku C zajmują prawie 15 GB, a jak zaznaczam ręcznie wszystkie foldery na tym dysku to wyświetla tylko niecałe 10 GB. Czy problem może być tylko w tych ukrytych plikach/folderach?

Może. Katalog System Volume Information (do którego możesz nie mieć dostępu) będzie wskazywac wartość 0B (a w rzeczywistości może ważyć nawet kilka GB). Katalog ten odpowiada za [przechowywanie plików przywracania systemu. Więc możesz wyłączyć przywracanie i jednocześnie usunąć te punkty przywracania. Do tego sprawdzić dysk na wypadek błędnego wyliczenia wolnej przestrzeni.

**Posty:** 18165 · przez **wojtas** 27 Wrz 2009, 00:59

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
O32 - AutoRun File - [2009-05-16 08:53:12 | 00,000,049 | RHS- | M] () - C:\autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2009-05-16 08:54:08 | 00,000,049 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-05-16 08:54:16 | 00,000,049 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{318b82de-16f5-11de-bd33-001636029767}\Shell\Auto\command - "" = G:\tel.xls.exe -- File not found
O33 - MountPoints2\{9b53d6e8-2399-11de-bd65-001636029767}\Shell - "" = AutoRun
O33 - MountPoints2\{9b53d6e8-2399-11de-bd65-001636029767}\Shell\Auto\command - "" = Long.exe
O33 - MountPoints2\{aa11e584-99cf-11dd-bb6e-001636029767}\Shell - "" = AutoRun
O33 - MountPoints2\{ba879dfc-8e60-11dd-bb35-806d6172696f}\Shell\AutoRun\command - "" = j.cmd
O33 - MountPoints2\{ba879dfc-8e60-11dd-bb35-806d6172696f}\Shell\open\Command - "" = j.cmd
O33 - MountPoints2\{ba879dfd-8e60-11dd-bb35-806d6172696f}\Shell\AutoRun\command - "" = j.cmd
O33 - MountPoints2\{ba879dfd-8e60-11dd-bb35-806d6172696f}\Shell\open\Command - "" = j.cmd
O33 - MountPoints2\{ba879dfe-8e60-11dd-bb35-806d6172696f}\Shell\AutoRun\command - "" = j.cmd
O33 - MountPoints2\{ba879dfe-8e60-11dd-bb35-806d6172696f}\Shell\open\Command - "" = j.cmd
O33 - MountPoints2\{cfc6bf1a-4182-11de-bdd7-001636029767}\Shell\AutoRun\command - "" = G:\j.cmd -- File not found
O33 - MountPoints2\{cfc6bf1a-4182-11de-bdd7-001636029767}\Shell\open\Command - "" = G:\j.cmd -- File not found
O33 - MountPoints2\{dda2d7fe-029e-11de-bce7-001636029767}\Shell - "" = AutoRun
O33 - MountPoints2\{dda2d7fe-029e-11de-bce7-001636029767}\Shell\Auto\command - "" = G:\qq.exe -- File not found

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{db1b3e60-05ac-11de-a5d3-00001cd72a97}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia kompa

**Posty:** 293 · przez **krzysiekuser** 17 Paź 2009, 20:57

Dzięki za porady.

Raport z czyszczenia:

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== C:\autorun.inf moved successfully. D:\autorun.inf moved successfully. E:\autorun.inf moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{318b82de-16f5-11de-bd33-001636029767}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{318b82de-16f5-11de-bd33-001636029767}\ not found. File G:\tel.xls.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9b53d6e8-2399-11de-bd65-001636029767}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9b53d6e8-2399-11de-bd65-001636029767}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9b53d6e8-2399-11de-bd65-001636029767}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9b53d6e8-2399-11de-bd65-001636029767}\ not found. File Long.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{aa11e584-99cf-11dd-bb6e-001636029767}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa11e584-99cf-11dd-bb6e-001636029767}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ba879dfc-8e60-11dd-bb35-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba879dfc-8e60-11dd-bb35-806d6172696f}\ not found. File j.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ba879dfc-8e60-11dd-bb35-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba879dfc-8e60-11dd-bb35-806d6172696f}\ not found. File j.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ba879dfd-8e60-11dd-bb35-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba879dfd-8e60-11dd-bb35-806d6172696f}\ not found. File j.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ba879dfd-8e60-11dd-bb35-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba879dfd-8e60-11dd-bb35-806d6172696f}\ not found. File j.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ba879dfe-8e60-11dd-bb35-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba879dfe-8e60-11dd-bb35-806d6172696f}\ not found. File j.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ba879dfe-8e60-11dd-bb35-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba879dfe-8e60-11dd-bb35-806d6172696f}\ not found. File j.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cfc6bf1a-4182-11de-bdd7-001636029767}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cfc6bf1a-4182-11de-bdd7-001636029767}\ not found. File G:\j.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cfc6bf1a-4182-11de-bdd7-001636029767}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cfc6bf1a-4182-11de-bdd7-001636029767}\ not found. File G:\j.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dda2d7fe-029e-11de-bce7-001636029767}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dda2d7fe-029e-11de-bce7-001636029767}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dda2d7fe-029e-11de-bce7-001636029767}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dda2d7fe-029e-11de-bce7-001636029767}\ not found. File G:\qq.exe not found. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{db1b3e60-05ac-11de-a5d3-00001cd72a97}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{db1b3e60-05ac-11de-a5d3-00001cd72a97}\ not found. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"SuperHidden"|dword:00000001 /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"Hidden"|dword:00000001 /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"ShowSuperHidden"|dword:00000001 /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\\"CheckedValue"|dword:00000001 /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\ deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\\@|"" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: All Users User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService File delete failed. C:\Documents and Settings\LocalService\Ustawienia lokalne\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\LocalService\Ustawienia lokalne\Temp\Cookies\index.dat scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\LocalService\Ustawienia lokalne\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. ->Temp folder emptied: 65748 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: Romek ->Temp folder emptied: 3082 bytes ->Temporary Internet Files folder emptied: 61641461 bytes ->Java cache emptied: 4759101 bytes ->Google Chrome cache emptied: 557424 bytes User: Gość ->Temp folder emptied: 143 bytes ->Temporary Internet Files folder emptied: 150619 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 2596 bytes File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5d0.dat scheduled to be deleted on reboot. Windows Temp folder emptied: 81920 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 64,21 mb OTL by OldTimer - Version 3.0.14.0 log created on 10172009_203908 Files\Folders moved on Reboot... File\Folder C:\WINDOWS\temp\_avast4_\Webshlock.txt not found! File\Folder C:\WINDOWS\temp\Perflib_Perfdata_5d0.dat not found! Registry entries deleted on Reboot...

Nowy log z OTL:

Kod: Zaznacz wszystko: OTL logfile created on: 2009-10-17 20:50:26 - Run 2 OTL by OldTimer - Version 3.0.14.0 Folder = C:\Documents and Settings\Romek\Moje dokumenty\Downloads Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 446,48 Mb Total Physical Memory | 129,30 Mb Available Physical Memory | 28,96% Memory free 1,03 Gb Paging File | 0,39 Gb Available in Paging File | 37,77% Paging File free Paging file location(s): C:\pagefile.sys 672 1344 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,63 Gb Total Space | 1,71 Gb Free Space | 11,71% Space Free | Partition Type: FAT32 Drive D: | 4,88 Gb Total Space | 1,64 Gb Free Space | 33,61% Space Free | Partition Type: NTFS Drive E: | 69,72 Gb Total Space | 0,46 Gb Free Space | 0,65% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ACER5000 Current User Name: Romek Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-08-17 17:58:56 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe PRC - [2009-08-17 18:07:18 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe PRC - [2008-04-14 18:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2008-04-14 18:21:32 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe PRC - [2005-02-23 18:13:10 | 00,077,824 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2004-10-07 19:50:52 | 00,088,363 | ---- | M] (Agere Systems) -- C:\WINDOWS\AGRSMMSG.exe PRC - [2005-03-04 13:13:04 | 00,032,768 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\keyhook.exe PRC - [2009-08-17 18:07:24 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe PRC - [2008-05-30 14:26:28 | 00,409,600 | ---- | M] () -- C:\Program Files\iPlus\iPlusChecker.exe PRC - [2008-04-14 18:21:30 | 01,695,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2005-01-04 16:52:52 | 00,331,776 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\sistray.exe PRC - [2009-10-09 20:24:56 | 00,919,024 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Romek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe PRC - [2004-08-16 15:17:20 | 01,287,168 | ---- | M] (OSA Technologies Inc.) -- C:\Acer\eManager\anbmServ.exe PRC - [2008-11-12 15:02:22 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2007-08-09 07:27:52 | 00,073,728 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe PRC - [2008-08-28 23:12:32 | 00,057,344 | ---- | M] (Apache Software Foundation) -- C:\Program Files\Program symulacyjny\apache-tomcat-5.5.27\bin\tomcat5.exe PRC - [2009-10-09 20:24:56 | 00,919,024 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Romek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe PRC - [2009-08-17 18:07:02 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe PRC - [2009-08-17 18:04:22 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe PRC - [2009-02-06 12:10:02 | 00,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\wmiprvse.exe PRC - [2009-09-26 10:23:14 | 00,514,560 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Romek\Moje dokumenty\Downloads\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2004-08-16 15:17:20 | 01,287,168 | ---- | M] (OSA Technologies Inc.) -- C:\Acer\eManager\anbmServ.exe -- (anbmService [Auto | Running]) SRV - [2008-07-25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2009-08-17 17:58:56 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv [Auto | Running]) SRV - [2009-08-17 18:07:18 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus [Auto | Running]) SRV - [2009-08-17 18:07:02 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Running]) SRV - [2009-08-17 18:04:22 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Running]) SRV - [2008-07-25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped]) SRV - [2008-04-14 18:20:44 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2008-07-29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2008-11-12 15:02:22 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2008-07-29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2007-08-24 03:19:12 | 00,443,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped]) SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2007-08-09 07:27:52 | 00,073,728 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe -- (Pml Driver HPZ12 [Auto | Running]) SRV - [2008-08-28 23:12:32 | 00,057,344 | ---- | M] (Apache Software Foundation) -- C:\Program Files\Program symulacyjny\apache-tomcat-5.5.27\bin\tomcat5.exe -- (SkandiaSym [Auto | Running]) SRV - [2006-12-01 11:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-08-17 18:03:22 | 00,026,944 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4 [System | Running]) DRV - [2004-10-07 19:51:08 | 01,270,540 | ---- | M] (Agere Systems) -- C:\WINDOWS\System32\DRIVERS\AGRSM.sys -- (AgereSoftModem [On_Demand | Running]) DRV - [2005-02-24 14:20:22 | 02,311,680 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running]) DRV - [2009-08-17 18:05:38 | 00,020,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\DRIVERS\aswFsBlk.sys -- (aswFsBlk [Auto | Running]) DRV - [2009-08-17 18:06:44 | 00,094,160 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2 [Auto | Running]) DRV - [2009-08-17 18:04:30 | 00,023,152 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr [On_Demand | Running]) DRV - [2009-08-17 18:05:52 | 00,114,768 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP [System | Running]) DRV - [2009-08-17 18:04:40 | 00,051,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi [System | Running]) DRV - [2004-12-21 10:32:12 | 00,369,024 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\DRIVERS\bcmwl5.sys -- (BCM43XX [On_Demand | Running]) DRV - [2004-12-08 14:10:00 | 00,016,896 | ---- | M] (Dritek System Inc.) -- C:\WINDOWS\System32\Drivers\DKbFltr.sys -- (DKbFltr [On_Demand | Running]) DRV - [2006-04-13 01:04:40 | 00,049,664 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZid412.sys -- (HPZid412 [On_Demand | Stopped]) DRV - [2006-04-13 01:04:40 | 00,016,496 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZipr12.sys -- (HPZipr12 [On_Demand | Stopped]) DRV - [2006-04-13 01:04:40 | 00,021,568 | ---- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZius12.sys -- (HPZius12 [On_Demand | Stopped]) DRV - [2008-07-10 15:29:52 | 00,101,376 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys -- (hwdatacard [On_Demand | Stopped]) DRV - [2005-01-13 14:46:16 | 00,069,632 | ---- | M] () -- C:\Program Files\Acer\eRecovery\int15.sys -- (int15.sys [Auto | Running]) DRV - [2008-09-29 19:06:48 | 00,006,144 | ---- | M] (NewTech Infosystems, Inc.) -- C:\WINDOWS\System32\DRIVERS\NTIDrvr.sys -- (NTIDrvr [On_Demand | Stopped]) DRV - [2003-12-05 18:46:36 | 00,010,368 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\System32\drivers\pfc.sys -- (pfc [On_Demand | Stopped]) DRV - [2004-08-04 20:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 00:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-04-13 17:39:16 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2005-03-02 00:09:02 | 00,240,640 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\DRIVERS\sisgrp.sys -- (SiS315 [On_Demand | Running]) DRV - [2003-07-18 09:58:20 | 00,036,992 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\DRIVERS\SISAGPX.sys -- (SISAGP [Boot | Running]) DRV - [2005-02-25 19:45:32 | 00,013,312 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\DRIVERS\srvkp.sys -- (SiSkp [System | Running]) DRV - [2004-11-05 01:43:58 | 00,032,768 | ---- | M] (SiS Corporation) -- C:\WINDOWS\System32\DRIVERS\sisnicxp.sys -- (SISNICXP [On_Demand | Running]) DRV - [2004-10-07 23:33:46 | 00,185,824 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\System32\DRIVERS\SynTP.sys -- (SynTP [On_Demand | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2008-11-12 15:02:22 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-08-06 17:46:24 | 00,000,000 | ---D | M] O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O4 - HKLM..\Run: [AGRSMMSG] C:\WINDOWS\AGRSMMSG.exe (Agere Systems) O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation) O4 - HKLM..\Run: [iPlusManager] C:\Program Files\iPlus\iPlusChecker.exe () O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe () O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe (Silicon Integrated Systems Corporation) O4 - HKLM..\Run: [SiSPower] C:\WINDOWS\System32\SiSPower.DLL (Silicon Integrated Systems Corporation) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKCU..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Utility Tray.lnk = C:\WINDOWS\System32\sistray.exe (Silicon Integrated Systems Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://dl8-cdn-03.sun.com/s/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab?e=1226498468943&h=eaaa5349a354494841f6dd612e582168/&filename=jinstall-6u10-windows-i586-jc.cab (Java Plug-in 1.6.0_10) O16 - DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2005-03-09 14:42:46 | 00,000,100 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ] O33 - MountPoints2\{92b66eea-b8dd-11de-bfce-001636029767}\Shell - "" = AutoRun O33 - MountPoints2\{92b66eea-b8dd-11de-bfce-001636029767}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-10-17 20:39:08 | 00,000,000 | ---D | C] -- C:\_OTL [2009-10-15 22:16:51 | 00,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2009-10-15 19:54:47 | 02,146,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2009-10-15 19:54:45 | 02,025,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2009-10-15 19:54:44 | 02,067,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe [2009-10-14 18:26:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Romek\Dane aplikacji\iPlus [2009-10-14 18:22:22 | 00,101,376 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys [2009-10-14 18:22:15 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE [2009-10-14 18:22:11 | 00,000,585 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\iPlus.lnk [2009-10-14 18:21:57 | 00,000,000 | ---D | C] -- C:\Program Files\iPlus [2009-10-13 15:26:54 | 00,011,917 | ---- | C] () -- C:\Documents and Settings\Romek\Pulpit\Abonament - notowania w czasie ciągłym.docx [2009-10-11 17:31:41 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hidserv.dll [2009-10-11 17:31:41 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidserv.dll [2009-10-04 10:26:57 | 00,011,727 | ---- | C] () -- C:\Documents and Settings\Romek\Pulpit\Plany_sprzedazowe_Horyzont_Biala.xlsx [2009-10-02 16:58:22 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\Romek\Pulpit\~$nkurs 2010p (1).doc [2009-10-02 13:11:33 | 01,271,808 | ---- | C] () -- C:\Documents and Settings\Romek\Pulpit\Konkurs 2010p (1).doc [2009-10-01 09:38:11 | 00,037,888 | ---- | C] () -- C:\Documents and Settings\Romek\Pulpit\Plan sprzedażowy na IV kwartał 2009.doc [2009-09-28 16:33:05 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\Romek\Pulpit\~$nkurs 20.09.2009.doc [2009-09-27 22:41:39 | 00,010,381 | ---- | C] () -- C:\Documents and Settings\Romek\Pulpit\wycieczki.docx [2009-09-10 16:53:35 | 00,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2009-09-10 16:53:35 | 00,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2009-03-06 11:58:20 | 00,210,032 | ---- | C] () -- C:\WINDOWS\System32\DBCLIENT.DLL [2008-09-29 22:38:23 | 00,077,824 | ---- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll [2008-09-29 20:04:32 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008-09-29 20:04:31 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2008-09-29 20:04:29 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-09-29 20:04:29 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008-09-29 20:04:28 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008-09-29 20:04:27 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-09-29 20:04:27 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-09-29 19:18:32 | 00,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2008-09-29 19:11:34 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini [2005-03-09 14:42:20 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTIMP3.dll [2005-03-08 10:48:18 | 00,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2005-03-08 10:44:12 | 00,000,317 | ---- | C] () -- C:\WINDOWS\uninstall.ini [2005-03-08 10:44:12 | 00,000,033 | ---- | C] () -- C:\WINDOWS\Acer.ini [2005-03-07 21:05:23 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll [2005-03-07 21:04:37 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll [2005-03-07 21:04:37 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll [2005-03-07 21:04:37 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll [2005-03-07 20:56:10 | 00,083,997 | ---- | C] () -- C:\WINDOWS\VGAsetup.ini [2005-03-07 20:55:57 | 00,201,667 | ---- | C] () -- C:\WINDOWS\System32\VGAunistlog.ini [2005-03-07 20:50:56 | 00,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2005-03-07 20:50:54 | 00,156,672 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2005-03-07 20:43:53 | 00,037,776 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2005-03-07 20:36:52 | 00,003,619 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2001-12-26 16:12:30 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll [2001-09-03 23:46:38 | 00,110,592 | ---- | C] () -- C:\WINDOWS\System32\Hmpg12.dll [2001-07-30 16:33:56 | 00,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll [2001-07-23 22:04:36 | 00,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll [2001-07-07 03:00:02 | 00,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI [1980-01-01 00:00:00 | 00,002,790 | ---- | C] () -- C:\WINDOWS\ANTIV.INI [1980-01-01 00:00:00 | 00,000,637 | ---- | C] () -- C:\WINDOWS\win.ini [1980-01-01 00:00:00 | 00,000,303 | ---- | C] () -- C:\WINDOWS\system.ini [1980-01-01 00:00:00 | 00,000,091 | ---- | C] () -- C:\WINDOWS\ALaunch.ini [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-10-17 20:41:18 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-10-17 20:40:48 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-10-17 20:40:40 | 46,824,2432 | -HS- | M] () -- C:\hiberfil.sys [2009-10-17 20:39:18 | 00,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2728276811-3819141402-2127908473-1005Core.job [2009-10-17 15:10:54 | 00,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-10-16 12:25:12 | 00,000,404 | ---- | M] () -- C:\WINDOWS\BRWMARK.INI [2009-10-16 12:25:12 | 00,000,027 | ---- | M] () -- C:\WINDOWS\BRPP2KA.INI [2009-10-15 22:24:12 | 01,057,266 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-10-15 22:24:12 | 00,495,710 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2009-10-15 22:24:12 | 00,436,936 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009-10-15 22:24:12 | 00,086,080 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2009-10-15 22:24:12 | 00,069,162 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009-10-15 22:19:50 | 00,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009-10-15 20:29:38 | 00,002,210 | ---- | M] () -- C:\Documents and Settings\Romek\Pulpit\Google Chrome.lnk [2009-10-14 18:22:12 | 00,000,585 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\iPlus.lnk [2009-10-13 15:26:56 | 00,011,917 | ---- | M] () -- C:\Documents and Settings\Romek\Pulpit\Abonament - notowania w czasie ciągłym.docx [2009-10-05 13:33:12 | 00,090,352 | ---- | M] () -- C:\Documents and Settings\Romek\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-10-04 19:07:34 | 00,011,727 | ---- | M] () -- C:\Documents and Settings\Romek\Pulpit\Plany_sprzedazowe_Horyzont_Biala.xlsx [2009-10-02 20:01:58 | 25,198,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe [2009-10-02 16:58:24 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\Romek\Pulpit\~$nkurs 2010p (1).doc [2009-10-02 13:19:42 | 01,271,808 | ---- | M] () -- C:\Documents and Settings\Romek\Pulpit\Konkurs 2010p (1).doc [2009-10-01 09:38:14 | 00,037,888 | ---- | M] () -- C:\Documents and Settings\Romek\Pulpit\Plan sprzedażowy na IV kwartał 2009.doc [2009-09-30 16:30:38 | 00,336,256 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-09-30 12:25:30 | 00,000,637 | ---- | M] () -- C:\WINDOWS\win.ini [2009-09-28 16:33:06 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\Romek\Pulpit\~$nkurs 20.09.2009.doc [2009-09-27 22:41:42 | 00,010,381 | ---- | M] () -- C:\Documents and Settings\Romek\Pulpit\wycieczki.docx [color=#E56717]========== LOP Check ==========[/color] [2005-03-07 20:32:24 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji [2009-08-20 13:51:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AsystentAgenta [2005-03-07 20:32:24 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Romek\Dane aplikacji [2008-09-29 19:16:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\CyberLink [2008-09-29 19:49:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\Gadu-Gadu [2009-04-12 20:40:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\IEPro [2009-01-11 21:27:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\Image Zone Express [2009-10-14 18:26:08 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\iPlus [2009-04-12 20:41:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Romek\Dane aplikacji\MiniDm [2004-08-04 20:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-10-17 20:41:18 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [2009-10-17 20:39:18 | 00,001,080 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2728276811-3819141402-2127908473-1005Core.job [color=#E56717]========== Purity Check ==========[/color] < End of report >

Czy już teraz wygląda to lepiej?

P.S. Komputer nadal działa nieco wolno.

**Posty:** 18165 · przez **wojtas** 18 Paź 2009, 19:36

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (usuń co znajdzie )